last executing test programs:

39.512511336s ago: executing program 4 (id=1072):
gettid()
timer_create(0x0, 0x0, &(0x7f0000000300)=<r0=>0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
timer_delete(r0)
symlink(&(0x7f00000003c0)='./file0/file0/..\x00', &(0x7f0000000240)='./file1\x00')
r3 = fspick(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0)
r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0/file0/..\x00', &(0x7f0000000480)={0x18000, 0x150, 0x4}, 0x18)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000380)=']-:@@#\x00', &(0x7f0000000400)='./file0/file0/..\x00', r4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r2, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000680), &(0x7f00000006c0)=[0x0, 0x0], <r5=>0x0, 0x5d, &(0x7f0000000800)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000840), &(0x7f0000000880), 0x8, 0x11, 0x8, 0x8, &(0x7f00000008c0)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000600)=ANY=[@ANYRESOCT=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10)
mount$9p_fd(0x0, &(0x7f0000000280)='./file1\x00', &(0x7f0000000080), 0x2010000, &(0x7f0000000700))
fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f00000000c0)={0x0, 0x1, 0x3, 0x4})
r7 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300)=<r8=>0x0, &(0x7f0000000580)=<r9=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4)
syz_io_uring_submit(r8, r9, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x4})
io_uring_enter(r7, 0xfffff000, 0x3900, 0x1, 0x0, 0xe00)
rt_sigsuspend(&(0x7f00000002c0)={[0x225c17d03]}, 0x8)

38.670361279s ago: executing program 4 (id=1085):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$rds(0x15, 0x5, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd2d, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x3000000}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8000, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x800000, 0x0, 0x6}, {0x0, 0xc3, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000, 0x0, 0x200000}, {}, {0x2, 0x0, 0x0, 0x0, 0x6, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x1, 0x0, 0xfff}, {0x0, 0x0, 0x0, 0xffffffb0}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x20000}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0xffffffff, 0x0, 0x6, 0x0, 0x0, 0x60569add}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff, 0x9}, {0x0, 0x0, 0x0, 0x0, 0xfffff800}, {0x0, 0x0, 0x0, 0x0, 0x9}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x1, 0xfffffffc}, {}, {}, {0xfffffffe, 0x9, 0x0, 0xffffffff, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x80}, {0x80, 0x0, 0x0, 0x0, 0x400}, {0x0, 0x0, 0x0, 0x5, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x2, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {0x4}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x7fffffff, 0x0, 0x8510}, {0xffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x2}, {}, {0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x7}, {}, {0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x9}, {0x0, 0xfffffffc, 0x200}, {0xffffffff}, {}, {0x4}, {}, {0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x3}, {0x0, 0x0, 0x0, 0x4, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x7}, {0x0, 0xb, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, {0x0, 0x0, 0x0, 0xec33, 0x0, 0x4}, {}, {0xb, 0x0, 0x0, 0x0, 0x0, 0xfe1}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {0x0, 0x8, 0x0, 0x0, 0xfffffffe}, {0x0, 0x2, 0x0, 0x2, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0xe9d, 0x58a}, {0x2}, {0x2, 0x9, 0x20000000}, {0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0xe600, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x7, 0x1}, {0x0, 0x5, 0x0, 0x0, 0xffffff77}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {0xfffffffb, 0x0, 0x0, 0x0, 0x8000}, {0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x2d}, {0x0, 0x0, 0x8000, 0x0, 0x0, 0xffffffc0}, {0x0, 0x8000}, {0x0, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7fff800, 0x4}, {0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0xd}], [{}, {}, {0x0, 0x1}, {0x1}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {0x4}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {0x3, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0)

38.606539915s ago: executing program 4 (id=1088):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b000000000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000000206010200000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a32000000000500040000000000140007800800124000000000050015002200000005000500020000000500010006"], 0x64}}, 0x0)

38.55599982s ago: executing program 4 (id=1090):
r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000e40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYRESDEC=r0, @ANYRES32=0x0, @ANYRESHEX], 0x8, 0x2eb, &(0x7f00000000c0)="$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")
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x208e24b)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000100)={0x2, 0x5, 0x0, 0x8, 0xe, 0x0, 0x0, 0x7, [@sadb_address={0x5, 0x6, 0x0, 0x80, 0xe, @in6={0xa, 0x4e20, 0x4, @empty, 0xf}}, @sadb_sa={0x2, 0x1, 0x4d6, 0x0, 0x81}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x5, @private0, 0x3}}]}, 0x70}, 0x1, 0x400000000000000}, 0x0)
lseek(r1, 0xfffffffffffffffc, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000013000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
fdatasync(0xffffffffffffffff)

38.444561631s ago: executing program 4 (id=1092):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
setrlimit(0x9, &(0x7f0000000400)={0x0, 0x7})
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000040000000c0000000b"], 0x50)
mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000f80), 0x400, &(0x7f0000000140)=ANY=[@ANYBLOB='mpol=bind:N-', @ANYRESDEC])
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83)
sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xf0, 0x32, 0x205, 0x70bd2d, 0x25dfdbfc, {}, [{0xc9}]}, 0xf0}, 0x1, 0x0, 0x0, 0x85}, 0x8000)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r3, 0x40086602, &(0x7f0000000000))
fstat(r3, &(0x7f0000000340))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x1ffffdc1, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000ff0018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="16000000000000000400000007"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10)
getrlimit(0x0, &(0x7f0000000200))
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r6}, 0x10)
mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18)
io_setup(0x2004, &(0x7f0000000680))
socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="c50f22000011000000000000007e492e9dc2bc1c19c6bd2b0e70eb8f8681983a6f239a7c4906ca06f4fc9dffbe309cfb2338f1237702afa735f8243c5d19f62eba53dcbe61531f98468ce5f6d120af16a85e5ec57448ba21bf5088614753a2fa9762389d", @ANYRES32=0x0, @ANYBLOB="08002a0084210000"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r7, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x44, r9, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x2a}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x53}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x71}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5b}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4040010)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x2f, '\x00', 0x0, 0x2}, 0x94)

38.436030372s ago: executing program 4 (id=1093):
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xffffffff}, 0x18)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50)
syz_io_uring_setup(0x2c0d, &(0x7f0000000400)={0x0, 0xc890, 0x4000, 0x2}, 0x0, 0x0)

23.362419711s ago: executing program 32 (id=1093):
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xffffffff}, 0x18)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50)
syz_io_uring_setup(0x2c0d, &(0x7f0000000400)={0x0, 0xc890, 0x4000, 0x2}, 0x0, 0x0)

2.439242409s ago: executing program 1 (id=1589):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x7, 0x8000, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000b00)='>', 0x1}], 0x1}, 0x20000040)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='5'], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
recvmsg$unix(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0}, 0x2000)

2.387763224s ago: executing program 1 (id=1590):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r1, 0x0, r4, 0x0, 0x7ff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10)
splice(r3, 0x0, r2, 0x0, 0x114, 0xe)
ioctl$BTRFS_IOC_QUOTA_CTL(0xffffffffffffffff, 0xc0109428, &(0x7f00000002c0)={0x1, 0xfffffffffffffffa})
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00010000031401"], 0x100}, 0x1, 0x0, 0x0, 0x4040024}, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r6}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)

2.319881391s ago: executing program 5 (id=1592):
gettid()
timer_create(0x0, 0x0, &(0x7f0000000300)=<r0=>0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
timer_delete(r0)
symlink(&(0x7f00000003c0)='./file0/file0/..\x00', &(0x7f0000000240)='./file1\x00')
r3 = fspick(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0)
r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0/file0/..\x00', &(0x7f0000000480)={0x18000, 0x150, 0x4}, 0x18)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000380)=']-:@@#\x00', &(0x7f0000000400)='./file0/file0/..\x00', r4)
bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r2, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000680)=[0x0], &(0x7f00000006c0)=[0x0, 0x0], <r5=>0x0, 0x5d, &(0x7f0000000800)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000840), &(0x7f0000000880), 0x8, 0x11, 0x8, 0x8, &(0x7f00000008c0)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000600)=ANY=[@ANYRESOCT=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r6}, 0x18)
mount$9p_fd(0x0, &(0x7f0000000280)='./file1\x00', &(0x7f0000000080), 0x2010000, &(0x7f0000000700))
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f00000000c0)={0x0, 0x1, 0x3, 0x4})
bpf$PROG_LOAD(0x5, &(0x7f0000001d40)={0x11, 0x8, &(0x7f0000001e00)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24}, 0x94)
r7 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300)=<r8=>0x0, &(0x7f0000000580)=<r9=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4)
syz_io_uring_submit(r8, r9, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x4})
io_uring_enter(r7, 0xfffff000, 0x3900, 0x1, 0x0, 0xe00)
io_uring_setup(0x4d3f, &(0x7f0000000200)={0x0, 0xca6a, 0x40, 0x3, 0x6})
rt_sigsuspend(&(0x7f00000002c0)={[0x225c17d03]}, 0x8)

2.180421634s ago: executing program 1 (id=1593):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYRES64=0x0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0xc)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x18)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f00000001c0), &(0x7f00000003c0)=r3}, 0x20)
close(0xffffffffffffffff)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
stat(&(0x7f0000000040)='./file3\x00', &(0x7f0000000300))
syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x36e, &(0x7f00000007c0)="$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")
sched_setscheduler(0x0, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
unshare(0x2c060000)
unshare(0x2c020400)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105142, 0x2c)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000e00), 0x1, 0x570, &(0x7f0000001500)="$eJzs3c9rG8ceAPDvylZ+vxcHQnivlGLooSlp5NjujxR6SM9taKC9p8JWTLAcBUsOsRtocmjOJfRSGii9l0JvPYb+Az30bwi0gVCCaQ+9qKy8UmRbsuVYsZXq84E1891daWa0O+MZjYQCGFrj6Z9cxP8j4ssk4nhEJNmx0cgOjq+dt/rk1ky6JVGvf/xH0jgvjZvP1Xzc0Sz4X0T8/EXEmdzmfKvLK/PFcrm0mMUTtYXrE9XllbNXF4pzpbnStanp6fNvTU+9+87bfavr65f++vqjByNZdOJeEhfiWBa112MXbrcH4zGevSb5uLDhxMk+ZDZIko57f9jzcrAzI1k7z0faBxyPkazVA/9+n0dEHRhSyY7b/6/551MSYG81xwHNuX2f5sEvjMfvr02ANtd/dO29kTjUmBsdWU3WzYzS+e5YH/JP8/jp9/v30i369z4EwLZu34mIc6Ojm/u/JOv/nt25Hs7ZmIf+D/bOg3T880an8U+uNf6JDeOfH/Nrazy77R+ip/afe9SHbLpKx3/vdRz/thatxkay6D+NMV8+uXK1XEr7tv9GxOnIH0zjrdZzzq8+rHc71j7+S7c0/+ZYMCvHo9GD6x8zW6wVd1Pndo/vRLzUcfybtK5/0mH8m74el3rM41Tp/ivdjm1f/+er/l3Eax2v/9MVrWTr9cmJxv0w0bwrNvvz7qlfuuW/3/VPr/+Rres/lrSv11Z3nse3h/4uRWs9eb119Y/e7/8DySeN9IFs381irbY4GXEg+bC1P9fcP/X0sc24eX5a/9Ovbt3/dbr/D0fEpz3W/+7J71/udmwQrv9sx+vfmt1uuP47Tzz84LNvuuXfW//3ZiN1OtvTS//XawF389oBAAAAAADAoMlFxLFIcoVWOpcrFNY+33EyjuTKlWrtzJXK0rXZeuO7smORzzVXuo+3fR5iMlsxzOLGl2zb4tJ0RJyIiK9GDjfiwkylPLvflQcAAAAAAAAAAAAAAAAAAIABcbTL9/9Tv43sd+mA585PfsPw2rb99+OXnoCB5P8/DC/tH4aX9g/DS/uH4aX9w/DS/mF4af8wvLR/AAAAAAAAAAAAAAAAAAAAAAAAAAAA6KtLFy+mW331ya2ZNJ69sbw0X7lxdrZUnS8sLM0UZiqL1wtzlcpcuVSYqSxs93zlSuX65FQs3Zyolaq1ieryyuWFytK12uWrC8W50uVSfk9qBQAAAAAAAAAAAAAAAAAAAC+W6vLKfLFcLi1KSDxTYnQwivHCJJKIGIBibJvY754JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ76JwAA//9JYjJS")
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r5, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b40)=@newtaction={0x14c, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x138, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x5, 0x0, 0x3, 0x1000, {0x0, 0x2, 0x0, 0x0, 0x5}, {0x2, 0x0, 0xff, 0x0, 0x2}}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfffffff7}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x73251c587dd540e9}}}}, @m_ct={0x80, 0xa, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_MARK_MASK={0x8}, @TCA_CT_ACTION={0x6, 0x3, 0x20}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e21}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e23}]}, {0x35, 0x6, "17905395b9c19c80a9fc7c3ab25b5b422f8c8fd278c09511aa9f0f535d268bde3e901500e6e65e9656b01af0eb9a0c4407"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x4, 0x1}}}}]}]}, 0x14c}}, 0x0)
r6 = socket(0xa, 0x5, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xf1, @loopback, 0x19f49a9}], 0x1c)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
socket$inet6_udplite(0xa, 0x2, 0x88)

2.02208605s ago: executing program 2 (id=1594):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x7, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f00000006c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x10, 0x0)

1.934592379s ago: executing program 2 (id=1595):
r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000e40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYRESDEC=r0, @ANYRES32=0x0, @ANYRESHEX], 0x8, 0x2eb, &(0x7f00000000c0)="$eJzs3E1PE10UwPHTF0pbAmXx5DGaGG50o5sJVNdKYyAxNpEgNb4kJgNMtenYkpkGU2NEV26NH8IFYcmORPkCbNzpxo07NiYuZGEc0+kMhTKAlNIi/H8JmcPce6b3zgzk3AnD+r23T4t5W8vrFQnHlYRERDZEBiUsvpC3DbtxTLZ6JZf7fnw+f+f+g1uZbHZsUqnxzNSVtFJqYOjDsxcJr9tKr6wNPlr/nv629v/a2fXfU08KtirYqlSuKF1Nl79W9GnTULMFu6gpNWEaum2oQsk2rHp7ud6eN8tzc1Wll2b7k3OWYdtKL1VV0aiqSllVrKqKPNYLJaVpmupPCvaTW5yc1DMtJs+0eTA4IpaV0SMiktjRklvsyoAAAEBXNdf/YVHtrP+XLqxW+u4uD3j1/0osqP6/+qV+rG31f1xEAut///MD63/9YPX/zorodDlU/Y/jYSi2Y1eoEdYarYye9H5+Xa8fLg27AfU/AAAAAAAAAAAAAAAAAAAAAAD/gg3HSTmOk/K3/leviMRFxP8+IDUiIte7MGS00SGuP06Axot70QER8818bj5X33odVkXEFEOGJSW/3PvBU4v9N49UzaB8NBe8/IX5XMRtyeSl4OaPSKpHmvMdZ/xmdmxE1W3P75Hk1vy0pOS/4Px0YH5MLl3ckq9JSj7NSFlMmXXH0ch/OaLUjdvZpvyE2w8AAAAAgJNAU5sC1++atlt7PX9zfd38fCDSWF8PB67Po3Iu2t25AwAAAABwWtjV50XdNA1rjyAh+/dpPYge0ZH9Gf5tlv+3DEc30z0C/8O3NcW9nW0/LaEDnJZdgrC0kjVUm4067Cz8x0a79ZGJ0c5fQTc48+79z/Yd8NpyfJ+Zth5E9r4Bejr2CwgAAABAxzSKfn/PaHcHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAKdSJ/47W7TkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx8WfAAAA//+SWQVN")
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000000)={0x0, 0x3, &(0x7f00000000c0)={0x0}, 0x1, 0x400000000000000}, 0x0)
lseek(r2, 0xfffffffffffffffc, 0x0)
r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYRES32=r3], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
fdatasync(r1)

1.608602201s ago: executing program 2 (id=1596):
socketpair$unix(0x1, 0x1, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000b00)='>', 0x1}], 0x1}, 0x20000040)
recvmsg$unix(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, 0x0}, 0x2000)

1.538567958s ago: executing program 0 (id=1597):
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x18)
r2 = socket$netlink(0x10, 0x3, 0x10)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r2) (fail_nth: 4)

1.538050838s ago: executing program 2 (id=1598):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)={0x68, 0x2, 0x3, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x5}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x4}}, @NFQA_CFG_MASK={0x8}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x28}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x10}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x80}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2f}, @NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0x15}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x10}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x10}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000100}, 0x41)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain={'key_or_keyring:', r4})
readv(r0, &(0x7f0000000080)=[{&(0x7f0000000440)=""/244, 0xf4}], 0x1)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)
migrate_pages(0x0, 0xfc, 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r6}, 0x18)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000000206010200000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a32000000000500040000000000140007800800124000000000050015002200000005000500020000000500010006"], 0x64}}, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0)
r8 = socket(0x10, 0x3, 0x0)
sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="15452f1c17ce03519634b0f248cd4f35bfbe040d6bec3aac6dbdaea4e21f786824ca85", 0x23}, {&(0x7f0000000100)="445fad3126ce24909e1424d14663981d8c0359c7bc376dafed5c51728053486f03e6c2c2c7c2", 0x26}], 0x2}, 0x404c080)
write(r8, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24)

1.4200051s ago: executing program 2 (id=1600):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x2, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x3, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
dup(r0)
r1 = epoll_create1(0x80000)
r2 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, 0x0)
syz_read_part_table(0x1050, &(0x7f0000000b80)="$eJzszzGqAjEUhtH/PWbIiI37sLfXVlsrN2FvYetGXJurkJEYQV2AiHBOlY/cBG74qr9k8qwxyVAPfZL/8j46fY31dV+SxWG8yzC24eUs59U8NXa1N+1+OPbp2sPL9vHDqXTlo6sBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwM+4BQAA///qiBUU")
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x5031, 0xffffffffffffffff, 0xc2dcc000)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x12, &(0x7f0000000500)=0xfffffffe, 0x4)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r4, 0x0, 0x3}, 0x18)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYRESOCT], 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00'}, 0x10)
quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000380)=@filename='./file0\x00', 0x0, 0x0)
futex(&(0x7f0000000040)=0x2, 0xb, 0x2, 0x0, &(0x7f0000000100)=0x1, 0x2)
futex(&(0x7f0000000140)=0x1, 0x6, 0x6, &(0x7f00000000c0)={0x0, 0x989680}, 0x0, 0x2)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x8c97b000)
futex(&(0x7f0000000040)=0x1, 0x1, 0x2, 0x0, 0x0, 0x1)
setresuid(0xee00, 0xee00, 0x0)
unshare(0x28000600)
socket$inet6(0xa, 0x2, 0x0)

1.41381459s ago: executing program 5 (id=1601):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', 0xffffffffffffffff, 0x0, 0x5d6c}, 0x18)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
semget$private(0x0, 0x3, 0x100)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
unshare(0x20060400)
syz_clone(0x21000000, 0x0, 0x0, 0x0, 0x0, 0x0)

1.30869211s ago: executing program 0 (id=1602):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9, 0x5d032, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
inotify_rm_watch(0xffffffffffffffff, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r3}, 0x10)
socket(0x10, 0xa, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000071000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r4, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10)
socket$tipc(0x1e, 0x5, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0)

1.300154601s ago: executing program 0 (id=1603):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x4)
r1 = dup(r0)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000005000600010000000800090001000000050002"], 0x44}}, 0x0)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
chdir(&(0x7f00000001c0)='./bus\x00')
openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x533201, 0x80)
r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x194)
getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8)
r4 = syz_genetlink_get_family_id$nl80211(0x0, r0)
sendmsg$NL80211_CMD_SET_NOACK_MAP(r1, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x28, r4, 0x20, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x75}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x8800)
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./file1\x00', 0x810, &(0x7f0000000340)=ANY=[@ANYRES8=0x0, @ANYRES16], 0x1, 0x256, &(0x7f0000000bc0)="$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")
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105142, 0x2c)
mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r5, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0)
write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b)
write$UHID_INPUT(r1, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006)

1.279234733s ago: executing program 5 (id=1604):
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001140)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x64}, {@in, 0x0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x35}, {}, {0xfffffffffffffffd, 0x0, 0x8000000, 0x200}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x70bd2a, 0x70bd28}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x18}}]}, 0x1a0}}, 0x0)

1.254977416s ago: executing program 1 (id=1605):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/diskstats\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000006c0)=[{&(0x7f00000004c0)=""/149, 0x95}], 0x1, 0x31, 0x0)
r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0, 0xb}, 0x110d41, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x3}, 0x18)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000fbdb0cf81c000000180001801400020074756e6c30"], 0x2c}}, 0x0)

1.249008346s ago: executing program 5 (id=1606):
bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r0}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r2}, 0x10)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x80000000}, 0x94)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89a2, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10)
symlinkat(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10)
r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_wakeup_irq', 0x0, 0xb)
r10 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x0)
ioctl$LOOP_CONFIGURE(r10, 0x4c0a, &(0x7f0000001600)={r9, 0x800, {0x2a00, 0x80010000, 0x0, 0xff, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09d0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}})

1.144256167s ago: executing program 1 (id=1607):
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000e40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYRESDEC, @ANYRES32=0x0, @ANYRESHEX], 0x8, 0x2eb, &(0x7f00000000c0)="$eJzs3E1PE10UwPHTF0pbAmXx5DGaGG50o5sJVNdKYyAxNpEgNb4kJgNMtenYkpkGU2NEV26NH8IFYcmORPkCbNzpxo07NiYuZGEc0+kMhTKAlNIi/H8JmcPce6b3zgzk3AnD+r23T4t5W8vrFQnHlYRERDZEBiUsvpC3DbtxTLZ6JZf7fnw+f+f+g1uZbHZsUqnxzNSVtFJqYOjDsxcJr9tKr6wNPlr/nv629v/a2fXfU08KtirYqlSuKF1Nl79W9GnTULMFu6gpNWEaum2oQsk2rHp7ud6eN8tzc1Wll2b7k3OWYdtKL1VV0aiqSllVrKqKPNYLJaVpmupPCvaTW5yc1DMtJs+0eTA4IpaV0SMiktjRklvsyoAAAEBXNdf/YVHtrP+XLqxW+u4uD3j1/0osqP6/+qV+rG31f1xEAut///MD63/9YPX/zorodDlU/Y/jYSi2Y1eoEdYarYye9H5+Xa8fLg27AfU/AAAAAAAAAAAAAAAAAAAAAAD/gg3HSTmOk/K3/leviMRFxP8+IDUiIte7MGS00SGuP06Axot70QER8818bj5X33odVkXEFEOGJSW/3PvBU4v9N49UzaB8NBe8/IX5XMRtyeSl4OaPSKpHmvMdZ/xmdmxE1W3P75Hk1vy0pOS/4Px0YH5MLl3ckq9JSj7NSFlMmXXH0ch/OaLUjdvZpvyE2w8AAAAAgJNAU5sC1++atlt7PX9zfd38fCDSWF8PB67Po3Iu2t25AwAAAABwWtjV50XdNA1rjyAh+/dpPYge0ZH9Gf5tlv+3DEc30z0C/8O3NcW9nW0/LaEDnJZdgrC0kjVUm4067Cz8x0a79ZGJ0c5fQTc48+79z/Yd8NpyfJ+Zth5E9r4Bejr2CwgAAABAxzSKfn/PaHcHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAKdSJ/47W7TkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx8WfAAAA//+SWQVN")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000013000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000680)='kmem_cache_free\x00', r2}, 0x18)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
fdatasync(r0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)

1.020155179s ago: executing program 5 (id=1608):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x4)
r1 = dup(r0)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000005000600010000000800090001000000050002"], 0x44}}, 0x0)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
chdir(&(0x7f00000001c0)='./bus\x00')
openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x533201, 0x80)
r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x194)
getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8)
r4 = syz_genetlink_get_family_id$nl80211(0x0, r0)
sendmsg$NL80211_CMD_SET_NOACK_MAP(r1, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x28, r4, 0x20, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x75}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x8800)
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./file1\x00', 0x810, &(0x7f0000000340)=ANY=[@ANYRES8=0x0, @ANYRES16], 0x1, 0x256, &(0x7f0000000bc0)="$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")
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105142, 0x2c)
mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r5, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0)
write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b)
write$UHID_INPUT(r1, &(0x7f0000000000)={0xc, {"a2e3ad2109c752f91b5a470987f70e06d038e7ff7fc6e5539b3245078b089b3208336d060890e0878f0e1ac6e70a9b3368959b6c9a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b38070d095d0936cd3b78130daa61f8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4040d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a4d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6cb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006)

624.735098ms ago: executing program 3 (id=1609):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x7, 0x8000, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000b00)='>', 0x1}], 0x1}, 0x20000040)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='5'], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
recvmsg$unix(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0}, 0x2000)

587.089382ms ago: executing program 3 (id=1610):
socketpair$unix(0x1, 0x1, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000b00)='>', 0x1}], 0x1}, 0x20000040)
recvmsg$unix(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, 0x0}, 0x2000)

516.075119ms ago: executing program 2 (id=1611):
gettid()
timer_create(0x0, 0x0, &(0x7f0000000300)=<r0=>0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
timer_delete(r0)
symlink(&(0x7f00000003c0)='./file0/file0/..\x00', &(0x7f0000000240)='./file1\x00')
r3 = fspick(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0)
r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0/file0/..\x00', &(0x7f0000000480)={0x18000, 0x150, 0x4}, 0x18)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000380)=']-:@@#\x00', &(0x7f0000000400)='./file0/file0/..\x00', r4)
bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r2, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000680)=[0x0], &(0x7f00000006c0)=[0x0, 0x0], <r5=>0x0, 0x5d, &(0x7f0000000800)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000840), &(0x7f0000000880), 0x8, 0x11, 0x8, 0x8, &(0x7f00000008c0)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000600)=ANY=[@ANYRESOCT=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10)
mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x2010000, &(0x7f0000000700))
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f00000000c0)={0x0, 0x1, 0x3, 0x4})
bpf$PROG_LOAD(0x5, &(0x7f0000001d40)={0x11, 0x8, &(0x7f0000001e00)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24}, 0x94)
r7 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300)=<r8=>0x0, &(0x7f0000000580)=<r9=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4)
syz_io_uring_submit(r8, r9, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x4})
io_uring_enter(r7, 0xfffff000, 0x3900, 0x1, 0x0, 0xe00)
io_uring_setup(0x4d3f, &(0x7f0000000200)={0x0, 0xca6a, 0x40, 0x3, 0x6})
rt_sigsuspend(&(0x7f00000002c0)={[0x225c17d03]}, 0x8)

448.769306ms ago: executing program 3 (id=1612):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)

447.347796ms ago: executing program 1 (id=1613):
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000e40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYRESDEC, @ANYRES32=0x0, @ANYRESHEX], 0x8, 0x2eb, &(0x7f00000000c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000013000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000680)='kmem_cache_free\x00', r2}, 0x18)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
fdatasync(r0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)

409.042289ms ago: executing program 0 (id=1614):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000003c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nombcache}]}, 0x0, 0x43b, &(0x7f0000000480)="$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")
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000100)='./file2\x00')

407.50007ms ago: executing program 3 (id=1615):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b000000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18)
bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5}, 0x48)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc1ffb}]})
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000200)={<r3=>0x0}, &(0x7f0000000240)=0x8)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00'})
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000280)={r3, 0xffff8001, 0x20}, &(0x7f00000002c0)=0xc)
r4 = perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0)
ioctl$TIOCPKT(r6, 0x5420, &(0x7f0000000200)=0x1b)
readv(r6, &(0x7f0000000640)=[{&(0x7f00000003c0)=""/137, 0x89}], 0x1)
ioctl$TCSETS2(r6, 0x402c542b, &(0x7f0000000040)={0xf9, 0x9ccf, 0xffffffff, 0x101, 0x8, "fc1dc8d6f69f0b8fd1e83697a6cee7cd8819fe", 0x3})
r7 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800000000009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, r7, 0x0)
r8 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x84, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x2980, 0x2, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, r7, 0x0)
perf_event_open(&(0x7f0000002100)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, r7, 0x0)
close(r8)
r9 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r9, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)

224.508778ms ago: executing program 0 (id=1616):
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001140)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x64}, {@in, 0x0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x35}, {}, {0xfffffffffffffffd, 0x0, 0x8000000, 0x200}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x70bd2a, 0x70bd28}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x18}}]}, 0x1a0}}, 0x0)

223.618088ms ago: executing program 3 (id=1617):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/diskstats\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000006c0)=[{&(0x7f00000004c0)=""/149, 0x95}], 0x1, 0x31, 0x0)
r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0, 0xb}, 0x110d41, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x3}, 0x18)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000fbdb0cf81c000000180001801400020074756e6c30"], 0x2c}}, 0x0)

182.127712ms ago: executing program 0 (id=1618):
r0 = socket$unix(0x1, 0x1, 0x0)
sendto$packet(0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x44830, 0x0, 0x0)
bind$unix(r0, &(0x7f0000000180)=@file={0x1}, 0x6e)
listen(r0, 0x0)
socket$unix(0x1, 0x1, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x80000, 0x0, 0x0, 0x41100}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
syz_read_part_table(0x5c1, &(0x7f00000006c0)="$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")
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x481, 0x104)
fallocate(r3, 0x3, 0x4000, 0x24000)

146.857935ms ago: executing program 3 (id=1619):
r0 = socket$unix(0x1, 0x1, 0x0)
sendto$packet(0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x44830, 0x0, 0x0)
bind$unix(r0, &(0x7f0000000180)=@file={0x1}, 0x6e)
listen(r0, 0x0)
socket$unix(0x1, 0x1, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x80000, 0x0, 0x0, 0x41100}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0})
syz_read_part_table(0x5c1, &(0x7f00000006c0)="$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")
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x481, 0x104)
fallocate(r3, 0x3, 0x4000, 0x24000)

0s ago: executing program 5 (id=1620):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x4)
r1 = dup(r0)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x533201, 0x80)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x194)
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./file1\x00', 0x810, &(0x7f0000000340)=ANY=[@ANYRES8=0x0, @ANYRES16], 0x1, 0x256, &(0x7f0000000bc0)="$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")
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105142, 0x2c)
mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r2, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b)
write$UHID_INPUT(r1, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006)

kernel console output (not intermixed with test programs):

-0000-000000000000 r/w without journal. Quota mode: none.
[   90.711446][ T6151] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   90.723995][ T6143] ext2 filesystem being mounted at /203/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[   90.724332][ T6151] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   90.755287][ T6143] EXT4-fs error (device loop4): ext4_add_entry:2417: inode #2: comm syz.4.994: Directory hole found for htree leaf block 0
[   90.833009][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   90.892612][ T6160] netlink: 12 bytes leftover after parsing attributes in process `syz.4.996'.
[   90.936869][ T6162] loop2: detected capacity change from 0 to 2048
[   90.998256][ T6166] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1000'.
[   91.012538][ T6162]  loop2: p1 < > p3
[   91.017203][ T6162] loop2: p3 size 54016 extends beyond EOD, truncated
[   91.143000][ T6170] loop4: detected capacity change from 0 to 8192
[   91.420070][ T6179] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1006'.
[   91.436713][ T6180] rdma_op ffff88811ae3bd80 conn xmit_rdma 0000000000000000
[   91.502373][ T6182] loop0: detected capacity change from 0 to 8192
[   91.537912][ T6182] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   91.565477][ T6184] loop3: detected capacity change from 0 to 512
[   91.577516][ T6182] netlink: 'syz.0.1007': attribute type 21 has an invalid length.
[   91.593012][ T6184] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.1008: error while reading EA inode 32 err=-116
[   91.617519][ T6184] EXT4-fs (loop3): Remounting filesystem read-only
[   91.627630][ T6191] loop1: detected capacity change from 0 to 128
[   91.633980][ T6184] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30)
[   91.645474][ T6184] EXT4-fs (loop3): 1 orphan inode deleted
[   91.651697][ T6184] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   91.673390][ T6184] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   91.773388][ T6196] loop3: detected capacity change from 0 to 128
[   91.968615][ T6201] loop2: detected capacity change from 0 to 2048
[   92.029630][ T6205] loop3: detected capacity change from 0 to 128
[   92.037619][ T5109]  loop2: p1 < > p3
[   92.043047][ T5109] loop2: p3 size 54016 extends beyond EOD, truncated
[   92.154270][ T6201]  loop2: p1 < > p3
[   92.159046][ T6201] loop2: p3 size 54016 extends beyond EOD, truncated
[   92.186612][ T3002]  loop2: p1 < > p3
[   92.196524][ T3002] loop2: p3 size 54016 extends beyond EOD, truncated
[   92.292670][ T6191] bio_check_eod: 59701 callbacks suppressed
[   92.298696][ T6191] syz.1.1010: attempt to access beyond end of device
[   92.298696][ T6191] loop1: rw=0, sector=2078, nr_sectors = 1 limit=128
[   92.314044][ T6191] syz.1.1010: attempt to access beyond end of device
[   92.314044][ T6191] loop1: rw=0, sector=2078, nr_sectors = 1 limit=128
[   92.327340][ T6191] buffer_io_error: 59110 callbacks suppressed
[   92.327354][ T6191] Buffer I/O error on dev loop1, logical block 2078, async page read
[   92.341689][ T6191] syz.1.1010: attempt to access beyond end of device
[   92.341689][ T6191] loop1: rw=0, sector=2078, nr_sectors = 1 limit=128
[   92.345643][   T52] kworker/u8:3: attempt to access beyond end of device
[   92.345643][   T52] loop3: rw=1, sector=153, nr_sectors = 8 limit=128
[   92.355115][ T6191] Buffer I/O error on dev loop1, logical block 2078, async page read
[   92.376551][   T52] kworker/u8:3: attempt to access beyond end of device
[   92.376551][   T52] loop3: rw=1, sector=169, nr_sectors = 8 limit=128
[   92.390571][ T6191] syz.1.1010: attempt to access beyond end of device
[   92.390571][ T6191] loop1: rw=0, sector=2078, nr_sectors = 1 limit=128
[   92.404041][ T6191] Buffer I/O error on dev loop1, logical block 2078, async page read
[   92.404115][   T52] kworker/u8:3: attempt to access beyond end of device
[   92.404115][   T52] loop3: rw=1, sector=185, nr_sectors = 8 limit=128
[   92.412591][ T6191] syz.1.1010: attempt to access beyond end of device
[   92.412591][ T6191] loop1: rw=0, sector=2078, nr_sectors = 1 limit=128
[   92.438737][ T6191] Buffer I/O error on dev loop1, logical block 2078, async page read
[   92.447230][ T6191] syz.1.1010: attempt to access beyond end of device
[   92.447230][ T6191] loop1: rw=0, sector=2078, nr_sectors = 1 limit=128
[   92.457556][   T52] kworker/u8:3: attempt to access beyond end of device
[   92.457556][   T52] loop3: rw=1, sector=201, nr_sectors = 8 limit=128
[   92.460496][ T6191] Buffer I/O error on dev loop1, logical block 2078, async page read
[   92.551784][ T6222] loop4: detected capacity change from 0 to 2048
[   92.561283][ T6218] loop3: detected capacity change from 0 to 8192
[   92.575357][ T6218] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   92.593311][ T3507]  loop4: p1 < > p3
[   92.597806][ T6224] loop1: detected capacity change from 0 to 128
[   92.603366][ T3507] loop4: p3 size 54016 extends beyond EOD, truncated
[   92.613592][ T6218] netlink: 'syz.3.1020': attribute type 21 has an invalid length.
[   92.641021][ T6222] loop_reread_partitions: partition scan of loop4 () failed (rc=-16)
[   92.723778][ T6224] Buffer I/O error on dev loop1, logical block 2078, async page read
[   92.758829][ T3507] udevd[3507]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[   92.766726][ T6224] Buffer I/O error on dev loop1, logical block 2078, async page read
[   92.801456][ T6224] Buffer I/O error on dev loop1, logical block 2078, async page read
[   92.815806][ T6224] Buffer I/O error on dev loop1, logical block 2078, async page read
[   92.824019][ T6224] Buffer I/O error on dev loop1, logical block 2078, async page read
[   92.855021][ T6242] loop3: detected capacity change from 0 to 128
[   92.874339][ T6240] loop4: detected capacity change from 0 to 2048
[   92.943249][ T6240]  loop4: p1 < > p3
[   92.948037][ T6240] loop4: p3 size 54016 extends beyond EOD, truncated
[   92.978047][ T3002]  loop4: p1 < > p3
[   92.984037][ T3002] loop4: p3 size 54016 extends beyond EOD, truncated
[   93.061327][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[   93.077200][ T6248] loop4: detected capacity change from 0 to 2048
[   93.133462][ T6248]  loop4: p1 < > p3
[   93.142072][ T6253] rdma_op ffff88811ae3ad80 conn xmit_rdma 0000000000000000
[   93.162242][ T6248] loop4: p3 size 54016 extends beyond EOD, truncated
[   93.323656][ T6271] loop2: detected capacity change from 0 to 128
[   93.395959][ T6269] loop4: detected capacity change from 0 to 8192
[   93.424715][ T6269] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   93.448652][ T6269] netlink: 'syz.4.1042': attribute type 21 has an invalid length.
[   93.508243][ T6274] loop1: detected capacity change from 0 to 2048
[   93.539249][ T6276] serio: Serial port ptm0
[   93.553502][ T3507]  loop1: p1 < > p3
[   93.558326][ T3507] loop1: p3 size 54016 extends beyond EOD, truncated
[   93.572146][ T6274]  loop1: p1 < > p3
[   93.577113][ T6274] loop1: p3 size 54016 extends beyond EOD, truncated
[   93.640409][ T6281] loop1: detected capacity change from 0 to 128
[   93.703499][ T6282] loop4: detected capacity change from 0 to 128
[   93.950923][ T6289] loop0: detected capacity change from 0 to 2048
[   93.983096][ T3507]  loop0: p1 < > p3
[   93.987561][ T3507] loop0: p3 size 54016 extends beyond EOD, truncated
[   93.997944][ T6289]  loop0: p1 < > p3
[   94.002555][ T6289] loop0: p3 size 54016 extends beyond EOD, truncated
[   94.078077][ T3507] udevd[3507]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[   94.088210][ T5109] udevd[5109]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory
[   94.161660][ T6299] loop0: detected capacity change from 0 to 128
[   94.165956][ T6301] __nla_validate_parse: 11 callbacks suppressed
[   94.166019][ T6301] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1056'.
[   94.212897][   T29] kauditd_printk_skb: 3253 callbacks suppressed
[   94.212911][   T29] audit: type=1326 audit(1761029970.142:22270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6287 comm="syz.2.1050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f520b271885 code=0x7ffc0000
[   94.235588][ T6303] loop3: detected capacity change from 0 to 2048
[   94.262890][   T29] audit: type=1326 audit(1761029970.142:22271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6287 comm="syz.2.1050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f520b271885 code=0x7ffc0000
[   94.286479][   T29] audit: type=1326 audit(1761029970.142:22272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6287 comm="syz.2.1050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f520b271885 code=0x7ffc0000
[   94.310143][   T29] audit: type=1326 audit(1761029970.142:22273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6287 comm="syz.2.1050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f520b271885 code=0x7ffc0000
[   94.333888][   T29] audit: type=1326 audit(1761029970.142:22274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6287 comm="syz.2.1050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f520b271885 code=0x7ffc0000
[   94.357670][   T29] audit: type=1326 audit(1761029970.142:22275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6287 comm="syz.2.1050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f520b271885 code=0x7ffc0000
[   94.381331][   T29] audit: type=1326 audit(1761029970.142:22276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6287 comm="syz.2.1050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f520b271885 code=0x7ffc0000
[   94.405004][   T29] audit: type=1326 audit(1761029970.142:22277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6287 comm="syz.2.1050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f520b271885 code=0x7ffc0000
[   94.428619][   T29] audit: type=1326 audit(1761029970.142:22278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6287 comm="syz.2.1050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f520b271885 code=0x7ffc0000
[   94.452270][   T29] audit: type=1326 audit(1761029970.152:22279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6302 comm="syz.3.1057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b33beefc9 code=0x7ffc0000
[   94.476911][ T3507]  loop3: p1 < > p3
[   94.481378][ T3507] loop3: p3 size 54016 extends beyond EOD, truncated
[   94.502193][ T6303] loop_reread_partitions: partition scan of loop3 () failed (rc=-16)
[   94.524464][ T6307] loop4: detected capacity change from 0 to 128
[   94.543369][ T3002]  loop3: p1 < > p3
[   94.548272][ T3002] loop3: p3 size 54016 extends beyond EOD, truncated
[   94.607177][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[   94.619781][ T5109] udevd[5109]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[   94.651720][ T6310] loop3: detected capacity change from 0 to 128
[   94.795008][ T6314] loop1: detected capacity change from 0 to 8192
[   94.808160][ T6314] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   94.824474][ T6314] netlink: 'syz.1.1061': attribute type 21 has an invalid length.
[   94.832634][ T6314] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1061'.
[   94.841752][ T6314] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1061'.
[   94.885109][ T6324] loop2: detected capacity change from 0 to 128
[   94.915931][ T6328] loop2: detected capacity change from 0 to 128
[   95.274448][ T6335] loop1: detected capacity change from 0 to 128
[   95.590907][ T6353] loop2: detected capacity change from 0 to 128
[   95.648546][ T6355] loop2: detected capacity change from 0 to 128
[   95.679664][ T6357] loop0: detected capacity change from 0 to 2048
[   95.713683][ T6357]  loop0: p1 < > p3
[   95.718398][ T6357] loop0: p3 size 54016 extends beyond EOD, truncated
[   95.971725][ T6367] loop0: detected capacity change from 0 to 2048
[   96.072486][ T3507]  loop0: p1 < > p3
[   96.079271][ T3507] loop0: p3 size 54016 extends beyond EOD, truncated
[   96.096859][ T6367]  loop0: p1 < > p3
[   96.101481][ T6367] loop0: p3 size 54016 extends beyond EOD, truncated
[   96.273967][ T6373] loop0: detected capacity change from 0 to 128
[   96.361951][ T6381] loop4: detected capacity change from 0 to 128
[   96.420115][ T6383] tmpfs: Bad value for 'mpol'
[   96.516667][ T6385] loop3: detected capacity change from 0 to 8192
[   97.138061][ T6393] loop0: detected capacity change from 0 to 2048
[   97.170651][ T6395] loop1: detected capacity change from 0 to 128
[   97.183889][ T6393]  loop0: p1 < > p3
[   97.188651][ T6393] loop0: p3 size 54016 extends beyond EOD, truncated
[   97.419506][ T6407] loop3: detected capacity change from 0 to 128
[   97.654967][ T6421] loop2: detected capacity change from 0 to 128
[   97.680718][ T6421] bio_check_eod: 104408 callbacks suppressed
[   97.680737][ T6421] syz.2.1106: attempt to access beyond end of device
[   97.680737][ T6421] loop2: rw=0, sector=2078, nr_sectors = 1 limit=128
[   97.700306][ T6421] buffer_io_error: 103114 callbacks suppressed
[   97.700320][ T6421] Buffer I/O error on dev loop2, logical block 2078, async page read
[   97.716224][ T6423] loop0: detected capacity change from 0 to 128
[   97.729438][ T6423] syz.0.1107: attempt to access beyond end of device
[   97.729438][ T6423] loop0: rw=0, sector=2078, nr_sectors = 1 limit=128
[   97.742729][ T6423] Buffer I/O error on dev loop0, logical block 2078, async page read
[   97.747911][ T6421] syz.2.1106: attempt to access beyond end of device
[   97.747911][ T6421] loop2: rw=0, sector=2078, nr_sectors = 1 limit=128
[   97.762907][ T6423] syz.0.1107: attempt to access beyond end of device
[   97.762907][ T6423] loop0: rw=0, sector=2078, nr_sectors = 1 limit=128
[   97.764070][ T6421] Buffer I/O error on dev loop2, logical block 2078, async page read
[   97.777246][ T6423] Buffer I/O error on dev loop0, logical block 2078, async page read
[   97.796856][ T6423] syz.0.1107: attempt to access beyond end of device
[   97.796856][ T6423] loop0: rw=0, sector=2078, nr_sectors = 1 limit=128
[   97.810261][ T6423] Buffer I/O error on dev loop0, logical block 2078, async page read
[   97.819002][ T6423] syz.0.1107: attempt to access beyond end of device
[   97.819002][ T6423] loop0: rw=0, sector=2078, nr_sectors = 1 limit=128
[   97.832340][ T6423] Buffer I/O error on dev loop0, logical block 2078, async page read
[   97.840967][ T6423] syz.0.1107: attempt to access beyond end of device
[   97.840967][ T6423] loop0: rw=0, sector=2078, nr_sectors = 1 limit=128
[   97.854256][ T6423] Buffer I/O error on dev loop0, logical block 2078, async page read
[   97.862527][ T6423] syz.0.1107: attempt to access beyond end of device
[   97.862527][ T6423] loop0: rw=0, sector=2078, nr_sectors = 1 limit=128
[   97.875945][ T6423] Buffer I/O error on dev loop0, logical block 2078, async page read
[   97.890748][ T6421] syz.2.1106: attempt to access beyond end of device
[   97.890748][ T6421] loop2: rw=0, sector=2078, nr_sectors = 1 limit=128
[   97.890777][ T6421] Buffer I/O error on dev loop2, logical block 2078, async page read
[   97.906376][ T6425] syz.0.1107: attempt to access beyond end of device
[   97.906376][ T6425] loop0: rw=0, sector=2078, nr_sectors = 1 limit=128
[   97.925456][ T6425] Buffer I/O error on dev loop0, logical block 2078, async page read
[   98.137838][ T6429] loop1: detected capacity change from 0 to 128
[   98.258053][ T6431] loop3: detected capacity change from 0 to 2048
[   98.335544][ T6431]  loop3: p1 < > p3
[   98.349463][ T6431] loop3: p3 size 54016 extends beyond EOD, truncated
[   98.536755][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[   98.548329][ T3507] udevd[3507]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[   98.558653][ T6435] loop3: detected capacity change from 0 to 2048
[   98.613696][ T3507]  loop3: p1 < > p3
[   98.619879][ T3507] loop3: p3 size 54016 extends beyond EOD, truncated
[   98.655408][ T6435]  loop3: p1 < > p3
[   98.660686][ T6437] rdma_op ffff88811b7f8d80 conn xmit_rdma 0000000000000000
[   98.669882][ T6437] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1111'.
[   98.672846][ T6435] loop3: p3 size 54016 extends beyond EOD, truncated
[   98.723081][ T3002]  loop3: p1 < > p3
[   98.733642][ T3002] loop3: p3 size 54016 extends beyond EOD, truncated
[   98.780464][ T6446] loop2: detected capacity change from 0 to 8192
[   98.796526][ T6446] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   98.818851][ T3507] udevd[3507]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[   98.832393][ T5109] udevd[5109]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[   98.844444][ T6451] loop0: detected capacity change from 0 to 2048
[   98.883615][ T6446] netlink: 'syz.2.1115': attribute type 21 has an invalid length.
[   98.891489][ T6446] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1115'.
[   98.900622][ T6446] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1115'.
[   98.912980][ T3305]  loop0: p1 < > p3
[   98.917422][ T3305] loop0: p3 size 54016 extends beyond EOD, truncated
[   98.934359][ T5109] udevd[5109]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[   98.945685][ T3507] udevd[3507]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[   98.972980][ T6451]  loop0: p1 < > p3
[   98.978631][ T6451] loop0: p3 size 54016 extends beyond EOD, truncated
[   99.002172][ T3002]  loop0: p1 < > p3
[   99.006679][ T3002] loop0: p3 size 54016 extends beyond EOD, truncated
[   99.086389][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory
[   99.093322][ T5109] udevd[5109]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[   99.118753][ T6458] loop0: detected capacity change from 0 to 128
[   99.170791][ T5109] udevd[5109]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory
[   99.182600][ T3507] udevd[3507]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[   99.234831][ T6470] netlink: 'syz.3.1122': attribute type 13 has an invalid length.
[   99.253257][   T29] kauditd_printk_skb: 2873 callbacks suppressed
[   99.253274][   T29] audit: type=1326 audit(1761029975.182:25153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6459 comm="syz.2.1120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f520b23efc9 code=0x7ffc0000
[   99.253305][   T29] audit: type=1326 audit(1761029975.182:25154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6459 comm="syz.2.1120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f520b23efc9 code=0x7ffc0000
[   99.254259][   T29] audit: type=1326 audit(1761029975.182:25155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6459 comm="syz.2.1120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f520b23efc9 code=0x7ffc0000
[   99.254347][   T29] audit: type=1326 audit(1761029975.182:25156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6459 comm="syz.2.1120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f520b23efc9 code=0x7ffc0000
[   99.254373][   T29] audit: type=1326 audit(1761029975.182:25157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6459 comm="syz.2.1120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f520b23efc9 code=0x7ffc0000
[   99.254534][   T29] audit: type=1326 audit(1761029975.182:25158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6459 comm="syz.2.1120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f520b23efc9 code=0x7ffc0000
[   99.269233][   T29] audit: type=1326 audit(1761029975.182:25159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6459 comm="syz.2.1120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f520b23efc9 code=0x7ffc0000
[   99.269341][   T29] audit: type=1326 audit(1761029975.182:25160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6459 comm="syz.2.1120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f520b23efc9 code=0x7ffc0000
[   99.290850][ T6472] loop1: detected capacity change from 0 to 128
[   99.523733][ T6479] loop2: detected capacity change from 0 to 8192
[   99.527006][ T6479] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   99.634495][   T29] audit: type=1326 audit(1761029975.562:25161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6480 comm="syz.2.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f520b23efc9 code=0x7ffc0000
[   99.634655][   T29] audit: type=1326 audit(1761029975.562:25162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6480 comm="syz.2.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f520b23efc9 code=0x7ffc0000
[   99.683067][ T6481] loop2: detected capacity change from 0 to 2048
[   99.759706][ T6481]  loop2: p1 < > p3
[   99.760369][ T6481] loop2: p3 size 54016 extends beyond EOD, truncated
[   99.763881][ T3002]  loop2: p1 < > p3
[   99.764566][ T3002] loop2: p3 size 54016 extends beyond EOD, truncated
[   99.972008][ T6486] loop2: detected capacity change from 0 to 2048
[  100.013141][ T3507]  loop2: p1 < > p3
[  100.017711][ T3507] loop2: p3 size 54016 extends beyond EOD, truncated
[  100.046976][ T6486]  loop2: p1 < > p3
[  100.051722][ T6486] loop2: p3 size 54016 extends beyond EOD, truncated
[  100.067625][ T6490] loop1: detected capacity change from 0 to 128
[  100.200270][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[  100.206864][ T3507] udevd[3507]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  100.336976][ T6503] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1135'.
[  100.430454][ T6506] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1138'.
[  100.530063][ T6510] loop1: detected capacity change from 0 to 8192
[  100.542063][ T6510] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  100.634253][ T6512] loop1: detected capacity change from 0 to 2048
[  100.693526][ T6512]  loop1: p1 < > p3
[  100.698147][ T6512] loop1: p3 size 54016 extends beyond EOD, truncated
[  100.905174][ T6524] netlink: 'syz.1.1143': attribute type 13 has an invalid length.
[  100.974302][ T6523] rdma_op ffff8881037ad180 conn xmit_rdma 0000000000000000
[  100.982413][ T6523] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1146'.
[  101.063260][ T6529] FAULT_INJECTION: forcing a failure.
[  101.063260][ T6529] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  101.076385][ T6529] CPU: 0 UID: 0 PID: 6529 Comm: syz.3.1148 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  101.076444][ T6529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  101.076461][ T6529] Call Trace:
[  101.076467][ T6529]  <TASK>
[  101.076474][ T6529]  __dump_stack+0x1d/0x30
[  101.076525][ T6529]  dump_stack_lvl+0xe8/0x140
[  101.076562][ T6529]  dump_stack+0x15/0x1b
[  101.076594][ T6529]  should_fail_ex+0x265/0x280
[  101.076677][ T6529]  should_fail+0xb/0x20
[  101.076711][ T6529]  should_fail_usercopy+0x1a/0x20
[  101.076752][ T6529]  _copy_from_user+0x1c/0xb0
[  101.076778][ T6529]  ___sys_recvmsg+0xaa/0x370
[  101.076826][ T6529]  ? 0xffffffff81000000
[  101.076838][ T6529]  ? __rcu_read_unlock+0x4f/0x70
[  101.076921][ T6529]  __x64_sys_recvmsg+0xd1/0x160
[  101.077011][ T6529]  x64_sys_call+0x2b46/0x3000
[  101.077050][ T6529]  do_syscall_64+0xd2/0x200
[  101.077089][ T6529]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  101.077176][ T6529]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  101.077215][ T6529]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  101.077264][ T6529] RIP: 0033:0x7f8b33beefc9
[  101.077280][ T6529] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  101.077303][ T6529] RSP: 002b:00007f8b32657038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  101.077326][ T6529] RAX: ffffffffffffffda RBX: 00007f8b33e45fa0 RCX: 00007f8b33beefc9
[  101.077339][ T6529] RDX: 0000000000000100 RSI: 0000200000000040 RDI: 0000000000000008
[  101.077351][ T6529] RBP: 00007f8b32657090 R08: 0000000000000000 R09: 0000000000000000
[  101.077362][ T6529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  101.077457][ T6529] R13: 00007f8b33e46038 R14: 00007f8b33e45fa0 R15: 00007ffc9f5d1878
[  101.077477][ T6529]  </TASK>
[  101.346168][ T6536] serio: Serial port ptm0
[  101.410731][ T6536] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1151'.
[  101.467912][ T6546] loop3: detected capacity change from 0 to 128
[  101.638784][ T6556] loop3: detected capacity change from 0 to 128
[  101.701705][ T6558] serio: Serial port ptm0
[  101.757854][ T6558] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1159'.
[  101.796629][ T6562] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1160'.
[  101.861328][ T6566] loop1: detected capacity change from 0 to 128
[  102.010568][ T6572] loop1: detected capacity change from 0 to 128
[  102.559338][ T6583] loop3: detected capacity change from 0 to 128
[  102.565902][ T6585] netlink: 'syz.0.1169': attribute type 13 has an invalid length.
[  102.682726][ T6572] bio_check_eod: 57519 callbacks suppressed
[  102.682794][ T6572] syz.1.1165: attempt to access beyond end of device
[  102.682794][ T6572] loop1: rw=0, sector=2078, nr_sectors = 1 limit=128
[  102.742775][ T6572] syz.1.1165: attempt to access beyond end of device
[  102.742775][ T6572] loop1: rw=0, sector=2078, nr_sectors = 1 limit=128
[  102.756046][ T6572] buffer_io_error: 56122 callbacks suppressed
[  102.756062][ T6572] Buffer I/O error on dev loop1, logical block 2078, async page read
[  102.786824][ T6593] loop2: detected capacity change from 0 to 512
[  102.793303][ T6572] syz.1.1165: attempt to access beyond end of device
[  102.793303][ T6572] loop1: rw=0, sector=2078, nr_sectors = 1 limit=128
[  102.806626][ T6572] Buffer I/O error on dev loop1, logical block 2078, async page read
[  102.815372][ T6572] syz.1.1165: attempt to access beyond end of device
[  102.815372][ T6572] loop1: rw=0, sector=2078, nr_sectors = 1 limit=128
[  102.828657][ T6572] Buffer I/O error on dev loop1, logical block 2078, async page read
[  102.849489][ T6593] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.1171: error while reading EA inode 32 err=-116
[  102.874598][ T6593] EXT4-fs (loop2): Remounting filesystem read-only
[  102.888992][ T6572] syz.1.1165: attempt to access beyond end of device
[  102.888992][ T6572] loop1: rw=0, sector=2078, nr_sectors = 1 limit=128
[  102.897568][ T6593] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30)
[  102.902360][ T6572] Buffer I/O error on dev loop1, logical block 2078, async page read
[  102.920709][ T6593] EXT4-fs (loop2): 1 orphan inode deleted
[  102.927152][ T6593] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  102.942610][ T6593] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  102.974007][ T6597] rdma_op ffff88811ae38d80 conn xmit_rdma 0000000000000000
[  102.983254][ T6597] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1172'.
[  103.052483][ T6603] bond0: (slave bond_slave_0): Releasing backup interface
[  103.079464][ T6603] bond0: (slave bond_slave_1): Releasing backup interface
[  103.102240][ T6604] netlink: 'syz.3.1174': attribute type 10 has an invalid length.
[  103.110138][ T6604] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1174'.
[  103.135923][ T6603] team0: Port device team_slave_0 removed
[  103.142118][ T6606] FAULT_INJECTION: forcing a failure.
[  103.142118][ T6606] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  103.151836][ T6603] batman_adv: batadv0: Removing interface: batadv_slave_0
[  103.155239][ T6606] CPU: 1 UID: 0 PID: 6606 Comm: syz.2.1175 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  103.155278][ T6606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  103.155315][ T6606] Call Trace:
[  103.155325][ T6606]  <TASK>
[  103.155335][ T6606]  __dump_stack+0x1d/0x30
[  103.155377][ T6606]  dump_stack_lvl+0xe8/0x140
[  103.155448][ T6606]  dump_stack+0x15/0x1b
[  103.155545][ T6606]  should_fail_ex+0x265/0x280
[  103.155657][ T6606]  should_fail+0xb/0x20
[  103.155703][ T6606]  should_fail_usercopy+0x1a/0x20
[  103.155879][ T6606]  _copy_from_user+0x1c/0xb0
[  103.155920][ T6606]  ___sys_recvmsg+0xaa/0x370
[  103.155960][ T6606]  ? 0xffffffff81000000
[  103.155978][ T6606]  ? __rcu_read_unlock+0x4f/0x70
[  103.156102][ T6606]  __x64_sys_recvmsg+0xd1/0x160
[  103.156211][ T6606]  x64_sys_call+0x2b46/0x3000
[  103.156250][ T6606]  do_syscall_64+0xd2/0x200
[  103.156289][ T6606]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  103.156365][ T6606]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  103.156401][ T6606]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  103.156431][ T6606] RIP: 0033:0x7f520b23efc9
[  103.156513][ T6606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  103.156536][ T6606] RSP: 002b:00007f5209c9f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  103.156616][ T6606] RAX: ffffffffffffffda RBX: 00007f520b495fa0 RCX: 00007f520b23efc9
[  103.156632][ T6606] RDX: 0000000000002000 RSI: 00002000000009c0 RDI: 0000000000000003
[  103.156649][ T6606] RBP: 00007f5209c9f090 R08: 0000000000000000 R09: 0000000000000000
[  103.156666][ T6606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  103.156683][ T6606] R13: 00007f520b496038 R14: 00007f520b495fa0 R15: 00007fff0ba3c2d8
[  103.156715][ T6606]  </TASK>
[  103.376556][ T6611] serio: Serial port ptm0
[  103.394429][ T6603] batman_adv: batadv0: Removing interface: batadv_slave_1
[  103.406736][ T6603] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  103.426342][ T6604] team0: entered promiscuous mode
[  103.445000][ T6611] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1176'.
[  103.448160][ T6603] netlink: 'syz.3.1174': attribute type 7 has an invalid length.
[  103.464604][ T6604] 8021q: adding VLAN 0 to HW filter on device team0
[  103.567343][ T6620] loop2: detected capacity change from 0 to 128
[  103.584593][ T6620] syz.2.1181: attempt to access beyond end of device
[  103.584593][ T6620] loop2: rw=0, sector=2078, nr_sectors = 1 limit=128
[  103.597981][ T6620] Buffer I/O error on dev loop2, logical block 2078, async page read
[  103.606837][ T6620] syz.2.1181: attempt to access beyond end of device
[  103.606837][ T6620] loop2: rw=0, sector=2078, nr_sectors = 1 limit=128
[  103.620228][ T6620] Buffer I/O error on dev loop2, logical block 2078, async page read
[  103.628910][ T6620] syz.2.1181: attempt to access beyond end of device
[  103.628910][ T6620] loop2: rw=0, sector=2078, nr_sectors = 1 limit=128
[  103.642214][ T6620] Buffer I/O error on dev loop2, logical block 2078, async page read
[  103.657459][ T6620] syz.2.1181: attempt to access beyond end of device
[  103.657459][ T6620] loop2: rw=0, sector=2078, nr_sectors = 1 limit=128
[  103.670739][ T6620] Buffer I/O error on dev loop2, logical block 2078, async page read
[  103.680358][ T6624] syz.2.1181: attempt to access beyond end of device
[  103.680358][ T6624] loop2: rw=0, sector=2078, nr_sectors = 1 limit=128
[  103.693936][ T6624] Buffer I/O error on dev loop2, logical block 2078, async page read
[  103.702196][ T6620] Buffer I/O error on dev loop2, logical block 2078, async page read
[  104.171320][ T6630] netlink: 'syz.3.1183': attribute type 13 has an invalid length.
[  104.179307][ T6630] netlink: 'syz.3.1183': attribute type 27 has an invalid length.
[  104.325493][   T29] kauditd_printk_skb: 2004 callbacks suppressed
[  104.325510][   T29] audit: type=1326 audit(1761029980.252:27167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6633 comm="syz.0.1185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f163d62efc9 code=0x7ffc0000
[  104.422840][   T29] audit: type=1326 audit(1761029980.282:27168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6633 comm="syz.0.1185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f163d62efc9 code=0x7ffc0000
[  104.446411][   T29] audit: type=1326 audit(1761029980.282:27169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6633 comm="syz.0.1185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f163d62efc9 code=0x7ffc0000
[  104.470085][   T29] audit: type=1326 audit(1761029980.282:27170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6633 comm="syz.0.1185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f163d62efc9 code=0x7ffc0000
[  104.493610][   T29] audit: type=1326 audit(1761029980.292:27171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6633 comm="syz.0.1185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f163d62efc9 code=0x7ffc0000
[  104.517254][   T29] audit: type=1326 audit(1761029980.292:27172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6633 comm="syz.0.1185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f163d62efc9 code=0x7ffc0000
[  104.540867][   T29] audit: type=1326 audit(1761029980.332:27173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6633 comm="syz.0.1185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f163d62efc9 code=0x7ffc0000
[  104.564286][   T29] audit: type=1326 audit(1761029980.332:27174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6633 comm="syz.0.1185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f163d62efc9 code=0x7ffc0000
[  104.591141][ T6641] loop0: detected capacity change from 0 to 128
[  104.714897][ T6646] serio: Serial port ptm0
[  104.768950][ T6646] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1190'.
[  104.909474][   T29] audit: type=1400 audit(1761029980.632:27175): avc:  denied  { ioctl } for  pid=6638 comm="syz.2.1187" path="socket:[14785]" dev="sockfs" ino=14785 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  104.934808][   T29] audit: type=1400 audit(1761029980.682:27176): avc:  denied  { read } for  pid=6638 comm="syz.2.1187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  105.022016][ T6656] loop3: detected capacity change from 0 to 128
[  105.657007][ T6688] loop0: detected capacity change from 0 to 128
[  105.665866][ T6690] loop1: detected capacity change from 0 to 2048
[  105.693295][ T6688] FAT-fs (loop0): Directory bread(block 162) failed
[  105.709946][ T6688] FAT-fs (loop0): Directory bread(block 163) failed
[  105.727513][ T6688] FAT-fs (loop0): Directory bread(block 164) failed
[  105.737732][ T3507]  loop1: p1 < > p3
[  105.747757][ T3507] loop1: p3 size 54016 extends beyond EOD, truncated
[  105.756688][ T6688] FAT-fs (loop0): Directory bread(block 165) failed
[  105.772215][ T6688] FAT-fs (loop0): Directory bread(block 166) failed
[  105.780375][ T6690]  loop1: p1 < > p3
[  105.785147][ T6690] loop1: p3 size 54016 extends beyond EOD, truncated
[  105.789154][ T6688] FAT-fs (loop0): Directory bread(block 167) failed
[  105.809807][ T6688] FAT-fs (loop0): Directory bread(block 168) failed
[  105.825610][ T6688] FAT-fs (loop0): Directory bread(block 169) failed
[  105.846313][ T6688] FAT-fs (loop0): Directory bread(block 162) failed
[  105.871164][ T6688] FAT-fs (loop0): Directory bread(block 163) failed
[  105.908687][ T3507] udevd[3507]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  105.910979][ T5109] udevd[5109]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[  105.963079][ T3507] udevd[3507]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[  106.138102][ T6707] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1209'.
[  106.481294][ T6718] loop3: detected capacity change from 0 to 128
[  106.491252][ T6721] loop0: detected capacity change from 0 to 128
[  106.574219][ T6723] loop0: detected capacity change from 0 to 128
[  106.580704][ T6725] loop1: detected capacity change from 0 to 128
[  107.051056][ T6739] netlink: 'syz.2.1218': attribute type 13 has an invalid length.
[  107.484474][ T6741] loop0: detected capacity change from 0 to 128
[  107.500667][ T6743] loop1: detected capacity change from 0 to 128
[  107.705973][ T6743] bio_check_eod: 84005 callbacks suppressed
[  107.705995][ T6743] syz.1.1220: attempt to access beyond end of device
[  107.705995][ T6743] loop1: rw=0, sector=2078, nr_sectors = 1 limit=128
[  107.726143][ T6741] syz.0.1219: attempt to access beyond end of device
[  107.726143][ T6741] loop0: rw=0, sector=2078, nr_sectors = 1 limit=128
[  107.744158][ T6743] syz.1.1220: attempt to access beyond end of device
[  107.744158][ T6743] loop1: rw=0, sector=2078, nr_sectors = 1 limit=128
[  107.760093][ T6741] syz.0.1219: attempt to access beyond end of device
[  107.760093][ T6741] loop0: rw=0, sector=2078, nr_sectors = 1 limit=128
[  107.773416][ T6741] buffer_io_error: 83967 callbacks suppressed
[  107.773429][ T6741] Buffer I/O error on dev loop0, logical block 2078, async page read
[  107.787713][ T6743] syz.1.1220: attempt to access beyond end of device
[  107.787713][ T6743] loop1: rw=0, sector=2078, nr_sectors = 1 limit=128
[  107.801004][ T6743] Buffer I/O error on dev loop1, logical block 2078, async page read
[  107.809311][ T6741] syz.0.1219: attempt to access beyond end of device
[  107.809311][ T6741] loop0: rw=0, sector=2078, nr_sectors = 1 limit=128
[  107.822637][ T6741] Buffer I/O error on dev loop0, logical block 2078, async page read
[  107.831063][ T6743] syz.1.1220: attempt to access beyond end of device
[  107.831063][ T6743] loop1: rw=0, sector=2078, nr_sectors = 1 limit=128
[  107.844425][ T6743] Buffer I/O error on dev loop1, logical block 2078, async page read
[  107.859169][ T6741] syz.0.1219: attempt to access beyond end of device
[  107.859169][ T6741] loop0: rw=0, sector=2078, nr_sectors = 1 limit=128
[  107.872441][ T6741] Buffer I/O error on dev loop0, logical block 2078, async page read
[  107.881009][ T6743] syz.1.1220: attempt to access beyond end of device
[  107.881009][ T6743] loop1: rw=0, sector=2078, nr_sectors = 1 limit=128
[  107.894384][ T6743] Buffer I/O error on dev loop1, logical block 2078, async page read
[  107.927983][ T6754] loop2: detected capacity change from 0 to 128
[  107.935059][ T6741] syz.0.1219: attempt to access beyond end of device
[  107.935059][ T6741] loop0: rw=0, sector=2078, nr_sectors = 1 limit=128
[  107.948403][ T6741] Buffer I/O error on dev loop0, logical block 2078, async page read
[  107.956791][ T6741] Buffer I/O error on dev loop0, logical block 2078, async page read
[  107.962833][ T6743] Buffer I/O error on dev loop1, logical block 2078, async page read
[  107.965119][ T6741] Buffer I/O error on dev loop0, logical block 2078, async page read
[  108.236382][ T6759] loop3: detected capacity change from 0 to 128
[  108.267898][ T6759] FAT-fs (loop3): Directory bread(block 162) failed
[  108.286392][ T6759] FAT-fs (loop3): Directory bread(block 163) failed
[  108.302807][ T6759] FAT-fs (loop3): Directory bread(block 164) failed
[  108.319591][ T6759] FAT-fs (loop3): Directory bread(block 165) failed
[  108.332848][ T6759] FAT-fs (loop3): Directory bread(block 166) failed
[  108.339475][ T6759] FAT-fs (loop3): Directory bread(block 167) failed
[  108.348377][ T6761] loop2: detected capacity change from 0 to 8192
[  108.372700][ T6759] FAT-fs (loop3): Directory bread(block 168) failed
[  108.373994][ T6761] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  108.389565][ T6759] FAT-fs (loop3): Directory bread(block 169) failed
[  108.413348][ T6759] FAT-fs (loop3): Directory bread(block 162) failed
[  108.440212][ T6759] FAT-fs (loop3): Directory bread(block 163) failed
[  108.473638][ T6765] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1228'.
[  108.495665][ T6763] loop1: detected capacity change from 0 to 2048
[  108.551259][ T5109]  loop1: p1 < > p3
[  108.556080][ T6767] loop2: detected capacity change from 0 to 128
[  108.570497][ T5109] loop1: p3 size 54016 extends beyond EOD, truncated
[  108.593121][ T6763]  loop1: p1 < > p3
[  108.610699][ T6763] loop1: p3 size 54016 extends beyond EOD, truncated
[  108.851890][ T6779] loop1: detected capacity change from 0 to 128
[  109.160976][ T6787] loop1: detected capacity change from 0 to 2048
[  109.204491][ T6785] rdma_op ffff88811b7f8980 conn xmit_rdma 0000000000000000
[  109.212188][ T6785] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1235'.
[  109.235786][ T3507]  loop1: p1 < > p3
[  109.245016][ T3507] loop1: p3 size 54016 extends beyond EOD, truncated
[  109.265345][ T6787]  loop1: p1 < > p3
[  109.270071][ T6787] loop1: p3 size 54016 extends beyond EOD, truncated
[  109.281013][ T6790] loop3: detected capacity change from 0 to 128
[  109.335003][   T29] kauditd_printk_skb: 1314 callbacks suppressed
[  109.335021][   T29] audit: type=1326 audit(1761029985.262:28491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6771 comm="syz.0.1231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f163d661885 code=0x7ffc0000
[  109.393970][   T29] audit: type=1326 audit(1761029985.292:28492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6771 comm="syz.0.1231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f163d661885 code=0x7ffc0000
[  109.417627][   T29] audit: type=1326 audit(1761029985.292:28493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6771 comm="syz.0.1231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f163d62efc9 code=0x7ffc0000
[  109.441298][   T29] audit: type=1326 audit(1761029985.302:28494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6771 comm="syz.0.1231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f163d661885 code=0x7ffc0000
[  109.464806][   T29] audit: type=1326 audit(1761029985.302:28495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6771 comm="syz.0.1231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f163d661885 code=0x7ffc0000
[  109.488391][   T29] audit: type=1326 audit(1761029985.302:28496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6771 comm="syz.0.1231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f163d62efc9 code=0x7ffc0000
[  109.511963][   T29] audit: type=1326 audit(1761029985.302:28497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6771 comm="syz.0.1231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f163d661885 code=0x7ffc0000
[  109.535538][   T29] audit: type=1326 audit(1761029985.312:28498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6771 comm="syz.0.1231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f163d661885 code=0x7ffc0000
[  109.559078][   T29] audit: type=1326 audit(1761029985.312:28499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6771 comm="syz.0.1231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f163d661885 code=0x7ffc0000
[  109.582718][   T29] audit: type=1326 audit(1761029985.312:28500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6771 comm="syz.0.1231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f163d62efc9 code=0x7ffc0000
[  109.712349][ T6797] loop1: detected capacity change from 0 to 512
[  109.919685][ T3507] udevd[3507]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  109.935492][ T5109] udevd[5109]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[  110.082613][ T6806] loop2: detected capacity change from 0 to 8192
[  110.089187][ T6804] netlink: 'syz.0.1241': attribute type 13 has an invalid length.
[  110.097048][ T6804] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1241'.
[  110.103040][ T6797] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.1239: error while reading EA inode 32 err=-116
[  110.144058][ T6806] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  110.162729][ T6797] EXT4-fs (loop1): Remounting filesystem read-only
[  110.169424][ T6797] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -30)
[  110.192826][ T6797] EXT4-fs (loop1): 1 orphan inode deleted
[  110.199047][ T6797] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  110.224299][ T6797] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  110.235779][ T6809] loop3: detected capacity change from 0 to 8192
[  110.311445][ T6811] loop2: detected capacity change from 0 to 128
[  110.391191][ T6816] loop1: detected capacity change from 0 to 2048
[  110.453549][ T6816]  loop1: p1 < > p3
[  110.458077][ T6816] loop1: p3 size 54016 extends beyond EOD, truncated
[  110.746923][ T6824] loop1: detected capacity change from 0 to 2048
[  110.813285][ T6824]  loop1: p1 < > p3
[  110.817776][ T6824] loop1: p3 size 54016 extends beyond EOD, truncated
[  111.073987][ T6844] loop1: detected capacity change from 0 to 128
[  111.273469][ T6839] loop0: detected capacity change from 0 to 512
[  111.288968][ T6858] netlink: 'syz.3.1258': attribute type 13 has an invalid length.
[  111.296988][ T6858] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1258'.
[  111.310779][ T6839] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.1254: error while reading EA inode 32 err=-116
[  111.323511][ T6839] EXT4-fs (loop0): Remounting filesystem read-only
[  111.330337][ T6839] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -30)
[  111.342992][ T6839] EXT4-fs (loop0): 1 orphan inode deleted
[  111.349339][ T6839] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  111.362751][ T6839] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  111.443502][ T6863] loop2: detected capacity change from 0 to 2048
[  111.507011][ T6863]  loop2: p1 < > p3
[  111.513004][ T6863] loop2: p3 size 54016 extends beyond EOD, truncated
[  111.674575][ T3507] udevd[3507]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[  111.760680][ T6882] loop2: detected capacity change from 0 to 128
[  111.820943][ T6887] loop2: detected capacity change from 0 to 128
[  111.956632][   T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  111.979829][   T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  111.990280][   T37] bond0 (unregistering): Released all slaves
[  112.041308][ T6871] chnl_net:caif_netlink_parms(): no params data found
[  112.060167][   T37] hsr_slave_0: left promiscuous mode
[  112.070247][   T37] hsr_slave_1: left promiscuous mode
[  112.076458][   T37] batman_adv: batadv0: Removing interface: batadv_slave_0
[  112.085179][   T37] batman_adv: batadv0: Removing interface: batadv_slave_1
[  112.095256][ T6900] loop1: detected capacity change from 0 to 8192
[  112.116998][ T6900] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  112.175028][   T37] team0 (unregistering): Port device team_slave_1 removed
[  112.196108][   T37] team0 (unregistering): Port device team_slave_0 removed
[  112.271136][ T6916] bond0: (slave bond_slave_0): Releasing backup interface
[  112.279565][ T6916] bond0: (slave bond_slave_1): Releasing backup interface
[  112.301118][ T6916] team0: Port device team_slave_0 removed
[  112.307593][ T6916] team0: Port device team_slave_1 removed
[  112.314250][ T6916] batman_adv: batadv0: Removing interface: batadv_slave_0
[  112.321987][ T6916] batman_adv: batadv0: Removing interface: batadv_slave_1
[  112.330221][ T6916] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  112.382872][ T6871] bridge0: port 1(bridge_slave_0) entered blocking state
[  112.389982][ T6871] bridge0: port 1(bridge_slave_0) entered disabled state
[  112.420908][ T6871] bridge_slave_0: entered allmulticast mode
[  112.429954][ T6871] bridge_slave_0: entered promiscuous mode
[  112.443628][ T6871] bridge0: port 2(bridge_slave_1) entered blocking state
[  112.450738][ T6871] bridge0: port 2(bridge_slave_1) entered disabled state
[  112.458410][ T6871] bridge_slave_1: entered allmulticast mode
[  112.466354][ T6871] bridge_slave_1: entered promiscuous mode
[  112.499742][ T6926] loop0: detected capacity change from 0 to 128
[  112.535556][ T6871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  112.574351][ T6871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  112.606604][ T6871] team0: Port device team_slave_0 added
[  112.620768][ T6871] team0: Port device team_slave_1 added
[  112.644817][ T6937] loop0: detected capacity change from 0 to 128
[  112.684111][ T6871] batman_adv: batadv0: Adding interface: batadv_slave_0
[  112.691111][ T6871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  112.717160][ T6871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  112.717186][ T6937] bio_check_eod: 83749 callbacks suppressed
[  112.717203][ T6937] syz.0.1284: attempt to access beyond end of device
[  112.717203][ T6937] loop0: rw=0, sector=2078, nr_sectors = 1 limit=128
[  112.729238][ T6871] batman_adv: batadv0: Adding interface: batadv_slave_1
[  112.754329][ T6871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  112.780544][ T6871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  112.796080][ T6937] syz.0.1284: attempt to access beyond end of device
[  112.796080][ T6937] loop0: rw=0, sector=2078, nr_sectors = 1 limit=128
[  112.809381][ T6937] buffer_io_error: 82988 callbacks suppressed
[  112.809398][ T6937] Buffer I/O error on dev loop0, logical block 2078, async page read
[  112.834394][ T6937] syz.0.1284: attempt to access beyond end of device
[  112.834394][ T6937] loop0: rw=0, sector=2078, nr_sectors = 1 limit=128
[  112.847726][ T6937] Buffer I/O error on dev loop0, logical block 2078, async page read
[  112.855889][ T6949] syz.0.1284: attempt to access beyond end of device
[  112.855889][ T6949] loop0: rw=0, sector=2078, nr_sectors = 1 limit=128
[  112.869243][ T6949] Buffer I/O error on dev loop0, logical block 2078, async page read
[  112.878660][ T6949] syz.0.1284: attempt to access beyond end of device
[  112.878660][ T6949] loop0: rw=0, sector=2078, nr_sectors = 1 limit=128
[  112.892142][ T6949] Buffer I/O error on dev loop0, logical block 2078, async page read
[  112.902776][ T6937] syz.0.1284: attempt to access beyond end of device
[  112.902776][ T6937] loop0: rw=0, sector=2078, nr_sectors = 1 limit=128
[  112.902806][ T6937] Buffer I/O error on dev loop0, logical block 2078, async page read
[  112.902913][ T6937] syz.0.1284: attempt to access beyond end of device
[  112.902913][ T6937] loop0: rw=0, sector=2078, nr_sectors = 1 limit=128
[  112.902940][ T6937] Buffer I/O error on dev loop0, logical block 2078, async page read
[  112.902976][ T6937] syz.0.1284: attempt to access beyond end of device
[  112.902976][ T6937] loop0: rw=0, sector=2078, nr_sectors = 1 limit=128
[  112.903070][ T6937] Buffer I/O error on dev loop0, logical block 2078, async page read
[  112.903107][ T6937] syz.0.1284: attempt to access beyond end of device
[  112.903107][ T6937] loop0: rw=0, sector=2078, nr_sectors = 1 limit=128
[  112.903133][ T6937] Buffer I/O error on dev loop0, logical block 2078, async page read
[  112.903263][ T6937] syz.0.1284: attempt to access beyond end of device
[  112.903263][ T6937] loop0: rw=0, sector=2078, nr_sectors = 1 limit=128
[  112.903334][ T6937] Buffer I/O error on dev loop0, logical block 2078, async page read
[  112.903415][ T6937] Buffer I/O error on dev loop0, logical block 2078, async page read
[  112.970695][ T6962] loop1: detected capacity change from 0 to 128
[  113.085521][ T6871] hsr_slave_0: entered promiscuous mode
[  113.086233][ T6871] hsr_slave_1: entered promiscuous mode
[  113.086629][ T6871] debugfs: 'hsr0' already exists in 'hsr'
[  113.086645][ T6871] Cannot create hsr debugfs directory
[  113.094344][ T6955] rdma_op ffff88811b5bb180 conn xmit_rdma 0000000000000000
[  113.099945][ T6967] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1291'.
[  113.103097][ T6955] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1285'.
[  113.238104][ T6976] loop2: detected capacity change from 0 to 128
[  113.364610][ T6979] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1295'.
[  113.426106][ T6871] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  113.455270][ T6871] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  113.477074][ T6871] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  113.509508][ T6871] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  113.580794][ T7015] loop3: detected capacity change from 0 to 128
[  113.606983][ T6871] 8021q: adding VLAN 0 to HW filter on device bond0
[  113.643377][ T6871] 8021q: adding VLAN 0 to HW filter on device team0
[  113.682917][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[  113.690160][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[  113.732542][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[  113.739671][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[  113.781839][ T7030] loop0: detected capacity change from 0 to 128
[  113.807324][ T7030] FAT-fs (loop0): Directory bread(block 162) failed
[  113.842902][ T7030] FAT-fs (loop0): Directory bread(block 163) failed
[  113.849543][ T7030] FAT-fs (loop0): Directory bread(block 164) failed
[  113.869055][ T7030] FAT-fs (loop0): Directory bread(block 165) failed
[  113.882865][ T7030] FAT-fs (loop0): Directory bread(block 166) failed
[  113.889592][ T7030] FAT-fs (loop0): Directory bread(block 167) failed
[  113.912759][ T7030] FAT-fs (loop0): Directory bread(block 168) failed
[  113.919492][ T7030] FAT-fs (loop0): Directory bread(block 169) failed
[  113.943424][ T7030] FAT-fs (loop0): Directory bread(block 162) failed
[  113.952839][ T7030] FAT-fs (loop0): Directory bread(block 163) failed
[  113.962399][ T6871] 8021q: adding VLAN 0 to HW filter on device batadv0
[  114.018257][ T7051] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1309'.
[  114.072167][ T7058] FAULT_INJECTION: forcing a failure.
[  114.072167][ T7058] name failslab, interval 1, probability 0, space 0, times 0
[  114.084883][ T7058] CPU: 0 UID: 0 PID: 7058 Comm: syz.3.1310 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  114.084916][ T7058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  114.085003][ T7058] Call Trace:
[  114.085010][ T7058]  <TASK>
[  114.085017][ T7058]  __dump_stack+0x1d/0x30
[  114.085050][ T7058]  dump_stack_lvl+0xe8/0x140
[  114.085085][ T7058]  dump_stack+0x15/0x1b
[  114.085170][ T7058]  should_fail_ex+0x265/0x280
[  114.085209][ T7058]  should_failslab+0x8c/0xb0
[  114.085262][ T7058]  kmem_cache_alloc_noprof+0x50/0x480
[  114.085289][ T7058]  ? audit_log_start+0x342/0x720
[  114.085327][ T7058]  audit_log_start+0x342/0x720
[  114.085363][ T7058]  ? kstrtouint+0x76/0xc0
[  114.085440][ T7058]  audit_seccomp+0x48/0x100
[  114.085469][ T7058]  ? __seccomp_filter+0x82d/0x1250
[  114.085494][ T7058]  __seccomp_filter+0x83e/0x1250
[  114.085521][ T7058]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  114.085598][ T7058]  ? vfs_write+0x7e8/0x960
[  114.085626][ T7058]  __secure_computing+0x82/0x150
[  114.085653][ T7058]  syscall_trace_enter+0xcf/0x1e0
[  114.085680][ T7058]  do_syscall_64+0xac/0x200
[  114.085793][ T7058]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  114.085819][ T7058]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  114.085852][ T7058]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  114.085879][ T7058] RIP: 0033:0x7f8b33beefc9
[  114.085972][ T7058] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  114.085993][ T7058] RSP: 002b:00007f8b32657038 EFLAGS: 00000246 ORIG_RAX: 000000000000011a
[  114.086018][ T7058] RAX: ffffffffffffffda RBX: 00007f8b33e45fa0 RCX: 00007f8b33beefc9
[  114.086033][ T7058] RDX: 0000000000000008 RSI: 0000200000000100 RDI: ffffffffffffffff
[  114.086057][ T7058] RBP: 00007f8b32657090 R08: 0000000000000000 R09: 0000000000000000
[  114.086072][ T7058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  114.086087][ T7058] R13: 00007f8b33e46038 R14: 00007f8b33e45fa0 R15: 00007ffc9f5d1878
[  114.086111][ T7058]  </TASK>
[  114.374694][ T7077] loop3: detected capacity change from 0 to 128
[  114.376071][   T29] kauditd_printk_skb: 919 callbacks suppressed
[  114.376089][   T29] audit: type=1326 audit(1761029990.302:29418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7070 comm="syz.2.1314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f520b23efc9 code=0x7ffc0000
[  114.434299][ T7081] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1316'.
[  114.439938][   T29] audit: type=1326 audit(1761029990.332:29419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7079 comm="syz.2.1314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f520b271885 code=0x7ffc0000
[  114.466902][   T29] audit: type=1326 audit(1761029990.342:29420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7070 comm="syz.2.1314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f520b23efc9 code=0x7ffc0000
[  114.490420][   T29] audit: type=1326 audit(1761029990.342:29421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7070 comm="syz.2.1314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f520b23efc9 code=0x7ffc0000
[  114.514059][   T29] audit: type=1326 audit(1761029990.342:29422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7070 comm="syz.2.1314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f520b23efc9 code=0x7ffc0000
[  114.533763][ T6871] veth0_vlan: entered promiscuous mode
[  114.537600][   T29] audit: type=1326 audit(1761029990.342:29423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7070 comm="syz.2.1314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f520b23efc9 code=0x7ffc0000
[  114.562593][ T6871] veth1_vlan: entered promiscuous mode
[  114.566615][   T29] audit: type=1326 audit(1761029990.342:29424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7070 comm="syz.2.1314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f520b1db099 code=0x7ffc0000
[  114.595592][   T29] audit: type=1326 audit(1761029990.342:29425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7070 comm="syz.2.1314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f520b23efc9 code=0x7ffc0000
[  114.604681][ T6871] veth0_macvtap: entered promiscuous mode
[  114.619184][   T29] audit: type=1326 audit(1761029990.342:29426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7070 comm="syz.2.1314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f520b23efc9 code=0x7ffc0000
[  114.648393][   T29] audit: type=1326 audit(1761029990.342:29427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7070 comm="syz.2.1314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f520b23efc9 code=0x7ffc0000
[  114.681393][ T6871] veth1_macvtap: entered promiscuous mode
[  114.697408][ T6871] batman_adv: batadv0: Interface activated: batadv_slave_0
[  114.711876][ T6871] batman_adv: batadv0: Interface activated: batadv_slave_1
[  114.727624][   T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  114.729829][ T7071] loop2: detected capacity change from 0 to 512
[  114.748793][   T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  114.763586][ T7089] FAULT_INJECTION: forcing a failure.
[  114.763586][ T7089] name failslab, interval 1, probability 0, space 0, times 0
[  114.776340][ T7089] CPU: 1 UID: 0 PID: 7089 Comm: syz.0.1317 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  114.776369][ T7089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  114.776381][ T7089] Call Trace:
[  114.776386][ T7089]  <TASK>
[  114.776393][ T7089]  __dump_stack+0x1d/0x30
[  114.776428][ T7089]  dump_stack_lvl+0xe8/0x140
[  114.776491][ T7089]  dump_stack+0x15/0x1b
[  114.776520][ T7089]  should_fail_ex+0x265/0x280
[  114.776614][ T7089]  ? __genradix_ptr_alloc+0x169/0x340
[  114.776636][ T7089]  should_failslab+0x8c/0xb0
[  114.776666][ T7089]  __kmalloc_cache_noprof+0x4c/0x4a0
[  114.776697][ T7089]  __genradix_ptr_alloc+0x169/0x340
[  114.776725][ T7089]  proc_map_files_readdir+0x36b/0x690
[  114.776763][ T7089]  iterate_dir+0x114/0x330
[  114.776817][ T7089]  ? mutex_lock+0xd/0x30
[  114.776839][ T7089]  __se_sys_getdents64+0x88/0x1b0
[  114.776876][ T7089]  ? __pfx_filldir64+0x10/0x10
[  114.776912][ T7089]  __x64_sys_getdents64+0x43/0x50
[  114.777034][ T7089]  x64_sys_call+0x2dae/0x3000
[  114.777070][ T7089]  do_syscall_64+0xd2/0x200
[  114.777096][ T7089]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  114.777124][ T7089]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  114.777167][ T7089]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  114.777235][ T7089] RIP: 0033:0x7f163d62efc9
[  114.777253][ T7089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  114.777275][ T7089] RSP: 002b:00007f163c08f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
[  114.777370][ T7089] RAX: ffffffffffffffda RBX: 00007f163d885fa0 RCX: 00007f163d62efc9
[  114.777381][ T7089] RDX: 00000000000000e0 RSI: 0000200000000fc0 RDI: 0000000000000006
[  114.777393][ T7089] RBP: 00007f163c08f090 R08: 0000000000000000 R09: 0000000000000000
[  114.777404][ T7089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  114.777418][ T7089] R13: 00007f163d886038 R14: 00007f163d885fa0 R15: 00007ffcc010aa68
[  114.777441][ T7089]  </TASK>
[  114.779218][   T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  114.780230][ T7071] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.1314: error while reading EA inode 32 err=-116
[  114.821318][   T55] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  114.861167][ T7071] EXT4-fs (loop2): Remounting filesystem read-only
[  115.009842][ T7100] loop0: detected capacity change from 0 to 8192
[  115.012900][ T7071] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30)
[  115.026731][ T7101] loop3: detected capacity change from 0 to 128
[  115.029302][ T7071] EXT4-fs (loop2): 1 orphan inode deleted
[  115.041454][ T7071] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  115.054583][ T7071] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.067564][ T7100] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  115.104068][ T7103] capability: warning: `syz.5.1266' uses deprecated v2 capabilities in a way that may be insecure
[  115.141891][ T7107] serio: Serial port ptm0
[  115.151558][ T7108] FAULT_INJECTION: forcing a failure.
[  115.151558][ T7108] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  115.164727][ T7108] CPU: 0 UID: 0 PID: 7108 Comm: syz.2.1322 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  115.164752][ T7108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  115.164764][ T7108] Call Trace:
[  115.164770][ T7108]  <TASK>
[  115.164778][ T7108]  __dump_stack+0x1d/0x30
[  115.164811][ T7108]  dump_stack_lvl+0xe8/0x140
[  115.164864][ T7108]  dump_stack+0x15/0x1b
[  115.164895][ T7108]  should_fail_ex+0x265/0x280
[  115.165013][ T7108]  should_fail+0xb/0x20
[  115.165039][ T7108]  should_fail_usercopy+0x1a/0x20
[  115.165104][ T7108]  _copy_to_user+0x20/0xa0
[  115.165132][ T7108]  simple_read_from_buffer+0xb5/0x130
[  115.165220][ T7108]  proc_fail_nth_read+0x10e/0x150
[  115.165248][ T7108]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  115.165279][ T7108]  vfs_read+0x1a8/0x770
[  115.165316][ T7108]  ? __rcu_read_unlock+0x4f/0x70
[  115.165406][ T7108]  ? __fget_files+0x184/0x1c0
[  115.165427][ T7108]  ksys_read+0xda/0x1a0
[  115.165450][ T7108]  __x64_sys_read+0x40/0x50
[  115.165533][ T7108]  x64_sys_call+0x27c0/0x3000
[  115.165572][ T7108]  do_syscall_64+0xd2/0x200
[  115.165609][ T7108]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  115.165634][ T7108]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  115.165665][ T7108]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  115.165750][ T7108] RIP: 0033:0x7f520b23d9dc
[  115.165770][ T7108] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  115.165793][ T7108] RSP: 002b:00007f5209c9f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  115.165847][ T7108] RAX: ffffffffffffffda RBX: 00007f520b495fa0 RCX: 00007f520b23d9dc
[  115.165862][ T7108] RDX: 000000000000000f RSI: 00007f5209c9f0a0 RDI: 0000000000000006
[  115.165883][ T7108] RBP: 00007f5209c9f090 R08: 0000000000000000 R09: 0000000000000000
[  115.165899][ T7108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  115.165915][ T7108] R13: 00007f520b496038 R14: 00007f520b495fa0 R15: 00007fff0ba3c2d8
[  115.165951][ T7108]  </TASK>
[  115.467556][ T7107] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1323'.
[  115.477441][ T7107] bridge_slave_1: left allmulticast mode
[  115.483284][ T7107] bridge_slave_1: left promiscuous mode
[  115.483623][ T7117] netlink: 'syz.2.1326': attribute type 13 has an invalid length.
[  115.489100][ T7107] bridge0: port 2(bridge_slave_1) entered disabled state
[  115.504241][ T7116] loop0: detected capacity change from 0 to 128
[  115.513444][ T7107] bridge_slave_0: left allmulticast mode
[  115.519156][ T7107] bridge_slave_0: left promiscuous mode
[  115.524885][ T7107] bridge0: port 1(bridge_slave_0) entered disabled state
[  116.014671][ T7129] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1331'.
[  116.135550][ T7133] loop3: detected capacity change from 0 to 128
[  116.337764][ T7141] FAULT_INJECTION: forcing a failure.
[  116.337764][ T7141] name failslab, interval 1, probability 0, space 0, times 0
[  116.350460][ T7141] CPU: 1 UID: 0 PID: 7141 Comm: syz.1.1336 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  116.350539][ T7141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  116.350554][ T7141] Call Trace:
[  116.350563][ T7141]  <TASK>
[  116.350572][ T7141]  __dump_stack+0x1d/0x30
[  116.350606][ T7141]  dump_stack_lvl+0xe8/0x140
[  116.350639][ T7141]  dump_stack+0x15/0x1b
[  116.350701][ T7141]  should_fail_ex+0x265/0x280
[  116.350812][ T7141]  should_failslab+0x8c/0xb0
[  116.350833][ T7141]  kmem_cache_alloc_noprof+0x50/0x480
[  116.350853][ T7141]  ? audit_log_start+0x342/0x720
[  116.350905][ T7141]  audit_log_start+0x342/0x720
[  116.350967][ T7141]  ? kstrtouint+0x76/0xc0
[  116.350997][ T7141]  audit_seccomp+0x48/0x100
[  116.351028][ T7141]  ? __seccomp_filter+0x82d/0x1250
[  116.351126][ T7141]  __seccomp_filter+0x83e/0x1250
[  116.351151][ T7141]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  116.351178][ T7141]  ? vfs_write+0x7e8/0x960
[  116.351201][ T7141]  __secure_computing+0x82/0x150
[  116.351291][ T7141]  syscall_trace_enter+0xcf/0x1e0
[  116.351312][ T7141]  do_syscall_64+0xac/0x200
[  116.351345][ T7141]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  116.351369][ T7141]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  116.351457][ T7141]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  116.351484][ T7141] RIP: 0033:0x7fe0b148efc9
[  116.351502][ T7141] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  116.351522][ T7141] RSP: 002b:00007fe0afef7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000030
[  116.351542][ T7141] RAX: ffffffffffffffda RBX: 00007fe0b16e5fa0 RCX: 00007fe0b148efc9
[  116.351559][ T7141] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffffffffffffffff
[  116.351574][ T7141] RBP: 00007fe0afef7090 R08: 0000000000000000 R09: 0000000000000000
[  116.351621][ T7141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  116.351632][ T7141] R13: 00007fe0b16e6038 R14: 00007fe0b16e5fa0 R15: 00007fff1cc0fbb8
[  116.351649][ T7141]  </TASK>
[  116.553884][ T7137] loop2: detected capacity change from 0 to 8192
[  116.562999][ T7142] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1335'.
[  116.573356][ T7137] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  116.596725][ T7144] loop1: detected capacity change from 0 to 128
[  116.733722][ T7155] loop0: detected capacity change from 0 to 2048
[  116.743451][ T7155]  loop0: p1 < > p3
[  116.747930][ T7155] loop0: p3 size 54016 extends beyond EOD, truncated
[  116.835910][ T3507] udevd[3507]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory
[  116.877307][ T7165] netlink: 'syz.2.1345': attribute type 13 has an invalid length.
[  116.894340][ T7164] loop0: detected capacity change from 0 to 128
[  117.094487][ T7177] loop0: detected capacity change from 0 to 128
[  117.166764][ T7179] loop3: detected capacity change from 0 to 128
[  117.428517][ T7189] loop3: detected capacity change from 0 to 128
[  117.506760][ T7191] loop0: detected capacity change from 0 to 128
[  117.522960][ T7191] FAT-fs (loop0): Directory bread(block 162) failed
[  117.529815][ T7191] FAT-fs (loop0): Directory bread(block 163) failed
[  117.536862][ T7191] FAT-fs (loop0): Directory bread(block 164) failed
[  117.541518][ T7194] loop1: detected capacity change from 0 to 2048
[  117.543898][ T7191] FAT-fs (loop0): Directory bread(block 165) failed
[  117.556863][ T7191] FAT-fs (loop0): Directory bread(block 166) failed
[  117.563740][ T7191] FAT-fs (loop0): Directory bread(block 167) failed
[  117.570522][ T7191] FAT-fs (loop0): Directory bread(block 168) failed
[  117.577333][ T7191] FAT-fs (loop0): Directory bread(block 169) failed
[  117.584544][ T3507]  loop1: p1 < > p3
[  117.590986][ T7191] FAT-fs (loop0): Directory bread(block 162) failed
[  117.593118][ T3507] loop1: p3 size 54016 extends beyond EOD, truncated
[  117.597871][ T7191] FAT-fs (loop0): Directory bread(block 163) failed
[  117.617454][ T7194]  loop1: p1 < > p3
[  117.624121][ T7194] loop1: p3 size 54016 extends beyond EOD, truncated
[  117.631240][ T7196] loop3: detected capacity change from 0 to 128
[  117.718047][ T7200] loop2: detected capacity change from 0 to 128
[  117.734365][ T3507] udevd[3507]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  117.735176][ T5109] udevd[5109]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[  117.763240][ T7200] FAT-fs (loop2): Directory bread(block 162) failed
[  117.769892][ T7200] FAT-fs (loop2): Directory bread(block 163) failed
[  117.797745][ T7200] FAT-fs (loop2): Directory bread(block 164) failed
[  117.823908][ T7200] FAT-fs (loop2): Directory bread(block 165) failed
[  117.830938][ T7200] FAT-fs (loop2): Directory bread(block 166) failed
[  117.838214][ T7200] FAT-fs (loop2): Directory bread(block 167) failed
[  117.845320][ T7200] FAT-fs (loop2): Directory bread(block 168) failed
[  117.852282][ T7200] FAT-fs (loop2): Directory bread(block 169) failed
[  117.868809][ T7200] FAT-fs (loop2): Directory bread(block 162) failed
[  117.875582][ T7200] FAT-fs (loop2): Directory bread(block 163) failed
[  117.882336][ T7200] bio_check_eod: 78563 callbacks suppressed
[  117.882351][ T7200] syz.2.1360: attempt to access beyond end of device
[  117.882351][ T7200] loop2: rw=3, sector=226, nr_sectors = 6 limit=128
[  117.901768][ T7200] syz.2.1360: attempt to access beyond end of device
[  117.901768][ T7200] loop2: rw=2051, sector=232, nr_sectors = 2 limit=128
[  117.985394][ T7220] loop5: detected capacity change from 0 to 128
[  118.145048][ T7225] loop5: detected capacity change from 0 to 128
[  118.237245][   T37] kworker/u8:2: attempt to access beyond end of device
[  118.237245][   T37] loop5: rw=1, sector=153, nr_sectors = 8 limit=128
[  118.251337][   T37] kworker/u8:2: attempt to access beyond end of device
[  118.251337][   T37] loop5: rw=1, sector=169, nr_sectors = 8 limit=128
[  118.264879][   T37] kworker/u8:2: attempt to access beyond end of device
[  118.264879][   T37] loop5: rw=1, sector=185, nr_sectors = 8 limit=128
[  118.278350][   T37] kworker/u8:2: attempt to access beyond end of device
[  118.278350][   T37] loop5: rw=1, sector=201, nr_sectors = 8 limit=128
[  118.291791][   T37] kworker/u8:2: attempt to access beyond end of device
[  118.291791][   T37] loop5: rw=1, sector=217, nr_sectors = 8 limit=128
[  118.305293][   T37] kworker/u8:2: attempt to access beyond end of device
[  118.305293][   T37] loop5: rw=1, sector=233, nr_sectors = 8 limit=128
[  118.318861][   T37] kworker/u8:2: attempt to access beyond end of device
[  118.318861][   T37] loop5: rw=1, sector=249, nr_sectors = 8 limit=128
[  118.332331][   T37] kworker/u8:2: attempt to access beyond end of device
[  118.332331][   T37] loop5: rw=1, sector=265, nr_sectors = 8 limit=128
[  118.369201][ T7228] loop0: detected capacity change from 0 to 128
[  118.380476][ T7228] buffer_io_error: 77894 callbacks suppressed
[  118.380495][ T7228] Buffer I/O error on dev loop0, logical block 2078, async page read
[  118.395586][ T7228] Buffer I/O error on dev loop0, logical block 2078, async page read
[  118.403999][ T7228] Buffer I/O error on dev loop0, logical block 2078, async page read
[  118.412154][ T7228] Buffer I/O error on dev loop0, logical block 2078, async page read
[  118.420311][ T7228] Buffer I/O error on dev loop0, logical block 2078, async page read
[  118.428673][ T7231] netlink: 'syz.5.1370': attribute type 13 has an invalid length.
[  118.440359][ T7228] Buffer I/O error on dev loop0, logical block 2078, async page read
[  118.448599][ T7232] Buffer I/O error on dev loop0, logical block 2078, async page read
[  118.457229][ T7232] Buffer I/O error on dev loop0, logical block 2078, async page read
[  118.465523][ T7228] Buffer I/O error on dev loop0, logical block 2078, async page read
[  118.482449][ T7228] Buffer I/O error on dev loop0, logical block 2078, async page read
[  118.544478][ T7231] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  118.561313][ T7231] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  118.630439][ T1086] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  118.648038][ T1086] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  118.664199][ T1086] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  118.682965][ T1086] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  118.824542][ T7241] loop3: detected capacity change from 0 to 512
[  118.835945][ T7241] EXT4-fs (loop3): orphan cleanup on readonly fs
[  118.843633][ T7241] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1375: bg 0: block 248: padding at end of block bitmap is not set
[  118.858324][ T7241] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.1375: Failed to acquire dquot type 1
[  118.870194][ T7241] EXT4-fs (loop3): 1 truncate cleaned up
[  118.876495][ T7241] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  118.894474][ T7243] rdma_op ffff8881057b6180 conn xmit_rdma 0000000000000000
[  118.901951][ T7243] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1374'.
[  118.935955][ T7241] syz.3.1375 (7241) used greatest stack depth: 9200 bytes left
[  118.944895][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  119.074910][ T7251] loop1: detected capacity change from 0 to 128
[  119.201007][ T7255] loop3: detected capacity change from 0 to 2048
[  119.227464][ T7257] loop5: detected capacity change from 0 to 128
[  119.263703][ T7255]  loop3: p1 < > p3
[  119.268641][ T7255] loop3: p3 size 54016 extends beyond EOD, truncated
[  119.411107][   T29] kauditd_printk_skb: 1859 callbacks suppressed
[  119.411124][   T29] audit: type=1326 audit(1761029995.332:31283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7268 comm="syz.1.1387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0b148efc9 code=0x7ffc0000
[  119.448177][ T7269] loop1: detected capacity change from 0 to 512
[  119.454831][ T7266] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7)
[  119.455577][   T29] audit: type=1326 audit(1761029995.372:31284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7268 comm="syz.1.1387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0b148efc9 code=0x7ffc0000
[  119.461387][ T7266] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  119.484896][   T29] audit: type=1326 audit(1761029995.372:31285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7268 comm="syz.1.1387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe0b148efc9 code=0x7ffc0000
[  119.492450][ T7266] vhci_hcd vhci_hcd.0: Device attached
[  119.515777][   T29] audit: type=1326 audit(1761029995.372:31286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7268 comm="syz.1.1387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0b148efc9 code=0x7ffc0000
[  119.544732][   T29] audit: type=1326 audit(1761029995.372:31287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7268 comm="syz.1.1387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe0b148efc9 code=0x7ffc0000
[  119.568300][   T29] audit: type=1326 audit(1761029995.372:31288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7268 comm="syz.1.1387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0b148efc9 code=0x7ffc0000
[  119.591846][   T29] audit: type=1326 audit(1761029995.372:31289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7268 comm="syz.1.1387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe0b148efc9 code=0x7ffc0000
[  119.597812][ T7269] EXT4-fs (loop1): orphan cleanup on readonly fs
[  119.615368][   T29] audit: type=1326 audit(1761029995.372:31290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7268 comm="syz.1.1387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0b148efc9 code=0x7ffc0000
[  119.635371][ T7276] serio: Serial port ptm0
[  119.645265][   T29] audit: type=1326 audit(1761029995.372:31291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7268 comm="syz.1.1387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0b148efc9 code=0x7ffc0000
[  119.664791][ T7269] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1387: bg 0: block 248: padding at end of block bitmap is not set
[  119.673123][   T29] audit: type=1326 audit(1761029995.372:31292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7268 comm="syz.1.1387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7fe0b148efc9 code=0x7ffc0000
[  119.688554][ T7269] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.1387: Failed to acquire dquot type 1
[  119.726153][ T7279] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1386'.
[  119.782699][ T3376] usb 1-1: new low-speed USB device number 2 using vhci_hcd
[  119.797965][ T7269] EXT4-fs (loop1): 1 truncate cleaned up
[  119.811461][ T7269] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  119.817883][ T7272] vhci_hcd: connection reset by peer
[  119.834503][   T52] vhci_hcd: stop threads
[  119.838806][   T52] vhci_hcd: release socket
[  119.843346][   T52] vhci_hcd: disconnect device
[  119.850893][ T7285] loop2: detected capacity change from 0 to 128
[  119.920845][ T7288] loop3: detected capacity change from 0 to 2048
[  119.973432][ T3507]  loop3: p1 < > p3
[  119.974552][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  119.977962][ T3507] loop3: p3 size 54016 extends beyond EOD, truncated
[  119.999684][ T7288]  loop3: p1 < > p3
[  120.012584][ T7288] loop3: p3 size 54016 extends beyond EOD, truncated
[  120.022912][ T7292] loop1: detected capacity change from 0 to 128
[  120.182410][ T3507] udevd[3507]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[  120.281782][ T7297] loop2: detected capacity change from 0 to 512
[  120.284154][ T7312] loop3: detected capacity change from 0 to 2048
[  120.317874][ T7297] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.1393: error while reading EA inode 32 err=-116
[  120.341378][ T7317] loop1: detected capacity change from 0 to 128
[  120.349436][ T7312]  loop3: p1 < > p3
[  120.356220][ T7312] loop3: p3 size 54016 extends beyond EOD, truncated
[  120.377916][ T7297] EXT4-fs (loop2): Remounting filesystem read-only
[  120.413862][ T7297] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30)
[  120.424186][ T7297] EXT4-fs (loop2): 1 orphan inode deleted
[  120.430447][ T7297] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  120.453025][ T7297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  121.202386][ T7341] loop5: detected capacity change from 0 to 128
[  121.321093][ T7346] loop1: detected capacity change from 0 to 128
[  121.374355][ T7343] loop0: detected capacity change from 0 to 8192
[  121.464563][ T7352] loop5: detected capacity change from 0 to 128
[  121.855212][ T7359] bond0: (slave bond_slave_0): Releasing backup interface
[  121.868812][ T7359] bond0: (slave bond_slave_1): Releasing backup interface
[  121.885696][ T7359] team0: Port device team_slave_0 removed
[  121.896790][ T7359] team0: Port device team_slave_1 removed
[  121.905697][ T7359] batman_adv: batadv0: Removing interface: batadv_slave_0
[  121.923289][ T7359] batman_adv: batadv0: Removing interface: batadv_slave_1
[  121.933691][ T7359] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  121.967355][ T7360] netlink: 'syz.2.1411': attribute type 10 has an invalid length.
[  121.975219][ T7360] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1411'.
[  122.002084][ T7360] team0: entered promiscuous mode
[  122.013098][ T7360] 8021q: adding VLAN 0 to HW filter on device team0
[  122.053296][ T7359] netlink: 'syz.2.1411': attribute type 7 has an invalid length.
[  122.229351][ T7365] loop3: detected capacity change from 0 to 128
[  122.271029][ T7366] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1412'.
[  122.327008][ T7369] loop5: detected capacity change from 0 to 128
[  122.413150][ T7372] loop0: detected capacity change from 0 to 128
[  122.436817][ T7372] FAT-fs (loop0): Directory bread(block 162) failed
[  122.453391][ T7372] FAT-fs (loop0): Directory bread(block 163) failed
[  122.465660][ T7372] FAT-fs (loop0): Directory bread(block 164) failed
[  122.479891][ T7372] FAT-fs (loop0): Directory bread(block 165) failed
[  122.495345][ T7372] FAT-fs (loop0): Directory bread(block 166) failed
[  122.508669][ T7372] FAT-fs (loop0): Directory bread(block 167) failed
[  122.522086][ T7372] FAT-fs (loop0): Directory bread(block 168) failed
[  122.536495][ T7372] FAT-fs (loop0): Directory bread(block 169) failed
[  122.553568][ T7372] FAT-fs (loop0): Directory bread(block 162) failed
[  122.567833][ T7372] FAT-fs (loop0): Directory bread(block 163) failed
[  122.862833][ T7386] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  122.882851][ T7369] bio_check_eod: 113737 callbacks suppressed
[  122.882866][ T7369] syz.5.1413: attempt to access beyond end of device
[  122.882866][ T7369] loop5: rw=0, sector=2078, nr_sectors = 1 limit=128
[  122.883256][ T7365] syz.3.1410: attempt to access beyond end of device
[  122.883256][ T7365] loop3: rw=0, sector=2078, nr_sectors = 1 limit=128
[  122.888923][ T7369] syz.5.1413: attempt to access beyond end of device
[  122.888923][ T7369] loop5: rw=0, sector=2078, nr_sectors = 1 limit=128
[  122.902959][ T7365] syz.3.1410: attempt to access beyond end of device
[  122.902959][ T7365] loop3: rw=0, sector=2078, nr_sectors = 1 limit=128
[  122.922816][ T7386] netlink: 'syz.2.1419': attribute type 10 has an invalid length.
[  122.929367][ T7365] syz.3.1410: attempt to access beyond end of device
[  122.929367][ T7365] loop3: rw=0, sector=2078, nr_sectors = 1 limit=128
[  122.942070][ T7386] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1419'.
[  122.942121][ T7369] syz.5.1413: attempt to access beyond end of device
[  122.942121][ T7369] loop5: rw=0, sector=2078, nr_sectors = 1 limit=128
[  122.950556][ T7365] syz.3.1410: attempt to access beyond end of device
[  122.950556][ T7365] loop3: rw=0, sector=2078, nr_sectors = 1 limit=128
[  122.965923][ T7369] syz.5.1413: attempt to access beyond end of device
[  122.965923][ T7369] loop5: rw=0, sector=2078, nr_sectors = 1 limit=128
[  122.980823][ T7365] syz.3.1410: attempt to access beyond end of device
[  122.980823][ T7365] loop3: rw=0, sector=2078, nr_sectors = 1 limit=128
[  123.025113][ T7369] syz.5.1413: attempt to access beyond end of device
[  123.025113][ T7369] loop5: rw=0, sector=2078, nr_sectors = 1 limit=128
[  123.060838][ T7387] netlink: 'syz.2.1419': attribute type 7 has an invalid length.
[  123.125836][ T7391] loop3: detected capacity change from 0 to 128
[  123.256225][ T7397] serio: Serial port ptm0
[  123.308804][ T7399] loop1: detected capacity change from 0 to 8192
[  123.319058][ T7397] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1423'.
[  123.355091][ T7403] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1425'.
[  123.382849][ T7391] buffer_io_error: 124569 callbacks suppressed
[  123.382869][ T7391] Buffer I/O error on dev loop3, logical block 2078, async page read
[  123.397398][ T7391] Buffer I/O error on dev loop3, logical block 2078, async page read
[  123.405692][ T7391] Buffer I/O error on dev loop3, logical block 2078, async page read
[  123.414069][ T7391] Buffer I/O error on dev loop3, logical block 2078, async page read
[  123.422861][ T7391] Buffer I/O error on dev loop3, logical block 2078, async page read
[  123.432915][ T7391] Buffer I/O error on dev loop3, logical block 2078, async page read
[  123.441304][ T7391] Buffer I/O error on dev loop3, logical block 2078, async page read
[  123.449604][ T7391] Buffer I/O error on dev loop3, logical block 2078, async page read
[  123.449802][ T7406] loop0: detected capacity change from 0 to 2048
[  123.458251][ T7391] Buffer I/O error on dev loop3, logical block 2078, async page read
[  123.472331][ T7391] Buffer I/O error on dev loop3, logical block 2078, async page read
[  123.503145][ T3507]  loop0: p1 < > p3
[  123.512815][ T3507] loop0: p3 size 54016 extends beyond EOD, truncated
[  123.525941][ T7406]  loop0: p1 < > p3
[  123.530554][ T7406] loop0: p3 size 54016 extends beyond EOD, truncated
[  123.628648][ T7409] FAULT_INJECTION: forcing a failure.
[  123.628648][ T7409] name failslab, interval 1, probability 0, space 0, times 0
[  123.639435][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory
[  123.641402][ T7409] CPU: 1 UID: 0 PID: 7409 Comm: syz.2.1427 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  123.641489][ T7409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  123.641508][ T7409] Call Trace:
[  123.641517][ T7409]  <TASK>
[  123.641528][ T7409]  __dump_stack+0x1d/0x30
[  123.641611][ T7409]  dump_stack_lvl+0xe8/0x140
[  123.641649][ T7409]  dump_stack+0x15/0x1b
[  123.641684][ T7409]  should_fail_ex+0x265/0x280
[  123.641726][ T7409]  ? __genradix_ptr_alloc+0x169/0x340
[  123.641859][ T7409]  should_failslab+0x8c/0xb0
[  123.641964][ T7409]  __kmalloc_cache_noprof+0x4c/0x4a0
[  123.641999][ T7409]  __genradix_ptr_alloc+0x169/0x340
[  123.642035][ T7409]  proc_map_files_readdir+0x36b/0x690
[  123.642083][ T7409]  iterate_dir+0x114/0x330
[  123.642123][ T7409]  ? mutex_lock+0xd/0x30
[  123.642162][ T7409]  __se_sys_getdents64+0x88/0x1b0
[  123.642234][ T7409]  ? __pfx_filldir64+0x10/0x10
[  123.642278][ T7409]  __x64_sys_getdents64+0x43/0x50
[  123.642355][ T7409]  x64_sys_call+0x2dae/0x3000
[  123.642397][ T7409]  do_syscall_64+0xd2/0x200
[  123.642436][ T7409]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  123.642538][ T7409]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  123.642575][ T7409]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  123.642604][ T7409] RIP: 0033:0x7f520b23efc9
[  123.642630][ T7409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  123.642660][ T7409] RSP: 002b:00007f5209c9f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
[  123.642764][ T7409] RAX: ffffffffffffffda RBX: 00007f520b495fa0 RCX: 00007f520b23efc9
[  123.642782][ T7409] RDX: 00000000000000e0 RSI: 0000200000000fc0 RDI: 0000000000000005
[  123.642799][ T7409] RBP: 00007f5209c9f090 R08: 0000000000000000 R09: 0000000000000000
[  123.642914][ T7409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  123.642931][ T7409] R13: 00007f520b496038 R14: 00007f520b495fa0 R15: 00007fff0ba3c2d8
[  123.642992][ T7409]  </TASK>
[  123.746982][ T5109] udevd[5109]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[  123.800379][ T7413] loop2: detected capacity change from 0 to 128
[  123.978701][ T7417] loop2: detected capacity change from 0 to 128
[  124.065886][ T7426] loop3: detected capacity change from 0 to 128
[  124.076095][ T7426] FAT-fs (loop3): Directory bread(block 162) failed
[  124.076747][ T7423] loop5: detected capacity change from 0 to 128
[  124.083059][ T7426] FAT-fs (loop3): Directory bread(block 163) failed
[  124.102451][ T7426] FAT-fs (loop3): Directory bread(block 164) failed
[  124.168571][ T7431] loop1: detected capacity change from 0 to 128
[  124.202703][ T7426] FAT-fs (loop3): Directory bread(block 165) failed
[  124.210101][ T7426] FAT-fs (loop3): Directory bread(block 166) failed
[  124.223460][ T7426] FAT-fs (loop3): Directory bread(block 167) failed
[  124.242763][ T7426] FAT-fs (loop3): Directory bread(block 168) failed
[  124.249406][ T7426] FAT-fs (loop3): Directory bread(block 169) failed
[  124.374537][ T7426] FAT-fs (loop3): Directory bread(block 162) failed
[  124.392718][ T7426] FAT-fs (loop3): Directory bread(block 163) failed
[  124.479934][ T7439] loop0: detected capacity change from 0 to 128
[  124.857379][ T3376] usb 1-1: enqueue for inactive port 0
[  124.876363][ T3376] usb 1-1: enqueue for inactive port 0
[  124.942500][ T7450] serio: Serial port ptm0
[  124.976374][ T7455] loop5: detected capacity change from 0 to 128
[  124.983152][ T3376] vhci_hcd: vhci_device speed not set
[  124.995274][ T7450] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1439'.
[  125.051439][ T7466] loop2: detected capacity change from 0 to 128
[  125.149161][ T7473] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1444'.
[  125.191436][ T7477] loop5: detected capacity change from 0 to 128
[  125.379008][   T29] kauditd_printk_skb: 946 callbacks suppressed
[  125.379024][   T29] audit: type=1326 audit(1761030001.302:32237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7492 comm="syz.3.1449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b33beefc9 code=0x7ffc0000
[  125.408881][   T29] audit: type=1326 audit(1761030001.302:32238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7492 comm="syz.3.1449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b33beefc9 code=0x7ffc0000
[  125.436021][ T7496] loop3: detected capacity change from 0 to 2048
[  125.493299][ T3507]  loop3: p1 < > p3
[  125.498341][ T3507] loop3: p3 size 54016 extends beyond EOD, truncated
[  125.527452][ T7496]  loop3: p1 < > p3
[  125.529393][   T29] audit: type=1326 audit(1761030001.302:32239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7492 comm="syz.3.1449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7f8b33beefc9 code=0x7ffc0000
[  125.533813][ T7496] loop3: p3 size 54016 extends beyond EOD, 
[  125.554933][   T29] audit: type=1326 audit(1761030001.302:32240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7492 comm="syz.3.1449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b33beefc9 code=0x7ffc0000
[  125.554985][   T29] audit: type=1326 audit(1761030001.302:32241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7492 comm="syz.3.1449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b33beefc9 code=0x7ffc0000
[  125.555021][   T29] audit: type=1326 audit(1761030001.302:32242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7492 comm="syz.3.1449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f8b33beefc9 code=0x7ffc0000
[  125.561133][ T7496] truncated
[  125.584540][   T29] audit: type=1326 audit(1761030001.302:32243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7492 comm="syz.3.1449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b33beefc9 code=0x7ffc0000
[  125.584586][   T29] audit: type=1326 audit(1761030001.302:32244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7492 comm="syz.3.1449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f8b33beefc9 code=0x7ffc0000
[  125.584717][   T29] audit: type=1326 audit(1761030001.302:32245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7492 comm="syz.3.1449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b33beefc9 code=0x7ffc0000
[  125.705895][   T29] audit: type=1326 audit(1761030001.302:32246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7492 comm="syz.3.1449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f8b33beefc9 code=0x7ffc0000
[  125.741884][ T7505] loop0: detected capacity change from 0 to 128
[  125.749922][ T7505] FAT-fs (loop0): Directory bread(block 162) failed
[  125.758548][ T7505] FAT-fs (loop0): Directory bread(block 163) failed
[  125.798537][ T7505] FAT-fs (loop0): Directory bread(block 164) failed
[  125.806156][ T7505] FAT-fs (loop0): Directory bread(block 165) failed
[  125.813000][ T7505] FAT-fs (loop0): Directory bread(block 166) failed
[  125.819683][ T7505] FAT-fs (loop0): Directory bread(block 167) failed
[  125.826629][ T7505] FAT-fs (loop0): Directory bread(block 168) failed
[  125.833750][ T7505] FAT-fs (loop0): Directory bread(block 169) failed
[  125.865702][ T7512] serio: Serial port ptm0
[  125.876252][ T7505] FAT-fs (loop0): Directory bread(block 162) failed
[  125.884114][ T7505] FAT-fs (loop0): Directory bread(block 163) failed
[  125.920333][ T7512] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1453'.
[  126.038904][ T7530] loop1: detected capacity change from 0 to 128
[  126.066152][ T7536] loop2: detected capacity change from 0 to 512
[  126.070997][ T7538] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1458'.
[  126.090140][ T7536] EXT4-fs: Ignoring removed bh option
[  126.132451][ T7536] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  126.145730][ T7536] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  126.154908][ T7536] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[  126.184209][ T7536] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended
[  126.212962][ T7536] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006]
[  126.223872][ T7546] loop5: detected capacity change from 0 to 2048
[  126.261106][ T7536] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  126.307800][ T5109]  loop5: p1 < > p3
[  126.317665][ T5109] loop5: p3 size 54016 extends beyond EOD, truncated
[  126.330325][ T7546]  loop5: p1 < > p3
[  126.334858][ T7546] loop5: p3 size 54016 extends beyond EOD, truncated
[  126.366104][ T7551] loop3: detected capacity change from 0 to 512
[  126.386452][ T7551] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.1461: error while reading EA inode 32 err=-116
[  126.397326][ T7536] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  126.409125][ T7571] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1463'.
[  126.421911][ T7551] EXT4-fs (loop3): Remounting filesystem read-only
[  126.430033][ T7551] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30)
[  126.440572][ T7551] EXT4-fs (loop3): 1 orphan inode deleted
[  126.446863][ T7551] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  126.471556][ T5109] udevd[5109]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory
[  126.476053][ T7573] serio: Serial port ptm0
[  126.483175][ T3507] udevd[3507]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  126.486590][ T7551] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  126.505459][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  126.591695][ T7578] loop5: detected capacity change from 0 to 128
[  126.687038][ T7593] loop2: detected capacity change from 0 to 512
[  126.694854][ T7594] loop3: detected capacity change from 0 to 128
[  126.697382][ T7593] EXT4-fs: Ignoring removed bh option
[  126.713692][ T7593] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  126.723077][ T7593] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[  126.733204][ T7593] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended
[  126.743287][ T7593] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006]
[  126.752226][ T7593] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  126.766710][ T7593] FAULT_INJECTION: forcing a failure.
[  126.766710][ T7593] name failslab, interval 1, probability 0, space 0, times 0
[  126.779610][ T7593] CPU: 0 UID: 0 PID: 7593 Comm: syz.2.1471 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  126.779705][ T7593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  126.779717][ T7593] Call Trace:
[  126.779724][ T7593]  <TASK>
[  126.779731][ T7593]  __dump_stack+0x1d/0x30
[  126.779806][ T7593]  dump_stack_lvl+0xe8/0x140
[  126.779839][ T7593]  dump_stack+0x15/0x1b
[  126.779863][ T7593]  should_fail_ex+0x265/0x280
[  126.779907][ T7593]  should_failslab+0x8c/0xb0
[  126.779972][ T7593]  kmem_cache_alloc_noprof+0x50/0x480
[  126.779999][ T7593]  ? getname_flags+0x80/0x3b0
[  126.780075][ T7593]  getname_flags+0x80/0x3b0
[  126.780098][ T7593]  user_path_at+0x28/0x130
[  126.780127][ T7593]  __se_sys_mount+0x25b/0x2e0
[  126.780167][ T7593]  ? fput+0x8f/0xc0
[  126.780225][ T7593]  __x64_sys_mount+0x67/0x80
[  126.780267][ T7593]  x64_sys_call+0x2b51/0x3000
[  126.780313][ T7593]  do_syscall_64+0xd2/0x200
[  126.780399][ T7593]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  126.780438][ T7593]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  126.780473][ T7593]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  126.780563][ T7593] RIP: 0033:0x7f520b23efc9
[  126.780582][ T7593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  126.780605][ T7593] RSP: 002b:00007f5209c9f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  126.780630][ T7593] RAX: ffffffffffffffda RBX: 00007f520b495fa0 RCX: 00007f520b23efc9
[  126.780645][ T7593] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000000
[  126.780657][ T7593] RBP: 00007f5209c9f090 R08: 0000000000000000 R09: 0000000000000000
[  126.780713][ T7593] R10: 0000000000000021 R11: 0000000000000246 R12: 0000000000000001
[  126.780729][ T7593] R13: 00007f520b496038 R14: 00007f520b495fa0 R15: 00007fff0ba3c2d8
[  126.780753][ T7593]  </TASK>
[  126.981694][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  127.023668][ T7598] loop2: detected capacity change from 0 to 512
[  127.047926][ T7598] EXT4-fs: Ignoring removed bh option
[  127.070636][ T7598] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  127.080005][ T7598] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[  127.096998][ T7598] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended
[  127.106707][ T7598] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006]
[  127.115540][ T7598] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  127.306887][ T7604] serio: Serial port ptm1
[  127.365048][ T7604] __nla_validate_parse: 1 callbacks suppressed
[  127.365067][ T7604] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1476'.
[  127.487901][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  127.517176][ T7626] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1484'.
[  127.577167][ T7636] loop0: detected capacity change from 0 to 2048
[  127.585207][ T7640] loop1: detected capacity change from 0 to 128
[  127.586901][ T7638] serio: Serial port ptm0
[  127.613824][ T7641] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1488'.
[  127.635701][ T3507]  loop0: p1 < > p3
[  127.643384][ T7638] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1490'.
[  127.666548][ T3507] loop0: p3 size 54016 extends beyond EOD, truncated
[  127.700755][ T7636]  loop0: p1 < > p3
[  127.706892][ T7636] loop0: p3 size 54016 extends beyond EOD, truncated
[  127.829421][ T5109] udevd[5109]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory
[  127.840323][ T3507] udevd[3507]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[  127.851356][ T7658] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1494'.
[  127.862172][ T5109] udevd[5109]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory
[  127.885280][ T7657] FAULT_INJECTION: forcing a failure.
[  127.885280][ T7657] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  127.899519][ T7657] CPU: 0 UID: 0 PID: 7657 Comm: syz.5.1497 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  127.899545][ T7657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  127.899557][ T7657] Call Trace:
[  127.899563][ T7657]  <TASK>
[  127.899572][ T7657]  __dump_stack+0x1d/0x30
[  127.899606][ T7657]  dump_stack_lvl+0xe8/0x140
[  127.899709][ T7657]  dump_stack+0x15/0x1b
[  127.899806][ T7657]  should_fail_ex+0x265/0x280
[  127.899843][ T7657]  should_fail+0xb/0x20
[  127.899869][ T7657]  should_fail_usercopy+0x1a/0x20
[  127.899934][ T7657]  _copy_from_user+0x1c/0xb0
[  127.899962][ T7657]  ip6_tnl_siocdevprivate+0x132/0x920
[  127.900006][ T7657]  dev_ifsioc+0x8f8/0xaa0
[  127.900072][ T7657]  dev_ioctl+0x78d/0x960
[  127.900123][ T7657]  sock_ioctl+0x593/0x610
[  127.900163][ T7657]  ? __pfx_sock_ioctl+0x10/0x10
[  127.900249][ T7657]  __se_sys_ioctl+0xce/0x140
[  127.900287][ T7657]  __x64_sys_ioctl+0x43/0x50
[  127.900389][ T7657]  x64_sys_call+0x1816/0x3000
[  127.900420][ T7657]  do_syscall_64+0xd2/0x200
[  127.900454][ T7657]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  127.900498][ T7657]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  127.900581][ T7657] RIP: 0033:0x7f2c00c4efc9
[  127.900596][ T7657] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  127.900613][ T7657] RSP: 002b:00007f2bff6af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  127.900631][ T7657] RAX: ffffffffffffffda RBX: 00007f2c00ea5fa0 RCX: 00007f2c00c4efc9
[  127.900644][ T7657] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000009
[  127.900656][ T7657] RBP: 00007f2bff6af090 R08: 0000000000000000 R09: 0000000000000000
[  127.900667][ T7657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  127.900679][ T7657] R13: 00007f2c00ea6038 R14: 00007f2c00ea5fa0 R15: 00007ffe7f636108
[  127.900711][ T7657]  </TASK>
[  127.901255][ T7640] bio_check_eod: 93036 callbacks suppressed
[  127.901309][ T7640] syz.1.1491: attempt to access beyond end of device
[  127.901309][ T7640] loop1: rw=0, sector=2078, nr_sectors = 1 limit=128
[  128.119984][ T7640] syz.1.1491: attempt to access beyond end of device
[  128.119984][ T7640] loop1: rw=0, sector=2078, nr_sectors = 1 limit=128
[  128.133753][ T7640] syz.1.1491: attempt to access beyond end of device
[  128.133753][ T7640] loop1: rw=0, sector=2078, nr_sectors = 1 limit=128
[  128.147898][ T7640] syz.1.1491: attempt to access beyond end of device
[  128.147898][ T7640] loop1: rw=0, sector=2078, nr_sectors = 1 limit=128
[  128.151873][ T7674] loop2: detected capacity change from 0 to 128
[  128.161390][ T7640] syz.1.1491: attempt to access beyond end of device
[  128.161390][ T7640] loop1: rw=0, sector=2078, nr_sectors = 1 limit=128
[  128.178200][ T7672] serio: Serial port ptm0
[  128.181156][ T7640] syz.1.1491: attempt to access beyond end of device
[  128.181156][ T7640] loop1: rw=0, sector=2078, nr_sectors = 1 limit=128
[  128.199057][ T7640] syz.1.1491: attempt to access beyond end of device
[  128.199057][ T7640] loop1: rw=0, sector=2078, nr_sectors = 1 limit=128
[  128.199771][ T7674] syz.2.1504: attempt to access beyond end of device
[  128.199771][ T7674] loop2: rw=0, sector=2078, nr_sectors = 1 limit=128
[  128.213158][ T7640] syz.1.1491: attempt to access beyond end of device
[  128.213158][ T7640] loop1: rw=0, sector=2078, nr_sectors = 1 limit=128
[  128.239734][ T7640] syz.1.1491: attempt to access beyond end of device
[  128.239734][ T7640] loop1: rw=0, sector=2078, nr_sectors = 1 limit=128
[  128.240412][ T7672] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1503'.
[  128.352884][ T7680] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1506'.
[  128.393052][ T7674] buffer_io_error: 86845 callbacks suppressed
[  128.393069][ T7674] Buffer I/O error on dev loop2, logical block 2078, async page read
[  128.393690][ T7640] Buffer I/O error on dev loop1, logical block 2078, async page read
[  128.407351][ T7674] Buffer I/O error on dev loop2, logical block 2078, async page read
[  128.426920][ T7674] Buffer I/O error on dev loop2, logical block 2078, async page read
[  128.435471][ T7674] Buffer I/O error on dev loop2, logical block 2078, async page read
[  128.484416][ T7674] Buffer I/O error on dev loop2, logical block 2078, async page read
[  128.493711][ T7674] Buffer I/O error on dev loop2, logical block 2078, async page read
[  128.581508][ T7674] Buffer I/O error on dev loop2, logical block 2078, async page read
[  128.602048][ T7686] loop5: detected capacity change from 0 to 512
[  128.613061][ T7674] Buffer I/O error on dev loop2, logical block 2078, async page read
[  128.623462][ T7686] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.1509: error while reading EA inode 32 err=-116
[  128.636442][ T7686] EXT4-fs (loop5): Remounting filesystem read-only
[  128.643287][ T7674] Buffer I/O error on dev loop2, logical block 2078, async page read
[  128.651831][ T7686] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -30)
[  128.668243][ T7686] EXT4-fs (loop5): 1 orphan inode deleted
[  128.674545][ T7704] loop1: detected capacity change from 0 to 2048
[  128.696669][ T7686] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  128.712981][ T7686] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  128.721957][ T5109]  loop1: p1 < > p3
[  128.732086][ T5109] loop1: p3 size 54016 extends beyond EOD, truncated
[  128.749332][ T7704]  loop1: p1 < > p3
[  128.760494][ T7707] loop3: detected capacity change from 0 to 8192
[  128.774430][ T7704] loop1: p3 size 54016 extends beyond EOD, truncated
[  128.856985][ T3507] udevd[3507]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  128.858307][ T5109] udevd[5109]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[  128.884431][ T7710] loop5: detected capacity change from 0 to 128
[  128.915207][ T5109] udevd[5109]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[  128.922575][ T3507] udevd[3507]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  129.148897][ T7728] loop2: detected capacity change from 0 to 128
[  129.316511][ T7737] loop0: detected capacity change from 0 to 2048
[  129.343632][ T7740] loop1: detected capacity change from 0 to 512
[  129.357938][ T7740] EXT4-fs warning (device loop1): ext4_xattr_inode_get:560: inode #11: comm syz.1.1533: EA inode hash validation failed
[  129.373286][ T7737]  loop0: p1 < > p3
[  129.377783][ T7737] loop0: p3 size 54016 extends beyond EOD, truncated
[  129.391301][ T7740] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #15: comm syz.1.1533: corrupted inode contents
[  129.411536][ T3507] udevd[3507]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[  129.421648][ T7740] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #15: comm syz.1.1533: mark_inode_dirty error
[  129.434196][ T7740] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #15: comm syz.1.1533: corrupted inode contents
[  129.444397][ T5109] udevd[5109]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory
[  129.456666][ T7740] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2996: inode #15: comm syz.1.1533: mark_inode_dirty error
[  129.492880][ T7740] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2999: inode #15: comm syz.1.1533: mark inode dirty (error -117)
[  129.508675][ T7740] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117)
[  129.518340][ T7740] EXT4-fs (loop1): 1 orphan inode deleted
[  129.524899][ T7740] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  129.574133][ T7751] loop0: detected capacity change from 0 to 128
[  129.589954][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  129.685205][ T7758] loop3: detected capacity change from 0 to 512
[  129.685832][ T7758] EXT4-fs: inline encryption not supported
[  129.686040][ T7758] EXT4-fs: Ignoring removed nobh option
[  129.713512][ T7758] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  129.726227][ T7758] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it
[  129.726369][ T7758] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.1540: Corrupt directory, running e2fsck is recommended
[  129.776018][ T7758] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[  129.776133][ T7758] EXT4-fs error (device loop3): ext4_iget_extra_inode:5075: inode #15: comm syz.3.1540: corrupted in-inode xattr: invalid ea_ino
[  129.789278][ T7758] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1540: couldn't read orphan inode 15 (err -117)
[  129.792255][ T7758] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  129.827635][ T7769] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  129.841389][ T7769] netlink: 'syz.1.1542': attribute type 10 has an invalid length.
[  129.841410][ T7769] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1542'.
[  129.841499][ T7769] team0: entered promiscuous mode
[  129.841850][ T7769] 8021q: adding VLAN 0 to HW filter on device team0
[  130.068463][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  130.093932][ T7772] loop3: detected capacity change from 0 to 128
[  130.148513][ T7774] loop2: detected capacity change from 0 to 128
[  130.329437][ T7779] syz.5.1546 uses obsolete (PF_INET,SOCK_PACKET)
[  130.329591][ T7779] syzkaller1: entered allmulticast mode
[  130.522747][ T7796] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1550'.
[  130.594128][   T29] kauditd_printk_skb: 1311 callbacks suppressed
[  130.594145][   T29] audit: type=1326 audit(1761030006.522:33558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7802 comm="syz.3.1555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b33beefc9 code=0x7ffc0000
[  130.632976][   T29] audit: type=1326 audit(1761030006.552:33559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7801 comm="syz.1.1556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0b148efc9 code=0x7ffc0000
[  130.656666][   T29] audit: type=1326 audit(1761030006.552:33560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7801 comm="syz.1.1556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe0b148efc9 code=0x7ffc0000
[  130.680157][   T29] audit: type=1326 audit(1761030006.552:33561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7801 comm="syz.1.1556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0b148efc9 code=0x7ffc0000
[  130.686142][ T7803] loop3: detected capacity change from 0 to 1024
[  130.703728][   T29] audit: type=1326 audit(1761030006.552:33562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7801 comm="syz.1.1556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe0b1490ee7 code=0x7ffc0000
[  130.733490][   T29] audit: type=1326 audit(1761030006.552:33564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7801 comm="syz.1.1556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fe0b1490e5c code=0x7ffc0000
[  130.756921][   T29] audit: type=1326 audit(1761030006.552:33563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7802 comm="syz.3.1555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7f8b33beefc9 code=0x7ffc0000
[  130.780526][   T29] audit: type=1326 audit(1761030006.552:33565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7802 comm="syz.3.1555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b33beefc9 code=0x7ffc0000
[  130.804064][   T29] audit: type=1326 audit(1761030006.552:33566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7802 comm="syz.3.1555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f8b33beefc9 code=0x7ffc0000
[  130.827735][   T29] audit: type=1326 audit(1761030006.552:33567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7801 comm="syz.1.1556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fe0b1490d94 code=0x7ffc0000
[  130.877061][ T7803] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  130.923811][ T7821] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1559'.
[  130.952457][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  130.962685][ T7804] rdma_op ffff8881057b6d80 conn xmit_rdma 0000000000000000
[  131.006361][ T7823] loop1: detected capacity change from 0 to 128
[  131.097261][ T7830] bond0: (slave bond_slave_0): Releasing backup interface
[  131.106447][ T7830] bond0: (slave bond_slave_1): Releasing backup interface
[  131.131933][ T7830] team0: Port device team_slave_0 removed
[  131.140535][ T7833] loop2: detected capacity change from 0 to 128
[  131.152936][ T7830] team0: Port device team_slave_1 removed
[  131.153267][ T7834] netlink: 'syz.0.1563': attribute type 10 has an invalid length.
[  131.159283][ T7830] batman_adv: batadv0: Removing interface: batadv_slave_0
[  131.168478][ T7833] FAT-fs (loop2): Directory bread(block 162) failed
[  131.181150][ T7833] FAT-fs (loop2): Directory bread(block 163) failed
[  131.187910][ T7833] FAT-fs (loop2): Directory bread(block 164) failed
[  131.189111][ T7830] batman_adv: batadv0: Removing interface: batadv_slave_1
[  131.194811][ T7833] FAT-fs (loop2): Directory bread(block 165) failed
[  131.208781][ T7833] FAT-fs (loop2): Directory bread(block 166) failed
[  131.209151][ T7830] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  131.215705][ T7833] FAT-fs (loop2): Directory bread(block 167) failed
[  131.232061][ T7834] team0: entered promiscuous mode
[  131.244065][ T7834] 8021q: adding VLAN 0 to HW filter on device team0
[  131.251197][ T7833] FAT-fs (loop2): Directory bread(block 168) failed
[  131.258285][ T7833] FAT-fs (loop2): Directory bread(block 169) failed
[  131.285432][ T7833] FAT-fs (loop2): Directory bread(block 162) failed
[  131.293327][ T7833] FAT-fs (loop2): Directory bread(block 163) failed
[  131.319247][ T7839] loop1: detected capacity change from 0 to 128
[  131.322169][ T7841] loop5: detected capacity change from 0 to 128
[  131.537052][ T7850] loop5: detected capacity change from 0 to 512
[  131.546664][ T7850] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.1570: error while reading EA inode 32 err=-116
[  131.563135][ T7850] EXT4-fs (loop5): Remounting filesystem read-only
[  131.586439][ T7850] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -30)
[  131.606872][ T7850] EXT4-fs (loop5): 1 orphan inode deleted
[  131.618440][ T7850] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  131.631566][ T7850] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  131.699849][ T7859] loop5: detected capacity change from 0 to 128
[  131.804036][ T7857] rdma_op ffff8881057b5d80 conn xmit_rdma 0000000000000000
[  131.865811][ T7870] loop1: detected capacity change from 0 to 128
[  131.920214][ T7874] loop0: detected capacity change from 0 to 2048
[  131.951706][ T7878] serio: Serial port ptm0
[  131.995660][ T3507]  loop0: p1 < > p3
[  132.003206][ T7881] loop2: detected capacity change from 0 to 128
[  132.022837][ T3507] loop0: p3 size 54016 extends beyond EOD, truncated
[  132.034543][ T7874]  loop0: p1 < > p3
[  132.038938][ T7874] loop0: p3 size 54016 extends beyond EOD, truncated
[  132.161564][ T7889] loop3: detected capacity change from 0 to 128
[  132.223258][ T7893] serio: Serial port ptm0
[  132.462059][ T7905] loop9: detected capacity change from 0 to 7
[  132.468527][ T7905]  loop9: unable to read partition table
[  132.474763][ T7905] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ���
[  132.474763][ T7905] 
) failed (rc=-5)
[  132.655245][ T7917] __nla_validate_parse: 5 callbacks suppressed
[  132.655265][ T7917] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1590'.
[  132.739160][ T7921] loop1: detected capacity change from 0 to 128
[  132.806615][ T7921] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100)
[  132.814524][ T7921] FAT-fs (loop1): Filesystem has been set read-only
[  132.838016][ T7921] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100)
[  132.845923][ T7921] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100)
[  132.891164][ T7923] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  132.903935][ T7889] bio_check_eod: 83757 callbacks suppressed
[  132.903950][ T7889] syz.3.1582: attempt to access beyond end of device
[  132.903950][ T7889] loop3: rw=0, sector=2078, nr_sectors = 1 limit=128
[  132.917607][ T7921] syz.1.1593: attempt to access beyond end of device
[  132.917607][ T7921] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128
[  132.940616][ T7921] syz.1.1593: attempt to access beyond end of device
[  132.940616][ T7921] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128
[  132.954633][ T7921] syz.1.1593: attempt to access beyond end of device
[  132.954633][ T7921] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128
[  132.973869][ T7926] loop2: detected capacity change from 0 to 128
[  132.977461][ T7889] syz.3.1582: attempt to access beyond end of device
[  132.977461][ T7889] loop3: rw=0, sector=2078, nr_sectors = 1 limit=128
[  132.983626][ T7921] syz.1.1593: attempt to access beyond end of device
[  132.983626][ T7921] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128
[  132.994456][ T7889] syz.3.1582: attempt to access beyond end of device
[  132.994456][ T7889] loop3: rw=0, sector=2078, nr_sectors = 1 limit=128
[  133.020505][ T7889] syz.3.1582: attempt to access beyond end of device
[  133.020505][ T7889] loop3: rw=0, sector=2078, nr_sectors = 1 limit=128
[  133.033997][ T7889] syz.3.1582: attempt to access beyond end of device
[  133.033997][ T7889] loop3: rw=0, sector=2078, nr_sectors = 1 limit=128
[  133.034045][ T7889] syz.3.1582: attempt to access beyond end of device
[  133.034045][ T7889] loop3: rw=0, sector=2078, nr_sectors = 1 limit=128
[  133.359503][ T7931] serio: Serial port ptm0
[  133.413464][ T7931] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1598'.
[  133.631875][ T7941] loop2: detected capacity change from 0 to 8192
[  133.657624][ T7945] loop0: detected capacity change from 0 to 128
[  133.677451][ T7941] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1600'.
[  133.699649][ T7949] loop9: detected capacity change from 0 to 7
[  133.706021][ T7949] buffer_io_error: 78498 callbacks suppressed
[  133.706034][ T7949] Buffer I/O error on dev loop9, logical block 0, async page read
[  133.723286][ T7949] Buffer I/O error on dev loop9, logical block 0, async page read
[  133.731192][ T7949]  loop9: unable to read partition table
[  133.737503][ T7949] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ���
[  133.737503][ T7949] 
) failed (rc=-5)
[  133.753393][ T7945] Buffer I/O error on dev loop0, logical block 2078, async page read
[  133.758876][ T3305] Buffer I/O error on dev loop9, logical block 0, async page read
[  133.769499][ T7954] loop1: detected capacity change from 0 to 128
[  133.770474][ T3305] Buffer I/O error on dev loop9, logical block 0, async page read
[  133.783989][ T3305] Buffer I/O error on dev loop9, logical block 0, async page read
[  133.786193][ T7945] Buffer I/O error on dev loop0, logical block 2078, async page read
[  133.792076][ T3305] Buffer I/O error on dev loop9, logical block 0, async page read
[  133.808054][ T3305] Buffer I/O error on dev loop9, logical block 0, async page read
[  133.863666][ T7955] Buffer I/O error on dev loop0, logical block 2078, async page read
[  133.906538][ T7958] loop5: detected capacity change from 0 to 128
[  134.462756][ T7971] loop1: detected capacity change from 0 to 128
[  134.529315][ T7973] loop0: detected capacity change from 0 to 512
[  134.543837][ T7973] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  134.571780][ T7973] EXT4-fs (loop0): 1 truncate cleaned up
[  134.582477][ T7973] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  134.627603][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.774087][ T7985] loop0: detected capacity change from 0 to 2048
[  134.810903][ T7987] loop3: detected capacity change from 0 to 2048
[  134.843057][ T3507]  loop0: p1 < > p3
[  134.850006][ T3507] loop0: p3 size 54016 extends beyond EOD, truncated
[  134.868434][ T7985]  loop0: p1 < > p3
[  134.873458][ T7987]  loop3: p1 < > p3
[  134.880454][ T7985] loop0: p3 size 54016 extends beyond EOD, truncated
[  134.886888][ T7987] loop3: p3 size 54016 extends beyond EOD, truncated
[  134.906354][ T7989] loop5: detected capacity change from 0 to 128
[  134.936304][   T52] ==================================================================
[  134.944431][   T52] BUG: KCSAN: data-race in touch_atime / touch_atime
[  134.951147][   T52] 
[  134.953483][   T52] write to 0xffff88811b5cac88 of 4 bytes by task 1086 on cpu 1:
[  134.961117][   T52]  touch_atime+0x1e8/0x340
[  134.965547][   T52]  shmem_file_read_iter+0x477/0x540
[  134.970792][   T52]  lo_rw_aio+0x6a0/0x760
[  134.975058][   T52]  loop_process_work+0x52d/0xa60
[  134.980023][   T52]  loop_workfn+0x31/0x40
[  134.984279][   T52]  process_scheduled_works+0x4ce/0x9d0
[  134.989763][   T52]  worker_thread+0x582/0x770
[  134.994366][   T52]  kthread+0x489/0x510
[  134.998455][   T52]  ret_from_fork+0x122/0x1b0
[  135.003087][   T52]  ret_from_fork_asm+0x1a/0x30
[  135.007869][   T52] 
[  135.010190][   T52] read to 0xffff88811b5cac88 of 4 bytes by task 52 on cpu 0:
[  135.017604][   T52]  touch_atime+0x194/0x340
[  135.022027][   T52]  shmem_file_read_iter+0x477/0x540
[  135.027244][   T52]  lo_rw_aio+0x6a0/0x760
[  135.031493][   T52]  loop_process_work+0x52d/0xa60
[  135.036441][   T52]  loop_rootcg_workfn+0x22/0x30
[  135.041395][   T52]  process_scheduled_works+0x4ce/0x9d0
[  135.046871][   T52]  worker_thread+0x582/0x770
[  135.051470][   T52]  kthread+0x489/0x510
[  135.055555][   T52]  ret_from_fork+0x122/0x1b0
[  135.060161][   T52]  ret_from_fork_asm+0x1a/0x30
[  135.064939][   T52] 
[  135.067260][   T52] value changed: 0x33af4278 -> 0x33ee1684
[  135.072976][   T52] 
[  135.075295][   T52] Reported by Kernel Concurrency Sanitizer on:
[  135.081447][   T52] CPU: 0 UID: 0 PID: 52 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  135.091252][   T52] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  135.101317][   T52] Workqueue: loop5 loop_rootcg_workfn
[  135.106728][   T52] ==================================================================
[  135.223855][ T3510] udevd[3510]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory
[  135.267065][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory
[  135.291427][ T5109] udevd[5109]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory