last executing test programs:

4m49.186389294s ago: executing program 32 (id=65):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="17090000000000000000010000000500070000000000080009000000001b08000a0000000000060002000100000014001f0000000000000000000000000000000000140020"], 0x64}}, 0x0)

4m38.815283311s ago: executing program 33 (id=359):
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50)

4m38.009227332s ago: executing program 34 (id=377):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x4004014)
sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="02070c070200000028bd7000fcdbdf248aeba4cffdcb18ff45228da291050006c08f00000000"], 0x10}}, 0x4400c030)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newsa={0x150, 0x10, 0x413, 0x0, 0x25dfdbfb, {{@in6=@remote, @in=@remote}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x44}, {}, {0x0, 0x0, 0x0, 0x5}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "25cac5216d1c8af0a976902918bf448c5d9f5459"}}]}, 0x150}}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@broadcast, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x32}, 0x2, @in, 0x0, 0x4}}, 0xe8)
sendmmsg$inet6(r1, &(0x7f0000000a80)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e21, 0x0, @dev}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xe00}}], 0x2, 0x0)

4m35.146329119s ago: executing program 35 (id=411):
ptrace(0x10, 0x0)
ptrace$getregset(0x4205, 0x0, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
socket$packet(0x11, 0x2, 0x300)
r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x4000)
shmctl$IPC_RMID(r0, 0x0)
remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0)

3m50.149667581s ago: executing program 36 (id=1851):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0x2000}, 0x18)
r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14)
fcntl$setsig(r1, 0xa, 0x13)
fcntl$setlease(r1, 0x400, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280))
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
truncate(&(0x7f0000000040)='./file0\x00', 0x0)

3m49.46970064s ago: executing program 37 (id=1857):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18)
r1 = gettid()
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
read(r2, &(0x7f0000000440)=""/247, 0x26)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000080)={0x21, @time={0x400, 0xffff39fe}, 0x0, {0x0, 0x1}, 0x0, 0x0, 0x4})
tkill(r1, 0x7)
ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r2, 0x80045301, &(0x7f0000000140))

2m49.930705464s ago: executing program 38 (id=3359):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x7, 0x2261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000000), &(0x7f0000000080)=@udp}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{r2}, &(0x7f0000000d00), &(0x7f0000000d40)='%+9llu \x00'}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r2}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20)

2m38.210873278s ago: executing program 39 (id=3631):
r0 = epoll_create1(0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r2, 0x0, 0x6}, 0x18)
close(r1)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0xa002a008})

2m37.955903741s ago: executing program 40 (id=3636):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000080), 0x81, 0x7a5, &(0x7f0000000f80)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0)
sendfile(r0, r0, 0x0, 0x7a680000)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x147)
r2 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0)
sendfile(r2, r1, 0x0, 0x80000000)
clock_gettime(0x0, &(0x7f0000000300)={<r3=>0x0, <r4=>0x0})
epoll_pwait2(r2, &(0x7f00000002c0)=[{}, {}, {}], 0x3, &(0x7f0000000340)={r3, r4+60000000}, &(0x7f0000000380)={[0x5]}, 0x8)

2m10.311313575s ago: executing program 41 (id=4284):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x200, {0x0, 0x0, 0x0, r3, {0xfff2}, {}, {0x9}}}, 0x24}}, 0x0)

1m58.222658044s ago: executing program 8 (id=4668):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x13)
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000370400000000ffffffff00000000", @ANYRES32=r3, @ANYBLOB="0b120500000000001c0012800b00010069703667726500000c00028008000100", @ANYRES32=r3], 0x3c}}, 0x4000010)
sendmmsg$inet(r1, &(0x7f00000008c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0)

1m57.894779558s ago: executing program 7 (id=4682):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x4, @perf_bp={0x0, 0x2}, 0x1100, 0x5dd8, 0x10001, 0x5, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x2000000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0xff)
r3 = dup2(r2, r2)
bind$l2tp(r3, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000000000000000000002"], 0x3c}}, 0x0)
mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x00<r\xe9\x9cD\x90\xce\xe1\xc5\x85=\\!\xbbQ\xde\xc3\xe3\x7f\xcf\x1f\x17G\xa6\x13\xae\x92 \x1c\xbf\xfa\xe8e\x8cD\"\xa3w')

1m57.893201758s ago: executing program 8 (id=4683):
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=<r0=>0xffffffffffffffff], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94)
r1 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000080)='id_resolver\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0)='kmem_cache_free\x00', r1)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESOCT=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
process_mrelease(0xffffffffffffffff, 0x1000000)
syz_usb_disconnect(0xffffffffffffffff)
syz_pidfd_open(r2, 0x0)

1m57.828059339s ago: executing program 7 (id=4670):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x5, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x203, @void, @value}, 0x94)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000d00)='kfree\x00', r0}, 0x10)
r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x143a82, 0x8)
r3 = dup(r2)
r4 = open(&(0x7f0000000100)='./bus\x00', 0x40542, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)

1m57.672544051s ago: executing program 7 (id=4689):
mkdir(&(0x7f0000000400)='./file0\x00', 0x101)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x9135}, 0x18)
pipe2$9p(&(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r3 = dup(r2)
write$P9_RLERRORu(r3, &(0x7f0000000500)=ANY=[@ANYBLOB='S\x00'], 0x53)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}})

1m57.587880473s ago: executing program 7 (id=4694):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x389380a, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0)
umount2(&(0x7f00000000c0)='./file0/file0\x00', 0x1)

1m57.574388642s ago: executing program 7 (id=4684):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x200c0d2, &(0x7f0000000140)={[{@user_xattr}]}, 0x21, 0x549, &(0x7f0000001800)="$eJzs3c9vI1cdAPDvTH65222zCz1ABewChQWt1t5421XVS8sFhKpKiIoD4rANiTcKseMQO6UJkUj/BpBA4gR/AgckDkg9ceDGEYkDQpQDUoEItEHiYDRjJ+smNmtqx+7Gn480O/Pmzcz3PWdn3vNz4hfA1LoeEQcRMR8Rb0TEYmd/0lnilfaSHffgcH/l6HB/JYlW6/W/J3l+ti+6zsk82blmISK+/pWIbydn4zZ29zaWq9XKdiddata2So3dvVvrteW1ylpls1y+u3T39ot3XiiPrK7Xar9478vrr37j17/65Lu/O/ji97NiXe7kdddjlNpVnzuJk5mNiFfPI9gEzHTW8xMuBx9MGhEfiYjP5Pf/Yszk/zsBgIus1VqM1mJ3GgC46NJ8DCxJixGRpp1OQLE9hvdMXEqr9Ubz5v36zuZqe6zsSsyl99erldtXF/7w3fzguSRLL+V5eX6eLp9K34mIqxHxo4Un8nRxpV5dnUyXBwCm3pPd7X9E/GshTYvFgU7t8akeAPDYKEy6AADA2Gn/AWD6aP8BYPoM0P53Puw/OPeyAADj4f0/AEwf7T8ATB/tPwBMla+99lq2tI4633+9+ubuzkb9zVurlcZGsbazUlypb28V1+r1tfw7e2qPul61Xt9aej523io1K41mqbG7d69W39ls3su/1/teZW4stQIA/per1975fRIRBy89kS/RNZeDthoutnSERwGPl5lhTtZBgMea2b5geg3UhOedhN+ee1mAyej5Zd6Fnpvv95P/I4jfM4IPlRsfH3z83xzPcLEY2Yfp9cHG/18eeTmA8TP+D9Or1UpOz/k/f5IFAFxIQ/wKX+sHo+qEABP1qMm8R/L5PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFwwlyPiO5GkxXwu8DT7Ny0WI56KiCsxl9xfr1ZuR8TTcS0i5hay9NKkCw0ADCn9a9KZ/+vG4nOXT+fOJ/9eyNcR8b2fvv7jt5abze2lbP8/TvYvHE8fVn543hDzCgIAg/vzIAfl7Xe5s+56I//gcH/leDnHMp7x3pdOJh9dOTrcz5d2zmy0Wq1WRCHvS1z6ZxKznXMKEfFsRMyMIP7B2xHxsV71T/KxkSudmU+740cn9lNjjZ++L36a57XX2cv30RGUBabNO9nz55Ve918a1/N17/u/kD+hhpc//woRx8++o674s51IMz3iZ/f89UFjPP+br57Z2Vps570d8exsr/jJSfykT/znBoz/x0986ocv98lr/SziRvSO3x2r1KxtlRq7e7fWa8trlbXKZrl8d+nu7RfvvFAu5WPUpeOR6rP+9tLNp/uVLav/pT7xCz3rP39y7ucGrP/P//PGtz79MLlwOv4XPtv75/9Mz/htWZv4+QHjL1/6Zd/pu7P4q33q/6if/80B47/7l73VAQ8FAMagsbu3sVytVraH2sjehY7iOmc2siIOdvBxd3G4oH+KfGNEL0ufjawzNsjBc+f1qp77xuxJX3G0V/5mdsUxVycdeS2G2ngwrliTeyYB4/Hwpp90SQAAAAAAAAAAAAAAgH7G8adLk64jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF9d/AwAA//8+JMPM")
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
memfd_create(0x0, 0x2)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1879c3, 0x42)

1m57.068633789s ago: executing program 7 (id=4691):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = socket(0x10, 0x3, 0x2)
r3 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000280)={'team0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4]}}}}]}, 0x88}}, 0x20000000)

1m57.067945479s ago: executing program 42 (id=4691):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = socket(0x10, 0x3, 0x2)
r3 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000280)={'team0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4]}}}}]}, 0x88}}, 0x20000000)

1m56.966823461s ago: executing program 8 (id=4695):
mkdir(&(0x7f0000000400)='./file0\x00', 0x101)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x9135}, 0x18)
pipe2$9p(&(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r3 = dup(r2)
write$P9_RLERRORu(r3, &(0x7f0000000500)=ANY=[@ANYBLOB='S\x00'], 0x53)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}})

1m56.850598822s ago: executing program 8 (id=4701):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x389380a, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0)
umount2(&(0x7f00000000c0)='./file0/file0\x00', 0x1)

1m56.834199913s ago: executing program 8 (id=4703):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x200c0d2, &(0x7f0000000140)={[{@user_xattr}]}, 0x21, 0x549, &(0x7f0000001800)="$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")
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
memfd_create(0x0, 0x2)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1879c3, 0x42)

1m56.775290203s ago: executing program 8 (id=4705):
r0 = io_uring_setup(0x7884, &(0x7f0000000a40)={0x0, 0x0, 0x2, 0xfffffffe, 0x3bd})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
close_range(r0, 0xffffffffffffffff, 0x0)

1m56.774984453s ago: executing program 43 (id=4705):
r0 = io_uring_setup(0x7884, &(0x7f0000000a40)={0x0, 0x0, 0x2, 0xfffffffe, 0x3bd})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
close_range(r0, 0xffffffffffffffff, 0x0)

1m19.02299425s ago: executing program 2 (id=5667):
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x8b)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @local}, 0x2}}, 0x2e)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x0}, 0x10)
mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200), 0x2010000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r0)

1m18.126554262s ago: executing program 2 (id=5687):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1, 0x0, 0x178}, 0x18)
msgget$private(0x0, 0x214)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa3}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)

1m17.393516331s ago: executing program 2 (id=5704):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x0, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, 0x0, 0x30, 0x10, &(0x7f0000000340)={0x4, 0x8, 0x8, 0x20000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xf9, @void, @value}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r1], 0x4c}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1m17.357610522s ago: executing program 2 (id=5705):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f0000000680)='./file0/../file0/../file0/../file0\x00', 0x0, 0x1333404, 0x0)
chroot(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00')
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00')

1m17.334279502s ago: executing program 2 (id=5709):
r0 = socket(0xa, 0x3, 0x3a)
unshare(0x62040200)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4)
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000400)={0x2, 0x1, 0x10, 0x0, 0x2}, 0xc)
setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4)

1m16.831531509s ago: executing program 2 (id=5726):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000080), 0x81, 0x7a5, &(0x7f0000000f80)="$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")
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00')
r1 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0)
sendfile(r1, r0, 0x0, 0x80000004)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000180)='kfree\x00', r3}, 0x18)
r4 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86)
readv(r4, &(0x7f0000000180)=[{&(0x7f0000000a00)=""/4096, 0x1000}], 0x1)

1m16.813471489s ago: executing program 44 (id=5726):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000080), 0x81, 0x7a5, &(0x7f0000000f80)="$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")
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00')
r1 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0)
sendfile(r1, r0, 0x0, 0x80000004)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000180)='kfree\x00', r3}, 0x18)
r4 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86)
readv(r4, &(0x7f0000000180)=[{&(0x7f0000000a00)=""/4096, 0x1000}], 0x1)

1m15.718567543s ago: executing program 5 (id=5753):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r2, r1, 0x7, 0x0, 0x0, @void, @value}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20)
r3 = fcntl$dupfd(r0, 0x0, r1)
sendto$inet6(r3, &(0x7f0000000280)='t', 0xf4240, 0x0, 0x0, 0x0)

1m15.697827874s ago: executing program 5 (id=5755):
syz_read_part_table(0x60d, &(0x7f0000002240)="$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")
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10)
syz_pidfd_open(0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xc082, 0x1db)
writev(r2, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x100000}], 0x1)

1m15.590758535s ago: executing program 5 (id=5760):
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000)
r1 = socket$qrtr(0x2a, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10)
connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc)
write$binfmt_script(r1, 0x0, 0x0)
close_range(r0, r1, 0x0)

1m15.502997296s ago: executing program 5 (id=5762):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f0000000680)='./file0/../file0/../file0/../file0\x00', 0x0, 0x1333404, 0x0)
chroot(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00')
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00')

1m15.500650436s ago: executing program 5 (id=5763):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="190000000400000008000000ff"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r3=>0x0})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000400000000000000000000850000002c000000850000002a00000095"], &(0x7f0000000400)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r4, r3, 0x25, 0x0, @val=@netkit={@void, @value=r4}}, 0x1c)
syz_emit_ethernet(0xfdef, &(0x7f0000000240)=ANY=[], 0x0)

1m15.426590157s ago: executing program 5 (id=5766):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x19)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x18)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00')
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10)
syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, &(0x7f0000000140), &(0x7f0000000280))
preadv(r1, &(0x7f0000000380)=[{&(0x7f00000014c0)=""/223, 0xdf}], 0x1, 0x2000ff0f, 0x0)

1m15.396816818s ago: executing program 45 (id=5766):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x19)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x18)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00')
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10)
syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, &(0x7f0000000140), &(0x7f0000000280))
preadv(r1, &(0x7f0000000380)=[{&(0x7f00000014c0)=""/223, 0xdf}], 0x1, 0x2000ff0f, 0x0)

5.005157154s ago: executing program 0 (id=7426):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "0002002000", "07f217bd74511e465bbbd5de01000000f9044677d4d588363d63af84db44be59", "00f8ff00", "8ce63ecbc640735f"}, 0x38)
sendto$inet6(r1, &(0x7f0000000100)='S', 0x1, 0x8000, 0x0, 0x0)
close(r1)

5.004842434s ago: executing program 0 (id=7427):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
flock(r0, 0x5)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)

4.113913736s ago: executing program 0 (id=7457):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0xb5a130e, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r3}, 0x10)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)

3.991810317s ago: executing program 0 (id=7460):
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_config_ext={0x100000000}, 0x10017, 0xffffffff, 0x2, 0x9, 0x4, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x9)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x8c08, &(0x7f0000000cc0)=ANY=[], 0x1, 0x5c2, &(0x7f0000000e00)="$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")
mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0)
chroot(&(0x7f0000000300)='./file0/../file0\x00')
mount(0x0, &(0x7f0000000380)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x200002, 0x0)
pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00')
syz_open_dev$tty1(0xc, 0x4, 0x2)

3.83532731s ago: executing program 0 (id=7468):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
flock(r0, 0x5)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)

3.334850596s ago: executing program 0 (id=7481):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local})
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r3}, 0x10)
close(r1)

3.292974857s ago: executing program 46 (id=7481):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local})
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r3}, 0x10)
close(r1)

1.912760205s ago: executing program 3 (id=7533):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r2, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
bind$tipc(r2, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1}, 0x10)

1.867628836s ago: executing program 3 (id=7536):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x3ff, 0x4)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x6ada, 0x4)
sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0)
recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x20)

1.844162185s ago: executing program 9 (id=7537):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r0 = socket$kcm(0x21, 0x2, 0xa)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x4f, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1000, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0xfc80)
r2 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r2, &(0x7f0000000140)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e24, @multicast2}}, 0x24)
sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "ec"}], 0x18, 0x7000000}, 0xf401}], 0x1, 0x0)

1.752341027s ago: executing program 9 (id=7539):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x1000}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd2d, 0x25dfdc03, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0x2, 0xfff1}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x240410c0)

1.690056638s ago: executing program 9 (id=7543):
syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000000)='./file1\x00', 0x280809a, &(0x7f0000000f40)=ANY=[], 0x1, 0x2b2, &(0x7f00000006c0)="$eJzs3U9rY1UUAPDz0jR9OosUcaMIPtCFqzJ166ZRRhC7UiKoCw3ODEgSBqYQmArGruYTuPR7+BHcuPEbDLgV3E0XlSfvX/7ga402VXR+v9Xh3nfuPXm3TbLJeZ+/Mh3ffZDE2dMnkaZJdI7iKM6T2I9ONL6JbgAA/x/neR6/5mWY5JUNM7udGy0MALgx1ef/X/rgBwD+4z78+JP3B8fHdz7IsjRe6j+eDZOImD6eDav5wf34MiZxL25HPy4i8oUqfve94zvRzQr78fp0PhsWmdPPfqzXH/wSUeYfRj/22/MPs8pK/nw23I3nI4vB/d2m1H682J7/Zkt+DHvxxmsr9R9EP376Ih7EJO5GkbvM//owy97Jv3361afFNkV+0onhXnldKfcFCQAAAAAAAAAAAAAAAAAAAACA7TrIsqRq31P27ymG6v47Oxfl/EHW2F/vz1PlJ81CVX+gvOmWM8/ju6a/zu0sy/L6wmV+N17uerAAAAAAAAAAAAAAAAAAAAAAFE4ePbk1mkzuPTx5dDq+dtB0A2h+1v931zlaGXk1TsejncsX3Nt8r9VuA0WtV14c3W5s6ba0B2eLkeeKera+xV4sRj6KKmgOZqt7vfB2tejpeJTVU81NHo+SP9srbQ7u+9WpXly3sLz8k7jI1880XZS6ntXb0t3o3Wqd+i3P883Weevn6ozqkaRssbHZ7rt10PoCiyAtziJd/OMXUz9cvuClbxk7137TAQAAAAAAAAAAAAAAAAAAWi1/9NsyeXZlaufGigIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAf9jy+f9NkEbE+sgfgnmdfNU1ddCLhyf/8ksEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgGfB7AAAA//8rlFqg")
r0 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x130)
r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x51)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1a"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
write$9p(r0, &(0x7f0000001400)="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", 0x200)
sendfile(r0, r1, 0x0, 0xe065)

1.575206929s ago: executing program 9 (id=7549):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = socket$kcm(0x29, 0x2, 0x0)
r4 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0)
pwritev(r4, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x9, 0x0)
sendfile(r3, r4, 0x0, 0x8000fb00)
close_range(r2, 0xffffffffffffffff, 0x0)

1.557705149s ago: executing program 9 (id=7551):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
close(r0)
r1 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x30004081)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x16, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f00000001c0), &(0x7f0000000080)=r0}, 0x20)
recvmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000480)=""/99, 0x63}], 0x1}, 0x21)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r3, 0xffffffffffffffff, 0x0)

1.155708385s ago: executing program 6 (id=7561):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS    \x00'}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x44800)
sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x0)
sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b00)=ANY=[@ANYBLOB="14000000150a0102"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4040808)

1.128248985s ago: executing program 6 (id=7563):
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
listen(r0, 0x101)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0)
bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0)
r2 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
sendmmsg$inet(r2, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000000100)="8c", 0xffc3}], 0x1}}, {{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f00000012c0)=']', 0x1}], 0x1}}], 0x2, 0x60048841)

1.065949776s ago: executing program 6 (id=7564):
r0 = socket$inet6_dccp(0xa, 0x6, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000004c0)='kmem_cache_free\x00', r1}, 0x18)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32, 0x4}, 0x9c)
bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r2, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r2, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="cc", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000008c0)="bda033176eb146b36ef41f221a4e7ce48b2598d750606488520915c6806affc0a913781c7211ce1fcd59a12b5d5afdaf9d723f092ce9d1eed16e208f2e79831ca049e8979ad94621175c2c48c10e33b29f2def51498743b057efc21efe4be4e5f02e9d236f27190c29c5da0f3799452f5e3640340502fde4ae8c56b303e1b79b3d1842bf6277771bef544c745e7a80c9e7efdd1c619f69b9d01839aa326776d335689e4db7cb7e32fad8f4c40e943b43eb4ea173d720bf5998149625a731643636c8ddbe61e1d7d4736f8414a84acc40557012c82697d8a59c873424aefb3c7ff0dba302efaaf887a477b1ab7ea6c1def9db3514e444c1ef36c6cf42cde90d4bbb2e9a3a5d16a1bb191ad91cab867cd55037d507a12803f3df1b81f1857fad085dbc5c46aac14230d7a4f8b36d6bc63b4a16cd309b7697b421a662b83001b5ce5ab3ff80800243107df7aa6cae9a5db6a8f2a53ef7d6c6aeac76b83a15466c74a9cdbcde8505e3d14c0c3a47a36bf464168202dc88e25f4c1da57faf0eaa7ff16bdd751c2ae5778e169c8ffba57c9a20e24ad51e6e8e02b721e8ca94f131cc98e03b34b615a1db4080362de4ef215d5a0541aeb0c742a2636ac5af8538ceb3585ef9dca8037df55baa072096073b005b53eff0b899de59bc2b5d687d109520571eeacb30124c4012fe6cb9e3bf451be3d219206ddc35099101533cff5aee6c4783e00e6dd391f664052a6c66c62f62a49fde8fbe336543bf99b55e53b801e54c1d0a292da83db26a8a870ac1d8751c4bc0d495277295cd3a17f9e9a25d70214a17b981b62d5c75356ed025df3557a8b59648edd9d1dbdf169d91f9d85cfac11a57db0a14d33e8934a2cc98d389912a0d9942a40c3ee98d35da61d3bab1a32c9d788e9f74ee57012ca5bfd0dc090b591c64aae6a205fbd349fc372bbd7429983a69cae26ff8b5b019144d318ba225e46bc6cf8d7d3e5952333042542b2fd4fb4d88a3651dd8e14ecc2845d4e71f7dfd128e9e2ee2ab0062a3e701bb2477bfd73d7396ae522f11fa481078d1c7f7905e0846fb072dcf7c06102b3816ec4a3518514c7166d7385b680469f5184a93953258952554e68d93ea8f789c4f13982b65996d7d9cf19f0b39b72e1dc9079d84413bbc30d24fc481e24ef1beac020000000000000084d16a1c71b2c8a568481f4f1b254ccd66fbef4cacfc3e13f2c943a264e429824bef7297f93076aea55ed9cf12512c14ac3df331695024bd1e53369a87caf6894fce81594b43cb3dee05ab21dd", 0x390}], 0x1}}], 0x2, 0x4048884)
close_range(r0, 0xffffffffffffffff, 0x0)

1.017084427s ago: executing program 3 (id=7566):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = io_uring_setup(0x192, &(0x7f0000000300)={0x0, 0x4178, 0x400, 0x8000002, 0x3d7})
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20008000)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
sendto$inet(r1, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
close_range(r0, 0xffffffffffffffff, 0x0)

760.63114ms ago: executing program 3 (id=7569):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'dummy0\x00', <r3=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)

660.821921ms ago: executing program 9 (id=7570):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
r1 = socket(0x840000000002, 0x3, 0xff)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_0\x00', 0x10)
connect$inet(r1, &(0x7f0000000540)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10)
sendmmsg$inet(r1, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94)

584.637372ms ago: executing program 3 (id=7574):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8000, &(0x7f0000000540)=ANY=[@ANYBLOB="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"/476], 0x0, 0x307, &(0x7f0000000200)="$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")
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000)

583.593492ms ago: executing program 3 (id=7576):
r0 = gettid()
timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
pipe(&(0x7f00000008c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10)
splice(r1, 0x0, r3, 0x0, 0x7, 0x9)
read(r2, &(0x7f0000032440)=""/102364, 0x18fdc)

377.667455ms ago: executing program 1 (id=7582):
socket$caif_stream(0x25, 0x1, 0xfffffffb)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000040000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x9)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280), 0x0)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003400200000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)

290.804806ms ago: executing program 4 (id=7584):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%-010d \x00'}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
write$binfmt_elf64(r2, &(0x7f0000000980)=ANY=[@ANYBLOB="7f454c4600000006010000000000000003003e000000000003000000000000004000000000000000980100000000000002000000000038000200000002000000000000600300000008000000000000000d00000000000000ed08000000000000f0ffffffffffffff0000000000000000080000000000000003000000cff5ffff800300000000000001000000000000000500000000000000ff"], 0x5b0)
close(r2)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0)

287.674096ms ago: executing program 1 (id=7585):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="020000000400000008"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10)
statx(0xffffffffffffffff, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x6000, 0x4, 0x0)
r2 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x4, 0x224}, &(0x7f0000000040)=<r3=>0x0, &(0x7f00000000c0)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x81, 0x8, 0x1, {0x2}})
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
io_uring_enter(r2, 0x47f8, 0x0, 0x0, 0x0, 0x0)

269.505086ms ago: executing program 4 (id=7586):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
write$selinux_load(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xffa8)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000025940000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c0002400000000000000010140001800c000100636f756e746572"], 0x118}}, 0x0)

207.699887ms ago: executing program 6 (id=7587):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1004}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1, 0x0, 0x5}, 0x18)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_io_uring_setup(0x3ef2, &(0x7f0000001480)={0x0, 0x56c8, 0x400, 0x4, 0x1af}, &(0x7f0000000040)=<r4=>0x0, &(0x7f00000000c0)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x28}, 0x0, 0x4800, 0x1})
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
io_uring_enter(r3, 0x47f8, 0xfffffffc, 0x24, 0x0, 0x0)

207.087227ms ago: executing program 4 (id=7588):
mkdir(&(0x7f0000000400)='./file0\x00', 0x101)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
pipe2$9p(&(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r4}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r3}, 0x10)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])

199.245167ms ago: executing program 1 (id=7589):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r2}, 0x10)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000010c0))

181.448178ms ago: executing program 1 (id=7590):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x80801c, &(0x7f00000001c0)={[{@quota}, {@jqfmt_vfsv0}, {@data_err_ignore}, {@errors_remount}, {@nobarrier}]}, 0x1, 0x520, &(0x7f0000001300)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
ioctl$EXT4_IOC_MIGRATE(r0, 0x6609)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$EXT4_IOC_MIGRATE(r0, 0x6609)
sendmsg$nl_xfrm(r0, 0x0, 0x8004)
ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0)

160.978948ms ago: executing program 1 (id=7591):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000003180)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x4}, 0x18)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net/sctp\x00')
r3 = open_tree(r2, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r3, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x20)
syz_open_procfs(0x0, &(0x7f0000000040)='net/sctp\x00')
pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00')

142.233028ms ago: executing program 1 (id=7592):
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0)
write(r1, &(0x7f0000004200)='t', 0x1)
sendfile(r1, r0, 0x0, 0x3ffff)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
sendfile(r1, r0, 0x0, 0x7ffff000)

137.916098ms ago: executing program 4 (id=7593):
socket$nl_route(0x10, 0x3, 0x0)
gettid()
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r0}, 0x10)
pipe2(&(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
splice(r2, 0x0, r1, 0x0, 0x6, 0x0)
dup3(r2, r1, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x3, 0x2, 0x201}, 0x14}}, 0x0)

57.195749ms ago: executing program 6 (id=7594):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
close(r0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c23003f)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0x2}, 0x18)
write$cgroup_type(r0, &(0x7f0000000080), 0xfffffed8)

36.92607ms ago: executing program 4 (id=7595):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffffffc, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2001, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00')
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=<r3=>r2, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r3, 0x24, 0x0, 0x6, &(0x7f0000000240)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40)

11.19269ms ago: executing program 6 (id=7596):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0)
r0 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x8051)

0s ago: executing program 4 (id=7597):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10)
socketpair(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000340)='percpu_free_percpu\x00'}, 0x10)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89a0, &(0x7f0000000080))
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89a1, &(0x7f0000000080))

kernel console output (not intermixed with test programs):

device loop6): ext4_do_update_inode:5211: inode #13: comm syz.6.6522: corrupted inode contents
[  280.215027][T20789] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem
[  280.225564][T20789] EXT4-fs error (device loop6): ext4_do_update_inode:5211: inode #13: comm syz.6.6522: corrupted inode contents
[  280.250121][T20789] EXT4-fs error (device loop6): ext4_truncate:4255: inode #13: comm syz.6.6522: mark_inode_dirty error
[  280.266118][T20789] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem
[  280.295346][T20800] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6527'.
[  280.304355][T20800] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6527'.
[  280.330628][T20789] EXT4-fs (loop6): 1 truncate cleaned up
[  280.336718][T20789] EXT4-fs mount: 1 callbacks suppressed
[  280.336732][T20789] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  280.367624][T20789] Quota error (device loop6): do_check_range: Getting block 64 out of range 1-5
[  280.376684][T20789] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0
[  280.386196][T20789] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm syz.6.6522: Failed to acquire dquot type 0
[  280.423430][T20804] loop9: detected capacity change from 0 to 1024
[  280.442172][T15803] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  280.445974][T20804] EXT4-fs: inline encryption not supported
[  280.461976][T20804] EXT4-fs: Ignoring removed bh option
[  280.469478][   T29] audit: type=1326 audit(1745798007.565:17881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20805 comm="syz.3.6531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43f924e969 code=0x7ffc0000
[  280.495176][   T29] audit: type=1326 audit(1745798007.565:17882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20805 comm="syz.3.6531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f43f924e969 code=0x7ffc0000
[  280.519642][   T29] audit: type=1326 audit(1745798007.565:17883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20805 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43f924e969 code=0x7ffc0000
[  280.542824][   T29] audit: type=1326 audit(1745798007.565:17884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20805 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f43f924e969 code=0x7ffc0000
[  280.566530][   T29] audit: type=1326 audit(1745798007.565:17885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20805 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43f924e969 code=0x7ffc0000
[  280.567940][T20804] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  280.590429][   T29] audit: type=1326 audit(1745798007.565:17886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20805 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f43f924e969 code=0x7ffc0000
[  280.673236][T20816] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6534'.
[  280.706163][T18689] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  280.785153][T20826] loop6: detected capacity change from 0 to 128
[  280.794000][T20822] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6536'.
[  280.811020][T20826] tipc: Started in network mode
[  280.815976][T20826] tipc: Node identity ac14140f, cluster identity 4711
[  280.823355][T20826] tipc: New replicast peer: 255.255.255.255
[  280.829574][T20826] tipc: Enabled bearer <udp:syz2>, priority 10
[  280.882439][T20837] netlink: 'syz.6.6546': attribute type 27 has an invalid length.
[  280.924058][T20837] ipvlan0: left allmulticast mode
[  280.929162][T20837] veth0_vlan: left allmulticast mode
[  280.976109][T20839] netlink: 96 bytes leftover after parsing attributes in process `syz.4.6547'.
[  280.999022][T20846] 8021q: adding VLAN 0 to HW filter on device bond0
[  281.024933][T20846] 8021q: adding VLAN 0 to HW filter on device team0
[  281.060876][T20850] Set syz1 is full, maxelem 65536 reached
[  281.061062][T20854] loop0: detected capacity change from 0 to 1024
[  281.083799][T20846] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  281.102821][T20854] EXT4-fs: inline encryption not supported
[  281.117129][T20854] EXT4-fs: Ignoring removed bh option
[  281.151652][T20854] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  281.279777][T20867] loop6: detected capacity change from 0 to 256
[  281.289158][T17629] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  281.389753][T20873] loop4: detected capacity change from 0 to 1024
[  281.421584][T20873] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  281.478430][T18789] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  281.498809][T20881] rdma_rxe: rxe_newlink: failed to add ipvlan0
[  281.522382][T20885] loop4: detected capacity change from 0 to 512
[  281.538618][T20885] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  281.553537][T20885] EXT4-fs (loop4): mount failed
[  281.947590][ T9711] tipc: Node number set to 2886997007
[  282.171727][T20908] loop0: detected capacity change from 0 to 1024
[  282.190135][T20908] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  282.225143][T17629] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  282.247922][T20914] loop0: detected capacity change from 0 to 512
[  282.255083][T20914] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  282.269725][T20916] openvswitch: netlink: Message has 6 unknown bytes.
[  282.277984][T20914] EXT4-fs (loop0): 1 truncate cleaned up
[  282.284270][T20914] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  282.316245][T20921] loop6: detected capacity change from 0 to 128
[  282.324662][T20921] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  282.339834][T20921] ext4 filesystem being mounted at /374/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  282.340515][T17629] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  282.373914][T20924] loop0: detected capacity change from 0 to 512
[  282.389264][T20924] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  282.402192][T20924] ext4 filesystem being mounted at /236/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  282.437175][T15803] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  282.498834][T17629] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  282.685830][T20955] syzkaller0: entered allmulticast mode
[  282.707268][T20959] netlink: 'syz.4.6592': attribute type 27 has an invalid length.
[  282.733327][T20961] netlink: 'syz.6.6594': attribute type 3 has an invalid length.
[  282.844064][T20959] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  282.853194][T20959] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  282.862392][T20959] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  282.871458][T20959] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  282.886764][T20955] syzkaller0 (unregistering): left allmulticast mode
[  282.963926][T20962] 8021q: adding VLAN 0 to HW filter on device bond0
[  282.972265][T20962] 8021q: adding VLAN 0 to HW filter on device team0
[  282.983075][T20962] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  283.245049][T20974] loop0: detected capacity change from 0 to 128
[  283.308532][T20982] loop7: detected capacity change from 0 to 16384
[  283.473307][T20982] blk_print_req_error: 4 callbacks suppressed
[  283.473322][T20982] I/O error, dev loop7, sector 9480 op 0x0:(READ) flags 0x80700 phys_seg 20 prio class 0
[  283.474973][T20990] I/O error, dev loop7, sector 4864 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0
[  283.499940][T20990] buffer_io_error: 57 callbacks suppressed
[  283.499949][T20990] Buffer I/O error on dev loop7, logical block 608, lost async page write
[  283.514359][T20990] Buffer I/O error on dev loop7, logical block 609, lost async page write
[  283.522882][T20990] Buffer I/O error on dev loop7, logical block 610, lost async page write
[  283.523701][T20982] I/O error, dev loop7, sector 9736 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0
[  283.531410][T20990] Buffer I/O error on dev loop7, logical block 611, lost async page write
[  283.550552][T20990] Buffer I/O error on dev loop7, logical block 612, lost async page write
[  283.559117][T20990] Buffer I/O error on dev loop7, logical block 613, lost async page write
[  283.566782][T20982] I/O error, dev loop7, sector 9480 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  283.568263][T20990] Buffer I/O error on dev loop7, logical block 614, lost async page write
[  283.577009][T20982] Buffer I/O error on dev loop7, logical block 1185, async page read
[  283.585492][T20990] Buffer I/O error on dev loop7, logical block 615, lost async page write
[  283.585515][T20990] Buffer I/O error on dev loop7, logical block 616, lost async page write
[  283.614966][T20990] I/O error, dev loop7, sector 5888 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0
[  283.637591][T20982] I/O error, dev loop7, sector 9480 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  283.639257][T20990] I/O error, dev loop7, sector 6912 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0
[  283.661379][T20990] I/O error, dev loop7, sector 7936 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0
[  283.667700][T20982] I/O error, dev loop7, sector 9480 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  283.674074][T20990] I/O error, dev loop7, sector 8960 op 0x1:(WRITE) flags 0x800 phys_seg 32 prio class 0
[  283.705184][T20990]  loop7: unable to read partition table
[  283.711903][T20990] loop_reread_partitions: partition scan of loop7 ((õÉêä¾A«ÒÚi½åŒ×¯@ýpªÁ.½[ºvcÄ5¯ùG“Ýתà~ó_Á

“;Ûo×ÿ) failed (rc=-5)
[  283.777026][T21002] syz.3.6602: attempt to access beyond end of device
[  283.777026][T21002] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  284.099555][T21008] loop4: detected capacity change from 0 to 128
[  284.136957][T21008] syz.4.6610: attempt to access beyond end of device
[  284.136957][T21008] loop4: rw=34817, sector=97, nr_sectors = 32 limit=128
[  284.243809][T21022] loop6: detected capacity change from 0 to 512
[  284.252364][T21022] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  284.274256][T21022] EXT4-fs (loop6): 1 truncate cleaned up
[  284.281942][T21022] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  284.295394][ T7305] kworker/u8:32: attempt to access beyond end of device
[  284.295394][ T7305] loop4: rw=1, sector=145, nr_sectors = 34 limit=128
[  284.329081][T15803] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  284.347428][T21030] loop0: detected capacity change from 0 to 164
[  284.358147][T21030] Unable to read rock-ridge attributes
[  284.367897][T21030] Unable to read rock-ridge attributes
[  284.374229][T21030] iso9660: Corrupted directory entry in block 4 of inode 1792
[  284.399967][T21032] loop4: detected capacity change from 0 to 2048
[  284.439955][T21032]  loop4: p1 < > p4
[  284.444148][T21032] loop4: p4 size 8388608 extends beyond EOD, truncated
[  284.528430][T21051] netlink: 96 bytes leftover after parsing attributes in process `syz.9.6629'.
[  284.529343][T21053] loop7: detected capacity change from 0 to 16384
[  284.618933][T21058] loop0: detected capacity change from 0 to 128
[  284.641122][T21061] lo speed is unknown, defaulting to 1000
[  284.643333][T21058] FAT-fs (loop0): Directory bread(block 162) failed
[  284.679831][T21058] FAT-fs (loop0): Directory bread(block 163) failed
[  284.691762][T21058] FAT-fs (loop0): Directory bread(block 164) failed
[  284.701831][T21058] FAT-fs (loop0): Directory bread(block 165) failed
[  284.709827][T21058] FAT-fs (loop0): Directory bread(block 166) failed
[  284.716453][T21058] FAT-fs (loop0): Directory bread(block 167) failed
[  284.723180][T21058] FAT-fs (loop0): Directory bread(block 168) failed
[  284.730993][T21058] FAT-fs (loop0): Directory bread(block 169) failed
[  284.741295][T21058] FAT-fs (loop0): Directory bread(block 162) failed
[  284.755824][T21058] FAT-fs (loop0): Directory bread(block 163) failed
[  284.763019][T21058] syz.0.6632: attempt to access beyond end of device
[  284.763019][T21058] loop0: rw=3, sector=226, nr_sectors = 6 limit=128
[  284.777505][T21058] syz.0.6632: attempt to access beyond end of device
[  284.777505][T21058] loop0: rw=2051, sector=232, nr_sectors = 2 limit=128
[  284.832596][T21059]  loop7: unable to read partition table
[  284.843155][T21059] loop_reread_partitions: partition scan of loop7 ((õÉêä¾A«ÒÚi½åŒ×¯@ýpªÁ.½[ºvcÄ5¯ùG“Ýתà~ó_Á

“;Ûo×ÿ) failed (rc=-5)
[  284.885343][T21071] loop9: detected capacity change from 0 to 164
[  284.894552][T21071] Unable to read rock-ridge attributes
[  284.902021][T21071] Unable to read rock-ridge attributes
[  284.908277][T21071] iso9660: Corrupted directory entry in block 4 of inode 1792
[  284.915898][T21071] syz.9.6634: attempt to access beyond end of device
[  284.915898][T21071] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  284.979612][T21074] loop9: detected capacity change from 0 to 1024
[  284.991752][T21074] EXT4-fs: Ignoring removed bh option
[  285.064545][T21074] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  285.173115][T21074] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4113: comm syz.9.6636: Allocating blocks 497-513 which overlap fs metadata
[  285.191456][T21074] EXT4-fs (loop9): Remounting filesystem read-only
[  285.232234][T21073] EXT4-fs (loop9): pa ffff888105127e70: logic 48, phys. 177, len 21
[  285.263082][T21085] loop0: detected capacity change from 0 to 2048
[  285.273801][T21086] loop6: detected capacity change from 0 to 128
[  285.295397][T18689] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  285.314958][T21086] FAT-fs (loop6): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[  285.317892][T21085]  loop0: p1 < > p4
[  285.330244][T21085] loop0: p4 size 8388608 extends beyond EOD, truncated
[  285.351931][ T7277] FAT-fs (loop6): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[  285.375332][   T29] kauditd_printk_skb: 215 callbacks suppressed
[  285.375348][   T29] audit: type=1326 audit(1745798012.465:18101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21089 comm="syz.6.6642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc63558e969 code=0x7ffc0000
[  285.450987][   T29] audit: type=1326 audit(1745798012.465:18102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21089 comm="syz.6.6642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc63558e969 code=0x7ffc0000
[  285.474686][   T29] audit: type=1326 audit(1745798012.465:18103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21089 comm="syz.6.6642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc63558e969 code=0x7ffc0000
[  285.498343][   T29] audit: type=1326 audit(1745798012.465:18104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21089 comm="syz.6.6642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc63558e969 code=0x7ffc0000
[  285.522593][   T29] audit: type=1326 audit(1745798012.475:18105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21089 comm="syz.6.6642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc63558e969 code=0x7ffc0000
[  285.533391][T21101] 9pnet_fd: Insufficient options for proto=fd
[  285.546167][   T29] audit: type=1326 audit(1745798012.475:18106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21089 comm="syz.6.6642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc63558e969 code=0x7ffc0000
[  285.576498][   T29] audit: type=1326 audit(1745798012.475:18107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21089 comm="syz.6.6642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc63558e969 code=0x7ffc0000
[  285.600681][   T29] audit: type=1326 audit(1745798012.495:18108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21089 comm="syz.6.6642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc63558e969 code=0x7ffc0000
[  285.624385][   T29] audit: type=1326 audit(1745798012.495:18109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21089 comm="syz.6.6642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc63558e969 code=0x7ffc0000
[  285.648578][   T29] audit: type=1326 audit(1745798012.495:18110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21089 comm="syz.6.6642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fc63558e969 code=0x7ffc0000
[  285.708700][T21106] loop7: detected capacity change from 0 to 16384
[  285.750534][T21107] SELinux: ebitmap: truncated map
[  285.756945][T21107] SELinux: failed to load policy
[  285.772548][T21111] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  285.783728][T21111] syzkaller0: entered promiscuous mode
[  285.789333][T21111] syzkaller0: entered allmulticast mode
[  285.915436][T21121] lo speed is unknown, defaulting to 1000
[  285.926634][T21114]  loop7: unable to read partition table
[  285.952064][T21114] loop_reread_partitions: partition scan of loop7 ((õÉêä¾A«ÒÚi½åŒ×¯@ýpªÁ.½[ºvcÄ5¯ùG“Ýתà~ó_Á

“;Ûo×ÿ) failed (rc=-5)
[  285.967248][T21124] loop9: detected capacity change from 0 to 512
[  285.981659][T21124] EXT4-fs: Ignoring removed i_version option
[  286.042434][T21124] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  286.078606][T21124] ext4 filesystem being mounted at /146/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  286.129839][T21134] pim6reg1: entered promiscuous mode
[  286.135191][T21134] pim6reg1: entered allmulticast mode
[  286.224100][T21145] loop0: detected capacity change from 0 to 2048
[  286.241969][T21147] loop4: detected capacity change from 0 to 256
[  286.253614][T21145] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  286.286197][T21145] EXT4-fs error (device loop0): ext4_ext_precache:631: inode #2: comm wg1: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5)
[  286.354247][T17629] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  286.405648][T21163] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6675'.
[  286.418473][T21163] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  286.426733][T21163] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  286.435015][T21163] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  286.443995][T21163] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  286.466964][T21163] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  286.475451][T21163] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  286.483843][T21163] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  286.492223][T21163] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  286.535872][T21175] loop6: detected capacity change from 0 to 256
[  286.583040][T21187] netlink: 96 bytes leftover after parsing attributes in process `syz.0.6682'.
[  286.615990][T21193] loop0: detected capacity change from 0 to 512
[  286.622777][T21193] EXT4-fs: Ignoring removed mblk_io_submit option
[  286.640962][T21193] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  286.649586][T21193] EXT4-fs (loop0): orphan cleanup on readonly fs
[  286.657088][T21193] EXT4-fs warning (device loop0): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  286.675760][T21193] EXT4-fs (loop0): Cannot turn on quotas: error -117
[  286.691798][T21193] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.6684: bg 0: block 40: padding at end of block bitmap is not set
[  286.711765][T21193] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  286.721066][T21193] EXT4-fs (loop0): 1 truncate cleaned up
[  286.727201][T21193] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  286.746951][T18689] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  286.750027][T21193] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #16: comm syz.0.6684: corrupted xattr block 31: invalid header
[  286.770452][T21193] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop0 ino=16
[  286.780322][T21193] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #16: comm syz.0.6684: corrupted xattr block 31: invalid header
[  286.793685][T21206] syzkaller0: entered allmulticast mode
[  286.796742][T21193] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop0 ino=16
[  286.810553][T21193] EXT4-fs error (device loop0): ext4_get_link:106: inode #16: comm syz.0.6684: bad symlink.
[  286.832110][T21210] loop9: detected capacity change from 0 to 164
[  286.841723][T21210] syz.9.6691: attempt to access beyond end of device
[  286.841723][T21210] loop9: rw=524288, sector=263328, nr_sectors = 4 limit=164
[  286.865716][T21210] syz.9.6691: attempt to access beyond end of device
[  286.865716][T21210] loop9: rw=0, sector=263328, nr_sectors = 4 limit=164
[  286.866819][T21206] syzkaller0 (unregistering): left allmulticast mode
[  286.890003][T17629] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  287.042639][T21224] loop7: detected capacity change from 0 to 16384
[  287.209856][T21228] netlink: 'syz.4.6708': attribute type 27 has an invalid length.
[  287.258322][T21225]  loop7: unable to read partition table
[  287.270647][T21225] loop_reread_partitions: partition scan of loop7 ((õÉêä¾A«ÒÚi½åŒ×¯@ýpªÁ.½[ºvcÄ5¯ùG“Ýתà~ó_Á

“;Ûo×ÿ) failed (rc=-5)
[  287.343109][T21237] loop0: detected capacity change from 0 to 128
[  287.409258][T21237] syz.0.6699: attempt to access beyond end of device
[  287.409258][T21237] loop0: rw=0, sector=121, nr_sectors = 920 limit=128
[  287.444612][T21249] netlink: 108 bytes leftover after parsing attributes in process `syz.9.6705'.
[  287.463563][T21249] netlink: 108 bytes leftover after parsing attributes in process `syz.9.6705'.
[  287.473402][T21249] netlink: 108 bytes leftover after parsing attributes in process `syz.9.6705'.
[  287.506362][T21249] netlink: 108 bytes leftover after parsing attributes in process `syz.9.6705'.
[  287.516013][T21249] netlink: 108 bytes leftover after parsing attributes in process `syz.9.6705'.
[  287.530105][T21249] netlink: 108 bytes leftover after parsing attributes in process `syz.9.6705'.
[  287.547406][T21255] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6709'.
[  287.586556][T21249] netlink: 108 bytes leftover after parsing attributes in process `syz.9.6705'.
[  287.617341][T21264] loop7: detected capacity change from 0 to 16384
[  287.689840][T21274] xt_hashlimit: size too large, truncated to 1048576
[  287.780515][T21271]  loop7: unable to read partition table
[  287.797096][T21271] loop_reread_partitions: partition scan of loop7 ((õÉêä¾A«ÒÚi½åŒ×¯@ýpªÁ.½[ºvcÄ5¯ùG“Ýתà~ó_Á

“;Ûo×ÿ) failed (rc=-5)
[  287.841235][T21282] loop6: detected capacity change from 0 to 256
[  288.095944][T21309] loop0: detected capacity change from 0 to 512
[  288.128424][T21309] EXT4-fs (loop0): 1 orphan inode deleted
[  288.134763][T21309] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  288.147417][T21309] ext4 filesystem being mounted at /275/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  288.158595][ T7300] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:27: Failed to release dquot type 1
[  288.201429][T17629] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  288.204997][T21318] infiniband syz!: set down
[  288.215554][T21318] infiniband syz!: added team_slave_0
[  288.226683][T21318] RDS/IB: syz!: added
[  288.230728][T21318] smc: adding ib device syz! with port count 1
[  288.236943][T21318] smc:    ib device syz! port 1 has pnetid 
[  288.257641][T21319] Falling back ldisc for ttyS3.
[  288.552703][T21327] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[  288.576346][T21328] loop9: detected capacity change from 0 to 2048
[  288.609231][T21328]  loop9: p1 < > p4
[  288.620252][T21328] loop9: p4 size 8388608 extends beyond EOD, truncated
[  288.666766][T21345] loop4: detected capacity change from 0 to 2048
[  288.731127][T21345] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  288.759820][T21354] pim6reg1: entered promiscuous mode
[  288.765131][T21354] pim6reg1: entered allmulticast mode
[  288.875192][T21366] pim6reg1: entered promiscuous mode
[  288.880646][T21366] pim6reg1: entered allmulticast mode
[  288.915329][T21372] loop7: detected capacity change from 0 to 16384
[  288.971636][T18789] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  289.146359][T21377] blk_print_req_error: 34 callbacks suppressed
[  289.146374][T21377] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  289.162085][T21387] loop4: detected capacity change from 0 to 2048
[  289.162546][T21377] buffer_io_error: 2079 callbacks suppressed
[  289.162614][T21377] Buffer I/O error on dev loop7, logical block 0, async page read
[  289.228271][T21377] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  289.237426][T21377] Buffer I/O error on dev loop7, logical block 0, async page read
[  289.245910][T21377]  loop7: unable to read partition table
[  289.251783][T21377] loop_reread_partitions: partition scan of loop7 ((õÉêä¾A«ÒÚi½åŒ×¯@ýpªÁ.½[ºvcÄ5¯ùG“Ýתà~ó_Á

“;Ûo×ÿ) failed (rc=-5)
[  289.253002][T21387] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  289.418020][T21387] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 1 with max blocks 1 with error 28
[  289.430418][T21387] EXT4-fs (loop4): This should not happen!! Data will be lost
[  289.430418][T21387] 
[  289.440271][T21387] EXT4-fs (loop4): Total free blocks count 0
[  289.446384][T21387] EXT4-fs (loop4): Free/Dirty block details
[  289.452405][T21387] EXT4-fs (loop4): free_blocks=0
[  289.457411][T21387] EXT4-fs (loop4): dirty_blocks=0
[  289.462526][T21387] EXT4-fs (loop4): Block reservation details
[  289.468574][T21387] EXT4-fs (loop4): i_reserved_data_blocks=0
[  289.535115][T18789] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  289.592903][T21419] loop9: detected capacity change from 0 to 256
[  289.603922][T21419] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  289.612775][T21419] FAT-fs (loop9): Filesystem has been set read-only
[  289.621274][T21415] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21415 comm=syz.6.6774
[  289.621504][T21419] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  289.644268][T21419] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  289.653464][T21419] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  289.662261][T21419] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  289.671324][T21419] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  289.680221][T21419] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  289.689127][T21419] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  289.697873][T21419] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  289.707830][T21419] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  289.914783][T21444] loop9: detected capacity change from 0 to 2048
[  289.939795][T21444] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  289.952503][T21444] ext4 filesystem being mounted at /169/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  290.300403][T21471] loop4: detected capacity change from 0 to 1024
[  290.324089][T21477] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.6788: bg 0: block 345: padding at end of block bitmap is not set
[  290.344267][T21471] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  290.397285][T18789] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  290.407044][   T29] kauditd_printk_skb: 71 callbacks suppressed
[  290.407063][   T29] audit: type=1326 audit(1745798017.505:18180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21480 comm="syz.0.6803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38716de969 code=0x7ffc0000
[  290.436838][   T29] audit: type=1326 audit(1745798017.505:18181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21480 comm="syz.0.6803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38716de969 code=0x7ffc0000
[  290.491645][   T29] audit: type=1326 audit(1745798017.555:18182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21480 comm="syz.0.6803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f38716de969 code=0x7ffc0000
[  290.515338][   T29] audit: type=1326 audit(1745798017.555:18183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21480 comm="syz.0.6803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38716de969 code=0x7ffc0000
[  290.538929][   T29] audit: type=1326 audit(1745798017.555:18184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21480 comm="syz.0.6803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38716de969 code=0x7ffc0000
[  290.562560][   T29] audit: type=1326 audit(1745798017.555:18185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21480 comm="syz.0.6803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f38716de969 code=0x7ffc0000
[  290.586341][   T29] audit: type=1326 audit(1745798017.555:18186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21480 comm="syz.0.6803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38716de969 code=0x7ffc0000
[  290.610466][   T29] audit: type=1326 audit(1745798017.555:18187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21480 comm="syz.0.6803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38716de969 code=0x7ffc0000
[  290.634081][   T29] audit: type=1326 audit(1745798017.555:18188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21480 comm="syz.0.6803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f38716de969 code=0x7ffc0000
[  290.657747][   T29] audit: type=1326 audit(1745798017.555:18189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21480 comm="syz.0.6803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38716de969 code=0x7ffc0000
[  290.675076][T21483] loop0: detected capacity change from 0 to 8192
[  290.728308][T21483]  loop0: p3 p4 < >
[  290.732255][T21483] loop0: p3 size 16744448 extends beyond EOD, truncated
[  290.787858][T21487] loop4: detected capacity change from 0 to 512
[  290.798116][T21487] EXT4-fs: Ignoring removed nobh option
[  290.806430][T21487] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.6806: invalid indirect mapped block 256 (level 2)
[  290.878750][T21487] EXT4-fs (loop4): 2 truncates cleaned up
[  290.884840][T21492] lo speed is unknown, defaulting to 1000
[  290.895702][T21487] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  291.045270][ T7300] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm kworker/u8:27: bg 0: block 5: invalid block bitmap
[  291.070598][ T7300] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1140 with error 28
[  291.083160][ T7300] EXT4-fs (loop4): This should not happen!! Data will be lost
[  291.083160][ T7300] 
[  291.093569][ T7300] EXT4-fs (loop4): Total free blocks count 0
[  291.099595][ T7300] EXT4-fs (loop4): Free/Dirty block details
[  291.105655][ T7300] EXT4-fs (loop4): free_blocks=0
[  291.110685][ T7300] EXT4-fs (loop4): dirty_blocks=1144
[  291.116044][ T7300] EXT4-fs (loop4): Block reservation details
[  291.122636][ T7300] EXT4-fs (loop4): i_reserved_data_blocks=1144
[  291.135810][T18789] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  291.264782][T21444] syz.9.6788 (21444) used greatest stack depth: 5952 bytes left
[  291.277798][T18689] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  291.395258][T21517] tipc: Started in network mode
[  291.400173][T21517] tipc: Node identity ca7d6a9efc4b, cluster identity 4711
[  291.407335][T21517] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  291.428856][T21517] syzkaller0: entered promiscuous mode
[  291.434394][T21517] syzkaller0: entered allmulticast mode
[  291.448077][T21517] tipc: Resetting bearer <eth:syzkaller0>
[  291.462127][T21516] tipc: Resetting bearer <eth:syzkaller0>
[  291.476579][T21516] tipc: Disabling bearer <eth:syzkaller0>
[  291.598423][T21533] SELinux: ebitmap: truncated map
[  291.607098][T21533] SELinux: failed to load policy
[  291.671031][T21541] vlan2: entered promiscuous mode
[  291.676094][T21541] bridge0: entered promiscuous mode
[  291.681447][T21541] vlan2: entered allmulticast mode
[  291.686579][T21541] bridge0: entered allmulticast mode
[  291.705084][T21543] loop0: detected capacity change from 0 to 512
[  291.743007][T21544] vlan2: left promiscuous mode
[  291.748561][T21544] bridge0: left promiscuous mode
[  291.754156][T21544] vlan2: left allmulticast mode
[  291.759156][T21544] bridge0: left allmulticast mode
[  291.770756][T21543] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  291.823004][T21543] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002]
[  291.865050][T21543] EXT4-fs error (device loop0): ext4_iget_extra_inode:4693: inode #15: comm syz.0.6828: corrupted in-inode xattr: e_value size too large
[  291.889459][T21543] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.6828: couldn't read orphan inode 15 (err -117)
[  291.913571][T21543] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  291.949129][T17629] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  291.986437][T21555] bridge0: entered allmulticast mode
[  292.076643][T21562] ALSA: seq fatal error: cannot create timer (-19)
[  292.154366][T21569] loop0: detected capacity change from 0 to 512
[  292.183805][T21572] __nla_validate_parse: 11 callbacks suppressed
[  292.183874][T21572] netlink: 1312 bytes leftover after parsing attributes in process `syz.9.6837'.
[  292.218513][T21569] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  292.232585][T21569] ext4 filesystem being mounted at /295/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  292.516343][T17629] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  292.564356][   T23] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  292.571967][   T23] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  292.579476][   T23] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  292.586930][   T23] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  292.594400][   T23] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  292.601873][   T23] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  292.609313][   T23] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  292.616827][   T23] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  292.624280][   T23] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  292.631698][   T23] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  292.639135][   T23] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  292.646748][   T23] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  292.654277][   T23] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  292.661813][   T23] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  292.669267][   T23] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  292.676662][   T23] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  292.684072][   T23] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  292.691498][   T23] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  292.698986][   T23] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  292.706366][   T23] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  292.713817][   T23] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  292.721262][   T23] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  292.728847][   T23] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  292.736255][   T23] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  292.743663][   T23] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  292.751285][   T23] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  292.761107][   T23] hid-generic 0000:0000:0000.001D: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  292.803434][T21611] loop0: detected capacity change from 0 to 512
[  292.810952][T21611] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  292.847218][T21611] EXT4-fs (loop0): 1 truncate cleaned up
[  292.853324][T21611] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  293.132079][T17629] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  293.167100][T21643] program syz.3.6871 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  293.242384][T21656] loop4: detected capacity change from 0 to 1024
[  293.251961][T21655] loop9: detected capacity change from 0 to 164
[  293.263711][T21655] syz.9.6875: attempt to access beyond end of device
[  293.263711][T21655] loop9: rw=524288, sector=263328, nr_sectors = 4 limit=164
[  293.279899][T21655] syz.9.6875: attempt to access beyond end of device
[  293.279899][T21655] loop9: rw=0, sector=263328, nr_sectors = 4 limit=164
[  293.307418][T21656] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  293.349698][T18789] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  293.384476][T21666] netlink: 'kfree': attribute type 12 has an invalid length.
[  293.485635][T21680] netlink: 96 bytes leftover after parsing attributes in process `syz.6.6886'.
[  293.557210][T21691] loop6: detected capacity change from 0 to 1024
[  293.564744][T21691] EXT4-fs: Ignoring removed nobh option
[  293.577251][T21693] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6892'.
[  293.586565][T21693] IPVS: Error joining to the multicast group
[  293.594201][T21691] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  293.614887][T21691] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4113: comm syz.6.6891: Allocating blocks 385-513 which overlap fs metadata
[  293.659539][T21691] EXT4-fs (loop6): pa ffff888105127f50: logic 16, phys. 129, len 24
[  293.667674][T21691] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8
[  293.731693][T15803] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  293.799619][T21706] loop0: detected capacity change from 0 to 1024
[  293.822180][T21706] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  293.880908][T21719] pim6reg1: entered promiscuous mode
[  293.886291][T21719] pim6reg1: entered allmulticast mode
[  293.894293][T21706] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.6897: Allocating blocks 497-513 which overlap fs metadata
[  293.909578][T21706] EXT4-fs (loop0): pa ffff8881051217e0: logic 16, phys. 145, len 23
[  293.917651][T21706] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1
[  293.933855][T21706] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28
[  293.946106][T21706] EXT4-fs (loop0): This should not happen!! Data will be lost
[  293.946106][T21706] 
[  293.956471][T21706] EXT4-fs (loop0): Total free blocks count 0
[  293.962515][T21706] EXT4-fs (loop0): Free/Dirty block details
[  293.968468][T21706] EXT4-fs (loop0): free_blocks=16
[  293.973563][T21706] EXT4-fs (loop0): dirty_blocks=0
[  293.979221][T21706] EXT4-fs (loop0): Block reservation details
[  293.985254][T21706] EXT4-fs (loop0): i_reserved_data_blocks=0
[  294.036620][T21731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  294.045131][T21731] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  294.399227][ T9723] hid-generic 0000:0000:20000000.001E: unknown main item tag 0x0
[  294.407267][ T9723] hid-generic 0000:0000:20000000.001E: unknown main item tag 0x0
[  294.415085][ T9723] hid-generic 0000:0000:20000000.001E: unknown main item tag 0x0
[  294.423804][ T9723] hid-generic 0000:0000:20000000.001E: unknown main item tag 0x0
[  294.430027][T21768] loop9: detected capacity change from 0 to 256
[  294.431672][ T9723] hid-generic 0000:0000:20000000.001E: unknown main item tag 0x0
[  294.445583][ T9723] hid-generic 0000:0000:20000000.001E: unknown main item tag 0x0
[  294.454171][ T9723] hid-generic 0000:0000:20000000.001E: unknown main item tag 0x0
[  294.461967][ T9723] hid-generic 0000:0000:20000000.001E: unknown main item tag 0x0
[  294.469803][ T9723] hid-generic 0000:0000:20000000.001E: unknown main item tag 0x0
[  294.478310][ T9723] hid-generic 0000:0000:20000000.001E: unknown main item tag 0x0
[  294.486051][ T9723] hid-generic 0000:0000:20000000.001E: unknown main item tag 0x0
[  294.493832][ T9723] hid-generic 0000:0000:20000000.001E: unknown main item tag 0x0
[  294.501652][ T9723] hid-generic 0000:0000:20000000.001E: unknown main item tag 0x0
[  294.510005][ T9723] hid-generic 0000:0000:20000000.001E: unknown main item tag 0x0
[  294.518330][ T9723] hid-generic 0000:0000:20000000.001E: unknown main item tag 0x0
[  294.526120][ T9723] hid-generic 0000:0000:20000000.001E: unknown main item tag 0x0
[  294.533889][ T9723] hid-generic 0000:0000:20000000.001E: unknown main item tag 0x0
[  294.542335][ T9723] hid-generic 0000:0000:20000000.001E: unknown main item tag 0x0
[  294.550154][ T9723] hid-generic 0000:0000:20000000.001E: unknown main item tag 0x0
[  294.558011][ T9723] hid-generic 0000:0000:20000000.001E: unknown main item tag 0x0
[  294.565914][ T9723] hid-generic 0000:0000:20000000.001E: unknown main item tag 0x0
[  294.574363][ T9723] hid-generic 0000:0000:20000000.001E: unknown main item tag 0x0
[  294.582320][ T9723] hid-generic 0000:0000:20000000.001E: unknown main item tag 0x0
[  294.590151][ T9723] hid-generic 0000:0000:20000000.001E: unknown main item tag 0x0
[  294.598744][ T9723] hid-generic 0000:0000:20000000.001E: unknown main item tag 0x0
[  294.606631][ T9723] hid-generic 0000:0000:20000000.001E: unknown main item tag 0x0
[  294.614363][ T9723] hid-generic 0000:0000:20000000.001E: unknown main item tag 0x0
[  294.622098][ T9723] hid-generic 0000:0000:20000000.001E: unknown main item tag 0x0
[  294.630336][ T9723] hid-generic 0000:0000:20000000.001E: unknown main item tag 0x0
[  294.640797][ T9723] hid-generic 0000:0000:20000000.001E: hidraw0: <UNKNOWN> HID v0.01 Device [syz0] on syz1
[  294.651575][T21776] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6925'.
[  294.660617][T21776] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6925'.
[  294.669696][T21776] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6925'.
[  294.683146][T21776] netlink: 'syz.9.6925': attribute type 13 has an invalid length.
[  294.760184][T21782] SELinux: failed to load policy
[  294.830668][T21776] netdevsim netdevsim9 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  294.839680][T21776] netdevsim netdevsim9 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  294.848326][T21776] netdevsim netdevsim9 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  294.856996][T21776] netdevsim netdevsim9 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  294.965890][T21778] bond2: entered promiscuous mode
[  294.971575][T21778] bond2: entered allmulticast mode
[  294.988160][T21778] 8021q: adding VLAN 0 to HW filter on device bond2
[  295.001711][T21798] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=21798 comm=syz.6.6937
[  295.044476][T21778] bond2 (unregistering): Released all slaves
[  295.054001][T21804] loop4: detected capacity change from 0 to 256
[  295.085423][T21805] netlink: 2048 bytes leftover after parsing attributes in process `syz.3.6938'.
[  295.094711][T21805] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6938'.
[  295.268497][T21819] loop4: detected capacity change from 0 to 512
[  295.277656][T21823] bridge: RTM_NEWNEIGH with invalid ether address
[  295.283656][T21819] EXT4-fs: Ignoring removed mblk_io_submit option
[  295.310521][T21819] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  295.371129][T21819] EXT4-fs (loop4): 1 truncate cleaned up
[  295.377275][T21819] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  295.600331][T21836] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6953'.
[  295.665003][T21840] loop6: detected capacity change from 0 to 128
[  295.747380][   T29] kauditd_printk_skb: 135 callbacks suppressed
[  295.747410][   T29] audit: type=1326 audit(1745798022.835:18325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21847 comm="syz.6.6959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc63558e969 code=0x7ffc0000
[  295.788855][T18789] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  295.795608][   T29] audit: type=1326 audit(1745798022.875:18326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21847 comm="syz.6.6959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc63558e969 code=0x7ffc0000
[  295.822047][   T29] audit: type=1326 audit(1745798022.875:18327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21847 comm="syz.6.6959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fc63558e969 code=0x7ffc0000
[  295.845705][   T29] audit: type=1326 audit(1745798022.875:18328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21847 comm="syz.6.6959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc63558e969 code=0x7ffc0000
[  295.869905][   T29] audit: type=1326 audit(1745798022.875:18329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21847 comm="syz.6.6959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc63558e969 code=0x7ffc0000
[  295.893791][   T29] audit: type=1326 audit(1745798022.875:18330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21847 comm="syz.6.6959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc63558e969 code=0x7ffc0000
[  295.918118][   T29] audit: type=1326 audit(1745798022.875:18331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21847 comm="syz.6.6959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc63558e969 code=0x7ffc0000
[  295.941911][   T29] audit: type=1326 audit(1745798022.875:18332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21847 comm="syz.6.6959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc63558e969 code=0x7ffc0000
[  295.966117][   T29] audit: type=1326 audit(1745798022.875:18333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21847 comm="syz.6.6959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc63558e969 code=0x7ffc0000
[  295.990358][   T29] audit: type=1326 audit(1745798022.875:18334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21847 comm="syz.6.6959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc63558e969 code=0x7ffc0000
[  296.057477][T21852] blkio.reset_stats is deprecated
[  296.157182][T21865] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21865 comm=syz.9.6967
[  296.200337][T21866] loop6: detected capacity change from 0 to 512
[  296.244792][T21866] EXT4-fs: Mount option(s) incompatible with ext3
[  296.289242][T21874] loop9: detected capacity change from 0 to 128
[  296.307598][T21876] loop4: detected capacity change from 0 to 128
[  296.314970][T21874] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  296.338891][T21880] IPv6: Can't replace route, no match found
[  296.368782][T21874] ext4 filesystem being mounted at /208/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  296.413428][T18689] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  296.438449][T21886] syz.4.6973: attempt to access beyond end of device
[  296.438449][T21886] loop4: rw=2049, sector=153, nr_sectors = 8 limit=128
[  296.467640][T21886] syz.4.6973: attempt to access beyond end of device
[  296.467640][T21886] loop4: rw=2049, sector=169, nr_sectors = 8 limit=128
[  296.522938][T21886] syz.4.6973: attempt to access beyond end of device
[  296.522938][T21886] loop4: rw=2049, sector=185, nr_sectors = 8 limit=128
[  296.536510][T21886] syz.4.6973: attempt to access beyond end of device
[  296.536510][T21886] loop4: rw=2049, sector=201, nr_sectors = 8 limit=128
[  296.556138][T21886] syz.4.6973: attempt to access beyond end of device
[  296.556138][T21886] loop4: rw=2049, sector=217, nr_sectors = 8 limit=128
[  296.571245][T21886] syz.4.6973: attempt to access beyond end of device
[  296.571245][T21886] loop4: rw=2049, sector=233, nr_sectors = 8 limit=128
[  296.586432][T21886] syz.4.6973: attempt to access beyond end of device
[  296.586432][T21886] loop4: rw=2049, sector=249, nr_sectors = 8 limit=128
[  296.602543][T21892] ref_ctr increment failed for inode: 0x1065 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff888107961080
[  296.614022][T21886] syz.4.6973: attempt to access beyond end of device
[  296.614022][T21886] loop4: rw=2049, sector=265, nr_sectors = 8 limit=128
[  296.637286][T21891] uprobe: syz.3.6980:21891 failed to unregister, leaking uprobe
[  296.743198][ T9723] hid-generic 0000:0000:20000000.001F: unknown main item tag 0x0
[  296.751798][ T9723] hid-generic 0000:0000:20000000.001F: unknown main item tag 0x0
[  296.759606][ T9723] hid-generic 0000:0000:20000000.001F: unknown main item tag 0x0
[  296.770626][ T9723] hid-generic 0000:0000:20000000.001F: unknown main item tag 0x0
[  296.779051][ T9723] hid-generic 0000:0000:20000000.001F: unknown main item tag 0x0
[  296.786946][ T9723] hid-generic 0000:0000:20000000.001F: unknown main item tag 0x0
[  296.794741][ T9723] hid-generic 0000:0000:20000000.001F: unknown main item tag 0x0
[  296.802506][ T9723] hid-generic 0000:0000:20000000.001F: unknown main item tag 0x0
[  296.810766][ T9723] hid-generic 0000:0000:20000000.001F: unknown main item tag 0x0
[  296.818534][ T9723] hid-generic 0000:0000:20000000.001F: unknown main item tag 0x0
[  296.826250][ T9723] hid-generic 0000:0000:20000000.001F: unknown main item tag 0x0
[  296.833991][ T9723] hid-generic 0000:0000:20000000.001F: unknown main item tag 0x0
[  296.842326][ T9723] hid-generic 0000:0000:20000000.001F: unknown main item tag 0x0
[  296.850050][ T9723] hid-generic 0000:0000:20000000.001F: unknown main item tag 0x0
[  296.857968][ T9723] hid-generic 0000:0000:20000000.001F: unknown main item tag 0x0
[  296.865702][ T9723] hid-generic 0000:0000:20000000.001F: unknown main item tag 0x0
[  296.874068][ T9723] hid-generic 0000:0000:20000000.001F: unknown main item tag 0x0
[  296.881933][ T9723] hid-generic 0000:0000:20000000.001F: unknown main item tag 0x0
[  296.889775][ T9723] hid-generic 0000:0000:20000000.001F: unknown main item tag 0x0
[  296.897482][ T9723] hid-generic 0000:0000:20000000.001F: unknown main item tag 0x0
[  296.905764][ T9723] hid-generic 0000:0000:20000000.001F: unknown main item tag 0x0
[  296.913571][ T9723] hid-generic 0000:0000:20000000.001F: unknown main item tag 0x0
[  296.921330][ T9723] hid-generic 0000:0000:20000000.001F: unknown main item tag 0x0
[  296.929730][ T9723] hid-generic 0000:0000:20000000.001F: unknown main item tag 0x0
[  296.937661][ T9723] hid-generic 0000:0000:20000000.001F: unknown main item tag 0x0
[  296.945624][ T9723] hid-generic 0000:0000:20000000.001F: unknown main item tag 0x0
[  296.953384][ T9723] hid-generic 0000:0000:20000000.001F: unknown main item tag 0x0
[  296.961892][ T9723] hid-generic 0000:0000:20000000.001F: unknown main item tag 0x0
[  296.969671][ T9723] hid-generic 0000:0000:20000000.001F: unknown main item tag 0x0
[  296.983460][ T9723] hid-generic 0000:0000:20000000.001F: hidraw0: <UNKNOWN> HID v0.01 Device [syz0] on syz1
[  297.064294][ T9723] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0
[  297.071817][ T9723] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0
[  297.079834][ T9723] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0
[  297.087223][ T9723] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0
[  297.094753][ T9723] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0
[  297.102298][ T9723] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0
[  297.110326][ T9723] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0
[  297.117741][ T9723] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0
[  297.125125][ T9723] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0
[  297.132615][ T9723] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0
[  297.140658][ T9723] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0
[  297.148188][ T9723] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0
[  297.155645][ T9723] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0
[  297.163159][ T9723] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0
[  297.171266][ T9723] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0
[  297.178690][ T9723] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0
[  297.186083][ T9723] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0
[  297.193486][ T9723] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0
[  297.201554][ T9723] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0
[  297.208960][ T9723] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0
[  297.216336][ T9723] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0
[  297.223736][ T9723] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0
[  297.231958][ T9723] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0
[  297.239421][ T9723] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0
[  297.246837][ T9723] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0
[  297.254258][ T9723] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0
[  297.262344][ T9723] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0
[  297.269767][ T9723] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0
[  297.277145][ T9723] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0
[  297.284547][ T9723] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0
[  297.292570][ T9723] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0
[  297.300020][ T9723] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0
[  297.308361][ T9723] hid-generic 0000:0000:0000.0020: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[  297.413655][T21957] loop0: detected capacity change from 0 to 2048
[  297.428930][T21957] EXT4-fs: Ignoring removed mblk_io_submit option
[  297.456946][T21957] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  297.489256][T17629] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  298.038040][T21993] loop9: detected capacity change from 0 to 256
[  298.043026][T21991] syzkaller0: entered promiscuous mode
[  298.045924][T21993] msdos: Bad value for 'gid'
[  298.049763][T21991] syzkaller0: entered allmulticast mode
[  298.054336][T21993] msdos: Bad value for 'gid'
[  298.144568][T21996] loop6: detected capacity change from 0 to 1024
[  298.159634][T21996] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  298.175905][T21996] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4113: comm syz.6.7034: Allocating blocks 497-513 which overlap fs metadata
[  298.191982][T21996] EXT4-fs (loop6): pa ffff888105121770: logic 16, phys. 145, len 23
[  298.200134][T21996] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1
[  298.213872][T21996] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28
[  298.226129][T21996] EXT4-fs (loop6): This should not happen!! Data will be lost
[  298.226129][T21996] 
[  298.235804][T21996] EXT4-fs (loop6): Total free blocks count 0
[  298.241873][T21996] EXT4-fs (loop6): Free/Dirty block details
[  298.247847][T21996] EXT4-fs (loop6): free_blocks=16
[  298.252902][T21996] EXT4-fs (loop6): dirty_blocks=0
[  298.257949][T21996] EXT4-fs (loop6): Block reservation details
[  298.263951][T21996] EXT4-fs (loop6): i_reserved_data_blocks=0
[  298.461318][T22007] loop9: detected capacity change from 0 to 512
[  298.482155][T22007] EXT4-fs: Mount option(s) incompatible with ext3
[  298.572116][T22014] loop6: detected capacity change from 0 to 128
[  298.574820][T22010] loop9: detected capacity change from 0 to 1024
[  298.611608][T22010] EXT4-fs: Ignoring removed nobh option
[  298.643517][T22010] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  298.694573][T22022] netlink: 96 bytes leftover after parsing attributes in process `syz.0.7031'.
[  298.709895][T22010] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4113: comm syz.9.7026: Allocating blocks 385-513 which overlap fs metadata
[  298.750138][T22010] EXT4-fs (loop9): pa ffff888105121770: logic 16, phys. 129, len 24
[  298.758167][T22010] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8
[  298.823320][T18689] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  298.833978][ T9722] IPVS: starting estimator thread 0...
[  298.855240][T22034] loop4: detected capacity change from 0 to 128
[  298.869889][T22034] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  298.888831][T22034] ext4 filesystem being mounted at /248/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  298.917365][T18789] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  298.947774][T22031] IPVS: using max 2448 ests per chain, 122400 per kthread
[  298.996873][T22041] lo speed is unknown, defaulting to 1000
[  299.337989][T22080] netlink: 'syz.9.7059': attribute type 13 has an invalid length.
[  299.426360][T22085] loop4: detected capacity change from 0 to 512
[  299.464156][T22085] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  299.476856][T22085] ext4 filesystem being mounted at /254/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  299.498432][T22085] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #2: comm syz.4.7061: corrupted inode contents
[  299.537747][T22085] EXT4-fs error (device loop4): ext4_dirty_inode:6103: inode #2: comm syz.4.7061: mark_inode_dirty error
[  299.560731][T22093] loop9: detected capacity change from 0 to 512
[  299.570622][T22085] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #2: comm syz.4.7061: corrupted inode contents
[  299.582966][T22093] EXT4-fs: Ignoring removed mblk_io_submit option
[  299.595259][T22085] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #2: comm syz.4.7061: mark_inode_dirty error
[  299.692651][T18789] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  299.702610][T22093] EXT4-fs (loop9): revision level too high, forcing read-only mode
[  299.711597][T22093] EXT4-fs (loop9): orphan cleanup on readonly fs
[  299.713722][T22097] loop6: detected capacity change from 0 to 2048
[  299.740208][T22093] EXT4-fs warning (device loop9): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  299.775980][T22093] EXT4-fs (loop9): Cannot turn on quotas: error -117
[  299.785675][T22097] EXT4-fs error (device loop6): ext4_ext_precache:631: inode #2: comm wg1: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5)
[  299.836623][T22093] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.7062: bg 0: block 40: padding at end of block bitmap is not set
[  299.854508][T22093] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  299.877834][T22093] EXT4-fs (loop9): 1 truncate cleaned up
[  299.891788][T22093] EXT4-fs error (device loop9): ext4_xattr_block_get:593: inode #16: comm syz.9.7062: corrupted xattr block 31: invalid header
[  299.906184][T22093] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop9 ino=16
[  299.916445][T22093] EXT4-fs error (device loop9): ext4_xattr_block_get:593: inode #16: comm syz.9.7062: corrupted xattr block 31: invalid header
[  299.942270][T22093] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop9 ino=16
[  299.965331][T22093] EXT4-fs error (device loop9): ext4_get_link:106: inode #16: comm syz.9.7062: bad symlink.
[  299.979670][T22114] loop0: detected capacity change from 0 to 512
[  299.986727][T22114] EXT4-fs: Ignoring removed mblk_io_submit option
[  299.999152][T22114] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  300.050409][T22120] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7074'.
[  300.061702][T22120] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  300.069921][T22120] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  300.078115][T22120] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  300.086350][T22120] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  300.104553][T22114] EXT4-fs (loop0): 1 truncate cleaned up
[  300.114399][T22120] netdevsim netdevsim6 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  300.122876][T22120] netdevsim netdevsim6 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  300.131264][T22120] netdevsim netdevsim6 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  300.139734][T22120] netdevsim netdevsim6 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  300.231397][T22118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  300.239969][T22118] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  300.469861][T22142] netlink: 128 bytes leftover after parsing attributes in process `syz.6.7082'.
[  300.616430][ T9709] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0
[  300.624030][ T9709] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0
[  300.631576][ T9709] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0
[  300.639034][ T9709] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0
[  300.646416][ T9709] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0
[  300.653876][ T9709] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0
[  300.661333][ T9709] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0
[  300.668785][ T9709] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0
[  300.676161][ T9709] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0
[  300.683540][ T9709] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0
[  300.691081][ T9709] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0
[  300.698482][ T9709] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0
[  300.705854][ T9709] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0
[  300.713240][ T9709] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0
[  300.720612][ T9709] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0
[  300.728071][ T9709] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0
[  300.735510][ T9709] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0
[  300.742885][ T9709] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0
[  300.750387][ T9709] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0
[  300.757822][ T9709] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0
[  300.765266][ T9709] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0
[  300.772732][ T9709] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0
[  300.780216][ T9709] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0
[  300.783587][T22162] loop4: detected capacity change from 0 to 256
[  300.787616][ T9709] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0
[  300.787639][ T9709] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0
[  300.787704][ T9709] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0
[  300.787726][ T9709] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0
[  300.787749][ T9709] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0
[  300.787771][ T9709] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0
[  300.787793][ T9709] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0
[  300.787864][ T9709] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0
[  300.787887][ T9709] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0
[  300.835071][ T9709] hid-generic 0000:0000:0000.0021: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[  300.896103][T22164] loop0: detected capacity change from 0 to 128
[  300.955856][T22170] lo speed is unknown, defaulting to 1000
[  300.968886][T22172] bio_check_eod: 104 callbacks suppressed
[  300.968955][T22172] syz.0.7090: attempt to access beyond end of device
[  300.968955][T22172] loop0: rw=2049, sector=153, nr_sectors = 8 limit=128
[  300.988504][T22173] loop6: detected capacity change from 0 to 512
[  300.988727][T22173] EXT4-fs: Ignoring removed i_version option
[  301.047796][T22172] syz.0.7090: attempt to access beyond end of device
[  301.047796][T22172] loop0: rw=2049, sector=169, nr_sectors = 8 limit=128
[  301.077601][T22173] ext4 filesystem being mounted at /483/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  301.097645][T22172] syz.0.7090: attempt to access beyond end of device
[  301.097645][T22172] loop0: rw=2049, sector=185, nr_sectors = 8 limit=128
[  301.114963][   T29] kauditd_printk_skb: 130 callbacks suppressed
[  301.114977][   T29] audit: type=1326 audit(1745798028.205:18464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22169 comm="syz.6.7093" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc63558e969 code=0x0
[  301.165253][T22172] syz.0.7090: attempt to access beyond end of device
[  301.165253][T22172] loop0: rw=2049, sector=201, nr_sectors = 8 limit=128
[  301.179576][T22172] syz.0.7090: attempt to access beyond end of device
[  301.179576][T22172] loop0: rw=2049, sector=217, nr_sectors = 8 limit=128
[  301.193619][T22172] syz.0.7090: attempt to access beyond end of device
[  301.193619][T22172] loop0: rw=2049, sector=233, nr_sectors = 8 limit=128
[  301.207890][T22172] syz.0.7090: attempt to access beyond end of device
[  301.207890][T22172] loop0: rw=2049, sector=249, nr_sectors = 8 limit=128
[  301.222337][T22172] syz.0.7090: attempt to access beyond end of device
[  301.222337][T22172] loop0: rw=2049, sector=265, nr_sectors = 8 limit=128
[  301.235937][T22172] syz.0.7090: attempt to access beyond end of device
[  301.235937][T22172] loop0: rw=2049, sector=281, nr_sectors = 8 limit=128
[  301.250158][   T29] audit: type=1400 audit(1745798028.305:18465): avc:  denied  { write } for  pid=22179 comm="syz.4.7095" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  301.271062][   T29] audit: type=1400 audit(1745798028.305:18466): avc:  denied  { open } for  pid=22179 comm="syz.4.7095" path="/261/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  301.294587][T22172] syz.0.7090: attempt to access beyond end of device
[  301.294587][T22172] loop0: rw=2049, sector=297, nr_sectors = 8 limit=128
[  301.324681][T22182] netlink: 128 bytes leftover after parsing attributes in process `syz.9.7096'.
[  301.354141][T22184] team0: Port device geneve1 removed
[  301.364956][T22190] loop9: detected capacity change from 0 to 2048
[  301.384725][T22195] loop4: detected capacity change from 0 to 512
[  301.385522][T22190] EXT4-fs error (device loop9): ext4_ext_precache:631: inode #2: comm wg1: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5)
[  301.410554][T22195] EXT4-fs: Mount option(s) incompatible with ext3
[  301.433916][   T29] audit: type=1326 audit(1745798028.515:18467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22192 comm="syz.4.7097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb71936e969 code=0x7ffc0000
[  301.458260][   T29] audit: type=1326 audit(1745798028.515:18468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22192 comm="syz.4.7097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7fb71936e969 code=0x7ffc0000
[  301.481988][   T29] audit: type=1326 audit(1745798028.515:18469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22192 comm="syz.4.7097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb71936e969 code=0x7ffc0000
[  301.505593][   T29] audit: type=1326 audit(1745798028.515:18470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22192 comm="syz.4.7097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7fb71936e969 code=0x7ffc0000
[  301.529787][   T29] audit: type=1326 audit(1745798028.515:18471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22192 comm="syz.4.7097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb71936e969 code=0x7ffc0000
[  301.553394][   T29] audit: type=1326 audit(1745798028.515:18472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22192 comm="syz.4.7097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7fb71936e969 code=0x7ffc0000
[  301.577470][   T29] audit: type=1326 audit(1745798028.515:18473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22192 comm="syz.4.7097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb71936e969 code=0x7ffc0000
[  301.689891][T22209] loop0: detected capacity change from 0 to 256
[  301.764610][T22217] loop9: detected capacity change from 0 to 256
[  301.863056][T22220] loop9: detected capacity change from 0 to 1024
[  301.879336][T22220] EXT4-fs: Ignoring removed orlov option
[  301.888447][T22220] /dev/loop9: Can't open blockdev
[  302.172982][T22213] Set syz1 is full, maxelem 65536 reached
[  302.204414][T22231] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7113'.
[  302.236363][T22235] loop6: detected capacity change from 0 to 164
[  302.663437][T22253] loop4: detected capacity change from 0 to 256
[  302.719372][T22257] netlink: 'syz.4.7126': attribute type 12 has an invalid length.
[  302.855862][T22268] netlink: 404 bytes leftover after parsing attributes in process `syz.9.7131'.
[  302.944445][T22274] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7134'.
[  302.963818][T22274] netdevsim netdevsim9 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  302.972067][T22274] netdevsim netdevsim9 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  302.980319][T22274] netdevsim netdevsim9 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  302.988567][T22274] netdevsim netdevsim9 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  303.002191][T22274] netdevsim netdevsim9 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  303.010609][T22274] netdevsim netdevsim9 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  303.019010][T22274] netdevsim netdevsim9 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  303.027373][T22274] netdevsim netdevsim9 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  303.109817][T22281] loop0: detected capacity change from 0 to 512
[  303.142829][T22281] ext4 filesystem being mounted at /349/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  303.318625][T22286] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #18: comm syz.0.7135: corrupted inode contents
[  303.341840][T22286] EXT4-fs error (device loop0): ext4_dirty_inode:6103: inode #18: comm syz.0.7135: mark_inode_dirty error
[  303.377928][T22286] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #18: comm syz.0.7135: corrupted inode contents
[  303.405634][T22286] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2991: inode #18: comm syz.0.7135: mark_inode_dirty error
[  303.429666][T22292] loop6: detected capacity change from 0 to 256
[  303.438733][T22286] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2994: inode #18: comm syz.0.7135: mark inode dirty (error -117)
[  303.453768][T22292] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  303.463067][T22292] FAT-fs (loop6): Filesystem has been set read-only
[  303.471812][T22286] EXT4-fs warning (device loop0): ext4_evict_inode:279: xattr delete (err -117)
[  303.472592][T22292] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  303.491560][T22292] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  303.500331][T22292] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  303.510195][T22292] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  303.519622][T22292] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  303.529417][T22292] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  303.538142][T22292] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  303.547151][T22292] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  303.557871][T22292] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  303.620698][T22300] loop6: detected capacity change from 0 to 2048
[  303.693425][T22306] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22306 comm=syz.9.7144
[  303.728409][T22300] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 1 with max blocks 1 with error 28
[  303.741331][T22300] EXT4-fs (loop6): This should not happen!! Data will be lost
[  303.741331][T22300] 
[  303.751034][T22300] EXT4-fs (loop6): Total free blocks count 0
[  303.757069][T22300] EXT4-fs (loop6): Free/Dirty block details
[  303.762978][T22300] EXT4-fs (loop6): free_blocks=0
[  303.768471][T22300] EXT4-fs (loop6): dirty_blocks=0
[  303.773536][T22300] EXT4-fs (loop6): Block reservation details
[  303.779520][T22300] EXT4-fs (loop6): i_reserved_data_blocks=0
[  303.842285][T22311] loop6: detected capacity change from 0 to 1024
[  303.849210][T22311] EXT4-fs: Ignoring removed bh option
[  303.897611][T22311] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4113: comm syz.6.7146: Allocating blocks 497-513 which overlap fs metadata
[  303.965094][T22315] pim6reg1: entered promiscuous mode
[  303.970470][T22315] pim6reg1: entered allmulticast mode
[  304.264599][T22332] loop9: detected capacity change from 0 to 2048
[  304.456200][T22341] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  304.855185][T22356] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7166'.
[  304.873024][ T3321] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  304.889188][ T3321] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  304.902362][ T3321] EXT4-fs (loop9): This should not happen!! Data will be lost
[  304.902362][ T3321] 
[  304.912092][ T3321] EXT4-fs (loop9): Total free blocks count 0
[  304.918130][ T3321] EXT4-fs (loop9): Free/Dirty block details
[  304.924068][ T3321] EXT4-fs (loop9): free_blocks=2415919504
[  304.930367][ T3321] EXT4-fs (loop9): dirty_blocks=16400
[  304.935725][ T3321] EXT4-fs (loop9): Block reservation details
[  304.941764][ T3321] EXT4-fs (loop9): i_reserved_data_blocks=1025
[  304.960414][ T7315] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28
[  304.973200][ T7315] EXT4-fs (loop9): This should not happen!! Data will be lost
[  304.973200][ T7315] 
[  305.106111][T22372] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  305.254102][T22384] all: renamed from lo
[  305.684988][T22413] loop9: detected capacity change from 0 to 1024
[  305.691955][T22413] EXT4-fs: Ignoring removed bh option
[  305.743053][T22413] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4113: comm syz.9.7189: Allocating blocks 497-513 which overlap fs metadata
[  305.998846][T22428] netlink: 2028 bytes leftover after parsing attributes in process `syz.4.7192'.
[  306.008110][T22428] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7192'.
[  306.109884][T22433] loop0: detected capacity change from 0 to 1024
[  306.165499][   T29] kauditd_printk_skb: 46 callbacks suppressed
[  306.165514][   T29] audit: type=1400 audit(1745798033.255:18520): avc:  denied  { read } for  pid=22437 comm="syz.9.7196" dev="nsfs" ino=4026533427 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  306.210248][   T29] audit: type=1400 audit(1745798033.255:18521): avc:  denied  { open } for  pid=22437 comm="syz.9.7196" path="net:[4026533427]" dev="nsfs" ino=4026533427 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  306.233672][   T29] audit: type=1400 audit(1745798033.255:18522): avc:  denied  { create } for  pid=22437 comm="syz.9.7196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  306.253886][   T29] audit: type=1400 audit(1745798033.265:18523): avc:  denied  { bind } for  pid=22437 comm="syz.9.7196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  306.273899][   T29] audit: type=1400 audit(1745798033.265:18524): avc:  denied  { connect } for  pid=22437 comm="syz.9.7196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  306.294194][   T29] audit: type=1400 audit(1745798033.265:18525): avc:  denied  { write } for  pid=22437 comm="syz.9.7196" path="socket:[75186]" dev="sockfs" ino=75186 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  306.318360][   T29] audit: type=1400 audit(1745798033.285:18526): avc:  denied  { create } for  pid=22436 comm="syz.6.7207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  306.338057][   T29] audit: type=1400 audit(1745798033.285:18527): avc:  denied  { write open } for  pid=22432 comm="syz.0.7195" path="/356/file1/bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  306.361346][   T29] audit: type=1400 audit(1745798033.285:18528): avc:  denied  { mounton } for  pid=22432 comm="syz.0.7195" path="/356/file1/bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  306.384420][   T29] audit: type=1400 audit(1745798033.295:18529): avc:  denied  { remove_name } for  pid=17629 comm="syz-executor" name="lost+found" dev="loop0" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  306.416451][T22445] netlink: 'syz.9.7198': attribute type 7 has an invalid length.
[  306.424247][T22445] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7198'.
[  306.483391][T22453] tipc: Started in network mode
[  306.488472][T22453] tipc: Node identity c2ea9cf8bc8a, cluster identity 4711
[  306.495712][T22453] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  306.514409][T22453] syzkaller0: entered promiscuous mode
[  306.520015][T22453] syzkaller0: entered allmulticast mode
[  306.526664][T22453] tipc: Resetting bearer <eth:syzkaller0>
[  306.538295][T22452] tipc: Resetting bearer <eth:syzkaller0>
[  306.550050][T22452] tipc: Disabling bearer <eth:syzkaller0>
[  306.772172][T22460] ÿÿÿÿÿÿ: renamed from vlan1 (while UP)
[  307.057564][T22479] loop4: detected capacity change from 0 to 1024
[  307.115600][T22486] loop4: detected capacity change from 0 to 512
[  307.131584][T22486] EXT4-fs (loop4): 1 orphan inode deleted
[  307.138499][T22486] ext4 filesystem being mounted at /285/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  307.149363][ T7300] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:27: Failed to release dquot type 1
[  307.172731][ T7300] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:27: Failed to release dquot type 1
[  307.183694][T22492] loop0: detected capacity change from 0 to 2048
[  307.198399][T22494] loop4: detected capacity change from 0 to 512
[  307.205212][T22494] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  307.214472][T22494] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002]
[  307.222782][T22494] EXT4-fs error (device loop4): ext4_iget_extra_inode:4693: inode #15: comm syz.4.7219: corrupted in-inode xattr: e_value size too large
[  307.237183][T22494] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.7219: couldn't read orphan inode 15 (err -117)
[  307.390907][T22510] loop9: detected capacity change from 0 to 512
[  307.399287][T22510] EXT4-fs: Ignoring removed nobh option
[  307.408191][T22510] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.7225: invalid indirect mapped block 256 (level 2)
[  307.423711][T22510] EXT4-fs (loop9): 2 truncates cleaned up
[  307.486465][T22518] netlink: 'syz.4.7227': attribute type 7 has an invalid length.
[  307.494248][T22518] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7227'.
[  307.574507][ T7300] EXT4-fs error (device loop9): ext4_validate_block_bitmap:432: comm kworker/u8:27: bg 0: block 5: invalid block bitmap
[  307.588098][ T7300] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  307.600598][ T7300] EXT4-fs (loop9): This should not happen!! Data will be lost
[  307.600598][ T7300] 
[  307.610369][ T7300] EXT4-fs (loop9): Total free blocks count 0
[  307.616351][ T7300] EXT4-fs (loop9): Free/Dirty block details
[  307.622371][ T7300] EXT4-fs (loop9): free_blocks=0
[  307.627322][ T7300] EXT4-fs (loop9): dirty_blocks=3728
[  307.632419][T22528] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  307.632744][ T7300] EXT4-fs (loop9): Block reservation details
[  307.645225][ T7300] EXT4-fs (loop9): i_reserved_data_blocks=3728
[  307.653006][T22528] tipc: Disabling bearer <eth:syzkaller0>
[  307.663796][ T7312] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 1672 with error 28
[  307.676552][ T7312] EXT4-fs (loop9): This should not happen!! Data will be lost
[  307.676552][ T7312] 
[  307.718353][T22532] ALSA: seq fatal error: cannot create timer (-19)
[  307.775955][T22542] loop0: detected capacity change from 0 to 2048
[  307.817453][T22546] lo speed is unknown, defaulting to 1000
[  307.824024][T22542] ext4 filesystem being mounted at /372/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  308.010511][T22561] loop6: detected capacity change from 0 to 512
[  308.016987][T22561] EXT4-fs: Ignoring removed nobh option
[  308.040105][T22561] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.7244: invalid indirect mapped block 256 (level 2)
[  308.070367][T22559] pim6reg1: entered promiscuous mode
[  308.075684][T22559] pim6reg1: entered allmulticast mode
[  308.121176][T22561] EXT4-fs (loop6): 2 truncates cleaned up
[  308.363085][ T7312] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm kworker/u8:39: bg 0: block 5: invalid block bitmap
[  308.387648][ T7312] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1040 with error 28
[  308.400141][ T7312] EXT4-fs (loop6): This should not happen!! Data will be lost
[  308.400141][ T7312] 
[  308.409927][ T7312] EXT4-fs (loop6): Total free blocks count 0
[  308.415946][ T7312] EXT4-fs (loop6): Free/Dirty block details
[  308.421957][ T7312] EXT4-fs (loop6): free_blocks=0
[  308.426912][ T7312] EXT4-fs (loop6): dirty_blocks=1044
[  308.432287][ T7312] EXT4-fs (loop6): Block reservation details
[  308.438277][ T7312] EXT4-fs (loop6): i_reserved_data_blocks=1044
[  308.496290][ T7300] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm kworker/u8:27: bg 0: block 345: padding at end of block bitmap is not set
[  308.523000][ T7300] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 3 with error 117
[  308.535413][ T7300] EXT4-fs (loop0): This should not happen!! Data will be lost
[  308.535413][ T7300] 
[  308.579876][T22573] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 19 with max blocks 2 with error 117
[  308.592301][T22573] EXT4-fs (loop0): This should not happen!! Data will be lost
[  308.592301][T22573] 
[  308.643285][T22581] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7253'.
[  308.754714][T22589] ref_ctr_offset mismatch. inode: 0xa98 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6
[  308.775500][T22591] lo speed is unknown, defaulting to 1000
[  309.585082][T22609] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  309.660223][T22613] smc: net device bond0 applied user defined pnetid SYZ2
[  309.667604][T22613] smc: net device bond0 erased user defined pnetid SYZ2
[  309.750017][T22623] loop0: detected capacity change from 0 to 256
[  309.934134][T22632] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  309.944016][T22632] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  309.984024][T22636] loop6: detected capacity change from 0 to 512
[  309.992083][T22632] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  309.992826][T22636] EXT4-fs error (device loop6): ext4_iget_extra_inode:4693: inode #15: comm syz.6.7276: corrupted in-inode xattr: invalid ea_ino
[  310.001887][T22632] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  310.016896][T22636] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.7276: couldn't read orphan inode 15 (err -117)
[  310.089061][T22632] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  310.098867][T22632] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  310.148776][T22632] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  310.158576][T22632] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  310.203900][T22632] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  310.212185][T22632] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  310.223274][T22632] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  310.231648][T22632] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  310.242719][T22632] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  310.251038][T22632] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  310.262177][T22632] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  310.270367][T22632] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  310.352415][T22646] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=22646 comm=syz.0.7278
[  310.438660][T22654] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7282'.
[  310.466152][T22659] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22659 comm=syz.9.7285
[  310.478985][T22659] netlink: 'syz.9.7285': attribute type 1 has an invalid length.
[  310.496647][T22659] bond1: (slave gretap1): making interface the new active one
[  310.504788][T22659] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  311.149264][T22677] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=22677 comm=syz.4.7294
[  311.170566][   T29] kauditd_printk_skb: 377 callbacks suppressed
[  311.170580][   T29] audit: type=1326 audit(1745798038.265:18905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22663 comm="syz.9.7286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5f1f3b5927 code=0x7ffc0000
[  311.178409][T22679] loop4: detected capacity change from 0 to 512
[  311.201261][   T29] audit: type=1326 audit(1745798038.265:18906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22663 comm="syz.9.7286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5f1f35ab39 code=0x7ffc0000
[  311.209351][T22679] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  311.231077][   T29] audit: type=1326 audit(1745798038.265:18907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22663 comm="syz.9.7286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f5f1f3be969 code=0x7ffc0000
[  311.264412][   T29] audit: type=1326 audit(1745798038.295:18908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22663 comm="syz.9.7286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5f1f3b5927 code=0x7ffc0000
[  311.288588][   T29] audit: type=1326 audit(1745798038.295:18909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22663 comm="syz.9.7286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5f1f35ab39 code=0x7ffc0000
[  311.312275][   T29] audit: type=1326 audit(1745798038.295:18910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22663 comm="syz.9.7286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f5f1f3be969 code=0x7ffc0000
[  311.335867][   T29] audit: type=1326 audit(1745798038.335:18911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22663 comm="syz.9.7286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5f1f3b5927 code=0x7ffc0000
[  311.338448][T22679] EXT4-fs (loop4): 1 truncate cleaned up
[  311.360075][   T29] audit: type=1326 audit(1745798038.335:18912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22663 comm="syz.9.7286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5f1f35ab39 code=0x7ffc0000
[  311.365577][T22679] EXT4-fs mount: 38 callbacks suppressed
[  311.365591][T22679] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  311.389204][   T29] audit: type=1326 audit(1745798038.335:18913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22663 comm="syz.9.7286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f5f1f3be969 code=0x7ffc0000
[  311.430267][   T29] audit: type=1326 audit(1745798038.335:18914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22663 comm="syz.9.7286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5f1f3b5927 code=0x7ffc0000
[  311.604200][T22692] loop9: detected capacity change from 0 to 2048
[  311.661760][T18789] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  311.672392][T22692]  loop9: p1 < > p4
[  311.679930][T22692] loop9: p4 size 8388608 extends beyond EOD, truncated
[  311.689480][T22696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  311.699900][T22696] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  311.890689][T22702] Set syz1 is full, maxelem 65536 reached
[  312.004789][T22707] loop9: detected capacity change from 0 to 128
[  312.271409][T22719] SELinux: failed to load policy
[  312.301687][T22724] loop9: detected capacity change from 0 to 512
[  312.311874][T22724] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  312.344261][T22727] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22727 comm=syz.4.7327
[  312.344341][T22724] EXT4-fs (loop9): 1 truncate cleaned up
[  312.358765][T22727] netlink: 'syz.4.7327': attribute type 1 has an invalid length.
[  312.382018][T22724] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  312.386630][T22727] bond2: (slave gretap1): making interface the new active one
[  312.403796][T22727] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  312.504238][T22733] bridge: RTM_NEWNEIGH with invalid ether address
[  312.519105][T22734] loop6: detected capacity change from 0 to 512
[  312.532147][T22732] lo speed is unknown, defaulting to 1000
[  312.545505][T22734] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  312.588021][T22734] EXT4-fs (loop6): 1 truncate cleaned up
[  312.599846][T22734] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  312.670208][T22734] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  312.837096][T22746] ref_ctr_offset mismatch. inode: 0x66e offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6
[  312.939737][T22750] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  312.947271][T18689] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  312.966662][T22750] tipc: Disabling bearer <eth:syzkaller0>
[  313.017658][T22758] loop0: detected capacity change from 0 to 1024
[  313.026089][T22758] EXT4-fs: Ignoring removed nobh option
[  313.040693][T22758] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  313.066637][T22758] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.7328: Allocating blocks 385-513 which overlap fs metadata
[  313.090212][T22758] EXT4-fs (loop0): pa ffff888105121690: logic 16, phys. 129, len 24
[  313.098257][T22758] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8
[  313.150029][T17629] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  313.193298][T22770] No such timeout policy "syz0"
[  313.264192][T22776] loop4: detected capacity change from 0 to 128
[  313.327704][T22778] lo speed is unknown, defaulting to 1000
[  313.357287][ T7300] bio_check_eod: 104 callbacks suppressed
[  313.357299][ T7300] kworker/u8:27: attempt to access beyond end of device
[  313.357299][ T7300] loop4: rw=1, sector=145, nr_sectors = 896 limit=128
[  313.829860][T22784] loop6: detected capacity change from 0 to 512
[  313.837140][T22784] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  313.849253][T22784] EXT4-fs (loop6): 1 truncate cleaned up
[  313.855489][T22784] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  313.873238][T22788] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  313.889065][T22788] tipc: Disabling bearer <eth:syzkaller0>
[  314.031270][T22802] loop9: detected capacity change from 0 to 1024
[  314.064198][T22802] EXT4-fs: Ignoring removed nobh option
[  314.099942][T22802] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  314.128877][T22802] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4113: comm syz.9.7346: Allocating blocks 385-513 which overlap fs metadata
[  314.146663][T22802] EXT4-fs (loop9): pa ffff888105127b60: logic 16, phys. 129, len 24
[  314.155381][T22802] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8
[  314.199515][T18689] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  314.236228][T22803] syz.3.7344 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[  314.246768][T22803] CPU: 0 UID: 0 PID: 22803 Comm: syz.3.7344 Not tainted 6.15.0-rc4-syzkaller #0 PREEMPT(voluntary) 
[  314.246796][T22803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  314.246811][T22803] Call Trace:
[  314.246817][T22803]  <TASK>
[  314.246840][T22803]  __dump_stack+0x1d/0x30
[  314.246868][T22803]  dump_stack_lvl+0xe8/0x140
[  314.246893][T22803]  dump_stack+0x15/0x1b
[  314.246961][T22803]  dump_header+0x81/0x220
[  314.247065][T22803]  oom_kill_process+0x334/0x3f0
[  314.247110][T22803]  out_of_memory+0x979/0xb80
[  314.247176][T22803]  ? css_next_descendant_pre+0x138/0x160
[  314.247210][T22803]  mem_cgroup_out_of_memory+0x13d/0x190
[  314.247267][T22803]  try_charge_memcg+0x5e2/0x870
[  314.247357][T22803]  charge_memcg+0x51/0xc0
[  314.247381][T22803]  __mem_cgroup_charge+0x28/0xb0
[  314.247406][T22803]  shmem_get_folio_gfp+0x470/0xd40
[  314.247437][T22803]  shmem_fault+0xf6/0x250
[  314.247484][T22803]  __do_fault+0xb9/0x200
[  314.247533][T22803]  handle_mm_fault+0x110c/0x2ae0
[  314.247573][T22803]  ? __rcu_read_lock+0x37/0x50
[  314.247598][T22803]  __get_user_pages+0xde2/0x1d20
[  314.247641][T22803]  __mm_populate+0x243/0x3a0
[  314.247762][T22803]  vm_mmap_pgoff+0x232/0x2e0
[  314.247785][T22803]  ksys_mmap_pgoff+0xc2/0x310
[  314.247812][T22803]  ? __x64_sys_mmap+0x49/0x70
[  314.247884][T22803]  x64_sys_call+0x1602/0x2fb0
[  314.247904][T22803]  do_syscall_64+0xd0/0x1a0
[  314.247939][T22803]  ? clear_bhb_loop+0x25/0x80
[  314.247962][T22803]  ? clear_bhb_loop+0x25/0x80
[  314.247987][T22803]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  314.248008][T22803] RIP: 0033:0x7f43f924e969
[  314.248027][T22803] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  314.248044][T22803] RSP: 002b:00007f43f7896038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  314.248065][T22803] RAX: ffffffffffffffda RBX: 00007f43f9476080 RCX: 00007f43f924e969
[  314.248080][T22803] RDX: 0000000000000002 RSI: 0000000000b36000 RDI: 0000200000000000
[  314.248116][T22803] RBP: 00007f43f92d0ab1 R08: ffffffffffffffff R09: 0000000000000000
[  314.248128][T22803] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000
[  314.248139][T22803] R13: 0000000000000000 R14: 00007f43f9476080 R15: 00007ffd09b0b438
[  314.248155][T22803]  </TASK>
[  314.473859][T22803] memory: usage 306680kB, limit 307200kB, failcnt 688
[  314.480742][T22803] memory+swap: usage 301436kB, limit 9007199254740988kB, failcnt 0
[  314.488669][T22803] kmem: usage 210980kB, limit 9007199254740988kB, failcnt 0
[  314.495980][T22803] Memory cgroup stats for /syz3:
[  314.498228][T22803] cache 73084928
[  314.506689][T22803] rss 155648
[  314.510532][T22803] shmem 72994816
[  314.514183][T22803] mapped_file 8998912
[  314.518240][T22803] dirty 0
[  314.521205][T22803] writeback 0
[  314.524499][T22803] workingset_refault_anon 1535
[  314.529289][T22803] workingset_refault_file 0
[  314.533779][T22803] swap 5545984
[  314.537143][T22803] swapcached 0
[  314.541172][T22803] pgpgin 469724
[  314.544654][T22803] pgpgout 451843
[  314.548219][T22803] pgfault 251449
[  314.551812][T22803] pgmajfault 335
[  314.555352][T22803] inactive_anon 62775296
[  314.559710][T22803] active_anon 10375168
[  314.563830][T22803] inactive_file 90112
[  314.568455][T22803] active_file 0
[  314.571911][T22803] unevictable 0
[  314.575413][T22803] hierarchical_memory_limit 314572800
[  314.580856][T22803] hierarchical_memsw_limit 9223372036854771712
[  314.587004][T22803] total_cache 73084928
[  314.591097][T22803] total_rss 155648
[  314.594816][T22803] total_shmem 72994816
[  314.599525][T22803] total_mapped_file 8998912
[  314.604102][T22803] total_dirty 0
[  314.607676][T22803] total_writeback 0
[  314.611579][T22803] total_workingset_refault_anon 1535
[  314.616863][T22803] total_workingset_refault_file 0
[  314.621897][T22803] total_swap 5545984
[  314.625806][T22803] total_swapcached 0
[  314.630243][T22803] total_pgpgin 469724
[  314.634222][T22803] total_pgpgout 451843
[  314.638329][T22803] total_pgfault 251449
[  314.642423][T22803] total_pgmajfault 335
[  314.646484][T22803] total_inactive_anon 62775296
[  314.651322][T22803] total_active_anon 10375168
[  314.655957][T22803] total_inactive_file 90112
[  314.661087][T22803] total_active_file 0
[  314.665099][T22803] total_unevictable 0
[  314.669115][T22803] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.7344,pid=22793,uid=0
[  314.683799][T22803] Memory cgroup out of memory: Killed process 22793 (syz.3.7344) total-vm:95796kB, anon-rss:1072kB, file-rss:22344kB, shmem-rss:8576kB, UID:0 pgtables:144kB oom_score_adj:1000
[  314.703714][T15803] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  314.785429][T22814] netlink: 'syz.0.7352': attribute type 1 has an invalid length.
[  314.809257][T22814] 8021q: adding VLAN 0 to HW filter on device bond2
[  314.826190][T22814] vlan1: entered promiscuous mode
[  314.836967][T22814] bond2: entered promiscuous mode
[  314.842352][T22814] vlan1: entered allmulticast mode
[  314.847611][T22814] bond2: entered allmulticast mode
[  314.883427][T22817] lo speed is unknown, defaulting to 1000
[  314.942472][T22833] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  314.949895][T22833] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  315.065312][T22850] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7367'.
[  315.215766][T22861] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32
[  315.334514][T22872] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7376'.
[  315.363469][T22872] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  315.389315][T22875] netlink: 'syz.3.7377': attribute type 13 has an invalid length.
[  315.521394][T22881] lo speed is unknown, defaulting to 1000
[  315.829580][T22890] wg2: entered promiscuous mode
[  315.834469][T22890] wg2: entered allmulticast mode
[  315.894388][T22895] loop4: detected capacity change from 0 to 128
[  315.922423][T22895] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  315.943197][T22895] ext4 filesystem being mounted at /320/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  315.966941][T22903] loop9: detected capacity change from 0 to 512
[  315.993195][T22903] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  316.012322][T22903] EXT4-fs warning (device loop9): dx_probe:839: inode #2: comm syz.9.7389: Unimplemented hash flags: 0x0001
[  316.024003][T22903] EXT4-fs warning (device loop9): dx_probe:936: inode #2: comm syz.9.7389: Corrupt directory, running e2fsck is recommended
[  316.046627][T22903] EXT4-fs warning (device loop9): dx_probe:839: inode #2: comm syz.9.7389: Unimplemented hash flags: 0x0001
[  316.058208][T22903] EXT4-fs warning (device loop9): dx_probe:936: inode #2: comm syz.9.7389: Corrupt directory, running e2fsck is recommended
[  316.071974][T22903] EXT4-fs warning (device loop9): dx_probe:839: inode #2: comm syz.9.7389: Unimplemented hash flags: 0x0001
[  316.083603][T22903] EXT4-fs warning (device loop9): dx_probe:936: inode #2: comm syz.9.7389: Corrupt directory, running e2fsck is recommended
[  316.096989][T22903] EXT4-fs warning (device loop9): dx_probe:839: inode #2: comm syz.9.7389: Unimplemented hash flags: 0x0001
[  316.109231][T22903] EXT4-fs warning (device loop9): dx_probe:936: inode #2: comm syz.9.7389: Corrupt directory, running e2fsck is recommended
[  316.122625][T22903] EXT4-fs warning (device loop9): dx_probe:839: inode #2: comm syz.9.7389: Unimplemented hash flags: 0x0001
[  316.134119][T22903] EXT4-fs warning (device loop9): dx_probe:936: inode #2: comm syz.9.7389: Corrupt directory, running e2fsck is recommended
[  316.148215][T22903] EXT4-fs error (device loop9): ext4_readdir:264: inode #2: block 3: comm syz.9.7389: path /303/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=4294967295, rec_len=7, size=1024 fake=0
[  316.177053][T18789] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  316.186487][   T29] kauditd_printk_skb: 1011 callbacks suppressed
[  316.186500][   T29] audit: type=1326 audit(1745798043.275:19926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22907 comm="syz.6.7392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc635585927 code=0x7ffc0000
[  316.216417][   T29] audit: type=1326 audit(1745798043.275:19927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22907 comm="syz.6.7392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc63552ab39 code=0x7ffc0000
[  316.240004][   T29] audit: type=1326 audit(1745798043.275:19928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22907 comm="syz.6.7392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7fc63558e969 code=0x7ffc0000
[  316.265130][   T29] audit: type=1326 audit(1745798043.355:19929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22907 comm="syz.6.7392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc635585927 code=0x7ffc0000
[  316.288657][   T29] audit: type=1326 audit(1745798043.355:19930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22907 comm="syz.6.7392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc63552ab39 code=0x7ffc0000
[  316.312201][   T29] audit: type=1326 audit(1745798043.355:19931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22907 comm="syz.6.7392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7fc63558e969 code=0x7ffc0000
[  316.344885][T18689] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  316.348309][   T29] audit: type=1326 audit(1745798043.435:19932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22907 comm="syz.6.7392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc635585927 code=0x7ffc0000
[  316.377485][   T29] audit: type=1326 audit(1745798043.435:19933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22907 comm="syz.6.7392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc63552ab39 code=0x7ffc0000
[  316.401059][   T29] audit: type=1326 audit(1745798043.435:19934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22907 comm="syz.6.7392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7fc63558e969 code=0x7ffc0000
[  316.424697][   T29] audit: type=1326 audit(1745798043.445:19935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22907 comm="syz.6.7392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc635585927 code=0x7ffc0000
[  316.460405][T22917] netlink: 20 bytes leftover after parsing attributes in process `syz.9.7395'.
[  316.484348][T22914] lo speed is unknown, defaulting to 1000
[  316.501753][T22921] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7398'.
[  316.529981][T22924] netlink: 96 bytes leftover after parsing attributes in process `syz.0.7399'.
[  316.664000][T22935] loop0: detected capacity change from 0 to 2048
[  316.681582][T22935] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  316.783977][   T23] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0
[  316.797957][   T23] hid-generic 0000:0000:0000.0022: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  316.862340][T17629] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  316.884175][T22943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  316.896381][T22943] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  316.941164][T22968] loop0: detected capacity change from 0 to 128
[  316.958525][T22968] syz.0.7418: attempt to access beyond end of device
[  316.958525][T22968] loop0: rw=34817, sector=97, nr_sectors = 32 limit=128
[  317.049052][ T7277] kworker/u8:10: attempt to access beyond end of device
[  317.049052][ T7277] loop0: rw=1, sector=145, nr_sectors = 34 limit=128
[  317.520998][T23004] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7434'.
[  317.914477][T23040] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7450'.
[  317.961434][T23046] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7452'.
[  317.980306][T23046] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7452'.
[  317.996432][T23045] pim6reg1: entered promiscuous mode
[  318.001815][T23045] pim6reg1: entered allmulticast mode
[  318.066384][T23058] loop4: detected capacity change from 0 to 128
[  318.079656][T23053] syzkaller1: entered promiscuous mode
[  318.085154][T23053] syzkaller1: entered allmulticast mode
[  318.092077][T23058] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  318.106605][T23058] ext4 filesystem being mounted at /329/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  318.189158][T18789] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  318.198414][T23067] loop0: detected capacity change from 0 to 736
[  318.220164][T23067] rock: directory entry would overflow storage
[  318.226324][T23067] rock: sig=0x5850, size=36, remaining=14
[  318.295714][T23079] loop9: detected capacity change from 0 to 512
[  318.303584][T17629] rock: directory entry would overflow storage
[  318.307805][T23079] EXT4-fs (loop9): orphan cleanup on readonly fs
[  318.310571][T17629] rock: sig=0x5850, size=36, remaining=14
[  318.325974][T23079] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.7467: bg 0: block 248: padding at end of block bitmap is not set
[  318.343545][T23079] EXT4-fs error (device loop9): ext4_acquire_dquot:6935: comm syz.9.7467: Failed to acquire dquot type 1
[  318.357989][T23079] EXT4-fs (loop9): 1 truncate cleaned up
[  318.358258][T17629] rock: directory entry would overflow storage
[  318.369898][T17629] rock: sig=0x5850, size=36, remaining=14
[  318.371229][T23079] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  318.458624][T18689] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  318.532584][T23099] loop4: detected capacity change from 0 to 512
[  318.541030][T23099] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  318.552459][T23099] EXT4-fs (loop4): 1 truncate cleaned up
[  318.560007][T23099] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  318.598932][ T7305] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  318.609382][ T7305] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  318.636921][T23106] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7478'.
[  318.652650][T23106] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7478'.
[  318.691286][T18789] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  318.703826][T23108] loop9: detected capacity change from 0 to 256
[  318.727297][T23108] FAT-fs (loop9): Directory bread(block 64) failed
[  318.737719][T23108] FAT-fs (loop9): Directory bread(block 65) failed
[  318.744428][T23108] FAT-fs (loop9): Directory bread(block 66) failed
[  318.751468][T23108] FAT-fs (loop9): Directory bread(block 67) failed
[  318.759894][ T7305] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  318.769659][ T7305] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  318.779450][T23108] FAT-fs (loop9): Directory bread(block 68) failed
[  318.785991][T23108] FAT-fs (loop9): Directory bread(block 69) failed
[  318.793706][T23108] FAT-fs (loop9): Directory bread(block 70) failed
[  318.800441][T23108] FAT-fs (loop9): Directory bread(block 71) failed
[  318.806998][T23108] FAT-fs (loop9): Directory bread(block 72) failed
[  318.813549][T23108] FAT-fs (loop9): Directory bread(block 73) failed
[  318.824198][ T7305] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  318.834136][ T7305] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  318.846718][T23108] syz.9.7479: attempt to access beyond end of device
[  318.846718][T23108] loop9: rw=0, sector=1192, nr_sectors = 4 limit=256
[  318.914572][T23117] loop9: detected capacity change from 0 to 1024
[  318.923148][ T7305] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  318.933015][ T7305] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  318.962647][T23117] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  318.990116][T18689] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  319.039101][ T7305] batadv1: left promiscuous mode
[  319.044159][ T7305] bridge0: port 1(batadv1) entered disabled state
[  319.052160][T23136] loop9: detected capacity change from 0 to 512
[  319.068955][T23138] loop6: detected capacity change from 0 to 164
[  319.079307][T23138] syz.6.7490: attempt to access beyond end of device
[  319.079307][T23138] loop6: rw=524288, sector=263328, nr_sectors = 4 limit=164
[  319.093299][T23138] syz.6.7490: attempt to access beyond end of device
[  319.093299][T23138] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164
[  319.111151][T23136] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  319.124183][T23136] ext4 filesystem being mounted at /329/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  319.186126][T18689] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  319.229171][ T7305] dvmrp0 (unregistering): left allmulticast mode
[  319.300553][T23157] netlink: 244 bytes leftover after parsing attributes in process `syz.4.7498'.
[  319.332401][ T7305] bond0 (unregistering): Released all slaves
[  319.340557][ T7305] bond1 (unregistering): Released all slaves
[  319.352197][ T7305] bond2 (unregistering): Released all slaves
[  319.382595][T23118] lo speed is unknown, defaulting to 1000
[  319.390475][ T7305] tipc: Left network mode
[  319.634402][ T7305] hsr_slave_0: left promiscuous mode
[  319.641794][T23193] loop9: detected capacity change from 0 to 128
[  319.649870][T23193] FAT-fs (loop9): bogus number of reserved sectors
[  319.656465][T23193] FAT-fs (loop9): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[  319.665914][T23193] FAT-fs (loop9): Can't find a valid FAT filesystem
[  319.672909][ T7305] hsr_slave_1: left promiscuous mode
[  319.686234][ T7305] veth1_macvtap: left promiscuous mode
[  319.691771][ T7305] veth0_macvtap: left promiscuous mode
[  319.697297][ T7305] veth1_vlan: left promiscuous mode
[  319.705010][ T7305] veth0_vlan: left promiscuous mode
[  319.766298][T23199] binfmt_misc: register: failed to install interpreter file ./file2
[  319.825138][T23118] chnl_net:caif_netlink_parms(): no params data found
[  319.895918][T23118] bridge0: port 1(bridge_slave_0) entered blocking state
[  319.903040][T23118] bridge0: port 1(bridge_slave_0) entered disabled state
[  319.911440][T23118] bridge_slave_0: entered allmulticast mode
[  319.917955][T23118] bridge_slave_0: entered promiscuous mode
[  319.931283][T23118] bridge0: port 2(bridge_slave_1) entered blocking state
[  319.938405][T23118] bridge0: port 2(bridge_slave_1) entered disabled state
[  319.945826][T23118] bridge_slave_1: entered allmulticast mode
[  319.953008][T23118] bridge_slave_1: entered promiscuous mode
[  319.963230][T23221] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.7525' sets config #1
[  319.987339][T23118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  320.029292][T23118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  320.075778][T23118] team0: Port device team_slave_0 added
[  320.087898][T23118] team0: Port device team_slave_1 added
[  320.113150][T23118] batman_adv: batadv0: Adding interface: batadv_slave_0
[  320.120243][T23118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  320.146224][T23118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  320.176279][T23231] netlink: 'syz.3.7529': attribute type 7 has an invalid length.
[  320.189505][T23118] batman_adv: batadv0: Adding interface: batadv_slave_1
[  320.196543][T23118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  320.222608][T23118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  320.316957][T23118] hsr_slave_0: entered promiscuous mode
[  320.323740][T23118] hsr_slave_1: entered promiscuous mode
[  320.329691][T23118] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  320.337771][T23118] Cannot create hsr debugfs directory
[  320.473608][T23263] loop9: detected capacity change from 0 to 256
[  320.562392][T23273] netlink: 'syz.4.7547': attribute type 39 has an invalid length.
[  320.736386][T23118] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  320.750489][T23118] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  320.783396][T23118] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  320.793302][T23118] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  320.809520][T23118] bridge0: port 2(bridge_slave_1) entered blocking state
[  320.816749][T23118] bridge0: port 2(bridge_slave_1) entered forwarding state
[  320.824155][T23118] bridge0: port 1(bridge_slave_0) entered blocking state
[  320.831285][T23118] bridge0: port 1(bridge_slave_0) entered forwarding state
[  320.844349][ T7315] bridge0: port 1(bridge_slave_0) entered disabled state
[  320.852962][ T7315] bridge0: port 2(bridge_slave_1) entered disabled state
[  320.891119][T23118] 8021q: adding VLAN 0 to HW filter on device bond0
[  320.904767][T23118] 8021q: adding VLAN 0 to HW filter on device team0
[  320.915190][ T7305] bridge0: port 1(bridge_slave_0) entered blocking state
[  320.922244][ T7305] bridge0: port 1(bridge_slave_0) entered forwarding state
[  320.932989][ T7300] bridge0: port 2(bridge_slave_1) entered blocking state
[  320.940044][ T7300] bridge0: port 2(bridge_slave_1) entered forwarding state
[  321.037206][T23118] 8021q: adding VLAN 0 to HW filter on device batadv0
[  321.110497][T23118] veth0_vlan: entered promiscuous mode
[  321.118745][T23118] veth1_vlan: entered promiscuous mode
[  321.146890][T23118] veth0_macvtap: entered promiscuous mode
[  321.154954][T23118] veth1_macvtap: entered promiscuous mode
[  321.165180][T23118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  321.175714][T23118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  321.186500][T23118] batman_adv: batadv0: Interface activated: batadv_slave_0
[  321.197137][T23118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  321.208325][T23118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  321.218647][T23118] batman_adv: batadv0: Interface activated: batadv_slave_1
[  321.225886][T23328] batadv_slave_1: entered allmulticast mode
[  321.233912][T23118] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  321.243269][T23118] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  321.252011][T23118] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  321.260839][T23118] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  321.285738][   T29] kauditd_printk_skb: 615 callbacks suppressed
[  321.285752][   T29] audit: type=1400 audit(1745798048.375:20549): avc:  denied  { mounton } for  pid=23118 comm="syz-executor" path="/root/syzkaller.FQszKR/syz-tmp" dev="sda1" ino=1984 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[  321.318715][   T29] audit: type=1400 audit(1745798048.375:20550): avc:  denied  { mounton } for  pid=23118 comm="syz-executor" path="/root/syzkaller.FQszKR/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[  321.346322][   T29] audit: type=1400 audit(1745798048.375:20551): avc:  denied  { mounton } for  pid=23118 comm="syz-executor" path="/root/syzkaller.FQszKR/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=78277 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[  321.374117][   T29] audit: type=1400 audit(1745798048.415:20552): avc:  denied  { mounton } for  pid=23118 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=502 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[  321.410023][   T29] audit: type=1400 audit(1745798048.415:20553): avc:  denied  { mount } for  pid=23118 comm="syz-executor" name="/" dev="gadgetfs" ino=4315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  321.462822][T23334] vlan2: entered allmulticast mode
[  321.470367][T23334] dummy0: entered allmulticast mode
[  321.635315][T23358] SELinux: ebitmap: map size 1701995264 does not match my size 64 (high bit was 191198305)
[  321.646073][T23358] SELinux: failed to load policy
[  321.669944][   T29] audit: type=1326 audit(1745798048.765:20554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23360 comm="syz.1.7580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9288b0e969 code=0x7ffc0000
[  321.694748][   T29] audit: type=1326 audit(1745798048.785:20555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23360 comm="syz.1.7580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f9288b0e969 code=0x7ffc0000
[  321.718463][   T29] audit: type=1326 audit(1745798048.785:20556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23360 comm="syz.1.7580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9288b0e969 code=0x7ffc0000
[  321.742081][   T29] audit: type=1326 audit(1745798048.785:20557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23360 comm="syz.1.7580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9288b0e969 code=0x7ffc0000
[  321.784253][   T29] audit: type=1400 audit(1745798048.875:20558): avc:  denied  { create } for  pid=23364 comm="syz.1.7582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  321.817045][T23365] netlink: 'syz.1.7582': attribute type 4 has an invalid length.
[  321.825017][T23365] __nla_validate_parse: 11 callbacks suppressed
[  321.825037][T23365] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7582'.
[  321.845131][T23365] : renamed from bond0 (while UP)
[  321.895174][T23373] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7586'.
[  321.904182][T23373] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7586'.
[  321.924199][T23373] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7586'.
[  322.199783][T23387] ==================================================================
[  322.207885][T23387] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
[  322.216486][T23387] 
[  322.218809][T23387] write to 0xffff88812be19b28 of 8 bytes by task 23389 on cpu 0:
[  322.226526][T23387]  shmem_file_splice_read+0x444/0x5d0
[  322.231913][T23387]  splice_direct_to_actor+0x26c/0x680
[  322.237286][T23387]  do_splice_direct+0xda/0x150
[  322.242051][T23387]  do_sendfile+0x380/0x640
[  322.246506][T23387]  __x64_sys_sendfile64+0x105/0x150
[  322.251725][T23387]  x64_sys_call+0xb39/0x2fb0
[  322.256333][T23387]  do_syscall_64+0xd0/0x1a0
[  322.260853][T23387]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  322.266756][T23387] 
[  322.269075][T23387] write to 0xffff88812be19b28 of 8 bytes by task 23387 on cpu 1:
[  322.276793][T23387]  shmem_file_splice_read+0x444/0x5d0
[  322.282186][T23387]  splice_direct_to_actor+0x26c/0x680
[  322.287558][T23387]  do_splice_direct+0xda/0x150
[  322.292321][T23387]  do_sendfile+0x380/0x640
[  322.296758][T23387]  __x64_sys_sendfile64+0x105/0x150
[  322.301984][T23387]  x64_sys_call+0xb39/0x2fb0
[  322.306582][T23387]  do_syscall_64+0xd0/0x1a0
[  322.311096][T23387]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  322.317002][T23387] 
[  322.319322][T23387] value changed: 0x000000000000289d -> 0x00000000000028a0
[  322.326419][T23387] 
[  322.328740][T23387] Reported by Kernel Concurrency Sanitizer on:
[  322.334889][T23387] CPU: 1 UID: 0 PID: 23387 Comm: syz.1.7592 Not tainted 6.15.0-rc4-syzkaller #0 PREEMPT(voluntary) 
[  322.345655][T23387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  322.355710][T23387] ==================================================================