last executing test programs:

2.645785958s ago: executing program 0 (id=209):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xd, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r3}, 0x10)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan1\x00', <r7=>0x0})
connect$can_bcm(r6, &(0x7f0000000300)={0x1d, r7}, 0x10)
sendmsg$can_bcm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0)
sendmsg$can_bcm(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x20008850}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r10, {0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)
close(0x4)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r12, 0x0, 0x2}, 0x18)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
r14 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="05072bbd7000ffdbdf250100000018000180140002006c6f00000000000000000000000000001800028014000180080001803e0000000800010000000000040003"], 0x48}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0)

2.599686703s ago: executing program 3 (id=211):
socket$inet_mptcp(0x2, 0x1, 0x106)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000040)=0x586, 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$inet(0x2, 0x2, 0x1)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r3 = socket$inet(0x2, 0x2, 0x1)
r4 = socket(0x2, 0x2, 0x1)
bind$unix(r4, &(0x7f0000000000)=@abs, 0x6e)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10)
socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x210000, &(0x7f0000000040), 0x1, 0x599, &(0x7f0000001280)="$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")
r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x1c3)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x27ffff7, 0x4012011, r5, 0x0)
pwrite64(r5, &(0x7f0000000880)='u', 0xf7d, 0x83)
flistxattr(r5, &(0x7f0000000100)=""/35, 0x23)
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x3, 0x1, 0xe5d1)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000140)={0x4200, 0x3, 0x5}, 0x10)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0)
ioctl$TUNSETDEBUG(r7, 0x400454c9, 0xffffffffffffffff)
ioctl$TUNGETFILTER(r7, 0x801054db, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001100)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r6, @ANYRES8=r0, @ANYRES64=r0, @ANYRES64=r1, @ANYRESOCT=r1], 0x20}, 0x1, 0x0, 0x0, 0x20040041}, 0x0)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x14, 0xf, &(0x7f0000000340)=ANY=[@ANYRES8=r8, @ANYRES32=r8, @ANYRES32=r9], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r10}, 0x10)

2.52912494s ago: executing program 4 (id=214):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0)
rt_sigsuspend(0x0, 0x0)
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=<r3=>0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4)
sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="eb7e77954e41db1cff7f00", @ANYRES16, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x40)
write$nci(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="42efcc0b"], 0x4)
sendmsg$tipc(r1, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x3, {{0x42, 0x2}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x48004)
listen(r0, 0x3)
syz_usbip_server_init(0xaa7f3cec63cbb9d)

2.234929009s ago: executing program 3 (id=216):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x111180, 0x1c9)
move_mount(r0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x72)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x3}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00)
r2 = syz_clone3(&(0x7f0000000cc0)={0xa0000100, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, &(0x7f0000000b80)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x3}, 0x58)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x7, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r2, @ANYBLOB="00000000000400b70200000300000085f70d1db43d9e000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = fsopen(&(0x7f0000000500)='mqueue\x00', 0x0)
timer_create(0x7, &(0x7f0000000000)={0x0, 0x2d, 0xcbbc48433744eb72}, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
fsmount(r3, 0x0, 0x1)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x111180, 0x1c9) (async)
move_mount(r0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x72) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x3}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) (async)
syz_clone3(&(0x7f0000000cc0)={0xa0000100, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, &(0x7f0000000b80)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x3}, 0x58) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x7, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r2, @ANYBLOB="00000000000400b70200000300000085f70d1db43d9e000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
fsopen(&(0x7f0000000500)='mqueue\x00', 0x0) (async)
timer_create(0x7, &(0x7f0000000000)={0x0, 0x2d, 0xcbbc48433744eb72}, 0x0) (async)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) (async)
fsmount(r3, 0x0, 0x1) (async)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) (async)

2.185168884s ago: executing program 0 (id=217):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r0}, 0x18)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000210d0000000000010000000000000001410000001c001700000000000000006574683a73"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20010814)

2.068278495s ago: executing program 2 (id=220):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000808500000070000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) (async)
r2 = socket(0x1, 0x80802, 0x0)
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)={0x10000001}) (async)
epoll_pwait(r3, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) (async, rerun: 64)
shutdown(r2, 0x0) (async, rerun: 64)
r4 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async)
syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x18) (async)
write$selinux_access(r4, &(0x7f0000001a80)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r7 = socket(0x10, 0x803, 0x0) (async)
r8 = socket$unix(0x1, 0x1, 0x0) (async)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9}, 0x10) (async)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd2a, 0x8000004, {0x0, 0x0, 0x0, r10, {0x0, 0x5}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xff, 0x1, 0xfffd}, {0x6, 0x6a6, 0xffff, 0x5, 0x6, 0x2}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0)

1.872206044s ago: executing program 2 (id=225):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r2=>0x0})
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r0)
sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4804}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)={0x70, r5, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x70}, 0x1, 0x0, 0x0, 0x8050}, 0x40000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r4, 0x0, 0x200000000000006}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
rt_sigpending(0x0, 0x0)
r6 = syz_genetlink_get_family_id$nfc(&(0x7f00000004c0), r0)
sendmsg$NFC_CMD_GET_SE(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, r6, 0x600, 0x70bd2b, 0xe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20000044)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100fffffffffedbdf251700000008000300", @ANYRES32=r2, @ANYBLOB="3000308014000400403a050c7a0100009f8f90f800000000100001800400038008000100000000000500"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x0)

1.872001205s ago: executing program 3 (id=226):
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8458, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x7, 0xf2f}, 0x4002, 0x10000, 0x2, 0x4, 0x6, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unshare(0xa000200)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.swap.current\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f00000007c0), 0x4)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0)
ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000080)={0xf, 0x7, 0x8, 0x401, "aaf8ab5928bd313826bd8f2ff33db56d4b4327a97eaa21fcd71a5e53527d92d0"})
semtimedop(0x0, &(0x7f0000000000)=[{0x2, 0x40, 0x1800}], 0x1, 0x0)
unshare(0x30000000)
unshare(0x20060400)
unshare(0x40000)

1.871883335s ago: executing program 0 (id=227):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b00000"], 0x0, 0x2000005, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$search(0xa, r1, &(0x7f0000000100)='keyring\x00', &(0x7f0000000200)={'syz', 0x1}, r1)

1.816194s ago: executing program 3 (id=228):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xd, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r3}, 0x10)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan1\x00', <r7=>0x0})
connect$can_bcm(r6, &(0x7f0000000300)={0x1d, r7}, 0x10)
sendmsg$can_bcm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0)
sendmsg$can_bcm(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x20008850}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r10, {0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)
close(0x4)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r12, 0x0, 0x2}, 0x18)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
r14 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="05072bbd7000ffdbdf250100000018000180140002006c6f00000000000000000000000000001800028014000180080001803e0000000800010000000000040003"], 0x48}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0)

1.815113341s ago: executing program 0 (id=229):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
connect(0xffffffffffffffff, &(0x7f00000006c0)=@qipcrtr={0x2a, 0xffffffffffffffff, 0x7fff}, 0x80)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={r0, <r1=>0xffffffffffffffff}, 0x4)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={r1, <r2=>0xffffffffffffffff}, 0x4)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={r2}, 0xffffffffffffff94)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="2c0000001a00010028bd7000fcdbdf250a808000000000000000000006001c004e24000008001900", @ANYRES32=0x0, @ANYBLOB="76ebdbffffffffffffffff61d42ac2405ed2027b3c826d847f0c6e7d7199c8d6304fcaf3bb6d4437a4717e1287357ef3c48f3328a5078b18bad14c78059709d109a986624e0bac651dbd56304214"], 0x2c}}, 0x20000050)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r3, @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000005c0)='siox_set_data\x00', r4}, 0x18)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a80)={r0, 0x58, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r6=>0x0}}, 0x10)
r7 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x0)
read$watch_queue(r7, &(0x7f0000000300)=""/176, 0xb0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000b00)={0x81, <r8=>0x0}, 0x8)
r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b40)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x12, 0xc, &(0x7f0000000880)=@raw=[@jmp={0x5, 0x1, 0x9, 0xa, 0x6, 0x40, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa814}, @map_idx={0x18, 0xd, 0x5, 0x0, 0xb}, @call={0x85, 0x0, 0x0, 0x58}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @call={0x85, 0x0, 0x0, 0xd4}], &(0x7f0000000800)='GPL\x00', 0x5, 0xd4, &(0x7f0000000900)=""/212, 0x40f00, 0x18, '\x00', r6, @cgroup_sock_addr=0x2e, r7, 0x8, &(0x7f0000000ac0)={0x2, 0x4}, 0x8, 0x10, 0x0, 0x0, r8, 0xffffffffffffffff, 0x0, &(0x7f0000000bc0)=[r9, r2, r2, r3, r0], 0x0, 0x10, 0x9}, 0x94)
r10 = socket$inet_udplite(0x2, 0x2, 0x88)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_buf(r11, 0x6, 0x21, &(0x7f0000000740)=""/3, &(0x7f0000000780)=0x3)
setsockopt$IPT_SO_SET_REPLACE(r10, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x398, 0x128, 0x0, 0x148, 0x128, 0x148, 0x300, 0x240, 0x240, 0x300, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'bond_slave_1\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x9e4b, 0x8000, 0x0, 0x0, 0xed, 0x7}, {0x4}}}, @common=@unspec=@connmark={{0x30}, {0xfffffffc, 0x8}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0xa, 0x3, 0x8, 0x1}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00'}}, @common=@unspec=@state={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@empty, 'veth0_virt_wifi\x00', {0x9}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f8)
r12 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r12, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56)
r13 = socket$netlink(0x10, 0x3, 0x4)
write(r13, &(0x7f00000000c0)="29000000140005b7ff000051915f95eb01010003a606a40e07fff024bb000000000000000040000000", 0x29)
fremovexattr(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="1fd40000000000012e2700"])

1.806965831s ago: executing program 4 (id=230):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
recvfrom$inet6(r0, &(0x7f00000001c0)=""/52, 0x34, 0x102, &(0x7f0000000200)={0xa, 0x4e23, 0x33, @private2, 0x1}, 0x1c)
r1 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4)
bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3e3}, {&(0x7f00000003c0)="847839fc378469d5765bd74a8532b82037b02c9e", 0x14}], 0x3}, 0x0)
setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4)
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1c255, &(0x7f0000000000)={[{@journal_dev={'journal_dev', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x1}}, {@jqfmt_vfsold}, {@barrier}, {@quota}, {@norecovery}, {@debug}, {@min_batch_time={'min_batch_time', 0x3d, 0x15}}]}, 0x1, 0x61e, &(0x7f0000000600)="$eJzs3c9rG9kdAPDvjGzXTtw6KSU0oaWGHhIo8Y80NP1xSXJpDoEGmkMpPcTEdmoiJyZ2oEkDdaCHFloopddScuk/0HsJvfZWCrt72/NCdlmyu4fdJVpmpEm0smQrivXDns8HRn7zZqT3vho/zXszGk0ApTWbPaQRJyPiRhIx07RsOuoLZxvrPf/w0c1sSqJW+/kHSSSNvGL9F42/R7OHJGIyIv53OeLrlZ3lbj54eHupWqv7XcT81vrG/OaDh2fX1pdurdxaubN47ofnLyz8aPH84r7EWcR15erPvvXn3//6B6v/r55N4mJcH//tcrTEsV9mYzZeNEJszh+LiAtZos37ctAUISRDrge9qTT+H8cj4kTMRCWfq5uJtT8NtXJAX9UqETWgpBLtH0qq6AcUY/t+jINH2bNL9QHQzvjH6sdGYjIfGx15njSNjOrj3WP7UH5WxuePTv09m6LDcYixfSink+3HEfHNdvEned2O5UdxsvjTSJuel6UXImKi8V6kPZY/2zI/6P+/14m/eTtk8V5s/M3yL/dY/rDjB6Ccnl5q7Mi3s7lX+7+sZ1j0f6JN/2e6zb6rF8Pe/3Xu/xX7+8n8GHna0g/L+jzX2r/keGvGu3+88tdO5Tf3/7IpK7/oCw7Cs8cRp1ri/0PemUtebv+kzfbPVrnRZRk/fev9K52WDTv+2pOI023HP6/OaGWp+a31jSKv5fzk/OpadWWh/ti2jH//91f/7FT+sOPPtn90iH+37Z/lbXRZxr+uPVnvtGx6z/jT9yaS63lqopHzm6WtrXuLERPJ1cYqTfnndq9LsU7xGln8Z77bvv3vEn++obe7jH/jF7ef11M7z5J2vf13fKrkXtS6rEMnWfzLPW7/v3RZxie/vP/tlqypIrFb/FM7Xyrp9j0HAAAAAACAMkrzc7BJOvcynaZzc/VreL8RR9Lq3c2t763evX9nOeJM/n3I8bQ40z1Tn0+y+cXG92GL+XMt89+PiOMR8bfKVD4/d/NudXnYwQMAAAAAAAAAAAAAAAAAAMCIONq4/r+4T/VHlfr1/13ZOtHn2gF9188bzAGjTfuH8srbf693cAUONPt/KC/tH8pL+4fy0v6hvHpr/w4YwmFg/w/lpf1DeWn/AAAAAHAoHf/O03eSiNj+8VQ+ZSYay8aHWjOg316/jc/2pR7A4FUG+jRglLw89e/bvFA6Wf//45/ssdKnjR8HHFCdgMFK2mXmnYPa7o3/adtnfsnEG9YNAAAAAAAAAAAAAKg7fdL1/1BWafxn2FUAhuQNLuT3GwBwwPnpfygvY3xgr6v4Jzst6OL6/zrDBQAAAAAAAAAAAAB4U9P5lKRzjVuATkeazs1FfDUijsV4srpWXVmIiK9FxNuV8a9k84vDrjQAAAAAAAAAAAAAAAAAAAAcMpsPHt5eqlZX7jUnPtuRc7gTxV1QR6U+zYlIBl/oVESMQuz9SYw15SQR29mWH4mK3duMkahGmldjyB9MAAAAAAAAAAAAAAAAAABQQk3XHrd36h8DrhEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADN6r+//3nkj2eJ1hxwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHExfBAAA//+zhTpj")
mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000003c000180060001000a000000080005000300e5ff0b00070000000000000000000800090043000000090006006e6f6e6500000000080008"], 0x50}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00'})
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0)
r5 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000002c0)={'team0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000b00)=@newqdisc={0x54, 0x24, 0xf0b, 0x0, 0xfffffffe, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xa, 0x7f, 0xfff, 0x1, 0x2, 0xffff7a09}}, {0x4}}]}]}, 0x54}}, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r7, 0x0, 0x2}, 0x18)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'})

1.774459784s ago: executing program 2 (id=231):
r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x2044c0, 0x0)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000040)={0x89, 0x3, '\x00', [@hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @ra={0x5, 0x2, 0x2}, @padn={0x1, 0x1, [0x0]}]}, 0x28)
vmsplice(r0, &(0x7f0000001580)=[{&(0x7f0000000080)="b7a261d2766276f4e9c967", 0xb}, {&(0x7f00000000c0)="5f43e1a9a520213ee19e90be5b034660f435299394baee77df80ea5c82635c1b00ac8e8339d977e7f795f0892244d050e3054fe662d979bea63a5f7ed9579340034fdd4729c751777d2af0b7a06add798554c938c17a4c7eb32c29901649bda1", 0x60}, {&(0x7f0000000140)="5138bea4fbf5945a9fc6e3604c0b9ae2ba9c13f840e7c44273fbd6fa434e0f9e", 0x20}, {&(0x7f0000000180)="7fa8bec584a113f3a3247a733b46236ce26ba3f41a315046af18efad2f2d0801a316d994757aab4bfabd2ada1081b78fdbe7dab420fa299a023f6b12193eb55f685ed5214ab37ef40f89ddc293fd0cf5ab80164bdee0050e5ef425245471674c824143ac6b6fa20227c910bbd1e214acf457b1c8b3ef114c8b01beb638eceb0a808795b6b76ffefe92991adfc23e563d7bdf", 0x92}, {&(0x7f0000000240)="bb00347812ee90bff1fab2261d4968a5c9b1ab206d10ea56be6b7996805e18ee5d128032075fe0d2d8a5a166e96bc1c2b33dd0ee0bfe2b15dcf06362ee7d6147d7f17e5526f943b482569acb1b7bf7da7a598047a92e255c655a395b3df1412cd2bbd73691cdb1d195649b32f8f5855db69269a1f21664d961bdf9073edf96d2df3a878dcb5a9c5a49b3b7ea1214eac3bf4ae464d450dbee1a0adb43c0ad3a1b6fe26d1e58c045", 0xa7}, {&(0x7f0000000300)="9cee45ad7a5ad1faf59c0c6a8501bbac6007983a30ec0e85ee5f089e7f43253c1463810f102c3f728224448d36d2bb7a16724d4dad3d5d3a0e6c2e53a38133b1dd86d0b33a05edbd64953a49d59c70c7542857352618df42b0138a8bfc1db612adf048566334fdb027e273bb838b09d005e75448fc5e56e5841e27c9d1e1ecbdc5beef1f80fa75e11792d912178333ab1b03dcdd558a293f24304d4fdfd4bbfc11a2448d0e20a3da38df4a5c22d6483c4411aa9c65545ddeb59c4756bda9953fd22052d3e1cb4f168b281a961d97336fde59d9335404360d26a9a4", 0xdb}, {&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000001400)="2cddca1137ee8e8d3d0e5914a7433ebd468eec95c657c5f2e8d229171e19fa74c789978fa34812cafe2d271ac7f65b2151c7718bedb82eda53a90ea4a71f6b3cab64d78704c7c6f4229bc76f3c93ab1820629eb1727e9e0208c29f6eee2d69cd3c1b86bf39", 0x65}, {&(0x7f0000001480)="573f42e4a1881da3adfb4230e5325961e03db7614015f6c946b761d6af1a1dcbf08d91050d3fab92230cd41d8afdabb9f0ffc0e53ab6636a5c9732735c38777e6396415cdf669f2170fa9f5889df835380188bf04bede80dd11f7bc77bc9912ceca4e4829a690880b50a86b3cf203b6600777a20b821fd9ba50fce734cbc3ae7a86a9eb38101602fff25a24d2c503d8d3174ef9e67fbf0d6830af479070d0e57c6833ecfcbd376287edad36e0afafcfbb9145f095c857f7cde568b980da152c731b753bb979d8a91a954e8aa71", 0xcd}], 0x9, 0x4)
pipe(&(0x7f0000001640)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000001680)=0x3)
openat$tun(0xffffffffffffff9c, &(0x7f00000016c0), 0x2c002, 0x0)
sendmmsg$inet6(r2, &(0x7f0000001b00)=[{{&(0x7f0000001700)={0xa, 0x4e21, 0x23, @private0, 0x9}, 0x1c, &(0x7f00000019c0)=[{&(0x7f0000001740)="8484d7a3aa8f62281ab7bcf45bc09479d2e13949c35a3f977752d0cbc2f59e7b85e673019ca9134f95188a0cac362b59c19c194a4506a2c947557d9b0e76f2fd88800f40f50a309fa3baf737e4412a2cc03de0505e2d94f326c4732c4a23074eec5b3d64db7d2a67b41c4163a49158dc2bc45aa6718ef9b37e485b", 0x7b}, {&(0x7f00000017c0)="47af6a5cc73eb2d12780749a087fc557adc38b6fb1b95522f7188aa1ce3d8ba6c5eb83034e4240e84df44c82105f40fdcc426b0db47ca6973432818a2194bf4a4614192ff8d47fad3781857b0300a56a52731e9da64298b1b15f020041579ef51752b285999278e4d4a0f646dc84c1ec9013cd793f5c892d2343efc96fd0d6be42b82d3c1e025aa8919c6ea9223fedb5ac60520b889f699eb2fdef8af44fa073e0f7178353", 0xa5}, {&(0x7f0000001880)="620137e541fe349032ba01451ff07a6901529279ba132950e4269bf2824ba3a7e6df81a8959291d7bca95e5f2f295ec1fabd30a9c736e376643701ddc8ddfb181d94b30bfe2990b4809e815fb775dc59e0c0a810fba703c601537c834d392ac50f113e6f9448d2be77662a31d791cfdfbecc65f7357188460cb74a3e3ed2f5bb226f92ab59f03b264bd4b9f6500b7c2790b793000412bf70fdf2e4b93a05b933c9a92120f21d8595cd5009923605e3d674babf5447d677cee82d468da7a13f936bc6be0c5d", 0xc5}, {&(0x7f0000001980)="d36dde4a933be53f168cf4b2dd7a0f5395e5fc77eb8fb3fd7745", 0x1a}], 0x4, &(0x7f0000001a00)=[@rthdr={{0x58, 0x29, 0x39, {0x0, 0x8, 0x0, 0xf8, 0x0, [@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x44}, @dev={0xfe, 0x80, '\x00', 0x3f}]}}}, @rthdr={{0x88, 0x29, 0x39, {0x16, 0xe, 0x2, 0x2, 0x0, [@dev={0xfe, 0x80, '\x00', 0x15}, @empty, @private2, @mcast1, @mcast1, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1c}}], 0xf8}}], 0x1, 0x40000)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001b80)={0x0, <r3=>0x0}, &(0x7f0000001bc0)=0xc)
quotactl$Q_QUOTAON(0x0, &(0x7f0000001b40)=@nullb, r3, &(0x7f0000001c00)='./file0\x00')
recvmmsg$unix(r0, &(0x7f0000005540)=[{{&(0x7f0000001c40)=@abs, 0x6e, &(0x7f0000002d00)=[{&(0x7f0000001cc0)=""/64, 0x40}, {&(0x7f0000001d00)=""/4096, 0x1000}], 0x2, &(0x7f0000002d40)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, <r4=>0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [<r5=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r6=>0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [<r7=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r8=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd8}}, {{0x0, 0x0, &(0x7f0000005380)=[{&(0x7f0000002e40)=""/92, 0x5c}, {&(0x7f0000002ec0)=""/178, 0xb2}, {&(0x7f0000002f80)=""/205, 0xcd}, {&(0x7f0000003080)=""/4096, 0x1000}, {&(0x7f0000004080)=""/137, 0x89}, {&(0x7f0000004140)=""/51, 0x33}, {&(0x7f0000004180)=""/164, 0xa4}, {&(0x7f0000004240)=""/116, 0x74}, {&(0x7f00000042c0)=""/4096, 0x1000}, {&(0x7f00000052c0)=""/136, 0x88}], 0xa, &(0x7f0000005440)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r12=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xe0}}], 0x2, 0xa1, &(0x7f00000055c0)={0x77359400})
ioctl$SG_GET_REQUEST_TABLE(r7, 0x2286, &(0x7f0000005600))
socket$inet(0x2, 0x0, 0x80)
r13 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$AUTOFS_IOC_CATATONIC(r13, 0x9362, 0x0)
r14 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r14, &(0x7f0000005780)="d577e9ad5ec51b499fd95a882037b6ec5565e5af2a795688d89c266da557d29496957146af38d421", 0x28)
mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r10, 0x230ec000)
fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f00000057c0), &(0x7f0000005800)='system_u:object_r:dpkg_var_lib_t:s0\x00', 0x24, 0x2)
getsockname$packet(r6, &(0x7f0000005840)={0x11, 0x0, <r15=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000005880)=0x14)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r9, 0xc018937d, &(0x7f00000058c0)={{0x1, 0x1, 0x18, <r16=>r8, {0x2}}, './file0\x00'})
bpf$MAP_CREATE(0x0, &(0x7f0000005900)=@bloom_filter={0x1e, 0x0, 0x3, 0x7, 0x44094, r12, 0x81, '\x00', r15, r16, 0x5, 0x0, 0x3, 0x7}, 0x50)
rmdir(&(0x7f0000005980)='./file0\x00')
socket$igmp6(0xa, 0x3, 0x2)
setsockopt$inet6_IPV6_PKTINFO(r5, 0x29, 0x32, &(0x7f00000059c0)={@mcast1, r15}, 0x14)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000005a00)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xfff, '\x00', r15, 0xffffffffffffffff, 0x3}, 0x50)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000005a80)={0x3, 0x4, 0x4, 0xa, 0x0, r4, 0x2, '\x00', r15, r5, 0x0, 0x0, 0x1}, 0x50)
io_setup(0x5, &(0x7f0000005b00))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000005b40))
setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000005b80)=r0, 0x4)
ioctl$FIOCLEX(r11, 0x5451)

1.622042049s ago: executing program 2 (id=233):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000280)={@initdev, @local, <r4=>0x0}, &(0x7f00000002c0)=0xc)
sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x24, r3, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2dbad05dd5", 0x1c, 0xfffffffffffffffd)
symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00')
r5 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
perf_event_open(0x0, 0x0, 0xfffffffff7ffffff, 0xffffffffffffffff, 0x0)
r7 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0)
write$selinux_validatetrans(r7, &(0x7f0000001cc0)=ANY=[], 0x79)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r6, 0x0, 0x401}, 0x11)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='trusted.overlay.upper\x00')

1.621738339s ago: executing program 2 (id=234):
r0 = syz_open_dev$loop(&(0x7f0000000680), 0x9, 0x103480)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x5, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a01000000000b0000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00000014000800000000000000007f"}})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0)
pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00')
r3 = inotify_init()
inotify_add_watch(r3, &(0x7f0000000000)='./file1\x00', 0x16000f57)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x806eca3beeba2824, 0x18, &(0x7f00000004c0)=ANY=[@ANYRESHEX=0x0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000400)='syzkaller\x00', 0x1739b7cd, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r4, 0x0, 0x5}, 0x3c)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x1, 0xa}, 0x1184c, 0x9, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000091041e000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xcd1d, 0x10100}, &(0x7f0000000000), &(0x7f0000000080))
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r6}, 0x18)
r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$KDFONTOP_GET(r7, 0x4b72, &(0x7f00000002c0)={0x1, 0x0, 0x6, 0x19, 0xe1, &(0x7f00000010c0)})
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x53b, &(0x7f0000000b80)="$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")
quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0xee00, 0x0)
socket(0x28, 0x6, 0x6)

1.41239705s ago: executing program 1 (id=237):
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00')
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
open(&(0x7f0000000040)='./file0\x00', 0x200800, 0x8)

1.394862532s ago: executing program 1 (id=239):
bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001480)=@base={0x6, 0x4, 0x8, 0x8}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r0}, 0x18)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000004100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50)

1.31640489s ago: executing program 1 (id=240):
r0 = syz_init_net_socket$llc(0x1a, 0x0, 0x0)
setsockopt$llc_int(r0, 0x10c, 0x6, &(0x7f00000000c0)=0x8000001, 0x4)

1.240314387s ago: executing program 1 (id=241):
syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3f7, &(0x7f00000004c0)="$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") (async)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1a1)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0xd2f0, 0x2000, 0x8, 0xadea}) (async)
rename(&(0x7f0000000000)='./file0/file1\x00', &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080))
getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)=@known='trusted.overlay.nlink\x00', 0x0, 0x0)

1.20997697s ago: executing program 1 (id=242):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0)
recvmsg$unix(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
socket$inet6_tcp(0xa, 0x1, 0x0)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f00000700"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r5, @ANYBLOB], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r6}, 0x10)
unshare(0x62040200)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newsa={0x1b0, 0x1a, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x2}, {@in=@local, 0x0, 0x33}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, {0x0, 0x0, 0xffffffffffffffff}, {0xffffffff}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x60}, [@algo_auth={0xc0, 0x1, {{'sha1\x00'}, 0x3c0, "c1fc1176d858b905a1db4ff6cb8fc1f08589966e6e99a74a5f55ad725a1fe0dac791824a72fb9792a0f47d88e0dea44b765bb9c761ab943014be9e1e175df8adf35ac57e0121ada0c1320d3ef5a6b590b9ba9fff4a2475f0fa2502ec8fe225a6745191fe376e10b191eeb65be657050dddd68d5e0ea4c83a"}}]}, 0x1b0}}, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0x42, 0x4, 0x348, 0xffffffff, 0x1b8, 0x0, 0x1b8, 0xffffffff, 0xffffffff, 0x2b0, 0x2b0, 0x2b0, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x7000000, 0x0, 0x3, 0x0, 0xf}}, @common=@unspec=@connmark={{0x30}, {0x5}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x0, 0x1}, 0x0, 0xb8, 0xf8, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0xf, 0x2}}, @common=@socket0={{0x20}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a8)

1.075916373s ago: executing program 2 (id=243):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x144044, &(0x7f00000012c0), 0xfe, 0x24c, &(0x7f0000000e40)="$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")
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x40000, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x0, 0xffff, 0x400000, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2000000a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0x840, 0xaa)
r2 = openat(r1, &(0x7f0000000240)='./file1\x00', 0x109942, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x143042, 0xf0)
truncate(0x0, 0x2)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000005c0))
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0))
pwrite64(0xffffffffffffffff, &(0x7f0000000080)="cc", 0x1, 0x200980)
r3 = syz_usb_connect$cdc_ecm(0x5, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x9, 0x10, 0x4, [{{0x9, 0x4, 0x0, 0x7c, 0x2, 0x2, 0x6, 0x0, 0x2, {{0x5}, {0x5, 0x24, 0x0, 0x1000}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x6, 0x1, 0x1}, [@acm={0x4, 0x24, 0x2, 0xc}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x1, 0x3, 0x2}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x8, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x24, 0x0, 0xff}}}}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0x6, 0x2a, 0xf, 0x20}, 0x8a, &(0x7f0000000ac0)=ANY=[@ANYBLOB="050f8a0005141004051339c0dd3db7f9f7822a4b5705ffcb4b1410040cfede9d70e4387ece6c6b55ba7ec556734c10047d7fe682aa6c2e5c8bf170a4c237cc5fc795667bfe66b012373e4fd73fafdf8e4dc66df0c90a0fb1aa1cd227aadef1116333d4637b7520b36f1d1434f47d4a62d024f8d5338a0771670a10030201005c030300071002149201803e3c0463dda30c57587787e1a9a8f9d7f9d4f0bdb2a130f204a80161efbb984c8e7d11457789ccfbe111b79592774dfe91742a7d75c76f19bc1ec27ef3017fcb357e62c25558ac04c6f90f73054544745b9b58b6dd"], 0x3, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x2c0a}}, {0x101, &(0x7f0000000800)=@string={0x101, 0x3, "05e2107a0cdbeb6ae6976088101c1511928feb370d42ad364fc6744cacfdf72d49b32400468592ef8fd7fffc0463c1b2a9fdebb280d4b083610305bd2bc56049ee1a022fb2dbb250503d6993d5e5679c54a338ff30f6ebcae65b4c9d5e9dd31030998402e9b5bbc0fa196a951aa3f8ea31a45483e11c8dbcd09a169050b1de4ab76a6636825625063ee72bb4e6451f7dad387e0bbb23f667aabfad8fd63d89acd10150f6ff0a26da5f19ab0c31ebb8bac5fdc2f29f9b244cf3e1b03d2e1cff0a33f87ed6f9167249b90f308cfec241144f92afd33647472c01f1bea457154ad0f8cf7da9d3366f33db9488f20b63b4c13457dd53704ee55953b2e91f2f5692"}}, {0xfa, &(0x7f0000000300)=@string={0xfa, 0x3, "929aed9b7f090bd0c66f66b3dd2df9022a031c68fcc1c07086e1aca6b42245dfcf0f4b2003767af8661c18583595d11f94af8bd7e64142480b4c4a5b53c8cf7799a4ba0a7f6620528878804b9369b38f1be3f4196a58ba1e9f718b9a2794ce0284be0ded45fa5411afb298292eec35b8e71e2d80338aeae3df29df755c0e7778ffa34609f94dfb3e74dcd48fb65856a04169529175c757ccb5aa0e35e891e7f85b49721dede9d40a0494d608d4f7a7481211937dbd59a01789a9a1cff138946a2d485a1ae9a36736dde1a8664b90ad75fdbc7cc1df77169b21fda28479e0ae5a4439b246aedd1329fcf42e54faaf871d4417c4ff7a428d3e"}}]})
syz_usb_ep_write(r3, 0x6, 0xc3, &(0x7f00000009c0)="28d4c95a7907220733634b10da6965bb8b6f2125867b72054aa3d78be32156f1f1d6c75ab2f32cf15a87e9e22fca5c02683985c9a5d7ca587a213e0bcee4c64b03aaff81f0a108cb242fef377cb0983c7712320de2fe7f3ee8463350767a2d9bf7cf5f0001b9422fbc869d2db7800610c66c443c0b6fa1beacaac573e21136ff6cb11c100a8ae7e742eb921f59fa29f8d453ca6afc53b96a393c1e7dd05a86521d1ba3e1b331eaa29b11ab898cc9e72952343d0449367168a267e6396e7ca932c8cc54")
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
pwrite64(r4, &(0x7f00000001c0)="32c4576ba7d9ff1b8eefdc9aa302b8433c1613734d9e1686735bfa0618878dad359571cdeb08340f8cf8de7bfe3b4634f178dd52fd190d3eadc6c44e3e7b63333b98a8190000000000005fa825ae4ba805c5ff2f1fc7e3d3ab43f2a52325a0704d617dee894d", 0x66, 0xe7c)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1005c, '\x00', 0x0, @fallback=0x36}, 0x94)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000040c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r5, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xae, 0x2000000, 0x0, 0x0}}, 0x10)
ioctl$EXT4_IOC_MIGRATE(r2, 0x6609)

628.336538ms ago: executing program 4 (id=244):
bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001480)=@base={0x6, 0x4, 0x8, 0x8}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r0}, 0x18)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000004100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) (fail_nth: 3)

625.356478ms ago: executing program 0 (id=245):
r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x8, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c000000020601000000000600000000000000000e0003006269746d61703a69700000000500040000ffed000900020073797a3200000000240007800c00028008000140ffffffff0c0001800800014080ffffff050014000200000005000500020000000500010006"], 0x6c}, 0x1, 0x0, 0x0, 0x6040001}, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0x20, &(0x7f00000008c0)={&(0x7f0000000840)=""/91, 0x5b, <r2=>0x0, &(0x7f0000000080)}}, 0x10)
r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000940)=r2, 0x4)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYRESDEC=r2, @ANYBLOB="897de2ef64ec5273e9e29dc768287793dc7bfc1f7f007e2729550bc68c9b9dedbebab09084f280694daef89b8ac15e2476dc0744ecfab99379e2e744279676cf9afc86a8014a9ace9de9d292f89cfc04c16cad1afebcbf5795fce6164cd45d5a5c7a546f6ad63d189038d81d5817026d64188f9bfe3ad3a2c7b5887a7755999925313a965546290f882274ac95571ae643ef35324b6eec3b81849152b3e9855e6eabbc27e6338b1ce984797c79a1d49c15a58f15da0244928e4e5dd9b0ad6f"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5b36a6a}, 0x40)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000400)='kmem_cache_free\x00', r4}, 0x18)
syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRESHEX], 0x2, 0x699, &(0x7f0000000140)="$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")
write$binfmt_script(r0, &(0x7f00000003c0)={'#! ', './file0'}, 0xb)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

610.768429ms ago: executing program 3 (id=246):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000040fcc310000800000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r1}, 0x10)
syz_io_uring_setup(0x42ca, &(0x7f0000000300)={0x0, 0x125a, 0x40, 0x0, 0x16f}, &(0x7f0000000040), &(0x7f00000002c0))

525.053748ms ago: executing program 3 (id=247):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x1b, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0xfe, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xfffd}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e)

304.20059ms ago: executing program 4 (id=248):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00'}, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB], 0x548}}, 0x8000)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, 0x4, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0xc000)
r3 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2082)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$SG_IO(r4, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0})

303.78851ms ago: executing program 0 (id=249):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
io_uring_setup(0x1b77, &(0x7f0000000040)={0x0, 0x60c9, 0xc000, 0x2, 0x2a5})
sendmsg(0xffffffffffffffff, 0x0, 0x4000845)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
r0 = syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f0000000440)='./file2\x00', 0x0, &(0x7f0000000480), 0x1, 0x3da, &(0x7f00000004c0)="$eJzs3N1qHFUcAPD/TPNh0+pGrV5owUgRgx/5aEpssKCCl15ZX2BN0hLdNrZZwZZcKIh9APUBxMv6CF6Id4LgTfHaO6VQJMm1rMxmdjNudmO+ltHu7wcHzpnZ4Zz/zOyek3MOCWBgTUTEpxExEhEfREQlP57kKd7cTtnntjbWF7OURKNx+c+keX5zY30xCtdkTuWFyTQi/TyJZ7vUu3br9ofVWm35Zl6erl/7aHrt1u1XV65Vry5fXb4+N7OwMDN3cX5h/thi/T3u/Hbp3tuVL38+9+uP7787n7X3dH6uGMdxmYiJ9j3pNHXclZXskUI+GSqxIRxIGhEnImKo+f2vxInYeXiV+L5SauMAgL5oNN7oKAMAD79Enw8AA6b1d//mxvpiK5UxD1GWB29tL15t5mubW+34h9orIcMd61vHaSIivvv6teeyFH1ahwQAKPohG/9c7Db+S+Ns4XMnI2Is39t1OiIejYjHCvvFDmuio7x7/JPeP2IVe8rGf5cKe9u2CvHnxk/kpSzm8RhOrqzUlmfy+CdjeDQrz+5Rx9nLT//V61xx/JelrP7WWDBvx/2h0X9es1StV48Sc9GDzyKeGeoWf9Ie/ybNuA/v9Rt3n+p17t/j76/GNxEvdn3+Ozv3kr33J04334fp1lux252XXrjRq/6y48+e/9je8Y8nxf2aawev46cLK7/0OnfY938kea+ZH8mPfVKt12/ORowk7+w+fn7n2la59fks/slz3b//Z2LnTjweEU9ExJMRzeM9X+guXql9+/zh4++vLP6lAz3/g2fGvrh7r1f9+3v+F5q5yfzIfn7/9tvAo9w7AAAA+L9Im/O5STrVzqfp1NT2PO+ZGEtrq2v1l6+sfnx9aXvedzyG09ZMV6UwHzqbzxG2yuc7ynP5HMpXoyeb5anF1dpS2cEDwIA61aP/z/wxWnbrAIC+6dfmdgDgv0v/DwCDR/8PAINH/w8Ag0f/DwCDR/8PAAPlKP/XT0ZG5mHNlP3LBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQrr8DAAD//3JA1T8=")
socket$inet(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000180)=ANY=[@ANYRESDEC=r2, @ANYRES32=r0, @ANYRESOCT, @ANYRESDEC=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r3}, 0x10)
r4 = getpgid(0xffffffffffffffff)
ptrace$pokeuser(0x6, r4, 0x9, 0x101)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'bridge0\x00', <r7=>0x0})
syslog(0x2, &(0x7f00000002c0)=""/182, 0xb6)
pidfd_getfd(0xffffffffffffffff, r3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r7, @ANYBLOB="4000aa000a0002"], 0x28}}, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x80)
pwritev2(r8, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfe}], 0x1, 0x5405, 0x0, 0x0)
sendfile(r8, r8, 0x0, 0x7a680000)
r9 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet_sctp(r9, &(0x7f0000000c80)=[{&(0x7f00000006c0)=@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000700)="04", 0x1}], 0x1, 0x0, 0x0, 0x4000}], 0x1, 0x10)
getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={<r10=>0x0}, &(0x7f0000000000)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r9, 0x84, 0x22, &(0x7f0000000380)={0xfbff, 0x0, 0x8000003, 0x3, r10}, 0x10)
socket$inet(0x2, 0x7, 0x6)

300.54951ms ago: executing program 4 (id=250):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x7, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000006c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f0000000100)=0x8, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f00000000c0)={0x1c8f, 0x2, 0xfe7, 0x800, 0xff, "62839fed715b147007210f86952d5056d6c405", 0x3, 0x8})
timer_delete(0x0)

26.956227ms ago: executing program 1 (id=251):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x143042, 0xf0)
truncate(0x0, 0x2)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0))
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0))
pwrite64(0xffffffffffffffff, &(0x7f0000000080)="cc", 0x1, 0x200980)
r1 = syz_usb_connect$cdc_ecm(0x5, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x9, 0x10, 0x4, [{{0x9, 0x4, 0x0, 0x7c, 0x2, 0x2, 0x6, 0x0, 0x2, {{0x5}, {0x5, 0x24, 0x0, 0x1000}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x6, 0x1, 0x1}, [@acm={0x4, 0x24, 0x2, 0xc}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x1, 0x3, 0x2}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x8, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x24, 0x0, 0xff}}}}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0x6, 0x2a, 0xf, 0x20}, 0x8a, &(0x7f0000000180)={0x5, 0xf, 0x8a, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x5, "1339c0dd3db7f9f7822a4b5705ffcb4b"}, @ss_container_id={0x14, 0x10, 0x4, 0xc, "fede9d70e4387ece6c6b55ba7ec55673"}, @generic={0x4c, 0x10, 0x4, "7d7fe682aa6c2e5c8bf170a4c237cc5fc795667bfe66b012373e4fd73fafdf8e4dc66df0c90a0fb1aa1cd227aadef1116333d4637b7520b36f1d1434f47d4a62d024f8d5338a077167"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x5c, 0x3, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x2, 0x9, 0x8001}]}, 0x3, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x2c0a}}, {0x101, &(0x7f0000000800)=@string={0x101, 0x3, "05e2107a0cdbeb6ae6976088101c1511928feb370d42ad364fc6744cacfdf72d49b32400468592ef8fd7fffc0463c1b2a9fdebb280d4b083610305bd2bc56049ee1a022fb2dbb250503d6993d5e5679c54a338ff30f6ebcae65b4c9d5e9dd31030998402e9b5bbc0fa196a951aa3f8ea31a45483e11c8dbcd09a169050b1de4ab76a6636825625063ee72bb4e6451f7dad387e0bbb23f667aabfad8fd63d89acd10150f6ff0a26da5f19ab0c31ebb8bac5fdc2f29f9b244cf3e1b03d2e1cff0a33f87ed6f9167249b90f308cfec241144f92afd33647472c01f1bea457154ad0f8cf7da9d3366f33db9488f20b63b4c13457dd53704ee55953b2e91f2f5692"}}, {0xfa, &(0x7f0000000300)=@string={0xfa, 0x3, "929aed9b7f090bd0c66f66b3dd2df9022a031c68fcc1c07086e1aca6b42245dfcf0f4b2003767af8661c18583595d11f94af8bd7e64142480b4c4a5b53c8cf7799a4ba0a7f6620528878804b9369b38f1be3f4196a58ba1e9f718b9a2794ce0284be0ded45fa5411afb298292eec35b8e71e2d80338aeae3df29df755c0e7778ffa34609f94dfb3e74dcd48fb65856a04169529175c757ccb5aa0e35e891e7f85b49721dede9d40a0494d608d4f7a7481211937dbd59a01789a9a1cff138946a2d485a1ae9a36736dde1a8664b90ad75fdbc7cc1df77169b21fda28479e0ae5a4439b246aedd1329fcf42e54faaf871d4417c4ff7a428d3e"}}]})
syz_usb_ep_write(r1, 0x6, 0xc3, &(0x7f00000009c0)="28d4c95a7907220733634b10da6965bb8b6f2125867b72054aa3d78be32156f1f1d6c75ab2f32cf15a87e9e22fca5c02683985c9a5d7ca587a213e0bcee4c64b03aaff81f0a108cb242fef377cb0983c7712320de2fe7f3ee8463350767a2d9bf7cf5f0001b9422fbc869d2db7800610c66c443c0b6fa1beacaac573e21136ff6cb11c100a8ae7e742eb921f59fa29f8d453ca6afc53b96a393c1e7dd05a86521d1ba3e1b331eaa29b11ab898cc9e72952343d0449367168a267e6396e7ca932c8cc54")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xe7c)
ioctl$EXT4_IOC_MIGRATE(r0, 0x6609)

0s ago: executing program 4 (id=252):
syz_mount_image$vfat(&(0x7f0000000880), &(0x7f0000003200)='./file2\x00', 0x4204, &(0x7f0000003240)=ANY=[], 0x3, 0x335, &(0x7f0000000a40)="$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")
r0 = open(&(0x7f0000000340)='./file1\x00', 0x1c5902, 0x128)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x28011, r0, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) (async)
sync_file_range(r0, 0x6, 0x10200000000000, 0x2) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) (async)
prctl$PR_SET_NAME(0xf, 0x0) (async)
r2 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) (async)
r3 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e98caa52dd9239af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) (async)
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f0000000e40)='./file2\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x774, &(0x7f0000001180)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/Nvix9OIajLz3eAYB/tNcjYhUA6DGJ9h8Aekz+O8DNleVyPnX3F4m9df25iNi/Fn9+fXNtSX92zW5/8zro0M3krisjSUSM7ED5oxHx8ZevfppOsUvXIQHaeeNyRJwdGV1//k/WjVnYqic2WLYvex29Z77zH+ydr9L+z9Pt+n+F2/2faNP/GWxz7G7HfY//AztQyAbS/t+zLWPbbrXEnxnpy3L/avb5BpJz56uV9Nz274gYi4HBND+xQRljN/680WlZa//v1/df+yQtP329s0bhp/7Bu98zVWqUHiTmVtcvRzzS3y7+5Pb2Tzr0f09vsowXn3n7o07L0vjTePNpffyxNgZxl6xeiXis7fa/M6It2XB84nhzdxjPd4o2vvjhw6FO5bdu/3RKy8+/C+yFdPsPbRz/SNI6XrO+9TK+uzL8dadl94+//f6/L3mlmc77EZdKjcb8RMS+5KX184/deW+ez9dP4x97tP3xv9H+n34nPLvJ+Puv/fzZ9uPfXWn8U1va/ltPXL0109ep/M1t/8lmaiybs5nz32Yr+CCfHQAAAAAAAAAAAAAAAAAAAAAAAABsViEiDkVSKN5OFwrF4tozvP8bQ4Vqrd44cq62MDcVzWdlj8RAIb/V5XDL/VAnsvvh5/lj9+SfjIj/RMQHgweS/D6KU12OHQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAByBzs8/z/142C3awcA7Jr93a4AALDntP8A0Hu0/wDQe7T/ANB7tP8A0Hu0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOyy06dOpdPq7yvL5TQ/dXFxYaZ28ehUpT5TnF0oF8u1+QvF6Vptuloplmuz9/t/1VrtwmTMLVwab1TqjfH64tKZ2drCXOPM+dnSdOVMZWBPogIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACArakvLs2UqtXKvMQ2EqsPRzW6n+jLdqeHpT57mkgejmrscKLLJyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAv4m/AgAA///vwiL7") (async)
r4 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000340)={0x0, "6035ae734de721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138", 0x38}, 0x48, 0xfffffffffffffffe)
keyctl$KEYCTL_MOVE(0x4, r4, r3, 0x0, 0x0) (async)
keyctl$KEYCTL_MOVE(0x4, r2, r2, 0x0, 0x0)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000004c0)='kfree\x00', r6, 0x0, 0x4ab}, 0x18)
close(r5) (async)
io_uring_setup(0x1b53, &(0x7f0000000080)={0x0, 0x4004073, 0x418, 0x1, 0x2})

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.80' (ED25519) to the list of known hosts.
[   27.987725][   T29] audit: type=1400 audit(1760432443.095:62): avc:  denied  { mounton } for  pid=3301 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   28.011374][   T29] audit: type=1400 audit(1760432443.125:63): avc:  denied  { mount } for  pid=3301 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   28.012362][ T3301] cgroup: Unknown subsys name 'net'
[   28.039164][   T29] audit: type=1400 audit(1760432443.155:64): avc:  denied  { unmount } for  pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   28.219216][ T3301] cgroup: Unknown subsys name 'cpuset'
[   28.225448][ T3301] cgroup: Unknown subsys name 'rlimit'
[   28.337675][   T29] audit: type=1400 audit(1760432443.445:65): avc:  denied  { setattr } for  pid=3301 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   28.368063][   T29] audit: type=1400 audit(1760432443.455:66): avc:  denied  { create } for  pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   28.388590][   T29] audit: type=1400 audit(1760432443.455:67): avc:  denied  { write } for  pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   28.396023][ T3305] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   28.408974][   T29] audit: type=1400 audit(1760432443.455:68): avc:  denied  { read } for  pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[   28.437786][   T29] audit: type=1400 audit(1760432443.465:69): avc:  denied  { mounton } for  pid=3301 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   28.458611][ T3301] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   28.462676][   T29] audit: type=1400 audit(1760432443.465:70): avc:  denied  { mount } for  pid=3301 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   28.494855][   T29] audit: type=1400 audit(1760432443.525:71): avc:  denied  { relabelto } for  pid=3305 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   29.857747][ T3312] chnl_net:caif_netlink_parms(): no params data found
[   29.932020][ T3313] chnl_net:caif_netlink_parms(): no params data found
[   29.945207][ T3321] chnl_net:caif_netlink_parms(): no params data found
[   29.972041][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.979212][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.986422][ T3312] bridge_slave_0: entered allmulticast mode
[   29.992852][ T3312] bridge_slave_0: entered promiscuous mode
[   30.020110][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.027323][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.034655][ T3312] bridge_slave_1: entered allmulticast mode
[   30.041167][ T3312] bridge_slave_1: entered promiscuous mode
[   30.047529][ T3325] chnl_net:caif_netlink_parms(): no params data found
[   30.061751][ T3315] chnl_net:caif_netlink_parms(): no params data found
[   30.106445][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   30.135957][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.161927][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.169148][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.176299][ T3321] bridge_slave_0: entered allmulticast mode
[   30.182821][ T3321] bridge_slave_0: entered promiscuous mode
[   30.201193][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.208338][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.215503][ T3313] bridge_slave_0: entered allmulticast mode
[   30.221980][ T3313] bridge_slave_0: entered promiscuous mode
[   30.228636][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.235819][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.243027][ T3313] bridge_slave_1: entered allmulticast mode
[   30.249572][ T3313] bridge_slave_1: entered promiscuous mode
[   30.255909][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.263048][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.270326][ T3321] bridge_slave_1: entered allmulticast mode
[   30.276718][ T3321] bridge_slave_1: entered promiscuous mode
[   30.286123][ T3312] team0: Port device team_slave_0 added
[   30.317064][ T3312] team0: Port device team_slave_1 added
[   30.323010][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.330098][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.337422][ T3315] bridge_slave_0: entered allmulticast mode
[   30.343891][ T3315] bridge_slave_0: entered promiscuous mode
[   30.374719][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.382036][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.389323][ T3315] bridge_slave_1: entered allmulticast mode
[   30.395770][ T3315] bridge_slave_1: entered promiscuous mode
[   30.403225][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   30.413482][ T3321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   30.422750][ T3325] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.429909][ T3325] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.437078][ T3325] bridge_slave_0: entered allmulticast mode
[   30.443483][ T3325] bridge_slave_0: entered promiscuous mode
[   30.450246][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.457205][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.483134][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.499957][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.515056][ T3321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.524259][ T3325] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.531458][ T3325] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.538680][ T3325] bridge_slave_1: entered allmulticast mode
[   30.545176][ T3325] bridge_slave_1: entered promiscuous mode
[   30.551640][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.558681][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.584617][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.601385][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   30.633577][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.648630][ T3313] team0: Port device team_slave_0 added
[   30.661133][ T3325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   30.675689][ T3313] team0: Port device team_slave_1 added
[   30.687213][ T3321] team0: Port device team_slave_0 added
[   30.694396][ T3321] team0: Port device team_slave_1 added
[   30.700932][ T3325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.715306][ T3315] team0: Port device team_slave_0 added
[   30.751253][ T3315] team0: Port device team_slave_1 added
[   30.757364][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.764381][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.790343][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.803118][ T3312] hsr_slave_0: entered promiscuous mode
[   30.809207][ T3312] hsr_slave_1: entered promiscuous mode
[   30.815772][ T3325] team0: Port device team_slave_0 added
[   30.827374][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.834373][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.860385][ T3321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.876466][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.883464][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.909413][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.921173][ T3325] team0: Port device team_slave_1 added
[   30.927239][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.934254][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.960158][ T3321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   31.000232][ T3325] batman_adv: batadv0: Adding interface: batadv_slave_0
[   31.007228][ T3325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   31.033211][ T3325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   31.044206][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0
[   31.051200][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   31.077514][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   31.100322][ T3325] batman_adv: batadv0: Adding interface: batadv_slave_1
[   31.107293][ T3325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   31.133299][ T3325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   31.144434][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1
[   31.151437][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   31.177366][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   31.203397][ T3313] hsr_slave_0: entered promiscuous mode
[   31.209559][ T3313] hsr_slave_1: entered promiscuous mode
[   31.215544][ T3313] debugfs: 'hsr0' already exists in 'hsr'
[   31.221353][ T3313] Cannot create hsr debugfs directory
[   31.246940][ T3321] hsr_slave_0: entered promiscuous mode
[   31.253189][ T3321] hsr_slave_1: entered promiscuous mode
[   31.259070][ T3321] debugfs: 'hsr0' already exists in 'hsr'
[   31.264824][ T3321] Cannot create hsr debugfs directory
[   31.306576][ T3325] hsr_slave_0: entered promiscuous mode
[   31.312722][ T3325] hsr_slave_1: entered promiscuous mode
[   31.318750][ T3325] debugfs: 'hsr0' already exists in 'hsr'
[   31.324475][ T3325] Cannot create hsr debugfs directory
[   31.355611][ T3315] hsr_slave_0: entered promiscuous mode
[   31.361663][ T3315] hsr_slave_1: entered promiscuous mode
[   31.367494][ T3315] debugfs: 'hsr0' already exists in 'hsr'
[   31.373245][ T3315] Cannot create hsr debugfs directory
[   31.499846][ T3312] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   31.517929][ T3312] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   31.541628][ T3312] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   31.557326][ T3312] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   31.584938][ T3313] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   31.594386][ T3313] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   31.603443][ T3313] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   31.612277][ T3313] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   31.651757][ T3321] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   31.665447][ T3321] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   31.681103][ T3321] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   31.692329][ T3321] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   31.727373][ T3325] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   31.736081][ T3325] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   31.746425][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0
[   31.760140][ T3325] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   31.769281][ T3325] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   31.795896][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0
[   31.805600][ T3312] 8021q: adding VLAN 0 to HW filter on device team0
[   31.817643][ T3315] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   31.826936][ T3315] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   31.836121][ T3315] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   31.850728][ T3315] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   31.860456][ T1918] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.867535][ T1918] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.885779][ T3313] 8021q: adding VLAN 0 to HW filter on device team0
[   31.895861][ T1918] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.902993][ T1918] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.917948][ T1918] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.925185][ T1918] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.942159][ T1918] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.949317][ T1918] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.033302][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0
[   32.051702][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0
[   32.077274][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0
[   32.095675][ T3325] 8021q: adding VLAN 0 to HW filter on device bond0
[   32.104716][ T3321] 8021q: adding VLAN 0 to HW filter on device team0
[   32.115290][ T3315] 8021q: adding VLAN 0 to HW filter on device team0
[   32.127780][ T3325] 8021q: adding VLAN 0 to HW filter on device team0
[   32.144755][   T60] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.151875][   T60] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.161184][   T60] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.168403][   T60] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.178496][   T60] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.185581][   T60] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.199436][   T60] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.206541][   T60] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.215709][   T60] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.222889][   T60] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.239373][   T60] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.246642][   T60] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.280106][ T3312] veth0_vlan: entered promiscuous mode
[   32.292630][ T3315] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   32.303356][ T3315] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   32.315497][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0
[   32.334254][ T3312] veth1_vlan: entered promiscuous mode
[   32.385050][ T3312] veth0_macvtap: entered promiscuous mode
[   32.402857][ T3312] veth1_macvtap: entered promiscuous mode
[   32.417047][ T3325] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   32.461771][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0
[   32.481457][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0
[   32.490277][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0
[   32.508426][ T3325] 8021q: adding VLAN 0 to HW filter on device batadv0
[   32.517250][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1
[   32.551143][ T1918] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   32.562303][ T3313] veth0_vlan: entered promiscuous mode
[   32.592016][ T1918] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   32.602057][ T3313] veth1_vlan: entered promiscuous mode
[   32.625073][ T1918] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   32.663381][ T3313] veth0_macvtap: entered promiscuous mode
[   32.689162][ T3313] veth1_macvtap: entered promiscuous mode
[   32.696757][ T3312] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   32.715987][ T1918] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   32.744538][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0
[   32.754202][ T3315] veth0_vlan: entered promiscuous mode
[   32.771494][ T3325] veth0_vlan: entered promiscuous mode
[   32.783829][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1
[   32.796372][ T3325] veth1_vlan: entered promiscuous mode
[   32.809760][ T3315] veth1_vlan: entered promiscuous mode
[   32.827714][   T60] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   32.843314][   T60] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   32.862508][   T60] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   32.880664][ T3315] veth0_macvtap: entered promiscuous mode
[   32.887795][   T60] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   32.898225][ T3315] veth1_macvtap: entered promiscuous mode
[   32.917244][ T3484] loop1: detected capacity change from 0 to 512
[   32.928154][ T3321] veth0_vlan: entered promiscuous mode
[   32.946542][ T3325] veth0_macvtap: entered promiscuous mode
[   32.961112][ T3484] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   32.961513][ T3325] veth1_macvtap: entered promiscuous mode
[   32.989989][ T3321] veth1_vlan: entered promiscuous mode
[   32.992050][ T3484] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   32.995649][   T29] kauditd_printk_skb: 33 callbacks suppressed
[   32.995666][   T29] audit: type=1400 audit(1760432448.105:105): avc:  denied  { mount } for  pid=3483 comm="syz.1.7" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   33.019505][ T3321] veth0_macvtap: entered promiscuous mode
[   33.043217][ T3484] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   33.045842][ T3490] loop3: detected capacity change from 0 to 512
[   33.056718][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0
[   33.086717][ T3325] batman_adv: batadv0: Interface activated: batadv_slave_0
[   33.094841][ T3321] veth1_macvtap: entered promiscuous mode
[   33.106142][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1
[   33.116101][ T3325] batman_adv: batadv0: Interface activated: batadv_slave_1
[   33.126902][ T3490] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   33.129927][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0
[   33.160883][  T415] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   33.172178][ T3490] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   33.180757][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1
[   33.242824][  T415] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   33.275341][  T415] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   33.305016][  T415] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   33.327604][   T60] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   33.363731][   T29] audit: type=1400 audit(1760432448.475:106): avc:  denied  { load_policy } for  pid=3483 comm="syz.1.7" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[   33.367028][ T3493] SELinux: failed to load policy
[   33.399345][   T60] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   33.408210][   T60] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   33.430277][ T3494] SELinux:  policydb magic number 0x118 does not match expected magic number 0xf97cff8c
[   33.449386][ T3494] SELinux: failed to load policy
[   33.471807][ T3501] netlink: 'syz.2.3': attribute type 30 has an invalid length.
[   33.503776][ T3504] loop4: detected capacity change from 0 to 512
[   33.511358][   T60] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   33.520481][   T29] audit: type=1400 audit(1760432448.575:107): avc:  denied  { ioctl } for  pid=3489 comm="syz.3.4" path="socket:[4815]" dev="sockfs" ino=4815 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   33.544921][   T29] audit: type=1400 audit(1760432448.575:108): avc:  denied  { getopt } for  pid=3489 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   33.564255][   T29] audit: type=1400 audit(1760432448.585:109): avc:  denied  { setattr } for  pid=3489 comm="syz.3.4" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   33.564463][ T3501] Zero length message leads to an empty skb
[   33.595218][   T60] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   33.606304][ T3503] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'.
[   33.615405][   T60] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   33.629186][ T3503] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'.
[   33.651992][   T60] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   33.662514][ T3501] syz.2.3 (3501) used greatest stack depth: 10536 bytes left
[   33.671162][ T3503] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1'.
[   33.680656][ T3503] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1'.
[   33.691020][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   33.718590][   T60] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   33.729989][   T29] audit: type=1400 audit(1760432448.715:110): avc:  denied  { write } for  pid=3500 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   33.751487][ T3504] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   33.776732][ T3511] loop0: detected capacity change from 0 to 512
[   33.779431][ T3504] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   33.834598][ T3511] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   33.848656][ T3511] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   33.853015][   T29] audit: type=1400 audit(1760432448.945:111): avc:  denied  { read write } for  pid=3512 comm="syz.1.8" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[   33.882787][   T29] audit: type=1400 audit(1760432448.945:112): avc:  denied  { open } for  pid=3512 comm="syz.1.8" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[   33.889724][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   33.906453][   T29] audit: type=1400 audit(1760432448.945:113): avc:  denied  { ioctl } for  pid=3512 comm="syz.1.8" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[   34.023243][ T3518] SELinux:  policydb magic number 0x118 does not match expected magic number 0xf97cff8c
[   34.033253][   T29] audit: type=1400 audit(1760432449.145:114): avc:  denied  { append } for  pid=3520 comm="syz.3.11" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   34.081764][ T3518] SELinux: failed to load policy
[   34.099758][ T3524] loop1: detected capacity change from 0 to 512
[   34.123253][ T3519] SELinux: failed to load policy
[   34.144537][ T3524] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   34.167023][ T3525] loop3: detected capacity change from 0 to 2048
[   34.185365][ T3517] loop2: detected capacity change from 0 to 8192
[   34.199035][ T3517] msdos: Bad value for 'uid'
[   34.203714][ T3517] msdos: Bad value for 'uid'
[   34.216012][ T3525] ext4: Unknown parameter 'subj_user'
[   34.229502][ T3524] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.13: couldn't read orphan inode 26 (err -116)
[   34.249251][ T3524] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   34.309792][ T3524] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   34.368113][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   34.394395][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   34.412497][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   34.458938][    C0] hrtimer: interrupt took 46710 ns
[   34.462282][ T3530] syzkaller0: entered promiscuous mode
[   34.469606][ T3530] syzkaller0: entered allmulticast mode
[   34.494749][ T3538] loop1: detected capacity change from 0 to 512
[   34.538719][ T3538] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   34.579372][ T3538] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   34.606611][ T3534] loop0: detected capacity change from 0 to 512
[   34.654813][ T3534] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002]
[   34.667612][ T3534] System zones: 0-2, 18-18, 34-34
[   34.675003][ T3534] EXT4-fs error (device loop0): ext4_init_orphan_info:581: comm syz.0.17: inode #0: comm syz.0.17: iget: illegal inode #
[   34.690030][ T3534] EXT4-fs (loop0): Remounting filesystem read-only
[   34.697347][ T3534] EXT4-fs (loop0): get orphan inode failed
[   34.705851][ T3534] EXT4-fs (loop0): mount failed
[   34.760735][ T3549] loop4: detected capacity change from 0 to 512
[   34.795894][ T3544] SELinux: failed to load policy
[   34.812674][ T3549] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm gtp: couldn't read orphan inode 26 (err -116)
[   34.829240][ T3549] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   34.844685][ T3549] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   34.911962][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   34.922824][ T3557] loop0: detected capacity change from 0 to 512
[   34.983611][ T3557] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   35.007037][ T3562] syzkaller0: entered promiscuous mode
[   35.012635][ T3562] syzkaller0: entered allmulticast mode
[   35.084942][ T3567] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   35.106143][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.286344][ T3570] loop0: detected capacity change from 0 to 128
[   35.358738][ T3570] =======================================================
[   35.358738][ T3570] WARNING: The mand mount option has been deprecated and
[   35.358738][ T3570]          and is ignored by this kernel. Remove the mand
[   35.358738][ T3570]          option from the mount to silence this warning.
[   35.358738][ T3570] =======================================================
[   35.418811][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.630214][ T3576] loop1: detected capacity change from 0 to 128
[   35.659222][ T3578] FAULT_INJECTION: forcing a failure.
[   35.659222][ T3578] name failslab, interval 1, probability 0, space 0, times 1
[   35.672010][ T3578] CPU: 1 UID: 0 PID: 3578 Comm: syz.0.27 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   35.672039][ T3578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   35.672056][ T3578] Call Trace:
[   35.672064][ T3578]  <TASK>
[   35.672075][ T3578]  __dump_stack+0x1d/0x30
[   35.672103][ T3578]  dump_stack_lvl+0xe8/0x140
[   35.672175][ T3578]  dump_stack+0x15/0x1b
[   35.672198][ T3578]  should_fail_ex+0x265/0x280
[   35.672243][ T3578]  should_failslab+0x8c/0xb0
[   35.672357][ T3578]  kmem_cache_alloc_node_noprof+0x57/0x4a0
[   35.672394][ T3578]  ? alloc_vmap_area+0x236/0xe80
[   35.672433][ T3578]  alloc_vmap_area+0x236/0xe80
[   35.672468][ T3578]  ? selinux_file_open+0x2df/0x330
[   35.672537][ T3578]  ? should_failslab+0x8c/0xb0
[   35.672572][ T3578]  ? __kmalloc_cache_node_noprof+0x2b2/0x4a0
[   35.672605][ T3578]  __get_vm_area_node+0x173/0x1d0
[   35.672645][ T3578]  __vmalloc_node_range_noprof+0x28c/0xed0
[   35.672692][ T3578]  ? sel_write_load+0x158/0x380
[   35.672734][ T3578]  ? _parse_integer+0x27/0x40
[   35.672845][ T3578]  ? sel_write_load+0x158/0x380
[   35.672886][ T3578]  vmalloc_noprof+0x82/0xc0
[   35.672942][ T3578]  ? sel_write_load+0x158/0x380
[   35.672984][ T3578]  sel_write_load+0x158/0x380
[   35.673025][ T3578]  ? __pfx_sel_write_load+0x10/0x10
[   35.673147][ T3578]  vfs_write+0x269/0x960
[   35.673239][ T3578]  ? __rcu_read_unlock+0x4f/0x70
[   35.673272][ T3578]  ? __fget_files+0x184/0x1c0
[   35.673313][ T3578]  ksys_write+0xda/0x1a0
[   35.673343][ T3578]  __x64_sys_write+0x40/0x50
[   35.673446][ T3578]  x64_sys_call+0x2802/0x3000
[   35.673471][ T3578]  do_syscall_64+0xd2/0x200
[   35.673648][ T3578]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   35.673753][ T3578]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   35.673781][ T3578]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   35.673805][ T3578] RIP: 0033:0x7f53095ceec9
[   35.673824][ T3578] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   35.673896][ T3578] RSP: 002b:00007f5308016038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   35.673917][ T3578] RAX: ffffffffffffffda RBX: 00007f5309826090 RCX: 00007f53095ceec9
[   35.673930][ T3578] RDX: 00000000000190da RSI: 0000200000000000 RDI: 0000000000000007
[   35.673943][ T3578] RBP: 00007f5308016090 R08: 0000000000000000 R09: 0000000000000000
[   35.673955][ T3578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   35.673967][ T3578] R13: 00007f5309826128 R14: 00007f5309826090 R15: 00007ffec26ec858
[   35.673986][ T3578]  </TASK>
[   35.923065][ T3578] syz.0.27: vmalloc error: size 102618, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0
[   35.937200][ T3578] CPU: 1 UID: 0 PID: 3578 Comm: syz.0.27 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   35.937259][ T3578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   35.937272][ T3578] Call Trace:
[   35.937293][ T3578]  <TASK>
[   35.937333][ T3578]  __dump_stack+0x1d/0x30
[   35.937360][ T3578]  dump_stack_lvl+0xe8/0x140
[   35.937379][ T3578]  dump_stack+0x15/0x1b
[   35.937395][ T3578]  warn_alloc+0x12b/0x1a0
[   35.937433][ T3578]  __vmalloc_node_range_noprof+0x2b1/0xed0
[   35.937564][ T3578]  ? _parse_integer+0x27/0x40
[   35.937696][ T3578]  ? sel_write_load+0x158/0x380
[   35.937739][ T3578]  vmalloc_noprof+0x82/0xc0
[   35.937831][ T3578]  ? sel_write_load+0x158/0x380
[   35.937868][ T3578]  sel_write_load+0x158/0x380
[   35.937910][ T3578]  ? __pfx_sel_write_load+0x10/0x10
[   35.938063][ T3578]  vfs_write+0x269/0x960
[   35.938086][ T3578]  ? __rcu_read_unlock+0x4f/0x70
[   35.938196][ T3578]  ? __fget_files+0x184/0x1c0
[   35.938274][ T3578]  ksys_write+0xda/0x1a0
[   35.938316][ T3578]  __x64_sys_write+0x40/0x50
[   35.938403][ T3578]  x64_sys_call+0x2802/0x3000
[   35.938432][ T3578]  do_syscall_64+0xd2/0x200
[   35.938484][ T3578]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   35.938521][ T3578]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   35.938550][ T3578]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   35.938616][ T3578] RIP: 0033:0x7f53095ceec9
[   35.938631][ T3578] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   35.938649][ T3578] RSP: 002b:00007f5308016038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   35.938736][ T3578] RAX: ffffffffffffffda RBX: 00007f5309826090 RCX: 00007f53095ceec9
[   35.938753][ T3578] RDX: 00000000000190da RSI: 0000200000000000 RDI: 0000000000000007
[   35.938765][ T3578] RBP: 00007f5308016090 R08: 0000000000000000 R09: 0000000000000000
[   35.938777][ T3578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   35.938821][ T3578] R13: 00007f5309826128 R14: 00007f5309826090 R15: 00007ffec26ec858
[   35.938843][ T3578]  </TASK>
[   36.142896][ T3578] Mem-Info:
[   36.146024][ T3578] active_anon:12486 inactive_anon:0 isolated_anon:0
[   36.146024][ T3578]  active_file:12469 inactive_file:2244 isolated_file:0
[   36.146024][ T3578]  unevictable:0 dirty:1541 writeback:0
[   36.146024][ T3578]  slab_reclaimable:3127 slab_unreclaimable:13852
[   36.146024][ T3578]  mapped:32786 shmem:6937 pagetables:1061
[   36.146024][ T3578]  sec_pagetables:0 bounce:0
[   36.146024][ T3578]  kernel_misc_reclaimable:0
[   36.146024][ T3578]  free:1890843 free_pcp:8616 free_cma:0
[   36.151901][ T3576] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   36.191717][ T3578] Node 0 active_anon:49944kB inactive_anon:0kB active_file:49992kB inactive_file:8976kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:131144kB dirty:6164kB writeback:0kB shmem:27748kB kernel_stack:3360kB pagetables:4244kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   36.231688][ T3578] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   36.231782][ T3578] lowmem_reserve[]: 0 2883 7862 7862
[   36.231855][ T3578] Node 0 DMA32 free:2949156kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2952688kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:0kB free_cma:0kB
[   36.231925][ T3578] lowmem_reserve[]: 0 0 4978 4978
[   36.232037][ T3578] Node 0 Normal free:4598856kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:49944kB inactive_anon:0kB active_file:49992kB inactive_file:8976kB unevictable:0kB writepending:6104kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:30564kB local_pcp:16588kB free_cma:0kB
[   36.232159][ T3578] lowmem_reserve[]: 0 0 0 0
[   36.232204][ T3578] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   36.232351][ T3578] Node 0 DMA32: 3*4kB (M) 3*8kB (M) 6*16kB (M) 3*32kB (M) 3*64kB (M) 3*128kB (M) 3*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949156kB
[   36.232683][ T3578] Node 0 Normal: 3*4kB (UME) 0*8kB 0*16kB 3*32kB (UME) 0*64kB 1*128kB (U) 3*256kB (UME) 2*512kB (UE) 1*1024kB (M) 0*2048kB 1122*4096kB (UM) = 4598764kB
[   36.232972][ T3578] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB
[   36.232989][ T3578] 21733 total pagecache pages
[   36.233027][ T3578] 0 pages in swap cache
[   36.233033][ T3578] Free swap  = 124996kB
[   36.233076][ T3578] Total swap = 124996kB
[   36.233083][ T3578] 2097051 pages RAM
[   36.233089][ T3578] 0 pages HighMem/MovableOnly
[   36.233095][ T3578] 80479 pages reserved
[   36.234386][ T3576] ext4 filesystem being mounted at /6/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   36.248705][ T3572] tipc: Started in network mode
[   36.248752][ T3572] tipc: Node identity ac14140f, cluster identity 4711
[   36.248978][ T3572] tipc: New replicast peer: 255.255.255.83
[   36.249038][ T3572] tipc: Enabled bearer <udp:�>, priority 10
[   36.311299][ T3584] loop2: detected capacity change from 0 to 128
[   36.324471][ T3584] SELinux:  Context � is not valid (left unmapped).
[   36.342919][ T3312] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   36.460255][ T3591] loop0: detected capacity change from 0 to 512
[   36.472618][ T3591] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   36.655396][ T3591] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   36.753568][ T3602] 9pnet_fd: Insufficient options for proto=fd
[   36.839553][ T3608] loop3: detected capacity change from 0 to 1024
[   36.847336][ T3589] infiniband syz!: set active
[   36.852088][ T3589] infiniband syz!: added team_slave_0
[   36.865293][ T3608] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   36.877524][ T3608] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   36.918582][ T3603] SELinux: failed to load policy
[   36.991949][ T3613] netlink: 'syz.1.38': attribute type 1 has an invalid length.
[   37.051456][ T3617] netlink: 12 bytes leftover after parsing attributes in process `syz.1.38'.
[   37.082174][ T3589] RDS/IB: syz!: added
[   37.118535][ T3617] bridge0: port 2(bridge_slave_1) entered disabled state
[   37.145707][ T3619] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.36: bg 0: block 393: padding at end of block bitmap is not set
[   37.183998][ T3617] bridge_slave_1 (unregistering): left allmulticast mode
[   37.191104][ T3617] bridge_slave_1 (unregistering): left promiscuous mode
[   37.198086][ T3617] bridge0: port 2(bridge_slave_1) entered disabled state
[   37.210952][ T3584] syz.2.29 (3584) used greatest stack depth: 10160 bytes left
[   37.212447][ T3619] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 444 with max blocks 492 with error 117
[   37.231469][ T3619] EXT4-fs (loop3): This should not happen!! Data will be lost
[   37.231469][ T3619] 
[   37.257029][ T3619] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 936 with max blocks 4 with error 117
[   37.269626][ T3619] EXT4-fs (loop3): This should not happen!! Data will be lost
[   37.269626][ T3619] 
[   37.281929][ T1819] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 28
[   37.294541][ T1819] EXT4-fs (loop3): This should not happen!! Data will be lost
[   37.294541][ T1819] 
[   37.304632][ T1819] EXT4-fs (loop3): Total free blocks count 0
[   37.311193][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.320419][ T1819] EXT4-fs (loop3): Free/Dirty block details
[   37.326329][ T1819] EXT4-fs (loop3): free_blocks=0
[   37.379049][   T23] tipc: Node number set to 2886997007
[   37.554857][ T3635] loop1: detected capacity change from 0 to 1024
[   37.685613][ T3635] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[   37.818481][ T3635] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   37.856443][ T3635] team_slave_0: entered promiscuous mode
[   37.862176][ T3635] team_slave_1: entered promiscuous mode
[   37.870154][ T3635] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   37.890370][ T3635] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: block 3: comm syz.1.43: lblock 3 mapped to illegal pblock 3 (length 3)
[   37.909537][ T3635] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[   37.921958][ T3635] EXT4-fs (loop1): This should not happen!! Data will be lost
[   37.921958][ T3635] 
[   37.955050][   T60] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: block 8: comm kworker/u8:4: lblock 8 mapped to illegal pblock 8 (length 8)
[   37.969886][   T60] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[   37.982247][   T60] EXT4-fs (loop1): This should not happen!! Data will be lost
[   37.982247][   T60] 
[   37.994212][ T3649] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=47 sclass=netlink_audit_socket pid=3649 comm=syz.0.48
[   38.003495][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[   38.006657][   T29] kauditd_printk_skb: 120 callbacks suppressed
[   38.006673][   T29] audit: type=1400 audit(1760432453.105:235): avc:  denied  { read } for  pid=3648 comm="syz.0.48" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   38.006704][   T29] audit: type=1400 audit(1760432453.105:236): avc:  denied  { open } for  pid=3648 comm="syz.0.48" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   38.006938][ T3649] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3649 comm=syz.0.48
[   38.078994][   T29] audit: type=1400 audit(1760432453.175:237): avc:  denied  { getopt } for  pid=3643 comm="syz.3.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   38.121921][   T29] audit: type=1400 audit(1760432453.225:238): avc:  denied  { write } for  pid=3651 comm="syz.1.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   38.141936][   T29] audit: type=1400 audit(1760432453.225:239): avc:  denied  { nlmsg_write } for  pid=3651 comm="syz.1.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   38.250405][   T29] audit: type=1400 audit(1760432453.355:240): avc:  denied  { create } for  pid=3655 comm="syz.0.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[   38.270120][   T29] audit: type=1400 audit(1760432453.365:241): avc:  denied  { bind } for  pid=3655 comm="syz.0.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[   38.292943][ T3656] loop0: detected capacity change from 0 to 512
[   38.329356][ T3656] EXT4-fs (loop0): VFS: Found ext4 filesystem with invalid superblock checksum.  Run e2fsck?
[   38.343265][ T3550] udevd[3550]: incorrect ext4 checksum on /dev/loop0
[   38.357443][ T3550] udevd[3550]: incorrect ext4 checksum on /dev/loop0
[   38.370899][ T3659] netlink: 8 bytes leftover after parsing attributes in process `syz.1.52'.
[   38.385848][   T29] audit: type=1400 audit(1760432453.495:242): avc:  denied  { unmount } for  pid=3325 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[   38.407044][ T3656] delete_channel: no stack
[   38.584408][   T29] audit: type=1400 audit(1760432453.675:243): avc:  denied  { setopt } for  pid=3666 comm="syz.1.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   38.609042][ T3667] netlink: 'syz.1.55': attribute type 2 has an invalid length.
[   38.611783][   T29] audit: type=1400 audit(1760432453.715:244): avc:  denied  { bind } for  pid=3666 comm="syz.1.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   38.616629][ T3667] netlink: 'syz.1.55': attribute type 8 has an invalid length.
[   38.616646][ T3667] netlink: 132 bytes leftover after parsing attributes in process `syz.1.55'.
[   38.679784][ T3671] netlink: 24 bytes leftover after parsing attributes in process `syz.1.56'.
[   38.711434][ T3671] netlink: 4 bytes leftover after parsing attributes in process `syz.1.56'.
[   38.803505][ T3683] netlink: 4 bytes leftover after parsing attributes in process `syz.2.53'.
[   38.812364][ T3683] netlink: 4 bytes leftover after parsing attributes in process `syz.2.53'.
[   38.830484][ T3683] netlink: 4 bytes leftover after parsing attributes in process `syz.2.53'.
[   38.888948][ T3683] netlink: 4 bytes leftover after parsing attributes in process `syz.2.53'.
[   38.897728][ T3683] netlink: 4 bytes leftover after parsing attributes in process `syz.2.53'.
[   38.915241][ T3683] netlink: 4 bytes leftover after parsing attributes in process `syz.2.53'.
[   38.951174][ T3693] loop1: detected capacity change from 0 to 512
[   38.957878][ T3683] netlink: 4 bytes leftover after parsing attributes in process `syz.2.53'.
[   38.973841][ T3697] loop3: detected capacity change from 0 to 2048
[   38.983363][ T3693] ------------[ cut here ]------------
[   38.988907][ T3693] EA inode 11 i_nlink=2
[   38.989174][ T3693] WARNING: CPU: 0 PID: 3693 at fs/ext4/xattr.c:1058 ext4_xattr_inode_update_ref+0x36a/0x380
[   39.003604][ T3693] Modules linked in:
[   39.007561][ T3693] CPU: 0 UID: 0 PID: 3693 Comm: syz.1.63 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   39.017163][ T3693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   39.027312][ T3693] RIP: 0010:ext4_xattr_inode_update_ref+0x36a/0x380
[   39.033970][ T3693] Code: 90 49 8d 7e 40 e8 66 01 b9 ff 4d 8b 6e 40 4c 89 e7 e8 7a fc b8 ff 41 8b 56 48 48 c7 c7 b2 4d 55 86 4c 89 ee e8 c7 08 68 ff 90 <0f> 0b 90 90 e9 ff fe ff ff e8 08 77 b0 03 0f 1f 84 00 00 00 00 00
[   39.053637][ T3693] RSP: 0018:ffffc90001cff5a0 EFLAGS: 00010246
[   39.059974][ T3693] RAX: 37134caae41a5700 RBX: ffff88810078a010 RCX: 0000000000080000
[   39.067988][ T3693] RDX: ffffc900020a9000 RSI: 0000000000003a2b RDI: 0000000000003a2c
[   39.076286][ T3693] RBP: 0000000000000002 R08: 0001c90001cff427 R09: 0000000000000000
[   39.084311][ T3693] R10: 0001c90001d7f6a0 R11: 0000000000000002 R12: ffff888100789fc0
[   39.092364][ T3693] R13: 000000000000000b R14: ffff888100789f78 R15: 0000000000000001
[   39.100421][ T3693] FS:  00007f565086f6c0(0000) GS:ffff8882aee3a000(0000) knlGS:0000000000000000
[   39.109437][ T3693] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   39.113046][ T3697] EXT4-fs: Invalid journal IO priority (must be 0-7)
[   39.116159][ T3693] CR2: 0000200000002000 CR3: 000000011afe2000 CR4: 00000000003506f0
[   39.130896][ T3693] Call Trace:
[   39.134261][ T3693]  <TASK>
[   39.137215][ T3693]  ext4_xattr_set_entry+0x77f/0x1020
[   39.142748][ T3693]  ext4_xattr_ibody_set+0x184/0x3c0
[   39.148014][ T3693]  ext4_expand_extra_isize_ea+0xcbb/0x11f0
[   39.154042][ T3693]  __ext4_expand_extra_isize+0x246/0x280
[   39.159744][ T3693]  __ext4_mark_inode_dirty+0x29d/0x3f0
[   39.165331][ T3693]  ext4_evict_inode+0x80e/0xd90
[   39.170289][ T3693]  ? __pfx_ext4_evict_inode+0x10/0x10
[   39.175719][ T3693]  evict+0x2e3/0x550
[   39.179776][ T3693]  ? __dquot_initialize+0x146/0x7c0
[   39.185203][ T3693]  iput+0x4ed/0x650
[   39.189093][ T3693]  ext4_process_orphan+0x1a9/0x1c0
[   39.194296][ T3693]  ext4_orphan_cleanup+0x6a8/0xa00
[   39.199482][ T3693]  ext4_fill_super+0x3483/0x3810
[   39.204506][ T3693]  ? snprintf+0x86/0xb0
[   39.208729][ T3693]  ? set_blocksize+0x1a8/0x310
[   39.213532][ T3693]  ? sb_set_blocksize+0xe3/0x100
[   39.218533][ T3693]  ? setup_bdev_super+0x30e/0x370
[   39.223769][ T3693]  ? __pfx_ext4_fill_super+0x10/0x10
[   39.229160][ T3693]  get_tree_bdev_flags+0x291/0x300
[   39.234321][ T3693]  ? __pfx_ext4_fill_super+0x10/0x10
[   39.239751][ T3693]  get_tree_bdev+0x1f/0x30
[   39.244260][ T3693]  ext4_get_tree+0x1c/0x30
[   39.248732][ T3693]  vfs_get_tree+0x57/0x1d0
[   39.253297][ T3693]  do_new_mount+0x24d/0x660
[   39.257835][ T3693]  path_mount+0x4a5/0xb70
[   39.262242][ T3693]  ? user_path_at+0x109/0x130
[   39.267015][ T3693]  __se_sys_mount+0x28c/0x2e0
[   39.271782][ T3693]  __x64_sys_mount+0x67/0x80
[   39.276530][ T3693]  x64_sys_call+0x2b51/0x3000
[   39.281276][ T3693]  do_syscall_64+0xd2/0x200
[   39.285824][ T3693]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   39.292014][ T3693]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   39.297772][ T3693]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   39.303486][ T3711] loop3: detected capacity change from 0 to 512
[   39.303750][ T3693] RIP: 0033:0x7f5651e1066a
[   39.314390][ T3693] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   39.334237][ T3693] RSP: 002b:00007f565086ee68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[   39.342815][ T3693] RAX: ffffffffffffffda RBX: 00007f565086eef0 RCX: 00007f5651e1066a
[   39.350900][ T3693] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f565086eeb0
[   39.358970][ T3693] RBP: 0000200000000180 R08: 00007f565086eef0 R09: 0000000000800718
[   39.366985][ T3693] R10: 0000000000800718 R11: 0000000000000246 R12: 00002000000001c0
[   39.375043][ T3693] R13: 00007f565086eeb0 R14: 0000000000000473 R15: 0000200000000680
[   39.382871][ T3714] loop2: detected capacity change from 0 to 512
[   39.383264][ T3693]  </TASK>
[   39.392552][ T3693] ---[ end trace 0000000000000000 ]---
[   39.404784][ T3693] EXT4-fs (loop1): 1 orphan inode deleted
[   39.412186][ T3714] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   39.412810][ T3693] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   39.429462][ T3711] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   39.437309][ T3714] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   39.462951][ T3711] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   39.499062][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.508913][ T3721] loop0: detected capacity change from 0 to 164
[   39.558608][ T3721] rock: corrupted directory entry. extent=32, offset=0, size=65773
[   39.577944][ T3721] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[   39.579217][ T3724] uprobe: syz.1.70:3724 failed to unregister, leaking uprobe
[   39.613284][ T3724] uprobe: syz.1.70:3724 failed to unregister, leaking uprobe
[   39.626159][ T3725] SELinux:  policydb magic number 0x118 does not match expected magic number 0xf97cff8c
[   39.636276][ T3725] SELinux: failed to load policy
[   39.654996][ T3722] SELinux: failed to load policy
[   39.683148][ T3724] 9pnet: Could not find request transport: f
[   39.809144][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.017316][ T3760] loop0: detected capacity change from 0 to 736
[   40.148294][ T3792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   40.168527][ T3792] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   40.178435][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.229539][ T3796] FAULT_INJECTION: forcing a failure.
[   40.229539][ T3796] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[   40.242829][ T3796] CPU: 1 UID: 0 PID: 3796 Comm: syz.1.83 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[   40.242872][ T3796] Tainted: [W]=WARN
[   40.242952][ T3796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   40.242968][ T3796] Call Trace:
[   40.242975][ T3796]  <TASK>
[   40.243035][ T3796]  __dump_stack+0x1d/0x30
[   40.243097][ T3796]  dump_stack_lvl+0xe8/0x140
[   40.243121][ T3796]  dump_stack+0x15/0x1b
[   40.243143][ T3796]  should_fail_ex+0x265/0x280
[   40.243177][ T3796]  should_fail_alloc_page+0xf2/0x100
[   40.243252][ T3796]  alloc_pages_bulk_noprof+0xef/0x540
[   40.243288][ T3796]  copy_splice_read+0xf3/0x660
[   40.243315][ T3796]  ? __pfx_copy_splice_read+0x10/0x10
[   40.243342][ T3796]  splice_direct_to_actor+0x26f/0x680
[   40.243447][ T3796]  ? __pfx_direct_splice_actor+0x10/0x10
[   40.243472][ T3796]  do_splice_direct+0xda/0x150
[   40.243533][ T3796]  ? __pfx_direct_file_splice_eof+0x10/0x10
[   40.243561][ T3796]  do_sendfile+0x380/0x650
[   40.243597][ T3796]  __x64_sys_sendfile64+0x105/0x150
[   40.243664][ T3796]  x64_sys_call+0x2bb4/0x3000
[   40.243687][ T3796]  do_syscall_64+0xd2/0x200
[   40.243739][ T3796]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   40.243779][ T3796]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   40.243813][ T3796]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   40.243846][ T3796] RIP: 0033:0x7f5651e0eec9
[   40.243869][ T3796] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   40.243939][ T3796] RSP: 002b:00007f565086f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[   40.243958][ T3796] RAX: ffffffffffffffda RBX: 00007f5652065fa0 RCX: 00007f5651e0eec9
[   40.243971][ T3796] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003
[   40.243982][ T3796] RBP: 00007f565086f090 R08: 0000000000000000 R09: 0000000000000000
[   40.244013][ T3796] R10: 0000020000023896 R11: 0000000000000246 R12: 0000000000000002
[   40.244031][ T3796] R13: 00007f5652066038 R14: 00007f5652065fa0 R15: 00007ffdd4f1c948
[   40.244050][ T3796]  </TASK>
[   40.570907][ T3810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   40.579995][ T3810] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   40.734137][ T3833] loop4: detected capacity change from 0 to 512
[   40.744956][ T3833] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   40.758023][ T3833] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   40.854696][ T3836] SELinux: failed to load policy
[   40.913224][ T3838] loop0: detected capacity change from 0 to 512
[   40.933687][ T3838] EXT4-fs (loop0): too many log groups per flexible block group
[   40.942258][ T3838] EXT4-fs (loop0): failed to initialize mballoc (-12)
[   40.950190][ T3838] EXT4-fs (loop0): mount failed
[   40.997046][ T3842] loop0: detected capacity change from 0 to 1024
[   41.007938][ T3842] EXT4-fs: Ignoring removed nobh option
[   41.015577][ T3842] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   41.026800][ T3842] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #11: comm syz.0.95: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[   41.045775][ T3842] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.95: couldn't read orphan inode 11 (err -117)
[   41.058156][ T3842] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   41.072476][ T3842] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.95: Invalid block bitmap block 0 in block_group 0
[   41.086016][ T3842] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.95: Failed to acquire dquot type 0
[   41.100802][ T3842] syz.0.95 (3842) used greatest stack depth: 9800 bytes left
[   41.127223][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.136546][ T3767] EXT4-fs error (device loop0): ext4_release_dquot:6981: comm kworker/u8:15: Failed to release dquot type 0
[   41.244316][ T3858] netlink: 'syz.1.101': attribute type 7 has an invalid length.
[   41.252109][ T3858] netlink: 'syz.1.101': attribute type 8 has an invalid length.
[   41.404471][ T3878] loop3: detected capacity change from 0 to 128
[   41.415248][ T3878] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[   41.423143][ T3878] FAT-fs (loop3): Filesystem has been set read-only
[   41.429919][ T3878] syz.3.109: attempt to access beyond end of device
[   41.429919][ T3878] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128
[   41.464155][ T3880] loop0: detected capacity change from 0 to 512
[   41.471103][ T3880] EXT4-fs: Ignoring removed mblk_io_submit option
[   41.477791][ T3880] EXT4-fs: dax option not supported
[   41.487343][ T3880] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3880 comm=syz.0.110
[   41.499807][ T3880] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3880 comm=syz.0.110
[   41.575250][ T3884] netlink: 'syz.1.112': attribute type 12 has an invalid length.
[   41.585425][ T3884] netlink: 'syz.1.112': attribute type 29 has an invalid length.
[   41.594015][ T3884] netlink: 'syz.1.112': attribute type 2 has an invalid length.
[   41.623189][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.736870][ T3897] 9pnet_fd: Insufficient options for proto=fd
[   41.779101][ T3899] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[   41.813136][ T3901] loop3: detected capacity change from 0 to 1024
[   41.832306][ T3901] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   41.847085][ T3901] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.116: Invalid block bitmap block 0 in block_group 0
[   41.860728][ T3901] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.116: Failed to acquire dquot type 0
[   41.873279][ T3901] EXT4-fs error (device loop3): ext4_free_blocks:6706: comm syz.3.116: Freeing blocks not in datazone - block = 0, count = 4096
[   41.887657][ T3901] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.116: Invalid inode bitmap blk 0 in block_group 0
[   41.900840][ T3901] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem
[   41.914246][ T3781] EXT4-fs error (device loop3): ext4_release_dquot:6981: comm kworker/u8:29: Failed to release dquot type 0
[   41.917729][ T3901] EXT4-fs (loop3): 1 orphan inode deleted
[   41.931924][ T3901] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   42.010226][ T3912] mmap: syz.0.121 (3912) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   42.077829][ T3917] delete_channel: no stack
[   42.083334][ T3917] delete_channel: no stack
[   42.185564][ T3925] pim6reg: entered allmulticast mode
[   42.191834][ T3925] pim6reg: left allmulticast mode
[   42.337558][ T3931] loop0: detected capacity change from 0 to 164
[   42.344367][ T3931] iso9660: Unknown parameter '�ȼZ�map'
[   42.411198][ T3933] hub 5-0:1.0: USB hub found
[   42.416007][ T3933] hub 5-0:1.0: 8 ports detected
[   42.541705][ T3901] syz.3.116 (3901) used greatest stack depth: 9680 bytes left
[   42.602571][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.619758][ T3930] Set syz1 is full, maxelem 65536 reached
[   42.619871][ T3940] SELinux:  Context @�|�0�A��Wi�S��ѱ4��$���Etڍy�gB�E�E�A�2zL���p{c|^;tݾ�HRן臟��g is not valid (left unmapped).
[   42.682538][ T3940] syz.4.132 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   42.713349][ T3952] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[   42.899085][ T3971] rdma_rxe: rxe_newlink: failed to add team_slave_0
[   42.949896][ T3978] syzkaller0: entered promiscuous mode
[   42.955442][ T3978] syzkaller0: entered allmulticast mode
[   43.072040][   T29] kauditd_printk_skb: 307 callbacks suppressed
[   43.072058][   T29] audit: type=1400 audit(1760432458.185:546): avc:  denied  { write } for  pid=3984 comm="syz.4.148" path="socket:[6577]" dev="sockfs" ino=6577 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   43.201373][   T29] audit: type=1400 audit(1760432458.305:547): avc:  denied  { unlink } for  pid=3315 comm="syz-executor" name="file0" dev="tmpfs" ino=227 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   43.281711][   T29] audit: type=1400 audit(1760432458.335:548): avc:  denied  { read write } for  pid=3988 comm="syz.3.149" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   43.304886][   T29] audit: type=1400 audit(1760432458.335:549): avc:  denied  { open } for  pid=3988 comm="syz.3.149" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   43.362364][   T29] audit: type=1400 audit(1760432458.445:550): avc:  denied  { create } for  pid=3998 comm="syz.0.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[   43.384829][   T29] audit: type=1400 audit(1760432458.445:551): avc:  denied  { connect } for  pid=3998 comm="syz.0.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[   43.434018][   T29] audit: type=1400 audit(1760432458.545:552): avc:  denied  { mount } for  pid=4003 comm="syz.0.156" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[   43.528433][   T29] audit: type=1400 audit(1760432458.545:553): avc:  denied  { mounton } for  pid=4003 comm="syz.0.156" path="/41/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1
[   43.550575][   T29] audit: type=1400 audit(1760432458.545:554): avc:  denied  { unmount } for  pid=4003 comm="syz.0.156" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[   43.570366][   T29] audit: type=1400 audit(1760432458.575:555): avc:  denied  { mounton } for  pid=4004 comm="syz.4.157" path="/proc/84/task" dev="proc" ino=5668 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[   43.605123][ T4011] syzkaller0: entered promiscuous mode
[   43.605923][ T4014] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[   43.610678][ T4011] syzkaller0: entered allmulticast mode
[   43.616804][ T4001] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[   43.742590][ T4026] loop0: detected capacity change from 0 to 512
[   43.749787][ T4026] EXT4-fs (loop0): can't mount with both data=journal and delalloc
[   43.793526][ T4024] FAULT_INJECTION: forcing a failure.
[   43.793526][ T4024] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[   43.793956][ T4020] IPVS: set_ctl: invalid protocol: 115 0.0.0.0:20001
[   43.806819][ T4024] CPU: 0 UID: 0 PID: 4024 Comm: syz.3.162 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[   43.806910][ T4024] Tainted: [W]=WARN
[   43.806920][ T4024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   43.806938][ T4024] Call Trace:
[   43.806949][ T4024]  <TASK>
[   43.806960][ T4024]  __dump_stack+0x1d/0x30
[   43.806989][ T4024]  dump_stack_lvl+0xe8/0x140
[   43.807019][ T4024]  dump_stack+0x15/0x1b
[   43.807054][ T4024]  should_fail_ex+0x265/0x280
[   43.807176][ T4024]  should_fail_alloc_page+0xf2/0x100
[   43.807274][ T4024]  __alloc_frozen_pages_noprof+0xff/0x360
[   43.807326][ T4024]  alloc_pages_mpol+0xb3/0x260
[   43.807356][ T4024]  vma_alloc_folio_noprof+0x1aa/0x300
[   43.807441][ T4024]  handle_mm_fault+0xec2/0x2be0
[   43.807473][ T4024]  ? mt_find+0x208/0x320
[   43.807563][ T4024]  do_user_addr_fault+0x3fe/0x1080
[   43.807680][ T4024]  exc_page_fault+0x62/0xa0
[   43.807709][ T4024]  asm_exc_page_fault+0x26/0x30
[   43.807737][ T4024] RIP: 0010:rep_movs_alternative+0x11/0x90
[   43.807784][ T4024] Code: c3 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f 8a 06 <88> 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e 0f 1f
[   43.807832][ T4024] RSP: 0018:ffffc90000e73c30 EFLAGS: 00050206
[   43.807853][ T4024] RAX: ffff888101622b31 RBX: ffff88810c40e000 RCX: 0000000000000006
[   43.807871][ T4024] RDX: 0000000000000000 RSI: ffff88810c40e000 RDI: 0000200000001980
[   43.807889][ T4024] RBP: 0000200000001980 R08: 0000000000000736 R09: 0000000000000000
[   43.807907][ T4024] R10: 000188810c40e000 R11: 000188810c40e005 R12: 0000200000001986
[   43.807937][ T4024] R13: ffffc90000e73e08 R14: 0000000000000006 R15: 00007ffffffff000
[   43.807964][ T4024]  _copy_to_iter+0x141/0xe70
[   43.808006][ T4024]  ? kobj_attr_show+0x42/0x60
[   43.808047][ T4024]  ? __pfx_kobj_attr_show+0x10/0x10
[   43.808144][ T4024]  ? sysfs_kf_seq_show+0x20c/0x280
[   43.808179][ T4024]  ? kernfs_put_active+0x36/0x70
[   43.808221][ T4024]  seq_read_iter+0x776/0x950
[   43.808273][ T4024]  kernfs_fop_read_iter+0xc1/0x330
[   43.808332][ T4024]  ? __pfx_kernfs_fop_read_iter+0x10/0x10
[   43.808388][ T4024]  vfs_read+0x64c/0x770
[   43.808420][ T4024]  ? __pfx_kernfs_fop_read_iter+0x10/0x10
[   43.808543][ T4024]  ksys_read+0xda/0x1a0
[   43.808577][ T4024]  __x64_sys_read+0x40/0x50
[   43.808644][ T4024]  x64_sys_call+0x27c0/0x3000
[   43.808676][ T4024]  do_syscall_64+0xd2/0x200
[   43.808709][ T4024]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   43.808819][ T4024]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   43.808851][ T4024]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   43.808881][ T4024] RIP: 0033:0x7f85071aeec9
[   43.808901][ T4024] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   43.809050][ T4024] RSP: 002b:00007f8505c17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   43.809118][ T4024] RAX: ffffffffffffffda RBX: 00007f8507405fa0 RCX: 00007f85071aeec9
[   43.809136][ T4024] RDX: 00000000000000b3 RSI: 0000200000001980 RDI: 0000000000000004
[   43.809153][ T4024] RBP: 00007f8505c17090 R08: 0000000000000000 R09: 0000000000000000
[   43.809170][ T4024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   43.809188][ T4024] R13: 00007f8507406038 R14: 00007f8507405fa0 R15: 00007ffece4dfba8
[   43.809214][ T4024]  </TASK>
[   43.842519][ T4005] loop4: detected capacity change from 0 to 32768
[   43.880295][ T4022] infiniband !yz!: set active
[   44.006708][ T4036] IPv6: Can't replace route, no match found
[   44.009990][ T4022] infiniband !yz!: added team_slave_0
[   44.175802][ T4022] RDS/IB: !yz!: added
[   44.191420][ T3550]  loop4: p1 p3 < >
[   44.207366][ T4005]  loop4: p1 p3 < >
[   44.358973][ T4048] ALSA: seq fatal error: cannot create timer (-19)
[   44.396682][ T3550] udevd[3550]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[   44.413476][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[   44.450126][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[   44.460822][ T3550] udevd[3550]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[   44.508741][ T4055] loop3: detected capacity change from 0 to 128
[   44.518957][ T4055] vfat: Unknown parameter 'vfat'
[   44.531328][ T4056] loop3: detected capacity change from 0 to 512
[   44.553571][ T4058] xt_hashlimit: max too large, truncated to 1048576
[   44.568028][ T4056] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   44.589609][ T4056] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   44.751369][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.771491][ T4073] loop0: detected capacity change from 0 to 512
[   44.789353][ T4077] can: request_module (can-proto-0) failed.
[   44.903666][ T4094] loop1: detected capacity change from 0 to 736
[   44.918320][ T4094] iso9660: Unknown parameter ''
[   44.934488][ T4093] loop3: detected capacity change from 0 to 512
[   44.954246][ T4093] EXT4-fs: Ignoring removed nobh option
[   45.001334][ T4093] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   45.020330][ T4093] ext4 filesystem being mounted at /34/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   45.036016][ T4073] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.173: bg 0: block 248: padding at end of block bitmap is not set
[   45.059952][ T4093] EXT4-fs error (device loop3): ext4_lookup:1787: inode #12: comm syz.3.184: iget: bad i_size value: 2533274857506816
[   45.110767][ T4073] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.173: Failed to acquire dquot type 1
[   45.129161][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.138772][ T4073] EXT4-fs (loop0): 1 truncate cleaned up
[   45.140310][ T4108] loop4: detected capacity change from 0 to 2048
[   45.144967][ T4073] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   45.174609][ T4108] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   45.182868][ T4073] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   45.237120][ T4117] __nla_validate_parse: 15 callbacks suppressed
[   45.237139][ T4117] netlink: 76 bytes leftover after parsing attributes in process `syz.3.191'.
[   45.253923][ T4073] syz.0.173 (4073) used greatest stack depth: 9120 bytes left
[   45.254206][ T4118] program syz.4.189 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   45.326363][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.368014][ T4129] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16665 sclass=netlink_route_socket pid=4129 comm=syz.2.197
[   45.461558][ T4132] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=102 sclass=netlink_xfrm_socket pid=4132 comm=syz.2.197
[   45.523923][ T4136] loop1: detected capacity change from 0 to 128
[   45.541518][ T4136] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   45.591977][ T4136] ext4 filesystem being mounted at /55/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   45.650614][ T3312] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   45.663088][ T4139] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2570 sclass=netlink_route_socket pid=4139 comm=syz.0.199
[   45.738044][ T4147] netlink: 52 bytes leftover after parsing attributes in process `+}[@'.
[   45.967646][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.986469][ T4161] loop3: detected capacity change from 0 to 1024
[   46.003740][ T4162] netlink: 24 bytes leftover after parsing attributes in process `syz.0.209'.
[   46.015848][ T4161] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[   46.046599][ T4161] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   46.067812][ T4171] netlink: 4 bytes leftover after parsing attributes in process `syz.0.209'.
[   46.080526][ T4161] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: comm syz.3.211: lblock 0 mapped to illegal pblock 0 (length 4)
[   46.096822][ T4161] EXT4-fs error (device loop3): ext4_ext_remove_space:2955: inode #15: comm syz.3.211: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[   46.156623][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[   46.158596][ T4180] FAULT_INJECTION: forcing a failure.
[   46.158596][ T4180] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   46.178745][ T4180] CPU: 1 UID: 0 PID: 4180 Comm: syz.1.215 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[   46.178859][ T4180] Tainted: [W]=WARN
[   46.178867][ T4180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   46.178881][ T4180] Call Trace:
[   46.178890][ T4180]  <TASK>
[   46.178901][ T4180]  __dump_stack+0x1d/0x30
[   46.178928][ T4180]  dump_stack_lvl+0xe8/0x140
[   46.178954][ T4180]  dump_stack+0x15/0x1b
[   46.179018][ T4180]  should_fail_ex+0x265/0x280
[   46.179130][ T4180]  should_fail+0xb/0x20
[   46.179170][ T4180]  should_fail_usercopy+0x1a/0x20
[   46.179198][ T4180]  _copy_from_user+0x1c/0xb0
[   46.179282][ T4180]  __se_sys_mount+0x10d/0x2e0
[   46.179310][ T4180]  ? fput+0x8f/0xc0
[   46.179345][ T4180]  ? ksys_write+0x192/0x1a0
[   46.179378][ T4180]  __x64_sys_mount+0x67/0x80
[   46.179447][ T4180]  x64_sys_call+0x2b51/0x3000
[   46.179476][ T4180]  do_syscall_64+0xd2/0x200
[   46.179502][ T4180]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   46.179532][ T4180]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   46.179559][ T4180]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   46.179589][ T4180] RIP: 0033:0x7f5651e0eec9
[   46.179609][ T4180] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   46.179678][ T4180] RSP: 002b:00007f565086f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[   46.179697][ T4180] RAX: ffffffffffffffda RBX: 00007f5652065fa0 RCX: 00007f5651e0eec9
[   46.179710][ T4180] RDX: 0000200000000280 RSI: 00002000000002c0 RDI: 0000000000000000
[   46.179727][ T4180] RBP: 00007f565086f090 R08: 0000200000000540 R09: 0000000000000000
[   46.179822][ T4180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   46.179839][ T4180] R13: 00007f5652066038 R14: 00007f5652065fa0 R15: 00007ffdd4f1c948
[   46.179861][ T4180]  </TASK>
[   46.374637][ T4182] netlink: 'syz.3.216': attribute type 13 has an invalid length.
[   46.442584][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.450058][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.464957][ T4183] netlink: 'syz.3.216': attribute type 13 has an invalid length.
[   46.592301][ T4182] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   46.606688][ T4182] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   46.657500][ T4185] tipc: Enabling of bearer <eth:s> rejected, failed to enable media
[   46.665787][ T4204] netlink: 256 bytes leftover after parsing attributes in process `syz.1.224'.
[   46.675402][ T3767] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   46.689988][ T3767] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   46.699478][ T3780] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   46.714841][ T3780] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   46.821697][ T4221] netlink: 24 bytes leftover after parsing attributes in process `syz.3.228'.
[   46.858839][ T4221] netlink: 4 bytes leftover after parsing attributes in process `syz.3.228'.
[   46.883495][ T4230] loop4: detected capacity change from 0 to 1024
[   46.890810][ T4230] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   46.900171][ T4230] EXT4-fs (loop4): revision level too high, forcing read-only mode
[   46.908152][ T4230] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e84ee118, mo2=0000]
[   46.916836][ T4230] System zones: 0-1, 3-12
[   46.921691][ T4230] EXT4-fs (loop4): orphan cleanup on readonly fs
[   46.928854][ T4230] EXT4-fs error (device loop4): __ext4_get_inode_loc:4832: comm syz.4.230: Invalid inode table block 0 in block_group 0
[   46.948438][ T4230] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6305: Corrupt filesystem
[   46.960447][ T4230] EXT4-fs error (device loop4): ext4_quota_write:7334: inode #3: comm syz.4.230: mark_inode_dirty error
[   46.972076][ T4230] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.230: Failed to acquire dquot type 0
[   46.991546][ T4230] EXT4-fs error (device loop4): __ext4_get_inode_loc:4832: comm syz.4.230: Invalid inode table block 0 in block_group 0
[   47.004756][ T4230] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6305: Corrupt filesystem
[   47.014541][ T4230] EXT4-fs error (device loop4): ext4_ext_truncate:4475: inode #15: comm syz.4.230: mark_inode_dirty error
[   47.048804][ T4230] EXT4-fs error (device loop4): __ext4_get_inode_loc:4832: comm syz.4.230: Invalid inode table block 0 in block_group 0
[   47.062568][ T4230] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6305: Corrupt filesystem
[   47.096352][ T4230] EXT4-fs error (device loop4) in ext4_orphan_del:301: Corrupt filesystem
[   47.105198][ T4230] EXT4-fs error (device loop4): __ext4_get_inode_loc:4832: comm syz.4.230: Invalid inode table block 0 in block_group 0
[   47.118800][ T4230] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6305: Corrupt filesystem
[   47.128725][ T4230] EXT4-fs error (device loop4): ext4_truncate:4637: inode #15: comm syz.4.230: mark_inode_dirty error
[   47.152829][ T4242] loop2: detected capacity change from 0 to 512
[   47.165413][ T4230] EXT4-fs error (device loop4) in ext4_process_orphan:343: Corrupt filesystem
[   47.176039][ T4230] EXT4-fs (loop4): 1 truncate cleaned up
[   47.182262][ T4230] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   47.198552][ T4230] EXT4-fs (loop4): ext4_remount: Checksum for group 0 failed (60729!=0)
[   47.220146][ T3394] IPVS: starting estimator thread 0...
[   47.226008][ T4230] EXT4-fs error (device loop4): ext4_search_dir:1474: inode #2: block 16: comm syz.4.230: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0
[   47.247762][ T4246] Driver unsupported XDP return value 0 on prog  (id 116) dev N/A, expect packet loss!
[   47.263531][ T4230] EXT4-fs error (device loop4): ext4_search_dir:1474: inode #2: block 16: comm syz.4.230: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0
[   47.293520][ T4242] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.234: bg 0: block 248: padding at end of block bitmap is not set
[   47.308205][ T4242] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.234: Failed to acquire dquot type 1
[   47.319687][ T4247] IPVS: using max 2304 ests per chain, 115200 per kthread
[   47.333986][ T4242] EXT4-fs (loop2): 1 truncate cleaned up
[   47.339955][ T4254] loop1: detected capacity change from 0 to 512
[   47.340723][ T4242] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   47.359712][ T4242] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   47.372506][ T4254] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   47.396343][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.529572][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.872320][ T4264] loop2: detected capacity change from 0 to 128
[   47.934421][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.010477][ T4264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   48.020494][ T4264] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   48.034020][ T4266] loop0: detected capacity change from 0 to 164
[   48.066509][ T4266] process 'syz.0.245' launched '/dev/fd/3' with NULL argv: empty string added
[   48.080675][   T29] kauditd_printk_skb: 228 callbacks suppressed
[   48.080693][   T29] audit: type=1400 audit(1760432463.195:778): avc:  denied  { execute_no_trans } for  pid=4265 comm="syz.0.245" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   48.121463][ T4266] syz.0.245: attempt to access beyond end of device
[   48.121463][ T4266] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164
[   48.128866][ T4272] syz.3.247 uses obsolete (PF_INET,SOCK_PACKET)
[   48.141810][ T4266] syz.0.245: attempt to access beyond end of device
[   48.141810][ T4266] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164
[   48.156038][   T29] audit: type=1400 audit(1760432463.255:779): avc:  denied  { create } for  pid=4271 comm="syz.3.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   48.156528][ T4270] FAULT_INJECTION: forcing a failure.
[   48.156528][ T4270] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   48.188392][   T29] audit: type=1400 audit(1760432463.295:780): avc:  denied  { ioctl } for  pid=4271 comm="syz.3.247" path="socket:[7097]" dev="sockfs" ino=7097 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   48.189422][ T4270] CPU: 1 UID: 0 PID: 4270 Comm: syz.4.244 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[   48.189481][ T4270] Tainted: [W]=WARN
[   48.189491][ T4270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   48.189509][ T4270] Call Trace:
[   48.189517][ T4270]  <TASK>
[   48.189527][ T4270]  __dump_stack+0x1d/0x30
[   48.189568][ T4270]  dump_stack_lvl+0xe8/0x140
[   48.189597][ T4270]  dump_stack+0x15/0x1b
[   48.189621][ T4270]  should_fail_ex+0x265/0x280
[   48.189676][ T4270]  should_fail+0xb/0x20
[   48.189793][ T4270]  should_fail_usercopy+0x1a/0x20
[   48.189822][ T4270]  _copy_from_user+0x1c/0xb0
[   48.189859][ T4270]  bpf_test_init+0xb9/0x140
[   48.189920][ T4270]  bpf_prog_test_run_xdp+0x392/0x970
[   48.189963][ T4270]  ? __rcu_read_unlock+0x4f/0x70
[   48.190005][ T4270]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[   48.190044][ T4270]  bpf_prog_test_run+0x22a/0x390
[   48.190096][ T4270]  __sys_bpf+0x4c0/0x7c0
[   48.190166][ T4270]  __x64_sys_bpf+0x41/0x50
[   48.190208][ T4270]  x64_sys_call+0x2aee/0x3000
[   48.190297][ T4270]  do_syscall_64+0xd2/0x200
[   48.190333][ T4270]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   48.190454][ T4270]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   48.190487][ T4270]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   48.190597][ T4270] RIP: 0033:0x7f0c7b22eec9
[   48.190619][ T4270] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   48.190645][ T4270] RSP: 002b:00007f0c79c8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   48.190672][ T4270] RAX: ffffffffffffffda RBX: 00007f0c7b485fa0 RCX: 00007f0c7b22eec9
[   48.190690][ T4270] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a
[   48.190707][ T4270] RBP: 00007f0c79c8f090 R08: 0000000000000000 R09: 0000000000000000
[   48.190752][ T4270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   48.190772][ T4270] R13: 00007f0c7b486038 R14: 00007f0c7b485fa0 R15: 00007ffd691d2078
[   48.190799][ T4270]  </TASK>
[   48.414661][   T29] audit: type=1400 audit(1760432463.395:781): avc:  denied  { unmount } for  pid=3315 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1
[   48.434769][   T29] audit: type=1400 audit(1760432463.405:782): avc:  denied  { read write } for  pid=4273 comm="syz.4.248" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[   48.458728][   T29] audit: type=1400 audit(1760432463.405:783): avc:  denied  { open } for  pid=4273 comm="syz.4.248" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[   48.482578][   T29] audit: type=1400 audit(1760432463.405:784): avc:  denied  { ioctl } for  pid=4273 comm="syz.4.248" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[   48.508087][   T29] audit: type=1326 audit(1760432463.425:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4275 comm="syz.4.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c7b22eec9 code=0x7ffc0000
[   48.531614][   T29] audit: type=1326 audit(1760432463.425:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4275 comm="syz.4.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c7b22eec9 code=0x7ffc0000
[   48.555125][   T29] audit: type=1326 audit(1760432463.435:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4275 comm="syz.4.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0c7b22eec9 code=0x7ffc0000
[   48.581741][ T4280] loop1: detected capacity change from 0 to 128
[   48.593340][ T4280] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   48.608865][ T3304] ==================================================================
[   48.608895][ T4283] loop4: detected capacity change from 0 to 128
[   48.616979][ T3304] BUG: KCSAN: data-race in block_uevent / inc_diskseq
[   48.629991][ T3304] 
[   48.632326][ T3304] write to 0xffff8881023e9e18 of 8 bytes by task 4283 on cpu 1:
[   48.639971][ T3304]  inc_diskseq+0x2d/0x40
[   48.644246][ T3304]  disk_force_media_change+0x9e/0xe0
[   48.649582][ T3304]  loop_configure+0x6cb/0x9c0
[   48.654288][ T3304]  lo_ioctl+0x1e1/0x12b0
[   48.658553][ T3304]  blkdev_ioctl+0x356/0x440
[   48.663070][ T3304]  __se_sys_ioctl+0xce/0x140
[   48.667669][ T3304]  __x64_sys_ioctl+0x43/0x50
[   48.672270][ T3304]  x64_sys_call+0x1816/0x3000
[   48.676976][ T3304]  do_syscall_64+0xd2/0x200
[   48.681499][ T3304]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   48.687418][ T3304] 
[   48.689753][ T3304] read to 0xffff8881023e9e18 of 8 bytes by task 3304 on cpu 0:
[   48.697316][ T3304]  block_uevent+0x31/0x50
[   48.701685][ T3304]  dev_uevent+0x375/0x400
[   48.706034][ T3304]  uevent_show+0x11a/0x200
[   48.710466][ T3304]  dev_attr_show+0x3f/0xa0
[   48.714896][ T3304]  sysfs_kf_seq_show+0x1a3/0x280
[   48.719846][ T3304]  kernfs_seq_show+0x82/0xa0
[   48.724446][ T3304]  seq_read_iter+0x31e/0x950
[   48.729061][ T3304]  kernfs_fop_read_iter+0xc1/0x330
[   48.734197][ T3304]  vfs_read+0x64c/0x770
[   48.738453][ T3304]  ksys_read+0xda/0x1a0
[   48.742616][ T3304]  __x64_sys_read+0x40/0x50
[   48.747134][ T3304]  x64_sys_call+0x27c0/0x3000
[   48.751822][ T3304]  do_syscall_64+0xd2/0x200
[   48.756344][ T3304]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   48.762254][ T3304] 
[   48.764582][ T3304] value changed: 0x0000000000000080 -> 0x0000000000000083
[   48.771695][ T3304] 
[   48.774025][ T3304] Reported by Kernel Concurrency Sanitizer on:
[   48.780184][ T3304] CPU: 0 UID: 0 PID: 3304 Comm: udevd Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[   48.791051][ T3304] Tainted: [W]=WARN
[   48.794865][ T3304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   48.804954][ T3304] ==================================================================
[   48.817874][ T4280] ext4 filesystem being mounted at /74/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   48.818860][ T4279] loop0: detected capacity change from 0 to 512
[   48.862669][ T4280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   48.871462][ T4280] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   48.879302][ T4283] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[   48.933271][ T4279] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   49.000776][ T4288] bridge: RTM_NEWNEIGH with invalid ether address
[   49.406269][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.442656][ T3312] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.