last executing test programs:

39.98011347s ago: executing program 4 (id=3215):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.current\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000800)='rdma.current\x00', 0x275a, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
write$UHID_INPUT(r1, &(0x7f0000000940)={0x8, {"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", 0xfffffffffffffe43}}, 0x1006)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x10)

39.96446353s ago: executing program 4 (id=3216):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
rseq(0x0, 0x0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
chroot(&(0x7f0000000180)='./file0\x00')
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x20001400)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000780)={[{@errors_remount}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@resgid}, {@block_validity}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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")
io_pgetevents(0x0, 0xf1, 0x1, &(0x7f0000000280)=[{}], 0x0, &(0x7f0000000340)={&(0x7f0000000300), 0x8})

39.520597559s ago: executing program 4 (id=3224):
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x3938700}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)

38.927619629s ago: executing program 4 (id=3236):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0)
mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0)

38.911016609s ago: executing program 4 (id=3237):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@window, @mss, @window, @timestamp, @sack_perm, @timestamp, @timestamp, @sack_perm], 0x8)
write$binfmt_elf64(r0, &(0x7f0000000200)=ANY=[], 0x40)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r0, &(0x7f00000004c0)="3ce2de4d8d957a8de4e490b6cd03b988d4edef164bd3377aa381b5f50b7ca414516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe102e7f726263f28aef1bc12a069063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cdecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae93b2361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02facb08dd9695f854c7b031d9af8bd7350897996b5208b23030cc0feb84570730eaf24b9f2ac05d0feb3be07a29f887095f36f3c8f0e77e45509acd14a5be4a1572dd4cd1231087b830fa03e071571d4abd694710ef140469cf6df8a59839aafe046a5bffb97e5247be901789eafd726ba090337a2c49207e6b900c7e982472e6aac70e5d52ca2c1bab47b1f6d00f9601e2281686c21f770ae96e0ffec4b30496d012fa00958f794cdbd721bd155cae87", 0x109e8, 0x805, 0x0, 0x6)

38.347835308s ago: executing program 4 (id=3255):
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd, 0x10, 0x20000000, 0x20004, 0xc, 0x0, {0x1}})
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x109002)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffeffff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10)
r4 = fcntl$dupfd(r0, 0x0, r0)
ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5393, &(0x7f0000000000))

38.341606188s ago: executing program 32 (id=3255):
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd, 0x10, 0x20000000, 0x20004, 0xc, 0x0, {0x1}})
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x109002)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffeffff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10)
r4 = fcntl$dupfd(r0, 0x0, r0)
ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5393, &(0x7f0000000000))

34.952549794s ago: executing program 1 (id=3313):
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
r2 = syz_open_dev$sg(&(0x7f0000000000), 0xf9ba, 0x80000)
ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000002c0)=ANY=[])

34.839543644s ago: executing program 1 (id=3319):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58"}, 0x28)
writev(r0, &(0x7f00000016c0)=[{&(0x7f00000006c0)='Xw', 0x2}], 0x1)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "0daf7461cfccf6ce"}, 0x28)
recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/111, 0x6f}], 0x1}, 0x0)

34.776054543s ago: executing program 1 (id=3322):
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x71, 0x5, 0x8, 0x8, 0x0, 0x1e, 0x1369a, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x1}, 0xb06, 0x3, 0x8, 0x1, 0x7f, 0x8800, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil)
prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil)
munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000)
brk(0x20ffc004)

34.774739263s ago: executing program 1 (id=3332):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0)
mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0)

34.706359933s ago: executing program 1 (id=3328):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x80801c, &(0x7f0000000f40), 0x1, 0x503, &(0x7f0000000880)="$eJzs3c9vI1cdAPDvOL+cNG3S0gMgoEspLGi1TuJto6oHWE4IoUqIHkHahsQbRbHjKHZKE/aQ/g9IVOIER/4Azj1x54LgxmU5IPEjAm1W4mA040nWm7U3ZpPYUfz5SKN5b2bs73trzXv21xu/AEbWjYg4iIjJiPgwIuby40m+xd32ll736PDB6tHhg9UkWq0P/plk59Nj0fGY1Ev5cxYj4kffi/hp8mzcxt7+5kq1WtlpV6cXmrXthcbe/u2N2sp6Zb2yVS4vLy0vvnvnnfKF9fWN2mRe+vLDPxx86+dps2bzI539uEjtrk+cxEmNR8QPLiPYEIzl/ZkcdkN4IYWIeC0i3szu/7kYy15NAOA6a7XmojXXWQcArrtClgNLCqU8FzAbhUKp1M7hvR4zhWq90bx1v767tdbOlc3HROH+RrWymOcK52MiSetLWflJvXyqficiXo2IX0xNZ/XSar26Nsw3PgAwwl46Nf//Z6o9/wMA11xx2A0AAAbO/A8Ao8f8DwCjx/wPAKPnyfx/d6jtAAAGx+d/ABg95n8AGCk/fP/9dGsd5b9/vfbR3u5m/aPba5XGZqm2u1pare9sl9br9fXsN3tqZz1ftV7fXno7dj+e//Z2o7nQ2Nu/V6vvbjXvZb/rfa8yMZBeAQDP8+obn/05iYiD96azLTrWcjBXw/VWGHYDgKEZG3YDgKGx2heMrnN8xpcegGuiyxK9TylGxPTpg61Wq3V5TQIu2c0vyP/DqOrI//tfwDBi5P9hdMn/w+hqtZJ+1/yPfi8EAK42OX6gx/f/r+X73+ZfDvxk7fQVn15mqwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBqO17/t5SvBT4bhUKpFPFyRMzHRHJ/o1pZjIhXIuJPUxNTaX1pyG0GAM6r8LckX//r5txbs6fPTiaPp7J9RPzsVx/88uOVZnPnj+nxf50cb36aHy8Po/0AwFmO5+ls3/FB/tHhg9XjbZDt+ft3I6LYjn90OBlHJ/HHYzzbF2MiImb+neT1tqQjd3EeB59ExOe79T+J2SwH0l759HT8NPbLA41feCp+ITvX3qf/Fp+7gLbAqPksHX/udrv/CnEj23e//4vZCHV++fiXPtXqUTYGPol/PP6N9Rj/bvQb4+3ff79dmn723CcRXxyPOI591DH+HMdPesR/q8/4f/nSV97sda7164ib0T1+Z6yFZm17obG3f3ujtrJeWa9slcvLS8uL7955p7yQ5agXes8G/3jv1itZocslaf9nesQvntH/r/fZ/9/898Mff7XHuTT+N7/WLX4hXn9O/HRO/Eaf8VdmflfsdS6Nv9aj/2e9/rf6jP/wr/vPLBsOAAxPY29/c6VarewMsnD8RmKgQRX6K0zlL85Vac9ThSvbsM2V6ncGFWsy/q9HtVovFKvXiHERWTfgKji56SPi8bAbAwAAAAAAAAAAAAAAdHWpf6iUtAvD7iMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADX1/8CAAD//8jOyzo=")
lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x1, 0x0, &(0x7f0000000500), 0x0, 0x7, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0), 0x0, 0x10, 0x6, @void, @value}, 0x94)
lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0)
lgetxattr(0x0, 0x0, 0x0, 0x0)

34.544428093s ago: executing program 2 (id=3333):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x14)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x2)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r2}, 0x10)
capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000040)={0x0, 0x2})
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2000000, 0x0)

34.510784163s ago: executing program 1 (id=3334):
perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x0, 0x0, 0x7, 0x5, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xb}, 0x0, 0xc8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x80)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce8102030400fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef)

34.510104793s ago: executing program 2 (id=3335):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r0, 0x0, 0x0)
recvfrom$inet(r0, 0x0, 0x0, 0x40000102, 0x0, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0xffffffff, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, {0xa, 0x4e20, 0x4, @ipv4={'\x00', '\xff\xff', @local}, 0x3ff}, r4}}, 0x48)

34.430943073s ago: executing program 33 (id=3334):
perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x0, 0x0, 0x7, 0x5, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xb}, 0x0, 0xc8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x80)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce8102030400fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef)

34.388141713s ago: executing program 2 (id=3338):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r2=>0x0})
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r3, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18)
sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14)

34.365297213s ago: executing program 2 (id=3339):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0)
mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0)

34.320230273s ago: executing program 2 (id=3341):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000000)=0x930d, 0x4)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="190000000400000008000000ff"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r2}, &(0x7f0000000800), &(0x7f0000000840)=r3}, 0x20)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'erspan0\x00', <r4=>0x0})
sendto$packet(r0, &(0x7f00000011c0)="05030500d32e888df2dee5a8fc03", 0xe, 0x0, &(0x7f0000000140)={0x11, 0x8, r4}, 0x14)

34.171601642s ago: executing program 2 (id=3343):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r0}, &(0x7f0000000000), &(0x7f0000000200)=r1}, 0x1f)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
ioctl$USBDEVFS_FREE_STREAMS(r2, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303020007006000000002000020d3"])

34.142861903s ago: executing program 34 (id=3343):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r0}, &(0x7f0000000000), &(0x7f0000000200)=r1}, 0x1f)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
ioctl$USBDEVFS_FREE_STREAMS(r2, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303020007006000000002000020d3"])

3.654051425s ago: executing program 0 (id=3874):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r1)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10)
sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000020000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="440000004ec6"})

3.287675664s ago: executing program 0 (id=3888):
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000110020850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
syz_open_dev$loop(0x0, 0x75f, 0xa382)
memfd_create(0x0, 0x4)
socket$packet(0x11, 0x3, 0x300)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000000)={[{@debug}, {@errors_remount}]}, 0x1, 0x54e, &(0x7f0000000540)="$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")
r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8)

3.060357374s ago: executing program 7 (id=3884):
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000600), 0x0, 0x5e7, &(0x7f0000000c00)="$eJzs3c1vFVUbAPBnbj9oKe/bQoyKC2liDCRKSwsYYlzA1pAGP+LGjZUWRAo0tEaLJpQENybGjTEmrlyI/4US2bLSlQs3rgwJUUNcmXjN3DtTetvpJ+0dZH6/5HLnnHOn5wy3T+fMuefMDaCyBtN/ahF7I2I6iehP5hfKOiMrHGy+7t6fH51OH0nU66/9nkSS5eWvT7Lnvmznnoj48Yck9nQsr3dm7sr58ampyctZenj2wvTwzNyVg+cujJ+dPDt5cfSF0WNHjxw9NnJoU8d1tSDv5PV33+//ZOzNb776Oxn59pexJI7Hy9kLFx/HVhmMwcb/SbK8qO/YVldWko7s92TxW5x0ltggNiR//7oi4onoj464/+b1x8evlNo4YFvVk4g6UFGJ+IeKyvsB+bX90uvgWim9EqAd7p5oDgAsj//O5thg9DTGBnbeS2LxsE4SEZsbmWu1KyJu3xq7fubW2PXYpnE4oNj8tYh4sij+k0b8D0RPDDTiv9YS/2m/4FT2nOa/usn6lw4Vi39on2b896wa/7FC/L+VPl9txvDbm6x/8P7mO70t8d+72UMCAAAAAACAyrp5IiKeL/r8v7Yw/ycan//91bJfX0Qc34L6B5ekl3/+X7uzBdUABe6eiHipcP5vLZ/9O9CRbf2vMR+gKzlzbmryUET8PyIORNeOND2ySh0HP93z5Uplg9n8v/yR1n87mwuYteNO547WfSbGZ8cf9LiBiLvXIp4qnP+bLJz/k4L5v+nfg+l11rHn2RunVipbO/6B7VL/OmJ/4fn//l0rktXvzzHc6A8M572C5Z7+8LPvVqp/s/HvFhPw4NLz/87V438gWXy/npmN13F4rrNekN0I4c32/7uT1xu3nOnO8j4Yn529PBLRnZzsSHNb8kc33mZ4FOXxkMdLGv8Hnll9/K+o/98bEfNLfnbyR+ua4tzj//T9ulJ79P+hPGn8T2zo/L/xjdEbA9+vVP/6zv9HGuf6A1mO8T9o+iIP0+7W/IJw7Cwqand7AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBRUIuIXZHUhha2a7U00RcRj8XO2tSlmdnnzlx67+JEWtb4/v9a/k2//c10kn///8Ci9OiS9OGI2B0Rn3f0NtJDpy9NTZR98AAAAAAAAAAAAAAAAAAAAPCQ6CtY/z801Cz7raPs1gHbrrPsBgClKYj/n8poB9B+zv9QXeIfqkv8Q3WJf6gu8Q/VJf6husQ/VJf4BwAAAACAR8rufTd/TiJi/sXexiPVnZV1ldoyYLvVym4AUBq3+IHqMvUHqss1PpCsUd6z4k5r7bma6dMPsDMAAAAAAAAAAAAAVM7+vdb/Q1VZ/w/VZf0/VFe+/n9fye0A2s81PhBrrOQvXP+/5l4AAAAAAAAAAAAAwFaambtyfnxqavKyjTcejma0c6Ner19Nfwselvb8xzfyqfDtr7071vHifK3f+n5yeX+TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAVv8GAAD///5GJUU=")
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r0}, 0x10)
r1 = socket(0xa, 0x2400000001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000300)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)

2.165535223s ago: executing program 0 (id=3894):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10)
r2 = epoll_create1(0x0)
r3 = epoll_create1(0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000000d})
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000400)={0xa})
epoll_pwait(r2, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0)

1.257505352s ago: executing program 0 (id=3898):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kfree\x00', r1}, 0x10)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x8040, 0x0)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x0, 0x0, "ff00f7000000000000000000af88008300"})
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r3}, 0x18)
r4 = syz_open_pts(r2, 0x141601)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
syz_open_procfs(0x0, &(0x7f0000000140)='net/ipv6_route\x00')
close_range(r5, 0xffffffffffffffff, 0x0)

1.256858202s ago: executing program 7 (id=3901):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)

1.060347911s ago: executing program 7 (id=3905):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50)
r3 = mq_open(&(0x7f00000000c0)='!selin\x95}\x06a\x03\x00\x00\x00\x00\x00\x00\x00\xa8x\x00\xb97\xb7', 0x6e93ebbbcc0884f2, 0x0, 0x0)
mq_notify(r3, 0x0)

1.058257161s ago: executing program 0 (id=3917):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {@acl}, {@sysvgroups}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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")
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x34, 0x0, 0x8, 0x201, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @tcp}]}, 0x34}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10)
syz_emit_ethernet(0x86, &(0x7f0000000040)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x50, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "5b29ab", 0x0, 0x11, 0x0, @mcast2, @mcast1, [@dstopts={0x0, 0x0, '\x00', [@ra={0x5, 0x3a}]}], "fb36eeca6fad50b375a22a584d16ca55"}}}}}}}, 0x0)

935.555661ms ago: executing program 7 (id=3910):
r0 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x3)
fcntl$setsig(r1, 0xa, 0x12)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000170000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='kmem_cache_free\x00', r4}, 0x10)
poll(&(0x7f0000b2c000)=[{r2}], 0x2c, 0xffffffffffbffff8)
dup2(r1, r2)
fcntl$setown(r1, 0x8, r0)
tkill(r0, 0x13)

911.592261ms ago: executing program 6 (id=3911):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8)
sendto$inet6(r0, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
shutdown(r0, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)

910.487511ms ago: executing program 5 (id=3912):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$loop(0x0, 0x5, 0x103b83)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {0x6, 0x0, 0x1}, [@CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @gre}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9200}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x80)

839.910001ms ago: executing program 6 (id=3913):
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0xffffffffffffff57)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000500)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000005000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r0, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
gettid()
timer_create(0x0, 0x0, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

792.515341ms ago: executing program 5 (id=3916):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="200000006a000105fefdffffffdb", @ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x20008000)

792.047791ms ago: executing program 6 (id=3918):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kfree\x00', r1}, 0x10)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x8040, 0x0)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x0, 0x0, "ff00f7000000000000000000af88008300"})
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r3}, 0x18)
r4 = syz_open_pts(r2, 0x141601)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
syz_open_procfs(0x0, &(0x7f0000000140)='net/ipv6_route\x00')
close_range(r5, 0xffffffffffffffff, 0x0)

768.060551ms ago: executing program 0 (id=3920):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0)
write(r1, &(0x7f0000004200)='t', 0x1)
sendfile(r1, r0, 0x0, 0x3ffff)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xe, 0x4, 0x4, 0x401, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d)
sendfile(r1, r0, 0x0, 0x7ffff000)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000000), 0x6db6e559)

755.898121ms ago: executing program 7 (id=3921):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
ioperm(0x8, 0x401, 0x1000)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x4, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = syz_open_dev$sg(0x0, 0x0, 0x20c02)
read(r1, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r2}, 0x10)
fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8943, &(0x7f0000001980)={'macvtap0\x00', 0x0})
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f0000000280)={[{@errors_remount}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@block_validity}, {@quota}]}, 0x3, 0x44d, &(0x7f0000000a40)="$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")

755.563541ms ago: executing program 5 (id=3922):
creat(0x0, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20e42)
writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
syslog(0x2, 0x0, 0x0)
read(r1, &(0x7f0000002400)=""/4078, 0xfee)
sendmsg$nl_route(r0, 0x0, 0x0)

697.525171ms ago: executing program 6 (id=3924):
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b00000000010000000100000900000001"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x1, 0x803, 0x0)
pipe(&(0x7f0000000100))
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}}, 0x0)

444.539131ms ago: executing program 3 (id=3925):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
socket$inet6(0xa, 0x80001, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
memfd_secret(0x80000)
epoll_create1(0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
r0 = syz_io_uring_setup(0xb4e, &(0x7f0000000240)={0x0, 0xf92c, 0x10100, 0x12000000}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x36e10853185f3b19})
socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0))
write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

427.748991ms ago: executing program 3 (id=3926):
socket$kcm(0x10, 0x2, 0x0)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
r1 = socket(0x2, 0x80805, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000001400)=@raw={'raw\x00', 0x8, 0x3, 0x490, 0x0, 0x25, 0x148, 0x0, 0x60, 0x3f8, 0x2a8, 0x2a8, 0x3f8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2a0, 0x2e8, 0x0, {0x200003ae, 0x7f00}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x61, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'dvmrp1\x00', {0xff}}, 0x0, 0xa8, 0x110, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x0, 0x0, 0xc11b}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x8, 0xed, 0x0, 0x1, '\x00', 'syz0\x00', {0x4}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18)
pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_SCRNMAP(r2, 0x5608, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)

426.878721ms ago: executing program 5 (id=3927):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
unshare(0x24060400)
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)
unshare(0xc000080)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x143c62, 0x1e5)
ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000400)=0x1)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040))
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000040)="290000002000190f00003fffffffda060200007ffee80001dd0048040d000600fe7f00000005000500", 0x29}], 0x1)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc))
read(0xffffffffffffffff, &(0x7f0000000200)=""/209, 0xd1)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102})
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0)
close(0x3)

404.435031ms ago: executing program 3 (id=3928):
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000040000000000080000100850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'team_slave_0\x00'})
sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000cc0)={0x38, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}]}]}, 0x38}}, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0)

265.34029ms ago: executing program 3 (id=3929):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440), 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000040), &(0x7f0000000280)='%pS    \x00'}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf38, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
listen(r0, 0xa)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000200)="458d1fca4f1d0461442e12c4d90f415ec86aa74e137467ce700772d98322478e00f9689a5b085293e2f9ffffffd5b5762c4abbdeaa46aabe11c0f54ee3fe6ae0f859606f", 0x44}], 0x1)
r4 = accept4$unix(r0, 0x0, 0x0, 0x0)
recvmsg(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/68, 0x44}], 0x1}, 0x4c2103a0)

264.01673ms ago: executing program 6 (id=3930):
inotify_init()
syz_open_dev$sg(0x0, 0x0, 0x8002)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
r0 = getpid()
madvise(&(0x7f0000a5e000/0x1000)=nil, 0x1000, 0x17)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x10000000, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10)
process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)

204.52299ms ago: executing program 3 (id=3931):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000022000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r2}, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020100008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r4}, 0x10)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112})
ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400})

203.771831ms ago: executing program 5 (id=3932):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, 0x0, 0x4000080)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x1000410, &(0x7f0000000040)={[{@barrier_val={'barrier', 0x3d, 0x7}}, {@i_version}]}, 0x4, 0x504, &(0x7f0000019940)="$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")
mount$bind(0x0, 0x0, 0x0, 0x21, 0x0)
r3 = open$dir(&(0x7f0000000240)='.\x00', 0x0, 0x0)
fchown(r3, 0x0, 0x0)

166.89966ms ago: executing program 7 (id=3933):
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0100000005"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r0}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000070"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f0000000040)='fib6_table_lookup\x00', r2}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000039c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffffe8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r3, 0x18000000000002a0, 0x38, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f086dd", 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48)

70.37721ms ago: executing program 3 (id=3934):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0xfffff11a, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
fcntl$lock(0xffffffffffffffff, 0x26, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2})
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r3}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast})

452.6µs ago: executing program 6 (id=3935):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kfree\x00', r1}, 0x10)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x8040, 0x0)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x0, 0x0, "ff00f7000000000000000000af88008300"})
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r3}, 0x18)
r4 = syz_open_pts(r2, 0x141601)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
syz_open_procfs(0x0, &(0x7f0000000140)='net/ipv6_route\x00')
close_range(r5, 0xffffffffffffffff, 0x0)

0s ago: executing program 5 (id=3936):
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socket(0x10, 0x3, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1a37c1, 0x42)
r0 = openat(0xffffffffffffff9c, 0x0, 0x143042, 0x0)
prlimit64(0x0, 0x3, &(0x7f0000000080)={0x7, 0x88}, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000020017e9c0000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
ptrace(0x10, r1)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
ptrace(0x10, r1)

kernel console output (not intermixed with test programs):

mory!
[  124.676167][T11009] loop3: detected capacity change from 0 to 164
[  124.719484][T11009] syz.3.3163: attempt to access beyond end of device
[  124.719484][T11009] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164
[  124.746391][T11009] syz.3.3163: attempt to access beyond end of device
[  124.746391][T11009] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164
[  124.897532][T11016] loop3: detected capacity change from 0 to 8192
[  125.417325][T11038] loop3: detected capacity change from 0 to 8192
[  125.433215][T11038] vhci_hcd: invalid port number 61
[  125.702855][T11049] loop4: detected capacity change from 0 to 8192
[  125.730465][T11049] vhci_hcd: invalid port number 61
[  125.737563][T11059] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[  125.804588][ T4563] IPVS: starting estimator thread 0...
[  125.821004][T11067] syz.4.3187[11067] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  125.825610][ T3879] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  125.844492][ T3879] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  125.852013][ T3879] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  125.859438][ T3879] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  125.866826][ T3879] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  125.874253][ T3879] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  125.881839][ T3879] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  125.889286][ T3879] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  125.896727][ T3879] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  125.904222][ T3879] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  125.911672][ T3879] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  125.919086][T11065] IPVS: using max 2688 ests per chain, 134400 per kthread
[  125.919105][ T3879] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  125.933742][ T3879] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  125.941190][ T3879] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  125.948601][ T3879] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  125.955994][ T3879] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  125.963522][ T3879] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  126.020674][ T3879] hid-generic 0000:0000:0000.000A: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  126.131506][   T29] kauditd_printk_skb: 200 callbacks suppressed
[  126.131520][   T29] audit: type=1400 audit(1737405786.002:4245): avc:  denied  { execute } for  pid=11082 comm="syz.3.3195" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=26017 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  126.281197][T11087] loop4: detected capacity change from 0 to 128
[  126.336636][T11087] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  126.367676][T11087] ext4 filesystem being mounted at /563/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  126.405165][T11098] program syz.3.3200 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  126.483765][T11110] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3205'.
[  126.494274][T11110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  126.502978][T11110] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  126.566702][ T3298] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  126.619325][T11122] bpf_get_probe_write_proto: 2 callbacks suppressed
[  126.619339][T11122] syz.0.3218[11122] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  126.650695][T11122] syz.0.3218[11122] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  126.689065][T11122] syz.0.3218[11122] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  126.764397][   T29] audit: type=1326 audit(1737405786.632:4246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11136 comm="syz.4.3216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e61bd5d29 code=0x7ffc0000
[  126.799356][   T29] audit: type=1326 audit(1737405786.632:4247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11136 comm="syz.4.3216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e61bd5d29 code=0x7ffc0000
[  126.824103][   T29] audit: type=1326 audit(1737405786.632:4248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11136 comm="syz.4.3216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f2e61bd5d29 code=0x7ffc0000
[  126.835673][T11137] loop4: detected capacity change from 0 to 512
[  126.847692][   T29] audit: type=1326 audit(1737405786.632:4249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11136 comm="syz.4.3216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e61bd5d29 code=0x7ffc0000
[  126.877651][   T29] audit: type=1326 audit(1737405786.632:4250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11136 comm="syz.4.3216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2e61bd5d29 code=0x7ffc0000
[  126.893967][T11137] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  126.901061][   T29] audit: type=1326 audit(1737405786.632:4251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11136 comm="syz.4.3216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e61bd5d29 code=0x7ffc0000
[  126.934450][   T29] audit: type=1326 audit(1737405786.632:4252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11136 comm="syz.4.3216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7f2e61bd5d29 code=0x7ffc0000
[  126.957927][   T29] audit: type=1326 audit(1737405786.632:4253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11136 comm="syz.4.3216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e61bd5d29 code=0x7ffc0000
[  126.981523][   T29] audit: type=1326 audit(1737405786.632:4254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11136 comm="syz.4.3216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e61bd5d29 code=0x7ffc0000
[  127.032985][T11137] EXT4-fs (loop4): 1 truncate cleaned up
[  127.048631][T11137] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  127.091018][T11144] loop6: detected capacity change from 0 to 7
[  127.097184][T11144] Buffer I/O error on dev loop6, logical block 0, async page read
[  127.129068][T11144] Buffer I/O error on dev loop6, logical block 0, async page read
[  127.136919][T11144]  loop6: unable to read partition table
[  127.198474][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  127.208089][T11144] loop_reread_partitions: partition scan of loop6 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨�â·û
[  127.208089][T11144] 
) failed (rc=-5)
[  127.224816][T11152] syz.3.3223[11152] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  127.224935][T11152] syz.3.3223[11152] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  127.350480][T11157] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3225'.
[  127.378093][T11152] syz.3.3223[11152] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  127.476807][ T4563] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  127.495662][ T4563] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  127.503058][ T4563] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  127.555599][ T4563] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  127.563146][ T4563] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  127.570608][ T4563] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  127.578009][ T4563] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  127.585464][ T4563] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  127.592887][ T4563] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  127.600348][ T4563] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  127.607738][ T4563] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  127.615148][ T4563] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  127.622536][ T4563] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  127.629941][ T4563] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  127.638829][ T4563] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  127.646242][ T4563] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  127.653698][ T4563] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  127.661134][ T4563] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  127.668807][ T4563] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  127.676200][ T4563] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  127.683662][ T4563] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  127.691171][ T4563] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  127.698598][ T4563] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  127.706057][ T4563] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  127.713513][ T4563] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  127.720659][T11170] loop3: detected capacity change from 0 to 512
[  127.720892][ T4563] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  127.734492][ T4563] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  127.742008][ T4563] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  127.744533][T11170] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[  127.749835][ T4563] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  127.749858][ T4563] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  127.819610][ T4563] hid-generic 0000:0000:0000.000B: hidraw0: <UNKNOWN> HID vffffff.fd Device [syz0] on syz1
[  127.843264][T11170] loop3: detected capacity change from 0 to 512
[  127.877468][T11170] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities
[  127.978538][T11193] pim6reg1: entered promiscuous mode
[  127.983869][T11193] pim6reg1: entered allmulticast mode
[  128.125163][T11176] vhci_hcd: invalid port number 61
[  128.218899][T11205] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  128.227751][T11205] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  128.236531][T11205] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  128.245284][T11205] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  128.261634][T11205] vxlan0: entered promiscuous mode
[  128.266809][T11205] vxlan0: entered allmulticast mode
[  128.452715][T11221] loop6: detected capacity change from 0 to 7
[  128.482609][T11221] Buffer I/O error on dev loop6, logical block 0, async page read
[  128.515479][T11221] Buffer I/O error on dev loop6, logical block 0, async page read
[  128.523514][T11221]  loop6: unable to read partition table
[  128.533417][T11228] loop3: detected capacity change from 0 to 512
[  128.556825][T11228] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  128.570639][T11221] loop_reread_partitions: partition scan of loop6 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨�â·û
[  128.570639][T11221] 
) failed (rc=-5)
[  128.591260][T11228] EXT4-fs (loop3): 1 truncate cleaned up
[  128.616407][T11228] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  128.719435][ T3294] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  128.778629][T11245] syz.3.3263[11245] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  128.778762][T11245] syz.3.3263[11245] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  128.788858][T11225] lo speed is unknown, defaulting to 1000
[  128.834823][T11245] syz.3.3263[11245] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  128.869316][T11254] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3265'.
[  128.985750][T11225] chnl_net:caif_netlink_parms(): no params data found
[  129.089874][T11225] bridge0: port 1(bridge_slave_0) entered blocking state
[  129.097443][T11225] bridge0: port 1(bridge_slave_0) entered disabled state
[  129.152223][T11225] bridge_slave_0: entered allmulticast mode
[  129.177149][T11225] bridge_slave_0: entered promiscuous mode
[  129.200742][T11225] bridge0: port 2(bridge_slave_1) entered blocking state
[  129.207879][T11225] bridge0: port 2(bridge_slave_1) entered disabled state
[  129.227900][T11225] bridge_slave_1: entered allmulticast mode
[  129.234455][T11225] bridge_slave_1: entered promiscuous mode
[  129.256873][T11276] IPVS: Error connecting to the multicast addr
[  129.290402][T11279] loop3: detected capacity change from 0 to 512
[  129.306191][T11225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  129.316118][T11279] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  129.322586][T11225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  129.369241][T11279] EXT4-fs (loop3): 1 truncate cleaned up
[  129.374852][T11289] syz.2.3281[11289] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  129.389360][T11279] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  129.431525][T11225] team0: Port device team_slave_0 added
[  129.447530][T11225] team0: Port device team_slave_1 added
[  129.511514][T11225] batman_adv: batadv0: Adding interface: batadv_slave_0
[  129.518500][T11225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  129.544550][T11225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  129.617571][T11225] batman_adv: batadv0: Adding interface: batadv_slave_1
[  129.624634][T11225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  129.650680][T11225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  129.700676][T11225] hsr_slave_0: entered promiscuous mode
[  129.712031][ T3294] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  129.748457][T11225] hsr_slave_1: entered promiscuous mode
[  129.760720][T11225] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  129.769496][T11225] Cannot create hsr debugfs directory
[  129.879136][T11318] netlink: 'syz.2.3291': attribute type 1 has an invalid length.
[  129.928810][T11294] lo speed is unknown, defaulting to 1000
[  129.941605][T11323] program syz.2.3292 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  129.955934][T11314] msdos: Unknown parameter '0xffffffffffffffffÿÿÿÿÿÿÿÿ01777777777777777777777ÿ0xffffffffffffffff18446744073709551615ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ'
[  130.091703][T11225] 8021q: adding VLAN 0 to HW filter on device bond0
[  130.103440][T11225] 8021q: adding VLAN 0 to HW filter on device team0
[  130.114355][T10811] bridge0: port 1(bridge_slave_0) entered blocking state
[  130.121629][T10811] bridge0: port 1(bridge_slave_0) entered forwarding state
[  130.124557][T11334] loop3: detected capacity change from 0 to 512
[  130.147082][T11294] chnl_net:caif_netlink_parms(): no params data found
[  130.158122][T11334] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  130.171737][T11334] EXT4-fs (loop3): invalid journal inode
[  130.180227][T11334] EXT4-fs (loop3): can't get journal size
[  130.192712][T11334] EXT4-fs (loop3): 1 truncate cleaned up
[  130.200200][T10821] bridge0: port 2(bridge_slave_1) entered blocking state
[  130.207240][T10821] bridge0: port 2(bridge_slave_1) entered forwarding state
[  130.218918][T11334] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  130.263831][T11334] EXT4-fs warning (device loop3): verify_group_input:137: Cannot add at group 4294967295 (only 1 groups)
[  130.295098][ T3294] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  130.317323][T11225] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  130.350261][T11294] bridge0: port 1(bridge_slave_0) entered blocking state
[  130.357375][T11294] bridge0: port 1(bridge_slave_0) entered disabled state
[  130.365108][T11294] bridge_slave_0: entered allmulticast mode
[  130.371483][T11294] bridge_slave_0: entered promiscuous mode
[  130.378167][T11294] bridge0: port 2(bridge_slave_1) entered blocking state
[  130.385279][T11294] bridge0: port 2(bridge_slave_1) entered disabled state
[  130.392749][T11294] bridge_slave_1: entered allmulticast mode
[  130.399400][T11294] bridge_slave_1: entered promiscuous mode
[  130.421223][T11294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  130.422465][T11294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  130.442791][T11294] team0: Port device team_slave_0 added
[  130.444617][T11294] team0: Port device team_slave_1 added
[  130.470374][T11294] batman_adv: batadv0: Adding interface: batadv_slave_0
[  130.470387][T11294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  130.470411][T11294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  130.470972][T11294] batman_adv: batadv0: Adding interface: batadv_slave_1
[  130.470983][T11294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  130.471005][T11294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  130.505288][T11294] hsr_slave_0: entered promiscuous mode
[  130.507371][T11294] hsr_slave_1: entered promiscuous mode
[  130.514526][T11294] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  130.514541][T11294] Cannot create hsr debugfs directory
[  130.554019][T11225] 8021q: adding VLAN 0 to HW filter on device batadv0
[  130.732732][T11294] 8021q: adding VLAN 0 to HW filter on device bond0
[  130.751242][T11294] 8021q: adding VLAN 0 to HW filter on device team0
[  130.761144][T10817] bridge0: port 1(bridge_slave_0) entered blocking state
[  130.761176][T10817] bridge0: port 1(bridge_slave_0) entered forwarding state
[  130.768479][T10815] bridge0: port 2(bridge_slave_1) entered blocking state
[  130.768555][T10815] bridge0: port 2(bridge_slave_1) entered forwarding state
[  130.817611][T11294] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  130.862170][T11225] veth0_vlan: entered promiscuous mode
[  130.871853][T11225] veth1_vlan: entered promiscuous mode
[  130.901931][T11225] veth0_macvtap: entered promiscuous mode
[  130.904120][T11225] veth1_macvtap: entered promiscuous mode
[  130.920029][T11225] batman_adv: batadv0: Interface activated: batadv_slave_0
[  130.924311][T11225] batman_adv: batadv0: Interface activated: batadv_slave_1
[  130.935957][T11294] 8021q: adding VLAN 0 to HW filter on device batadv0
[  131.033325][T11378] program syz.5.3302 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  131.227580][T11294] veth0_vlan: entered promiscuous mode
[  131.246786][T11294] veth1_vlan: entered promiscuous mode
[  131.268038][   T29] kauditd_printk_skb: 193 callbacks suppressed
[  131.268051][   T29] audit: type=1400 audit(1737405791.132:4448): avc:  denied  { create } for  pid=11400 comm="syz.5.3310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  131.293883][   T29] audit: type=1400 audit(1737405791.132:4449): avc:  denied  { bind } for  pid=11400 comm="syz.5.3310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  131.299911][T11294] veth0_macvtap: entered promiscuous mode
[  131.313445][   T29] audit: type=1400 audit(1737405791.132:4450): avc:  denied  { listen } for  pid=11400 comm="syz.5.3310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  131.349889][T11406] program syz.5.3312 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  131.376221][T11294] veth1_macvtap: entered promiscuous mode
[  131.413916][T11294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  131.424488][T11294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.434812][   T29] audit: type=1400 audit(1737405791.142:4451): avc:  denied  { connect } for  pid=11400 comm="syz.5.3310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  131.454589][   T29] audit: type=1400 audit(1737405791.142:4452): avc:  denied  { accept } for  pid=11400 comm="syz.5.3310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  131.474301][   T29] audit: type=1400 audit(1737405791.142:4453): avc:  denied  { read } for  pid=11400 comm="syz.5.3310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  131.488826][T11294] batman_adv: batadv0: Interface activated: batadv_slave_0
[  131.519873][T11294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  131.530441][T11294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.582909][T11294] batman_adv: batadv0: Interface activated: batadv_slave_1
[  131.655681][   T29] audit: type=1400 audit(1737405791.522:4454): avc:  denied  { read write } for  pid=11413 comm="syz.2.3323" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  131.679056][   T29] audit: type=1400 audit(1737405791.522:4455): avc:  denied  { open } for  pid=11413 comm="syz.2.3323" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  131.702430][   T29] audit: type=1400 audit(1737405791.522:4456): avc:  denied  { ioctl } for  pid=11413 comm="syz.2.3323" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  131.799584][T11423] program syz.1.3313 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  131.837022][   T29] audit: type=1400 audit(1737405791.692:4457): avc:  denied  { ioctl } for  pid=11424 comm="syz.2.3315" path="socket:[26311]" dev="sockfs" ino=26311 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  131.987316][T11416] lo speed is unknown, defaulting to 1000
[  132.004137][T11448] bpf_get_probe_write_proto: 2 callbacks suppressed
[  132.004153][T11448] syz.2.3327[11448] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  132.046739][T11448] syz.2.3327[11448] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  132.071740][T11448] syz.2.3327[11448] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  132.177952][T11416] chnl_net:caif_netlink_parms(): no params data found
[  132.246492][T11467] loop5: detected capacity change from 0 to 1024
[  132.268457][T11467] EXT4-fs: Ignoring removed nobh option
[  132.301355][T11467] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  132.336402][T11416] bridge0: port 1(bridge_slave_0) entered blocking state
[  132.343561][T11416] bridge0: port 1(bridge_slave_0) entered disabled state
[  132.373116][T11467] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  132.389707][T11416] bridge_slave_0: entered allmulticast mode
[  132.401908][T11416] bridge_slave_0: entered promiscuous mode
[  132.409441][T11416] bridge0: port 2(bridge_slave_1) entered blocking state
[  132.416546][T11416] bridge0: port 2(bridge_slave_1) entered disabled state
[  132.423833][T11416] bridge_slave_1: entered allmulticast mode
[  132.430728][T11416] bridge_slave_1: entered promiscuous mode
[  132.436653][T11467] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback.
[  132.485928][T11416] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  132.517888][T11416] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  132.527435][T11225] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  132.560612][T11416] team0: Port device team_slave_0 added
[  132.580208][T11487] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3342'.
[  132.585309][T11416] team0: Port device team_slave_1 added
[  132.589151][T11487] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3342'.
[  132.681865][T11494] loop5: detected capacity change from 0 to 512
[  132.689222][T11416] batman_adv: batadv0: Adding interface: batadv_slave_0
[  132.696222][T11416] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  132.722342][T11416] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  132.738179][T11416] batman_adv: batadv0: Adding interface: batadv_slave_1
[  132.745144][T11416] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  132.771130][T11416] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  132.785522][T11494] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  132.798323][T11494] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  132.808485][T11479] lo speed is unknown, defaulting to 1000
[  132.890822][T11416] hsr_slave_0: entered promiscuous mode
[  132.898761][T11416] hsr_slave_1: entered promiscuous mode
[  132.904713][T11416] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  132.912364][T11416] Cannot create hsr debugfs directory
[  133.153829][T11479] chnl_net:caif_netlink_parms(): no params data found
[  133.190979][T11495] lo speed is unknown, defaulting to 1000
[  133.351795][T11479] bridge0: port 1(bridge_slave_0) entered blocking state
[  133.358977][T11479] bridge0: port 1(bridge_slave_0) entered disabled state
[  133.518462][T11479] bridge_slave_0: entered allmulticast mode
[  133.529652][T11479] bridge_slave_0: entered promiscuous mode
[  133.553054][T11416] 8021q: adding VLAN 0 to HW filter on device bond0
[  133.564533][T11479] bridge0: port 2(bridge_slave_1) entered blocking state
[  133.571680][T11479] bridge0: port 2(bridge_slave_1) entered disabled state
[  133.589345][T11479] bridge_slave_1: entered allmulticast mode
[  133.595890][T11479] bridge_slave_1: entered promiscuous mode
[  133.645937][T11495] chnl_net:caif_netlink_parms(): no params data found
[  133.656718][T11479] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  133.692521][T11416] 8021q: adding VLAN 0 to HW filter on device team0
[  133.714359][T11479] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  133.747198][T10815] bridge0: port 1(bridge_slave_0) entered blocking state
[  133.754278][T10815] bridge0: port 1(bridge_slave_0) entered forwarding state
[  133.762803][T11225] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  133.769010][T10815] bridge0: port 2(bridge_slave_1) entered blocking state
[  133.778862][T10815] bridge0: port 2(bridge_slave_1) entered forwarding state
[  133.801522][T11479] team0: Port device team_slave_0 added
[  133.808065][T11479] team0: Port device team_slave_1 added
[  133.834889][T11517] msdos: Unknown parameter '0xffffffffffffffffÿÿÿÿÿÿÿÿ01777777777777777777777ÿ0xffffffffffffffff18446744073709551615ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ'
[  133.851657][T11495] bridge0: port 1(bridge_slave_0) entered blocking state
[  133.858839][T11495] bridge0: port 1(bridge_slave_0) entered disabled state
[  133.866265][T11495] bridge_slave_0: entered allmulticast mode
[  133.872847][T11495] bridge_slave_0: entered promiscuous mode
[  133.883082][T11495] bridge0: port 2(bridge_slave_1) entered blocking state
[  133.890177][T11495] bridge0: port 2(bridge_slave_1) entered disabled state
[  133.897414][T11495] bridge_slave_1: entered allmulticast mode
[  133.903934][T11495] bridge_slave_1: entered promiscuous mode
[  133.916105][T11479] batman_adv: batadv0: Adding interface: batadv_slave_0
[  133.923215][T11479] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  133.949231][T11479] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  133.961873][T11525] netlink: 332 bytes leftover after parsing attributes in process `syz.5.3348'.
[  133.982482][T11525] netlink: 'syz.5.3348': attribute type 9 has an invalid length.
[  133.990317][T11525] netlink: 108 bytes leftover after parsing attributes in process `syz.5.3348'.
[  133.999372][T11525] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3348'.
[  134.027724][T11479] batman_adv: batadv0: Adding interface: batadv_slave_1
[  134.034795][T11479] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  134.060858][T11479] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  134.168513][T11495] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  134.198456][T11495] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  134.227866][T11479] hsr_slave_0: entered promiscuous mode
[  134.236534][T11479] hsr_slave_1: entered promiscuous mode
[  134.242800][T11479] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  134.251898][T11479] Cannot create hsr debugfs directory
[  134.287021][T11495] team0: Port device team_slave_0 added
[  134.298473][T11495] team0: Port device team_slave_1 added
[  134.350532][T11495] batman_adv: batadv0: Adding interface: batadv_slave_0
[  134.357509][T11495] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  134.383483][T11495] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  134.404065][T11495] batman_adv: batadv0: Adding interface: batadv_slave_1
[  134.411134][T11495] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  134.437193][T11495] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  134.452873][T11549] pimreg: entered allmulticast mode
[  134.470985][T11416] 8021q: adding VLAN 0 to HW filter on device batadv0
[  134.506741][T11549] pimreg: left allmulticast mode
[  134.515996][T11548] loop5: detected capacity change from 0 to 8192
[  134.529879][T11548] msdos: Unknown parameter '0xffffffffffffffffÿÿÿÿÿÿÿÿ01777777777777777777777ÿ0xffffffffffffffff18446744073709551615ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ'
[  134.580700][T11495] hsr_slave_0: entered promiscuous mode
[  134.588420][T11495] hsr_slave_1: entered promiscuous mode
[  134.594560][T11495] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  134.610548][T11495] Cannot create hsr debugfs directory
[  134.717542][T11566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  134.739767][T11566] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  134.827103][T11479] 8021q: adding VLAN 0 to HW filter on device bond0
[  134.844179][T11416] veth0_vlan: entered promiscuous mode
[  134.861102][T11479] 8021q: adding VLAN 0 to HW filter on device team0
[  134.882194][T11416] veth1_vlan: entered promiscuous mode
[  134.902778][T10815] bridge0: port 1(bridge_slave_0) entered blocking state
[  134.909975][T10815] bridge0: port 1(bridge_slave_0) entered forwarding state
[  134.919793][T10815] bridge0: port 2(bridge_slave_1) entered blocking state
[  134.926846][T10815] bridge0: port 2(bridge_slave_1) entered forwarding state
[  134.962723][T11479] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  134.994196][T11416] veth0_macvtap: entered promiscuous mode
[  135.003545][T11495] 8021q: adding VLAN 0 to HW filter on device bond0
[  135.018329][T11416] veth1_macvtap: entered promiscuous mode
[  135.048426][T11495] 8021q: adding VLAN 0 to HW filter on device team0
[  135.067903][T10821] bridge0: port 1(bridge_slave_0) entered blocking state
[  135.075014][T10821] bridge0: port 1(bridge_slave_0) entered forwarding state
[  135.096430][T10821] bridge0: port 2(bridge_slave_1) entered blocking state
[  135.103587][T10821] bridge0: port 2(bridge_slave_1) entered forwarding state
[  135.116243][T11416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  135.126769][T11416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  135.136627][T11416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  135.147598][T11416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  135.158631][T11416] batman_adv: batadv0: Interface activated: batadv_slave_0
[  135.173972][T11479] 8021q: adding VLAN 0 to HW filter on device batadv0
[  135.192502][T11416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  135.203042][T11416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  135.212876][T11416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  135.223377][T11416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  135.238242][T11416] batman_adv: batadv0: Interface activated: batadv_slave_1
[  135.457138][T11495] 8021q: adding VLAN 0 to HW filter on device batadv0
[  135.570462][T11479] veth0_vlan: entered promiscuous mode
[  135.606313][T11479] veth1_vlan: entered promiscuous mode
[  135.678827][T11479] veth0_macvtap: entered promiscuous mode
[  135.700847][T11626] loop3: detected capacity change from 0 to 512
[  135.708462][T11479] veth1_macvtap: entered promiscuous mode
[  135.729093][T11631] veth0_to_batadv: entered promiscuous mode
[  135.747143][T11626] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities
[  135.763314][T11631] veth0_to_batadv: left promiscuous mode
[  135.786390][T11635] netlink: 332 bytes leftover after parsing attributes in process `syz.0.3374'.
[  135.793308][T11495] veth0_vlan: entered promiscuous mode
[  135.806546][T11479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  135.817032][T11479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  135.826952][T11479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  135.837432][T11479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  135.841202][T11635] netlink: 'syz.0.3374': attribute type 9 has an invalid length.
[  135.847262][T11479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  135.854987][T11635] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3374'.
[  135.865402][T11479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  135.869689][T11479] batman_adv: batadv0: Interface activated: batadv_slave_0
[  135.874605][T11635] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3374'.
[  135.891302][T11479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  135.911039][T11479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  135.920893][T11479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  135.931408][T11479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  135.941234][T11479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  135.951743][T11479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  136.068166][T11479] batman_adv: batadv0: Interface activated: batadv_slave_1
[  136.090206][T11495] veth1_vlan: entered promiscuous mode
[  136.136408][T11638] netlink: 'syz.5.3375': attribute type 4 has an invalid length.
[  136.305431][T11495] veth0_macvtap: entered promiscuous mode
[  136.322615][T11495] veth1_macvtap: entered promiscuous mode
[  136.340683][T11495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  136.351403][T11495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  136.361478][T11495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  136.372193][T11495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  136.382039][T11495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  136.392539][T11495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  136.402446][T11495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  136.412947][T11495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  136.425581][T11495] batman_adv: batadv0: Interface activated: batadv_slave_0
[  136.437254][T11495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  136.447748][T11495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  136.457642][T11495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  136.468325][T11495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  136.478167][T11495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  136.488604][T11495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  136.498484][T11495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  136.509210][T11495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  136.527305][T11495] batman_adv: batadv0: Interface activated: batadv_slave_1
[  136.549149][   T29] kauditd_printk_skb: 102 callbacks suppressed
[  136.549163][   T29] audit: type=1326 audit(1737405796.422:4560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11655 comm="syz.6.3380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f5ea05d29 code=0x7ffc0000
[  136.598224][   T29] audit: type=1326 audit(1737405796.452:4561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11655 comm="syz.6.3380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f6f5ea05d29 code=0x7ffc0000
[  136.621881][   T29] audit: type=1326 audit(1737405796.452:4562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11655 comm="syz.6.3380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f5ea05d29 code=0x7ffc0000
[  136.645433][   T29] audit: type=1326 audit(1737405796.452:4563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11655 comm="syz.6.3380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f6f5ea05d29 code=0x7ffc0000
[  136.683174][T11660] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  136.705071][   T29] audit: type=1326 audit(1737405796.502:4564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11655 comm="syz.6.3380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f5ea05d29 code=0x7ffc0000
[  136.728815][   T29] audit: type=1326 audit(1737405796.502:4565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11655 comm="syz.6.3380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f5ea05d29 code=0x7ffc0000
[  136.752363][   T29] audit: type=1326 audit(1737405796.502:4566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11655 comm="syz.6.3380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f6f5ea05d29 code=0x7ffc0000
[  136.775747][   T29] audit: type=1326 audit(1737405796.502:4567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11655 comm="syz.6.3380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f5ea05d29 code=0x7ffc0000
[  136.799263][   T29] audit: type=1326 audit(1737405796.502:4568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11655 comm="syz.6.3380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f5ea05d29 code=0x7ffc0000
[  136.822815][   T29] audit: type=1326 audit(1737405796.502:4569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11655 comm="syz.6.3380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7f6f5ea05d29 code=0x7ffc0000
[  136.902863][T11672] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  136.986216][    C0] vcan0: j1939_tp_rxtimer: 0xffff88812ed12e00: rx timeout, send abort
[  136.994465][    C0] vcan0: j1939_tp_rxtimer: 0xffff88812ed13000: rx timeout, send abort
[  137.002842][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88812ed12e00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  137.017129][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88812ed13000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  137.071280][T11685] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  137.078778][T11685] batman_adv: batadv0: Removing interface: batadv_slave_0
[  137.096569][T11688] IPv4: Oversized IP packet from 172.20.20.24
[  137.102891][    C0] IPv4: Oversized IP packet from 172.20.20.24
[  137.109075][    C0] IPv4: Oversized IP packet from 172.20.20.24
[  137.120314][T11685] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  137.127775][T11685] batman_adv: batadv0: Removing interface: batadv_slave_1
[  137.176135][T11690] veth0_virt_wifi: entered promiscuous mode
[  137.183948][T11690] veth0_virt_wifi: left promiscuous mode
[  137.233808][T11695] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  137.247523][T11695] batadv_slave_0: entered promiscuous mode
[  137.340144][T11701] veth1_macvtap: left promiscuous mode
[  137.345710][T11701] macsec0: entered promiscuous mode
[  137.382122][T11706] veth0_to_batadv: entered promiscuous mode
[  137.396636][T11706] veth0_to_batadv: left promiscuous mode
[  137.420379][T11711] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  137.427851][T11711] batman_adv: batadv0: Removing interface: batadv_slave_0
[  137.482613][T11711] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  137.490165][T11711] batman_adv: batadv0: Removing interface: batadv_slave_1
[  137.510323][T11718] loop3: detected capacity change from 0 to 512
[  137.536659][T11722] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 1, id = 0
[  137.546491][T11721] IPVS: stopping master sync thread 11722 ...
[  137.562772][T11718] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  137.581731][T11718] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  137.650189][T11724] veth1_macvtap: left promiscuous mode
[  137.655705][T11724] macsec0: entered promiscuous mode
[  137.666419][T11735] serio: Serial port ptm0
[  137.713343][T11416] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  137.727079][T11739] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  137.776328][T11746] loop6: detected capacity change from 0 to 128
[  137.800745][T11746] syz.6.3418: attempt to access beyond end of device
[  137.800745][T11746] loop6: rw=2049, sector=145, nr_sectors = 473 limit=128
[  137.821142][T11746] syz.6.3418: attempt to access beyond end of device
[  137.821142][T11746] loop6: rw=2049, sector=625, nr_sectors = 1 limit=128
[  137.834689][T11746] Buffer I/O error on dev loop6, logical block 625, lost async page write
[  137.881458][ T3306] kworker/u8:5: attempt to access beyond end of device
[  137.881458][ T3306] loop6: rw=1, sector=626, nr_sectors = 1 limit=128
[  137.894884][ T3306] Buffer I/O error on dev loop6, logical block 626, lost async page write
[  137.944409][ T3306] kworker/u8:5: attempt to access beyond end of device
[  137.944409][ T3306] loop6: rw=1, sector=627, nr_sectors = 1 limit=128
[  137.957827][ T3306] Buffer I/O error on dev loop6, logical block 627, lost async page write
[  137.995276][T11758] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3422'.
[  138.002231][ T3306] kworker/u8:5: attempt to access beyond end of device
[  138.002231][ T3306] loop6: rw=1, sector=628, nr_sectors = 1 limit=128
[  138.004280][T11758] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3422'.
[  138.017542][ T3306] Buffer I/O error on dev loop6, logical block 628, lost async page write
[  138.039253][T11749] lo speed is unknown, defaulting to 1000
[  138.047791][ T3306] kworker/u8:5: attempt to access beyond end of device
[  138.047791][ T3306] loop6: rw=1, sector=629, nr_sectors = 1 limit=128
[  138.061262][ T3306] Buffer I/O error on dev loop6, logical block 629, lost async page write
[  138.117841][T11765] veth1_macvtap: left promiscuous mode
[  138.122996][ T3306] kworker/u8:5: attempt to access beyond end of device
[  138.122996][ T3306] loop6: rw=1, sector=630, nr_sectors = 1 limit=128
[  138.123427][T11765] macsec0: entered promiscuous mode
[  138.136641][ T3306] Buffer I/O error on dev loop6, logical block 630, lost async page write
[  138.164661][    C0] IPv4: Oversized IP packet from 172.20.20.24
[  138.189617][T11755] lo speed is unknown, defaulting to 1000
[  138.198345][T11758] geneve2: entered allmulticast mode
[  138.205496][ T3306] kworker/u8:5: attempt to access beyond end of device
[  138.205496][ T3306] loop6: rw=1, sector=631, nr_sectors = 1 limit=128
[  138.218858][ T3306] Buffer I/O error on dev loop6, logical block 631, lost async page write
[  138.243074][ T3306] kworker/u8:5: attempt to access beyond end of device
[  138.243074][ T3306] loop6: rw=1, sector=632, nr_sectors = 1 limit=128
[  138.256465][ T3306] Buffer I/O error on dev loop6, logical block 632, lost async page write
[  138.437149][T11772] bridge0: port 3(hsr_slave_1) entered blocking state
[  138.444040][T11772] bridge0: port 3(hsr_slave_1) entered disabled state
[  138.473857][T11772] hsr_slave_1: entered allmulticast mode
[  138.493995][T11772] hsr_slave_1: left allmulticast mode
[  138.570285][T11786] syz.0.3433[11786] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  138.570407][T11786] syz.0.3433[11786] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  138.584005][T11782] veth0_virt_wifi: entered promiscuous mode
[  138.606129][T11786] syz.0.3433[11786] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  138.607865][T11782] veth1_macvtap: entered promiscuous mode
[  138.627410][T11782] veth1_macvtap: left promiscuous mode
[  138.639617][T11782] veth0_virt_wifi: left promiscuous mode
[  138.651597][T11786] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3433'.
[  138.708507][T11792] bridge: RTM_NEWNEIGH with invalid ether address
[  139.011362][T11827] loop7: detected capacity change from 0 to 4096
[  139.040715][T11827] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  139.097116][T11838] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3459'.
[  139.146499][T11838] netlink: 5 bytes leftover after parsing attributes in process `syz.6.3459'.
[  139.155548][T11838] netlink: 5 bytes leftover after parsing attributes in process `syz.6.3459'.
[  139.392098][T11495] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  139.907871][T11866] loop3: detected capacity change from 0 to 512
[  139.923142][T11866] EXT4-fs: inline encryption not supported
[  139.987449][T11866] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  139.999001][T11866] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it
[  140.009252][T11866] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.3470: Corrupt directory, running e2fsck is recommended
[  140.030554][T11866] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[  140.038992][T11866] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.3470: corrupted in-inode xattr: invalid ea_ino
[  140.116375][T11866] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.3470: couldn't read orphan inode 15 (err -117)
[  140.165824][T11866] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  140.208944][T11884] raw_sendmsg: syz.0.3478 forgot to set AF_INET. Fix it!
[  140.230385][T11866] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  140.241954][T11866] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it
[  140.252045][T11866] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.3470: Corrupt directory, running e2fsck is recommended
[  140.342048][T11890] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  140.353849][T11890] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it
[  140.364057][T11890] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.3470: Corrupt directory, running e2fsck is recommended
[  140.381637][T11893] netlink: 'syz.6.3480': attribute type 16 has an invalid length.
[  140.389505][T11893] netlink: 64138 bytes leftover after parsing attributes in process `syz.6.3480'.
[  140.417305][T11897] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  140.429024][T11897] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it
[  140.439265][T11897] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.3470: Corrupt directory, running e2fsck is recommended
[  140.470004][T11900] team0 (unregistering): Port device team_slave_0 removed
[  140.470271][T11866] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  140.500093][T11900] team0 (unregistering): Port device team_slave_1 removed
[  140.506454][T11866] EXT4-fs error (device loop3): ext4_readdir:261: inode #2: block 3: comm syz.3.3470: path /20/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0
[  140.529843][T11866] EXT4-fs error (device loop3): ext4_readdir:261: inode #2: block 8: comm syz.3.3470: path /20/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=33261, rec_len=1050, size=1024 fake=0
[  140.550549][T11903] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3485'.
[  140.560363][T11902] batadv_slave_1: entered promiscuous mode
[  140.566536][T11903] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  140.579351][T11903] batadv_slave_1 (unregistering): left promiscuous mode
[  140.586689][T11903] batman_adv: batadv0: Removing interface: batadv_slave_1
[  140.662382][T11416] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  140.714901][T11912] syz.5.3489[11912] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  140.714966][T11912] syz.5.3489[11912] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  140.728268][T11912] syz.5.3489[11912] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  140.757810][T11912] syz.5.3489[11912] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  140.785644][T11912] syz.5.3489[11912] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  140.801684][T11915] hub 6-0:1.0: USB hub found
[  140.829964][T11915] hub 6-0:1.0: 8 ports detected
[  140.835207][T11912] syz.5.3489[11912] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  140.918726][T11927] loop6: detected capacity change from 0 to 512
[  141.002380][T11927] EXT4-fs (loop6): #blocks per group too big: 65280
[  141.203550][T11943] loop7: detected capacity change from 0 to 512
[  141.214305][T11940] loop0: detected capacity change from 0 to 1024
[  141.236341][T11943] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem
[  141.257235][T11940] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  141.280682][T11943] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002]
[  141.318965][T11294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  141.332106][T11943] EXT4-fs error (device loop7): ext4_xattr_ibody_find:2240: inode #15: comm syz.7.3501: corrupted in-inode xattr: e_value size too large
[  141.363751][T11943] EXT4-fs error (device loop7): ext4_orphan_get:1394: comm syz.7.3501: couldn't read orphan inode 15 (err -117)
[  141.378072][T11943] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  141.464131][T11951] loop0: detected capacity change from 0 to 164
[  141.480564][T11951] Unable to read rock-ridge attributes
[  141.644313][   T29] kauditd_printk_skb: 160 callbacks suppressed
[  141.644327][   T29] audit: type=1400 audit(1737405801.512:4730): avc:  denied  { remove_name } for  pid=11942 comm="syz.7.3501" name="file0" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  141.673261][   T29] audit: type=1400 audit(1737405801.512:4731): avc:  denied  { rename } for  pid=11942 comm="syz.7.3501" name="file0" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  141.786764][   T29] audit: type=1400 audit(1737405801.652:4732): avc:  denied  { bind } for  pid=11955 comm="syz.6.3505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  141.855165][   T29] audit: type=1400 audit(1737405801.682:4733): avc:  denied  { setopt } for  pid=11955 comm="syz.6.3505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  141.875362][   T29] audit: type=1400 audit(1737405801.682:4734): avc:  denied  { write } for  pid=11955 comm="syz.6.3505" path="socket:[31056]" dev="sockfs" ino=31056 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  141.918814][T11495] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  141.974465][T11965] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3509'.
[  141.984935][   T29] audit: type=1400 audit(1737405801.772:4735): avc:  denied  { shutdown } for  pid=11961 comm="syz.6.3506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  142.004827][   T29] audit: type=1400 audit(1737405801.772:4736): avc:  denied  { getopt } for  pid=11961 comm="syz.6.3506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  142.024766][   T29] audit: type=1400 audit(1737405801.772:4737): avc:  denied  { name_connect } for  pid=11961 comm="syz.6.3506" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1
[  142.114959][   T29] audit: type=1400 audit(1737405801.862:4738): avc:  denied  { mount } for  pid=11966 comm="syz.3.3510" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  142.137287][   T29] audit: type=1400 audit(1737405801.862:4739): avc:  denied  { write } for  pid=11966 comm="syz.3.3510" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  142.896400][T11986] loop5: detected capacity change from 0 to 1024
[  142.923534][T11986] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869)
[  142.948063][T11986] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  142.948152][T11986] EXT4-fs error (device loop5): ext4_get_journal_inode:5809: comm syz.5.3516: inode #1: comm syz.5.3516: iget: illegal inode #
[  142.958558][T11986] EXT4-fs (loop5): no journal found
[  142.958573][T11986] EXT4-fs (loop5): can't get journal size
[  142.963634][T11986] EXT4-fs (loop5): failed to initialize system zone (-22)
[  142.963665][T11986] EXT4-fs (loop5): mount failed
[  143.355853][T12005] syz.6.3523[12005] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  143.520758][T12014] ipvlan2: entered promiscuous mode
[  143.553388][T12016] loop6: detected capacity change from 0 to 128
[  143.626516][T12016] syz.6.3528: attempt to access beyond end of device
[  143.626516][T12016] loop6: rw=2049, sector=145, nr_sectors = 896 limit=128
[  143.663578][T12012] syzkaller0: entered promiscuous mode
[  143.669116][T12012] syzkaller0: entered allmulticast mode
[  143.678823][T12016] syz.6.3528: attempt to access beyond end of device
[  143.678823][T12016] loop6: rw=524288, sector=529, nr_sectors = 256 limit=128
[  143.694286][T12016] syz.6.3528: attempt to access beyond end of device
[  143.694286][T12016] loop6: rw=0, sector=657, nr_sectors = 8 limit=128
[  143.712344][T12016] syz.6.3528: attempt to access beyond end of device
[  143.712344][T12016] loop6: rw=0, sector=657, nr_sectors = 8 limit=128
[  143.809562][T12026] loop6: detected capacity change from 0 to 1024
[  143.818145][T12026] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  143.829166][T12026] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869)
[  143.839019][T12026] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  143.852734][T12026] EXT4-fs (loop6): invalid journal inode
[  143.859107][T12026] EXT4-fs (loop6): can't get journal size
[  143.881479][T12026] EXT4-fs error (device loop6): ext4_protect_reserved_inode:182: inode #3: comm syz.6.3532: blocks 2-2 from inode overlap system zone
[  143.895703][T12026] EXT4-fs (loop6): failed to initialize system zone (-117)
[  143.903035][T12026] EXT4-fs (loop6): mount failed
[  143.966003][T12032] loop5: detected capacity change from 0 to 512
[  143.974916][T12032] EXT4-fs: inline encryption not supported
[  143.985373][T12032] EXT4-fs warning (device loop5): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  143.997025][T12032] EXT4-fs warning (device loop5): dx_probe:881: Enable large directory feature to access it
[  144.007198][T12032] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.3534: Corrupt directory, running e2fsck is recommended
[  144.025932][T12032] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117
[  144.035264][T12032] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.3534: corrupted in-inode xattr: invalid ea_ino
[  144.050621][T12032] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.3534: couldn't read orphan inode 15 (err -117)
[  144.063567][T12032] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  144.096661][T12032] EXT4-fs warning (device loop5): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  144.108200][T12032] EXT4-fs warning (device loop5): dx_probe:881: Enable large directory feature to access it
[  144.118301][T12032] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.3534: Corrupt directory, running e2fsck is recommended
[  144.143549][T12032] EXT4-fs warning (device loop5): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  144.155215][T12032] EXT4-fs warning (device loop5): dx_probe:881: Enable large directory feature to access it
[  144.165401][T12032] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.3534: Corrupt directory, running e2fsck is recommended
[  144.242009][T12045] EXT4-fs warning (device loop5): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  144.253564][T12045] EXT4-fs warning (device loop5): dx_probe:881: Enable large directory feature to access it
[  144.263703][T12045] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.3534: Corrupt directory, running e2fsck is recommended
[  144.293614][T12049] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3539'.
[  144.325287][T12047] loop3: detected capacity change from 0 to 512
[  144.343039][T12047] EXT4-fs: Ignoring removed orlov option
[  144.357710][T12032] EXT4-fs warning (device loop5): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  144.372440][T12047] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  144.381361][T12032] EXT4-fs error (device loop5): ext4_readdir:261: inode #2: block 3: comm syz.5.3534: path /49/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0
[  144.385090][T12047] ext4 filesystem being mounted at /35/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  144.477755][T12032] EXT4-fs error (device loop5): ext4_readdir:261: inode #2: block 8: comm syz.5.3534: path /49/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=33261, rec_len=1050, size=1024 fake=0
[  144.528052][T12054] xt_CT: No such helper "syz0"
[  144.557204][T11225] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  144.586839][T11416] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  144.784665][T12071] loop3: detected capacity change from 0 to 512
[  144.794658][T12067] team0 (unregistering): Port device team_slave_0 removed
[  144.811952][T12071] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  144.827192][T12067] team0 (unregistering): Port device team_slave_1 removed
[  144.842910][T12071] EXT4-fs (loop3): 1 truncate cleaned up
[  144.856471][T12073] serio: Serial port ptm0
[  144.861306][T12071] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  144.919124][T12071] 9Hÿ: renamed from bond0 (while UP)
[  144.927590][T12071] 9Hÿ: entered promiscuous mode
[  144.932667][T12071] bond_slave_0: entered promiscuous mode
[  144.938378][T12071] bond_slave_1: entered promiscuous mode
[  144.975105][T11416] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  145.029443][T12083] netlink: 31 bytes leftover after parsing attributes in process `syz.3.3552'.
[  145.237385][T12098] ipvlan2: entered promiscuous mode
[  145.365452][T12104] bpf_get_probe_write_proto: 2 callbacks suppressed
[  145.365466][T12104] syz.5.3563[12104] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  145.408796][T12104] syz.5.3563[12104] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  145.474449][T12104] syz.5.3563[12104] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  145.535599][T12102] hub 6-0:1.0: USB hub found
[  145.572161][T12102] hub 6-0:1.0: 8 ports detected
[  145.619731][T12116] pim6reg1: entered promiscuous mode
[  145.619749][T12116] pim6reg1: entered allmulticast mode
[  145.743719][T12114] loop0: detected capacity change from 0 to 256
[  145.768919][T12123] loop3: detected capacity change from 0 to 512
[  145.783324][T12123] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.3569: corrupted in-inode xattr: invalid ea_ino
[  145.812833][T12123] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.3569: couldn't read orphan inode 15 (err -117)
[  145.831914][T12123] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  145.836539][T12123] EXT4-fs error (device loop3): ext4_inlinedir_to_tree:1404: inode #12: block 7: comm syz.3.3569: path /43/file1/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0
[  145.837444][T12123] EXT4-fs error (device loop3): ext4_inlinedir_to_tree:1404: inode #12: block 7: comm syz.3.3569: path /43/file1/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0
[  145.865762][T12114] FAT-fs (loop0): Directory bread(block 64) failed
[  145.865850][T12114] FAT-fs (loop0): Directory bread(block 65) failed
[  145.865991][T12114] FAT-fs (loop0): Directory bread(block 66) failed
[  145.866040][T12114] FAT-fs (loop0): Directory bread(block 67) failed
[  145.866260][T12114] FAT-fs (loop0): Directory bread(block 68) failed
[  145.866311][T12114] FAT-fs (loop0): Directory bread(block 69) failed
[  145.866428][T12114] FAT-fs (loop0): Directory bread(block 70) failed
[  145.866492][T12114] FAT-fs (loop0): Directory bread(block 71) failed
[  145.866518][T12114] FAT-fs (loop0): Directory bread(block 72) failed
[  145.866640][T12114] FAT-fs (loop0): Directory bread(block 73) failed
[  145.871864][T11416] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  146.053662][T12138] vlan2: entered promiscuous mode
[  146.053711][T12138] vlan2: entered allmulticast mode
[  146.053724][T12138] hsr_slave_1: entered allmulticast mode
[  146.059885][T12138] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3574'.
[  146.086210][T12138] hsr_slave_1 (unregistering): left allmulticast mode
[  146.103500][T12138] hsr_slave_1 (unregistering): left promiscuous mode
[  146.218448][T12146] loop3: detected capacity change from 0 to 128
[  146.258101][T12149] loop0: detected capacity change from 0 to 512
[  146.262550][T12149] EXT4-fs: Ignoring removed orlov option
[  146.272659][T12144] batadv_slave_1: entered promiscuous mode
[  146.272912][T12144] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3575'.
[  146.273033][T12144] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  146.277306][T12144] batadv_slave_1 (unregistering): left promiscuous mode
[  146.277400][T12144] batman_adv: batadv0: Removing interface: batadv_slave_1
[  146.306484][T12149] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  146.306559][T12149] ext4 filesystem being mounted at /69/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  146.376036][T11294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  146.491587][T12156] hub 6-0:1.0: USB hub found
[  146.491753][T12156] hub 6-0:1.0: 8 ports detected
[  146.729504][T12170] lo speed is unknown, defaulting to 1000
[  146.815989][T12178] loop7: detected capacity change from 0 to 16384
[  146.881194][T12178] I/O error, dev loop7, sector 3328 op 0x0:(READ) flags 0x80700 phys_seg 5 prio class 0
[  146.909577][T12178] I/O error, dev loop7, sector 3584 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0
[  146.956640][   T29] kauditd_printk_skb: 125 callbacks suppressed
[  146.956654][   T29] audit: type=1326 audit(1737405806.822:4865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12183 comm="syz.6.3591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f5ea05d29 code=0x7ffc0000
[  146.986679][T12178] I/O error, dev loop7, sector 3328 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  146.996155][T12178] Buffer I/O error on dev loop7, logical block 416, async page read
[  147.005940][   T29] audit: type=1326 audit(1737405806.862:4866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12183 comm="syz.6.3591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6f5ea05d29 code=0x7ffc0000
[  147.029497][   T29] audit: type=1326 audit(1737405806.862:4867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12183 comm="syz.6.3591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f5ea05d29 code=0x7ffc0000
[  147.053171][   T29] audit: type=1326 audit(1737405806.862:4868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12183 comm="syz.6.3591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f6f5ea05d29 code=0x7ffc0000
[  147.076638][   T29] audit: type=1326 audit(1737405806.862:4869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12183 comm="syz.6.3591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f5ea05d29 code=0x7ffc0000
[  147.100142][   T29] audit: type=1326 audit(1737405806.862:4870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12183 comm="syz.6.3591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6f5ea05d29 code=0x7ffc0000
[  147.123571][   T29] audit: type=1326 audit(1737405806.862:4871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12183 comm="syz.6.3591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f5ea05d29 code=0x7ffc0000
[  147.147047][   T29] audit: type=1326 audit(1737405806.862:4872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12183 comm="syz.6.3591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f6f5ea05d29 code=0x7ffc0000
[  147.170506][   T29] audit: type=1326 audit(1737405806.862:4873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12183 comm="syz.6.3591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f5ea05d29 code=0x7ffc0000
[  147.201005][T12188] syz.0.3602[12188] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  147.201109][T12188] syz.0.3602[12188] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  147.215488][T12177] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0
[  147.236756][T12177] Buffer I/O error on dev loop7, logical block 0, lost async page write
[  147.245272][T12177] Buffer I/O error on dev loop7, logical block 1, lost async page write
[  147.253768][T12177] Buffer I/O error on dev loop7, logical block 2, lost async page write
[  147.260303][T12188] syz.0.3602[12188] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  147.262251][T12177] Buffer I/O error on dev loop7, logical block 3, lost async page write
[  147.282280][T12177] Buffer I/O error on dev loop7, logical block 4, lost async page write
[  147.290741][T12177] Buffer I/O error on dev loop7, logical block 5, lost async page write
[  147.299216][T12177] Buffer I/O error on dev loop7, logical block 6, lost async page write
[  147.307644][T12177] Buffer I/O error on dev loop7, logical block 7, lost async page write
[  147.316119][T12177] Buffer I/O error on dev loop7, logical block 8, lost async page write
[  147.332948][T12187] loop6: detected capacity change from 0 to 512
[  147.339625][T12187] EXT4-fs: Ignoring removed orlov option
[  147.345386][   T29] audit: type=1400 audit(1737405807.202:4874): avc:  denied  { read } for  pid=12186 comm="syz.0.3602" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  147.371187][T12177] I/O error, dev loop7, sector 1024 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0
[  147.384167][T12177] I/O error, dev loop7, sector 2048 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0
[  147.385743][T12187] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  147.395618][T12177] I/O error, dev loop7, sector 3072 op 0x1:(WRITE) flags 0x800 phys_seg 32 prio class 0
[  147.421565][T12187] ext4 filesystem being mounted at /46/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  147.492122][T12199] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  147.581833][T12206] netlink: 'syz.3.3595': attribute type 10 has an invalid length.
[  147.593362][T12203] hub 6-0:1.0: USB hub found
[  147.600235][T12206] geneve1: entered promiscuous mode
[  147.616054][T12203] hub 6-0:1.0: 8 ports detected
[  147.617302][T12206] 9Hÿ: (slave geneve1): Enslaving as an active interface with an up link
[  147.648692][T12211] Process accounting resumed
[  147.659464][T11479] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  147.701047][T12213] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3601'.
[  147.870061][T12226] $Hÿ: renamed from bond0 (while UP)
[  147.884964][T12226] $Hÿ: entered promiscuous mode
[  147.890077][T12226] bond_slave_0: entered promiscuous mode
[  147.895821][T12226] bond_slave_1: entered promiscuous mode
[  147.940071][T12220] lo speed is unknown, defaulting to 1000
[  148.120014][T12236] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3610'.
[  148.129143][T12236] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3610'.
[  148.146115][T12236] bridge0: entered promiscuous mode
[  148.155732][T12236] syz_tun: entered promiscuous mode
[  148.236424][T12240] loop5: detected capacity change from 0 to 512
[  148.257602][T12240] EXT4-fs: Ignoring removed orlov option
[  148.270302][T12240] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  148.309626][T12240] ext4 filesystem being mounted at /67/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  148.393919][T12254] tipc: Started in network mode
[  148.399003][T12254] tipc: Node identity 863e3837e6a4, cluster identity 4711
[  148.406372][T12254] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  148.434962][T11225] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  148.436440][T12254] syzkaller0: MTU too low for tipc bearer
[  148.449771][T12254] tipc: Disabling bearer <eth:syzkaller0>
[  148.492932][T12256] loop5: detected capacity change from 0 to 128
[  148.512292][T12256] syz.5.3618: attempt to access beyond end of device
[  148.512292][T12256] loop5: rw=2049, sector=145, nr_sectors = 473 limit=128
[  148.550666][T12256] syz.5.3618: attempt to access beyond end of device
[  148.550666][T12256] loop5: rw=2049, sector=625, nr_sectors = 1 limit=128
[  148.590875][T10815] kworker/u8:12: attempt to access beyond end of device
[  148.590875][T10815] loop5: rw=1, sector=626, nr_sectors = 1 limit=128
[  148.607664][T10815] kworker/u8:12: attempt to access beyond end of device
[  148.607664][T10815] loop5: rw=1, sector=627, nr_sectors = 1 limit=128
[  148.631808][T10815] kworker/u8:12: attempt to access beyond end of device
[  148.631808][T10815] loop5: rw=1, sector=628, nr_sectors = 1 limit=128
[  148.654279][T10815] kworker/u8:12: attempt to access beyond end of device
[  148.654279][T10815] loop5: rw=1, sector=629, nr_sectors = 1 limit=128
[  148.677251][T10815] kworker/u8:12: attempt to access beyond end of device
[  148.677251][T10815] loop5: rw=1, sector=630, nr_sectors = 1 limit=128
[  148.700393][T12258] batman_adv: batadv0: Removing interface: batadv_slave_0
[  148.707762][T10815] kworker/u8:12: attempt to access beyond end of device
[  148.707762][T10815] loop5: rw=1, sector=631, nr_sectors = 1 limit=128
[  148.726630][T10815] kworker/u8:12: attempt to access beyond end of device
[  148.726630][T10815] loop5: rw=1, sector=632, nr_sectors = 1 limit=128
[  148.891220][T12265] 9pnet: p9_errstr2errno: server reported unknown error 
[  149.112376][T12273] ALSA: seq fatal error: cannot create timer (-19)
[  149.143301][T12280] netlink: 'syz.3.3638': attribute type 4 has an invalid length.
[  149.171163][T12280] netlink: 'syz.3.3638': attribute type 4 has an invalid length.
[  149.251041][T12288] loop3: detected capacity change from 0 to 128
[  149.316137][T12288] syz.3.3630: attempt to access beyond end of device
[  149.316137][T12288] loop3: rw=2049, sector=145, nr_sectors = 473 limit=128
[  149.333077][T12285] hub 6-0:1.0: USB hub found
[  149.340135][T12285] hub 6-0:1.0: 8 ports detected
[  149.349352][T12295] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3631'.
[  149.358504][T12295] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3631'.
[  149.372452][T12288] syz.3.3630: attempt to access beyond end of device
[  149.372452][T12288] loop3: rw=2049, sector=625, nr_sectors = 1 limit=128
[  149.413500][T12289] lo speed is unknown, defaulting to 1000
[  149.425576][T10815] kworker/u8:12: attempt to access beyond end of device
[  149.425576][T10815] loop3: rw=1, sector=626, nr_sectors = 1 limit=128
[  149.443373][T12295] geneve2: entered allmulticast mode
[  149.448950][T10815] kworker/u8:12: attempt to access beyond end of device
[  149.448950][T10815] loop3: rw=1, sector=627, nr_sectors = 1 limit=128
[  149.465480][T10815] kworker/u8:12: attempt to access beyond end of device
[  149.465480][T10815] loop3: rw=1, sector=628, nr_sectors = 1 limit=128
[  149.712307][T12305] loop5: detected capacity change from 0 to 512
[  149.743621][T12305] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  149.787756][T12305] EXT4-fs (loop5): 1 truncate cleaned up
[  149.814942][T12305] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  149.858521][T12305] 9Hÿ: renamed from bond0 (while UP)
[  149.865890][T12305] 9Hÿ: entered promiscuous mode
[  149.871039][T12305] bond_slave_0: entered promiscuous mode
[  149.876914][T12305] bond_slave_1: entered promiscuous mode
[  149.917371][T12316] pim6reg1: entered promiscuous mode
[  149.922733][T12316] pim6reg1: entered allmulticast mode
[  149.983282][T12323] dummy0: entered promiscuous mode
[  149.999355][T11225] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  150.022967][T12323] macvtap1: entered promiscuous mode
[  150.028460][T12323] macvtap1: entered allmulticast mode
[  150.028473][T12323] dummy0: entered allmulticast mode
[  150.062848][T12323] dummy0: left allmulticast mode
[  150.062894][T12323] dummy0: left promiscuous mode
[  150.093806][T12331] syz.0.3649[12331] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  150.093975][T12331] syz.0.3649[12331] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  150.094060][T12331] syz.0.3649[12331] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  150.178712][T12336] SELinux:  Context system_u:object_r:net_conf_t:s0 is not valid (left unmapped).
[  150.367723][T12348] syz.7.3656[12348] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  150.448207][T12354] pim6reg1: entered promiscuous mode
[  150.448225][T12354] pim6reg1: entered allmulticast mode
[  150.536718][T12357] loop6: detected capacity change from 0 to 512
[  150.983777][T12368] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  150.991309][T12368] batman_adv: batadv0: Removing interface: batadv_slave_0
[  151.023708][T12368] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  151.031227][T12368] batman_adv: batadv0: Removing interface: batadv_slave_1
[  151.047603][T12374] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  151.064791][T12371] netlink: 'syz.7.3665': attribute type 27 has an invalid length.
[  151.142980][T12377] loop6: detected capacity change from 0 to 512
[  151.156345][T12371] bridge0: port 2(bridge_slave_1) entered disabled state
[  151.163509][T12371] bridge0: port 1(bridge_slave_0) entered disabled state
[  151.172653][T12377] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  151.184366][T12377] EXT4-fs (loop6): 1 truncate cleaned up
[  151.193049][T12377] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  151.278868][T11479] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  151.284420][T12383] loop5: detected capacity change from 0 to 512
[  151.296701][T12371] batadv_slave_0: left promiscuous mode
[  151.302487][T12383] loop5: detected capacity change from 0 to 1024
[  151.329085][T12383] EXT4-fs: inline encryption not supported
[  151.335054][T12383] EXT4-fs: inline encryption not supported
[  151.350189][T12383] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  151.406054][T12371] macsec0: left promiscuous mode
[  151.463340][T12375] 8021q: adding VLAN 0 to HW filter on device bond0
[  151.504020][T12375] 8021q: adding VLAN 0 to HW filter on device team0
[  151.536088][T11225] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  151.617051][T12375] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  151.635438][T12386] $Hÿ: renamed from bond0 (while UP)
[  151.644242][T12386] $Hÿ: entered promiscuous mode
[  151.649487][T12386] bond_slave_0: entered promiscuous mode
[  151.655370][T12386] bond_slave_1: entered promiscuous mode
[  151.730802][T12398] loop5: detected capacity change from 0 to 512
[  151.750731][T12398] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  151.778440][T12398] ext4 filesystem being mounted at /82/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  151.844604][T12398] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback.
[  151.936337][T11225] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  151.965096][T12412] loop0: detected capacity change from 0 to 256
[  151.985069][T12412] FAT-fs (loop0): bogus number of FAT sectors
[  151.991211][T12412] FAT-fs (loop0): Can't find a valid FAT filesystem
[  152.010509][T12414] xt_CT: You must specify a L4 protocol and not use inversions on it
[  152.113447][T12416] bridge_slave_0: left allmulticast mode
[  152.119402][T12416] bridge_slave_0: left promiscuous mode
[  152.125076][T12416] bridge0: port 1(bridge_slave_0) entered disabled state
[  152.143248][T12422] netlink: 'syz.5.3682': attribute type 4 has an invalid length.
[  152.154112][T12416] bridge_slave_1: left allmulticast mode
[  152.159834][T12416] bridge_slave_1: left promiscuous mode
[  152.165492][T12416] bridge0: port 2(bridge_slave_1) entered disabled state
[  152.194492][T12425] netlink: 'syz.5.3682': attribute type 4 has an invalid length.
[  152.213384][T12416] 9Hÿ: (slave bond_slave_0): Releasing backup interface
[  152.231655][T12416] bond_slave_0: left promiscuous mode
[  152.250800][T12416] 9Hÿ: (slave bond_slave_1): Releasing backup interface
[  152.264090][T12416] bond_slave_1: left promiscuous mode
[  152.283776][   T29] kauditd_printk_skb: 465 callbacks suppressed
[  152.283789][   T29] audit: type=1400 audit(1737405812.152:5340): avc:  denied  { listen } for  pid=12429 comm="syz.6.3685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  152.320258][T12416] team0: Port device team_slave_0 removed
[  152.330446][T12416] team0: Port device team_slave_1 removed
[  152.337424][   T29] audit: type=1400 audit(1737405812.202:5341): avc:  denied  { connect } for  pid=12432 comm="syz.7.3686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  152.357215][   T29] audit: type=1400 audit(1737405812.202:5342): avc:  denied  { name_connect } for  pid=12432 comm="syz.7.3686" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1
[  152.414167][T12416] 9Hÿ: (slave geneve1): Releasing backup interface
[  152.425226][   T29] audit: type=1400 audit(1737405812.262:5343): avc:  denied  { accept } for  pid=12429 comm="syz.6.3685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  152.497897][T12436] netlink: 'syz.7.3687': attribute type 4 has an invalid length.
[  152.529785][   T29] audit: type=1400 audit(1737405812.392:5344): avc:  denied  { bind } for  pid=12444 comm="syz.0.3690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  152.549276][   T29] audit: type=1400 audit(1737405812.392:5345): avc:  denied  { name_bind } for  pid=12444 comm="syz.0.3690" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1
[  152.570258][   T29] audit: type=1400 audit(1737405812.392:5346): avc:  denied  { node_bind } for  pid=12444 comm="syz.0.3690" saddr=::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1
[  152.592109][   T29] audit: type=1400 audit(1737405812.392:5347): avc:  denied  { listen } for  pid=12444 comm="syz.0.3690" laddr=::1 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  152.636964][T12449] bpf_get_probe_write_proto: 2 callbacks suppressed
[  152.637051][T12449] syz.0.3691[12449] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  152.662148][T12449] syz.0.3691[12449] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  152.675729][T12449] syz.0.3691[12449] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  152.703024][   T29] audit: type=1400 audit(1737405812.562:5348): avc:  denied  { name_bind } for  pid=12455 comm="syz.3.3696" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[  152.804292][   T29] audit: type=1400 audit(1737405812.672:5349): avc:  denied  { setopt } for  pid=12462 comm="syz.0.3698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  152.916773][T12473] tipc: Started in network mode
[  152.921811][T12473] tipc: Node identity 2e7fbbca8247, cluster identity 4711
[  152.929056][T12473] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  152.936913][T12478] loop6: detected capacity change from 0 to 512
[  152.939473][T12473] syzkaller0: MTU too low for tipc bearer
[  152.948953][T12473] tipc: Disabling bearer <eth:syzkaller0>
[  152.956275][T12475] syz.7.3703[12475] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  152.956362][T12475] syz.7.3703[12475] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  152.969411][T12475] syz.7.3703[12475] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  152.986504][T12478] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2240: inode #15: comm syz.6.3700: corrupted in-inode xattr: invalid ea_ino
[  153.020669][T12477] loop0: detected capacity change from 0 to 512
[  153.026633][T12475] loop7: detected capacity change from 0 to 1024
[  153.028067][T12478] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.3700: couldn't read orphan inode 15 (err -117)
[  153.053593][T12478] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  153.075549][T12477] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.3704: invalid block
[  153.092688][T12468] EXT4-fs error (device loop6): ext4_inlinedir_to_tree:1404: inode #12: block 7: comm syz.6.3700: path /69/file1/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0
[  153.117890][T12477] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.3704: invalid indirect mapped block 4294967295 (level 1)
[  153.128836][T12468] EXT4-fs error (device loop6): ext4_inlinedir_to_tree:1404: inode #12: block 7: comm syz.6.3700: path /69/file1/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0
[  153.132443][T12477] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.3704: invalid indirect mapped block 4294967295 (level 1)
[  153.167704][T12477] EXT4-fs (loop0): 2 truncates cleaned up
[  153.172867][T12482] loop3: detected capacity change from 0 to 512
[  153.173918][T12477] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  153.209049][T11294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  153.240785][T12482] loop3: detected capacity change from 0 to 1024
[  153.247947][T11479] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  153.261356][T12482] EXT4-fs: inline encryption not supported
[  153.277933][T12482] EXT4-fs: inline encryption not supported
[  153.278663][T12486] loop6: detected capacity change from 0 to 512
[  153.309849][T12486] EXT4-fs (loop6): orphan cleanup on readonly fs
[  153.317211][T12482] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  153.317940][T12486] EXT4-fs warning (device loop6): ext4_enable_quotas:7156: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  153.344709][T12486] EXT4-fs (loop6): Cannot turn on quotas: error -22
[  153.354741][T12486] EXT4-fs error (device loop6): ext4_ext_check_inode:524: inode #13: comm syz.6.3707: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  153.375174][T12486] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.3707: couldn't read orphan inode 13 (err -117)
[  153.395798][T12486] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  153.434094][T12486] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended
[  153.447825][T12496] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3708'.
[  153.456864][T12496] IPVS: Error joining to the multicast group
[  153.463488][T12486] EXT4-fs warning (device loop6): read_mmp_block:115: Error -117 while reading MMP block 2
[  153.492274][T12495] pim6reg1: entered promiscuous mode
[  153.497675][T12495] pim6reg1: entered allmulticast mode
[  153.534758][T11416] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  153.549069][T11479] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  153.569608][T12498] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3711'.
[  153.656258][T12510] syzkaller1: entered promiscuous mode
[  153.661874][T12510] syzkaller1: entered allmulticast mode
[  153.699880][T12506] loop5: detected capacity change from 0 to 8192
[  153.729561][T12506]  loop5: p1 p2 p3
[  153.733450][T12506] loop5: p1 size 67108864 extends beyond EOD, truncated
[  153.745280][T12506] loop5: p2 start 98631679 is beyond EOD, truncated
[  153.751944][T12506] loop5: p3 size 423702036 extends beyond EOD, truncated
[  153.981078][T12521] loop5: detected capacity change from 0 to 512
[  153.988048][T12521] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  154.000405][T12521] EXT4-fs (loop5): 1 truncate cleaned up
[  154.006555][T12521] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  154.144283][T11225] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  154.177626][T12525] loop0: detected capacity change from 0 to 512
[  154.200314][T12525] loop0: detected capacity change from 0 to 1024
[  154.207041][T12525] EXT4-fs: inline encryption not supported
[  154.268407][T12529] pim6reg1: entered promiscuous mode
[  154.273834][T12529] pim6reg1: entered allmulticast mode
[  154.280399][T12525] EXT4-fs: inline encryption not supported
[  154.340492][T12525] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  154.434865][T12542] netlink: 'syz.3.3728': attribute type 29 has an invalid length.
[  154.579543][T12547] netlink: 'syz.3.3730': attribute type 27 has an invalid length.
[  154.759468][T12548] 9Hÿ: left promiscuous mode
[  154.788728][T12548] 8021q: adding VLAN 0 to HW filter on device 9Hÿ
[  154.902927][T11294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  154.975132][T12548] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  155.086718][T12550] loop7: detected capacity change from 0 to 512
[  155.170361][T12550] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  155.320872][T12550] EXT4-fs (loop7): 1 truncate cleaned up
[  155.348337][T12550] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  155.483618][T12561] loop6: detected capacity change from 0 to 512
[  155.558169][T12561] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  155.558304][T12561] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  155.581929][T12561] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3733: bg 0: block 304: padding at end of block bitmap is not set
[  155.629270][T11479] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  155.680431][T12547] macsec0: left promiscuous mode
[  155.681821][T12547] geneve1: left promiscuous mode
[  155.682187][T12547] geneve2: left allmulticast mode
[  155.765997][T12567] loop3: detected capacity change from 0 to 2048
[  155.783017][T11495] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  155.799105][T12567] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  155.799214][T12567] ext4 filesystem being mounted at /80/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  155.802958][T12567] syz.3.3735[12567] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  155.803053][T12567] syz.3.3735[12567] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  155.803195][T12567] syz.3.3735[12567] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  155.967718][T12571] lo speed is unknown, defaulting to 1000
[  156.218100][T12579] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3735: bg 0: block 345: padding at end of block bitmap is not set
[  156.218270][T12579] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117
[  156.218294][T12579] EXT4-fs (loop3): This should not happen!! Data will be lost
[  156.218294][T12579] 
[  156.319644][ T3306] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 117
[  156.332323][ T3306] EXT4-fs (loop3): This should not happen!! Data will be lost
[  156.332323][ T3306] 
[  156.411501][T10809] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 2081 with max blocks 2024 with error 28
[  156.424329][T10809] EXT4-fs (loop3): This should not happen!! Data will be lost
[  156.424329][T10809] 
[  156.434111][T10809] EXT4-fs (loop3): Total free blocks count 0
[  156.440226][T10809] EXT4-fs (loop3): Free/Dirty block details
[  156.446118][T10809] EXT4-fs (loop3): free_blocks=0
[  156.469806][T12598] loop6: detected capacity change from 0 to 8192
[  156.513828][T12598] bio_check_eod: 4 callbacks suppressed
[  156.513839][T12598] syz.6.3748: attempt to access beyond end of device
[  156.513839][T12598] loop6: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  156.515472][T12603] loop0: detected capacity change from 0 to 512
[  156.519456][T12598] buffer_io_error: 423 callbacks suppressed
[  156.519504][T12598] Buffer I/O error on dev loop6, logical block 57847, async page read
[  156.553529][T12598] syz.6.3748: attempt to access beyond end of device
[  156.553529][T12598] loop6: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  156.566957][T12598] Buffer I/O error on dev loop6, logical block 57847, async page read
[  156.580768][T12603] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  156.592844][T12598] syz.6.3748: attempt to access beyond end of device
[  156.592844][T12598] loop6: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  156.606800][T12598] Buffer I/O error on dev loop6, logical block 57847, async page read
[  156.617134][T12603] EXT4-fs (loop0): 1 truncate cleaned up
[  156.623212][T12603] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  156.649239][T12598] syz.6.3748: attempt to access beyond end of device
[  156.649239][T12598] loop6: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  156.662693][T12598] Buffer I/O error on dev loop6, logical block 57847, async page read
[  156.701361][T12608] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3747'.
[  156.720180][T12610] loop6: detected capacity change from 0 to 512
[  156.737074][T12608] syz.3.3747[12608] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  156.739062][T11294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  156.753965][T12610] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  156.817441][T12616] loop3: detected capacity change from 0 to 256
[  156.825489][T12616] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  156.878551][T12610] EXT4-fs (loop6): 1 orphan inode deleted
[  156.884332][T12610] EXT4-fs (loop6): 1 truncate cleaned up
[  156.893925][T12610] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  156.910505][T12616] msdos: Unknown parameter '18446744073709551615ÿÿÿÿÿÿÿÿ01777777777777777777777ÿÿ0xffffffffffffffff18446744073709551615ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ'
[  156.928068][T12614] hsr_slave_0: left promiscuous mode
[  156.967763][T11479] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  156.996374][T12614] hsr_slave_1: left promiscuous mode
[  157.127600][T12636] loop3: detected capacity change from 0 to 512
[  157.153078][T12638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  157.168044][T12636] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  157.193227][T12638] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  157.197360][T12641] loop6: detected capacity change from 0 to 512
[  157.223051][T12636] EXT4-fs (loop3): 1 truncate cleaned up
[  157.242828][T12641] EXT4-fs (loop6): too many log groups per flexible block group
[  157.250577][T12641] EXT4-fs (loop6): failed to initialize mballoc (-12)
[  157.257403][T12641] EXT4-fs (loop6): mount failed
[  157.298023][   T29] kauditd_printk_skb: 505 callbacks suppressed
[  157.298081][   T29] audit: type=1326 audit(1737405817.162:5855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12649 comm="syz.7.3767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa84bc5d29 code=0x7ffc0000
[  157.426151][   T29] audit: type=1326 audit(1737405817.172:5856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12649 comm="syz.7.3767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa84bc5d29 code=0x7ffc0000
[  157.449715][   T29] audit: type=1326 audit(1737405817.202:5857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12649 comm="syz.7.3767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffa84bc4690 code=0x7ffc0000
[  157.473251][   T29] audit: type=1326 audit(1737405817.202:5858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12649 comm="syz.7.3767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7ffa84bc7557 code=0x7ffc0000
[  157.496756][   T29] audit: type=1326 audit(1737405817.202:5859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12649 comm="syz.7.3767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffa84bc5d29 code=0x7ffc0000
[  157.520181][   T29] audit: type=1400 audit(1737405817.202:5860): avc:  denied  { create } for  pid=12649 comm="syz.7.3767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  157.539702][   T29] audit: type=1326 audit(1737405817.202:5861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12649 comm="syz.7.3767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7ffa84bc7557 code=0x7ffc0000
[  157.563241][   T29] audit: type=1326 audit(1737405817.202:5862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12649 comm="syz.7.3767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ffa84bc498a code=0x7ffc0000
[  157.586625][   T29] audit: type=1326 audit(1737405817.202:5863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12649 comm="syz.7.3767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa84bc5d29 code=0x7ffc0000
[  157.610196][   T29] audit: type=1326 audit(1737405817.202:5864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12649 comm="syz.7.3767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa84bc5d29 code=0x7ffc0000
[  157.656381][T12658] bridge_slave_0: left allmulticast mode
[  157.662075][T12658] bridge_slave_0: left promiscuous mode
[  157.667741][T12658] bridge0: port 1(bridge_slave_0) entered disabled state
[  157.677300][T12658] bridge_slave_1: left allmulticast mode
[  157.682997][T12658] bridge_slave_1: left promiscuous mode
[  157.688736][T12658] bridge0: port 2(bridge_slave_1) entered disabled state
[  157.705214][T12658] $Hÿ: (slave bond_slave_0): Releasing backup interface
[  157.713938][T12650] loop7: detected capacity change from 0 to 512
[  157.721388][T12658] bond_slave_0: left promiscuous mode
[  157.736542][T12658] $Hÿ: (slave bond_slave_1): Releasing backup interface
[  157.744569][T12650] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2
[  157.754055][T12650] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.3767: invalid indirect mapped block 2683928664 (level 1)
[  157.768574][T12658] bond_slave_1: left promiscuous mode
[  157.791170][T12650] EXT4-fs (loop7): Remounting filesystem read-only
[  157.799799][T12650] EXT4-fs (loop7): 1 truncate cleaned up
[  157.805940][T12650] SELinux: (dev loop7, type ext4) getxattr errno 5
[  157.951032][T12672] hsr_slave_0: left promiscuous mode
[  157.975554][T12672] hsr_slave_1: left promiscuous mode
[  157.989161][T12678] syzkaller0: entered allmulticast mode
[  157.999285][T12678] syzkaller0 (unregistering): left allmulticast mode
[  158.084541][T12688] loop3: detected capacity change from 0 to 512
[  158.092787][T12688] EXT4-fs (loop3): Invalid log block size: 134217728
[  158.204321][T12694] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3788'.
[  158.225081][T12699] loop6: detected capacity change from 0 to 1024
[  158.237388][T12700] netlink: 'syz.3.3790': attribute type 4 has an invalid length.
[  158.284809][T12705] loop3: detected capacity change from 0 to 2048
[  158.291785][T12705] EXT4-fs: inline encryption not supported
[  158.497914][T12709] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  158.517056][T12709] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  158.529637][T12709] EXT4-fs (loop3): This should not happen!! Data will be lost
[  158.529637][T12709] 
[  158.539273][T12709] EXT4-fs (loop3): Total free blocks count 0
[  158.545385][T12709] EXT4-fs (loop3): Free/Dirty block details
[  158.551294][T12709] EXT4-fs (loop3): free_blocks=2415919104
[  158.557067][T12709] EXT4-fs (loop3): dirty_blocks=8192
[  158.562375][T12709] EXT4-fs (loop3): Block reservation details
[  158.568466][T12709] EXT4-fs (loop3): i_reserved_data_blocks=512
[  158.601473][T10809] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28
[  158.614275][T10809] EXT4-fs (loop3): This should not happen!! Data will be lost
[  158.614275][T10809] 
[  158.680998][T11416] EXT4-fs unmount: 6 callbacks suppressed
[  158.715718][T11479] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  158.730260][T12714] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3795'.
[  158.751257][T12716] loop6: detected capacity change from 0 to 256
[  158.775176][T12716] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  158.799382][T12716] msdos: Unknown parameter '18446744073709551615ÿÿÿÿÿÿÿÿ01777777777777777777777ÿÿ0xffffffffffffffff18446744073709551615ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ'
[  158.923545][T12723] loop6: detected capacity change from 0 to 512
[  158.949612][T12725] loop3: detected capacity change from 0 to 2368
[  158.956165][T12723] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  158.983766][T12723] EXT4-fs (loop6): 1 truncate cleaned up
[  158.997746][T12727] loop5: detected capacity change from 0 to 2048
[  159.010705][T12723] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  159.040784][T12727] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  159.079961][T12727] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 8 with max blocks 2 with error 28
[  159.092291][T12727] EXT4-fs (loop5): This should not happen!! Data will be lost
[  159.092291][T12727] 
[  159.102034][T12727] EXT4-fs (loop5): Total free blocks count 0
[  159.108065][T12727] EXT4-fs (loop5): Free/Dirty block details
[  159.113968][T12727] EXT4-fs (loop5): free_blocks=0
[  159.118944][T12727] EXT4-fs (loop5): dirty_blocks=0
[  159.123968][T12727] EXT4-fs (loop5): Block reservation details
[  159.130031][T12727] EXT4-fs (loop5): i_reserved_data_blocks=0
[  159.131099][T11479] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  159.186112][T12735] tipc: Started in network mode
[  159.191077][T12735] tipc: Node identity 72892b3b86bd, cluster identity 4711
[  159.198478][T12735] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  159.234932][T11225] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  159.253274][T12739] netlink: 4 bytes leftover after parsing attributes in process `+}[@'.
[  159.254191][T12735] syzkaller0: MTU too low for tipc bearer
[  159.267380][T12735] tipc: Disabling bearer <eth:syzkaller0>
[  159.306544][T12746] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3808'.
[  159.318014][T12739] bridge_slave_1: left allmulticast mode
[  159.323672][T12739] bridge_slave_1: left promiscuous mode
[  159.329394][T12739] bridge0: port 2(bridge_slave_1) entered disabled state
[  159.365629][T12739] bridge_slave_0: left allmulticast mode
[  159.371353][T12739] bridge_slave_0: left promiscuous mode
[  159.377035][T12739] bridge0: port 1(bridge_slave_0) entered disabled state
[  159.507383][T12755] hsr_slave_0: left promiscuous mode
[  159.570791][T12759] loop0: detected capacity change from 0 to 512
[  159.618201][T12759] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  159.633904][T12764] xt_CT: You must specify a L4 protocol and not use inversions on it
[  159.701170][T12759] ext4 filesystem being mounted at /110/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  159.792636][T11294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  159.852348][T12780] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11 sclass=netlink_route_socket pid=12780 comm=syz.7.3819
[  160.507723][T12832] netlink: 'syz.6.3825': attribute type 27 has an invalid length.
[  160.590839][T12837] loop0: detected capacity change from 0 to 256
[  160.613075][T12837] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  160.625051][T12832] $Hÿ: left promiscuous mode
[  160.662370][T12837] msdos: Unknown parameter '18446744073709551615ÿÿÿÿÿÿÿÿ01777777777777777777777ÿÿ0xffffffffffffffff18446744073709551615ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ'
[  160.753935][T12844] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3830'.
[  160.831002][T12835] 8021q: adding VLAN 0 to HW filter on device $Hÿ
[  160.892505][T12835] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  160.975961][T12854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  161.000180][T12854] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  161.066605][T12858] syz_tun (unregistering): left promiscuous mode
[  161.213432][T12872] loop5: detected capacity change from 0 to 256
[  161.225870][T12872] FAT-fs (loop5): Directory bread(block 64) failed
[  161.247642][T12872] FAT-fs (loop5): Directory bread(block 65) failed
[  161.266568][T12872] FAT-fs (loop5): Directory bread(block 66) failed
[  161.285661][T12872] FAT-fs (loop5): Directory bread(block 67) failed
[  161.298261][T12872] FAT-fs (loop5): Directory bread(block 68) failed
[  161.313298][T12876] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3842'.
[  161.330261][T12872] FAT-fs (loop5): Directory bread(block 69) failed
[  161.357357][T12872] FAT-fs (loop5): Directory bread(block 70) failed
[  161.372551][T12872] FAT-fs (loop5): Directory bread(block 71) failed
[  161.389321][T12872] FAT-fs (loop5): Directory bread(block 72) failed
[  161.404084][T12885] loop6: detected capacity change from 0 to 2048
[  161.411278][T12872] FAT-fs (loop5): Directory bread(block 73) failed
[  161.429478][T12887] bond_slave_1: mtu less than device minimum
[  161.455428][T12885] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  161.470226][T12885] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  161.484517][T12885] bpf_get_probe_write_proto: 5 callbacks suppressed
[  161.484529][T12885] syz.6.3846[12885] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  161.492047][T12885] syz.6.3846[12885] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  161.504164][T12885] syz.6.3846[12885] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  161.753000][T12897] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3846: bg 0: block 345: padding at end of block bitmap is not set
[  161.850062][T12897] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117
[  161.862582][T12897] EXT4-fs (loop6): This should not happen!! Data will be lost
[  161.862582][T12897] 
[  161.874509][T12901] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3850'.
[  161.981578][T12906] netlink: 4 bytes leftover after parsing attributes in process `+}[@'.
[  161.999712][ T3328] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 117
[  162.012397][ T3328] EXT4-fs (loop6): This should not happen!! Data will be lost
[  162.012397][ T3328] 
[  162.102769][ T3328] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 2081 with max blocks 2024 with error 28
[  162.115070][T12911] loop5: detected capacity change from 0 to 2368
[  162.115532][ T3328] EXT4-fs (loop6): This should not happen!! Data will be lost
[  162.115532][ T3328] 
[  162.131492][ T3328] EXT4-fs (loop6): Total free blocks count 0
[  162.137472][ T3328] EXT4-fs (loop6): Free/Dirty block details
[  162.143437][ T3328] EXT4-fs (loop6): free_blocks=0
[  162.186787][T12919] futex_wake_op: syz.3.3858 tries to shift op by -1; fix this program
[  162.342116][T12930] xt_hashlimit: max too large, truncated to 1048576
[  162.474837][T12934] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3854'.
[  162.503656][T12934] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3854'.
[  162.544452][T12940] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  162.552378][T12934] loop6: detected capacity change from 0 to 512
[  162.578328][T12934] EXT4-fs: Ignoring removed mblk_io_submit option
[  162.593545][T12934] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  162.650831][T12934] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2240: inode #15: comm syz.6.3854: corrupted in-inode xattr: e_value out of bounds
[  162.699821][T12934] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.3854: couldn't read orphan inode 15 (err -117)
[  162.731036][T12934] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  162.770763][T12943] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3867'.
[  162.842715][T12952] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11 sclass=netlink_route_socket pid=12952 comm=syz.0.3870
[  162.869207][T11479] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  163.129516][T12965] tipc: Started in network mode
[  163.134467][T12965] tipc: Node identity 328d881d2dad, cluster identity 4711
[  163.141722][T12965] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  163.156829][T12961] loop7: detected capacity change from 0 to 8192
[  163.171063][T12965] syzkaller0: MTU too low for tipc bearer
[  163.176829][T12965] tipc: Disabling bearer <eth:syzkaller0>
[  163.198205][T12961] vfat: Unknown parameter 'ÿÿÿÿ00000000000000000007'
[  163.402086][   T29] kauditd_printk_skb: 825 callbacks suppressed
[  163.402100][   T29] audit: type=1400 audit(1737405823.272:6690): avc:  denied  { unmount } for  pid=11495 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[  163.441033][T12969] loop0: detected capacity change from 0 to 512
[  163.454803][T12969] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  163.501965][T12969] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c028, mo2=0002]
[  163.510051][T12969] System zones: 0-2, 18-18, 34-35
[  163.524516][T12969] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  163.561261][T12978] loop3: detected capacity change from 0 to 1024
[  163.605927][   T29] audit: type=1326 audit(1737405823.472:6691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12979 comm="syz.7.3881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa84bc5d29 code=0x7ffc0000
[  163.629640][   T29] audit: type=1326 audit(1737405823.472:6692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12979 comm="syz.7.3881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa84bc5d29 code=0x7ffc0000
[  163.659880][T12969] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 3: comm syz.0.3888: path /131/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0
[  163.700113][T12978] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  163.706605][   T29] audit: type=1326 audit(1737405823.482:6693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12979 comm="syz.7.3881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffa84bc5d29 code=0x7ffc0000
[  163.727562][T12989] loop7: detected capacity change from 0 to 1024
[  163.735771][   T29] audit: type=1326 audit(1737405823.482:6694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12979 comm="syz.7.3881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa84bc5d29 code=0x7ffc0000
[  163.757627][T12969] EXT4-fs (loop0): Remounting filesystem read-only
[  163.765575][   T29] audit: type=1326 audit(1737405823.482:6695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12979 comm="syz.7.3881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7ffa84bc5d29 code=0x7ffc0000
[  163.765602][   T29] audit: type=1326 audit(1737405823.482:6696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12979 comm="syz.7.3881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa84bc5d29 code=0x7ffc0000
[  163.806344][T12989] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  163.845815][T11416] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  163.870773][   T29] audit: type=1400 audit(1737405823.652:6697): avc:  denied  { execute } for  pid=12972 comm="syz.3.3879" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  163.893258][   T29] audit: type=1400 audit(1737405823.652:6698): avc:  denied  { execute_no_trans } for  pid=12972 comm="syz.3.3879" path="/109/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  163.939443][T12998] loop3: detected capacity change from 0 to 128
[  163.995975][   T29] audit: type=1400 audit(1737405823.842:6699): avc:  denied  { execute } for  pid=12997 comm="syz.3.3886" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=34084 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  164.028473][T12998] syz.3.3886: attempt to access beyond end of device
[  164.028473][T12998] loop3: rw=2049, sector=145, nr_sectors = 848 limit=128
[  164.081823][T13003] syz.3.3886: attempt to access beyond end of device
[  164.081823][T13003] loop3: rw=524288, sector=145, nr_sectors = 224 limit=128
[  164.118064][T13003] syz.3.3886: attempt to access beyond end of device
[  164.118064][T13003] loop3: rw=0, sector=145, nr_sectors = 8 limit=128
[  164.152365][T13002] loop5: detected capacity change from 0 to 512
[  164.155417][T13003] syz.3.3886: attempt to access beyond end of device
[  164.155417][T13003] loop3: rw=0, sector=145, nr_sectors = 8 limit=128
[  164.174715][T13002] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  164.214525][T13002] EXT4-fs (loop5): 1 orphan inode deleted
[  164.220327][T13002] EXT4-fs (loop5): 1 truncate cleaned up
[  164.223875][T13003] syz.3.3886: attempt to access beyond end of device
[  164.223875][T13003] loop3: rw=0, sector=145, nr_sectors = 8 limit=128
[  164.240297][T13002] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  164.268151][T13003] syz.3.3886: attempt to access beyond end of device
[  164.268151][T13003] loop3: rw=0, sector=145, nr_sectors = 8 limit=128
[  164.281648][T13003] syz.3.3886: attempt to access beyond end of device
[  164.281648][T13003] loop3: rw=0, sector=145, nr_sectors = 8 limit=128
[  164.295072][T13003] syz.3.3886: attempt to access beyond end of device
[  164.295072][T13003] loop3: rw=0, sector=145, nr_sectors = 8 limit=128
[  164.308513][T13003] syz.3.3886: attempt to access beyond end of device
[  164.308513][T13003] loop3: rw=0, sector=145, nr_sectors = 8 limit=128
[  164.325715][T13003] syz.3.3886: attempt to access beyond end of device
[  164.325715][T13003] loop3: rw=0, sector=145, nr_sectors = 8 limit=128
[  164.345927][T13011] syz.6.3890[13011] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  164.345980][T13011] syz.6.3890[13011] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  164.369339][T11225] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  164.411025][T13011] syz.6.3890[13011] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  164.543062][T13017] netlink: 'syz.6.3893': attribute type 4 has an invalid length.
[  164.563460][T11294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  164.941492][T11495] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  165.491340][T13034] loop5: detected capacity change from 0 to 2048
[  165.532775][T13034] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  165.553141][T13034] syz.5.3909[13034] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  165.553221][T13034] syz.5.3909[13034] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  165.564735][T13034] syz.5.3909[13034] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  165.625078][T11225] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  165.657145][T13044] loop3: detected capacity change from 0 to 512
[  165.664261][T13044] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  165.683547][T13044] EXT4-fs (loop3): 1 orphan inode deleted
[  165.689357][T13044] EXT4-fs (loop3): 1 truncate cleaned up
[  165.699496][T13048] loop0: detected capacity change from 0 to 1024
[  165.717518][T13044] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  165.721514][T13048] EXT4-fs: Ignoring removed orlov option
[  165.735725][T13048] EXT4-fs: Ignoring removed nomblk_io_submit option
[  165.751921][T13052] syz.5.3904[13052] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  165.779558][T11416] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  165.813017][T13048] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  165.857725][T13064] macsec0: entered promiscuous mode
[  165.911759][T13072] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3916'.
[  165.950598][T11294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  165.997656][T13080] loop7: detected capacity change from 0 to 512
[  166.022025][T13086] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3923'.
[  166.022639][T13080] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  166.051738][T13089] vlan2: entered promiscuous mode
[  166.056794][T13089] bridge0: entered promiscuous mode
[  166.084284][T13080] EXT4-fs (loop7): 1 orphan inode deleted
[  166.090063][T13080] EXT4-fs (loop7): 1 truncate cleaned up
[  166.099523][T13089] bridge0: port 1(vlan2) entered blocking state
[  166.105799][T13089] bridge0: port 1(vlan2) entered disabled state
[  166.138303][T13089] vlan2: entered allmulticast mode
[  166.143462][T13089] bridge0: entered allmulticast mode
[  166.150413][T13084] loop0: detected capacity change from 0 to 8192
[  166.162167][T13080] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  166.195631][T13089] vlan2: left allmulticast mode
[  166.200638][T13089] bridge0: left allmulticast mode
[  166.225889][T13089] bridge0: left promiscuous mode
[  166.293562][T13097] xt_CT: You must specify a L4 protocol and not use inversions on it
[  166.531319][T13111] loop5: detected capacity change from 0 to 512
[  166.557810][T11495] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  166.582037][T13111] EXT4-fs: Ignoring removed i_version option
[  166.601387][T13111] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  166.650471][T13111] ext4 filesystem being mounted at /133/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  166.683028][T13118] pim6reg1: entered promiscuous mode
[  166.688402][T13118] pim6reg1: entered allmulticast mode
[  166.704437][T11225] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  166.751511][T13102] ==================================================================
[  166.759621][T13102] BUG: KCSAN: data-race in mark_buffer_dirty_inode / sync_mapping_buffers
[  166.768138][T13102] 
[  166.770461][T13102] write to 0xffff88810641b260 of 8 bytes by task 13093 on cpu 1:
[  166.778174][T13102]  sync_mapping_buffers+0x159/0x7c0
[  166.783380][T13102]  fat_file_fsync+0xa7/0x100
[  166.787981][T13102]  vfs_fsync_range+0x116/0x130
[  166.792761][T13102]  generic_file_write_iter+0x185/0x1c0
[  166.798229][T13102]  iter_file_splice_write+0x5f1/0x980
[  166.803604][T13102]  direct_splice_actor+0x160/0x2c0
[  166.808722][T13102]  splice_direct_to_actor+0x302/0x670
[  166.814103][T13102]  do_splice_direct+0xd7/0x150
[  166.818878][T13102]  do_sendfile+0x398/0x660
[  166.823305][T13102]  __x64_sys_sendfile64+0x110/0x150
[  166.828507][T13102]  x64_sys_call+0xfbd/0x2dc0
[  166.833098][T13102]  do_syscall_64+0xc9/0x1c0
[  166.837612][T13102]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  166.843507][T13102] 
[  166.845826][T13102] read to 0xffff88810641b260 of 8 bytes by task 13102 on cpu 0:
[  166.853459][T13102]  mark_buffer_dirty_inode+0x96/0x1c0
[  166.858840][T13102]  fat_mirror_bhs+0x241/0x330
[  166.863529][T13102]  fat_alloc_clusters+0x994/0xa80
[  166.868559][T13102]  fat_get_block+0x25c/0x5e0
[  166.873143][T13102]  __block_write_begin_int+0x417/0xfa0
[  166.878623][T13102]  cont_write_begin+0x546/0x860
[  166.883481][T13102]  fat_write_begin+0x51/0xe0
[  166.888078][T13102]  generic_perform_write+0x1a8/0x4a0
[  166.893364][T13102]  __generic_file_write_iter+0xa1/0x120
[  166.898960][T13102]  generic_file_write_iter+0x77/0x1c0
[  166.904346][T13102]  vfs_write+0x77f/0x920
[  166.908600][T13102]  ksys_write+0xe8/0x1b0
[  166.912844][T13102]  __x64_sys_write+0x42/0x50
[  166.917467][T13102]  x64_sys_call+0x287e/0x2dc0
[  166.922139][T13102]  do_syscall_64+0xc9/0x1c0
[  166.926645][T13102]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  166.932550][T13102] 
[  166.934869][T13102] value changed: 0xffff8881066fa908 -> 0x0000000000000000
[  166.941975][T13102] 
[  166.944299][T13102] Reported by Kernel Concurrency Sanitizer on:
[  166.950446][T13102] CPU: 0 UID: 0 PID: 13102 Comm: syz.0.3920 Not tainted 6.13.0-syzkaller-00164-g100ceb4817a2 #0
[  166.960865][T13102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  166.970923][T13102] ==================================================================