last executing test programs:

36.901703487s ago: executing program 2 (id=28):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bf8200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8d}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_vs\x00')
pread64(r2, &(0x7f0000000940)=""/239, 0xef, 0x8)

36.859938639s ago: executing program 2 (id=30):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001000001"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, r1, 0x0, 0x2}, 0x18)
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
r3 = creat(&(0x7f00000002c0)='./file0\x00', 0xecf86c37d53048d6)
write$binfmt_elf32(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4604070003040000000000000002000300030000000903000038000000ce0000000e0000000b0020000100050005000000000000000300000008000000d30000007f00000004"], 0x58)
close(r3)
execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)

36.81575177s ago: executing program 2 (id=31):
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0)
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2000000000, 0x1000000000}, 0x10208, 0x0, 0x2, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000740), 0x101000, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)

36.684352406s ago: executing program 2 (id=33):
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000001200)='./file1\x00', 0x1000000, &(0x7f0000000080)={[{@nodots}, {@dots}]}, 0x1, 0x11bf, &(0x7f0000002400)="$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")
socket(0x10, 0x803, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x18)
r2 = socket$inet(0x2, 0x801, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10)
sendto$inet(r2, 0x0, 0xe803, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10)
sendmmsg$inet(r2, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000200)='\\', 0x1}], 0x1}}], 0x1, 0x4000000)
pipe2(&(0x7f0000000180)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
splice(r2, 0x0, r3, 0x0, 0x5, 0x0)
r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0)
write$binfmt_register(r4, &(0x7f0000000980)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x9, 0x3a, 'M', 0x3a, '^', 0x3a, './file0', 0x3a, [0x46]}, 0x2a)

36.460537666s ago: executing program 2 (id=37):
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0)
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2000000000, 0x1000000000}, 0x10208, 0x0, 0x2, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x282700, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000740), 0x101000, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)

35.772745115s ago: executing program 2 (id=61):
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000001200)='./file1\x00', 0x1000000, &(0x7f0000000080)={[{@nodots}, {@dots}]}, 0x1, 0x11bf, &(0x7f0000002400)="$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")
socket(0x10, 0x803, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x18)
r2 = socket$inet(0x2, 0x801, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10)
sendto$inet(r2, 0x0, 0xe803, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10)
sendmmsg$inet(r2, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000200)='\\', 0x1}], 0x1}}], 0x1, 0x4000000)
pipe2(&(0x7f0000000180)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
splice(r2, 0x0, r3, 0x0, 0x5, 0x0)
r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0)
write$binfmt_register(r4, &(0x7f0000000980)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x9, 0x3a, 'M', 0x3a, '^', 0x3a, './file0', 0x3a, [0x46]}, 0x2a)

35.772323234s ago: executing program 32 (id=61):
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000001200)='./file1\x00', 0x1000000, &(0x7f0000000080)={[{@nodots}, {@dots}]}, 0x1, 0x11bf, &(0x7f0000002400)="$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")
socket(0x10, 0x803, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x18)
r2 = socket$inet(0x2, 0x801, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10)
sendto$inet(r2, 0x0, 0xe803, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10)
sendmmsg$inet(r2, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000200)='\\', 0x1}], 0x1}}], 0x1, 0x4000000)
pipe2(&(0x7f0000000180)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
splice(r2, 0x0, r3, 0x0, 0x5, 0x0)
r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0)
write$binfmt_register(r4, &(0x7f0000000980)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x9, 0x3a, 'M', 0x3a, '^', 0x3a, './file0', 0x3a, [0x46]}, 0x2a)

4.181259573s ago: executing program 0 (id=474):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES32], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x200000000000002f, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_emit_ethernet(0x7a, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6a00000000442ffffc000000000000000000000000000001ff0200000000000000000000000000010c2088be000000020c000800010086dd08"], 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10)
r2 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000ac0)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x1, 0x2eb, &(0x7f00000004c0)="$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")
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x21)
pwritev2(r3, &(0x7f00000007c0)=[{&(0x7f0000000880)="2c94", 0x2}], 0x1, 0x5412, 0x2, 0x2)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="5c00000013006bcd9ea918bc5a8eb62320dd3fe3dc4e48aa31086b870334", 0x1e}], 0x1, 0x0, 0x0, 0x1f000801}, 0x4000084)
setreuid(0x0, 0xee00)
ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r2])
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x11, 0x10, 0x0, 0xffffffffffffff4c}, 0x90)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000040)={'syztnl1\x00', &(0x7f0000000340)={'ip6gre0\x00', <r7=>r6, 0x4, 0x6, 0xe9, 0xb, 0x13, @loopback, @empty, 0x7800, 0x17, 0x4, 0xfff}})
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r6}]}}}, @IFLA_MASTER={0x8, 0xa, r6}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x4c}}, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x1f, &(0x7f0000000200)=[{0x0}], 0x1)
keyctl$search(0xa, 0x0, 0x0, 0x0, 0x0)

3.901042965s ago: executing program 0 (id=478):
socket$netlink(0x10, 0x3, 0x12)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
getpid()
sched_setaffinity(0x0, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x33)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800002039000900000000000000000001000000040000000c0001800600000005470000080002"], 0x38}}, 0x0)

3.06458236s ago: executing program 3 (id=481):
syz_io_uring_setup(0x10b, &(0x7f00000003c0)={0x0, 0x334b, 0x80, 0x3, 0x805}, 0x0, 0x0)
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00')
open_by_handle_at(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="20000000f10002000a00000000000000000002"], 0x0)
syz_emit_ethernet(0x3a, &(0x7f0000000600)={@multicast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x17c1, 0x18, 0x0, @wg=@data={0x4, 0x800, 0x2}}}}}}, 0x0)

3.000048383s ago: executing program 3 (id=483):
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0)
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2000000000, 0x1000000000}, 0x10208, 0x0, 0x2, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x282700, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000740), 0x101000, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)

2.84138619s ago: executing program 1 (id=485):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={&(0x7f0000000140), 0xc, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x980}, 0x1, 0x0, 0x0, 0xc005}, 0x800)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x50}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x84}, 0x1, 0x0, 0x0, 0x850}, 0x4040080)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030003130000002cbd7000fbdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a004e2400000004ff010000000000000000000000000001000000000000000002000100000000000000070c0100000005000500000000000a004e2400000009000000000000000000000000000000000600000000000000020013000300000029bd7000033500002034c2d5e50aa90f3b6ed7201c896d077942dae77d68a54a"], 0x98}, 0x1, 0x7}, 0x8890)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0)
close(r2)
creat(&(0x7f0000000200)='./file0\x00', 0x109)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x172f}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r4}, &(0x7f00000008c0), &(0x7f0000000880)=r5}, 0x20)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000100001000c000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x2000c080}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c000080080003400000000214000000110001"], 0xb0}}, 0x40)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]})
close_range(r7, 0xffffffffffffffff, 0x0)

2.60561119s ago: executing program 3 (id=486):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3)
sendmsg$NFC_CMD_VENDOR(r2, &(0x7f0000000940)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000900)={&(0x7f0000000680)=ANY=[@ANYBLOB="0000eaff", @ANYRES16=r4, @ANYBLOB="010025bd7000fbdbdf251d000000"], 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x8000)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x1)
set_robust_list(&(0x7f0000000280)={&(0x7f0000000180)={&(0x7f0000000080)}, 0xdb, &(0x7f0000000200)={&(0x7f00000001c0)}}, 0x18)
ioctl$TIOCVHANGUP(r5, 0x5437, 0x0)

2.577074581s ago: executing program 0 (id=487):
capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0x6, 0x0, 0x1, 0xffffff80})
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$sock(r0, &(0x7f00000008c0)=[{{&(0x7f0000000140)=@in6={0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, '\x00', 0xa}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x18, 0x1, 0x24, 0x6}}], 0x18}}], 0x1, 0x4000000)

2.563091062s ago: executing program 0 (id=489):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0, <r2=>0xffffffffffffffff}, &(0x7f00000008c0), &(0x7f0000000880)=r1}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9f010100fc000000020000000c0001008f0f8a83b5b1571c0000000000000000302e000030000430a6cb25773eadbc4e018a11d2c9fbccfb1c5437963e156ec810a50824fac1892a679ce2d2dbce394dce6ec7d1ce4a6bfac46591a879641effab4582a9d3faf72c518fb40da9bd50a596e8a05ec5f1374491ca689a857a1f1b2062a74e08adc3401d9b535ca25a49ffd7605860ebd6870c39bb4e0699dfd177fe73f060d7fc9fd15eb595cfc383edb5f722d239b44a375de133e84537cbab3ad437cb998bf97c4ccae54617ecb05e3074908212b178abab13e54f72a82059fca2392350e28dcba9d1a57c54c181f5"], &(0x7f0000003240)=""/4114, 0x29, 0x1012, 0x1}, 0x28)

2.528810713s ago: executing program 1 (id=490):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={&(0x7f0000000140), 0xc, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x980}, 0x1, 0x0, 0x0, 0xc005}, 0x800)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x50}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x8c}, 0x1, 0x0, 0x0, 0x850}, 0x4040080)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030003130000002cbd7000fbdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a004e2400000004ff010000000000000000000000000001000000000000000002000100000000000000070c0100000005000500000000000a004e2400000009000000000000000000000000000000000600000000000000020013000300000029bd7000033500002034c2d5e50aa90f3b6ed7201c896d077942dae77d68a54a"], 0x98}, 0x1, 0x7}, 0x8890)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0)
close(r2)
creat(&(0x7f0000000200)='./file0\x00', 0x109)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000480)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
kexec_load(0x7, 0x1, &(0x7f00000003c0)=[{0x0, 0x0, 0x101, 0x3}], 0x3e0000)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x172f}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r4}, &(0x7f00000008c0), &(0x7f0000000880)=r5}, 0x20)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800)
recvmmsg(r6, &(0x7f0000007700), 0x4000267, 0xfc0, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000100001000c000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x2000c080}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c000080080003400000000214000000110001"], 0xb0}}, 0x40)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]})

2.472441675s ago: executing program 0 (id=491):
r0 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014})
epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400)
unshare(0x2c020400)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000180)='cubic', 0x9)
socket$nl_route(0x10, 0x3, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000200000000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000004480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d103000008000340000000012c0000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a3100"], 0x4ec}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
socket$inet(0x2, 0x3, 0x6)
r6 = socket$netlink(0x10, 0x3, 0x8000000004)
r7 = socket(0x2, 0x80805, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x84, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e20, 0x7, @mcast2, 0x1}}, 0x0, 0x4}, 0x90)
writev(r6, &(0x7f0000000140)=[{&(0x7f0000000440)="5800000014001d2340834b80040d8d560a067ee500ff000000000000000058000b4824ca945f64009400140425010ebc000000000000008000f0fffeffe809005300fff5dd80000010000100080c10000000000000000100", 0x58}], 0x1)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000580)={@private2, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2000000, 0x0, 0x7d, 0x200, 0xfffffffffffffffd, 0x930311})
ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback={0x3f}, @loopback, 0x6, 0x0, 0x6, 0x0, 0x4000000000000009, 0x10200})
unshare(0x2040400)
syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file2\x00', 0x804800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYRESHEX], 0x10, 0x121c, &(0x7f0000001840)="$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")

2.408365728s ago: executing program 4 (id=492):
socket$inet6(0xa, 0x80002, 0x0)
futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1)
r0 = openat$sysfs(0xffffff9c, 0x0, 0x0, 0x10)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x28007c2, &(0x7f0000000680)={[{@delalloc}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nouid32}, {@resgid}, {@acl}, {@dax_always}]}, 0x0, 0x483, &(0x7f0000001040)="$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")
r1 = syz_io_uring_setup(0x56f, 0x0, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000180)=r2, 0x1)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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")
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000780)=0x400, 0x4)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000000000000000000002"], 0x3c}}, 0x0)
r4 = socket$kcm(0xa, 0x1, 0x106)
setsockopt$sock_attach_bpf(r4, 0x29, 0x18, 0x0, 0x4)
mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb:\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x00<r\xe9\x9cD\x90\xce\xe1\xc5\x85=\\!\xbbQ\xde\xc3\xe3\x7f\xcf\x1f\x17G\xa6\x13\xae\x92 \x1c\xbf\xfa\xe8e\x8cD\"\xa3w')
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001000001"], 0x50)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f00000008c0)={[{@noinit_itable}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xa}}, {@init_itable_val={'init_itable', 0x3d, 0x2}}, {@usrjquota}, {@grpquota}, {@mblk_io_submit}, {@usrquota}, {@grpjquota}]}, 0x3, 0x44a, &(0x7f0000000400)="$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")
chdir(&(0x7f0000000140)='./file0\x00')
creat(&(0x7f0000000140)='./bus\x00', 0x0)
mkdir(&(0x7f0000000140)='./control\x00', 0x5)

2.3602487s ago: executing program 1 (id=493):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bf8200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8d}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_vs\x00')
pread64(r2, &(0x7f0000000940)=""/239, 0xef, 0x8)

2.347990111s ago: executing program 3 (id=494):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES32], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x200000000000002f, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_emit_ethernet(0x7a, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6a00000000442ffffc000000000000000000000000000001ff0200000000000000000000000000010c2088be000000020c000800010086dd08"], 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10)
r2 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000ac0)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x1, 0x2eb, &(0x7f00000004c0)="$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")
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x21)
pwritev2(r3, &(0x7f00000007c0)=[{&(0x7f0000000880)="2c94", 0x2}], 0x1, 0x5412, 0x2, 0x2)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="5c00000013006bcd9ea918bc5a8eb62320dd3fe3dc4e48aa31086b870334", 0x1e}], 0x1, 0x0, 0x0, 0x1f000801}, 0x4000084)
setreuid(0x0, 0xee00)
ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r2])
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x11, 0x10, 0x0, 0xffffffffffffff4c}, 0x90)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000040)={'syztnl1\x00', &(0x7f0000000340)={'ip6gre0\x00', <r7=>r6, 0x4, 0x6, 0xe9, 0xb, 0x13, @loopback, @empty, 0x7800, 0x17, 0x4, 0xfff}})
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r6}]}}}, @IFLA_MASTER={0x8, 0xa, r6}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x4c}}, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x1f, &(0x7f0000000200)=[{0x0}], 0x1)
keyctl$search(0xa, 0x0, 0x0, 0x0, 0x0)

1.944630418s ago: executing program 4 (id=495):
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0xffffff71}, 0x94)
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000440)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x30a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0x20, 0x6, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x1, 0x3, 0x7, {0x9, 0x21, 0xff7f, 0xcf, 0x1, {0x22, 0x91f}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0xff, 0x8, 0x4}}}}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000480)={0xa, 0x6, 0x200, 0x7, 0x8, 0x22, 0x10, 0x81}, 0x57, &(0x7f00000005c0)={0x5, 0xf, 0x57, 0x6, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x90, 0xb, 0x0, 0x7, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0xf, "bf4a51980415a6f8e4795ac157fa53c8"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0xf, 0x6, 0xd3}, @ssp_cap={0x1c, 0x10, 0xa, 0x7, 0x4, 0x3, 0xff00, 0x7, [0x3f00, 0xff3f00, 0x0, 0xc000]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0x8, 0x2}]}, 0x3, [{0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x1801}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x300a}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x41e}}]})
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0xca00, 0x0)

1.89183252s ago: executing program 3 (id=496):
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], <r0=>0x0, 0xdf, &(0x7f0000000280)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0xd2, 0x8, 0x8, &(0x7f0000000340)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x76, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
mount(&(0x7f0000000700)=@sr0, &(0x7f00000007c0)='./bus\x00', &(0x7f0000000800)='rpc_pipefs\x00', 0x110000, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000780)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = socket$inet6_sctp(0xa, 0x801, 0x84)
connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e21, 0xffffffff, @remote, 0x6}, 0x1c)
shutdown(r2, 0x1)
getsockopt$bt_hci(r2, 0x84, 0x81, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b)
socket$can_raw(0x1d, 0x3, 0x1)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e000091d028ef8020ab0700110005"], 0xfe33)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x2, &(0x7f00000009c0)={[{@errors_remount}, {@grpquota}]}, 0x2, 0x517, &(0x7f0000000140)="$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")
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000201010100000000000000000200000004000180180002801400018008000100b04c94a708000a00ac03cdaa140019800800010004000000080002"], 0x44}, 0x1, 0x0, 0x0, 0x894}, 0x0)
r3 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57)
r4 = socket$netlink(0x10, 0x3, 0x0)
writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="200000001300034700bb65e1c3e4ffff01000000010000005600000025000000", 0x20}], 0x1)
setsockopt$inet_mreqsrc(r3, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc)
open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x43)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.88864052s ago: executing program 1 (id=497):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000"], &(0x7f0000000440)='GPL\x00', 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0x3}, 0x18)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_ext={0x1c, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001040000000ffff0008ffffe318000000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018120000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x25, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x13018, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x885}, 0x94)
r1 = socket$kcm(0x11, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0)

1.630287701s ago: executing program 1 (id=498):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000080)}, 0x20)
socket$nl_sock_diag(0x10, 0x3, 0x4)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000600))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x40008003}, 0x18)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, &(0x7f0000000140))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000002c0)=r2}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0xe0, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360, 0x300}, 0x8, 0x6, 0x7d, 0x0, 0x3, 0x101, 0x0})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10)
r5 = socket$netlink(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r6, 0x1, 0x200000, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40840d4}, 0x0)
socket$kcm(0x1e, 0x1, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000003c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nouid32}]}, 0x1, 0x441, &(0x7f00000011c0)="$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")
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x18)
syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58)
syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000007c0)='./file2\x00', 0x0, &(0x7f0000000500)={[{@noinit_itable}, {@nobarrier}]}, 0x1, 0x79f, &(0x7f0000000a00)="$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")
r7 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0)
write$P9_RREADLINK(r7, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab)

1.217266979s ago: executing program 5 (id=500):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000"], &(0x7f0000000440)='GPL\x00', 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0x3}, 0x18)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_ext={0x1c, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001040000000ffff0008ffffe318000000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018120000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x25, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x13018, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x885}, 0x94)
r1 = socket$kcm(0x11, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0)

1.161510631s ago: executing program 4 (id=501):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={&(0x7f0000000140), 0xc, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[], 0x980}, 0x1, 0x0, 0x0, 0xc005}, 0x800)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x50}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x8c}, 0x1, 0x0, 0x0, 0x850}, 0x4040080)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030003130000002cbd7000fbdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a004e2400000004ff010000000000000000000000000001000000000000000002000100000000000000070c0100000005000500000000000a004e2400000009000000000000000000000000000000000600000000000000020013000300000029bd7000033500002034c2d5e50aa90f3b6ed7201c896d077942dae77d68a54a"], 0x98}, 0x1, 0x7}, 0x8890)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0)
close(r2)
creat(&(0x7f0000000200)='./file0\x00', 0x109)
r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000480)=ANY=[@ANYRES32=r3, @ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000001000000850000008600000095", @ANYRESOCT=r3, @ANYRESHEX=r2, @ANYRESDEC=0x0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffce7, 0x0, 0x0, 0x0}, 0x90)
kexec_load(0x7, 0x1, &(0x7f00000003c0)=[{0x0, 0x0, 0x101, 0x3}], 0x3e0000)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000005000000000000000000181100", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x172f}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r5}, &(0x7f00000008c0), &(0x7f0000000880)=r6}, 0x20)
r7 = socket$netlink(0x10, 0x3, 0x0)
recvmmsg(r7, &(0x7f0000007700), 0x4000267, 0xfc0, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000100001000c000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x2000c080}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c000080080003400000000214000000110001"], 0xb0}}, 0x40)
r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]})
close_range(r9, 0xffffffffffffffff, 0x0)

1.095025354s ago: executing program 5 (id=502):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRESDEC], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xb, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe84, 0x0, 0x0, 0x0}, 0x94)
r2 = syz_open_dev$usbfs(0x0, 0x204, 0x82)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r2, 0x3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
io_setup(0x7, &(0x7f00000001c0)=<r5=>0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6ab0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10)
io_submit(r5, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0xfffd, r3, 0x0}])
write(r3, 0x0, 0x0)
recvmmsg$unix(r3, &(0x7f00000031c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x180, 0x0)
connect$unix(r4, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, 0x0)
r7 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r7, &(0x7f00000001c0)={0xa, 0x0, 0x9, @local, 0x7fff, 0x1}, 0x20)
r8 = socket$can_bcm(0x1d, 0x2, 0x2)
copy_file_range(r0, 0x0, r8, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r2, 0x8002f515, &(0x7f0000000180))
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2400000039000900f036d6760000000004000000040000000c000180060006008848"], 0x24}}, 0x10)

1.045833456s ago: executing program 4 (id=503):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x17, 0x0, 0x4, 0xff}, 0x50)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x4202, 0x0)
sendmsg$inet6(r1, &(0x7f0000000340)={&(0x7f0000000080)={0xa, 0x4e22, 0x3ff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1b73}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000180)="8a03a97d11dc99bfc9181ddad6359c10e5568ec22549e1e795287b0aa3b8eadb11989500d586f0f6a340", 0x2a}, {&(0x7f0000000280)="084284743db1ca0f90d8334919f87976d51c57f57f812c80d67cdb7d562b75e1ab1cb478b111456861bbc59aef969d9f19c378d4a5f95990905f0e2c84ee29a17330f580f8cf9b40cad389eb2879e86fd11caf233d4e422c3b768a128ae406d7219ab7f823764301a1c8c5390e6143a3de0e4c37146ae4a03642399cbd1785a03dc59dca598a1f4f698316e19273e30c", 0x90}], 0x2, &(0x7f0000000600)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x3}}, @hopopts={{0x90, 0x29, 0x36, {0x0, 0xe, '\x00', [@enc_lim={0x4, 0x1, 0xb0}, @generic={0x7, 0x68, "45714de26f3560b8396bd3a8995263087bc6725b39d352e33781880613cee82dfaa4ad11b709396308fe97cb1ff361cdff057b2d53ced473417cb7c1d01dd9b51fa6c39ccb4c72636758869dabe175c44b012bb986fa06e39377ce675bbd986a1d7e2380e2542255"}, @ra={0x5, 0x2, 0x6}, @jumbo={0xc2, 0x4, 0x40}]}}}, @rthdr={{0x38, 0x29, 0x39, {0x84, 0x4, 0x2, 0x2, 0x0, [@initdev={0xfe, 0x88, '\x00', 0xd5, 0x0}, @empty]}}}, @rthdrdstopts={{0x40, 0x29, 0x37, {0x87, 0x4, '\x00', [@hao={0xc9, 0x10, @private1}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}], 0x120}, 0x4008000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
statfs(&(0x7f0000000200)='.\x00', &(0x7f0000000440)=""/137)

1.044539336s ago: executing program 0 (id=504):
prctl$PR_SET_NAME(0xf, &(0x7f00000014c0)='gtp\x00\xe4\xaa\xae\xdf~2\xa6X\x14\x92\xdarV\xf4U\xf7\xa2\xc3l\x1b@\xaf\xf9\xc9\xa9#\xf0S\xd9=q\xd6\x14\xedt\xc8!W\xe9\xd3F\xaa\xa2fUk@\xeb\xb5~\tB0EE\x9a:\xb7\xff\xc1\xfc\x9a\x1f\xf2\xfb\x19\xda#x\xc5F\x1c~\x8c\xe1\xdf\xdc\x01k\f\xde0~\x95\r\xa2\x80\b4M\x14\xe7\xd0\t`n!g\x14\xe6\xd1\xc2\xd3\x88\xf8cVtd\xbeY\xa5\xe7\x16sD\x96}7\n\x88e\x00\xf0\xff\xff\xf0\xcb\x94\xb4S\x00\x00')
close(0xffffffffffffffff)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0)
creat(0x0, 0xd931d3864d39dcca)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r3 = socket$key(0xf, 0x3, 0x2)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r4, <r5=>0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
getrandom(0x0, 0x0, 0x1)
sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="020300030c0000000007000000000000020009001000000001d70000000000000300060000000000020000030000000000000000000000e10200010000000080000002030000000003000500000000000200"], 0x60}, 0x1, 0x7}, 0x0)
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x1, 0x800001, 0x0, 0x0, 0x0)
mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0)
mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil)
munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000)
mincore(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x0)
getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0xe0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xfff3, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4044080)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$netlink(0x10, 0x3, 0x9)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

978.114619ms ago: executing program 4 (id=505):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000640)={@remote, @dev={0xfe, 0x80, '\x00', 0x10}, @mcast1, 0x9, 0x40, 0x8000, 0x100, 0x0, 0x110227})
r1 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000180)={@loopback, <r2=>0x0}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="8c0200001800200026bd7000fcdbdf251d01020008000900", @ANYRES32=r2, @ANYBLOB="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"], 0x28c}, 0x1, 0x0, 0x0, 0x48000}, 0x1)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4, 0x0, 0xffffffffffffffff}, 0x18)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r5 = syz_io_uring_setup(0x18d6, &(0x7f0000000440)={0x0, 0x5352, 0x0, 0x1fff, 0xfffffffc}, &(0x7f0000ffe000), &(0x7f00000004c0))
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r5, 0x2, &(0x7f0000000180), 0xfe)
r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380), 0x46c402, 0x0)
kexec_load(0x3e00, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xff600000, 0x1000000}], 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x5}}, @TCA_MPLS_TTL={0x5, 0x7, 0xc}, @TCA_MPLS_LABEL={0x8, 0x5, 0xb2d1}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x4000850)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41)
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_int(r9, 0x29, 0x3e, &(0x7f0000000080)=0x1b, 0x4)
sendto$inet6(r9, 0x0, 0xffffffffffffffe0, 0x40004, &(0x7f0000000180)={0xa, 0x4e20, 0x8001, @loopback, 0x400}, 0x1c)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10)
prctl$PR_SET_NAME(0xf, &(0x7f0000000640)='LX[X\x00.]%Jk\xe8\xd4M\xd7\xf9m\xa7%\xe5)J81`.\x7f7\xa6\'\x1f4\x06_0\xf3\x05\xc8\xcc\xf8\r:\r*w\x8d\xbd\x02\xd3F\x83\x82u3\xc7\x1bp\xa1=\xdb\x9e8H\a\xdc(\xb9\x84\f%\xb8\xd8\xd9\xa2`2\xc6V\xda\x14@\x12-\x94e\xca\xb8\xf8\x0e\xf4\xb2\x87J3\x9eucSYT\x81\xb2t\x13*\x8c\x8d\xdf\x17\xcc\xa7nO\xbb\x05\x95;\xcd\x10\x80\xfdx$\xc6CLk.\xe4Nin\xdaXH(\x97\xd1\x03\xe6\xec\x1d)\x98\xca\x83hy\x11\a\xda\xac\xfb{\xa6\xdd\x7f\xe2\xf5\xc4p=\x14v\x91\x92Hhd42\xbb\x00\x00\x00')
r10 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0xffffeffe, 0x18, 0x2})
io_uring_register$IORING_REGISTER_BUFFERS(r10, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYRESOCT=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r11}, 0x10)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYRES16=r1], 0x40}, 0x1, 0xd}, 0xa1)

840.699435ms ago: executing program 3 (id=506):
r0 = socket$kcm(0x2, 0x1000000000000002, 0x0)
r1 = creat(&(0x7f0000000040)='./file7\x00', 0x1a2)
fallocate(r1, 0x0, 0x9, 0x2000406)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000200)={0x0, 0x1, 0x8, 0x5})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x476}, 0x94)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x7, 0x4, 0x200, 0x21db}, 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000f00000000000000000218120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f00000001c0)={'wpan1\x00', <r10=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r10, @ANYBLOB="60003080050002"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0)
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r7, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000780)={0x28, r9, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x40)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='sched_switch\x00', r6, 0x0, 0x7fb}, 0x18)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r11 = add_key$keyring(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_MOVE(0x3, r11, 0x0, 0x0, 0x0)
keyctl$set_timeout(0xf, r11, 0xfffffffffffffffb)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r12 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r12}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x18)
r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18ecff000000000000000000000000009500000000000002"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r13, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20)
openat$cgroup_ro(r5, &(0x7f0000000180)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e1f, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xe}, @multicast2}}}], 0x20}, 0x0)

704.58049ms ago: executing program 5 (id=507):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bf8200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8d}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_vs\x00')
pread64(r2, &(0x7f0000000940)=""/239, 0xef, 0x8)

606.349584ms ago: executing program 5 (id=508):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x17, 0x0, 0x4, 0xff}, 0x50)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x4202, 0x0)
sendmsg$inet6(r1, &(0x7f0000000340)={&(0x7f0000000080)={0xa, 0x4e22, 0x3ff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1b73}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000180)="8a03a97d11dc99bfc9181ddad6359c10e5568ec22549e1e795287b0aa3b8eadb11989500d586f0f6a340", 0x2a}, {&(0x7f0000000280)="084284743db1ca0f90d8334919f87976d51c57f57f812c80d67cdb7d562b75e1ab1cb478b111456861bbc59aef969d9f19c378d4a5f95990905f0e2c84ee29a17330f580f8cf9b40cad389eb2879e86fd11caf233d4e422c3b768a128ae406d7219ab7f823764301a1c8c5390e6143a3de0e4c37146ae4a03642399cbd1785a03dc59dca598a1f4f698316e19273e30c", 0x90}], 0x2, &(0x7f0000000600)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x3}}, @hopopts={{0x90, 0x29, 0x36, {0x0, 0xe, '\x00', [@enc_lim={0x4, 0x1, 0xb0}, @generic={0x7, 0x68, "45714de26f3560b8396bd3a8995263087bc6725b39d352e33781880613cee82dfaa4ad11b709396308fe97cb1ff361cdff057b2d53ced473417cb7c1d01dd9b51fa6c39ccb4c72636758869dabe175c44b012bb986fa06e39377ce675bbd986a1d7e2380e2542255"}, @ra={0x5, 0x2, 0x6}, @jumbo={0xc2, 0x4, 0x40}]}}}, @rthdr={{0x38, 0x29, 0x39, {0x84, 0x4, 0x2, 0x2, 0x0, [@initdev={0xfe, 0x88, '\x00', 0xd5, 0x0}, @empty]}}}, @rthdrdstopts={{0x40, 0x29, 0x37, {0x87, 0x4, '\x00', [@hao={0xc9, 0x10, @private1}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}], 0x120}, 0x4008000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000b00)='kmem_cache_free\x00', r2, 0x0, 0x1034}, 0x18)
iopl(0x3)
statfs(&(0x7f0000000200)='.\x00', &(0x7f0000000440)=""/137)

452.604291ms ago: executing program 5 (id=509):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = io_uring_setup(0x136a, &(0x7f0000000080)={0x0, 0x1f8a, 0x0, 0x3, 0x28c})
r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x1, 0x4)
fchdir(r4)
close_range(r2, 0xffffffffffffffff, 0x0)
r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
r6 = fsmount(r5, 0x0, 0x0)
fchdir(r6)

346.499876ms ago: executing program 5 (id=510):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000480)='percpu_create_chunk\x00', r0}, 0x18)
memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5\x00'/557, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'})
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffd}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080)
sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x2}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x5}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x55}, 0x4000)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r5, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c)
connect$inet6(r5, &(0x7f0000000040)={0xa, 0x3, 0x7, @loopback, 0x800000}, 0x1c)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='rxrpc_client\x00', r6, 0x0, 0x3}, 0x18)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8}, 0x10)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015000000000008001240000000000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0)
fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a9"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r10 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6})
mq_timedsend(r10, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(r10, 0x0, 0x0, 0x2, 0x0)

159.675944ms ago: executing program 1 (id=511):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x545, &(0x7f0000001300)="$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")
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x50000)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1a, 0x0, 0x0)
capset(0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000009000000100000003a00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000004007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000000300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fd}, 0x94)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)

0s ago: executing program 4 (id=512):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={&(0x7f0000000140), 0xc, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a1c000000120a0101000000000000000002000009080003400000000848020000060a0500000000000000000001000006080009400000000224020480e40101800b0001007461726765740000d40102800800024000000000500003009fd135d4292dfa9d4d664323a7ea4cc2bd51fb724533583d026d6fa1dae69e3c2e88bf83442095a1d347e8de0dcc51288147564f041c9f95c5d30af68c8cf32f3ee1d57ab5991af75c56b4e00c0001005345434d41524b006f0003001311e8b65b2adf802b2ab9038fd0972114f2220ba37c986fe7365d99a19ef6086921ba18e30245d5d31dea881afb34d8931a7b72289d610ea3fb7c9a940908f2b5a8d875fd87ff8a6505822a41c5045f85a49dd385661df52dbe0ee8e522404da8b0173b7899c5c6af7f96000a000100484d41524b000000f0000300fb1f9f6c166bf3aa28051cc68960297c6fee4df79ff5b052364c0d55173dd0bbf64d1f87230a79104ac7d30b1ee3cce2664193fdad1e8d60a86f83a50e7a80fd314bfb619eb2e8d0ce7d25026eec376bf2c90eb24e9c48b2bd435535098b927d7dc02c0d054f3c7b53978805b04b29ef06c120a0285f73eb876a81acd5629d0443b80027ebb6e53c9af58363238cd4b59ba4e9f91651cd269b44b05fe457554bd195eed7a00baa2728941d7ed00ddcb1ab7410703e168b48e69b580dc8360495147cada48d539f80f03e175d67a18f3dc1473ac6e5293271109d8204b2aa134dab2453fcdd219ea291f307ca3c000180090001007866726d000000002c0002800800044000000005080002400000000005000300010000000800014000000002080002400000000308000b400000000220000000160a01010000000000000000030000000c000540000000000000000468040000060a010400000000000000000500000408000b40000000020900010073797a3000000000080009400000000144000580080001400000003f08000140000000170800024000000001080001400000002f0800024000000001080001404386ca85080001400000892f08000140000000040900020073797a3100000000d4030480100001800a00010071756575650000001c0001800b0001006f626a72656600000c0002800800014000000009e00201800b00010064796e7365740000d00202809c000a801c0001800a000100696e6e65720000000c000280080001400000000010000180090001007866726d0000000050000180090001006c61737400000000400002800c00024000000000000000c408000140000000000c000240000000000000000308000140000000170c000240000000000001000108000140000000041c0001800a0001006d617463680000000c0002800800024000000002080002400000000124010a803000018008000100647570002400028008000240000000150800024000000003080002400000001508000240000000104000018011000100666c6f775f6f66666c6f616400000000280002800900010073797a31000000000900010073797a30000000000900010073797a31000000002800018011000100666c6f775f6f66666c6f616400000000100002800900010073797a32000000002c0001800b000100736f636b657400001c0002800800024000000008080002400000000308000140000000014c0001800b000100736f636b657400003c000280080002400000000d0800014000000001080003000000006c08000300000000f5080002400000000d08000140000000030800030000000038100001800a00010071756f74610000000c000640000000000000ffff0c000640000000007fffffff0800094000000002d0000a80140001800b0001006e756d67656e000004000280100001800c0001007061796c6f6164003800018008000100647570002c00028008000240000000080800024000000011080001400000000c080001400a01024e0800024000000001100001800a0001007175657565000000140001800c0001006e6f747261636b00040002803000018008000100647570002400028008000140000000150800024000000008080002400000000308000240000000111c000180090001006d657461000000001c000280080002400000000308000940000000000c00064000000000000094f8300001800700010072740000240002800800024000000001080001400000000c08000140000000170800014000000015100001800b00010074756e6e656c0000340001800b00010065787468647200002400028005000200830000000800014000000011080006400000000208000440000000b3240001800b00010074756e6e656c000014000280080003400000000208000340000000012c0001800a00010071756f74610000001c0002800c00044000000000000000080c000440000000005f81f7ba0c0003400000000000000002080009400000000238000000060a0108000000000000000007000002080009400000000208000940000000030900020073797a30000000000800094000000003e0010000090a000c00000000000000000100000508000340000000100900020073797a30000000000c0010400000000000000005a4010980980102800c000180080001400000000344000180080001400001000008000140000070ee080001408000000008000140000000040800014000000004080001400000000108000140000007bb080001400000000044000180080001400000000108000140000070aa08000140000000080800014000000006080001400000000108000140ffffffff080001400000000508000140000000663400018008000140000000060800014000000100080001400000043a0800014000000c310800014000000c75080001400001000134000180080001400000000808000140000001000800014000000008080001400000000f08000140000003ff08000140800000010c0001800800014000000bd92c00018008000140fffffffd080001400000f5a10800014000000005080001400000002608000140000000051400018008000140000000ff08000140000000044c000180080001400000095a080001400000000508000140000000000800014000000002080001400000007b0800014000000007080001400000049d080001400000000d0800014000000000080001400000000208000640ffffff001c000000020a010200000000000000000a00000108000240000000001c000000080a010100000000000000000300000808000940000000021c000000120a05000000000000000000000000090800034000000004140000001100010000000000000000000300000a"], 0x980}, 0x1, 0x0, 0x0, 0xc005}, 0x800)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x50}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x8c}, 0x1, 0x0, 0x0, 0x850}, 0x4040080)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030003130000002cbd7000fbdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a004e2400000004ff010000000000000000000000000001000000000000000002000100000000000000070c0100000005000500000000000a004e2400000009000000000000000000000000000000000600000000000000020013000300000029bd7000033500002034c2d5e50aa90f3b6ed7201c896d077942dae77d68a54a"], 0x98}, 0x1, 0x7}, 0x8890)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0)
close(r2)
creat(&(0x7f0000000200)='./file0\x00', 0x109)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000480)=ANY=[@ANYRES32=r3, @ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000001000000850000008600000095", @ANYRESOCT=r3, @ANYRESHEX=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
kexec_load(0x7, 0x1, &(0x7f00000003c0)=[{0x0, 0x0, 0x101, 0x3}], 0x3e0000)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x172f}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r5}, &(0x7f00000008c0), &(0x7f0000000880)=r6}, 0x20)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800)
recvmmsg(r7, &(0x7f0000007700), 0x4000267, 0xfc0, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000100001000c000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x2000c080}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c000080080003400000000214000000110001"], 0xb0}}, 0x40)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]})

kernel console output (not intermixed with test programs):

4971][ T3321] bridge_slave_0: entered promiscuous mode
[   28.451520][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.458606][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state
[   28.465739][ T3315] bridge_slave_0: entered allmulticast mode
[   28.472118][ T3315] bridge_slave_0: entered promiscuous mode
[   28.491526][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.498758][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state
[   28.505915][ T3321] bridge_slave_1: entered allmulticast mode
[   28.512350][ T3321] bridge_slave_1: entered promiscuous mode
[   28.518689][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.525770][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state
[   28.533082][ T3315] bridge_slave_1: entered allmulticast mode
[   28.539362][ T3315] bridge_slave_1: entered promiscuous mode
[   28.551536][ T3323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   28.572515][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   28.582566][ T3323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   28.607129][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   28.626285][ T3321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   28.636673][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   28.654747][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.661875][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state
[   28.669006][ T3320] bridge_slave_0: entered allmulticast mode
[   28.675332][ T3320] bridge_slave_0: entered promiscuous mode
[   28.682565][ T3321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   28.692628][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   28.706848][ T3323] team0: Port device team_slave_0 added
[   28.712564][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.719639][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state
[   28.726853][ T3320] bridge_slave_1: entered allmulticast mode
[   28.733255][ T3320] bridge_slave_1: entered promiscuous mode
[   28.749201][ T3314] team0: Port device team_slave_0 added
[   28.755484][ T3323] team0: Port device team_slave_1 added
[   28.775063][ T3314] team0: Port device team_slave_1 added
[   28.790573][ T3321] team0: Port device team_slave_0 added
[   28.796850][ T3315] team0: Port device team_slave_0 added
[   28.812321][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   28.822139][ T3321] team0: Port device team_slave_1 added
[   28.828595][ T3315] team0: Port device team_slave_1 added
[   28.839090][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_0
[   28.846111][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   28.872010][ T3323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   28.884016][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   28.902826][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0
[   28.909800][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   28.935730][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   28.946763][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_1
[   28.953731][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   28.979689][ T3323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   29.004492][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1
[   29.011564][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   29.037495][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   29.054994][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0
[   29.062031][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   29.087979][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   29.099045][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_0
[   29.106006][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   29.132009][ T3321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   29.145774][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_1
[   29.152765][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   29.178871][ T3321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   29.190860][ T3320] team0: Port device team_slave_0 added
[   29.201638][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1
[   29.208612][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   29.234618][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   29.253163][ T3320] team0: Port device team_slave_1 added
[   29.301919][ T3323] hsr_slave_0: entered promiscuous mode
[   29.308007][ T3323] hsr_slave_1: entered promiscuous mode
[   29.314302][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0
[   29.321307][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   29.347265][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   29.364149][ T3315] hsr_slave_0: entered promiscuous mode
[   29.370270][ T3315] hsr_slave_1: entered promiscuous mode
[   29.376090][ T3315] debugfs: 'hsr0' already exists in 'hsr'
[   29.381838][ T3315] Cannot create hsr debugfs directory
[   29.389446][ T3314] hsr_slave_0: entered promiscuous mode
[   29.395429][ T3314] hsr_slave_1: entered promiscuous mode
[   29.401298][ T3314] debugfs: 'hsr0' already exists in 'hsr'
[   29.407056][ T3314] Cannot create hsr debugfs directory
[   29.413410][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1
[   29.420390][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   29.446385][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   29.459202][ T3321] hsr_slave_0: entered promiscuous mode
[   29.465045][ T3321] hsr_slave_1: entered promiscuous mode
[   29.471038][ T3321] debugfs: 'hsr0' already exists in 'hsr'
[   29.476763][ T3321] Cannot create hsr debugfs directory
[   29.550491][ T3320] hsr_slave_0: entered promiscuous mode
[   29.556846][ T3320] hsr_slave_1: entered promiscuous mode
[   29.562707][ T3320] debugfs: 'hsr0' already exists in 'hsr'
[   29.568522][ T3320] Cannot create hsr debugfs directory
[   29.717446][ T3323] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   29.726638][ T3323] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   29.737365][ T3323] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   29.748073][ T3323] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   29.767112][ T3315] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   29.776374][ T3315] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   29.787606][ T3315] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   29.798086][ T3315] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   29.827353][ T3321] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   29.835915][ T3321] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   29.845078][ T3321] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   29.857277][ T3321] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   29.902006][ T3314] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   29.928622][ T3314] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   29.938382][ T3320] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   29.947143][ T3314] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   29.958656][ T3320] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   29.967799][ T3314] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   29.978323][ T3320] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   29.988585][ T3320] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   30.012773][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0
[   30.020877][ T3323] 8021q: adding VLAN 0 to HW filter on device bond0
[   30.029886][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0
[   30.056521][ T3321] 8021q: adding VLAN 0 to HW filter on device team0
[   30.064429][ T3323] 8021q: adding VLAN 0 to HW filter on device team0
[   30.074438][ T3315] 8021q: adding VLAN 0 to HW filter on device team0
[   30.085420][   T31] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.092520][   T31] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.111982][   T31] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.119058][   T31] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.128246][   T31] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.135284][   T31] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.157611][   T31] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.164768][   T31] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.179192][   T31] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.186299][   T31] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.207013][   T31] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.214149][   T31] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.251899][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0
[   30.283254][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0
[   30.305098][ T3314] 8021q: adding VLAN 0 to HW filter on device team0
[   30.320405][ T3320] 8021q: adding VLAN 0 to HW filter on device team0
[   30.340484][   T31] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.347602][   T31] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.368899][  T384] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.375994][  T384] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.396648][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0
[   30.406047][  T384] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.413154][  T384] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.422101][  T384] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.429224][  T384] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.453951][ T3323] 8021q: adding VLAN 0 to HW filter on device batadv0
[   30.465339][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0
[   30.606259][ T3315] veth0_vlan: entered promiscuous mode
[   30.637621][ T3315] veth1_vlan: entered promiscuous mode
[   30.644869][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0
[   30.655390][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0
[   30.664731][ T3323] veth0_vlan: entered promiscuous mode
[   30.701570][ T3323] veth1_vlan: entered promiscuous mode
[   30.710405][ T3321] veth0_vlan: entered promiscuous mode
[   30.727886][ T3315] veth0_macvtap: entered promiscuous mode
[   30.742180][ T3321] veth1_vlan: entered promiscuous mode
[   30.749095][ T3315] veth1_macvtap: entered promiscuous mode
[   30.773791][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0
[   30.783492][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1
[   30.794914][ T3323] veth0_macvtap: entered promiscuous mode
[   30.825273][ T3323] veth1_macvtap: entered promiscuous mode
[   30.836788][  T365] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   30.845581][  T365] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   30.855028][ T3321] veth0_macvtap: entered promiscuous mode
[   30.866484][  T365] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   30.882960][ T3321] veth1_macvtap: entered promiscuous mode
[   30.890968][  T365] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   30.914021][ T3314] veth0_vlan: entered promiscuous mode
[   30.925546][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_0
[   30.939115][   T29] kauditd_printk_skb: 10 callbacks suppressed
[   30.939176][   T29] audit: type=1400 audit(1765006938.939:90): avc:  denied  { mounton } for  pid=3315 comm="syz-executor" path="/root/syzkaller.DO1MlZ/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[   30.968435][ T3320] veth0_vlan: entered promiscuous mode
[   30.975270][   T29] audit: type=1400 audit(1765006938.939:91): avc:  denied  { mount } for  pid=3315 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   30.997457][   T29] audit: type=1400 audit(1765006938.939:92): avc:  denied  { mounton } for  pid=3315 comm="syz-executor" path="/root/syzkaller.DO1MlZ/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   31.001661][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0
[   31.022658][   T29] audit: type=1400 audit(1765006938.939:93): avc:  denied  { mount } for  pid=3315 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   31.032768][ T3314] veth1_vlan: entered promiscuous mode
[   31.051647][   T29] audit: type=1400 audit(1765006938.939:94): avc:  denied  { mounton } for  pid=3315 comm="syz-executor" path="/root/syzkaller.DO1MlZ/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   31.064240][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_1
[   31.083797][   T29] audit: type=1400 audit(1765006938.939:95): avc:  denied  { mounton } for  pid=3315 comm="syz-executor" path="/root/syzkaller.DO1MlZ/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4861 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[   31.083831][   T29] audit: type=1400 audit(1765006938.939:96): avc:  denied  { unmount } for  pid=3315 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   31.084879][   T29] audit: type=1400 audit(1765006938.969:97): avc:  denied  { mounton } for  pid=3315 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[   31.123070][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1
[   31.137977][   T29] audit: type=1400 audit(1765006938.969:98): avc:  denied  { mount } for  pid=3315 comm="syz-executor" name="/" dev="gadgetfs" ino=4866 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[   31.195709][ T3320] veth1_vlan: entered promiscuous mode
[   31.195883][ T3315] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   31.209553][ T3320] veth0_macvtap: entered promiscuous mode
[   31.231727][   T29] audit: type=1400 audit(1765006939.229:99): avc:  denied  { read write } for  pid=3315 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   31.256965][   T31] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   31.268155][   T31] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   31.282921][ T3320] veth1_macvtap: entered promiscuous mode
[   31.290224][   T31] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   31.320541][   T31] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   31.334544][   T31] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   31.348252][ T3314] veth0_macvtap: entered promiscuous mode
[   31.366534][ T1801] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   31.375573][ T1801] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   31.385763][ T1801] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   31.394785][ T3314] veth1_macvtap: entered promiscuous mode
[   31.408341][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0
[   31.429330][    C1] hrtimer: interrupt took 38884 ns
[   31.432934][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1
[   31.466868][  T384] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   31.487875][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0
[   31.495266][  T384] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   31.522633][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1
[   31.539600][  T384] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   31.553500][ T3498] process 'syz.1.7' launched './file0' with NULL argv: empty string added
[   31.570268][  T384] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   31.596731][  T384] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   31.618173][  T384] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   31.638072][  T384] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   31.669349][ T3510] netlink: 96 bytes leftover after parsing attributes in process `syz.1.10'.
[   31.689209][  T384] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   31.764015][ T3523] loop3: detected capacity change from 0 to 512
[   31.770886][ T3523] =======================================================
[   31.770886][ T3523] WARNING: The mand mount option has been deprecated and
[   31.770886][ T3523]          and is ignored by this kernel. Remove the mand
[   31.770886][ T3523]          option from the mount to silence this warning.
[   31.770886][ T3523] =======================================================
[   31.812825][ T3525] loop0: detected capacity change from 0 to 128
[   31.827234][ T3525] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   31.849269][ T3519] netlink: 'syz.4.12': attribute type 8 has an invalid length.
[   31.869548][ T3523] EXT4-fs: Ignoring removed bh option
[   31.870884][ T3519] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   31.890762][ T3525] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   31.940662][  T365] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   31.966855][ T3523] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[   32.015522][ T3523] EXT4-fs (loop3): revision level too high, forcing read-only mode
[   32.023587][ T3523] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=884ec128, mo2=0002]
[   32.059983][ T3523] EXT4-fs (loop3): orphan cleanup on readonly fs
[   32.066507][ T3523] EXT4-fs error (device loop3): ext4_quota_enable:7173: comm syz.3.13: Bad quota inum: 4294967291, type: 0
[   32.079098][ T3523] EXT4-fs (loop3): Remounting filesystem read-only
[   32.085628][ T3523] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-117, ino=4294967291). Please run e2fsck to fix.
[   32.101160][ T3523] EXT4-fs (loop3): Cannot turn on quotas: error -117
[   32.109799][ T3523] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   32.125780][ T3540] loop4: detected capacity change from 0 to 128
[   32.243702][ T3540] syz.4.19: attempt to access beyond end of device
[   32.243702][ T3540] loop4: rw=0, sector=121, nr_sectors = 920 limit=128
[   32.286982][ T3524] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11'.
[   32.298938][ T3524] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11'.
[   32.628020][ T3523] mmap: syz.3.13 (3523) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   32.721020][ T3590] hub 6-0:1.0: USB hub found
[   32.727290][ T3590] hub 6-0:1.0: 8 ports detected
[   32.737325][ T3565] IPVS: lc: FWM 3 0x00000003 - no destination available
[   32.744375][    C1] IPVS: lc: FWM 3 0x00000003 - no destination available
[   32.751732][   T36] IPVS: starting estimator thread 0...
[   32.846418][ T3598] IPVS: using max 2208 ests per chain, 110400 per kthread
[   32.873259][ T3600] loop1: detected capacity change from 0 to 512
[   32.892598][ T3600] EXT4-fs (loop1): orphan cleanup on readonly fs
[   32.900972][ T3600] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.32: corrupted inode contents
[   32.912462][ T3604] loop2: detected capacity change from 0 to 8192
[   32.922637][ T3600] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem
[   32.937409][ T3600] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.32: corrupted inode contents
[   32.963188][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   32.991427][ T3600] EXT4-fs error (device loop1): ext4_evict_inode:301: inode #15: comm syz.1.32: mark_inode_dirty error
[   33.005723][ T3600] EXT4-fs (loop1): 1 orphan inode deleted
[   33.032515][ T3600] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[   33.126809][ T3600] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   33.159404][ T3623] netlink: 96 bytes leftover after parsing attributes in process `syz.3.41'.
[   33.220460][ T3627] netlink: 'syz.1.43': attribute type 2 has an invalid length.
[   33.228094][ T3627] netlink: 16174 bytes leftover after parsing attributes in process `syz.1.43'.
[   33.242200][ T3627] loop1: detected capacity change from 0 to 512
[   33.252557][ T3627] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[   33.268355][ T3627] EXT4-fs (loop1): warning: maximal mount count reached, running e2fsck is recommended
[   33.280406][ T3627] EXT4-fs error (device loop1): ext4_orphan_get:1391: comm syz.1.43: inode #15: comm syz.1.43: iget: illegal inode #
[   33.293056][ T3627] EXT4-fs (loop1): Remounting filesystem read-only
[   33.300274][ T3627] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   33.331611][ T3627] syz.1.43 (3627) used greatest stack depth: 10600 bytes left
[   33.339500][ T3635] loop3: detected capacity change from 0 to 8192
[   33.380267][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   33.430313][ T3646] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   33.499185][ T3652] netlink: 'syz.1.54': attribute type 2 has an invalid length.
[   33.506909][ T3652] netlink: 16174 bytes leftover after parsing attributes in process `syz.1.54'.
[   33.521436][ T3652] loop1: detected capacity change from 0 to 512
[   33.533374][ T3652] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[   33.549059][ T3652] EXT4-fs (loop1): warning: maximal mount count reached, running e2fsck is recommended
[   33.563303][ T3652] EXT4-fs error (device loop1): ext4_orphan_get:1391: comm syz.1.54: inode #15: comm syz.1.54: iget: illegal inode #
[   33.576218][ T3652] EXT4-fs (loop1): Remounting filesystem read-only
[   33.583401][ T3652] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   33.601758][ T3656] hub 6-0:1.0: USB hub found
[   33.606899][ T3656] hub 6-0:1.0: 8 ports detected
[   33.613685][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   33.714337][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   33.944327][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   33.994681][ T3702] loop0: detected capacity change from 0 to 512
[   34.052788][ T3704] loop1: detected capacity change from 0 to 512
[   34.064917][ T3702] ext4: Unknown parameter 'fowner>00000000000000000000'
[   34.121989][ T3704] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   34.134613][ T3704] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   34.404043][ T3712] FAULT_INJECTION: forcing a failure.
[   34.404043][ T3712] name failslab, interval 1, probability 0, space 0, times 0
[   34.416797][ T3712] CPU: 1 UID: 0 PID: 3712 Comm: syz.4.70 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   34.416829][ T3712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   34.416843][ T3712] Call Trace:
[   34.416851][ T3712]  <TASK>
[   34.416861][ T3712]  __dump_stack+0x1d/0x30
[   34.416932][ T3712]  dump_stack_lvl+0xe8/0x140
[   34.416957][ T3712]  dump_stack+0x15/0x1b
[   34.417042][ T3712]  should_fail_ex+0x265/0x280
[   34.417152][ T3712]  should_failslab+0x8c/0xb0
[   34.417182][ T3712]  __kmalloc_noprof+0xa5/0x590
[   34.417203][ T3712]  ? ethnl_perphy_start+0xb1/0x390
[   34.417307][ T3712]  ethnl_perphy_start+0xb1/0x390
[   34.417339][ T3712]  ? __pfx_ethnl_perphy_start+0x10/0x10
[   34.417364][ T3712]  genl_start+0x2e3/0x390
[   34.417415][ T3712]  __netlink_dump_start+0x334/0x520
[   34.417445][ T3712]  genl_family_rcv_msg_dumpit+0x115/0x180
[   34.417487][ T3712]  ? __pfx_genl_start+0x10/0x10
[   34.417594][ T3712]  ? __pfx_genl_dumpit+0x10/0x10
[   34.417623][ T3712]  ? __pfx_genl_done+0x10/0x10
[   34.417658][ T3712]  genl_rcv_msg+0x3f0/0x460
[   34.417749][ T3712]  ? __pfx_ethnl_perphy_start+0x10/0x10
[   34.417851][ T3712]  ? __pfx_ethnl_perphy_dumpit+0x10/0x10
[   34.417876][ T3712]  ? __pfx_ethnl_perphy_done+0x10/0x10
[   34.417906][ T3712]  netlink_rcv_skb+0x123/0x220
[   34.417980][ T3712]  ? __pfx_genl_rcv_msg+0x10/0x10
[   34.418075][ T3712]  genl_rcv+0x28/0x40
[   34.418168][ T3712]  netlink_unicast+0x5c0/0x690
[   34.418202][ T3712]  netlink_sendmsg+0x58b/0x6b0
[   34.418239][ T3712]  ? __pfx_netlink_sendmsg+0x10/0x10
[   34.418264][ T3712]  __sock_sendmsg+0x145/0x180
[   34.418299][ T3712]  ____sys_sendmsg+0x31e/0x4a0
[   34.418368][ T3712]  ___sys_sendmsg+0x17b/0x1d0
[   34.418403][ T3712]  __x64_sys_sendmsg+0xd4/0x160
[   34.418526][ T3712]  x64_sys_call+0x17ba/0x3000
[   34.418552][ T3712]  do_syscall_64+0xd8/0x2a0
[   34.418584][ T3712]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   34.418680][ T3712] RIP: 0033:0x7fb0489df749
[   34.418695][ T3712] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   34.418712][ T3712] RSP: 002b:00007fb04743f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   34.418736][ T3712] RAX: ffffffffffffffda RBX: 00007fb048c35fa0 RCX: 00007fb0489df749
[   34.418790][ T3712] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000006
[   34.418805][ T3712] RBP: 00007fb04743f090 R08: 0000000000000000 R09: 0000000000000000
[   34.418832][ T3712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   34.418844][ T3712] R13: 00007fb048c36038 R14: 00007fb048c35fa0 R15: 00007ffe9ade8af8
[   34.418860][ T3712]  </TASK>
[   34.721301][ T3704] syz.1.64 (3704) used greatest stack depth: 10504 bytes left
[   34.769582][ T3714] netlink: 20 bytes leftover after parsing attributes in process `syz.0.71'.
[   34.932818][ T3688] chnl_net:caif_netlink_parms(): no params data found
[   35.001560][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   35.033829][ T3729] syz.3.75: attempt to access beyond end of device
[   35.033829][ T3729] loop3: rw=2049, sector=145, nr_sectors = 3 limit=128
[   35.103902][ T3729] program syz.3.75 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   35.118858][ T3737] netlink: 8 bytes leftover after parsing attributes in process `syz.0.77'.
[   35.132494][ T3737] netlink: 8 bytes leftover after parsing attributes in process `syz.0.77'.
[   35.198651][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   35.215755][ T3742] netlink: 'syz.4.80': attribute type 2 has an invalid length.
[   35.223413][ T3742] netlink: 16174 bytes leftover after parsing attributes in process `syz.4.80'.
[   35.296980][ T3688] bridge0: port 1(bridge_slave_0) entered blocking state
[   35.304089][ T3688] bridge0: port 1(bridge_slave_0) entered disabled state
[   35.342832][ T3750] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[   35.369084][ T3688] bridge_slave_0: entered allmulticast mode
[   35.381843][ T3750] EXT4-fs (loop4): warning: maximal mount count reached, running e2fsck is recommended
[   35.393879][ T3688] bridge_slave_0: entered promiscuous mode
[   35.437614][ T3688] bridge0: port 2(bridge_slave_1) entered blocking state
[   35.444768][ T3688] bridge0: port 2(bridge_slave_1) entered disabled state
[   35.458904][ T3750] EXT4-fs error (device loop4): ext4_orphan_get:1391: comm syz.4.80: inode #15: comm syz.4.80: iget: illegal inode #
[   35.522261][ T3688] bridge_slave_1: entered allmulticast mode
[   35.528467][ T3750] EXT4-fs (loop4): Remounting filesystem read-only
[   35.560541][ T3688] bridge_slave_1: entered promiscuous mode
[   35.567770][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.577274][ T3750] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   35.605993][   T12] bridge_slave_1: left allmulticast mode
[   35.611716][   T12] bridge_slave_1: left promiscuous mode
[   35.617648][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   35.642252][   T12] bridge_slave_0: left allmulticast mode
[   35.648012][   T12] bridge_slave_0: left promiscuous mode
[   35.653832][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   35.729177][ T3783] syz.1.89: attempt to access beyond end of device
[   35.729177][ T3783] loop1: rw=2049, sector=145, nr_sectors = 3 limit=128
[   35.742962][ T3783] program syz.1.89 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   35.770281][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   35.781582][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   35.791313][   T12] bond0 (unregistering): Released all slaves
[   35.803486][ T3787] hub 6-0:1.0: USB hub found
[   35.808647][ T3787] hub 6-0:1.0: 8 ports detected
[   35.835026][ T3742] syz.4.80 (3742) used greatest stack depth: 9752 bytes left
[   35.858347][ T3688] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   35.872229][   T12] hsr_slave_0: left promiscuous mode
[   35.890663][   T12] hsr_slave_1: left promiscuous mode
[   35.896867][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   35.904278][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   35.911833][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.912089][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   35.928278][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   35.940148][   T12] veth1_macvtap: left promiscuous mode
[   35.945963][   T12] veth0_macvtap: left promiscuous mode
[   35.951909][   T12] veth1_vlan: left promiscuous mode
[   35.958260][   T12] veth0_vlan: left promiscuous mode
[   35.961771][   T29] kauditd_printk_skb: 384 callbacks suppressed
[   35.961786][   T29] audit: type=1326 audit(1765006943.959:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3792 comm="syz.0.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5542e6f749 code=0x7ffc0000
[   35.999205][   T29] audit: type=1326 audit(1765006943.989:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3792 comm="syz.0.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f5542e6f749 code=0x7ffc0000
[   36.022482][   T29] audit: type=1326 audit(1765006943.989:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3792 comm="syz.0.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5542e6f749 code=0x7ffc0000
[   36.045680][   T29] audit: type=1326 audit(1765006943.989:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3792 comm="syz.0.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5542e6f749 code=0x7ffc0000
[   36.100626][ T3546]  loop1: p1 p2 p3 p4
[   36.104779][ T3546] loop1: p1 size 3523149824 extends beyond EOD, truncated
[   36.112171][   T12] team0 (unregistering): Port device team_slave_1 removed
[   36.122063][ T3546] loop1: p2 start 4293394688 is beyond EOD, truncated
[   36.128940][ T3546] loop1: p3 start 150994944 is beyond EOD, truncated
[   36.135637][ T3546] loop1: p4 size 50331648 extends beyond EOD, truncated
[   36.142934][   T12] team0 (unregistering): Port device team_slave_0 removed
[   36.152074][ T3795]  loop1: p1 p2 p3 p4
[   36.156148][ T3795] loop1: p1 size 3523149824 extends beyond EOD, truncated
[   36.164252][ T3795] loop1: p2 start 4293394688 is beyond EOD, truncated
[   36.171168][ T3795] loop1: p3 start 150994944 is beyond EOD, truncated
[   36.178007][ T3795] loop1: p4 size 50331648 extends beyond EOD, truncated
[   36.209529][ T3804] netlink: 'syz.4.95': attribute type 4 has an invalid length.
[   36.219748][   T29] audit: type=1326 audit(1765006944.219:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3803 comm="syz.4.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0489df749 code=0x7ffc0000
[   36.249764][ T3688] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   36.257650][   T29] audit: type=1326 audit(1765006944.239:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3803 comm="syz.4.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fb0489df749 code=0x7ffc0000
[   36.282088][   T29] audit: type=1326 audit(1765006944.239:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3803 comm="syz.4.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0489df749 code=0x7ffc0000
[   36.305045][ T3546] udevd[3546]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[   36.305571][   T29] audit: type=1326 audit(1765006944.239:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3803 comm="syz.4.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7fb0489df749 code=0x7ffc0000
[   36.338040][   T29] audit: type=1326 audit(1765006944.239:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3803 comm="syz.4.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0489df749 code=0x7ffc0000
[   36.361403][   T29] audit: type=1326 audit(1765006944.239:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3803 comm="syz.4.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb0489df749 code=0x7ffc0000
[   36.390143][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[   36.413131][ T3546] udevd[3546]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[   36.413155][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[   36.437403][ T3811] FAT-fs (loop0): count of clusters too big (178174)
[   36.444157][ T3811] FAT-fs (loop0): Can't find a valid FAT filesystem
[   36.461653][ T3688] team0: Port device team_slave_0 added
[   36.468389][ T3688] team0: Port device team_slave_1 added
[   36.528468][ T3817] syz.1.99: attempt to access beyond end of device
[   36.528468][ T3817] loop1: rw=2049, sector=145, nr_sectors = 3 limit=128
[   36.551784][ T3688] batman_adv: batadv0: Adding interface: batadv_slave_0
[   36.558854][ T3688] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   36.568512][ T3817] program syz.1.99 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   36.584875][ T3688] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   36.688093][ T3688] batman_adv: batadv0: Adding interface: batadv_slave_1
[   36.695309][ T3688] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   36.721458][ T3688] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   36.783142][ T3688] hsr_slave_0: entered promiscuous mode
[   36.789484][ T3688] hsr_slave_1: entered promiscuous mode
[   36.795657][ T3688] debugfs: 'hsr0' already exists in 'hsr'
[   36.801539][ T3688] Cannot create hsr debugfs directory
[   36.876287][ T3835] hub 6-0:1.0: USB hub found
[   36.892802][ T3850] netlink: 'syz.0.101': attribute type 2 has an invalid length.
[   36.899054][ T3835] hub 6-0:1.0: 8 ports detected
[   36.900516][ T3850] __nla_validate_parse: 4 callbacks suppressed
[   36.900548][ T3850] netlink: 16174 bytes leftover after parsing attributes in process `syz.0.101'.
[   36.943593][ T3850] set_capacity_and_notify: 6 callbacks suppressed
[   36.943611][ T3850] loop0: detected capacity change from 0 to 512
[   36.976621][ T3850] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[   37.006722][ T3850] EXT4-fs (loop0): warning: maximal mount count reached, running e2fsck is recommended
[   37.018557][ T3850] EXT4-fs error (device loop0): ext4_orphan_get:1391: comm syz.0.101: inode #15: comm syz.0.101: iget: illegal inode #
[   37.026733][ T3865] netlink: 76 bytes leftover after parsing attributes in process `syz.1.104'.
[   37.044304][ T3850] EXT4-fs (loop0): Remounting filesystem read-only
[   37.052322][ T3850] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   37.079395][ T3868] loop4: detected capacity change from 0 to 512
[   37.090395][ T3868] EXT4-fs: Ignoring removed bh option
[   37.099967][ T3868] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[   37.121906][ T3868] EXT4-fs (loop4): revision level too high, forcing read-only mode
[   37.129922][ T3868] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=884ec128, mo2=0002]
[   37.185059][ T3868] EXT4-fs (loop4): orphan cleanup on readonly fs
[   37.191584][ T3868] EXT4-fs error (device loop4): ext4_quota_enable:7173: comm syz.4.106: Bad quota inum: 4294967291, type: 0
[   37.203480][ T3323] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.207361][ T3688] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   37.242489][ T3868] EXT4-fs (loop4): Remounting filesystem read-only
[   37.249127][ T3868] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-117, ino=4294967291). Please run e2fsck to fix.
[   37.264658][ T3868] EXT4-fs (loop4): Cannot turn on quotas: error -117
[   37.276958][ T3688] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   37.286653][ T3688] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   37.293529][ T3868] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   37.309691][ T3688] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   37.336228][ T3898] loop1: detected capacity change from 0 to 512
[   37.351583][ T3898] EXT4-fs: Ignoring removed bh option
[   37.370531][ T3900] netlink: 8 bytes leftover after parsing attributes in process `syz.3.111'.
[   37.380306][ T3898] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[   37.395123][ T3900] netlink: 8 bytes leftover after parsing attributes in process `syz.3.111'.
[   37.406664][ T3898] EXT4-fs (loop1): revision level too high, forcing read-only mode
[   37.414616][ T3898] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=884ec128, mo2=0002]
[   37.428386][ T3900] netlink: 8 bytes leftover after parsing attributes in process `syz.3.111'.
[   37.439150][ T3898] EXT4-fs (loop1): orphan cleanup on readonly fs
[   37.445519][ T3898] EXT4-fs error (device loop1): ext4_quota_enable:7173: comm syz.1.110: Bad quota inum: 4294967291, type: 0
[   37.446958][ T3900] netlink: 8 bytes leftover after parsing attributes in process `syz.3.111'.
[   37.480113][ T3688] 8021q: adding VLAN 0 to HW filter on device bond0
[   37.490945][ T3688] 8021q: adding VLAN 0 to HW filter on device team0
[   37.505672][ T2520] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.512778][ T2520] bridge0: port 1(bridge_slave_0) entered forwarding state
[   37.528148][ T3898] EXT4-fs (loop1): Remounting filesystem read-only
[   37.534741][ T3898] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-117, ino=4294967291). Please run e2fsck to fix.
[   37.550319][ T3898] EXT4-fs (loop1): Cannot turn on quotas: error -117
[   37.557847][ T3898] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   37.558666][ T2520] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.577313][ T2520] bridge0: port 2(bridge_slave_1) entered forwarding state
[   37.721631][ T3920] hub 6-0:1.0: USB hub found
[   37.727482][ T3920] hub 6-0:1.0: 8 ports detected
[   37.811490][ T3688] 8021q: adding VLAN 0 to HW filter on device batadv0
[   37.960885][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.976113][ T3946] loop3: detected capacity change from 0 to 512
[   37.991052][ T3946] EXT4-fs: test_dummy_encryption option not supported
[   38.035290][ T3688] veth0_vlan: entered promiscuous mode
[   38.044262][ T3938] IPVS: lc: FWM 3 0x00000003 - no destination available
[   38.051506][    C0] IPVS: lc: FWM 3 0x00000003 - no destination available
[   38.060436][ T3404] IPVS: starting estimator thread 0...
[   38.060472][ T3952] netlink: 'syz.4.117': attribute type 2 has an invalid length.
[   38.073755][ T3952] netlink: 16174 bytes leftover after parsing attributes in process `syz.4.117'.
[   38.092498][ T3688] veth1_vlan: entered promiscuous mode
[   38.116566][ T3952] loop4: detected capacity change from 0 to 512
[   38.123559][ T3688] veth0_macvtap: entered promiscuous mode
[   38.131680][ T3688] veth1_macvtap: entered promiscuous mode
[   38.141294][ T3952] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[   38.150485][ T3954] IPVS: using max 2544 ests per chain, 127200 per kthread
[   38.170817][ T3952] EXT4-fs (loop4): warning: maximal mount count reached, running e2fsck is recommended
[   38.181347][ T3946] loop3: detected capacity change from 0 to 2048
[   38.199616][ T3952] EXT4-fs error (device loop4): ext4_orphan_get:1391: comm syz.4.117: inode #15: comm syz.4.117: iget: illegal inode #
[   38.201002][ T3688] batman_adv: batadv0: Interface activated: batadv_slave_0
[   38.228041][ T3952] EXT4-fs (loop4): Remounting filesystem read-only
[   38.246821][ T3946] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   38.267863][ T3946] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   38.279878][ T3688] batman_adv: batadv0: Interface activated: batadv_slave_1
[   38.289258][ T3952] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   38.302093][ T3941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   38.317389][  T384] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   38.326145][  T384] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   38.359109][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.373262][ T3941] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   38.383708][  T384] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   38.412744][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.417133][  T384] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   38.461399][ T3967] netlink: 20 bytes leftover after parsing attributes in process `syz.4.121'.
[   38.477956][ T3969] loop0: detected capacity change from 0 to 128
[   38.520759][ T3969] syz.0.122: attempt to access beyond end of device
[   38.520759][ T3969] loop0: rw=2049, sector=145, nr_sectors = 3 limit=128
[   38.549965][ T3979] loop5: detected capacity change from 0 to 512
[   38.561950][ T3969] program syz.0.122 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   38.565738][ T3979] EXT4-fs: Ignoring removed bh option
[   38.581943][ T3979] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[   38.600535][ T3983] 
: renamed from bond_slave_0 (while UP)
[   38.603418][ T3979] EXT4-fs (loop5): revision level too high, forcing read-only mode
[   38.614411][ T3979] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=884ec128, mo2=0002]
[   38.631269][ T3979] EXT4-fs (loop5): orphan cleanup on readonly fs
[   38.637740][ T3979] EXT4-fs error (device loop5): ext4_quota_enable:7173: comm syz.5.126: Bad quota inum: 4294967291, type: 0
[   38.649748][ T3979] EXT4-fs (loop5): Remounting filesystem read-only
[   38.656276][ T3979] EXT4-fs warning (device loop5): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-117, ino=4294967291). Please run e2fsck to fix.
[   38.671908][ T3979] EXT4-fs (loop5): Cannot turn on quotas: error -117
[   38.679265][ T3979] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   38.707714][ T3988] Illegal XDP return value 1275209793 on prog  (id 70) dev N/A, expect packet loss!
[   38.714029][ T3983] syzkaller0: entered promiscuous mode
[   38.722715][ T3983] syzkaller0: entered allmulticast mode
[   38.732288][ T3990] netlink: 232 bytes leftover after parsing attributes in process `syz.4.131'.
[   38.779637][ T3990] loop4: detected capacity change from 0 to 512
[   38.807984][ T3990] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   38.857480][ T3990] EXT4-fs (loop4): revision level too high, forcing read-only mode
[   38.875724][ T3990] EXT4-fs (loop4): orphan cleanup on readonly fs
[   38.897458][ T3990] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #16: comm syz.4.131: corrupted inode contents
[   38.922744][ T3990] EXT4-fs (loop4): Remounting filesystem read-only
[   38.930504][ T3991] x_tables: ip6_tables: mh match: only valid for protocol 135
[   39.001681][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.032297][ T3990] EXT4-fs (loop4): 1 truncate cleaned up
[   39.038237][  T384] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   39.048797][  T384] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   39.060060][  T384] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started
[   39.070944][ T3990] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   39.085412][ T3990] netlink: 14 bytes leftover after parsing attributes in process `syz.4.131'.
[   39.095235][ T3990] hsr_slave_0: left promiscuous mode
[   39.101337][ T3990] hsr_slave_1: left promiscuous mode
[   39.192306][ T3999] Zero length message leads to an empty skb
[   39.227351][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.237358][ T3999] hub 9-0:1.0: USB hub found
[   39.246697][ T3999] hub 9-0:1.0: 8 ports detected
[   39.459722][ T3688] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.552846][ T4011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   39.554679][ T4009] bridge1: the hash_elasticity option has been deprecated and is always 16
[   39.582604][ T4011] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   39.655513][ T4013] syzkaller0: entered promiscuous mode
[   39.661056][ T4013] syzkaller0: entered allmulticast mode
[   39.722565][ T4015] loop5: detected capacity change from 0 to 128
[   39.807877][ T4020] FAULT_INJECTION: forcing a failure.
[   39.807877][ T4020] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[   39.814140][ T4021] syz.5.137: attempt to access beyond end of device
[   39.814140][ T4021] loop5: rw=2049, sector=153, nr_sectors = 8 limit=128
[   39.821249][ T4020] CPU: 1 UID: 0 PID: 4020 Comm: syz.0.139 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   39.821346][ T4020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   39.821359][ T4020] Call Trace:
[   39.821366][ T4020]  <TASK>
[   39.821374][ T4020]  __dump_stack+0x1d/0x30
[   39.821434][ T4020]  dump_stack_lvl+0xe8/0x140
[   39.821458][ T4020]  dump_stack+0x15/0x1b
[   39.821477][ T4020]  should_fail_ex+0x265/0x280
[   39.821527][ T4020]  should_fail_alloc_page+0xf2/0x100
[   39.821627][ T4020]  __alloc_frozen_pages_noprof+0xff/0x360
[   39.821655][ T4020]  alloc_pages_mpol+0xb3/0x260
[   39.821742][ T4020]  alloc_pages_noprof+0x90/0x130
[   39.821768][ T4020]  pgd_alloc+0x40/0x290
[   39.821799][ T4020]  mm_init+0x382/0x650
[   39.821871][ T4020]  mm_alloc+0x81/0xa0
[   39.821924][ T4020]  alloc_bprm+0x20e/0x350
[   39.822007][ T4020]  do_execveat_common+0x12e/0x750
[   39.822044][ T4020]  ? getname_flags+0x154/0x3b0
[   39.822067][ T4020]  __x64_sys_execveat+0x73/0x90
[   39.822149][ T4020]  x64_sys_call+0x1c0e/0x3000
[   39.822173][ T4020]  do_syscall_64+0xd8/0x2a0
[   39.822275][ T4020]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   39.822297][ T4020] RIP: 0033:0x7f5542e6f749
[   39.822314][ T4020] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   39.822332][ T4020] RSP: 002b:00007f55418d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142
[   39.822433][ T4020] RAX: ffffffffffffffda RBX: 00007f55430c5fa0 RCX: 00007f5542e6f749
[   39.822447][ T4020] RDX: 0000000000000000 RSI: 0000200000001400 RDI: ffffffffffffff9c
[   39.822466][ T4020] RBP: 00007f55418d7090 R08: 0000000000000000 R09: 0000000000000000
[   39.822479][ T4020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   39.822492][ T4020] R13: 00007f55430c6038 R14: 00007f55430c5fa0 R15: 00007ffcc4bc2e38
[   39.822510][ T4020]  </TASK>
[   39.925351][ T4023] syz.0.140: attempt to access beyond end of device
[   39.925351][ T4023] loop0: rw=2049, sector=145, nr_sectors = 3 limit=128
[   39.946774][ T4021] syz.5.137: attempt to access beyond end of device
[   39.946774][ T4021] loop5: rw=2049, sector=169, nr_sectors = 8 limit=128
[   39.951493][ T4023] program syz.0.140 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   39.981438][ T4021] syz.5.137: attempt to access beyond end of device
[   39.981438][ T4021] loop5: rw=2049, sector=185, nr_sectors = 8 limit=128
[   40.080646][ T4021] syz.5.137: attempt to access beyond end of device
[   40.080646][ T4021] loop5: rw=2049, sector=201, nr_sectors = 8 limit=128
[   40.133747][ T4021] syz.5.137: attempt to access beyond end of device
[   40.133747][ T4021] loop5: rw=2049, sector=217, nr_sectors = 8 limit=128
[   40.188394][ T4021] syz.5.137: attempt to access beyond end of device
[   40.188394][ T4021] loop5: rw=2049, sector=233, nr_sectors = 8 limit=128
[   40.197374][ T4029] infiniband !yz!: set active
[   40.206484][ T4029] infiniband !yz!: added team_slave_0
[   40.223969][ T4032] netlink: 'syz.0.143': attribute type 13 has an invalid length.
[   40.233590][ T4021] syz.5.137: attempt to access beyond end of device
[   40.233590][ T4021] loop5: rw=2049, sector=249, nr_sectors = 8 limit=128
[   40.252949][ T4021] syz.5.137: attempt to access beyond end of device
[   40.252949][ T4021] loop5: rw=2049, sector=265, nr_sectors = 8 limit=128
[   40.280778][ T4029] RDS/IB: !yz!: added
[   40.313600][ T4029] smc: adding ib device !yz! with port count 1
[   40.362279][ T4029] smc:    ib device !yz! port 1 has no pnetid
[   40.383134][ T4040] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[   40.414968][ T4040] EXT4-fs (loop3): warning: maximal mount count reached, running e2fsck is recommended
[   40.459574][ T4040] EXT4-fs error (device loop3): ext4_orphan_get:1391: comm syz.3.145: inode #15: comm syz.3.145: iget: illegal inode #
[   40.505153][ T4040] EXT4-fs (loop3): Remounting filesystem read-only
[   40.505305][ T4032] bridge0: port 2(bridge_slave_1) entered disabled state
[   40.512324][ T4040] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   40.519322][ T4032] bridge0: port 1(bridge_slave_0) entered disabled state
[   40.631605][ T4032] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   40.648949][ T4032] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   40.764841][ T4036] netlink: 'syz.3.145': attribute type 2 has an invalid length.
[   40.788189][   T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   40.807094][ T1801] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   40.817349][ T1801] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   40.826700][ T1801] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   40.827004][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.877857][ T4054] hub 6-0:1.0: USB hub found
[   40.885818][ T4059] EXT4-fs: Ignoring removed bh option
[   40.895374][ T4054] hub 6-0:1.0: 8 ports detected
[   40.909514][ T4059] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[   40.965383][ T4059] EXT4-fs (loop3): revision level too high, forcing read-only mode
[   40.973484][ T4059] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=884ec128, mo2=0002]
[   40.981820][ T4059] EXT4-fs (loop3): orphan cleanup on readonly fs
[   40.988306][ T4059] EXT4-fs error (device loop3): ext4_quota_enable:7173: comm syz.3.151: Bad quota inum: 4294967291, type: 0
[   41.003135][ T4059] EXT4-fs (loop3): Remounting filesystem read-only
[   41.009495][   T29] kauditd_printk_skb: 377 callbacks suppressed
[   41.009511][   T29] audit: type=1400 audit(1765006949.009:865): avc:  denied  { name_connect } for  pid=4064 comm="syz.5.154" dest=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1
[   41.010525][ T4059] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-117, ino=4294967291). Please run e2fsck to fix.
[   41.053783][ T4059] EXT4-fs (loop3): Cannot turn on quotas: error -117
[   41.061100][ T4059] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   41.085215][   T29] audit: type=1326 audit(1765006949.079:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4058 comm="syz.3.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a863af749 code=0x7ffc0000
[   41.109472][   T29] audit: type=1326 audit(1765006949.079:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4058 comm="syz.3.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f9a863af749 code=0x7ffc0000
[   41.132849][   T29] audit: type=1326 audit(1765006949.079:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4058 comm="syz.3.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a863af749 code=0x7ffc0000
[   41.156292][   T29] audit: type=1326 audit(1765006949.079:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4058 comm="syz.3.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9a863af749 code=0x7ffc0000
[   41.276611][ T4072] af_packet: tpacket_rcv: packet too big, clamped from 2916 to 4294967286. macoff=82
[   41.296443][   T29] audit: type=1400 audit(1765006949.269:870): avc:  denied  { accept } for  pid=4070 comm="syz.5.156" lport=54706 faddr=fc02:: fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   41.416603][   T29] audit: type=1326 audit(1765006949.409:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4058 comm="syz.3.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a863af749 code=0x7ffc0000
[   41.491102][   T29] audit: type=1326 audit(1765006949.449:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4058 comm="syz.3.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a863af749 code=0x7ffc0000
[   41.539938][   T29] audit: type=1326 audit(1765006949.539:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4058 comm="syz.3.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7f9a863af749 code=0x7ffc0000
[   41.613997][   T29] audit: type=1326 audit(1765006949.569:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4058 comm="syz.3.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a863af749 code=0x7ffc0000
[   41.643748][ T4076] IPVS: lc: FWM 3 0x00000003 - no destination available
[   41.800324][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.957326][ T4093] set_capacity_and_notify: 3 callbacks suppressed
[   41.957343][ T4093] loop0: detected capacity change from 0 to 512
[   41.984730][ T4095] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   42.007854][ T4093] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   42.031861][ T4093] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.164: inode has both inline data and extents flags
[   42.046666][ T4093] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.164: couldn't read orphan inode 15 (err -117)
[   42.059746][ T4093] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   42.087154][ T3323] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.111296][ T4095] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   42.133360][ T4086] loop3: detected capacity change from 0 to 512
[   42.183468][ T4106] loop0: detected capacity change from 0 to 512
[   42.199321][ T4095] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   42.219155][ T4106] EXT4-fs: Ignoring removed bh option
[   42.227136][ T4106] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[   42.251619][ T4106] EXT4-fs (loop0): revision level too high, forcing read-only mode
[   42.259644][ T4106] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=884ec128, mo2=0002]
[   42.266090][ T4086] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   42.282278][ T4106] EXT4-fs (loop0): orphan cleanup on readonly fs
[   42.288697][ T4106] EXT4-fs error (device loop0): ext4_quota_enable:7173: comm syz.0.166: Bad quota inum: 4294967291, type: 0
[   42.308416][ T4111] loop5: detected capacity change from 0 to 512
[   42.318868][ T4106] EXT4-fs (loop0): Remounting filesystem read-only
[   42.325423][ T4106] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-117, ino=4294967291). Please run e2fsck to fix.
[   42.331175][ T4086] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   42.340916][ T4106] EXT4-fs (loop0): Cannot turn on quotas: error -117
[   42.341951][ T4106] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   42.407496][ T4086] EXT4-fs (loop3): 1 truncate cleaned up
[   42.439544][ T4095] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   42.476064][ T4119] __nla_validate_parse: 2 callbacks suppressed
[   42.476081][ T4119] netlink: 20 bytes leftover after parsing attributes in process `syz.1.171'.
[   42.513179][ T4086] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   42.575799][  T369] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   42.586015][ T4125] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   42.611267][  T369] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   42.664537][ T4134] loop4: detected capacity change from 0 to 128
[   42.710102][   T53] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   42.723892][ T4134] program syz.4.177 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   42.733302][ T4126] loop5: detected capacity change from 0 to 256
[   42.748262][   T53] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   42.838861][ T3323] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.874530][ T4139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   42.902825][ T4139] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   43.034619][ T3489] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x4
[   43.042403][ T3489] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x2
[   43.058275][ T3489] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x3
[   43.074600][ T3489] hid-generic 0000:3000000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[   43.151344][ T4150] fido_id[4150]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   43.194292][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.245218][ T4158] syzkaller0: entered promiscuous mode
[   43.250786][ T4158] syzkaller0: entered allmulticast mode
[   43.256862][ T4157] loop3: detected capacity change from 0 to 8192
[   43.296988][ T4157]  loop3: p1 p2 p3 p4
[   43.301206][ T4157] loop3: p1 size 3523149824 extends beyond EOD, truncated
[   43.309488][ T4157] loop3: p2 start 4293394688 is beyond EOD, truncated
[   43.316356][ T4157] loop3: p3 start 150994944 is beyond EOD, truncated
[   43.323134][ T4157] loop3: p4 size 50331648 extends beyond EOD, truncated
[   43.363654][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[   43.375229][ T3546] udevd[3546]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[   43.669629][ T4182] netlink: 8 bytes leftover after parsing attributes in process `syz.5.196'.
[   43.679580][ T4182] netlink: 8 bytes leftover after parsing attributes in process `syz.5.196'.
[   43.685153][ T4186] loop4: detected capacity change from 0 to 128
[   43.692175][ T4182] netlink: 8 bytes leftover after parsing attributes in process `syz.5.196'.
[   43.707521][ T4182] netlink: 8 bytes leftover after parsing attributes in process `syz.5.196'.
[   43.738770][ T4188] netlink: 232 bytes leftover after parsing attributes in process `syz.3.197'.
[   43.759402][ T4186] bio_check_eod: 1 callbacks suppressed
[   43.759417][ T4186] syz.4.198: attempt to access beyond end of device
[   43.759417][ T4186] loop4: rw=2049, sector=145, nr_sectors = 3 limit=128
[   43.788424][ T4186] program syz.4.198 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   43.831311][ T4188] loop3: detected capacity change from 0 to 512
[   43.897384][ T4188] EXT4-fs (loop3): revision level too high, forcing read-only mode
[   43.916450][ T4209] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   43.925913][ T4188] EXT4-fs (loop3): orphan cleanup on readonly fs
[   43.934451][ T4188] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm syz.3.197: corrupted inode contents
[   43.947094][ T4188] EXT4-fs (loop3): Remounting filesystem read-only
[   43.953771][ T4188] EXT4-fs (loop3): 1 truncate cleaned up
[   43.961280][   T52] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   43.971888][   T52] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   43.982841][   T52] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started
[   43.993655][ T4188] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   44.018821][ T4188] netlink: 4 bytes leftover after parsing attributes in process `syz.3.197'.
[   44.028193][ T4188] netlink: 32 bytes leftover after parsing attributes in process `syz.3.197'.
[   44.038948][ T4188] netlink: 14 bytes leftover after parsing attributes in process `syz.3.197'.
[   44.048319][ T4188] hsr_slave_0: left promiscuous mode
[   44.054509][ T4188] hsr_slave_1: left promiscuous mode
[   44.067202][ T4214] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   44.387845][ T4219] netlink: 20 bytes leftover after parsing attributes in process `syz.0.208'.
[   44.694703][ T4229] loop0: detected capacity change from 0 to 512
[   44.709360][ T4229] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   44.722056][ T4229] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   45.978033][ T4254] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   46.027895][ T4254] EXT4-fs (loop1): 1 truncate cleaned up
[   46.046038][ T4254] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   46.112181][ T4264] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   46.323039][ T3323] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.390809][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.410766][   T29] kauditd_printk_skb: 235 callbacks suppressed
[   46.410783][   T29] audit: type=1326 audit(1765006954.409:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4268 comm="syz.0.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5542e6f749 code=0x7ffc0000
[   46.419860][ T4269] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   46.470161][   T29] audit: type=1326 audit(1765006954.409:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4268 comm="syz.0.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5542e6f749 code=0x7ffc0000
[   46.493643][   T29] audit: type=1326 audit(1765006954.409:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4268 comm="syz.0.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5542e6f749 code=0x7ffc0000
[   46.517299][   T29] audit: type=1326 audit(1765006954.409:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4268 comm="syz.0.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5542e6f749 code=0x7ffc0000
[   46.530824][ T4269] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   46.540885][   T29] audit: type=1326 audit(1765006954.409:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4268 comm="syz.0.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5542e6f749 code=0x7ffc0000
[   46.553709][ T4269] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   46.576490][   T29] audit: type=1326 audit(1765006954.409:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4268 comm="syz.0.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5542e6f749 code=0x7ffc0000
[   46.610325][   T29] audit: type=1326 audit(1765006954.409:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4268 comm="syz.0.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5542e6f749 code=0x7ffc0000
[   46.633920][   T29] audit: type=1326 audit(1765006954.409:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4268 comm="syz.0.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5542e6f749 code=0x7ffc0000
[   46.657408][   T29] audit: type=1326 audit(1765006954.409:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4268 comm="syz.0.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5542e6f749 code=0x7ffc0000
[   46.680914][   T29] audit: type=1326 audit(1765006954.409:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4268 comm="syz.0.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5542e6f749 code=0x7ffc0000
[   46.863763][ T4278] netlink: 'syz.1.229': attribute type 2 has an invalid length.
[   46.875820][ T4278] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[   46.892181][ T4278] EXT4-fs (loop1): warning: maximal mount count reached, running e2fsck is recommended
[   46.919801][ T4278] EXT4-fs error (device loop1): ext4_orphan_get:1391: comm syz.1.229: inode #15: comm syz.1.229: iget: illegal inode #
[   46.958416][ T4278] EXT4-fs (loop1): Remounting filesystem read-only
[   46.978613][ T4278] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   47.065316][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.165574][ T3323] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.283650][ T4294] hub 6-0:1.0: USB hub found
[   47.294991][ T4294] hub 6-0:1.0: 8 ports detected
[   47.309650][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.399971][ T4306] IPVS: Error connecting to the multicast addr
[   47.567091][ T4328] set_capacity_and_notify: 3 callbacks suppressed
[   47.567110][ T4328] loop0: detected capacity change from 0 to 512
[   47.757868][ T4336] loop0: detected capacity change from 0 to 256
[   47.797591][ T4336] FAT-fs (loop0): count of clusters too big (178174)
[   47.804404][ T4336] FAT-fs (loop0): Can't find a valid FAT filesystem
[   47.823186][ T4339] netlink: 'syz.1.254': attribute type 1 has an invalid length.
[   47.878672][ T4336] __nla_validate_parse: 3 callbacks suppressed
[   47.878712][ T4336] netlink: 16 bytes leftover after parsing attributes in process `syz.0.253'.
[   48.081616][ T4348] netlink: 12 bytes leftover after parsing attributes in process `syz.0.253'.
[   48.161665][ T4336] bond1: (slave ip6tnl1): The slave device specified does not support setting the MAC address
[   48.234168][ T4336] bond1: (slave ip6tnl1): Error -95 calling set_mac_address
[   48.317424][ T4354] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   48.365735][ T4360] process '/newroot/58/file0' started with executable stack
[   48.532190][ T4354] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   48.709780][ T4354] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   48.763549][ T4346] loop3: detected capacity change from 0 to 512
[   48.828690][ T4398] loop1: detected capacity change from 0 to 128
[   48.877659][ T4354] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   48.913013][ T4398] syz.1.268: attempt to access beyond end of device
[   48.913013][ T4398] loop1: rw=2049, sector=145, nr_sectors = 3 limit=128
[   48.951127][ T4346] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   48.972201][ T4398] program syz.1.268 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   48.997542][ T2520] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   49.034483][ T2520] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   49.077013][ T4112] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   49.087202][  T369] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   49.102556][ T4346] EXT4-fs (loop3): 1 truncate cleaned up
[   49.117340][ T4346] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   49.733784][ T4435] loop1: detected capacity change from 0 to 8192
[   49.787471][ T3546]  loop1: p1 p2 p3 p4
[   49.791859][ T3546] loop1: p1 size 3523149824 extends beyond EOD, truncated
[   49.826727][ T3546] loop1: p2 start 4293394688 is beyond EOD, truncated
[   49.833596][ T3546] loop1: p3 start 150994944 is beyond EOD, truncated
[   49.840416][ T3546] loop1: p4 size 50331648 extends beyond EOD, truncated
[   49.902861][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.930900][ T4456] netlink: 8 bytes leftover after parsing attributes in process `syz.0.280'.
[   49.940511][ T4435]  loop1: p1 p2 p3 p4
[   49.944666][ T4435] loop1: p1 size 3523149824 extends beyond EOD, truncated
[   49.972854][ T4435] loop1: p2 start 4293394688 is beyond EOD, truncated
[   49.973222][ T4456] netlink: 8 bytes leftover after parsing attributes in process `syz.0.280'.
[   49.979727][ T4435] loop1: p3 start 150994944 is beyond EOD, truncated
[   49.995292][ T4435] loop1: p4 size 50331648 extends beyond EOD, truncated
[   50.002602][ T4456] netlink: 8 bytes leftover after parsing attributes in process `syz.0.280'.
[   50.030237][ T4471] loop3: detected capacity change from 0 to 512
[   50.047980][ T4456] netlink: 8 bytes leftover after parsing attributes in process `syz.0.280'.
[   50.072175][ T4471] EXT4-fs: Ignoring removed bh option
[   50.112953][ T4471] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[   50.130110][ T4475] loop5: detected capacity change from 0 to 1024
[   50.144644][ T4475] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   50.155636][ T4475] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[   50.173342][ T4471] EXT4-fs (loop3): revision level too high, forcing read-only mode
[   50.181333][ T4471] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=884ec128, mo2=0002]
[   50.193201][ T4475] JBD2: no valid journal superblock found
[   50.198995][ T4475] EXT4-fs (loop5): Could not load journal inode
[   50.225848][ T4471] EXT4-fs (loop3): orphan cleanup on readonly fs
[   50.232786][ T4471] EXT4-fs error (device loop3): ext4_quota_enable:7173: comm syz.3.282: Bad quota inum: 4294967291, type: 0
[   50.267616][ T4471] EXT4-fs (loop3): Remounting filesystem read-only
[   50.274172][ T4471] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-117, ino=4294967291). Please run e2fsck to fix.
[   50.289652][ T4471] EXT4-fs (loop3): Cannot turn on quotas: error -117
[   50.332296][ T4481] loop0: detected capacity change from 0 to 136
[   50.346992][ T4471] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   50.369035][ T4484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   50.387925][ T4484] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   50.417701][ T4481] iso9660: Invalid uid '0x00000000ffffffff'
[   50.471902][ T4481] loop0: detected capacity change from 0 to 1024
[   50.497495][ T4481] EXT4-fs: Ignoring removed oldalloc option
[   50.503478][ T4481] EXT4-fs: Ignoring removed bh option
[   50.509755][ T4493] loop4: detected capacity change from 0 to 512
[   50.517822][ T4493] EXT4-fs: Ignoring removed bh option
[   50.524280][ T4493] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[   50.540630][ T3546] udevd[3546]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[   50.557712][ T4481] ext4: Unknown parameter 'fsuuid'
[   50.557739][ T4491] syz.1.288: attempt to access beyond end of device
[   50.557739][ T4491] loop1: rw=2049, sector=145, nr_sectors = 3 limit=128
[   50.567594][ T4491] program syz.1.288 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   50.576905][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[   50.603969][ T4493] EXT4-fs (loop4): revision level too high, forcing read-only mode
[   50.611949][ T4493] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=884ec128, mo2=0002]
[   50.690038][ T4493] EXT4-fs (loop4): orphan cleanup on readonly fs
[   50.696542][ T4493] EXT4-fs error (device loop4): ext4_quota_enable:7173: comm syz.4.290: Bad quota inum: 4294967291, type: 0
[   50.726584][ T4493] EXT4-fs (loop4): Remounting filesystem read-only
[   50.733206][ T4493] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-117, ino=4294967291). Please run e2fsck to fix.
[   50.746910][ T4496] EXT4-fs: Ignoring removed orlov option
[   50.748725][ T4493] EXT4-fs (loop4): Cannot turn on quotas: error -117
[   50.771799][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[   50.778503][ T3546] udevd[3546]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[   50.787330][ T4493] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   50.820361][ T4496] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   51.123603][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.417142][   T29] kauditd_printk_skb: 1328 callbacks suppressed
[   51.417158][   T29] audit: type=1400 audit(1765006959.399:2442): avc:  denied  { prog_load } for  pid=4507 comm="syz.3.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   51.442536][   T29] audit: type=1400 audit(1765006959.409:2443): avc:  denied  { allowed } for  pid=4513 comm="syz.5.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[   51.461802][   T29] audit: type=1400 audit(1765006959.409:2444): avc:  denied  { create } for  pid=4513 comm="syz.5.298" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   51.483244][   T29] audit: type=1400 audit(1765006959.409:2445): avc:  denied  { bpf } for  pid=4507 comm="syz.3.295" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   51.504234][   T29] audit: type=1400 audit(1765006959.409:2446): avc:  denied  { perfmon } for  pid=4507 comm="syz.3.295" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   51.525162][   T29] audit: type=1400 audit(1765006959.409:2447): avc:  denied  { mount } for  pid=4513 comm="syz.5.298" name="/" dev="ramfs" ino=8771 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[   51.537398][ T3323] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.547585][   T29] audit: type=1400 audit(1765006959.419:2448): avc:  denied  { unmount } for  pid=3323 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   51.578864][   T29] audit: type=1400 audit(1765006959.419:2449): avc:  denied  { read write } for  pid=3688 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   51.603173][   T29] audit: type=1400 audit(1765006959.419:2450): avc:  denied  { open } for  pid=3688 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   51.627379][   T29] audit: type=1400 audit(1765006959.419:2451): avc:  denied  { ioctl } for  pid=3688 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   51.659239][ T4512] journal_path: Non-blockdev passed as './bus'
[   51.665451][ T4512] EXT4-fs: error: could not find journal device path
[   51.739749][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.876933][ T4523] EXT4-fs: Ignoring removed orlov option
[   51.988046][ T4523] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   52.009055][ T4541] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   52.043999][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.252819][ T4553] netlink: 'syz.4.308': attribute type 1 has an invalid length.
[   52.345338][ T4553] 8021q: adding VLAN 0 to HW filter on device bond1
[   52.354117][ T4556] netlink: 8 bytes leftover after parsing attributes in process `syz.0.310'.
[   52.365682][ T4556] netlink: 8 bytes leftover after parsing attributes in process `syz.0.310'.
[   52.375152][ T4556] netlink: 8 bytes leftover after parsing attributes in process `syz.0.310'.
[   52.490020][ T4561] 8021q: adding VLAN 0 to HW filter on device batadv1
[   52.514695][ T4553] netlink: 'syz.4.308': attribute type 13 has an invalid length.
[   52.517266][ T4561] bond1: (slave batadv1): making interface the new active one
[   52.556909][ T4561] bond1: (slave batadv1): Enslaving as an active interface with an up link
[   52.569960][ T4556] netlink: 8 bytes leftover after parsing attributes in process `syz.0.310'.
[   52.700379][ T4553] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.707692][ T4553] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.797104][ T4553] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   52.807566][ T4553] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   52.917465][ T4561] netlink: 'syz.4.308': attribute type 25 has an invalid length.
[   52.925265][ T4561] netlink: 'syz.4.308': attribute type 28 has an invalid length.
[   52.934049][  T411] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   52.948722][ T4580] SELinux:  Context system_u:object_r:netutils_exec_t:s0 is not valid (left unmapped).
[   52.981523][  T411] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   53.018287][  T411] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   53.051276][ T4586] set_capacity_and_notify: 5 callbacks suppressed
[   53.051293][ T4586] loop1: detected capacity change from 0 to 164
[   53.064320][ T1801] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   53.079236][ T4586] netlink: 176 bytes leftover after parsing attributes in process `syz.1.317'.
[   53.103200][ T4582] loop3: detected capacity change from 0 to 8192
[   53.146825][ T4486]  loop3: p1 p2 p3 p4
[   53.150963][ T4486] loop3: p1 size 3523149824 extends beyond EOD, truncated
[   53.161777][ T4486] loop3: p2 start 4293394688 is beyond EOD, truncated
[   53.168647][ T4486] loop3: p3 start 150994944 is beyond EOD, truncated
[   53.175363][ T4486] loop3: p4 size 50331648 extends beyond EOD, truncated
[   53.187602][ T4582]  loop3: p1 p2 p3 p4
[   53.191684][ T4582] loop3: p1 size 3523149824 extends beyond EOD, truncated
[   53.201271][ T4582] loop3: p2 start 4293394688 is beyond EOD, truncated
[   53.208408][ T4582] loop3: p3 start 150994944 is beyond EOD, truncated
[   53.215160][ T4582] loop3: p4 size 50331648 extends beyond EOD, truncated
[   53.353203][ T3546] udevd[3546]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[   53.367864][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[   53.370832][ T4593] SELinux:  Context system_u:object_r:logrotate_exec_t:s0 is not valid (left unmapped).
[   53.454502][ T3546] udevd[3546]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[   53.467004][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[   53.535549][ T4598] veth2: entered promiscuous mode
[   53.540848][ T4598] veth2: entered allmulticast mode
[   53.968767][ T4625] loop4: detected capacity change from 0 to 512
[   53.985425][ T4625] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   53.986734][ T4635] netlink: 'syz.0.325': attribute type 1 has an invalid length.
[   54.007462][ T4625] EXT4-fs (loop4): 1 truncate cleaned up
[   54.016012][ T4625] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   54.035107][ T4634] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   54.056929][ T4635] bond2: entered promiscuous mode
[   54.062167][ T4635] 8021q: adding VLAN 0 to HW filter on device bond2
[   54.205044][ T4644] hub 6-0:1.0: USB hub found
[   54.216006][ T4644] hub 6-0:1.0: 8 ports detected
[   54.312388][ T4648] loop0: detected capacity change from 0 to 128
[   54.322523][ T4648] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   54.335594][ T4648] ext4 filesystem being mounted at /78/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   54.391596][ T3323] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   54.475783][ T4653] loop0: detected capacity change from 0 to 8192
[   54.510350][ T4653]  loop0: p1 p2 p3 p4
[   54.521592][ T4653] loop0: p1 size 3523149824 extends beyond EOD, truncated
[   54.540800][ T4653] loop0: p2 start 4293394688 is beyond EOD, truncated
[   54.547714][ T4653] loop0: p3 start 150994944 is beyond EOD, truncated
[   54.549456][ T4657] loop3: detected capacity change from 0 to 512
[   54.554518][ T4653] loop0: p4 size 50331648 extends beyond EOD, truncated
[   54.574343][ T4657] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[   54.648745][ T4657] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended
[   54.670032][ T4657] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.332: bg 0: block 248: padding at end of block bitmap is not set
[   54.693030][ T4657] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.332: Failed to acquire dquot type 1
[   54.708512][ T4657] EXT4-fs (loop3): 1 truncate cleaned up
[   54.715085][ T4657] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[   54.791968][ T4486] udevd[4486]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[   54.817681][ T3546] udevd[3546]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[   54.878619][ T4657] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.332: Failed to acquire dquot type 1
[   54.890471][ T4662] loop0: detected capacity change from 0 to 512
[   54.908657][ T4662] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   54.913788][ T4666] loop1: detected capacity change from 0 to 256
[   54.928202][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   54.939987][ T4662] EXT4-fs (loop0): 1 truncate cleaned up
[   54.946512][ T4662] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   54.959027][ T4666] FAT-fs (loop1): count of clusters too big (178174)
[   54.966024][ T4666] FAT-fs (loop1): Can't find a valid FAT filesystem
[   54.986815][ T4657] bond1: entered promiscuous mode
[   54.991897][ T4657] bond1: entered allmulticast mode
[   54.997507][ T4657] 8021q: adding VLAN 0 to HW filter on device bond1
[   55.014882][ T4657] bond1 (unregistering): Released all slaves
[   55.067757][ T4666] netlink: 16 bytes leftover after parsing attributes in process `syz.1.335'.
[   55.110697][ T4657] syz.3.332 (4657) used greatest stack depth: 8960 bytes left
[   55.211224][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[   55.292029][ T4674] netlink: 12 bytes leftover after parsing attributes in process `syz.1.335'.
[   55.348598][ T4666] bond1: (slave ip6tnl1): The slave device specified does not support setting the MAC address
[   55.420342][ T4666] bond1: (slave ip6tnl1): Error -95 calling set_mac_address
[   55.689208][ T4692] netlink: 20 bytes leftover after parsing attributes in process `syz.3.343'.
[   55.751778][ T4690] hub 6-0:1.0: USB hub found
[   55.756752][ T4690] hub 6-0:1.0: 8 ports detected
[   55.935879][ T3323] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.974558][ T4702] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   55.998786][ T4708] loop1: detected capacity change from 0 to 512
[   56.008595][ T4708] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[   56.028681][ T4707] loop0: detected capacity change from 0 to 128
[   56.044392][ T4707] syz.0.350: attempt to access beyond end of device
[   56.044392][ T4707] loop0: rw=2049, sector=145, nr_sectors = 3 limit=128
[   56.073575][ T4708] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.351: bad orphan inode 13
[   56.084136][ T4707] program syz.0.350 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   56.095181][ T4702] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   56.096557][ T4708] ext4_test_bit(bit=12, block=18) = 1
[   56.110473][ T4708] is_bad_inode(inode)=0
[   56.114653][ T4708] NEXT_ORPHAN(inode)=0
[   56.118811][ T4708] max_ino=32
[   56.122041][ T4708] i_nlink=1
[   56.126520][ T4708] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[   56.139829][ T4709] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   56.156755][ T4708] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended
[   56.171805][ T4708] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.351: bg 0: block 248: padding at end of block bitmap is not set
[   56.187249][ T4709] EXT4-fs (loop3): 1 truncate cleaned up
[   56.193621][ T4709] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   56.210244][ T4708] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.351: Failed to acquire dquot type 1
[   56.261188][ T4702] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   56.299705][ T4708] EXT4-fs error (device loop1): ext4_lookup:1789: inode #2: comm syz.1.351: deleted inode referenced: 12
[   56.361562][ T4708] EXT4-fs error (device loop1): ext4_lookup:1789: inode #2: comm syz.1.351: deleted inode referenced: 12
[   56.378504][ T4702] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   56.399869][ T4720] FAT-fs (loop0): count of clusters too big (178174)
[   56.406626][ T4720] FAT-fs (loop0): Can't find a valid FAT filesystem
[   56.414271][ T4716] EXT4-fs error (device loop1): ext4_lookup:1789: inode #2: comm syz.1.351: deleted inode referenced: 12
[   56.426578][   T29] kauditd_printk_skb: 1548 callbacks suppressed
[   56.426594][   T29] audit: type=1400 audit(1765006964.419:3994): avc:  denied  { read write } for  pid=4718 comm="syz.0.353" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   56.434869][ T4720] netlink: 16 bytes leftover after parsing attributes in process `syz.0.353'.
[   56.456848][   T29] audit: type=1400 audit(1765006964.419:3995): avc:  denied  { open } for  pid=4718 comm="syz.0.353" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   56.468176][ T4708] EXT4-fs error (device loop1): ext4_lookup:1789: inode #2: comm syz.1.351: deleted inode referenced: 12
[   56.489550][   T29] audit: type=1400 audit(1765006964.429:3996): avc:  denied  { ioctl } for  pid=4718 comm="syz.0.353" path="/dev/loop0" dev="devtmpfs" ino=100 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   56.511136][ T4708] EXT4-fs error (device loop1): ext4_lookup:1789: inode #2: comm +}[@: deleted inode referenced: 12
[   56.539982][   T29] audit: type=1400 audit(1765006964.429:3997): avc:  denied  { prog_load } for  pid=4705 comm="syz.1.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   56.559007][   T29] audit: type=1400 audit(1765006964.429:3998): avc:  denied  { bpf } for  pid=4705 comm="syz.1.351" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   56.574552][ T4716] EXT4-fs error (device loop1): ext4_lookup:1789: inode #2: comm syz.1.351: deleted inode referenced: 12
[   56.579499][   T29] audit: type=1400 audit(1765006964.429:3999): avc:  denied  { perfmon } for  pid=4705 comm="syz.1.351" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   56.611583][   T29] audit: type=1400 audit(1765006964.429:4000): avc:  denied  { create } for  pid=4705 comm="syz.1.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   56.632211][   T29] audit: type=1400 audit(1765006964.429:4001): avc:  denied  { create } for  pid=4718 comm="syz.0.353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   56.652984][   T29] audit: type=1400 audit(1765006964.429:4002): avc:  denied  { create } for  pid=4705 comm="syz.1.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   56.673800][   T29] audit: type=1400 audit(1765006964.429:4003): avc:  denied  { write } for  pid=4705 comm="syz.1.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   56.735337][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[   56.739432][  T369] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.778327][ T4725] netlink: 12 bytes leftover after parsing attributes in process `syz.0.353'.
[   56.812168][  T369] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.854636][  T369] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.858383][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   56.863067][  T369] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.910309][ T4720] bond3: (slave ip6tnl1): The slave device specified does not support setting the MAC address
[   56.977430][ T4720] bond3: (slave ip6tnl1): Error -95 calling set_mac_address
[   57.057680][ T4738] netlink: 8 bytes leftover after parsing attributes in process `syz.3.359'.
[   57.075107][ T4738] netlink: 8 bytes leftover after parsing attributes in process `syz.3.359'.
[   57.106984][ T4738] netlink: 8 bytes leftover after parsing attributes in process `syz.3.359'.
[   57.125469][ T4738] netlink: 8 bytes leftover after parsing attributes in process `syz.3.359'.
[   57.146962][ T3546]  loop4: p1 p2 p3 p4
[   57.151264][ T3546] loop4: p1 size 3523149824 extends beyond EOD, truncated
[   57.168009][ T3546] loop4: p2 start 4293394688 is beyond EOD, truncated
[   57.174892][ T3546] loop4: p3 start 150994944 is beyond EOD, truncated
[   57.181656][ T3546] loop4: p4 size 50331648 extends beyond EOD, truncated
[   57.231632][ T4737]  loop4: p1 p2 p3 p4
[   57.235803][ T4737] loop4: p1 size 3523149824 extends beyond EOD, truncated
[   57.276577][ T4737] loop4: p2 start 4293394688 is beyond EOD, truncated
[   57.283492][ T4737] loop4: p3 start 150994944 is beyond EOD, truncated
[   57.290251][ T4737] loop4: p4 size 50331648 extends beyond EOD, truncated
[   57.474274][ T4486] udevd[4486]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[   57.502648][ T3546] udevd[3546]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[   57.560334][ T4486] udevd[4486]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[   57.575136][ T4759] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[   57.580881][ T3546] udevd[3546]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[   57.642456][ T4759] EXT4-fs (loop4): warning: maximal mount count reached, running e2fsck is recommended
[   57.696969][ T4759] EXT4-fs error (device loop4): ext4_orphan_get:1391: comm syz.4.369: inode #15: comm syz.4.369: iget: illegal inode #
[   57.741187][ T4759] EXT4-fs (loop4): Remounting filesystem read-only
[   57.767007][ T4759] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   57.928571][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   58.017357][ T4776] syz.0.377: attempt to access beyond end of device
[   58.017357][ T4776] loop0: rw=2049, sector=145, nr_sectors = 3 limit=128
[   58.066696][ T4776] program syz.0.377 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   58.429775][ T4800] __nla_validate_parse: 6 callbacks suppressed
[   58.429792][ T4800] netlink: 8 bytes leftover after parsing attributes in process `syz.3.387'.
[   58.502905][ T4800] netlink: 8 bytes leftover after parsing attributes in process `syz.3.387'.
[   58.542221][ T4800] netlink: 8 bytes leftover after parsing attributes in process `syz.3.387'.
[   58.562329][ T4800] netlink: 8 bytes leftover after parsing attributes in process `syz.3.387'.
[   58.666507][ T4812] O3ãc¤±: renamed from bridge_slave_0 (while UP)
[   58.772229][ T4815] hub 6-0:1.0: USB hub found
[   58.777328][ T4815] hub 6-0:1.0: 8 ports detected
[   58.839101][ T4822] set_capacity_and_notify: 5 callbacks suppressed
[   58.839126][ T4822] loop0: detected capacity change from 0 to 128
[   58.917416][ T4822] syz.0.394: attempt to access beyond end of device
[   58.917416][ T4822] loop0: rw=2049, sector=145, nr_sectors = 3 limit=128
[   58.997863][ T4822] program syz.0.394 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   59.023201][ T4829] netlink: 20 bytes leftover after parsing attributes in process `syz.4.399'.
[   59.082000][ T4826] loop1: detected capacity change from 0 to 8192
[   59.139022][ T3546]  loop1: p1 p2 p3 p4
[   59.143167][ T3546] loop1: p1 size 3523149824 extends beyond EOD, truncated
[   59.178647][ T4840] loop0: detected capacity change from 0 to 256
[   59.192389][ T4840] FAT-fs (loop0): count of clusters too big (178174)
[   59.198336][ T3546] loop1: p2 start 4293394688 is beyond EOD, truncated
[   59.199218][ T4840] FAT-fs (loop0): Can't find a valid FAT filesystem
[   59.211381][ T4840] netlink: 16 bytes leftover after parsing attributes in process `syz.0.402'.
[   59.212639][ T3546] loop1: p3 start 150994944 is beyond EOD, truncated
[   59.212660][ T3546] loop1: p4 size 50331648 extends beyond EOD, truncated
[   59.236187][ T4842] loop4: detected capacity change from 0 to 512
[   59.269491][ T4826]  loop1: p1 p2 p3 p4
[   59.277237][ T4842] EXT4-fs: Ignoring removed bh option
[   59.287332][ T4842] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[   59.294207][ T4826] loop1: p1 size 3523149824 extends beyond EOD, truncated
[   59.312269][ T4842] EXT4-fs (loop4): revision level too high, forcing read-only mode
[   59.320659][ T4842] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=884ec128, mo2=0002]
[   59.331310][ T4842] EXT4-fs (loop4): orphan cleanup on readonly fs
[   59.337788][ T4842] EXT4-fs error (device loop4): ext4_quota_enable:7173: comm syz.4.403: Bad quota inum: 4294967291, type: 0
[   59.351286][ T4842] EXT4-fs (loop4): Remounting filesystem read-only
[   59.357853][ T4842] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-117, ino=4294967291). Please run e2fsck to fix.
[   59.373335][ T4842] EXT4-fs (loop4): Cannot turn on quotas: error -117
[   59.379745][ T4826] loop1: p2 start 4293394688 is beyond EOD, truncated
[   59.380429][ T4842] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   59.386859][ T4826] loop1: p3 start 150994944 is beyond EOD, truncated
[   59.386878][ T4826] loop1: p4 size 50331648 extends beyond EOD, truncated
[   59.530575][ T4840] netlink: 12 bytes leftover after parsing attributes in process `syz.0.402'.
[   59.776622][ T3546] udevd[3546]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[   59.805024][ T4486] udevd[4486]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[   59.820527][ T3764] IPVS: starting estimator thread 0...
[   59.866789][ T4860] loop0: detected capacity change from 0 to 2048
[   59.916378][ T4861] IPVS: using max 2448 ests per chain, 122400 per kthread
[   59.930033][ T4486] udevd[4486]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[   59.951736][ T4860] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   59.970025][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[   60.043686][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   60.054304][ T3323] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   60.073957][ T4868] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   60.239150][ T4877] loop4: detected capacity change from 0 to 256
[   60.309465][ T4879] loop0: detected capacity change from 0 to 512
[   60.317664][ T4879] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   60.338843][ T4879] EXT4-fs (loop0): 1 truncate cleaned up
[   60.368682][ T4879] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   60.487538][ T4885] netlink: 20 bytes leftover after parsing attributes in process `syz.1.413'.
[   60.635604][ T4887] netlink: 12 bytes leftover after parsing attributes in process `syz.1.414'.
[   60.644643][ T4887] netlink: 12 bytes leftover after parsing attributes in process `syz.1.414'.
[   60.667264][ T4890] loop4: detected capacity change from 0 to 164
[   60.898351][ T4897] 8021q: adding VLAN 0 to HW filter on device bond0
[   60.918477][ T4897] 8021q: adding VLAN 0 to HW filter on device team0
[   60.928540][ T4903] loop1: detected capacity change from 0 to 512
[   60.935057][ T4897] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   60.946673][ T4903] EXT4-fs: Ignoring removed bh option
[   60.971899][ T4903] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[   61.007085][ T4903] EXT4-fs (loop1): revision level too high, forcing read-only mode
[   61.009137][ T4900] hub 6-0:1.0: USB hub found
[   61.015057][ T4903] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=884ec128, mo2=0002]
[   61.026423][ T4900] hub 6-0:1.0: 8 ports detected
[   61.033197][ T4903] EXT4-fs (loop1): orphan cleanup on readonly fs
[   61.039679][ T4903] EXT4-fs error (device loop1): ext4_quota_enable:7173: comm syz.1.420: Bad quota inum: 4294967291, type: 0
[   61.062482][ T4903] EXT4-fs (loop1): Remounting filesystem read-only
[   61.069070][ T4903] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-117, ino=4294967291). Please run e2fsck to fix.
[   61.084533][ T4903] EXT4-fs (loop1): Cannot turn on quotas: error -117
[   61.111090][ T4903] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   61.288319][ T4915] netlink: 'syz.0.424': attribute type 10 has an invalid length.
[   61.300249][ T4915] team0 (unregistering): Port device team_slave_0 removed
[   61.313349][ T4915] team0 (unregistering): Port device team_slave_1 removed
[   61.466007][   T29] kauditd_printk_skb: 1459 callbacks suppressed
[   61.466025][   T29] audit: type=1400 audit(1765006969.459:5463): avc:  denied  { create } for  pid=4902 comm="syz.1.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   61.491988][   T29] audit: type=1400 audit(1765006969.469:5464): avc:  denied  { prog_load } for  pid=4902 comm="syz.1.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   61.511129][   T29] audit: type=1400 audit(1765006969.469:5465): avc:  denied  { bpf } for  pid=4902 comm="syz.1.420" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   61.531714][   T29] audit: type=1400 audit(1765006969.469:5466): avc:  denied  { perfmon } for  pid=4902 comm="syz.1.420" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   61.552663][   T29] audit: type=1400 audit(1765006969.469:5467): avc:  denied  { create } for  pid=4902 comm="syz.1.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   61.571994][   T29] audit: type=1400 audit(1765006969.469:5468): avc:  denied  { setopt } for  pid=4902 comm="syz.1.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   61.591410][   T29] audit: type=1400 audit(1765006969.469:5469): avc:  denied  { setopt } for  pid=4902 comm="syz.1.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   61.623677][   T29] audit: type=1400 audit(1765006969.619:5470): avc:  denied  { read write } for  pid=3314 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   61.648041][   T29] audit: type=1400 audit(1765006969.619:5471): avc:  denied  { open } for  pid=3314 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   61.672712][   T29] audit: type=1400 audit(1765006969.649:5472): avc:  denied  { ioctl } for  pid=3314 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   61.727910][ T4924] loop3: detected capacity change from 0 to 164
[   61.796224][ T4928] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   61.827209][ T4930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   61.844897][ T4930] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   61.998219][ T4939] FAT-fs (loop5): count of clusters too big (178174)
[   62.004974][ T4939] FAT-fs (loop5): Can't find a valid FAT filesystem
[   62.021072][ T4934] hub 6-0:1.0: USB hub found
[   62.029167][ T4934] hub 6-0:1.0: 8 ports detected
[   62.167930][ T4947] EXT4-fs: dax option not supported
[   62.239377][ T4947] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   62.250346][ T4947] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[   62.269925][ T4947] JBD2: no valid journal superblock found
[   62.275696][ T4947] EXT4-fs (loop4): Could not load journal inode
[   62.309521][ T4947] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ%ºu@
) failed with errno=-22
[   62.364860][ T4947] EXT4-fs: Ignoring removed mblk_io_submit option
[   62.389574][ T4947] EXT4-fs error (device loop4): ext4_iget_extra_inode:5073: inode #15: comm syz.4.433: corrupted in-inode xattr: invalid ea_ino
[   62.426473][ T4947] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.433: couldn't read orphan inode 15 (err -117)
[   62.741241][ T4993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   62.799154][ T4996] ext4 filesystem being mounted at /102/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   62.799307][ T4993] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   62.937972][ T5005] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   63.262168][ T5017] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   63.271030][ T5017] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[   63.309152][ T5022] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   63.341993][ T5017] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.445: Allocating blocks 41-42 which overlap fs metadata
[   63.407982][ T5017] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.445: Allocating blocks 41-42 which overlap fs metadata
[   63.441750][ T5017] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.445: Failed to acquire dquot type 1
[   63.467228][ T5017] EXT4-fs error (device loop3): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[   63.524806][ T5017] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.445: corrupted inode contents
[   63.564144][ T5034] __nla_validate_parse: 21 callbacks suppressed
[   63.564186][ T5034] netlink: 12 bytes leftover after parsing attributes in process `syz.5.452'.
[   63.579411][ T5034] netlink: 12 bytes leftover after parsing attributes in process `syz.5.452'.
[   63.600448][ T5017] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #12: comm syz.3.445: mark_inode_dirty error
[   63.612145][ T5017] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.445: corrupted inode contents
[   63.625896][ T5017] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #12: comm syz.3.445: mark_inode_dirty error
[   63.659307][ T5017] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.445: corrupted inode contents
[   63.673691][ T5017] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem
[   63.692463][ T5017] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.445: corrupted inode contents
[   63.724155][ T5017] EXT4-fs error (device loop3): ext4_truncate:4635: inode #12: comm syz.3.445: mark_inode_dirty error
[   63.756988][ T5017] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem
[   63.767802][ T5017] EXT4-fs (loop3): 1 truncate cleaned up
[   63.787994][ T5017] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   63.823140][ T5042] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11703 sclass=netlink_route_socket pid=5042 comm=syz.1.456
[   63.852993][ T5037] set_capacity_and_notify: 9 callbacks suppressed
[   63.853012][ T5037] loop5: detected capacity change from 0 to 8192
[   63.871683][ T5042] bridge0: entered allmulticast mode
[   63.878520][ T5042] syz.1.456 uses obsolete (PF_INET,SOCK_PACKET)
[   63.889905][ T5042] loop1: detected capacity change from 0 to 512
[   63.899697][ T5042] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   63.911572][ T5042] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.456: invalid block
[   63.927260][ T5042] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.456: invalid indirect mapped block 4294967295 (level 1)
[   63.956896][ T5037]  loop5: p1 p2 p3 p4
[   63.961063][ T5037] loop5: p1 size 3523149824 extends beyond EOD, truncated
[   63.972889][ T5047] loop3: detected capacity change from 0 to 512
[   63.981041][ T5037] loop5: p2 start 4293394688 is beyond EOD, truncated
[   63.986603][ T5042] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.456: invalid indirect mapped block 4294967295 (level 1)
[   63.987922][ T5037] loop5: p3 start 150994944 is beyond EOD, truncated
[   64.008660][ T5037] loop5: p4 size 50331648 extends beyond EOD, truncated
[   64.019393][ T5047] EXT4-fs: Ignoring removed bh option
[   64.064746][ T5047] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[   64.077930][ T5042] EXT4-fs (loop1): 2 truncates cleaned up
[   64.121542][ T5047] EXT4-fs (loop3): revision level too high, forcing read-only mode
[   64.129663][ T5047] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=884ec128, mo2=0002]
[   64.138482][ T5047] EXT4-fs (loop3): orphan cleanup on readonly fs
[   64.145045][ T5047] EXT4-fs error (device loop3): ext4_quota_enable:7173: comm syz.3.458: Bad quota inum: 4294967291, type: 0
[   64.161580][ T5047] EXT4-fs (loop3): Remounting filesystem read-only
[   64.168261][ T5047] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-117, ino=4294967291). Please run e2fsck to fix.
[   64.183783][ T5047] EXT4-fs (loop3): Cannot turn on quotas: error -117
[   64.188326][ T5042] netlink: 4 bytes leftover after parsing attributes in process `syz.1.456'.
[   64.259579][ T5042] bridge_slave_1: left allmulticast mode
[   64.265287][ T5042] bridge_slave_1: left promiscuous mode
[   64.271059][ T5042] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.280264][ T5042] bridge_slave_0: left allmulticast mode
[   64.285918][ T5042] bridge_slave_0: left promiscuous mode
[   64.291699][ T5042] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.347287][ T5055] loop4: detected capacity change from 0 to 512
[   64.359586][ T5059] netlink: 12 bytes leftover after parsing attributes in process `syz.0.463'.
[   64.368597][ T5059] netlink: 12 bytes leftover after parsing attributes in process `syz.0.463'.
[   64.378542][ T5042] bridge0 (unregistering): left allmulticast mode
[   64.403147][ T3546] udevd[3546]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[   64.427513][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory
[   64.456934][ T5055] ext4 filesystem being mounted at /107/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[   64.470178][ T5060] loop5: detected capacity change from 0 to 256
[   64.496742][ T5060] FAT-fs (loop5): count of clusters too big (178174)
[   64.503494][ T5060] FAT-fs (loop5): Can't find a valid FAT filesystem
[   64.608061][ T5060] netlink: 16 bytes leftover after parsing attributes in process `syz.5.462'.
[   64.617476][ T5065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   64.622320][ T4866] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[   64.630852][ T5065] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   64.817178][ T5060] netlink: 12 bytes leftover after parsing attributes in process `syz.5.462'.
[   64.936961][ T5079] netlink: 'syz.1.466': attribute type 12 has an invalid length.
[   64.979480][ T5072] loop1: detected capacity change from 0 to 2048
[   65.065284][ T5072] EXT4-fs error (device loop1): ext4_ext_precache:632: inode #2: comm syz.1.466: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5)
[   65.130663][ T5072] EXT4-fs (loop1): Remounting filesystem read-only
[   65.257918][ T5089] loop3: detected capacity change from 0 to 8192
[   65.338949][ T5095] loop5: detected capacity change from 0 to 128
[   65.349518][ T5089]  loop3: p1 p2 p3 p4
[   65.353672][ T5089] loop3: p1 size 3523149824 extends beyond EOD, truncated
[   65.379505][ T5094] loop4: detected capacity change from 0 to 8192
[   65.394335][ T5089] loop3: p2 start 4293394688 is beyond EOD, truncated
[   65.401243][ T5089] loop3: p3 start 150994944 is beyond EOD, truncated
[   65.408009][ T5089] loop3: p4 size 50331648 extends beyond EOD, truncated
[   65.416258][ T5099] loop0: detected capacity change from 0 to 128
[   65.432727][ T5099] syz.0.474: attempt to access beyond end of device
[   65.432727][ T5099] loop0: rw=2049, sector=145, nr_sectors = 3 limit=128
[   65.466976][ T5094]  loop4: p1 p2 p3 p4
[   65.472290][ T5094] loop4: p1 size 3523149824 extends beyond EOD, truncated
[   65.484268][ T3005]  loop3: p1 p2 p3 p4
[   65.489107][ T3005] loop3: p1 size 3523149824 extends beyond EOD, truncated
[   65.489764][ T5094] loop4: p2 start 4293394688 is beyond EOD, truncated
[   65.503323][ T5094] loop4: p3 start 150994944 is beyond EOD, truncated
[   65.510093][ T5094] loop4: p4 size 50331648 extends beyond EOD, truncated
[   65.520836][ T5099] program syz.0.474 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   65.520997][ T3005] loop3: p2 start 4293394688 is beyond EOD, truncated
[   65.536804][ T3005] loop3: p3 start 150994944 is beyond EOD, truncated
[   65.543531][ T3005] loop3: p4 size 50331648 extends beyond EOD, truncated
[   65.599155][ T5101] EXT4-fs: Mount option(s) incompatible with ext3
[   65.666564][ T5105] EXT4-fs: Ignoring removed orlov option
[   65.770193][ T5105] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: comm syz.4.477: Parent and EA inode have the same ino 15
[   65.799709][ T5105] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: comm syz.4.477: Parent and EA inode have the same ino 15
[   65.831016][ T3546] udevd[3546]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[   65.865116][ T3516] udevd[3516]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[   65.957201][ T5105] EXT4-fs (loop4): 1 orphan inode deleted
[   66.214446][ T4486] udevd[4486]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[   66.246476][ T5105] EXT4-fs error (device loop4): ext4_lookup:1789: inode #2: comm syz.4.477: deleted inode referenced: 15
[   66.253016][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[   66.261258][ T5110] hub 6-0:1.0: USB hub found
[   66.299261][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[   66.310349][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[   66.344606][ T5110] hub 6-0:1.0: 8 ports detected
[   66.550600][   T29] kauditd_printk_skb: 1738 callbacks suppressed
[   66.550698][   T29] audit: type=1400 audit(1765006974.461:7207): avc:  denied  { map_create } for  pid=5121 comm="syz.3.483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   66.576318][   T29] audit: type=1400 audit(1765006974.470:7208): avc:  denied  { perfmon } for  pid=5121 comm="syz.3.483" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   66.693548][ T5127] netlink: 20 bytes leftover after parsing attributes in process `syz.4.484'.
[   66.739918][ T5129] netlink: 20 bytes leftover after parsing attributes in process `syz.1.485'.
[   66.750893][   T29] audit: type=1400 audit(1765006974.526:7209): avc:  denied  { map_read map_write } for  pid=5121 comm="syz.3.483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   66.770740][   T29] audit: type=1400 audit(1765006974.536:7210): avc:  denied  { map_create } for  pid=5120 comm="syz.1.482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   66.789912][   T29] audit: type=1400 audit(1765006974.536:7211): avc:  denied  { prog_load } for  pid=5120 comm="syz.1.482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   66.808918][   T29] audit: type=1400 audit(1765006974.536:7212): avc:  denied  { bpf } for  pid=5120 comm="syz.1.482" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   66.829396][   T29] audit: type=1400 audit(1765006974.536:7213): avc:  denied  { perfmon } for  pid=5120 comm="syz.1.482" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   66.850242][   T29] audit: type=1400 audit(1765006974.545:7214): avc:  denied  { prog_load } for  pid=5120 comm="syz.1.482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   66.869247][   T29] audit: type=1400 audit(1765006974.545:7215): avc:  denied  { bpf } for  pid=5120 comm="syz.1.482" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   66.889736][   T29] audit: type=1400 audit(1765006974.545:7216): avc:  denied  { perfmon } for  pid=5120 comm="syz.1.482" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   67.049231][ T5141] syz.4.488: attempt to access beyond end of device
[   67.049231][ T5141] loop4: rw=2049, sector=145, nr_sectors = 3 limit=128
[   67.075405][ T5141] program syz.4.488 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   67.078507][ T5144] netlink: 8 bytes leftover after parsing attributes in process `syz.1.490'.
[   67.316238][ T5153] EXT4-fs: dax option not supported
[   67.366890][ T5152] syz.3.494: attempt to access beyond end of device
[   67.366890][ T5152] loop3: rw=2049, sector=145, nr_sectors = 3 limit=128
[   67.455685][   T44] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   67.512241][ T5156] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ%ºu@
) failed with errno=-22
[   67.549454][ T5155] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   67.594865][ T5152] program syz.3.494 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   67.694314][ T5159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   67.719070][ T5159] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   68.310919][ T5163] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[   68.368851][ T5163] EXT4-fs (loop3): warning: maximal mount count reached, running e2fsck is recommended
[   68.428915][ T5163] EXT4-fs error (device loop3): ext4_orphan_get:1391: comm syz.3.496: inode #15: comm syz.3.496: iget: illegal inode #
[   68.485337][ T5163] EXT4-fs (loop3): Remounting filesystem read-only
[   68.504065][ T5163] EXT4-fs mount: 18 callbacks suppressed
[   68.504112][ T5163] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   68.546604][ T5169] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   68.599411][ T5169] EXT4-fs (loop1): 1 truncate cleaned up
[   68.611705][ T5169] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   68.624000][ T5176] openvswitch: netlink: Missing key (keys=40, expected=200000)
[   68.697079][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   69.215441][ T5212] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   69.364939][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   69.453482][ T5219] set_capacity_and_notify: 8 callbacks suppressed
[   69.453501][ T5219] loop1: detected capacity change from 0 to 512
[   69.502938][ T5219] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[   69.570225][ T5219] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended
[   69.612170][ T5221] __nla_validate_parse: 4 callbacks suppressed
[   69.612187][ T5221] netlink: 8 bytes leftover after parsing attributes in process `syz.4.512'.
[   69.629156][ T5221] netlink: 8 bytes leftover after parsing attributes in process `syz.4.512'.
[   69.638683][ T5221] netlink: 8 bytes leftover after parsing attributes in process `syz.4.512'.
[   69.647752][ T5180] netlink: 12 bytes leftover after parsing attributes in process `gtp'.
[   69.648734][ T5221] netlink: 8 bytes leftover after parsing attributes in process `syz.4.512'.
[   69.667765][ T5219] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.511: bg 0: block 248: padding at end of block bitmap is not set
[   69.695883][ T5207] ==================================================================
[   69.704082][ T5207] BUG: KCSAN: data-race in __filemap_remove_folio / folio_mapping
[   69.711883][ T5207] 
[   69.714196][ T5207] write to 0xffffea000639a898 of 8 bytes by task 5193 on cpu 0:
[   69.721810][ T5207]  __filemap_remove_folio+0x1a5/0x2a0
[   69.727176][ T5207]  filemap_remove_folio+0x6d/0x1d0
[   69.732280][ T5207]  truncate_inode_folio+0x42/0x50
[   69.737327][ T5207]  shmem_undo_range+0x244/0xa80
[   69.742189][ T5207]  shmem_fallocate+0x799/0x840
[   69.746947][ T5207]  vfs_fallocate+0x3b6/0x400
[   69.751530][ T5207]  __x64_sys_fallocate+0x7a/0xd0
[   69.756455][ T5207]  x64_sys_call+0x1cd4/0x3000
[   69.761123][ T5207]  do_syscall_64+0xd8/0x2a0
[   69.765626][ T5207]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   69.771505][ T5207] 
[   69.773820][ T5207] read to 0xffffea000639a898 of 8 bytes by task 5207 on cpu 1:
[   69.781345][ T5207]  folio_mapping+0xa1/0xe0
[   69.785760][ T5207]  move_folios_to_lru+0x128/0x6c0
[   69.790772][ T5207]  evict_folios+0x31d0/0x3590
[   69.795442][ T5207]  try_to_shrink_lruvec+0x5b5/0x950
[   69.800627][ T5207]  shrink_lruvec+0x22e/0x1b50
[   69.805293][ T5207]  shrink_node+0x686/0x2120
[   69.809811][ T5207]  do_try_to_free_pages+0x3f6/0xcd0
[   69.815227][ T5207]  try_to_free_mem_cgroup_pages+0x1ab/0x410
[   69.821110][ T5207]  try_charge_memcg+0x383/0xa10
[   69.825967][ T5207]  obj_cgroup_charge_pages+0xa6/0x150
[   69.831414][ T5207]  __memcg_kmem_charge_page+0x9f/0x170
[   69.836859][ T5207]  __alloc_frozen_pages_noprof+0x188/0x360
[   69.842661][ T5207]  alloc_pages_mpol+0xb3/0x260
[   69.847413][ T5207]  alloc_pages_noprof+0x90/0x130
[   69.852353][ T5207]  __vmalloc_node_range_noprof+0x7a5/0xed0
[   69.858152][ T5207]  __kvmalloc_node_noprof+0x47f/0x690
[   69.863529][ T5207]  ip_set_alloc+0x24/0x30
[   69.867848][ T5207]  hash_netiface_create+0x282/0x740
[   69.873033][ T5207]  ip_set_create+0x3cc/0x970
[   69.877625][ T5207]  nfnetlink_rcv_msg+0x4c6/0x590
[   69.882553][ T5207]  netlink_rcv_skb+0x123/0x220
[   69.887306][ T5207]  nfnetlink_rcv+0x167/0x16c0
[   69.891971][ T5207]  netlink_unicast+0x5c0/0x690
[   69.896721][ T5207]  netlink_sendmsg+0x58b/0x6b0
[   69.901472][ T5207]  __sock_sendmsg+0x145/0x180
[   69.906141][ T5207]  ____sys_sendmsg+0x31e/0x4a0
[   69.910906][ T5207]  ___sys_sendmsg+0x17b/0x1d0
[   69.915572][ T5207]  __x64_sys_sendmsg+0xd4/0x160
[   69.920410][ T5207]  x64_sys_call+0x17ba/0x3000
[   69.925076][ T5207]  do_syscall_64+0xd8/0x2a0
[   69.929569][ T5207]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   69.935449][ T5207] 
[   69.937772][ T5207] value changed: 0xffff88811ac11648 -> 0x0000000000000000
[   69.944861][ T5207] 
[   69.947169][ T5207] Reported by Kernel Concurrency Sanitizer on:
[   69.953305][ T5207] CPU: 1 UID: 0 PID: 5207 Comm: syz.3.506 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   69.962922][ T5207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   69.972962][ T5207] ==================================================================
[   70.028476][ T5219] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.511: Failed to acquire dquot type 1
[   70.065710][ T5219] EXT4-fs (loop1): 1 truncate cleaned up
[   70.071912][ T5219] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[   70.150147][ T5219] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.511: Failed to acquire dquot type 1
[   70.196736][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[   70.450146][ T5207] syz.3.506 (5207) used greatest stack depth: 5880 bytes left