last executing test programs:

33.59693637s ago: executing program 2 (id=680):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10)
set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000001, 0xe0)
r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2)
r3 = dup(r2)
ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000440)={0x80, 0x6, 0xf00, 0x1, 0x0, 0x5, 0x0})

33.537298241s ago: executing program 2 (id=681):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'})
write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)
poll(&(0x7f0000000780)=[{r3, 0x3230}], 0x1, 0x40000)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'})
close_range(r1, 0xffffffffffffffff, 0x0)

33.414035703s ago: executing program 2 (id=683):
syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x360, &(0x7f0000000b00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40)
mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000170000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='kmem_cache_free\x00', r2}, 0x10)
sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000009)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600)

32.702109634s ago: executing program 0 (id=696):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ff05ffff01"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r2}, 0x18)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"})

32.598322246s ago: executing program 0 (id=698):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, @perf_config_ext={0x0, 0x1}, 0x18208, 0x3, 0x0, 0x0, 0x1000, 0x0, 0x3}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
pipe(&(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
rseq(&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0)
io_setup(0x2, &(0x7f00000011c0)=<r4=>0x0)
io_submit(r4, 0x2000000000000326, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000001c0)='m', 0xfffffdfc}])
mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)

32.405765329s ago: executing program 2 (id=700):
r0 = open(0x0, 0x0, 0x0)
getdents(r0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2, &(0x7f0000000000)={0x0, &(0x7f0000000080)})
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380), 0x1, 0x553, &(0x7f0000000a40)="$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")
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x4004662b, 0x0)
ioperm(0x3, 0x7, 0x7)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ptrace(0x10, r1)
ptrace$getregset(0x4204, r1, 0x201, &(0x7f0000000000)={0x0})

32.29297813s ago: executing program 2 (id=701):
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
fchdir(r0)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00')
mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r4, 0x0, r1, 0x0, 0x46)

32.131971053s ago: executing program 0 (id=702):
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f00000001c0), 0x8)
listen(r0, 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x96)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
socket$packet(0x11, 0x2, 0x300)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

32.053565334s ago: executing program 2 (id=703):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000006000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
r2 = epoll_create1(0x80000)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000000c0)={0xe000001a})
read$char_usb(r3, &(0x7f0000001980)=""/179, 0xb3)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000000))

32.053370644s ago: executing program 32 (id=703):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000006000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
r2 = epoll_create1(0x80000)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000000c0)={0xe000001a})
read$char_usb(r3, &(0x7f0000001980)=""/179, 0xb3)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000000))

31.272969156s ago: executing program 0 (id=711):
r0 = open(0x0, 0x0, 0x0)
getdents(r0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2, &(0x7f0000000000)={0x0, &(0x7f0000000080)})
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380), 0x1, 0x553, &(0x7f0000000a40)="$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")
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x4004662b, 0x0)
ioperm(0x3, 0x7, 0x7)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ptrace(0x10, r1)
ptrace$getregset(0x4204, r1, 0x201, &(0x7f0000000000)={0x0})

31.191519538s ago: executing program 0 (id=712):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000170000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r2, 0x0, 0x0)
sendmmsg(r2, 0x0, 0x0, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
perf_event_open(&(0x7f00000004c0)={0x8, 0x80, 0x0, 0xf, 0x0, 0x0, 0x82, 0x200000000, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080), 0x9}, 0x18204, 0x0, 0x3, 0x0, 0x0, 0x5338c7af, 0x0, 0x0, 0x1, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

30.974985211s ago: executing program 0 (id=715):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x19)
pwrite64(r1, &(0x7f0000000140)='2', 0x1, 0x8000c61)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x80400, 0x0)
mkdirat(r3, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x408)
pwrite64(r2, &(0x7f0000000140)='Q', 0xfee0, 0x200980)
ioctl$EXT4_IOC_MIGRATE(r0, 0x6609)

30.948036332s ago: executing program 33 (id=715):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$eJzs3T9oJFUcB/DvzO565m6RUxtB/AMiooFwdoJNbBQCEoKIoEJExEZJhJhgl1jZWGitksomiJ3RUtIEG0WwipoiNoIGC4OFFiu7k0hMVqNu3Dkynw9MZibz3vzesPN9u83sBmisq0mmk7SSTCbpJCmON7i7Wq4e7q5PbM8nvd4TPxWDdtV+5ajflSRrSR5KslUWeamdrGw+s/fLzmP3vbncuff9zacnxnqRh/b3dh8/eG/2jY9mHlz54qsfZotMp/un6zp/xZD/tYvklv+j2HWiaNc9Av6Judc+/Lqf+1uT3DPIfydlqhfvraUbtjp54N2/6vv2j1/ePs6xAuev1+v03wPXekDjlEm6KcqpJNV2WU5NVZ/hv2ldLl9eXHp18sXF5YUX6p6pgPPSTXYf/eTSx1dO5P/7VpV/4OLq5//JuY1v+9sHrbpHA4zFHdWqn//J51bvj/xD48g/NJf8Q3PJPzSX/ENzyT80l/zDBdb5+8PyD80l/9Bc8g/NdTz/AECz9C7V/QQyUJe65x8AAAAAAAAAAAAAAAAAAOC09Ynt+aNlXDU/eyfZfyRJe1j91uD3iJMbB38v/1z0m/2hqLqN5Nm7RjzBiD6o+enrm76rt/7nd9Zbf3UhWXs9ybV2+/T9Vxzef//dzWcc7zw/YoF/qTix//BT461/0m8b9daf2Uk+7c8/14bNP2VuG6yHzz/ds79i+Uyv/DriCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABib3wMAAP//+kBtTA==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x19)
pwrite64(r1, &(0x7f0000000140)='2', 0x1, 0x8000c61)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x80400, 0x0)
mkdirat(r3, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x408)
pwrite64(r2, &(0x7f0000000140)='Q', 0xfee0, 0x200980)
ioctl$EXT4_IOC_MIGRATE(r0, 0x6609)

28.921009434s ago: executing program 1 (id=737):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r3}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast})

28.701225407s ago: executing program 1 (id=740):
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x14, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r0}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r2}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"})

28.625386568s ago: executing program 1 (id=741):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000800)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r3}, 0x10)
close(r2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280))
ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'})

28.5287439s ago: executing program 1 (id=743):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0)
mount$bind(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x80000, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000700)="$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")
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00')
sendfile(r1, r1, &(0x7f0000000000)=0x2eb4, 0x2000007ff)

28.350993163s ago: executing program 1 (id=745):
r0 = socket(0x10, 0x3, 0x9)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x22004002, &(0x7f0000000140)={[{@errors_remount}, {@stripe={'stripe', 0x3d, 0xffff}}, {@sysvgroups}, {@jqfmt_vfsold}, {@nouid32}, {@grpjquota, 0x2e}]}, 0x84, 0x46c, &(0x7f00000004c0)="$eJzs3EtvG0UcAPD/rpP0RR6U8ugDaiiIiELSpAV64AICqRckJDjAMaShKnVb1ASJVhUtCJUj4hMARyQ+ASe4IOAE4gp3hFShXggckNHau40TO6njxHWDfz9pk5ndWc/Mzk4yu7PrAPpWOfuRRFQj4teIGK1Hlyco138t3rg8+/eNy7NJVKuv/pnU0v114/JskbTYb1ceGU8j0o+S2N8i3/mLl87MVCpzF/L45MLZdybnL1566vTZmVNzp+bOTR8/fuzo1LPPTD+9KfUczsq67/3zB/aeeOPTl2er8eYPX2XlvSvf3liPurEN51mO8vJjWTNU+/nYhj/9zjLcEE4GelgQ1qUUEVlzDdb6/2iUYqnxRuOlD3taOKCrqtVqdVvT2lIRuFoF/seS6HUJgN4o/tFn17/FchuHHz13/fn6BVBW78V8qW8ZiDT7tb1+xT7cpfzLEfH61X8+y5ZoeR8CAGBzfZONf55sNf4bSe5rSDeSzw2NRcThiNgdEfdExJ6IuDcisrT3R8QD68y/vCLePP75eUdHFWtTNv57Lp/bWj7+S4skY6U8Nlyr/2Dy1unK3JH8mIzH4LYsPrVGHt+++Msnq21rHP9lS5Z/MRbMy/HHwIobdCdnFmY2UudG1z+I2DfQqv7JzZmAJCL2RsS+Dj4/O2ann/jyQBYe2dW8/cAt67+GTZhnqn4R8Xi9/a/GivoXknpOq81PTm6PytyRyeKsaPbjT9deaYwPNoRv3f7dlbX/zpbnf17/ohsU87Xz68/j2m8fr3pN0+n5P5S8VgsP5evem1lYuDAVMZSvWLZ+emnfIl6kz+o/fqhV/UeS3RH/fp7vtz8/Vx+MiIci4mBe9ocj4pGIOLRG/b9/4dG31z5CvW3/k2u1f8RY0jhf30GgdOa7r1fLv732P1YLjedr2vn7124BN3LsAAAAYKtIa8/AJ+nEzXCaTkzUn+HfEzvTyvn5hcPlePfcyfqz8mMxmBZ3ukYb7odO5feGi/j0ivjRiLi79qTRjlp8YvZ8pVtz6kB7dq3S/zO/l3pdOqDr1jWP1vxGG7CFeV8T+pf+D/1L/4f+pf9D/2rV/69ELPagKMBt5v8/9C/9H/qX/g/9S/+HvtT8SnzxdSudvOm/FNh9YkO791Gg1KVPjsYv7ehCINKeH7rOA+mdUIyDeWBbRLS715WutunK8wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDr+y8AAP//BcXhGA==")
sendmmsg$unix(r0, &(0x7f0000005b80)=[{{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)='|', 0x1}], 0x1, 0x0, 0x0, 0x4044804}}, {{0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f00000016c0)="20af", 0x2}], 0x1, &(0x7f0000002c40)=[@cred={{0x1c}}], 0x20, 0x8000}}], 0x2, 0x24004800)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {0xa, 0x0, 0x0, 0x0, 0x4}, [@NHA_OIF={0x8}]}, 0x20}}, 0x0)
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x20200, 0x0, 0xfe, 0x0, &(0x7f00000007c0))
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./bus/file0\x00')
ppoll(&(0x7f0000000080)=[{r1, 0x1}], 0x1, &(0x7f0000000180), 0x0, 0x0)

28.069514627s ago: executing program 1 (id=748):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
pselect6(0x1199fb2, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
ioctl$HIDIOCGFEATURE(r1, 0xc0404807, &(0x7f0000000300)={0x62, "a4395026f7fca8f411d271a8ac0352f02647be56f7af5c020d00a854bde7a3a2e42c1c5fcac45b88f2eb03642b134fd8e5b9bfd57889164508e1794a753cea7f"})
write$UHID_DESTROY(r0, &(0x7f00000001c0), 0x4)

28.066324607s ago: executing program 34 (id=748):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
pselect6(0x1199fb2, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
ioctl$HIDIOCGFEATURE(r1, 0xc0404807, &(0x7f0000000300)={0x62, "a4395026f7fca8f411d271a8ac0352f02647be56f7af5c020d00a854bde7a3a2e42c1c5fcac45b88f2eb03642b134fd8e5b9bfd57889164508e1794a753cea7f"})
write$UHID_DESTROY(r0, &(0x7f00000001c0), 0x4)

27.508059456s ago: executing program 5 (id=759):
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000040), 0x1, 0x7ba, &(0x7f00000007c0)="$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")
chdir(&(0x7f0000000100)='./file0\x00')
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r0}, 0x38)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18)
r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
write$binfmt_script(r2, &(0x7f00000005c0)={'#! ', './file0'}, 0xb)
close(r2)

27.28414997s ago: executing program 5 (id=762):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0xf)
r1 = socket$netlink(0x10, 0x3, 0xf)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000080)=0x100, 0x4)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4)
sendmsg$NFT_BATCH(r0, &(0x7f00000074c0)={0x0, 0x0, &(0x7f0000007480)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000080a010300000000ab0000000200000a14000000000a010200000000000000000a00001714000000110001"], 0x50}, 0x1, 0x0, 0x0, 0x20040000}, 0x0)

27.203588601s ago: executing program 5 (id=763):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x20)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
close(0xffffffffffffffff)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
close_range(r2, 0xffffffffffffffff, 0x0)

26.874195416s ago: executing program 5 (id=769):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00', r1}, 0x18)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="9000000000010104000000000000000002000000240001801400018008000100e000000208000200ac1414000c0002800500010000000000240002800c00028005000100000000001400018008000100e000000208000200e000000208000740000000002c000e"], 0x90}}, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
set_mempolicy(0x1, 0x0, 0x4)

26.806190997s ago: executing program 5 (id=770):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00')
syz_open_dev$tty20(0xc, 0x4, 0x0)
inotify_init1(0x0)
sendmsg$NL80211_CMD_SET_COALESCE(r0, 0x0, 0x40080)
socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x1, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080))
syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES32=r1, @ANYRES64=r1], 0x20)

26.064386349s ago: executing program 5 (id=783):
mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e"], 0x15)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x70, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94)
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15)
r2 = dup(r1)
write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

26.041008579s ago: executing program 35 (id=783):
mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e"], 0x15)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x70, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94)
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15)
r2 = dup(r1)
write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

13.570403826s ago: executing program 8 (id=1019):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10)
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000300)={[{@min_batch_time={'min_batch_time', 0x3d, 0xadb}}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@init_itable}, {@errors_remount}, {@noinit_itable}, {@nojournal_checksum}]}, 0x2, 0x464, &(0x7f0000000880)="$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")
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'})

13.409567869s ago: executing program 8 (id=1022):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440), 0x10)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18)
connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000640)="980bcfe393059bae3f648ed47a483be27024e4dd506130bdfbcd2df1d38ec7fa1c341ccb083d3ff79d5bc4d28e2a61cc95e5c91b2b508136985bd117c1dff44ccbd4ab6f", 0x44}], 0x1)
r3 = accept4$unix(r0, 0x0, 0x0, 0x0)
recvmsg(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/68, 0x44}], 0x1}, 0x4c2103a0)

13.31353591s ago: executing program 8 (id=1023):
r0 = socket$inet6(0xa, 0x3, 0xff)
setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000fcb000), 0x4)
r1 = socket$inet6(0xa, 0x3, 0xff)
setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000fcb000), 0x4)
setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000fcb000)=0x80, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x2}, 0x18)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r4=>0x0})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r4, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)

13.210017232s ago: executing program 8 (id=1026):
syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r1 = syz_io_uring_setup(0xa0, &(0x7f0000000640)={0x0, 0x105cc6, 0x0, 0x0, 0x207}, &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4f2, &(0x7f0000000600)="$eJzs3U1vG1sZAODXzpeTm97kXu4CENBSCgVVdRK3jaouoKwQQpUQXYLUhsSNothxFDulCV2k/wGJSqxgyQ9g3RV7Ngh2bMoCiY8I1FRiYTTjSeomdpOSNI7i55FGM+eMM+85ieec+nXtE0DfuhQRWxExHBEPI2Iiq89lW9xtbcnjXm0/nd/Zfjqfi2bz/j9z6fmkLtp+JvFRds1CRPzoexE/zR2MW9/YXJ6rVMprWXmqUV2dqm9sXl+qzi2WF8srpdLszOz07Ru3SifW14vV4ezoyy//sPWtnyfNGs9q2vtxklpdH9qLE9nv/AcfIlgPDETEYPb8yVzoZXt4P/mI+DQiLqf3/0QMpH9NAOA8azYnojnRXgYAzrt8mgPL5YtZLmA88vlisZXD+yzG8pVavXHtUW19ZaGVK5uMofyjpUp5OssVTsZQLinPpMdvyqV95RsR8UlE/GJkNC0X52uVhV7+wwcA+thH++b//4y05n8A4Jwr9LoBAMCpM/8DQP8x/wNA/zH/A0D/Mf8DQP8x/wNA/zH/A0Bf+eG9e8nW3Mm+/3rh8cb6cu3x9YVyfblYXZ8vztfWVouLtdpi+p091cOuV6nVVmduxvqTyW+v1htT9Y3NB9Xa+krjQfq93g/KQ6fSKwDgXT65+OLPuYjYujOabtG2loO5Gs63fK8bAPTMQK8bAPSM1b6gfx3jNb70AJwTHZbofUshIkb3VzabzeaHaxLwgV39gvw/9Ku2/L//BQx9Rv4f+lfX/P+BF/vAedNs5o665n8c9YEAwNkmxw90ef//02z/2+zNgZ8s7H/E8/0VPlEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA/9hd/7eYrdwxHvl8sRhxISImYyj3aKlSno6IjyPiTyNDI0l5psdtBgCOK/+3XLb+19WJK+P7zw7nXo+k+4j42a/u//LJXKOx9sek/l979Y3nWX2pF+0HAA6zO0+n+7YX8q+2n87vbqfZnr9/NyIKrfg728Oxsxd/MAbTfSGGImLs37ms3JJry10cx9aziPh8p/7nYjzNgbRWPt0fP4l94VTj59+Kn0/PtfbJ7+JzJ9AW6DcvkvHnbqf7Lx+X0n3n+7+QjlDHl41/yaXmd9Ix8E383fFvoMv4d+moMW7+/vuto9GD555FfHEwYjf2Ttv4sxs/1yX+lYOX6+gvX/rK5W7nmr+OuBqd47fHmmpUV6fqG5vXl6pzi+XF8kqpNDszO337xq3SVJqjnuo+G/zjzrWPu51L+j/WJX7hkP5//Wjdj9/89+GPv/qO+N/8Wqf4+fjsHfGTOfEbR4w/N/a7QrdzSfyFLv0/7O9/7YjxX/5188Cy4QBA79Q3NpfnKpXymgMHZ/8gecqegWZ0PPjOacUajvf6qWbz/4rVbcQ4iawbcBbs3fQR8brXjQEAAAAAAAAAAAAAADo6jU8s9bqPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnF//CwAA//8wuNJ1")
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000080)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1})
io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)

13.069613414s ago: executing program 8 (id=1027):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18)
syz_emit_ethernet(0x0, 0x0, 0x0)
clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0)
pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, &(0x7f0000000340)={0x0})
socket$inet_udp(0x2, 0x2, 0x0)
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)

12.418805134s ago: executing program 8 (id=1034):
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2b}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'macsec0\x00', @random="06517dc2e6ea"})

12.383906195s ago: executing program 36 (id=1034):
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2b}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'macsec0\x00', @random="06517dc2e6ea"})

1.30790864s ago: executing program 9 (id=1268):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000220000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000100000000000000", @ANYRES32=0x1], 0x50)
r2 = socket$kcm(0xa, 0x5, 0x0)
r3 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x2, 0x2, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000001800)='_', 0x1}], 0x1}, 0x64)
setsockopt$sock_attach_bpf(r3, 0x84, 0x1e, &(0x7f0000000000), 0x10)
r4 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r4})
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8936, &(0x7f0000000000)={r4})

1.232515861s ago: executing program 9 (id=1272):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x4000800)
connect$inet6(r0, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x378, 0x0, 0x12, 0x60d, 0x1d8, 0x202, 0x2d0, 0x2e8, 0x2e8, 0x2d0, 0x2c0, 0x4, 0x0, {[{{@ipv6={@local, @mcast1, [0x0, 0x0, 0xc0], [0x0, 0xff000000], 'veth1_to_batadv\x00', 'macsec0\x00'}, 0x0, 0x168, 0x1b0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "000000165a8c2e0617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f672225d6147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac05a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x2, 0x2}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {'Yv'}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x0, 0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8)
close(0xffffffffffffffff)
execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
lsm_list_modules(&(0x7f0000002600)=[0x0, 0x0], &(0x7f0000000000)=0x10, 0x0)

1.231808281s ago: executing program 9 (id=1274):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000fd"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r3}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r4}, 0x10)
sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x1c}, 0x1c}}, 0x0)

1.180076642s ago: executing program 9 (id=1275):
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
chroot(&(0x7f0000000000)='./file0/../file0\x00')
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6})
mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0)

1.125495732s ago: executing program 6 (id=1276):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
listen(r0, 0x0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r1, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0}, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10)
accept4(r0, 0x0, 0x0, 0x400000000000000)

1.125215023s ago: executing program 6 (id=1277):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440), 0x10)
listen(r0, 0x5)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000180)='u', 0x1}], 0x1)
r2 = accept4$unix(r0, 0x0, 0x0, 0x0)
syz_read_part_table(0x106a, &(0x7f0000000000)="$eJzsz7FJxVAUBuD/5ibxpnUB17C0EGwsFXexUcERnECwsbLWDdzCFbJAxECEt8B7r/i+6pyfHw4nHNTUtdOP5Py5vqQleUxyNySp45ik/Be/vq//luF1bicpNRf9Gi+fb/dbqSb91XyTYXkoP0u3ZuVyajsHu6ezus319n0/XwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAcfsNAAD//3OqEK8=")
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48)
sendto$packet(r1, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847fe7bf05ddc63ff512d4074687760a5fbd1fc97772c6f5027dcea15b6658de3b024a6ea22baafb445bf8427c8055d00", 0xffffff3d, 0x0, 0x0, 0x0)
recvmsg(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)=""/74, 0x4a}], 0x2d}, 0x10000)

1.024978734s ago: executing program 3 (id=1282):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f00000004c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xfffff000, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, 0xfffffffe}, 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0xb9, 0x10001, 0x9, 0x1}, 0x48)
close(r0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10002, 0x9, 0x1}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8b, 0x5, 0x9, 0x1, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000040), &(0x7f0000000440)=""/183}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r0, &(0x7f0000000180), &(0x7f0000000680)=""/141}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={r0, &(0x7f0000000040)}, 0x20)

961.471755ms ago: executing program 3 (id=1284):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'})
r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000)
r2 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc)
r3 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x4661, 0x8, 0x3, 0x288}, &(0x7f0000000140)=<r4=>0x0, &(0x7f0000000380)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r2, 0x0, 0x0})
io_uring_enter(r3, 0x22d6, 0x4b34, 0x4, 0x0, 0x0)
close_range(r1, r2, 0x0)

861.653647ms ago: executing program 3 (id=1287):
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003000000000014000600ff"], 0x58}}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x4000)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0)
socket$unix(0x1, 0x2, 0x0)

843.218057ms ago: executing program 3 (id=1288):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440), 0x10)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18)
connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000640)="980b", 0x2}], 0x1)
r3 = accept4$unix(r0, 0x0, 0x0, 0x0)
recvmsg(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/68, 0x44}], 0x1}, 0x4c2103a0)

761.595659ms ago: executing program 3 (id=1290):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x50)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
writev(r2, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1)

748.797619ms ago: executing program 4 (id=1291):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r3}, 0x10)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112})
ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400})

725.511279ms ago: executing program 7 (id=1292):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r2, 0x0)
r3 = io_uring_setup(0x36e8, &(0x7f0000000580)={0x0, 0x8fffffff, 0x1, 0x0, 0x14e})
io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0x1}, 0x20)

661.19158ms ago: executing program 7 (id=1293):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8f70000000000ff000044850000000e000000650000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x2}, 0x18)
creat(&(0x7f00000000c0)='./file0\x00', 0x48)
pipe2$9p(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r3 = dup(r2)
write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3])
creat(&(0x7f00000003c0)='./file0\x00', 0x36)

660.63026ms ago: executing program 7 (id=1294):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94)
syz_emit_ethernet(0x4e, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
fallocate(r3, 0x0, 0xa20, 0x8000c64)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xef, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0)

634.171631ms ago: executing program 3 (id=1295):
socket$inet6(0xa, 0xa, 0x3)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080)=0x800, 0x400)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x360, &(0x7f0000000b00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40)
mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
write$cgroup_subtree(r0, 0x0, 0x32600)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))

606.707991ms ago: executing program 4 (id=1296):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000057"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000000}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
writev(0xffffffffffffffff, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
tgkill(0x0, 0x0, 0x27)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, './file0\x00'}})

572.284912ms ago: executing program 4 (id=1297):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r2}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r3}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c)

426.788264ms ago: executing program 7 (id=1298):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r4, 0x26}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20)
recvmsg$unix(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)=""/78, 0x4e}], 0x1}, 0x40020000)
sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0xfffe}], 0x1}, 0x0)

426.195374ms ago: executing program 4 (id=1299):
openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x2000, 0x16, 0x35}, 0x18)
openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x210000, 0x29, 0x2}, 0x18)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c3000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='inet_sock_set_state\x00', r2, 0x0, 0x3}, 0x18)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r3, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4)
sendmmsg(r3, &(0x7f00000007c0)=[{{&(0x7f0000000380)=@in={0x2, 0x4e24, @local}, 0x80, &(0x7f0000000140)=[{&(0x7f00000004c0)='&', 0x1}], 0x1}}], 0x1, 0x2c000011)

401.498884ms ago: executing program 7 (id=1300):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x41, 0x553, &(0x7f0000000c80)="$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")
r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
ftruncate(r0, 0x2007ffc)
sendfile(r0, r0, 0x0, 0x800000009)
r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f00000006c0)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000100)=[{&(0x7f0000001800)=""/205, 0xcd}], 0x1})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0)

395.083514ms ago: executing program 4 (id=1301):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00'}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/5, 0x204000, 0x1000}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', <r3=>0x0})
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000040)=0x4000, 0x4)
bind$xdp(r1, &(0x7f00000002c0)={0x2c, 0x4, r3}, 0x10)

297.171846ms ago: executing program 4 (id=1302):
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0)
write(r1, &(0x7f0000004200)='t', 0x1)
sendfile(r1, r0, 0x0, 0x3ffff)
dup3(r0, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r3, 0x0, 0x401}, 0x18)
move_mount(r0, &(0x7f0000000100)='./bus\x00', r1, &(0x7f00000000c0)='./bus\x00', 0x14)
sendfile(r1, r0, 0x0, 0x7ffff000)

296.608146ms ago: executing program 9 (id=1303):
r0 = socket$tipc(0x1e, 0x5, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xa6}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x10)
bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
listen(r0, 0x0)
r3 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r3, &(0x7f0000002300)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x3, {0x4e20, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44}, 0x4)
sendmsg$tipc(r3, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x0)
accept4(r0, 0x0, 0x0, 0x400000000000000)

290.236966ms ago: executing program 6 (id=1304):
unshare(0x8040600)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', <r2=>0x0})
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r3}, 0x10)
r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8)
close(r5)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001400)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=r2, @ANYBLOB="00410000000000001c002b8008000100", @ANYRES32, @ANYBLOB="0800030019000000080008"], 0x3c}}, 0x0)

73.640559ms ago: executing program 6 (id=1305):
creat(&(0x7f00000000c0)='./file0\x00', 0x48)
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r2 = dup(r1)
write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94)
write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
creat(&(0x7f00000003c0)='./file0\x00', 0x36)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0, 0x800)

58.2762ms ago: executing program 7 (id=1306):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454da, &(0x7f00000001c0)={'batadv_slave_0\x00'})
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x1})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454da, &(0x7f0000000180)={'batadv0\x00', 0x400})
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432})

52.991659ms ago: executing program 9 (id=1307):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000100000000000000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000003580)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0xffffffffffffffff}], 0x9, 0x0)

601µs ago: executing program 6 (id=1308):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800001965ba917c62e1e6902300000000000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r2}, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'bridge0\x00', <r5=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="4000aa000a0002"], 0x28}}, 0x0)

0s ago: executing program 6 (id=1309):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x4000800)
connect$inet6(r0, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x378, 0x0, 0x12, 0x60d, 0x1d8, 0x202, 0x2d0, 0x2e8, 0x2e8, 0x2d0, 0x2c0, 0x4, 0x0, {[{{@ipv6={@local, @mcast1, [0x0, 0x0, 0xc0], [0x0, 0xff000000], 'veth1_to_batadv\x00', 'macsec0\x00'}, 0x0, 0x168, 0x1b0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "000000165a8c2e0617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f672225d6147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac05a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x2, 0x2}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {'Yv'}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x0, 0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8)
close(0xffffffffffffffff)
execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
lsm_list_modules(&(0x7f0000002600)=[0x0, 0x0], &(0x7f0000000000)=0x10, 0x0)

kernel console output (not intermixed with test programs):

pid=4395 comm="syz.3.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70cce0e929 code=0x7ffc0000
[   48.832686][   T29] audit: type=1326 audit(1751645298.335:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4395 comm="syz.3.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70cce0e929 code=0x7ffc0000
[   48.856018][   T29] audit: type=1326 audit(1751645298.335:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4395 comm="syz.3.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f70cce0e929 code=0x7ffc0000
[   48.879632][   T29] audit: type=1326 audit(1751645298.335:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4395 comm="syz.3.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70cce0e929 code=0x7ffc0000
[   49.079735][ T4418] netlink: 14 bytes leftover after parsing attributes in process `syz.4.267'.
[   49.115752][ T4418] hsr_slave_0: left promiscuous mode
[   49.123288][ T4418] hsr_slave_1: left promiscuous mode
[   49.356090][ T4437] netlink: 156 bytes leftover after parsing attributes in process `syz.2.275'.
[   49.384507][ T4437] netlink: 32 bytes leftover after parsing attributes in process `syz.2.275'.
[   49.833078][ T4473] pim6reg1: entered promiscuous mode
[   49.838553][ T4473] pim6reg1: entered allmulticast mode
[   49.914421][ T3401] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   49.923194][ T4481] loop2: detected capacity change from 0 to 1024
[   49.934929][ T4481] EXT4-fs: Ignoring removed nomblk_io_submit option
[   49.954135][ T3401] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   49.966542][ T4481] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   49.991619][ T4481] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   50.401045][ T4512] loop0: detected capacity change from 0 to 164
[   50.412293][ T4512] netlink: 12 bytes leftover after parsing attributes in process `syz.0.308'.
[   50.550084][ T4525] syzkaller0: entered promiscuous mode
[   50.555681][ T4525] syzkaller0: entered allmulticast mode
[   50.747951][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.834586][ T4555] SELinux: failed to load policy
[   51.132824][ T4590] loop1: detected capacity change from 0 to 256
[   51.519615][    C1] vcan0: j1939_tp_rxtimer: 0xffff88811a09fc00: rx timeout, send abort
[   51.528595][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811a09fc00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session.
[   51.543410][    C1] vcan0: j1939_tp_rxtimer: 0xffff88811a0aca00: rx timeout, send abort
[   51.551689][    C1] vcan0: j1939_tp_rxtimer: 0xffff88811b3bd800: rx timeout, send abort
[   51.560934][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811b3bd800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[   51.575222][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811a0aca00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[   51.649103][ T4627] syz.3.360 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   51.808880][ T4648] loop0: detected capacity change from 0 to 2048
[   51.828051][ T4648] EXT4-fs (loop0): failed to initialize system zone (-117)
[   51.848553][ T4648] EXT4-fs (loop0): mount failed
[   51.982536][ T4671] netlink: 'syz.2.379': attribute type 10 has an invalid length.
[   52.001729][ T4671] team0: Port device dummy0 added
[   52.028429][ T4671] netlink: 'syz.2.379': attribute type 10 has an invalid length.
[   52.063593][ T4671] team0: Failed to send port change of device dummy0 via netlink (err -105)
[   52.080799][ T4671] team0: Failed to send options change via netlink (err -105)
[   52.088722][ T4671] team0: Failed to send port change of device dummy0 via netlink (err -105)
[   52.097994][ T4671] team0: Port device dummy0 removed
[   52.106925][ T4671] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   52.157300][ T4686] bridge: RTM_NEWNEIGH with invalid ether address
[   52.513570][ T4724] loop0: detected capacity change from 0 to 512
[   52.528968][ T4724] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   52.542065][ T4724] ext4 filesystem being mounted at /79/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   52.663198][ T4736] loop4: detected capacity change from 0 to 8192
[   52.670823][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.709528][ T4738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   52.734292][    C1] vcan0: j1939_tp_rxtimer: 0xffff88811a094c00: rx timeout, send abort
[   52.742624][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811a094c00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session.
[   52.743202][ T4738] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   52.767364][ T4621] vcan0: tx drop: invalid sa for name 0x0000000000000002
[   52.792018][ T4738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   52.801926][ T4738] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   52.855037][ T4748] loop3: detected capacity change from 0 to 512
[   52.865472][ T4748] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   52.888362][ T4748] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   52.901780][ T4748] EXT4-fs (loop3): 1 truncate cleaned up
[   52.908127][ T4748] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   52.934260][ T4112] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.986900][ T4758] netlink: 8 bytes leftover after parsing attributes in process `syz.4.419'.
[   53.013183][ T4738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   53.021798][ T4738] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   53.042077][ T4763] netlink: 4 bytes leftover after parsing attributes in process `syz.3.422'.
[   53.049886][ T4764] loop4: detected capacity change from 0 to 2048
[   53.069700][ T4764] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   53.102542][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   53.159965][ T4770] vhci_hcd: invalid port number 96
[   53.165279][ T4770] vhci_hcd: default hub control req: 0000 vfffc i0060 l0
[   53.222612][ T4774] IPv4: Oversized IP packet from 127.202.26.0
[   53.427123][ T4790] loop1: detected capacity change from 0 to 128
[   53.498161][ T4790] syz.1.433: attempt to access beyond end of device
[   53.498161][ T4790] loop1: rw=0, sector=121, nr_sectors = 120 limit=128
[   53.530659][  T410] kworker/u8:6: attempt to access beyond end of device
[   53.530659][  T410] loop1: rw=1, sector=241, nr_sectors = 800 limit=128
[   53.615086][   T29] kauditd_printk_skb: 89 callbacks suppressed
[   53.615103][   T29] audit: type=1400 audit(1751645303.215:602): avc:  denied  { mount } for  pid=4799 comm="syz.1.435" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   53.672109][ T4809] loop2: detected capacity change from 0 to 512
[   53.684452][ T4809] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   53.702997][ T4811] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4811 comm=syz.1.443
[   53.740965][ T4809] EXT4-fs (loop2): 1 truncate cleaned up
[   53.758139][ T4809] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   53.787852][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   53.822871][ T4821] loop4: detected capacity change from 0 to 1024
[   53.835600][ T4821] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[   53.863960][   T29] audit: type=1400 audit(1751645303.465:603): avc:  denied  { create } for  pid=4822 comm="syz.2.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   53.883493][   T29] audit: type=1400 audit(1751645303.465:604): avc:  denied  { bind } for  pid=4822 comm="syz.2.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   53.916594][   T29] audit: type=1400 audit(1751645303.505:605): avc:  denied  { listen } for  pid=4822 comm="syz.2.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   53.936123][   T29] audit: type=1400 audit(1751645303.505:606): avc:  denied  { read } for  pid=4822 comm="syz.2.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   53.998853][   T29] audit: type=1400 audit(1751645303.605:607): avc:  denied  { map } for  pid=4827 comm="syz.3.450" path="socket:[9257]" dev="sockfs" ino=9257 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   54.066829][   T29] audit: type=1400 audit(1751645303.605:608): avc:  denied  { read } for  pid=4827 comm="syz.3.450" path="socket:[9257]" dev="sockfs" ino=9257 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   54.120960][ T4841] loop4: detected capacity change from 0 to 128
[   54.138753][ T4841] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535)
[   54.159746][ T4841] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none.
[   54.177224][ T4841] EXT4-fs error (device loop4): htree_dirblock_to_tree:1051: inode #2: comm syz.4.457: Directory block failed checksum
[   54.191202][ T4841] EXT4-fs error (device loop4): htree_dirblock_to_tree:1051: inode #2: comm syz.4.457: Directory block failed checksum
[   54.213383][   T29] audit: type=1400 audit(1751645303.815:609): avc:  denied  { setcurrent } for  pid=4848 comm="syz.1.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   54.232832][   T29] audit: type=1401 audit(1751645303.815:610): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t
[   54.280075][ T4852] loop0: detected capacity change from 0 to 512
[   54.289736][ T4852] EXT4-fs: Ignoring removed mblk_io_submit option
[   54.301084][ T4852] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[   54.313426][ T4852] EXT4-fs (loop0): revision level too high, forcing read-only mode
[   54.322816][ T4852] EXT4-fs (loop0): orphan cleanup on readonly fs
[   54.330380][ T4852] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.461: Invalid block bitmap block 0 in block_group 0
[   54.344463][ T4852] EXT4-fs (loop0): Remounting filesystem read-only
[   54.351230][ T4852] Quota error (device loop0): write_blk: dquota write failed
[   54.358970][ T4852] EXT4-fs (loop0): 1 orphan inode deleted
[   54.365580][ T4852] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   54.448453][ T4864] loop1: detected capacity change from 0 to 1024
[   54.455360][ T4864] EXT4-fs: Ignoring removed bh option
[   54.461317][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   54.462956][ T4864] EXT4-fs: Ignoring removed mblk_io_submit option
[   54.476905][ T4864] EXT4-fs: Ignoring removed bh option
[   54.495255][ T4864] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   54.540596][ T4868] SELinux: failed to load policy
[   54.541132][ T4864] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.466: Allocating blocks 449-513 which overlap fs metadata
[   54.571893][ T4863] EXT4-fs (loop1): pa ffff8881072690e0: logic 48, phys. 177, len 21
[   54.580048][ T4863] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4
[   54.592349][ T4870] netlink: 24 bytes leftover after parsing attributes in process `syz.0.468'.
[   54.604977][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   54.724597][ T3313] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   54.728341][ T4877] infiniband syz!: set down
[   54.738285][ T4877] infiniband syz!: added team_slave_0
[   54.752771][ T4877] RDS/IB: syz!: added
[   54.780707][ T4877] smc: adding ib device syz! with port count 1
[   54.792796][ T4877] smc:    ib device syz! port 1 has pnetid 
[   54.831051][ T4886] wg2: entered promiscuous mode
[   54.835963][ T4886] wg2: entered allmulticast mode
[   55.291879][ T4934] loop1: detected capacity change from 0 to 512
[   55.342125][ T4934] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities
[   55.470537][ T4948] netlink: 4 bytes leftover after parsing attributes in process `syz.4.499'.
[   55.491712][ T4948] veth0_macvtap: left promiscuous mode
[   55.564945][ T4955] netlink: 'syz.0.504': attribute type 6 has an invalid length.
[   55.748456][ T4968] ip6gre1: entered allmulticast mode
[   55.935260][ T4979] loop0: detected capacity change from 0 to 512
[   55.969756][ T4979] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   55.982515][ T4979] ext4 filesystem being mounted at /99/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   56.072160][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   56.476234][ T5012] pim6reg1: entered promiscuous mode
[   56.481611][ T5012] pim6reg1: entered allmulticast mode
[   56.606081][    C0] vcan0: j1939_tp_rxtimer: 0xffff88811ab4ec00: rx timeout, send abort
[   56.614390][    C0] vcan0: j1939_tp_rxtimer: 0xffff88811ab4ee00: rx timeout, send abort
[   56.617133][ T5028] loop3: detected capacity change from 0 to 256
[   56.622692][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811ab4ec00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[   56.643274][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811ab4ee00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[   56.647474][ T5027] IPv4: Oversized IP packet from 127.202.26.0
[   56.681704][ T5028] FAT-fs (loop3): codepage cp932 not found
[   56.747813][ T5033] loop0: detected capacity change from 0 to 128
[   56.760471][ T5033] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   56.786042][ T5033] ext4 filesystem being mounted at /105/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   56.835446][ T3305] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   57.109042][ T5061] netlink: 'syz.2.552': attribute type 2 has an invalid length.
[   57.116937][ T5061] netlink: 'syz.2.552': attribute type 1 has an invalid length.
[   57.124726][ T5061] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.552'.
[   57.138361][ T5063] loop0: detected capacity change from 0 to 256
[   57.147718][ T5063] FAT-fs (loop0): bogus number of FAT sectors
[   57.153969][ T5063] FAT-fs (loop0): Can't find a valid FAT filesystem
[   57.346815][ T5080] syzkaller0: entered promiscuous mode
[   57.352442][ T5080] syzkaller0: entered allmulticast mode
[   57.435853][ T5086] netlink: 'syz.0.564': attribute type 2 has an invalid length.
[   57.443641][ T5086] netlink: 'syz.0.564': attribute type 1 has an invalid length.
[   57.451396][ T5086] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.564'.
[   57.751514][ T5115] netlink: 24 bytes leftover after parsing attributes in process `syz.0.578'.
[   57.903852][ T5121] netlink: 'syz.1.579': attribute type 2 has an invalid length.
[   57.911649][ T5121] netlink: 'syz.1.579': attribute type 1 has an invalid length.
[   57.919368][ T5121] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.579'.
[   57.944386][ T5117] netlink: 'syz.0.589': attribute type 1 has an invalid length.
[   57.952168][ T5117] netlink: 224 bytes leftover after parsing attributes in process `syz.0.589'.
[   58.416403][ T5154] netlink: 'syz.4.593': attribute type 2 has an invalid length.
[   58.424120][ T5154] netlink: 'syz.4.593': attribute type 1 has an invalid length.
[   58.431931][ T5154] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.593'.
[   58.631905][   T29] kauditd_printk_skb: 173 callbacks suppressed
[   58.631921][   T29] audit: type=1326 audit(1751645308.235:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5165 comm="syz.1.595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fefa836e929 code=0x7ffc0000
[   58.936323][ T5197] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=283 sclass=netlink_route_socket pid=5197 comm=syz.4.612
[   58.997951][ T5204] loop4: detected capacity change from 0 to 512
[   59.019349][ T5204] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   59.031992][ T5204] ext4 filesystem being mounted at /131/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   59.103323][ T5210] loop0: detected capacity change from 0 to 128
[   59.135593][ T5212] netlink: 'syz.1.616': attribute type 1 has an invalid length.
[   59.143428][ T5212] netlink: 224 bytes leftover after parsing attributes in process `syz.1.616'.
[   59.157731][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   59.216512][ T5210] syz.0.628: attempt to access beyond end of device
[   59.216512][ T5210] loop0: rw=2049, sector=145, nr_sectors = 16 limit=128
[   59.230782][ T5210] syz.0.628: attempt to access beyond end of device
[   59.230782][ T5210] loop0: rw=2049, sector=169, nr_sectors = 8 limit=128
[   59.244462][ T5210] syz.0.628: attempt to access beyond end of device
[   59.244462][ T5210] loop0: rw=2049, sector=185, nr_sectors = 8 limit=128
[   59.258155][ T5210] syz.0.628: attempt to access beyond end of device
[   59.258155][ T5210] loop0: rw=2049, sector=201, nr_sectors = 8 limit=128
[   59.272693][ T5210] syz.0.628: attempt to access beyond end of device
[   59.272693][ T5210] loop0: rw=2049, sector=217, nr_sectors = 8 limit=128
[   59.286202][ T5210] syz.0.628: attempt to access beyond end of device
[   59.286202][ T5210] loop0: rw=2049, sector=233, nr_sectors = 8 limit=128
[   59.299610][ T5210] syz.0.628: attempt to access beyond end of device
[   59.299610][ T5210] loop0: rw=2049, sector=249, nr_sectors = 8 limit=128
[   59.313090][ T5210] syz.0.628: attempt to access beyond end of device
[   59.313090][ T5210] loop0: rw=2049, sector=265, nr_sectors = 8 limit=128
[   59.326523][ T5210] syz.0.628: attempt to access beyond end of device
[   59.326523][ T5210] loop0: rw=2049, sector=281, nr_sectors = 8 limit=128
[   59.340091][ T5210] syz.0.628: attempt to access beyond end of device
[   59.340091][ T5210] loop0: rw=2049, sector=297, nr_sectors = 8 limit=128
[   59.435107][ T5224] loop3: detected capacity change from 0 to 8192
[   59.441573][ T5230] loop0: detected capacity change from 0 to 1024
[   59.461908][   T29] audit: type=1400 audit(1751645309.065:783): avc:  denied  { mounton } for  pid=5223 comm="syz.3.620" path="/70/file2/bus" dev="loop3" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1
[   59.518179][ T5236] loop2: detected capacity change from 0 to 164
[   59.532354][ T5236] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   59.561140][   T29] audit: type=1326 audit(1751645309.165:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5233 comm="syz.1.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefa836e929 code=0x7ffc0000
[   59.584653][   T29] audit: type=1326 audit(1751645309.165:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5233 comm="syz.1.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefa836e929 code=0x7ffc0000
[   59.607993][   T29] audit: type=1326 audit(1751645309.165:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5233 comm="syz.1.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7fefa836e929 code=0x7ffc0000
[   59.631329][   T29] audit: type=1326 audit(1751645309.165:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5233 comm="syz.1.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefa836e929 code=0x7ffc0000
[   59.654720][   T29] audit: type=1326 audit(1751645309.165:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5233 comm="syz.1.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fefa836e929 code=0x7ffc0000
[   59.677923][   T29] audit: type=1326 audit(1751645309.165:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5233 comm="syz.1.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefa836e929 code=0x7ffc0000
[   59.701275][   T29] audit: type=1326 audit(1751645309.165:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5233 comm="syz.1.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fefa836e929 code=0x7ffc0000
[   59.712424][ T4112] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1)
[   59.724524][   T29] audit: type=1326 audit(1751645309.165:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5233 comm="syz.1.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefa836e929 code=0x7ffc0000
[   59.732442][ T4112] FAT-fs (loop3): Filesystem has been set read-only
[   59.787671][ T5236] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   59.801527][ T5236] rock: directory entry would overflow storage
[   59.807759][ T5236] rock: sig=0x4f50, size=4, remaining=3
[   59.813332][ T5236] iso9660: Corrupted directory entry in block 4 of inode 1792
[   59.813567][ T5230] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   59.915183][ T5258] netlink: 112 bytes leftover after parsing attributes in process `syz.3.635'.
[   59.934624][ T5256] netlink: 36 bytes leftover after parsing attributes in process `syz.4.634'.
[   59.967322][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   60.057950][ T5264] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   60.057994][ T5266] loop1: detected capacity change from 0 to 128
[   60.065186][ T5264] IPv6: NLM_F_CREATE should be set when creating new route
[   60.152141][ T5271] loop4: detected capacity change from 0 to 512
[   60.182224][ T5271] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   60.206351][ T5271] ext4 filesystem being mounted at /135/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   60.231214][ T5277] pim6reg1: entered promiscuous mode
[   60.236690][ T5277] pim6reg1: entered allmulticast mode
[   60.299679][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   60.437943][ T5295] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   60.445205][ T5295] IPv6: NLM_F_CREATE should be set when creating new route
[   60.454001][ T5294] loop4: detected capacity change from 0 to 128
[   60.495632][ T5294] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   60.522805][ T5294] ext4 filesystem being mounted at /137/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   60.623595][ T5304] IPv4: Oversized IP packet from 127.202.26.0
[   60.643783][ T3313] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   60.664948][ T5308] loop3: detected capacity change from 0 to 512
[   60.672598][ T5306] loop2: detected capacity change from 0 to 512
[   60.705144][ T5306] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities
[   60.745709][ T5308] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   60.886101][ T5308] ext4 filesystem being mounted at /76/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   61.017049][ T4112] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   61.219977][ T5339] loop2: detected capacity change from 0 to 512
[   61.249542][ T5339] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #15: comm syz.2.669: iget: bad i_size value: 38620345925642
[   61.291041][ T5339] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.669: couldn't read orphan inode 15 (err -117)
[   61.305321][ T5339] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   61.343040][ T5339] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.669: bg 0: block 5: invalid block bitmap
[   61.454273][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   61.528989][ T5354] loop2: detected capacity change from 0 to 512
[   61.536651][ T5349] tipc: Started in network mode
[   61.541661][ T5349] tipc: Node identity 8619e6a6d533, cluster identity 4711
[   61.549136][ T5349] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   61.557662][ T5354] EXT4-fs: Ignoring removed nobh option
[   61.563616][ T5348] tipc: Resetting bearer <eth:syzkaller0>
[   61.570011][ T5354] EXT4-fs: Ignoring removed nobh option
[   61.576181][ T5354] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities
[   61.592583][ T5348] tipc: Disabling bearer <eth:syzkaller0>
[   61.706745][ T5358] Falling back ldisc for ttyS3.
[   61.923911][ T5391] loop2: detected capacity change from 0 to 128
[   61.940702][ T5391] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100)
[   61.948719][ T5391] FAT-fs (loop2): Filesystem has been set read-only
[   61.955537][ T5390] netlink: 76 bytes leftover after parsing attributes in process `syz.4.682'.
[   61.964503][ T5391] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100)
[   61.972384][ T5391] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100)
[   62.050885][ T5401] loop3: detected capacity change from 0 to 512
[   62.065267][ T5399] buffer_io_error: 24702 callbacks suppressed
[   62.065283][ T5399] Buffer I/O error on dev loop2, logical block 2065, async page read
[   62.088920][ T5399] Buffer I/O error on dev loop2, logical block 2066, async page read
[   62.097580][ T5401] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[   62.105634][ T5401] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2
[   62.113944][ T5399] Buffer I/O error on dev loop2, logical block 2067, async page read
[   62.122255][ T5399] Buffer I/O error on dev loop2, logical block 2068, async page read
[   62.130663][ T5399] Buffer I/O error on dev loop2, logical block 2069, async page read
[   62.136164][ T5401] EXT4-fs (loop3): 1 truncate cleaned up
[   62.138824][ T5399] Buffer I/O error on dev loop2, logical block 2070, async page read
[   62.152746][ T5399] Buffer I/O error on dev loop2, logical block 2071, async page read
[   62.160953][ T5399] Buffer I/O error on dev loop2, logical block 2072, async page read
[   62.169306][ T5391] Buffer I/O error on dev loop2, logical block 2065, async page read
[   62.177518][ T5391] Buffer I/O error on dev loop2, logical block 2066, async page read
[   62.188803][ T5401] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   62.265822][ T5412] loop1: detected capacity change from 0 to 512
[   62.282528][ T4112] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   62.292304][ T5412] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[   62.318623][ T5412] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #15: comm syz.1.687: iget: bogus i_mode (5)
[   62.345684][ T5412] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.687: couldn't read orphan inode 15 (err -117)
[   62.359925][ T5412] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   62.372347][ T5412] ext2 filesystem being mounted at /130/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[   62.474169][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   62.574203][ T5426] loop4: detected capacity change from 0 to 256
[   62.644552][ T5426] FAT-fs (loop4): codepage cp932 not found
[   62.661599][ T5435] loop1: detected capacity change from 0 to 512
[   62.701435][ T5435] EXT4-fs: Ignoring removed mblk_io_submit option
[   62.721540][ T5435] EXT4-fs: Ignoring removed mblk_io_submit option
[   62.744296][ T5435] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[   62.765938][ T5435] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c11c, mo2=0002]
[   62.795196][ T5435] System zones: 1-12
[   62.813227][ T5435] EXT4-fs error (device loop1): ext4_iget_extra_inode:5035: inode #15: comm syz.1.697: corrupted in-inode xattr: e_value size too large
[   62.844860][ T5435] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.697: couldn't read orphan inode 15 (err -117)
[   62.858616][ T5435] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   62.921844][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   62.955209][ T5444] loop2: detected capacity change from 0 to 1024
[   62.999169][ T5444] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   63.207517][ T5449] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   63.218375][   T51] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.260479][   T51] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.308748][   T51] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.350128][   T51] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.461420][   T51] bridge_slave_1: left allmulticast mode
[   63.467159][   T51] bridge_slave_1: left promiscuous mode
[   63.472862][   T51] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.480902][   T51] bridge_slave_0: left allmulticast mode
[   63.486749][   T51] bridge_slave_0: left promiscuous mode
[   63.492422][   T51] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.561529][ T5469] netlink: 4 bytes leftover after parsing attributes in process `syz.3.706'.
[   63.579029][   T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   63.589000][   T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   63.598983][   T51] bond0 (unregistering): (slave dummy0): Releasing backup interface
[   63.608451][   T51] bond0 (unregistering): Released all slaves
[   63.618801][ T5454] chnl_net:caif_netlink_parms(): no params data found
[   63.627926][ T5469] bridge_slave_1: left allmulticast mode
[   63.633574][ T5469] bridge_slave_1: left promiscuous mode
[   63.639417][ T5469] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.647388][ T5469] bridge_slave_0: left allmulticast mode
[   63.653161][ T5469] bridge_slave_0: left promiscuous mode
[   63.658991][ T5469] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.748522][   T51] hsr_slave_0: left promiscuous mode
[   63.754421][   T51] hsr_slave_1: left promiscuous mode
[   63.765507][   T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   63.773133][   T51] batman_adv: batadv0: Removing interface: batadv_slave_0
[   63.798556][   T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   63.806272][   T51] batman_adv: batadv0: Removing interface: batadv_slave_1
[   63.840434][   T51] veth1_macvtap: left promiscuous mode
[   63.846041][   T51] veth0_macvtap: left promiscuous mode
[   63.854119][   T51] veth1_vlan: left promiscuous mode
[   63.859556][   T51] veth0_vlan: left promiscuous mode
[   63.935298][   T51] team0 (unregistering): Port device team_slave_1 removed
[   63.945562][   T51] team0 (unregistering): Port device team_slave_0 removed
[   63.998052][ T5454] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.005134][ T5454] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.012362][ T5454] bridge_slave_0: entered allmulticast mode
[   64.018925][ T5454] bridge_slave_0: entered promiscuous mode
[   64.026021][ T5454] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.033148][ T5454] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.062403][ T5454] bridge_slave_1: entered allmulticast mode
[   64.069476][ T5454] bridge_slave_1: entered promiscuous mode
[   64.077568][ T5497] loop0: detected capacity change from 0 to 1024
[   64.097073][ T5497] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   64.124583][ T5454] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.141587][ T5454] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.169431][ T5454] team0: Port device team_slave_0 added
[   64.180056][ T5454] team0: Port device team_slave_1 added
[   64.230013][ T5454] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.237055][ T5454] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.263358][ T5454] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.276203][ T5454] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.283233][ T5454] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.309210][ T5454] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.332269][ T5502] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   64.369483][ T5454] hsr_slave_0: entered promiscuous mode
[   64.375577][ T5454] hsr_slave_1: entered promiscuous mode
[   64.381604][ T5454] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   64.390554][ T5454] Cannot create hsr debugfs directory
[   64.452045][ T5526] netlink: 4 bytes leftover after parsing attributes in process `syz.1.717'.
[   64.479469][ T5526] bridge_slave_1: left allmulticast mode
[   64.485202][ T5526] bridge_slave_1: left promiscuous mode
[   64.490979][ T5526] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.526208][ T5526] bridge_slave_0: left allmulticast mode
[   64.531916][ T5526] bridge_slave_0: left promiscuous mode
[   64.537851][ T5526] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.595434][   T51] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.692071][   T51] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.745844][ T5454] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   64.764822][   T51] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.781183][ T5454] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   64.799370][ T5454] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   64.830246][ T5454] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   64.841372][   T51] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.915776][ T5528] chnl_net:caif_netlink_parms(): no params data found
[   64.940189][   T51] bridge_slave_1: left allmulticast mode
[   64.946132][   T51] bridge_slave_1: left promiscuous mode
[   64.952252][   T51] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.971302][   T51] bridge_slave_0: left allmulticast mode
[   64.977162][   T51] bridge_slave_0: left promiscuous mode
[   64.982905][   T51] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.983874][ T5585] loop1: detected capacity change from 0 to 256
[   65.014307][   T29] kauditd_printk_skb: 10 callbacks suppressed
[   65.014321][   T29] audit: type=1326 audit(1751645314.605:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5580 comm="syz.4.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f0057e929 code=0x7ffc0000
[   65.043807][   T29] audit: type=1326 audit(1751645314.605:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5580 comm="syz.4.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f0057e929 code=0x7ffc0000
[   65.067175][   T29] audit: type=1326 audit(1751645314.605:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5580 comm="syz.4.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f0057e929 code=0x7ffc0000
[   65.090463][   T29] audit: type=1326 audit(1751645314.605:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5580 comm="syz.4.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f0057e929 code=0x7ffc0000
[   65.096212][ T5585] FAT-fs (loop1): codepage cp932 not found
[   65.113727][   T29] audit: type=1326 audit(1751645314.605:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5580 comm="syz.4.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f0057e929 code=0x7ffc0000
[   65.142896][   T29] audit: type=1326 audit(1751645314.605:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5580 comm="syz.4.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f0057e929 code=0x7ffc0000
[   65.166448][   T29] audit: type=1326 audit(1751645314.605:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5580 comm="syz.4.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f0057e929 code=0x7ffc0000
[   65.189726][   T29] audit: type=1326 audit(1751645314.605:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5580 comm="syz.4.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f0057e929 code=0x7ffc0000
[   65.212981][   T29] audit: type=1326 audit(1751645314.605:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5580 comm="syz.4.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f0057e929 code=0x7ffc0000
[   65.236259][   T29] audit: type=1326 audit(1751645314.605:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5580 comm="syz.4.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f0057e929 code=0x7ffc0000
[   65.388473][   T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   65.398488][   T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   65.407998][   T51] bond0 (unregistering): Released all slaves
[   65.456490][ T5528] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.463676][ T5528] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.471028][ T5528] bridge_slave_0: entered allmulticast mode
[   65.478600][ T5528] bridge_slave_0: entered promiscuous mode
[   65.496069][ T5528] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.503194][ T5528] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.510353][ T5528] bridge_slave_1: entered allmulticast mode
[   65.517064][ T5528] bridge_slave_1: entered promiscuous mode
[   65.544987][ T5612] netlink: 156 bytes leftover after parsing attributes in process `syz.4.725'.
[   65.555593][   T51] hsr_slave_0: left promiscuous mode
[   65.565541][   T51] hsr_slave_1: left promiscuous mode
[   65.571638][   T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   65.579080][   T51] batman_adv: batadv0: Removing interface: batadv_slave_0
[   65.590852][   T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   65.598335][   T51] batman_adv: batadv0: Removing interface: batadv_slave_1
[   65.613049][   T51] veth1_macvtap: left promiscuous mode
[   65.618840][   T51] veth0_macvtap: left promiscuous mode
[   65.628933][   T51] veth1_vlan: left promiscuous mode
[   65.634193][   T51] veth0_vlan: left promiscuous mode
[   65.737291][   T51] team0 (unregistering): Port device team_slave_1 removed
[   65.757326][   T51] team0 (unregistering): Port device team_slave_0 removed
[   65.768500][  T327] smc: removing ib device syz!
[   65.819210][ T5528] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.830809][ T5528] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.862384][ T5630] validate_nla: 2 callbacks suppressed
[   65.862400][ T5630] netlink: 'syz.1.727': attribute type 10 has an invalid length.
[   65.875748][ T5630] netlink: 40 bytes leftover after parsing attributes in process `syz.1.727'.
[   65.891916][ T5630] dummy0: entered promiscuous mode
[   65.898114][ T5630] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[   65.937575][ T5528] team0: Port device team_slave_0 added
[   65.960347][ T5528] team0: Port device team_slave_1 added
[   66.010712][ T5528] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.018192][ T5528] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.044244][ T5528] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.074783][ T5454] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.083946][ T5528] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.090986][ T5528] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.117112][ T5528] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.134720][ T5454] 8021q: adding VLAN 0 to HW filter on device team0
[   66.151056][   T37] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.158191][   T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.168068][ T5636] vhci_hcd: default hub control req: 0000 v0000 i0000 l65535
[   66.221840][   T37] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.228949][   T37] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.248625][ T5528] hsr_slave_0: entered promiscuous mode
[   66.254793][ T5528] hsr_slave_1: entered promiscuous mode
[   66.262343][ T5528] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   66.269991][ T5528] Cannot create hsr debugfs directory
[   66.410235][ T5528] netdevsim netdevsim6 netdevsim0: renamed from eth0
[   66.425031][ T5528] netdevsim netdevsim6 netdevsim1: renamed from eth1
[   66.441038][ T5528] netdevsim netdevsim6 netdevsim2: renamed from eth2
[   66.452044][ T5528] netdevsim netdevsim6 netdevsim3: renamed from eth3
[   66.466134][ T5454] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.473472][ T5659] pim6reg1: entered promiscuous mode
[   66.478893][ T5659] pim6reg1: entered allmulticast mode
[   66.522289][ T5528] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.534788][ T5528] 8021q: adding VLAN 0 to HW filter on device team0
[   66.545707][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.552836][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.575136][ T5528] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   66.585570][ T5528] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   66.601758][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.608912][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.705593][ T5528] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.799543][ T5454] veth0_vlan: entered promiscuous mode
[   66.812914][ T5454] veth1_vlan: entered promiscuous mode
[   66.821097][ T5701] loop1: detected capacity change from 0 to 512
[   66.842322][ T5701] EXT4-fs (loop1): 1 orphan inode deleted
[   66.856202][  T327] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 1
[   66.861878][ T5701] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   66.875671][ T5454] veth0_macvtap: entered promiscuous mode
[   66.893224][ T5454] veth1_macvtap: entered promiscuous mode
[   66.899333][ T5701] ext4 filesystem being mounted at /150/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   66.916432][ T5454] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.926965][ T5454] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.941117][ T5454] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.949953][ T5454] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.958757][ T5454] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.967502][ T5454] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.981478][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   67.049355][ T5528] veth0_vlan: entered promiscuous mode
[   67.061461][ T5528] veth1_vlan: entered promiscuous mode
[   67.085442][ T5528] veth0_macvtap: entered promiscuous mode
[   67.100929][ T5528] veth1_macvtap: entered promiscuous mode
[   67.115841][ T5718] loop5: detected capacity change from 0 to 512
[   67.123123][ T5718] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   67.128220][ T5528] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.138529][ T5718] EXT4-fs (loop5): 1 truncate cleaned up
[   67.148778][ T5718] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   67.167265][ T5528] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.175528][ T5528] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.184326][ T5528] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.193084][ T5528] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.201868][ T5528] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.243208][  T327] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.303116][ T5722] syzkaller0: entered promiscuous mode
[   67.308799][ T5722] syzkaller0: entered allmulticast mode
[   67.323476][  T327] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.354139][ T5454] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   67.408013][  T327] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.480078][  T327] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.672932][ T5750] loop3: detected capacity change from 0 to 512
[   67.684797][ T5750] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -13
[   67.730700][ T5750] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #13: comm syz.3.757: iget: bad i_size value: 12154757448730
[   67.746517][ T5750] EXT4-fs (loop3): Remounting filesystem read-only
[   67.850277][ T5756] loop5: detected capacity change from 0 to 2048
[   67.884963][  T327] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   67.895791][  T327] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   67.900477][ T5756] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[   67.920108][  T327] bond0 (unregistering): Released all slaves
[   67.933614][ T5756] EXT4-fs (loop5): Delayed block allocation failed for inode 13 at logical offset 0 with max blocks 1 with error 28
[   67.945935][ T5756] EXT4-fs (loop5): This should not happen!! Data will be lost
[   67.945935][ T5756] 
[   67.955617][ T5756] EXT4-fs (loop5): Total free blocks count 0
[   67.961636][ T5756] EXT4-fs (loop5): Free/Dirty block details
[   67.967574][ T5756] EXT4-fs (loop5): free_blocks=66060304
[   67.973160][ T5756] EXT4-fs (loop5): dirty_blocks=16
[   67.978465][ T5756] EXT4-fs (loop5): Block reservation details
[   67.984487][ T5756] EXT4-fs (loop5): i_reserved_data_blocks=1
[   67.996172][ T5766] program syz.3.761 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   68.008743][ T5761] pim6reg1: entered promiscuous mode
[   68.014081][ T5761] pim6reg1: entered allmulticast mode
[   68.024514][ T5723] chnl_net:caif_netlink_parms(): no params data found
[   68.046421][  T327] hsr_slave_0: left promiscuous mode
[   68.069540][  T327] hsr_slave_1: left promiscuous mode
[   68.075698][  T327] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   68.083196][  T327] batman_adv: batadv0: Removing interface: batadv_slave_0
[   68.091186][  T327] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   68.098737][  T327] batman_adv: batadv0: Removing interface: batadv_slave_1
[   68.117403][  T327] veth1_macvtap: left promiscuous mode
[   68.123061][  T327] veth0_macvtap: left promiscuous mode
[   68.133811][  T327] veth1_vlan: left promiscuous mode
[   68.139194][  T327] veth0_vlan: left promiscuous mode
[   68.208589][  T327] team0 (unregistering): Port device team_slave_1 removed
[   68.217824][  T327] team0 (unregistering): Port device team_slave_0 removed
[   68.280092][ T5776] syzkaller0: entered promiscuous mode
[   68.285694][ T5776] syzkaller0: entered allmulticast mode
[   68.292842][ T5774] syzkaller0: entered promiscuous mode
[   68.298439][ T5774] syzkaller0: entered allmulticast mode
[   68.339854][ T5783] netlink: 'syz.6.766': attribute type 7 has an invalid length.
[   68.347637][ T5783] netlink: 8 bytes leftover after parsing attributes in process `syz.6.766'.
[   68.363523][ T5723] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.370892][ T5723] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.381041][ T5723] bridge_slave_0: entered allmulticast mode
[   68.388918][ T5723] bridge_slave_0: entered promiscuous mode
[   68.400112][ T5723] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.407387][ T5723] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.415182][ T5723] bridge_slave_1: entered allmulticast mode
[   68.421650][ T5723] bridge_slave_1: entered promiscuous mode
[   68.464840][ T5789] netlink: 40 bytes leftover after parsing attributes in process `syz.5.769'.
[   68.487899][ T5723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   68.498863][ T5723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   68.555871][ T5723] team0: Port device team_slave_0 added
[   68.570819][ T5723] team0: Port device team_slave_1 added
[   68.587818][ T5797] usb usb1: usbfs: process 5797 (syz.3.774) did not claim interface 0 before use
[   68.594127][ T5798] loop6: detected capacity change from 0 to 1024
[   68.612172][ T5723] batman_adv: batadv0: Adding interface: batadv_slave_0
[   68.619271][ T5723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   68.645280][ T5723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   68.657373][ T5798] EXT4-fs: Ignoring removed orlov option
[   68.663637][ T5798] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (23153!=20869)
[   68.669848][ T5723] batman_adv: batadv0: Adding interface: batadv_slave_1
[   68.673416][ T5798] EXT4-fs (loop6): group descriptors corrupted!
[   68.680233][ T5723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   68.680341][ T5723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   68.768883][ T5802] loop6: detected capacity change from 0 to 128
[   68.789256][ T5723] hsr_slave_0: entered promiscuous mode
[   68.795349][ T5723] hsr_slave_1: entered promiscuous mode
[   68.810660][ T5802] EXT4-fs mount: 4 callbacks suppressed
[   68.810678][ T5802] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   68.831620][ T5723] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   68.839269][ T5723] Cannot create hsr debugfs directory
[   68.845016][ T5802] ext4 filesystem being mounted at /8/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   68.916517][ T5528] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   68.978298][ T5812] loop6: detected capacity change from 0 to 512
[   68.979971][ T5723] netdevsim netdevsim7 netdevsim0: renamed from eth0
[   68.993385][ T5723] netdevsim netdevsim7 netdevsim1: renamed from eth1
[   69.002912][ T5723] netdevsim netdevsim7 netdevsim2: renamed from eth2
[   69.012134][ T5723] netdevsim netdevsim7 netdevsim3: renamed from eth3
[   69.024527][ T5812] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[   69.036549][ T5812] EXT4-fs (loop6): 1 truncate cleaned up
[   69.042728][ T5812] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   69.075014][ T5723] 8021q: adding VLAN 0 to HW filter on device bond0
[   69.098185][ T5723] 8021q: adding VLAN 0 to HW filter on device team0
[   69.115209][ T5804] SELinux: failed to load policy
[   69.122042][  T327] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.129204][  T327] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.144995][   T31] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.152087][   T31] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.251776][ T5827] loop3: detected capacity change from 0 to 512
[   69.263483][ T5528] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   69.280970][   T31] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.331694][ T5827] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   69.360189][ T5827] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   69.390971][ T5723] 8021q: adding VLAN 0 to HW filter on device batadv0
[   69.405806][ T4112] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   69.599095][   T31] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.659325][ T5833] chnl_net:caif_netlink_parms(): no params data found
[   69.680729][   T31] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.784528][   T31] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.813399][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.820709][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.840118][ T5833] bridge_slave_0: entered allmulticast mode
[   69.856776][ T5833] bridge_slave_0: entered promiscuous mode
[   69.872482][ T5723] veth0_vlan: entered promiscuous mode
[   69.894214][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.901564][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.909734][ T5833] bridge_slave_1: entered allmulticast mode
[   69.916558][ T5833] bridge_slave_1: entered promiscuous mode
[   69.929182][ T5723] veth1_vlan: entered promiscuous mode
[   69.961513][   T31] bridge_slave_1: left allmulticast mode
[   69.967599][   T31] bridge_slave_1: left promiscuous mode
[   69.973386][   T31] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.991647][   T31] bridge_slave_0: left allmulticast mode
[   69.997380][   T31] bridge_slave_0: left promiscuous mode
[   70.003083][   T31] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.059679][ T5869] SELinux: failed to load policy
[   70.128692][   T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   70.139359][   T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   70.148911][   T31] bond0 (unregistering): Released all slaves
[   70.161358][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.225750][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.236959][   T31] hsr_slave_0: left promiscuous mode
[   70.242752][   T31] hsr_slave_1: left promiscuous mode
[   70.248617][   T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   70.256162][   T31] batman_adv: batadv0: Removing interface: batadv_slave_0
[   70.263817][   T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   70.271349][   T31] batman_adv: batadv0: Removing interface: batadv_slave_1
[   70.286858][   T31] veth1_macvtap: left promiscuous mode
[   70.292519][   T31] veth0_macvtap: left promiscuous mode
[   70.298389][   T31] veth1_vlan: left promiscuous mode
[   70.303643][   T31] veth0_vlan: left promiscuous mode
[   70.345674][   T29] kauditd_printk_skb: 43 callbacks suppressed
[   70.345690][   T29] audit: type=1400 audit(1751645319.945:854): avc:  denied  { map } for  pid=5886 comm="syz.4.796" path="/proc/352/net/vlan/vlan0" dev="proc" ino=4026533250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[   70.412359][   T31] team0 (unregistering): Port device team_slave_1 removed
[   70.424274][   T31] team0 (unregistering): Port device team_slave_0 removed
[   70.484446][ T5723] veth0_macvtap: entered promiscuous mode
[   70.501621][ T5833] team0: Port device team_slave_0 added
[   70.511099][ T5833] team0: Port device team_slave_1 added
[   70.534009][ T5723] veth1_macvtap: entered promiscuous mode
[   70.545657][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.552692][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.578787][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.598127][ T5723] batman_adv: batadv0: Interface activated: batadv_slave_0
[   70.610081][ T5723] batman_adv: batadv0: Interface activated: batadv_slave_1
[   70.620219][ T5723] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   70.629116][ T5723] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   70.638105][ T5723] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   70.647079][ T5723] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.659716][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.666786][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.692831][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.743274][ T5833] hsr_slave_0: entered promiscuous mode
[   70.750326][ T5833] hsr_slave_1: entered promiscuous mode
[   70.764758][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   70.774172][ T5833] Cannot create hsr debugfs directory
[   70.838232][ T5906] netlink: 'syz.4.802': attribute type 10 has an invalid length.
[   70.846097][ T5906] netlink: 40 bytes leftover after parsing attributes in process `syz.4.802'.
[   70.867220][ T5906] dummy0: entered promiscuous mode
[   70.872879][ T5906] bridge0: port 3(dummy0) entered blocking state
[   70.879518][ T5906] bridge0: port 3(dummy0) entered disabled state
[   70.888728][ T5906] dummy0: entered allmulticast mode
[   70.895490][ T5906] bridge0: port 3(dummy0) entered blocking state
[   70.901918][ T5906] bridge0: port 3(dummy0) entered forwarding state
[   70.959070][ T5913] loop6: detected capacity change from 0 to 1024
[   70.993916][ T5913] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   71.024348][ T5833] netdevsim netdevsim8 netdevsim0: renamed from eth0
[   71.050626][ T5833] netdevsim netdevsim8 netdevsim1: renamed from eth1
[   71.061411][ T5833] netdevsim netdevsim8 netdevsim2: renamed from eth2
[   71.073881][ T5528] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   71.092544][ T5833] netdevsim netdevsim8 netdevsim3: renamed from eth3
[   71.221897][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.234864][ T5833] 8021q: adding VLAN 0 to HW filter on device team0
[   71.247346][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.254514][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.263636][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.270834][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   71.304358][ T5938] netlink: 8 bytes leftover after parsing attributes in process `syz.4.812'.
[   71.346975][ T5938] netlink: 4 bytes leftover after parsing attributes in process `syz.4.812'.
[   71.380499][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0
[   71.641013][ T5833] veth0_vlan: entered promiscuous mode
[   71.650349][ T5833] veth1_vlan: entered promiscuous mode
[   71.672158][ T5833] veth0_macvtap: entered promiscuous mode
[   71.679710][ T5833] veth1_macvtap: entered promiscuous mode
[   71.695851][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0
[   71.717398][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1
[   71.741030][ T5833] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   71.749923][ T5833] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   71.758658][ T5833] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   71.768015][ T5833] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   71.796749][ T5971] loop4: detected capacity change from 0 to 1024
[   71.817851][ T5971] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   71.854614][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   71.864919][   T29] audit: type=1400 audit(1751645321.465:855): avc:  denied  { unmount } for  pid=5833 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[   71.954065][   T29] audit: type=1400 audit(1751645321.545:856): avc:  denied  { map } for  pid=5984 comm="syz.8.824" path="socket:[14030]" dev="sockfs" ino=14030 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[   71.959103][ T5991] netlink: 60 bytes leftover after parsing attributes in process `syz.6.826'.
[   71.977032][   T29] audit: type=1400 audit(1751645321.545:857): avc:  denied  { write } for  pid=5986 comm="syz.7.825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   72.056435][ T5996] loop7: detected capacity change from 0 to 2048
[   72.056591][ T5997] loop4: detected capacity change from 0 to 1024
[   72.087504][ T3298]  loop7: p1 < > p4
[   72.090653][ T5999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   72.100848][ T5999] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   72.101911][ T5997] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   72.118744][ T3298] loop7: p4 size 8388608 extends beyond EOD, truncated
[   72.122811][ T5997] ext4 filesystem being mounted at /170/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   72.142226][ T5996]  loop7: p1 < > p4
[   72.146624][ T5996] loop7: p4 size 8388608 extends beyond EOD, truncated
[   72.165633][ T2996]  loop7: p1 < > p4
[   72.171195][ T2996] loop7: p4 size 8388608 extends beyond EOD, truncated
[   72.228056][ T5997] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.829: bg 0: block 393: padding at end of block bitmap is not set
[   72.243492][ T5997] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 48 with error 117
[   72.256157][ T5997] EXT4-fs (loop4): This should not happen!! Data will be lost
[   72.256157][ T5997] 
[   72.279682][ T5997] syz.4.829 (5997) used greatest stack depth: 9232 bytes left
[   72.290348][   T31] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 64 with max blocks 1987 with error 117
[   72.303116][   T31] EXT4-fs (loop4): This should not happen!! Data will be lost
[   72.303116][   T31] 
[   72.346525][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.363670][ T3541] udevd[3541]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory
[   72.369227][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory
[   72.403537][ T6010] loop4: detected capacity change from 0 to 512
[   72.418933][ T6010] EXT4-fs: Ignoring removed mblk_io_submit option
[   72.425419][ T6010] EXT4-fs: Ignoring removed orlov option
[   72.433048][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory
[   72.443077][ T4084] udevd[4084]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory
[   72.471304][ T6010] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   72.505857][ T6010] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000.
[   72.574278][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.648720][ T6019] loop4: detected capacity change from 0 to 512
[   72.650141][ T6013] vhci_hcd: invalid port number 96
[   72.660339][ T6013] vhci_hcd: default hub control req: 0000 vfffc i0060 l0
[   72.714206][ T6019] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   72.784018][ T6019] ext4 filesystem being mounted at /172/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   72.833971][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.929468][ T6038] pim6reg1: entered promiscuous mode
[   72.935096][ T6038] pim6reg1: entered allmulticast mode
[   72.950435][ T6040] loop8: detected capacity change from 0 to 1024
[   72.981724][   T23] hid-generic 0000:0000:0000.0002: unknown main item tag 0x7
[   72.989351][   T23] hid-generic 0000:0000:0000.0002: ignoring exceeding usage max
[   73.001132][   T23] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   73.025368][   T23] hid-generic 0000:0000:0000.0002: unknown main item tag 0x6
[   73.032957][   T23] hid-generic 0000:0000:0000.0002: reserved main item tag 0xd
[   73.035438][ T6040] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   73.063997][ T6040] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   73.078413][   T23] hid-generic 0000:0000:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[   73.132306][ T6049] fido_id[6049]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   73.156695][   T29] audit: type=1326 audit(1751645322.735:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6045 comm="syz.4.846" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4f0057e929 code=0x0
[   73.181736][ T6040] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.844: bg 0: block 393: padding at end of block bitmap is not set
[   73.198571][ T6040] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 48 with error 117
[   73.211256][ T6040] EXT4-fs (loop8): This should not happen!! Data will be lost
[   73.211256][ T6040] 
[   73.239984][   T31] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 64 with max blocks 1987 with error 117
[   73.252743][   T31] EXT4-fs (loop8): This should not happen!! Data will be lost
[   73.252743][   T31] 
[   73.277365][ T5833] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.339211][ T6060] pim6reg1: entered promiscuous mode
[   73.344649][ T6060] pim6reg1: entered allmulticast mode
[   73.949808][ T6076] loop6: detected capacity change from 0 to 512
[   73.970237][ T6076] EXT4-fs (loop6): too many log groups per flexible block group
[   73.978041][ T6076] EXT4-fs (loop6): failed to initialize mballoc (-12)
[   73.986643][ T6076] EXT4-fs (loop6): mount failed
[   74.124951][    C0] vcan0: j1939_tp_rxtimer: 0xffff88811bf84600: rx timeout, send abort
[   74.133230][    C0] vcan0: j1939_tp_rxtimer: 0xffff88811bf84400: rx timeout, send abort
[   74.141500][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811bf84600: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[   74.155847][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811bf84400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[   74.287879][ T6071] SELinux: failed to load policy
[   74.333078][ T6092] serio: Serial port ptm0
[   74.388481][ T6096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   74.405154][ T6096] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   74.499618][ T6102] SELinux:  Context Ü is not valid (left unmapped).
[   74.757993][ T6112] loop3: detected capacity change from 0 to 1024
[   74.793311][ T6112] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   74.795621][ T6116] all: renamed from lo (while UP)
[   74.811126][   T29] audit: type=1326 audit(1751645324.395:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6114 comm="syz.4.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f0057e929 code=0x7ffc0000
[   74.834436][   T29] audit: type=1326 audit(1751645324.395:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6114 comm="syz.4.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f0057e929 code=0x7ffc0000
[   74.857783][   T29] audit: type=1326 audit(1751645324.395:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6114 comm="syz.4.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4f0057e929 code=0x7ffc0000
[   74.881124][   T29] audit: type=1326 audit(1751645324.395:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6114 comm="syz.4.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f0057e929 code=0x7ffc0000
[   74.904549][   T29] audit: type=1326 audit(1751645324.395:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6114 comm="syz.4.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f0057e929 code=0x7ffc0000
[   74.944808][ T6112] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.872: Allocating blocks 497-513 which overlap fs metadata
[   74.962402][ T6111] EXT4-fs (loop3): pa ffff888107269230: logic 128, phys. 273, len 15
[   74.970699][ T6111] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1
[   75.010433][ T4112] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   75.246184][ T6129] syzkaller0: entered promiscuous mode
[   75.251859][ T6129] syzkaller0: entered allmulticast mode
[   75.287074][ T6131] serio: Serial port ptm0
[   75.352840][ T6136] loop4: detected capacity change from 0 to 1024
[   75.385614][ T6136] EXT4-fs: Ignoring removed orlov option
[   75.391576][ T6136] EXT4-fs: Ignoring removed nomblk_io_submit option
[   75.404290][ T6140] netlink: 16 bytes leftover after parsing attributes in process `syz.3.883'.
[   75.478628][ T6136] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   75.545064][   T29] kauditd_printk_skb: 20 callbacks suppressed
[   75.545097][   T29] audit: type=1400 audit(1751645325.145:884): avc:  denied  { mounton } for  pid=6135 comm="syz.4.881" path="/180/file1/bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   75.616259][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   75.647580][   T29] audit: type=1400 audit(1751645325.215:885): avc:  denied  { unlink } for  pid=3313 comm="syz-executor" name="bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   75.729518][   T29] audit: type=1400 audit(1751645325.295:886): avc:  denied  { getopt } for  pid=6141 comm="syz.7.884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   76.549916][   T29] audit: type=1326 audit(1751645326.155:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6190 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ccdcae929 code=0x7ffc0000
[   76.593138][   T29] audit: type=1326 audit(1751645326.155:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6190 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ccdcae929 code=0x7ffc0000
[   76.616090][   T29] audit: type=1326 audit(1751645326.175:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6190 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f6ccdcae929 code=0x7ffc0000
[   76.638894][   T29] audit: type=1326 audit(1751645326.175:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6190 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ccdcae929 code=0x7ffc0000
[   76.661892][   T29] audit: type=1326 audit(1751645326.175:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6190 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ccdcae929 code=0x7ffc0000
[   76.684903][   T29] audit: type=1326 audit(1751645326.175:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6190 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f6ccdcae929 code=0x7ffc0000
[   76.707790][   T29] audit: type=1326 audit(1751645326.175:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6190 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ccdcae929 code=0x7ffc0000
[   76.788535][ T6196] loop7: detected capacity change from 0 to 2048
[   76.843117][ T6201] loop6: detected capacity change from 0 to 2048
[   76.860882][ T6204] loop3: detected capacity change from 0 to 1024
[   76.871017][ T6204] EXT4-fs: Ignoring removed orlov option
[   76.874254][ T6196] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   76.876799][ T6204] EXT4-fs: Ignoring removed nomblk_io_submit option
[   76.908519][ T6201] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   76.957654][ T6196] EXT4-fs error (device loop7): ext4_find_extent:939: inode #2: comm syz.7.904: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[   76.998799][ T6196] EXT4-fs (loop7): Remounting filesystem read-only
[   77.016715][ T6196] xt_hashlimit: max too large, truncated to 1048576
[   77.053093][ T6204] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   77.067256][ T6213] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[   77.095276][ T5723] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   77.127959][ T6217] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[   77.176617][ T6213] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28
[   77.188935][ T6213] EXT4-fs (loop6): This should not happen!! Data will be lost
[   77.188935][ T6213] 
[   77.198805][ T6213] EXT4-fs (loop6): Total free blocks count 0
[   77.204846][ T6213] EXT4-fs (loop6): Free/Dirty block details
[   77.211001][ T6213] EXT4-fs (loop6): free_blocks=2415919504
[   77.217027][ T6213] EXT4-fs (loop6): dirty_blocks=1344
[   77.222339][ T6213] EXT4-fs (loop6): Block reservation details
[   77.228398][ T6213] EXT4-fs (loop6): i_reserved_data_blocks=84
[   77.257214][ T6213] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28
[   77.270901][ T4112] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   77.360737][ T6231] random: crng reseeded on system resumption
[   77.657471][ T6246] netlink: 16 bytes leftover after parsing attributes in process `syz.8.923'.
[   78.167088][ T5744] IPVS: starting estimator thread 0...
[   78.202336][ T6277] netlink: 12 bytes leftover after parsing attributes in process `syz.8.935'.
[   78.296124][ T6278] IPVS: using max 2112 ests per chain, 105600 per kthread
[   78.322130][ T6286] loop7: detected capacity change from 0 to 512
[   78.366281][ T6286] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[   78.414524][ T6286] EXT4-fs (loop7): 1 truncate cleaned up
[   78.488341][ T6286] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   78.590472][ T6292] infiniband syz!: set active
[   78.595252][ T6292] infiniband syz!: added team_slave_0
[   78.614637][ T5723] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   78.627796][ T6292] RDS/IB: syz!: added
[   78.631879][ T6292] smc: adding ib device syz! with port count 1
[   78.676086][ T6292] smc:    ib device syz! port 1 has pnetid 
[   78.797646][   T23] IPVS: starting estimator thread 0...
[   78.886036][ T6315] IPVS: using max 2352 ests per chain, 117600 per kthread
[   78.905838][ T6322] loop8: detected capacity change from 0 to 512
[   79.003478][ T6331] tipc: Started in network mode
[   79.008521][ T6331] tipc: Node identity 3242bf077d13, cluster identity 4711
[   79.015788][ T6331] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   79.050316][ T6322] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   79.063953][ T6331] tipc: Disabling bearer <eth:syzkaller0>
[   79.070001][ T6322] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   79.123777][ T5833] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.322180][ T6349] loop4: detected capacity change from 0 to 512
[   79.331442][ T6351] loop7: detected capacity change from 0 to 512
[   79.354659][ T6349] EXT4-fs error (device loop4): ext4_xattr_inode_iget:433: comm syz.4.965: Parent and EA inode have the same ino 15
[   79.373913][ T6345] loop8: detected capacity change from 0 to 8192
[   79.382614][ T6351] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[   79.382650][ T6349] EXT4-fs (loop4): Remounting filesystem read-only
[   79.407564][ T6349] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30)
[   79.473165][ T6351] EXT4-fs (loop7): 1 truncate cleaned up
[   79.481911][ T6349] EXT4-fs (loop4): 1 orphan inode deleted
[   79.499582][ T5833] FAT-fs (loop8): error, invalid access to FAT (entry 0x0000e1b1)
[   79.507614][ T5833] FAT-fs (loop8): Filesystem has been set read-only
[   79.515892][ T6351] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   79.534632][ T6349] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   79.583135][ T6358] netlink: 12 bytes leftover after parsing attributes in process `syz.6.971'.
[   79.602985][ T5723] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.621793][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.676561][ T6365] sch_fq: defrate 0 ignored.
[   79.749916][ T6375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   79.761900][ T6375] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   79.951952][ T6393] sctp: [Deprecated]: syz.7.981 (pid 6393) Use of int in max_burst socket option.
[   79.951952][ T6393] Use struct sctp_assoc_value instead
[   80.237717][ T6403] netlink: 32 bytes leftover after parsing attributes in process `syz.4.986'.
[   80.561355][ T6422] loop4: detected capacity change from 0 to 2048
[   80.622036][ T6422]  loop4: p2 p3 p7
[   80.795534][ T4084] udevd[4084]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory
[   80.807836][ T3541] udevd[3541]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[   80.819592][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[   80.911529][ T6442] loop8: detected capacity change from 0 to 512
[   80.960650][ T6442] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[   81.107274][ T6442] EXT4-fs (loop8): 1 truncate cleaned up
[   81.113772][ T6442] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   81.207951][ T5833] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   81.325024][   T29] kauditd_printk_skb: 64 callbacks suppressed
[   81.325038][   T29] audit: type=1326 audit(1751645330.925:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6463 comm="syz.7.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ccdcae929 code=0x7ffc0000
[   81.359241][   T29] audit: type=1326 audit(1751645330.965:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6463 comm="syz.7.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6ccdcae929 code=0x7ffc0000
[   81.382702][   T29] audit: type=1326 audit(1751645330.965:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6463 comm="syz.7.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ccdcae929 code=0x7ffc0000
[   81.406269][   T29] audit: type=1326 audit(1751645330.965:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6463 comm="syz.7.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ccdcae929 code=0x7ffc0000
[   81.429681][   T29] audit: type=1326 audit(1751645330.965:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6463 comm="syz.7.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6ccdcae929 code=0x7ffc0000
[   81.429716][   T29] audit: type=1326 audit(1751645330.965:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6463 comm="syz.7.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ccdcae929 code=0x7ffc0000
[   81.429789][   T29] audit: type=1326 audit(1751645330.965:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6463 comm="syz.7.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ccdcae929 code=0x7ffc0000
[   81.429822][   T29] audit: type=1326 audit(1751645330.965:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6463 comm="syz.7.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6ccdcae929 code=0x7ffc0000
[   81.429848][   T29] audit: type=1326 audit(1751645330.965:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6463 comm="syz.7.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ccdcae929 code=0x7ffc0000
[   81.429939][   T29] audit: type=1326 audit(1751645330.965:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6463 comm="syz.7.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6ccdca58e7 code=0x7ffc0000
[   81.711010][ T6480] sctp: [Deprecated]: syz.8.1016 (pid 6480) Use of int in max_burst socket option.
[   81.711010][ T6480] Use struct sctp_assoc_value instead
[   81.725111][ T6482] loop6: detected capacity change from 0 to 512
[   81.726331][ T6482] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[   81.731379][ T6482] EXT4-fs (loop6): 1 truncate cleaned up
[   81.732050][ T6482] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   81.748360][ T5528] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   81.808544][ T6488] loop8: detected capacity change from 0 to 512
[   81.811030][ T6486] IPv4: Oversized IP packet from 127.202.26.0
[   81.814615][ T6488] EXT4-fs error (device loop8): ext4_xattr_inode_iget:433: comm syz.8.1019: Parent and EA inode have the same ino 15
[   81.815172][ T6488] EXT4-fs (loop8): Remounting filesystem read-only
[   81.818801][ T6488] EXT4-fs warning (device loop8): ext4_evict_inode:257: couldn't mark inode dirty (err -30)
[   81.818835][ T6488] EXT4-fs (loop8): 1 orphan inode deleted
[   81.819260][ T6488] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   81.918270][ T5833] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   81.925285][ T6494] loop3: detected capacity change from 0 to 128
[   81.987860][ T6500] bio_check_eod: 55147 callbacks suppressed
[   81.987874][ T6500] syz.3.1021: attempt to access beyond end of device
[   81.987874][ T6500] loop3: rw=2049, sector=145, nr_sectors = 16 limit=128
[   81.988001][ T6500] syz.3.1021: attempt to access beyond end of device
[   81.988001][ T6500] loop3: rw=2049, sector=169, nr_sectors = 8 limit=128
[   81.988047][ T6500] syz.3.1021: attempt to access beyond end of device
[   81.988047][ T6500] loop3: rw=2049, sector=185, nr_sectors = 8 limit=128
[   81.988144][ T6500] syz.3.1021: attempt to access beyond end of device
[   81.988144][ T6500] loop3: rw=2049, sector=201, nr_sectors = 8 limit=128
[   81.988188][ T6500] syz.3.1021: attempt to access beyond end of device
[   81.988188][ T6500] loop3: rw=2049, sector=217, nr_sectors = 8 limit=128
[   81.988277][ T6500] syz.3.1021: attempt to access beyond end of device
[   81.988277][ T6500] loop3: rw=2049, sector=233, nr_sectors = 8 limit=128
[   81.988320][ T6500] syz.3.1021: attempt to access beyond end of device
[   81.988320][ T6500] loop3: rw=2049, sector=249, nr_sectors = 8 limit=128
[   81.988401][ T6500] syz.3.1021: attempt to access beyond end of device
[   81.988401][ T6500] loop3: rw=2049, sector=265, nr_sectors = 8 limit=128
[   81.988438][ T6500] syz.3.1021: attempt to access beyond end of device
[   81.988438][ T6500] loop3: rw=2049, sector=281, nr_sectors = 8 limit=128
[   81.988511][ T6500] syz.3.1021: attempt to access beyond end of device
[   81.988511][ T6500] loop3: rw=2049, sector=297, nr_sectors = 8 limit=128
[   82.020362][ T6499] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1023'.
[   82.020405][ T6499] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   82.020428][ T6499] batman_adv: batadv0: Removing interface: batadv_slave_0
[   82.020986][ T6499] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   82.021060][ T6499] batman_adv: batadv0: Removing interface: batadv_slave_1
[   82.092822][ T6505] loop3: detected capacity change from 0 to 128
[   82.160737][ T6507] loop8: detected capacity change from 0 to 1024
[   82.192658][ T6507] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   82.192773][ T6507] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   82.211847][ T5833] EXT4-fs error (device loop8): ext4_readdir:264: inode #2: block 16: comm syz-executor: path /42/file1: bad entry in directory: rec_len is smaller than minimal - offset=876, inode=0, rec_len=0, size=1024 fake=0
[   82.214045][ T5833] EXT4-fs error (device loop8): ext4_readdir:264: inode #11: block 37: comm syz-executor: path /42/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0
[   82.214427][ T5833] EXT4-fs error (device loop8): ext4_empty_dir:3116: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0
[   82.214681][ T5833] EXT4-fs error (device loop8): ext4_readdir:264: inode #11: block 37: comm syz-executor: path /42/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0
[   82.214906][ T5833] EXT4-fs error (device loop8): ext4_empty_dir:3116: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0
[   82.215173][ T5833] EXT4-fs error (device loop8): ext4_readdir:264: inode #11: block 37: comm syz-executor: path /42/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0
[   82.215478][ T5833] EXT4-fs error (device loop8): ext4_empty_dir:3116: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0
[   82.215675][ T5833] EXT4-fs error (device loop8): ext4_readdir:264: inode #11: block 37: comm syz-executor: path /42/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0
[   82.215998][ T5833] EXT4-fs error (device loop8): ext4_empty_dir:3116: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0
[   82.216265][ T5833] EXT4-fs error (device loop8): ext4_readdir:264: inode #11: block 37: comm syz-executor: path /42/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0
[   82.363410][ T6513] loop3: detected capacity change from 0 to 512
[   82.364067][ T6513] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   82.807871][ T6513] EXT4-fs (loop3): 1 truncate cleaned up
[   82.814279][ T6513] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   82.831339][ T6518] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1031'.
[   82.852882][ T4112] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.867560][ T5833] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.878635][   T37] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.959199][   T37] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.972257][ T6530] loop6: detected capacity change from 0 to 128
[   83.004230][ T6530] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   83.032380][ T6530] ext4 filesystem being mounted at /63/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   83.056947][   T37] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.064579][ T6540] loop4: detected capacity change from 0 to 2048
[   83.087529][ T6540] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   83.111655][ T5528] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   83.120751][ T6535] loop7: detected capacity change from 0 to 8192
[   83.130416][ T6540] EXT4-fs error (device loop4): ext4_find_extent:939: inode #2: comm syz.4.1040: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[   83.160547][ T6540] EXT4-fs (loop4): Remounting filesystem read-only
[   83.169642][ T6540] xt_hashlimit: max too large, truncated to 1048576
[   83.181675][   T37] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.194476][ T5723] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000e1b1)
[   83.202364][ T5723] FAT-fs (loop7): Filesystem has been set read-only
[   83.212145][ T6549] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1041'.
[   83.231466][ T6551] loop3: detected capacity change from 0 to 1024
[   83.232113][ T6549] 8021q: adding VLAN 0 to HW filter on device bond1
[   83.263087][ T6551] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities
[   83.284455][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   83.301834][ T6549] vlan2: entered allmulticast mode
[   83.307021][ T6549] bond1: entered allmulticast mode
[   83.347945][   T37] bridge_slave_1: left allmulticast mode
[   83.353646][   T37] bridge_slave_1: left promiscuous mode
[   83.359480][   T37] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.374768][ T6556] vhci_hcd: invalid port number 96
[   83.380188][ T6556] vhci_hcd: default hub control req: 0000 vfffc i0060 l0
[   83.395624][ T6558] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1043'.
[   83.415749][   T37] bridge_slave_0: left allmulticast mode
[   83.421509][   T37] bridge_slave_0: left promiscuous mode
[   83.427287][   T37] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.472154][ T6566] hugetlbfs: Unknown parameter 'nr_inod'
[   83.523872][ T6572] netlink: 'syz.4.1051': attribute type 1 has an invalid length.
[   83.560694][   T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   83.577670][   T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   83.593079][ T6577] netlink: 4 bytes leftover after parsing attributes in process `+}[@'.
[   83.596978][   T37] bond0 (unregistering): Released all slaves
[   83.602636][ T6579] loop3: detected capacity change from 0 to 128
[   83.619258][ T6576] sctp: [Deprecated]: syz.6.1052 (pid 6576) Use of int in max_burst socket option.
[   83.619258][ T6576] Use struct sctp_assoc_value instead
[   83.635204][ T6579] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   83.648701][ T6572] 8021q: adding VLAN 0 to HW filter on device bond0
[   83.671078][ T6579] ext4 filesystem being mounted at /158/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   83.672695][ T6577] bond0 (unregistering): Released all slaves
[   83.724843][ T4112] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   83.771767][   T37] hsr_slave_0: left promiscuous mode
[   83.786305][   T37] hsr_slave_1: left promiscuous mode
[   83.806840][ T6591] IPv4: Oversized IP packet from 127.202.26.0
[   83.819572][   T37] veth1_macvtap: left promiscuous mode
[   83.826026][   T37] veth0_macvtap: left promiscuous mode
[   83.831653][   T37] veth1_vlan: left promiscuous mode
[   83.846168][   T37] veth0_vlan: left promiscuous mode
[   83.868619][ T6596] loop7: detected capacity change from 0 to 1024
[   83.881903][ T6599] loop3: detected capacity change from 0 to 2048
[   83.888927][ T6596] EXT4-fs (loop7): couldn't mount as ext2 due to feature incompatibilities
[   83.912357][ T6599] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   83.974181][   T37] team0 (unregistering): Port device team_slave_1 removed
[   83.989066][ T6607] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[   84.003927][ T6607] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28
[   84.005101][   T37] team0 (unregistering): Port device team_slave_0 removed
[   84.016195][ T6607] EXT4-fs (loop3): This should not happen!! Data will be lost
[   84.016195][ T6607] 
[   84.016213][ T6607] EXT4-fs (loop3): Total free blocks count 0
[   84.016228][ T6607] EXT4-fs (loop3): Free/Dirty block details
[   84.016241][ T6607] EXT4-fs (loop3): free_blocks=2415919504
[   84.016262][ T6607] EXT4-fs (loop3): dirty_blocks=1920
[   84.056280][ T6607] EXT4-fs (loop3): Block reservation details
[   84.062287][ T6607] EXT4-fs (loop3): i_reserved_data_blocks=120
[   84.077673][ T6607] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28
[   84.213575][ T6620] loop4: detected capacity change from 0 to 764
[   84.229589][ T6620] rock: directory entry would overflow storage
[   84.235790][ T6620] rock: sig=0x4654, size=5, remaining=4
[   84.328432][ T6620] rock: directory entry would overflow storage
[   84.334645][ T6620] rock: sig=0x4f50, size=4, remaining=3
[   84.340262][ T6620] iso9660: Corrupted directory entry in block 4 of inode 1792
[   84.360561][ T6537] chnl_net:caif_netlink_parms(): no params data found
[   84.433361][ T6624] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1062'.
[   84.481648][ T6626] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0
[   84.531261][ T6537] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.538557][ T6537] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.561983][ T6537] bridge_slave_0: entered allmulticast mode
[   84.593068][ T6537] bridge_slave_0: entered promiscuous mode
[   84.606758][ T6537] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.613857][ T6537] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.634219][ T6537] bridge_slave_1: entered allmulticast mode
[   84.643262][ T6537] bridge_slave_1: entered promiscuous mode
[   84.690788][ T6537] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   84.701383][ T6537] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   84.740728][ T6537] team0: Port device team_slave_0 added
[   84.754348][ T6537] team0: Port device team_slave_1 added
[   84.889907][ T6649] loop6: detected capacity change from 0 to 1024
[   84.903462][ T6537] batman_adv: batadv0: Adding interface: batadv_slave_0
[   84.910447][ T6537] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   84.918974][ T6649] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   84.936437][ T6537] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   84.959979][ T6537] batman_adv: batadv0: Adding interface: batadv_slave_1
[   84.967002][ T6537] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   84.993090][ T6537] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   85.003829][ T6649] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   85.077353][ T5528] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.102116][ T6657] pim6reg1: entered promiscuous mode
[   85.107576][ T6657] pim6reg1: entered allmulticast mode
[   85.173017][ T6537] hsr_slave_0: entered promiscuous mode
[   85.194504][ T6537] hsr_slave_1: entered promiscuous mode
[   85.210721][ T6537] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   85.226244][ T6537] Cannot create hsr debugfs directory
[   85.298922][ T6669] loop6: detected capacity change from 0 to 1024
[   85.336452][ T6672] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1078'.
[   85.362878][ T6669] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   85.385438][ T6672] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   85.392901][ T6672] batman_adv: batadv0: Removing interface: batadv_slave_0
[   85.400996][ T6669] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   85.438063][ T5528] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.462413][ T6672] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   85.469904][ T6672] batman_adv: batadv0: Removing interface: batadv_slave_1
[   85.570775][ T6537] netdevsim netdevsim9 netdevsim0: renamed from eth0
[   85.601268][ T6537] netdevsim netdevsim9 netdevsim1: renamed from eth1
[   85.649859][ T6537] netdevsim netdevsim9 netdevsim2: renamed from eth2
[   85.687482][ T6537] netdevsim netdevsim9 netdevsim3: renamed from eth3
[   85.689794][ T6685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   85.715341][ T6685] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   85.844173][ T6684] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.873997][ T6700] loop4: detected capacity change from 0 to 2048
[   85.929375][ T6700] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   85.992084][ T6684] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.131313][ T6537] 8021q: adding VLAN 0 to HW filter on device bond0
[   86.199650][ T6684] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.234951][ T6537] 8021q: adding VLAN 0 to HW filter on device team0
[   86.244933][  T410] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.252067][  T410] bridge0: port 1(bridge_slave_0) entered forwarding state
[   86.285603][ T6684] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.318424][ T6537] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   86.328899][ T6537] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   86.341598][  T410] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.348703][  T410] bridge0: port 2(bridge_slave_1) entered forwarding state
[   86.528575][ T6684] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   86.589864][ T6537] 8021q: adding VLAN 0 to HW filter on device batadv0
[   86.618215][ T6684] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   86.640527][ T6684] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   86.655378][ T6684] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   86.717984][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   86.758489][   T29] kauditd_printk_skb: 4018 callbacks suppressed
[   86.758501][   T29] audit: type=1400 audit(1751645336.365:4986): avc:  denied  { bind } for  pid=6723 comm="syz.3.1099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   86.789217][ T6724] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1099'.
[   87.265219][ T6537] veth0_vlan: entered promiscuous mode
[   87.274594][ T6537] veth1_vlan: entered promiscuous mode
[   87.294451][ T6537] veth0_macvtap: entered promiscuous mode
[   87.304035][ T6537] veth1_macvtap: entered promiscuous mode
[   87.318943][ T6537] batman_adv: batadv0: Interface activated: batadv_slave_0
[   87.331061][ T6537] batman_adv: batadv0: Interface activated: batadv_slave_1
[   87.343789][ T6537] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.352618][ T6537] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   87.361525][ T6537] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.370357][ T6537] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   87.619013][ T6811] vhci_hcd: invalid port number 96
[   87.624193][ T6811] vhci_hcd: default hub control req: 0000 vfffc i0060 l0
[   87.684738][ T6816] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1098'.
[   87.705191][   T29] audit: type=1326 audit(1751645337.305:4987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6815 comm="syz.9.1098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd35f0d58e7 code=0x7ffc0000
[   87.728646][   T29] audit: type=1326 audit(1751645337.305:4988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6815 comm="syz.9.1098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd35f07ab19 code=0x7ffc0000
[   87.752018][   T29] audit: type=1326 audit(1751645337.305:4989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6815 comm="syz.9.1098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd35f0d58e7 code=0x7ffc0000
[   87.775397][   T29] audit: type=1326 audit(1751645337.305:4990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6815 comm="syz.9.1098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd35f07ab19 code=0x7ffc0000
[   87.798815][   T29] audit: type=1326 audit(1751645337.305:4991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6815 comm="syz.9.1098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd35f0de929 code=0x7ffc0000
[   87.822708][   T29] audit: type=1326 audit(1751645337.335:4992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6815 comm="syz.9.1098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd35f0de929 code=0x7ffc0000
[   87.846353][   T29] audit: type=1326 audit(1751645337.335:4993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6815 comm="syz.9.1098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd35f0de929 code=0x7ffc0000
[   87.869869][   T29] audit: type=1326 audit(1751645337.335:4994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6815 comm="syz.9.1098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd35f0de929 code=0x7ffc0000
[   87.893450][   T29] audit: type=1326 audit(1751645337.385:4995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6815 comm="syz.9.1098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fd35f0de929 code=0x7ffc0000
[   88.242688][ T6839] loop6: detected capacity change from 0 to 1024
[   88.252122][ T6839] EXT4-fs: Ignoring removed oldalloc option
[   88.264064][ T6839] EXT4-fs: Ignoring removed orlov option
[   88.277212][ T6839] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled
[   88.311253][ T6839] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   88.369362][ T5528] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   88.506208][ T6866] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[   88.922859][ T6882] loop9: detected capacity change from 0 to 2048
[   88.940270][ T6882] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   89.154476][ T6537] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   89.217347][ T6894] loop4: detected capacity change from 0 to 128
[   89.361306][ T6729] bio_check_eod: 73 callbacks suppressed
[   89.361323][ T6729] kworker/u8:9: attempt to access beyond end of device
[   89.361323][ T6729] loop4: rw=1, sector=145, nr_sectors = 16 limit=128
[   89.386294][ T6729] kworker/u8:9: attempt to access beyond end of device
[   89.386294][ T6729] loop4: rw=1, sector=169, nr_sectors = 8 limit=128
[   89.401263][ T6729] kworker/u8:9: attempt to access beyond end of device
[   89.401263][ T6729] loop4: rw=1, sector=185, nr_sectors = 8 limit=128
[   89.423194][ T6729] kworker/u8:9: attempt to access beyond end of device
[   89.423194][ T6729] loop4: rw=1, sector=201, nr_sectors = 8 limit=128
[   89.436879][ T6729] kworker/u8:9: attempt to access beyond end of device
[   89.436879][ T6729] loop4: rw=1, sector=217, nr_sectors = 8 limit=128
[   89.450527][ T6729] kworker/u8:9: attempt to access beyond end of device
[   89.450527][ T6729] loop4: rw=1, sector=233, nr_sectors = 8 limit=128
[   89.464883][ T6729] kworker/u8:9: attempt to access beyond end of device
[   89.464883][ T6729] loop4: rw=1, sector=249, nr_sectors = 8 limit=128
[   89.479729][ T6729] kworker/u8:9: attempt to access beyond end of device
[   89.479729][ T6729] loop4: rw=1, sector=265, nr_sectors = 8 limit=128
[   89.485548][ T3371] hid-generic 0000:0000:0000.0003: unknown main item tag 0x7
[   89.493465][ T6729] kworker/u8:9: attempt to access beyond end of device
[   89.493465][ T6729] loop4: rw=1, sector=281, nr_sectors = 8 limit=128
[   89.500528][ T3371] hid-generic 0000:0000:0000.0003: ignoring exceeding usage max
[   89.515181][ T6729] kworker/u8:9: attempt to access beyond end of device
[   89.515181][ T6729] loop4: rw=1, sector=297, nr_sectors = 8 limit=128
[   89.525727][ T3371] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   89.540206][ T6905] 9pnet: p9_errstr2errno: server reported unknown error 
[   89.542836][ T3371] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   89.556837][ T3371] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   89.564266][ T3371] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   89.571690][ T3371] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   89.579148][ T3371] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   89.586606][ T3371] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   89.594016][ T3371] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   89.601469][ T3371] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   89.609067][ T3371] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   89.616508][ T3371] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   89.623911][ T3371] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   89.631364][ T3371] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   89.638877][ T3371] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   89.646340][ T3371] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   89.653784][ T3371] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   89.661270][ T3371] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   89.668719][ T3371] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   89.676213][ T3371] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   89.683617][ T3371] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   89.691103][ T3371] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   89.701375][ T3371] hid-generic 0000:0000:0000.0003: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[   89.798390][ T6920] SELinux:  policydb version 791058453 does not match my version range 15-34
[   89.818667][ T6920] SELinux: failed to load policy
[   89.832304][ T6922] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   90.003987][ T6933] pim6reg1: entered promiscuous mode
[   90.009504][ T6933] pim6reg1: entered allmulticast mode
[   90.057635][ T6938] syz_tun: entered allmulticast mode
[   90.063751][ T6938] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0)
[   90.072384][ T6938] mroute: pending queue full, dropping entries
[   90.107072][ T6938] syz_tun: left allmulticast mode
[   90.217450][ T6953] syzkaller0: entered allmulticast mode
[   90.229720][ T6953] syzkaller0 (unregistering): left allmulticast mode
[   90.344792][ T6967] loop3: detected capacity change from 0 to 128
[   90.351531][ T6967] EXT4-fs: inline encryption not supported
[   90.400260][ T6967] ext4 filesystem being mounted at /182/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   90.428062][ T6979] pim6reg1: entered promiscuous mode
[   90.433409][ T6979] pim6reg1: entered allmulticast mode
[   90.480361][ T6989] loop6: detected capacity change from 0 to 128
[   90.524594][ T6991] netlink: 5 bytes leftover after parsing attributes in process `syz.9.1163'.
[   90.533998][ T6991] 0ªX¹¦D: renamed from gretap0 (while UP)
[   90.541225][ T6991] 0ªX¹¦D: entered allmulticast mode
[   90.547172][ T6991] A link change request failed with some changes committed already. Interface 
30ªX¹¦D may have been left with an inconsistent configuration, please check.
[   90.618116][ T3401] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=3401 comm=kworker/0:5
[   90.638376][ T6998] 9pnet: p9_errstr2errno: server reported unknown error 
[   90.727945][ T7004] loop3: detected capacity change from 0 to 8192
[   90.745812][ T7014] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1172'.
[   90.792848][ T7019] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1175'.
[   90.802912][ T7004]  loop3: p1 p2[DM] p4
[   90.810580][ T7004] loop3: p1 size 196608 extends beyond EOD, truncated
[   90.822751][ T7019] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1175'.
[   90.822933][ T7025] veth1_to_bond: entered allmulticast mode
[   90.844902][ T7025] veth1_to_bond: left allmulticast mode
[   90.850924][ T7004] loop3: p2 start 4292936063 is beyond EOD, truncated
[   90.857824][ T7004] loop3: p4 size 50331648 extends beyond EOD, truncated
[   90.884084][ T7027] netdevsim netdevsim7: Direct firmware load for ./file0 failed with error -2
[   90.948316][ T7037] 7BՍ֕: renamed from syzkaller0
[   91.050553][ T7044] loop4: detected capacity change from 0 to 1024
[   91.106432][ T7034] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.1182: Allocating blocks 497-513 which overlap fs metadata
[   91.121281][ T7050] program syz.7.1186 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   91.151776][ T7034] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.1182: Allocating blocks 497-513 which overlap fs metadata
[   91.168003][ T7034] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.1182: Allocating blocks 497-513 which overlap fs metadata
[   91.759130][ T7081] vlan2: entered allmulticast mode
[   91.764151][ T7084] loop3: detected capacity change from 0 to 1024
[   91.771068][   T29] kauditd_printk_skb: 437 callbacks suppressed
[   91.771134][   T29] audit: type=1326 audit(1751645341.365:5433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7080 comm="syz.4.1201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f0057e929 code=0x7ffc0000
[   91.800858][   T29] audit: type=1326 audit(1751645341.365:5434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7080 comm="syz.4.1201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f0057e929 code=0x7ffc0000
[   91.824393][   T29] audit: type=1326 audit(1751645341.365:5435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7080 comm="syz.4.1201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f0057e929 code=0x7ffc0000
[   91.847981][   T29] audit: type=1326 audit(1751645341.365:5436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7080 comm="syz.4.1201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f0057e929 code=0x7ffc0000
[   91.871430][   T29] audit: type=1326 audit(1751645341.365:5437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7080 comm="syz.4.1201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f0057e929 code=0x7ffc0000
[   91.894935][   T29] audit: type=1326 audit(1751645341.365:5438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7080 comm="syz.4.1201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f0057e929 code=0x7ffc0000
[   91.918389][   T29] audit: type=1326 audit(1751645341.365:5439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7080 comm="syz.4.1201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f0057e929 code=0x7ffc0000
[   91.942150][   T29] audit: type=1326 audit(1751645341.365:5440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7080 comm="syz.4.1201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f0057e929 code=0x7ffc0000
[   91.965819][   T29] audit: type=1326 audit(1751645341.375:5441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7080 comm="syz.4.1201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f0057e929 code=0x7ffc0000
[   91.989541][   T29] audit: type=1326 audit(1751645341.375:5442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7080 comm="syz.4.1201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f0057e929 code=0x7ffc0000
[   92.060074][ T7084] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.1202: Allocating blocks 449-513 which overlap fs metadata
[   92.076481][ T7095] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1207'.
[   92.152486][ T7107] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1203'.
[   92.193017][ T7110] loop7: detected capacity change from 0 to 512
[   92.209060][ T7110] EXT4-fs error (device loop7): ext4_iget_extra_inode:5035: inode #15: comm syz.7.1210: corrupted in-inode xattr: invalid ea_ino
[   92.224266][ T7110] EXT4-fs error (device loop7): ext4_orphan_get:1398: comm syz.7.1210: couldn't read orphan inode 15 (err -117)
[   92.260431][ T7083] EXT4-fs (loop3): pa ffff888107269380: logic 48, phys. 177, len 21
[   92.268612][ T7083] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4
[   92.335450][ T7117] loop9: detected capacity change from 0 to 1024
[   92.344185][ T7110] Invalid ELF header magic: != ELF
[   92.376291][ T7117] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   92.460134][ T7117] EXT4-fs error (device loop9): ext4_map_blocks:816: inode #15: block 1: comm syz.9.1212: lblock 1 mapped to illegal pblock 1 (length 15)
[   92.509288][ T7117] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117
[   92.521778][ T7117] EXT4-fs (loop9): This should not happen!! Data will be lost
[   92.521778][ T7117] 
[   92.622615][ T7142] loop3: detected capacity change from 0 to 128
[   92.657630][ T7146] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   92.688582][ T7142] EXT4-fs: Ignoring removed nobh option
[   92.705182][ T7142] ext4 filesystem being mounted at /193/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   92.844192][ T7157] tipc: New replicast peer: 255.255.255.83
[   92.850155][ T7157] tipc: Enabled bearer <udp:£>, priority 10
[   92.903396][ T7151] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1226'.
[   93.018460][ T7164] loop9: detected capacity change from 0 to 512
[   93.063397][ T7164] EXT4-fs error (device loop9): ext4_iget_extra_inode:5035: inode #15: comm syz.9.1241: corrupted in-inode xattr: invalid ea_ino
[   93.095023][ T7164] EXT4-fs error (device loop9): ext4_orphan_get:1398: comm syz.9.1241: couldn't read orphan inode 15 (err -117)
[   93.178530][ T7164] Invalid ELF header magic: != ELF
[   93.486460][ T7191] loop9: detected capacity change from 0 to 1024
[   93.529045][ T7191] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   93.532598][ T7191] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[   93.533317][ T7191] EXT4-fs (loop9): Remounting filesystem read-only
[   93.642616][ T7220] loop7: detected capacity change from 0 to 512
[   93.652107][ T7220] EXT4-fs error (device loop7): ext4_orphan_get:1393: inode #17: comm syz.7.1253: iget: bogus i_mode (0)
[   93.664532][ T7220] EXT4-fs error (device loop7): ext4_orphan_get:1398: comm syz.7.1253: couldn't read orphan inode 17 (err -117)
[   93.727636][ T7226] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7226 comm=syz.3.1255
[   93.837085][ T7239] loop3: detected capacity change from 0 to 1024
[   93.844282][ T7239] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   93.860023][ T7241] netlink: 'syz.4.1262': attribute type 2 has an invalid length.
[   93.867991][ T7241] netlink: 'syz.4.1262': attribute type 1 has an invalid length.
[   93.871158][ T7243] netdevsim netdevsim9: Direct firmware load for ./file0 failed with error -2
[   93.875731][ T7241] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1262'.
[   93.886429][ T7239] EXT4-fs error (device loop3): ext4_map_blocks:816: inode #3: block 1: comm syz.3.1261: lblock 1 mapped to illegal pblock 1 (length 1)
[   93.923510][ T7239] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.1261: Failed to acquire dquot type 0
[   93.943749][ T7239] EXT4-fs error (device loop3): ext4_free_blocks:6587: comm syz.3.1261: Freeing blocks not in datazone - block = 0, count = 4096
[   93.957514][ T7239] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.1261: Invalid inode bitmap blk 0 in block_group 0
[   93.970450][   T23] tipc: Node number set to 1395320486
[   93.977089][ T6758] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:34: lblock 1 mapped to illegal pblock 1 (length 1)
[   94.004822][ T7239] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem
[   94.016853][ T6758] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:34: Failed to release dquot type 0
[   94.031714][ T7239] EXT4-fs (loop3): 1 orphan inode deleted
[   94.089379][ T7264] ip6gretap0: entered promiscuous mode
[   94.095101][ T7264] vlan0: entered promiscuous mode
[   94.108795][ T7266] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7266 comm=syz.9.1274
[   94.121958][ T7267] random: crng reseeded on system resumption
[   94.427048][ T7297] loop7: detected capacity change from 0 to 128
[   94.444532][ T7299] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1287'.
[   94.461360][ T7299] IPVS: Error joining to the multicast group
[   94.484094][ T7297] bio_check_eod: 80 callbacks suppressed
[   94.484114][ T7297] syz.7.1286: attempt to access beyond end of device
[   94.484114][ T7297] loop7: rw=0, sector=121, nr_sectors = 920 limit=128
[   94.722218][ T7315] loop3: detected capacity change from 0 to 128
[   94.727731][ T7319] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2
[   94.734673][ T7315] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[   94.745441][ T7315] FAT-fs (loop3): Filesystem has been set read-only
[   94.758613][ T7315] syz.3.1295: attempt to access beyond end of device
[   94.758613][ T7315] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128
[   94.773448][ T7315] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[   94.781338][ T7315] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[   94.789822][ T7315] syz.3.1295: attempt to access beyond end of device
[   94.789822][ T7315] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128
[   94.803622][ T7315] syz.3.1295: attempt to access beyond end of device
[   94.803622][ T7315] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128
[   94.817720][ T7315] syz.3.1295: attempt to access beyond end of device
[   94.817720][ T7315] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128
[   94.840439][ T7315] syz.3.1295: attempt to access beyond end of device
[   94.840439][ T7315] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128
[   94.856750][ T7315] syz.3.1295: attempt to access beyond end of device
[   94.856750][ T7315] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128
[   94.870438][ T7315] syz.3.1295: attempt to access beyond end of device
[   94.870438][ T7315] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128
[   94.883945][ T7315] syz.3.1295: attempt to access beyond end of device
[   94.883945][ T7315] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128
[   94.897513][ T7315] syz.3.1295: attempt to access beyond end of device
[   94.897513][ T7315] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128
[   94.937843][ T7331] loop7: detected capacity change from 0 to 1024
[   94.969415][ T7331] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4113: comm syz.7.1300: Allocating blocks 449-513 which overlap fs metadata
[   95.009870][ T7337] loop4: detected capacity change from 0 to 1024
[   95.027842][ T7337] EXT4-fs: Ignoring removed orlov option
[   95.141782][ T7349] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   95.149386][ T7349] batadv_slave_1: entered promiscuous mode
[   95.231847][ T7338] EXT4-fs (loop7): pa ffff8881072693f0: logic 48, phys. 177, len 21
[   95.239917][ T7338] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4
[   95.303919][ T7357] bridge: RTM_NEWNEIGH with invalid ether address
[   95.333008][ T7337] ==================================================================
[   95.341231][ T7337] BUG: KCSAN: data-race in __mark_inode_dirty / writeback_single_inode
[   95.349504][ T7337] 
[   95.351837][ T7337] write to 0xffff88810b919758 of 4 bytes by task 7350 on cpu 0:
[   95.359473][ T7337]  writeback_single_inode+0x14a/0x3e0
[   95.364870][ T7337]  sync_inode_metadata+0x5b/0x90
[   95.369831][ T7337]  generic_buffers_fsync_noflush+0xd9/0x120
[   95.375767][ T7337]  ext4_sync_file+0x1ab/0x690
[   95.380483][ T7337]  vfs_fsync_range+0x10a/0x130
[   95.385283][ T7337]  ext4_buffered_write_iter+0x34f/0x3c0
[   95.390956][ T7337]  ext4_file_write_iter+0x383/0xf00
[   95.396196][ T7337]  iter_file_splice_write+0x5ef/0x970
[   95.401611][ T7337]  direct_splice_actor+0x153/0x2a0
[   95.406758][ T7337]  splice_direct_to_actor+0x30f/0x680
[   95.412158][ T7337]  do_splice_direct+0xda/0x150
[   95.416965][ T7337]  do_sendfile+0x380/0x650
[   95.421410][ T7337]  __x64_sys_sendfile64+0x105/0x150
[   95.426711][ T7337]  x64_sys_call+0xb39/0x2fb0
[   95.431336][ T7337]  do_syscall_64+0xd2/0x200
[   95.435861][ T7337]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   95.441784][ T7337] 
[   95.444132][ T7337] read to 0xffff88810b919758 of 4 bytes by task 7337 on cpu 1:
[   95.451696][ T7337]  __mark_inode_dirty+0x18e/0x760
[   95.456768][ T7337]  ext4_write_inline_data_end+0x3e5/0x5f0
[   95.462532][ T7337]  ext4_write_end+0x4cd/0x730
[   95.467243][ T7337]  generic_perform_write+0x312/0x490
[   95.472551][ T7337]  ext4_buffered_write_iter+0x1ee/0x3c0
[   95.478118][ T7337]  ext4_file_write_iter+0x383/0xf00
[   95.483344][ T7337]  iter_file_splice_write+0x5ef/0x970
[   95.488748][ T7337]  direct_splice_actor+0x153/0x2a0
[   95.493990][ T7337]  splice_direct_to_actor+0x30f/0x680
[   95.499413][ T7337]  do_splice_direct+0xda/0x150
[   95.504199][ T7337]  do_sendfile+0x380/0x650
[   95.508640][ T7337]  __x64_sys_sendfile64+0x105/0x150
[   95.513855][ T7337]  x64_sys_call+0xb39/0x2fb0
[   95.518460][ T7337]  do_syscall_64+0xd2/0x200
[   95.522976][ T7337]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   95.528882][ T7337] 
[   95.531221][ T7337] value changed: 0x00000038 -> 0x00000002
[   95.536947][ T7337] 
[   95.539274][ T7337] Reported by Kernel Concurrency Sanitizer on:
[   95.545441][ T7337] CPU: 1 UID: 0 PID: 7337 Comm: syz.4.1302 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(voluntary) 
[   95.557867][ T7337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   95.567947][ T7337] ==================================================================