last executing test programs:

3.534333791s ago: executing program 3 (id=1077):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r0}, 0x10)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
socket$netlink(0x10, 0x3, 0x0)

3.493914992s ago: executing program 2 (id=1080):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000001850000001b000000b7"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x18)
setreuid(0x0, 0xee00)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="81107c00f96236d4d543000000009500"], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x4}, 0x94)

3.119565889s ago: executing program 2 (id=1083):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r2 = epoll_create(0x8)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0xf6c447fee59241f0})

2.760967546s ago: executing program 3 (id=1085):
bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0xae8}, 0x18)
syz_read_part_table(0x104c, &(0x7f0000000000)="$eJzsz7ENwjAQBdDvAAkLsA8jICT2oaFiE1ZiAEagNEpCXNAjhPReYZ989rcu/NTQz/tmOTiPS59D9mOxrtd7u/CsU9UlWU3NufMYPkNbWEotSY4l72+yzWWX5UF3un1lKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4M68AAAD//zEzCY0=")

2.441646922s ago: executing program 3 (id=1088):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000000180)='./bus\x00', 0x0)
renameat2(r0, &(0x7f0000000380)='./file0\x00', r0, &(0x7f0000000200)='./bus/file0\x00', 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x82000)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000003c0)={{0x3, 0x0, 0x7fff, 0x0, 0x1}})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, 0x0, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x7, [@fwd={0x3}, @int={0xf, 0x0, 0x0, 0x1, 0x0, 0x3f, 0x0, 0x16, 0xa}, @const={0xa, 0x0, 0x0, 0xa, 0x3}]}, {0x0, [0x2e, 0x0, 0x61, 0x2e, 0x30]}}, &(0x7f00000000c0)=""/61, 0x47, 0x3d, 0x0, 0x847}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x240000, 0x465c, 0x0, 0x200, 0x1, 0xfffffff9, '\x00', 0x0, r3, 0x4, 0x1, 0x1, 0xd}, 0x50)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10)

2.344448154s ago: executing program 3 (id=1089):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=ANY=[@ANYBLOB="0b00000005000000020000000200000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000016000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000300)=@o_path={&(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, 0x4000, r0}, 0x18)

2.343892034s ago: executing program 2 (id=1090):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
epoll_create(0x6)
syz_emit_ethernet(0x14, &(0x7f0000000100)={@local, @random="b6e7dd03a148", @val={@void, {0x8100, 0x3, 0x1, 0x3}}, {@generic={0x88ca, "7ad0"}}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r3, 0x0, 0x5}, 0x18)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014400000000c0a01011d000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
close(0xffffffffffffffff)
r4 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x2, 0x5, @vifc_lcl_addr=@multicast1, @multicast2}, 0x10)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r5, 0x0, 0x800000000006}, 0x18)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000080)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [], 0x6b}})

2.228528246s ago: executing program 3 (id=1092):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = syz_open_procfs(0x0, &(0x7f0000000180)='wchan\x00')
pread64(r1, &(0x7f000001a240)=""/102400, 0x19000, 0x41e)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000050200000200000004"], 0x50)
r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001400000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200000000df00850000008600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4, <r5=>0xffffffffffffffff}, 0x4)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0xc, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f0000000000)={0x80, 0x8, 0xc6, 0x0, 0x0, 0x10, 0x0})
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x18)
unshare(0x2000400)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r0}, 0x10)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0)

2.220382567s ago: executing program 3 (id=1094):
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair(0x5, 0x80000, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000074"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000040000850000001b000000b700000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2.05644743s ago: executing program 2 (id=1095):
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r0, 0x0, 0x5}, 0x18)
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000140))
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f0000000180)=ANY=[])
openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_read_part_table(0x59d, &(0x7f0000000000)="$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")
r1 = creat(&(0x7f00000000c0)='./file0\x00', 0xf4)
r2 = dup2(r1, r1)
ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8})

1.862236224s ago: executing program 0 (id=1099):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x8, 0xdd, 0xff}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000080), &(0x7f0000000180)=r1}, 0x20)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x75, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x9c}, [@initr0]}, 0x0}, 0x94)

1.824019505s ago: executing program 0 (id=1100):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000"], 0x48)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="15452f1c17ce03519634b0f248cd4f35bfbe040d6bec3aac6dbdaea4e21f786824ca85", 0x23}, {&(0x7f0000000100)="445fad3126ce24909e1424d14663981d8c0359c7bc376dafed5c51728053486f03e6c2c2c7c2", 0x26}], 0x2}, 0x404c080)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x18)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x500, &(0x7f0000001100)={&(0x7f0000001140)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x64}, {@in, 0x0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x35}, {}, {0xfffffffffffffffd, 0x0, 0x8000000, 0x200}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x70bd2a, 0x70bd28}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x18}}]}, 0x1a0}}, 0x0)
write(r1, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000280)={'ipvlan0\x00', {0x2, 0x4e24, @rand_addr=0xac141437}})
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES8=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000755090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x5a)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r4}, 0x18)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0)
set_mempolicy_home_node(&(0x7f0000417000/0x2000)=nil, 0x2000, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x59d, &(0x7f0000001100)="$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")
openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0)
getegid()
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94)
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f00000003c0))
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002000)='devtmpfs\x00', 0x0, &(0x7f0000002040)='dirsync')
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)

1.654755398s ago: executing program 2 (id=1102):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f687372000000001400"], 0xfc}}, 0x0)

1.141850258s ago: executing program 2 (id=1107):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10024, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0xb8b}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x21, 0xfffffff2, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x2a)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000036c0)={0x60, 0x0, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x38, 0x8, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}]}]}]}, 0x60}, 0x1, 0x0, 0x0, 0xc811}, 0x40000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)

1.072426319s ago: executing program 4 (id=1108):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x8, 0x0, 0x5, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x3ff, 0x100000001}, 0x46d8, 0x10000, 0x0, 0x1, 0xa, 0x2000a, 0xb, 0x0, 0x0, 0x0, 0x8000000000000002}, 0x0, 0xffffffdffbffffff, 0xffffffffffffffff, 0x2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r2)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01032757c38d085641a7260000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x8840)

962.418691ms ago: executing program 4 (id=1111):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000032500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000000f000000bf91000000000000b7020000002000"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10)
capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140))

840.589213ms ago: executing program 4 (id=1113):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0xae8}, 0x18)
syz_read_part_table(0x104c, &(0x7f0000000000)="$eJzsz7ENwjAQBdDvAAkLsA8jICT2oaFiE1ZiAEagNEpCXNAjhPReYZ989rcu/NTQz/tmOTiPS59D9mOxrtd7u/CsU9UlWU3NufMYPkNbWEotSY4l72+yzWWX5UF3un1lKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4M68AAAD//zEzCY0=")

792.834894ms ago: executing program 1 (id=1114):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r3 = timerfd_create(0x0, 0x0)
timerfd_gettime(r3, &(0x7f0000000300))
sendmsg(0xffffffffffffffff, 0x0, 0x40080)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0209000007"], 0x38}}, 0x20000004)

761.820525ms ago: executing program 1 (id=1115):
r0 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000a00)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r0, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c000500040000000000000008000100030000000500020000000000050002"], 0x12c}, 0x1, 0x0, 0x0, 0x20000020}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000040000000c0000000b"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x14, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff850000000400000018110000", @ANYRESOCT=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0x146, 0x0, 0x0)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffff9]}, 0x0, 0x8)
gettid()
r4 = gettid()
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10)
tkill(r4, 0x14)
sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000003e000701fcf7fffffedbdf25017c00000c0004"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r7, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x0)

659.957677ms ago: executing program 1 (id=1116):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10)
r2 = syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x8000, 0x0, 0x0, 0x0, &(0x7f0000000000))
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYRES32=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, &(0x7f0000000380)=ANY=[])
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, 0x0, 0x4000000)
semctl$SETVAL(0x0, 0x3, 0x10, &(0x7f0000000240)=0xffffffff)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r5 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc)
setsockopt$MRT6_ADD_MFC_PROXY(r5, 0x29, 0xd2, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @loopback, 0x97c}, {0xa, 0x0, 0x0, @empty}, 0x0, {[0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}, 0x5c)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r6=>r4}, './file0\x00'})
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r6, &(0x7f0000000040)="98cb1c101cb6f7ed1c9df16fc09adadeaad1fc9a8e584799897bc70ee748c931d5", &(0x7f0000000140)=""/214}, 0x20)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
r7 = getpid()
madvise(&(0x7f0000a5e000/0x1000)=nil, 0x1000, 0x17)
process_vm_readv(r7, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x48, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
socket$kcm(0x10, 0x2, 0x0)
rt_sigtimedwait(&(0x7f0000000240)={[0x8000000000000001]}, &(0x7f0000000280), &(0x7f0000000300)={0x0, 0x3938700}, 0x8)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0x10, 0x6}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x10000)

647.602507ms ago: executing program 0 (id=1117):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=ANY=[@ANYBLOB="0b00000005000000020000000200000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000160000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000300)=@o_path={&(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, 0x4000, r0}, 0x18)

543.859779ms ago: executing program 0 (id=1118):
r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = fsmount(r0, 0x0, 0x20)
symlinkat(&(0x7f0000000000)='.\x00', r2, &(0x7f0000000140)='./file0\x00')

543.264379ms ago: executing program 0 (id=1119):
r0 = socket(0x10, 0x3, 0x6)
r1 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', <r2=>0x0})
socket$inet_tcp(0x2, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3, <r4=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000240)=r3}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r8 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
ioctl$VFAT_IOCTL_READDIR_BOTH(r8, 0x82307201, &(0x7f0000000f80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x0, &(0x7f0000000180), &(0x7f00000001c0)='syzkaller\x00', 0x9, 0x5c, &(0x7f0000000a40)=""/92, 0x40f00, 0x40, '\x00', 0x0, 0x25, r8, 0x8, &(0x7f00000002c0)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x2, 0xc, 0x304efaea, 0x6}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000ac0)=[r7, r6, r3, r6, r3, r4, r1], &(0x7f0000000bc0)=[{0x5, 0x2, 0x3, 0x5}, {0x0, 0x2, 0xb, 0xa}, {0x3, 0x3, 0x0, 0xbfd38f16a1bd0140}], 0x10, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r7}, 0x10)
clock_gettime(0x0, &(0x7f0000000880))
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x759, &(0x7f0000002500)={[{@nojournal_checksum}, {@noblock_validity}, {@discard}, {@errors_remount}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000000}, 0x0}, {@nouid32}, {@noload}, {@nodiscard}, {@mblk_io_submit}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x6}}, {@init_itable}, {@noinit_itable}, {@journal_dev={'journal_dev', 0x3d, 0x765}}, {@norecovery}, {@bh}, {@dax_never}, {@resgid}], [{@audit}, {@subj_user={'subj_user', 0x3d, 'audit'}}], 0x2c}, 0xa, 0x525, &(0x7f0000000480)="$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")
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000002480)=ANY=[@ANYRES32=0x0, @ANYRES8, @ANYRES16=0x0, @ANYBLOB="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", @ANYRES64, @ANYRES64, @ANYBLOB="c8a289fe3b30cce08c058ea85b93e56c9d2e7a3d93e25b37f38becf167c3e4f331cd9736a0013960d122bf195a569e39f358f07c044fac974a34c2e55e1b9ece650665caa71107c3541ba304aac44e3332d122f069ea3210e2629d7744e60956a4b2fc219493473c81b90e6c06c53090adeb21eb9b274890be2aea71bd536c"], 0x8, 0x2eb, &(0x7f00000004c0)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0)

282.161334ms ago: executing program 4 (id=1120):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r0}, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040)

214.759155ms ago: executing program 4 (id=1121):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x8, 0x0, 0x5, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x3ff, 0x100000001}, 0x46d8, 0x10000, 0x0, 0x1, 0xa, 0x2000a, 0xb, 0x0, 0x0, 0x0, 0x8000000000000002}, 0x0, 0xffffffdffbffffff, 0xffffffffffffffff, 0x2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r2)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01032757c38d085641a7260000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x8840)

125.853947ms ago: executing program 1 (id=1122):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f687372000000001400"], 0xfc}}, 0x0)

84.095068ms ago: executing program 4 (id=1123):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18)
r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000)
r3 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r3, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc)
r4 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x80, 0x3, 0x285}, &(0x7f00000004c0)=<r5=>0x0, &(0x7f0000000680)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0})
io_uring_enter(r4, 0x3498, 0x969, 0x0, 0x0, 0x0)
dup3(r4, r2, 0x80000)

42.893539ms ago: executing program 0 (id=1124):
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r0, 0x0, 0x5}, 0x18)
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000140))
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno='])
openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_read_part_table(0x59d, &(0x7f0000000000)="$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")
r1 = creat(&(0x7f00000000c0)='./file0\x00', 0xf4)
r2 = dup2(r1, r1)
ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8})

21.75452ms ago: executing program 1 (id=1125):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r3 = timerfd_create(0x0, 0x0)
timerfd_gettime(r3, &(0x7f0000000300))
sendmsg(0xffffffffffffffff, 0x0, 0x40080)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0209000007"], 0x38}}, 0x20000004)

0s ago: executing program 1 (id=1126):
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18)
r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000)
r2 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r2, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc)
r3 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x80, 0x3, 0x285}, &(0x7f00000004c0)=<r4=>0x0, &(0x7f0000000680)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r2, 0x0, 0x0})
io_uring_enter(r3, 0x3498, 0x969, 0x0, 0x0, 0x0)
dup3(r3, r1, 0x80000)

kernel console output (not intermixed with test programs):

20][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state
[   35.796325][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state
[   35.803427][ T3300] bridge_slave_0: entered allmulticast mode
[   35.809835][ T3300] bridge_slave_0: entered promiscuous mode
[   35.818307][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state
[   35.825395][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state
[   35.832936][ T3300] bridge_slave_1: entered allmulticast mode
[   35.839373][ T3300] bridge_slave_1: entered promiscuous mode
[   35.845771][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state
[   35.852841][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state
[   35.859934][ T3303] bridge_slave_1: entered allmulticast mode
[   35.866442][ T3303] bridge_slave_1: entered promiscuous mode
[   35.897270][ T3301] chnl_net:caif_netlink_parms(): no params data found
[   35.923001][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   35.935732][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   35.945894][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   35.955139][ T3306] chnl_net:caif_netlink_parms(): no params data found
[   35.976684][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   36.014150][ T3300] team0: Port device team_slave_0 added
[   36.030267][ T3303] team0: Port device team_slave_0 added
[   36.046793][ T3300] team0: Port device team_slave_1 added
[   36.052709][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state
[   36.059863][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state
[   36.068194][ T3318] bridge_slave_0: entered allmulticast mode
[   36.074528][ T3318] bridge_slave_0: entered promiscuous mode
[   36.081476][ T3303] team0: Port device team_slave_1 added
[   36.109451][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state
[   36.116593][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state
[   36.123859][ T3318] bridge_slave_1: entered allmulticast mode
[   36.130401][ T3318] bridge_slave_1: entered promiscuous mode
[   36.144468][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state
[   36.151576][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state
[   36.158723][ T3301] bridge_slave_0: entered allmulticast mode
[   36.165197][ T3301] bridge_slave_0: entered promiscuous mode
[   36.171904][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0
[   36.178878][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   36.204831][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   36.221265][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0
[   36.228286][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   36.254326][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   36.265684][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1
[   36.272630][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   36.298547][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   36.311839][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state
[   36.318963][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state
[   36.326165][ T3301] bridge_slave_1: entered allmulticast mode
[   36.332719][ T3301] bridge_slave_1: entered promiscuous mode
[   36.339341][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1
[   36.346314][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   36.372233][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   36.391900][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   36.423473][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   36.433820][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   36.450140][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   36.459338][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state
[   36.466407][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state
[   36.473579][ T3306] bridge_slave_0: entered allmulticast mode
[   36.480210][ T3306] bridge_slave_0: entered promiscuous mode
[   36.487494][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state
[   36.494550][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state
[   36.501781][ T3306] bridge_slave_1: entered allmulticast mode
[   36.508245][ T3306] bridge_slave_1: entered promiscuous mode
[   36.545095][ T3301] team0: Port device team_slave_0 added
[   36.561432][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   36.576934][ T3303] hsr_slave_0: entered promiscuous mode
[   36.582832][ T3303] hsr_slave_1: entered promiscuous mode
[   36.589497][ T3301] team0: Port device team_slave_1 added
[   36.601061][ T3318] team0: Port device team_slave_0 added
[   36.607870][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   36.618933][ T3300] hsr_slave_0: entered promiscuous mode
[   36.624920][ T3300] hsr_slave_1: entered promiscuous mode
[   36.630719][ T3300] debugfs: 'hsr0' already exists in 'hsr'
[   36.636447][ T3300] Cannot create hsr debugfs directory
[   36.647494][ T3318] team0: Port device team_slave_1 added
[   36.664355][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0
[   36.671387][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   36.697307][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   36.723313][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1
[   36.730332][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   36.756337][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   36.772736][ T3306] team0: Port device team_slave_0 added
[   36.791958][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0
[   36.798961][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   36.824982][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   36.836293][ T3306] team0: Port device team_slave_1 added
[   36.842293][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1
[   36.849286][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   36.875204][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   36.931089][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0
[   36.938100][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   36.964020][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   36.983626][ T3301] hsr_slave_0: entered promiscuous mode
[   36.989699][ T3301] hsr_slave_1: entered promiscuous mode
[   36.995629][ T3301] debugfs: 'hsr0' already exists in 'hsr'
[   37.001342][ T3301] Cannot create hsr debugfs directory
[   37.009738][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1
[   37.016733][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   37.042647][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   37.075883][ T3318] hsr_slave_0: entered promiscuous mode
[   37.081845][ T3318] hsr_slave_1: entered promiscuous mode
[   37.087732][ T3318] debugfs: 'hsr0' already exists in 'hsr'
[   37.093478][ T3318] Cannot create hsr debugfs directory
[   37.154781][ T3306] hsr_slave_0: entered promiscuous mode
[   37.160839][ T3306] hsr_slave_1: entered promiscuous mode
[   37.166760][ T3306] debugfs: 'hsr0' already exists in 'hsr'
[   37.172485][ T3306] Cannot create hsr debugfs directory
[   37.264517][ T3300] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   37.286246][ T3300] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   37.306454][ T3300] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   37.317838][ T3300] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   37.335237][ T3303] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   37.344114][ T3303] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   37.356743][ T3303] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   37.376146][ T3303] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   37.391633][ T3318] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   37.400666][ T3318] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   37.411576][ T3318] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   37.420157][ T3318] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   37.463943][ T3301] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   37.473771][ T3301] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   37.482953][ T3301] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   37.500601][ T3301] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   37.521995][ T3306] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   37.531502][ T3306] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   37.542082][ T3306] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   37.550993][ T3306] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   37.564611][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0
[   37.583901][ T3300] 8021q: adding VLAN 0 to HW filter on device team0
[   37.606538][   T37] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.613688][   T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[   37.633345][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0
[   37.646347][   T37] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.653418][   T37] bridge0: port 2(bridge_slave_1) entered forwarding state
[   37.681971][ T3303] 8021q: adding VLAN 0 to HW filter on device team0
[   37.701611][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0
[   37.717088][ T2402] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.724147][ T2402] bridge0: port 1(bridge_slave_0) entered forwarding state
[   37.734906][ T2402] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.741965][ T2402] bridge0: port 2(bridge_slave_1) entered forwarding state
[   37.772659][ T3318] 8021q: adding VLAN 0 to HW filter on device team0
[   37.783545][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0
[   37.799351][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0
[   37.814157][  T312] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.821333][  T312] bridge0: port 1(bridge_slave_0) entered forwarding state
[   37.837505][ T3306] 8021q: adding VLAN 0 to HW filter on device team0
[   37.856936][  T312] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.864025][  T312] bridge0: port 2(bridge_slave_1) entered forwarding state
[   37.887233][ T2019] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.894401][ T2019] bridge0: port 1(bridge_slave_0) entered forwarding state
[   37.911182][ T3301] 8021q: adding VLAN 0 to HW filter on device team0
[   37.926875][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0
[   37.938799][ T2019] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.945988][ T2019] bridge0: port 2(bridge_slave_1) entered forwarding state
[   37.956635][ T2019] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.963713][ T2019] bridge0: port 1(bridge_slave_0) entered forwarding state
[   37.983416][ T2019] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.990608][ T2019] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.045729][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0
[   38.059217][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0
[   38.134996][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0
[   38.171895][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0
[   38.202737][ T3300] veth0_vlan: entered promiscuous mode
[   38.211728][ T3300] veth1_vlan: entered promiscuous mode
[   38.222990][ T3303] veth0_vlan: entered promiscuous mode
[   38.253585][ T3303] veth1_vlan: entered promiscuous mode
[   38.281583][ T3300] veth0_macvtap: entered promiscuous mode
[   38.290977][ T3300] veth1_macvtap: entered promiscuous mode
[   38.301251][ T3318] veth0_vlan: entered promiscuous mode
[   38.316983][ T3318] veth1_vlan: entered promiscuous mode
[   38.327162][ T3303] veth0_macvtap: entered promiscuous mode
[   38.334623][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0
[   38.358764][ T3303] veth1_macvtap: entered promiscuous mode
[   38.368492][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1
[   38.395239][ T3318] veth0_macvtap: entered promiscuous mode
[   38.405222][  T312] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   38.416291][ T3306] veth0_vlan: entered promiscuous mode
[   38.423510][ T3318] veth1_macvtap: entered promiscuous mode
[   38.430280][   T31] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   38.439696][   T31] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   38.449894][   T31] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   38.459896][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0
[   38.483491][ T3306] veth1_vlan: entered promiscuous mode
[   38.496763][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1
[   38.505284][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0
[   38.521362][ T3301] veth0_vlan: entered promiscuous mode
[   38.529108][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1
[   38.541130][ T3306] veth0_macvtap: entered promiscuous mode
[   38.549909][ T3300] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   38.553021][ T3306] veth1_macvtap: entered promiscuous mode
[   38.575819][   T31] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   38.595369][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0
[   38.603666][ T3301] veth1_vlan: entered promiscuous mode
[   38.620158][   T31] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   38.633867][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1
[   38.649969][   T31] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   38.675048][   T31] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   38.706057][ T3301] veth0_macvtap: entered promiscuous mode
[   38.727303][   T31] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   38.736917][ T3301] veth1_macvtap: entered promiscuous mode
[   38.768121][   T31] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   38.781363][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0
[   38.798363][ T3478] loop3: detected capacity change from 0 to 512
[   38.799503][   T31] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   38.813889][   T31] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   38.824429][   T31] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   38.850911][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1
[   38.861209][   T31] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   38.898078][ T3478] IPv4: Oversized IP packet from 127.202.26.0
[   38.902975][ T3482] 9pnet_fd: Insufficient options for proto=fd
[   38.921668][   T31] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   38.941843][ T3486] loop2: detected capacity change from 0 to 512
[   38.950744][   T31] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   38.961226][   T31] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   38.968643][ T3482] loop1: detected capacity change from 0 to 2048
[   38.971386][   T31] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   39.021646][   T31] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   39.028820][ T3486] IPv4: Oversized IP packet from 127.202.26.0
[   39.048322][   T31] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   39.065063][   T29] kauditd_printk_skb: 79 callbacks suppressed
[   39.065105][   T29] audit: type=1400 audit(1759313513.494:151): avc:  denied  { allowed } for  pid=3489 comm="syz.0.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[   39.073726][ T3482] Alternate GPT is invalid, using primary GPT.
[   39.096782][ T3482]  loop1: p2 p3 p7
[   39.108661][   T29] audit: type=1400 audit(1759313513.534:152): avc:  denied  { create } for  pid=3489 comm="syz.0.10" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   39.139405][ T3492] netlink: 'syz.4.5': attribute type 4 has an invalid length.
[   39.169922][ T3492] tc_dump_action: action bad kind
[   39.175667][   T29] audit: type=1400 audit(1759313513.554:153): avc:  denied  { map_read map_write } for  pid=3491 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   39.195276][   T29] audit: type=1400 audit(1759313513.554:154): avc:  denied  { create } for  pid=3491 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   39.215378][   T29] audit: type=1400 audit(1759313513.554:155): avc:  denied  { write } for  pid=3491 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   39.235575][   T29] audit: type=1400 audit(1759313513.564:156): avc:  denied  { read } for  pid=3491 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   39.262600][ T3496] netlink: 'syz.4.5': attribute type 4 has an invalid length.
[   39.270371][   T29] audit: type=1400 audit(1759313513.614:157): avc:  denied  { write } for  pid=3481 comm="syz.1.8" name="loop1p2" dev="devtmpfs" ino=544 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   39.291140][    C0] hrtimer: interrupt took 45774 ns
[   39.292976][   T29] audit: type=1400 audit(1759313513.614:158): avc:  denied  { open } for  pid=3481 comm="syz.1.8" path="/dev/loop1p2" dev="devtmpfs" ino=544 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   39.320901][   T29] audit: type=1400 audit(1759313513.614:159): avc:  denied  { ioctl } for  pid=3481 comm="syz.1.8" path="/dev/loop1p2" dev="devtmpfs" ino=544 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   39.346101][   T29] audit: type=1400 audit(1759313513.704:160): avc:  denied  { open } for  pid=3493 comm="syz.3.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[   39.365405][ T3498] loop0: detected capacity change from 0 to 512
[   39.413114][ T3502] netlink: 'syz.3.12': attribute type 10 has an invalid length.
[   39.420979][ T3502] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12'.
[   39.428967][ T3498] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   39.445940][ T3498] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   39.474378][ T3502] dummy0: entered promiscuous mode
[   39.480210][ T3502] bridge0: port 3(dummy0) entered blocking state
[   39.486647][ T3502] bridge0: port 3(dummy0) entered disabled state
[   39.494098][ T3502] dummy0: entered allmulticast mode
[   39.500246][ T3502] bridge0: port 3(dummy0) entered blocking state
[   39.506714][ T3502] bridge0: port 3(dummy0) entered forwarding state
[   39.517150][ T3492] syz.4.5 (3492) used greatest stack depth: 10640 bytes left
[   39.567497][ T3507] netlink: 'syz.2.13': attribute type 10 has an invalid length.
[   39.575658][ T3507] netlink: 40 bytes leftover after parsing attributes in process `syz.2.13'.
[   39.589033][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.590466][ T3494] loop3: detected capacity change from 0 to 512
[   39.609972][ T3511] loop4: detected capacity change from 0 to 1024
[   39.642735][ T3507] dummy0: entered promiscuous mode
[   39.660573][ T3507] bridge0: port 3(dummy0) entered blocking state
[   39.670230][ T3507] bridge0: port 3(dummy0) entered disabled state
[   39.689950][ T3516] loop2: detected capacity change from 0 to 512
[   39.704415][ T3511] EXT4-fs: Ignoring removed orlov option
[   39.711485][ T3507] dummy0: entered allmulticast mode
[   39.729839][ T3513] netlink: 'syz.1.16': attribute type 10 has an invalid length.
[   39.738308][ T3513] netlink: 40 bytes leftover after parsing attributes in process `syz.1.16'.
[   39.756368][ T3507] bridge0: port 3(dummy0) entered blocking state
[   39.763770][ T3507] bridge0: port 3(dummy0) entered forwarding state
[   39.774956][ T3511] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   39.787990][ T3494] EXT4-fs (loop3): too many log groups per flexible block group
[   39.790761][ T3521] loop1: detected capacity change from 0 to 512
[   39.796919][ T3494] EXT4-fs (loop3): failed to initialize mballoc (-12)
[   39.815202][ T3494] EXT4-fs (loop3): mount failed
[   39.848879][ T3511] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14'.
[   39.874020][ T3516] EXT4-fs (loop2): too many log groups per flexible block group
[   39.893952][ T3516] EXT4-fs (loop2): failed to initialize mballoc (-12)
[   39.905796][ T3511] wg2: entered promiscuous mode
[   39.910812][ T3511] wg2: entered allmulticast mode
[   39.914154][ T3516] EXT4-fs (loop2): mount failed
[   39.946492][ T3513] dummy0: entered promiscuous mode
[   39.976750][ T3521] EXT4-fs (loop1): too many log groups per flexible block group
[   40.009147][ T3513] bridge0: port 3(dummy0) entered blocking state
[   40.016106][ T3521] EXT4-fs (loop1): failed to initialize mballoc (-12)
[   40.016137][ T3521] EXT4-fs (loop1): mount failed
[   40.029278][ T3513] bridge0: port 3(dummy0) entered disabled state
[   40.099913][ T3513] dummy0: entered allmulticast mode
[   40.171373][ T3513] bridge0: port 3(dummy0) entered blocking state
[   40.178233][ T3513] bridge0: port 3(dummy0) entered forwarding state
[   40.449091][ T3542] $Hÿ: renamed from bond0 (while UP)
[   40.458834][ T3542] $Hÿ: entered promiscuous mode
[   40.463921][ T3542] bond_slave_0: entered promiscuous mode
[   40.469787][ T3542] bond_slave_1: entered promiscuous mode
[   40.497817][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.516330][ T3542] syz.3.22 (3542) used greatest stack depth: 10208 bytes left
[   40.589278][ T3543] loop1: detected capacity change from 0 to 8192
[   40.599181][ T3550] loop4: detected capacity change from 0 to 512
[   40.605663][ T3543] =======================================================
[   40.605663][ T3543] WARNING: The mand mount option has been deprecated and
[   40.605663][ T3543]          and is ignored by this kernel. Remove the mand
[   40.605663][ T3543]          option from the mount to silence this warning.
[   40.605663][ T3543] =======================================================
[   40.680354][ T3550] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.25: bg 0: block 393: padding at end of block bitmap is not set
[   40.724433][ T3543] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   40.743800][ T3550] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem
[   40.750321][ T3553] loop3: detected capacity change from 0 to 1024
[   40.753775][ T3550] EXT4-fs (loop4): 2 truncates cleaned up
[   40.766992][ T3550] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   40.813288][ T3540] netlink: 12 bytes leftover after parsing attributes in process `syz.1.21'.
[   40.824187][ T3553] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   40.839548][ T3553] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   40.855228][ T3553] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[   40.872905][ T3553] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[   40.885255][ T3553] EXT4-fs (loop3): This should not happen!! Data will be lost
[   40.885255][ T3553] 
[   40.894957][ T3553] EXT4-fs (loop3): Total free blocks count 0
[   40.900977][ T3553] EXT4-fs (loop3): Free/Dirty block details
[   40.906955][ T3553] EXT4-fs (loop3): free_blocks=4293918720
[   40.912698][ T3553] EXT4-fs (loop3): dirty_blocks=16
[   40.917863][ T3553] EXT4-fs (loop3): Block reservation details
[   40.923961][ T3553] EXT4-fs (loop3): i_reserved_data_blocks=1
[   40.982675][ T3515] syz.0.15 (3515) used greatest stack depth: 7288 bytes left
[   41.068242][ T3561] IPv6: Can't replace route, no match found
[   41.109643][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.149805][ T3564] process 'syz.1.29' launched '/dev/fd/6' with NULL argv: empty string added
[   41.170230][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.222406][ T3568] loop4: detected capacity change from 0 to 1024
[   41.241527][ T3574] loop2: detected capacity change from 0 to 164
[   41.252992][ T3568] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   41.270194][ T3574] syz.2.32: attempt to access beyond end of device
[   41.270194][ T3574] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164
[   41.305794][ T3568] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   41.318450][ T3574] syz.2.32: attempt to access beyond end of device
[   41.318450][ T3574] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164
[   41.341018][ T3568] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[   41.360262][ T3568] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[   41.372650][ T3568] EXT4-fs (loop4): This should not happen!! Data will be lost
[   41.372650][ T3568] 
[   41.382343][ T3568] EXT4-fs (loop4): Total free blocks count 0
[   41.388369][ T3568] EXT4-fs (loop4): Free/Dirty block details
[   41.394285][ T3568] EXT4-fs (loop4): free_blocks=4293918720
[   41.400157][ T3568] EXT4-fs (loop4): dirty_blocks=16
[   41.405378][ T3568] EXT4-fs (loop4): Block reservation details
[   41.411382][ T3568] EXT4-fs (loop4): i_reserved_data_blocks=1
[   41.435529][ T3574] netlink: 28 bytes leftover after parsing attributes in process `syz.2.32'.
[   41.444365][ T3574] netlink: 28 bytes leftover after parsing attributes in process `syz.2.32'.
[   41.540521][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.035249][ T3584] Process accounting resumed
[   42.151530][ T3609] loop3: detected capacity change from 0 to 128
[   42.165341][ T3609] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   42.217864][ T3609] ext4 filesystem being mounted at /9/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   42.522039][ T3318] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   42.654890][ T3630] IPv6: Can't replace route, no match found
[   42.657270][ T3630] sctp: [Deprecated]: syz.3.46 (pid 3630) Use of int in maxseg socket option.
[   42.657270][ T3630] Use struct sctp_assoc_value instead
[   42.691220][ T3633] netlink: 4 bytes leftover after parsing attributes in process `syz.1.48'.
[   42.693991][ T3633] bridge0: entered promiscuous mode
[   42.708274][ T3633] bridge0: port 4(macvlan2) entered blocking state
[   42.714978][ T3633] bridge0: port 4(macvlan2) entered disabled state
[   42.721805][ T3633] macvlan2: entered allmulticast mode
[   42.727278][ T3633] bridge0: entered allmulticast mode
[   42.745534][ T3633] macvlan2: left allmulticast mode
[   42.745555][ T3633] bridge0: left allmulticast mode
[   42.745936][ T3633] bridge0: left promiscuous mode
[   42.758243][ T3634] loop4: detected capacity change from 0 to 1024
[   42.783207][ T3634] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   42.783297][ T3634] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   42.934463][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.012955][ T3647] netlink: 8 bytes leftover after parsing attributes in process `syz.1.49'.
[   43.012996][ T3647] netlink: 8 bytes leftover after parsing attributes in process `syz.1.49'.
[   43.037233][ T3649] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   43.037254][ T3649] batman_adv: batadv0: Removing interface: batadv_slave_0
[   43.037778][ T3649] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   43.037794][ T3649] batman_adv: batadv0: Removing interface: batadv_slave_1
[   43.235516][ T3652] loop0: detected capacity change from 0 to 512
[   43.236658][ T3652] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   43.236673][ T3652] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   43.237885][ T3652] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.53: bg 0: block 384: padding at end of block bitmap is not set
[   43.238064][ T3652] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem
[   43.238252][ T3652] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #11: comm syz.0.53: attempt to clear invalid blocks 983260 len 1
[   43.238545][ T3652] EXT4-fs error (device loop0): __ext4_get_inode_loc:4861: comm syz.0.53: Invalid inode table block 0 in block_group 0
[   43.238795][ T3652] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem
[   43.238986][ T3652] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem
[   43.239131][ T3652] EXT4-fs error (device loop0): __ext4_get_inode_loc:4861: comm syz.0.53: Invalid inode table block 0 in block_group 0
[   43.239267][ T3652] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem
[   43.239411][ T3652] EXT4-fs error (device loop0): ext4_truncate:4666: inode #11: comm syz.0.53: mark_inode_dirty error
[   43.239628][ T3652] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem
[   43.239770][ T3652] EXT4-fs (loop0): 1 truncate cleaned up
[   43.240267][ T3652] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   43.244386][ T3652] EXT4-fs error (device loop0): __ext4_get_inode_loc:4861: comm syz.0.53: Invalid inode table block 0 in block_group 0
[   43.413292][ T3652] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem
[   43.498532][ T3670] netlink: 'syz.2.59': attribute type 10 has an invalid length.
[   43.512231][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.577638][ T3670] loop2: detected capacity change from 0 to 512
[   43.625421][ T3668] loop3: detected capacity change from 0 to 512
[   43.652345][ T3675] IPv6: Can't replace route, no match found
[   43.653947][ T3675] sctp: [Deprecated]: syz.4.60 (pid 3675) Use of int in maxseg socket option.
[   43.653947][ T3675] Use struct sctp_assoc_value instead
[   43.746969][ T3670] EXT4-fs (loop2): too many log groups per flexible block group
[   43.759088][ T3670] EXT4-fs (loop2): failed to initialize mballoc (-12)
[   43.760500][ T3670] EXT4-fs (loop2): mount failed
[   43.777223][ T3678] Zero length message leads to an empty skb
[   43.901447][ T3668] EXT4-fs (loop3): too many log groups per flexible block group
[   43.903379][ T3668] EXT4-fs (loop3): failed to initialize mballoc (-12)
[   43.944260][ T3690] program syz.2.65 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   43.971367][ T3692] loop0: detected capacity change from 0 to 512
[   43.971778][ T3668] EXT4-fs (loop3): mount failed
[   44.002399][ T3692] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   44.002532][ T3692] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   44.014393][ T3692] EXT4-fs error (device loop0): ext4_get_first_dir_block:3529: inode #12: comm syz.0.66: Directory hole found for htree leaf block 0
[   44.028852][ T3692] bridge0: entered promiscuous mode
[   44.030590][ T3692] bridge0: port 3(macvlan2) entered blocking state
[   44.030671][ T3692] bridge0: port 3(macvlan2) entered disabled state
[   44.047979][ T3692] macvlan2: entered allmulticast mode
[   44.048042][ T3692] bridge0: entered allmulticast mode
[   44.053509][ T3692] macvlan2: left allmulticast mode
[   44.053530][ T3692] bridge0: left allmulticast mode
[   44.053984][ T3692] bridge0: left promiscuous mode
[   44.180031][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.248521][   T29] kauditd_printk_skb: 342 callbacks suppressed
[   44.248538][   T29] audit: type=1400 audit(1759313518.654:503): avc:  denied  { read write } for  pid=3704 comm="syz.2.71" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[   44.248570][   T29] audit: type=1400 audit(1759313518.654:504): avc:  denied  { open } for  pid=3704 comm="syz.2.71" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[   44.248642][   T29] audit: type=1326 audit(1759313518.664:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3704 comm="syz.2.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c054aeec9 code=0x7ffc0000
[   44.248701][   T29] audit: type=1326 audit(1759313518.664:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3704 comm="syz.2.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c054aeec9 code=0x7ffc0000
[   44.248734][   T29] audit: type=1326 audit(1759313518.664:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3704 comm="syz.2.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f1c054aeec9 code=0x7ffc0000
[   44.248760][   T29] audit: type=1400 audit(1759313518.664:508): avc:  denied  { wake_alarm } for  pid=3704 comm="syz.2.71" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   44.248783][   T29] audit: type=1326 audit(1759313518.664:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3704 comm="syz.2.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c054aeec9 code=0x7ffc0000
[   44.248905][   T29] audit: type=1326 audit(1759313518.664:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3704 comm="syz.2.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7f1c054aeec9 code=0x7ffc0000
[   44.248939][   T29] audit: type=1326 audit(1759313518.664:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3704 comm="syz.2.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c054aeec9 code=0x7ffc0000
[   44.249001][   T29] audit: type=1326 audit(1759313518.664:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3704 comm="syz.2.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c054aeec9 code=0x7ffc0000
[   44.271809][ T3708] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22
[   44.566312][ T3708] netdevsim netdevsim2: Direct firmware load for . failed with error -22
[   44.622723][ T3713] loop2: detected capacity change from 0 to 512
[   44.668554][ T3713] EXT4-fs (loop2): too many log groups per flexible block group
[   44.696078][ T3713] EXT4-fs (loop2): failed to initialize mballoc (-12)
[   44.702611][ T3719] netlink: 'syz.4.75': attribute type 10 has an invalid length.
[   44.702907][ T3713] EXT4-fs (loop2): mount failed
[   44.719499][ T3719] __nla_validate_parse: 3 callbacks suppressed
[   44.719677][ T3719] netlink: 40 bytes leftover after parsing attributes in process `syz.4.75'.
[   44.737511][ T3719] dummy0: entered promiscuous mode
[   44.751044][ T3719] bridge0: port 3(dummy0) entered blocking state
[   44.759055][ T3719] bridge0: port 3(dummy0) entered disabled state
[   44.774453][ T3719] dummy0: entered allmulticast mode
[   44.780685][ T3723] loop4: detected capacity change from 0 to 512
[   44.796047][ T3719] bridge0: port 3(dummy0) entered blocking state
[   44.796555][ T3719] bridge0: port 3(dummy0) entered forwarding state
[   44.847293][ T3727] IPv6: Can't replace route, no match found
[   44.902741][ T3723] EXT4-fs (loop4): too many log groups per flexible block group
[   44.902789][ T3723] EXT4-fs (loop4): failed to initialize mballoc (-12)
[   44.902809][ T3723] EXT4-fs (loop4): mount failed
[   44.920172][ T3731] netlink: 28 bytes leftover after parsing attributes in process `syz.2.78'.
[   45.034528][ T3733] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22
[   45.034596][ T3733] netdevsim netdevsim4: Direct firmware load for . failed with error -22
[   45.077140][ T3736] ALSA: seq fatal error: cannot create timer (-22)
[   45.514361][ T3746] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[   45.514387][ T3746] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[   45.763212][ T3753] syz.0.85 uses obsolete (PF_INET,SOCK_PACKET)
[   45.892752][ T3763] IPv6: Can't replace route, no match found
[   45.908018][ T3765] loop3: detected capacity change from 0 to 764
[   45.916541][ T3763] sctp: [Deprecated]: syz.1.90 (pid 3763) Use of int in maxseg socket option.
[   45.916541][ T3763] Use struct sctp_assoc_value instead
[   45.978042][ T3765] rock: directory entry would overflow storage
[   45.978050][ T3765] rock: sig=0x4f50, size=4, remaining=3
[   45.978061][ T3765] iso9660: Corrupted directory entry in block 6 of inode 1792
[   46.108305][ T3776] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22
[   46.108332][ T3776] netdevsim netdevsim2: Direct firmware load for . failed with error -22
[   46.207393][ T3778] loop4: detected capacity change from 0 to 512
[   46.267729][ T3778] EXT4-fs (loop4): too many log groups per flexible block group
[   46.268007][ T3778] EXT4-fs (loop4): failed to initialize mballoc (-12)
[   46.268235][ T3778] EXT4-fs (loop4): mount failed
[   46.702652][ T3810] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22
[   46.702673][ T3810] netdevsim netdevsim0: Direct firmware load for . failed with error -22
[   46.757643][ T3811] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.766053][ T3809] netlink: 'syz.4.109': attribute type 10 has an invalid length.
[   46.774053][ T3809] netlink: 40 bytes leftover after parsing attributes in process `syz.4.109'.
[   46.845630][ T3822] netlink: 288 bytes leftover after parsing attributes in process `syz.2.113'.
[   46.872780][ T3823] netlink: 'syz.3.114': attribute type 4 has an invalid length.
[   46.962487][ T3809] loop4: detected capacity change from 0 to 512
[   47.117602][ T3809] EXT4-fs (loop4): too many log groups per flexible block group
[   47.148459][ T3839] IPv6: Can't replace route, no match found
[   47.157696][ T3809] EXT4-fs (loop4): failed to initialize mballoc (-12)
[   47.202140][ T3809] EXT4-fs (loop4): mount failed
[   47.331745][ T3847] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22
[   47.340135][ T3847] netdevsim netdevsim0: Direct firmware load for . failed with error -22
[   47.413432][ T3851] 9pnet: Could not find request transport: fd0x0000000000000004
[   47.458086][ T3856] netlink: 24 bytes leftover after parsing attributes in process `syz.0.126'.
[   47.487040][ T3860] netlink: 'syz.4.127': attribute type 4 has an invalid length.
[   47.558735][ T3864] loop4: detected capacity change from 0 to 512
[   47.565609][ T3862] netlink: 'syz.0.128': attribute type 10 has an invalid length.
[   47.573669][ T3862] netlink: 40 bytes leftover after parsing attributes in process `syz.0.128'.
[   47.604723][ T3862] dummy0: entered promiscuous mode
[   47.615511][ T3862] bridge0: port 3(dummy0) entered blocking state
[   47.622440][ T3862] bridge0: port 3(dummy0) entered disabled state
[   47.630384][ T3864] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   47.643047][ T3868] loop0: detected capacity change from 0 to 512
[   47.654422][ T3864] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   47.697301][ T3864] EXT4-fs error (device loop4): ext4_get_first_dir_block:3529: inode #12: comm syz.4.129: Directory hole found for htree leaf block 0
[   47.712050][ T3862] dummy0: entered allmulticast mode
[   47.758368][ T3871] IPv6: Can't replace route, no match found
[   47.768878][ T3868] EXT4-fs (loop0): too many log groups per flexible block group
[   47.795080][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.809163][ T3862] bridge0: port 3(dummy0) entered blocking state
[   47.816552][ T3862] bridge0: port 3(dummy0) entered forwarding state
[   47.938668][ T3868] EXT4-fs (loop0): failed to initialize mballoc (-12)
[   47.952015][ T3868] EXT4-fs (loop0): mount failed
[   47.971817][ T3841] syz.1.120 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[   47.982935][ T3841] CPU: 0 UID: 0 PID: 3841 Comm: syz.1.120 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   47.982961][ T3841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   47.982972][ T3841] Call Trace:
[   47.982979][ T3841]  <TASK>
[   47.983053][ T3841]  __dump_stack+0x1d/0x30
[   47.983076][ T3841]  dump_stack_lvl+0xe8/0x140
[   47.983098][ T3841]  dump_stack+0x15/0x1b
[   47.983116][ T3841]  dump_header+0x81/0x220
[   47.983282][ T3841]  oom_kill_process+0x342/0x400
[   47.983308][ T3841]  out_of_memory+0x979/0xb80
[   47.983379][ T3841]  try_charge_memcg+0x5e6/0x9e0
[   47.983416][ T3841]  charge_memcg+0x51/0xc0
[   47.983442][ T3841]  mem_cgroup_swapin_charge_folio+0xcc/0x150
[   47.983483][ T3841]  __read_swap_cache_async+0x1df/0x350
[   47.983511][ T3841]  swap_cluster_readahead+0x277/0x3e0
[   47.983542][ T3841]  swapin_readahead+0xde/0x6f0
[   47.983567][ T3841]  ? __filemap_get_folio+0x4f7/0x6b0
[   47.983620][ T3841]  ? swap_cache_get_folio+0x77/0x200
[   47.983651][ T3841]  do_swap_page+0x301/0x2430
[   47.983727][ T3841]  ? css_rstat_updated+0xb7/0x240
[   47.983763][ T3841]  ? __pfx_default_wake_function+0x10/0x10
[   47.983792][ T3841]  handle_mm_fault+0x9a5/0x2c20
[   47.983941][ T3841]  do_user_addr_fault+0x630/0x1080
[   47.983963][ T3841]  ? fpregs_restore_userregs+0xad/0x1d0
[   47.984061][ T3841]  ? switch_fpu_return+0xe/0x20
[   47.984123][ T3841]  ? fpregs_assert_state_consistent+0xb4/0xe0
[   47.984162][ T3841]  exc_page_fault+0x62/0xa0
[   47.984193][ T3841]  asm_exc_page_fault+0x26/0x30
[   47.984255][ T3841] RIP: 0033:0x7fa39a1757cc
[   47.984272][ T3841] Code: 66 0f 1f 44 00 00 69 3d e6 fe ea 00 e8 03 00 00 48 8d 1d e7 07 38 00 e8 62 96 12 00 eb 0c 48 81 c3 f0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00
[   47.984297][ T3841] RSP: 002b:00007ffe2000f7b0 EFLAGS: 00010202
[   47.984313][ T3841] RAX: 0000000000000000 RBX: 00007fa39a4f5fa0 RCX: 0000000000000000
[   47.984326][ T3841] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00005555799b2808
[   47.984338][ T3841] RBP: 00007fa39a4f7da0 R08: 0000000000000000 R09: 7fffffffffffffff
[   47.984350][ T3841] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000bba6
[   47.984362][ T3841] R13: 00007fa39a4f6090 R14: ffffffffffffffff R15: 00007ffe2000f8c0
[   47.984406][ T3841]  </TASK>
[   47.984434][ T3841] memory: usage 307200kB, limit 307200kB, failcnt 945
[   48.210481][ T3841] memory+swap: usage 311484kB, limit 9007199254740988kB, failcnt 0
[   48.218413][ T3841] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0
[   48.225746][ T3841] Memory cgroup stats for /syz1:
[   48.228689][ T3841] cache 0
[   48.236630][ T3841] rss 0
[   48.239537][ T3841] shmem 0
[   48.242485][ T3841] mapped_file 0
[   48.245968][ T3841] dirty 0
[   48.248916][ T3841] writeback 8192
[   48.252462][ T3841] workingset_refault_anon 69
[   48.257148][ T3841] workingset_refault_file 942
[   48.261829][ T3841] swap 4386816
[   48.265228][ T3841] swapcached 12288
[   48.268959][ T3841] pgpgin 12857
[   48.272388][ T3841] pgpgout 12854
[   48.275947][ T3841] pgfault 12962
[   48.279409][ T3841] pgmajfault 35
[   48.282855][ T3841] inactive_anon 12288
[   48.287050][ T3841] active_anon 0
[   48.290512][ T3841] inactive_file 0
[   48.294134][ T3841] active_file 0
[   48.297617][ T3841] unevictable 0
[   48.301078][ T3841] hierarchical_memory_limit 314572800
[   48.306488][ T3841] hierarchical_memsw_limit 9223372036854771712
[   48.312640][ T3841] total_cache 0
[   48.316189][ T3841] total_rss 0
[   48.319507][ T3841] total_shmem 0
[   48.322990][ T3841] total_mapped_file 0
[   48.327016][ T3841] total_dirty 0
[   48.330510][ T3841] total_writeback 8192
[   48.334601][ T3841] total_workingset_refault_anon 69
[   48.339710][ T3841] total_workingset_refault_file 942
[   48.344965][ T3841] total_swap 4386816
[   48.348866][ T3841] total_swapcached 12288
[   48.353178][ T3841] total_pgpgin 12857
[   48.357102][ T3841] total_pgpgout 12854
[   48.361087][ T3841] total_pgfault 12962
[   48.365095][ T3841] total_pgmajfault 35
[   48.369093][ T3841] total_inactive_anon 12288
[   48.373612][ T3841] total_active_anon 0
[   48.377653][ T3841] total_inactive_file 0
[   48.381809][ T3841] total_active_file 0
[   48.385795][ T3841] total_unevictable 0
[   48.389809][ T3841] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.120,pid=3841,uid=0
[   48.404419][ T3841] Memory cgroup out of memory: Killed process 3841 (syz.1.120) total-vm:96004kB, anon-rss:1132kB, file-rss:22188kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000
[   48.462913][ T3894] 9pnet: Could not find request transport: fd0x0000000000000004
[   48.516673][ T3899] netlink: 24 bytes leftover after parsing attributes in process `syz.2.139'.
[   48.555278][ T3904] loop4: detected capacity change from 0 to 512
[   48.576923][ T3904] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   48.590037][ T3904] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   48.618287][ T3904] EXT4-fs error (device loop4): ext4_get_first_dir_block:3529: inode #12: comm syz.4.141: Directory hole found for htree leaf block 0
[   48.666721][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.807109][ T3922] loop4: detected capacity change from 0 to 512
[   48.816874][ T3922] EXT4-fs: Ignoring removed nobh option
[   48.862834][ T3926] 9pnet: Could not find request transport: fd0x0000000000000004
[   48.872114][ T3922] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.148: corrupted inode contents
[   48.896877][ T3922] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #3: comm syz.4.148: mark_inode_dirty error
[   48.915451][ T3931] loop3: detected capacity change from 0 to 512
[   48.942238][ T3922] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.148: corrupted inode contents
[   48.955617][ T3922] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #3: comm syz.4.148: mark_inode_dirty error
[   48.967538][ T3922] EXT4-fs error (device loop4): ext4_acquire_dquot:6943: comm syz.4.148: Failed to acquire dquot type 0
[   48.980163][ T3922] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.148: corrupted inode contents
[   48.992316][ T3931] EXT4-fs (loop3): too many log groups per flexible block group
[   48.992733][ T3922] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #16: comm syz.4.148: mark_inode_dirty error
[   49.004954][ T3931] EXT4-fs (loop3): failed to initialize mballoc (-12)
[   49.014554][ T3922] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.148: corrupted inode contents
[   49.029921][ T3931] EXT4-fs (loop3): mount failed
[   49.030874][ T3922] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.148: mark_inode_dirty error
[   49.071370][ T3922] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.148: corrupted inode contents
[   49.084402][ T3936] netlink: 24 bytes leftover after parsing attributes in process `syz.0.152'.
[   49.129208][ T3922] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem
[   49.154034][ T3922] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.148: corrupted inode contents
[   49.170303][ T3922] EXT4-fs error (device loop4): ext4_truncate:4666: inode #16: comm syz.4.148: mark_inode_dirty error
[   49.185322][ T3943] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[   49.193622][ T3943] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[   49.203556][ T3922] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem
[   49.221579][ T3922] EXT4-fs (loop4): 1 truncate cleaned up
[   49.233768][ T3922] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   49.249443][ T3922] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   49.265059][   T29] kauditd_printk_skb: 206 callbacks suppressed
[   49.265076][   T29] audit: type=1400 audit(1759313523.684:717): avc:  denied  { map } for  pid=3945 comm="syz.1.156" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=6298 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   49.295299][   T29] audit: type=1400 audit(1759313523.684:718): avc:  denied  { read write } for  pid=3945 comm="syz.1.156" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=6298 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   49.346507][ T3922] EXT4-fs error (device loop4): ext4_lookup:1787: inode #15: comm syz.4.148: iget: bad i_size value: 360287970189639690
[   49.360912][   T29] audit: type=1400 audit(1759313523.744:719): avc:  denied  { read write } for  pid=3945 comm="syz.1.156" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[   49.385126][   T29] audit: type=1400 audit(1759313523.744:720): avc:  denied  { open } for  pid=3945 comm="syz.1.156" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[   49.410084][   T29] audit: type=1326 audit(1759313523.754:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3945 comm="syz.1.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa39a29eec9 code=0x7ffc0000
[   49.433384][   T29] audit: type=1326 audit(1759313523.754:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3945 comm="syz.1.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7fa39a29eec9 code=0x7ffc0000
[   49.456740][   T29] audit: type=1400 audit(1759313523.754:723): avc:  denied  { wake_alarm } for  pid=3945 comm="syz.1.156" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   49.464850][ T3922] EXT4-fs error (device loop4): ext4_lookup:1787: inode #15: comm syz.4.148: iget: bad i_size value: 360287970189639690
[   49.477838][   T29] audit: type=1326 audit(1759313523.754:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3945 comm="syz.1.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa39a29eec9 code=0x7ffc0000
[   49.513546][   T29] audit: type=1326 audit(1759313523.754:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3945 comm="syz.1.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa39a29eec9 code=0x7ffc0000
[   49.536982][   T29] audit: type=1326 audit(1759313523.754:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3945 comm="syz.1.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7fa39a29eec9 code=0x7ffc0000
[   49.657300][ T3922] EXT4-fs: Ignoring removed orlov option
[   49.683528][ T3922] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   49.714811][ T3922] EXT4-fs (loop4): can't enable nombcache during remount
[   49.759470][ T3962] netlink: 'syz.2.162': attribute type 10 has an invalid length.
[   49.767821][ T3962] netlink: 40 bytes leftover after parsing attributes in process `syz.2.162'.
[   49.797100][ T3965] IPv6: Can't replace route, no match found
[   49.804447][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.816851][ T3967] loop2: detected capacity change from 0 to 512
[   49.878031][ T3967] EXT4-fs (loop2): too many log groups per flexible block group
[   49.899157][ T3967] EXT4-fs (loop2): failed to initialize mballoc (-12)
[   49.917056][ T3967] EXT4-fs (loop2): mount failed
[   50.037636][ T3991] ALSA: seq fatal error: cannot create timer (-22)
[   50.132980][ T3996] netlink: 'syz.1.174': attribute type 10 has an invalid length.
[   50.141848][ T3996] netlink: 40 bytes leftover after parsing attributes in process `syz.1.174'.
[   50.328759][ T4010] capability: warning: `syz.1.181' uses deprecated v2 capabilities in a way that may be insecure
[   50.458803][ T4022] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22
[   50.467192][ T4022] netdevsim netdevsim0: Direct firmware load for . failed with error -22
[   50.552111][ T4026] netlink: 'syz.1.188': attribute type 10 has an invalid length.
[   50.566504][ T4026] netlink: 40 bytes leftover after parsing attributes in process `syz.1.188'.
[   50.581412][ T4028] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22
[   50.589804][ T4028] netdevsim netdevsim4: Direct firmware load for . failed with error -22
[   50.613643][ T4024] loop0: detected capacity change from 0 to 512
[   50.698540][ T4024] EXT4-fs (loop0): too many log groups per flexible block group
[   50.715841][ T4024] EXT4-fs (loop0): failed to initialize mballoc (-12)
[   50.734881][ T4024] EXT4-fs (loop0): mount failed
[   51.012941][ T4051] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[   51.021271][ T4051] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[   51.081782][ T4059] 9pnet_fd: Insufficient options for proto=fd
[   51.102802][ T4055] loop2: detected capacity change from 0 to 512
[   51.211642][ T4055] EXT4-fs (loop2): too many log groups per flexible block group
[   51.223321][ T4059] loop0: detected capacity change from 0 to 2048
[   51.256495][ T4055] EXT4-fs (loop2): failed to initialize mballoc (-12)
[   51.265602][ T4055] EXT4-fs (loop2): mount failed
[   51.282276][ T4064] netlink: 'syz.1.202': attribute type 10 has an invalid length.
[   51.290937][ T4064] netlink: 40 bytes leftover after parsing attributes in process `syz.1.202'.
[   51.323801][ T3500] Alternate GPT is invalid, using primary GPT.
[   51.330335][ T3500]  loop0: p2 p3 p7
[   51.346701][ T4059] Alternate GPT is invalid, using primary GPT.
[   51.353206][ T4059]  loop0: p2 p3 p7
[   51.753861][ T4077] loop4: detected capacity change from 0 to 512
[   51.825655][ T4077] EXT4-fs (loop4): too many log groups per flexible block group
[   51.855946][ T4077] EXT4-fs (loop4): failed to initialize mballoc (-12)
[   51.863954][ T4077] EXT4-fs (loop4): mount failed
[   51.920964][ T4091] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[   51.929269][ T4091] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[   51.961653][ T4094] ALSA: seq fatal error: cannot create timer (-22)
[   52.197997][ T4106] netlink: 'syz.4.217': attribute type 4 has an invalid length.
[   52.264293][ T4108] 9pnet_fd: Insufficient options for proto=fd
[   52.815164][ T4154] netlink: 'syz.2.227': attribute type 10 has an invalid length.
[   52.823635][ T4154] netlink: 40 bytes leftover after parsing attributes in process `syz.2.227'.
[   52.898163][ T4154] loop2: detected capacity change from 0 to 512
[   52.904108][ T4157] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[   52.929234][ T4159] 9pnet_fd: Insufficient options for proto=fd
[   53.020224][ T4166] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4166 comm=syz.0.229
[   53.072105][ T4154] EXT4-fs (loop2): too many log groups per flexible block group
[   53.092786][ T4154] EXT4-fs (loop2): failed to initialize mballoc (-12)
[   53.152896][ T4154] EXT4-fs (loop2): mount failed
[   53.228666][ T4183] loop0: detected capacity change from 0 to 764
[   53.275864][ T4183] rock: directory entry would overflow storage
[   53.282226][ T4183] rock: sig=0x4f50, size=4, remaining=3
[   53.287827][ T4183] iso9660: Corrupted directory entry in block 6 of inode 1792
[   53.433729][ T4195] loop4: detected capacity change from 0 to 164
[   53.461250][ T4196] netlink: 8 bytes leftover after parsing attributes in process `syz.0.233'.
[   53.470125][ T4196] netlink: 8 bytes leftover after parsing attributes in process `syz.0.233'.
[   53.505487][ T4199] IPv6: Can't replace route, no match found
[   53.862836][ T4212] loop3: detected capacity change from 0 to 512
[   53.950961][ T4218] netlink: 4 bytes leftover after parsing attributes in process `syz.2.245'.
[   53.973395][ T4227] loop4: detected capacity change from 0 to 512
[   53.990033][ T4212] EXT4-fs (loop3): too many log groups per flexible block group
[   54.000369][ T4212] EXT4-fs (loop3): failed to initialize mballoc (-12)
[   54.024271][ T4227] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   54.050836][ T4212] EXT4-fs (loop3): mount failed
[   54.072548][ T4227] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   54.193602][ T4240] netlink: 'syz.0.249': attribute type 4 has an invalid length.
[   54.207388][ T4227] EXT4-fs error (device loop4): ext4_get_first_dir_block:3529: inode #12: comm syz.4.248: Directory hole found for htree leaf block 0
[   54.343359][ T4246] loop3: detected capacity change from 0 to 512
[   54.367157][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   54.385322][ T4246] EXT4-fs (loop3): too many log groups per flexible block group
[   54.411070][ T4246] EXT4-fs (loop3): failed to initialize mballoc (-12)
[   54.439871][ T4246] EXT4-fs (loop3): mount failed
[   54.644333][ T4263] loop4: detected capacity change from 0 to 764
[   54.682279][ T4263] rock: directory entry would overflow storage
[   54.688675][ T4263] rock: sig=0x4f50, size=4, remaining=3
[   54.694329][ T4263] iso9660: Corrupted directory entry in block 6 of inode 1792
[   54.812147][ T4267] bridge0: port 4(hsr_slave_1) entered blocking state
[   54.819172][ T4267] bridge0: port 4(hsr_slave_1) entered disabled state
[   54.831271][ T4267] hsr_slave_1: entered allmulticast mode
[   54.836310][   T29] kauditd_printk_skb: 205 callbacks suppressed
[   54.836327][   T29] audit: type=1326 audit(1759313529.254:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4270 comm="syz.2.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c054aeec9 code=0x7ffc0000
[   54.837665][ T4267] hsr_slave_1: left allmulticast mode
[   54.844396][   T29] audit: type=1326 audit(1759313529.264:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4270 comm="syz.2.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c054aeec9 code=0x7ffc0000
[   54.876426][ T4272] netlink: 8 bytes leftover after parsing attributes in process `syz.4.259'.
[   54.903962][ T4272] netlink: 8 bytes leftover after parsing attributes in process `syz.4.259'.
[   55.061116][ T4276] loop2: detected capacity change from 0 to 512
[   55.123507][   T29] audit: type=1400 audit(1759313529.294:934): avc:  denied  { create } for  pid=4266 comm="syz.3.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   55.135468][ T4276] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   55.142924][   T29] audit: type=1326 audit(1759313529.324:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4270 comm="syz.2.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1c054aeec9 code=0x7ffc0000
[   55.178651][   T29] audit: type=1326 audit(1759313529.324:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4270 comm="syz.2.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c054aeec9 code=0x7ffc0000
[   55.201954][   T29] audit: type=1326 audit(1759313529.324:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4270 comm="syz.2.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c054aeec9 code=0x7ffc0000
[   55.203314][ T4276] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   55.225208][   T29] audit: type=1400 audit(1759313529.344:938): avc:  denied  { write } for  pid=4266 comm="syz.3.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   55.225239][   T29] audit: type=1326 audit(1759313529.344:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4270 comm="syz.2.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1c054aeec9 code=0x7ffc0000
[   55.278060][   T29] audit: type=1326 audit(1759313529.344:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4270 comm="syz.2.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c054aeec9 code=0x7ffc0000
[   55.301373][   T29] audit: type=1326 audit(1759313529.344:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4270 comm="syz.2.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c054aeec9 code=0x7ffc0000
[   55.382552][ T4276] EXT4-fs error (device loop2): ext4_get_first_dir_block:3529: inode #12: comm syz.2.263: Directory hole found for htree leaf block 0
[   55.411012][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.461946][ T4284] loop3: detected capacity change from 0 to 512
[   55.535322][ T4284] EXT4-fs (loop3): too many log groups per flexible block group
[   55.556138][ T4284] EXT4-fs (loop3): failed to initialize mballoc (-12)
[   55.573344][ T4284] EXT4-fs (loop3): mount failed
[   55.622748][ T4294] 9pnet_fd: Insufficient options for proto=fd
[   55.793444][ T4308] netlink: 'syz.3.275': attribute type 4 has an invalid length.
[   55.832041][ T4311] loop0: detected capacity change from 0 to 512
[   55.866805][ T4311] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   55.885774][ T4311] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   55.900926][ T4311] EXT4-fs error (device loop0): ext4_get_first_dir_block:3529: inode #12: comm syz.0.276: Directory hole found for htree leaf block 0
[   55.928654][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   56.056477][ T4326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.279'.
[   56.065453][ T4326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.279'.
[   56.120645][ T4332] 9pnet_fd: Insufficient options for proto=fd
[   56.477975][ T4350] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22
[   56.486297][ T4350] netdevsim netdevsim4: Direct firmware load for . failed with error -22
[   56.871008][ T4361] 9pnet_fd: Insufficient options for proto=fd
[   56.956983][ T4365] netlink: 'syz.1.296': attribute type 10 has an invalid length.
[   56.967964][ T4365] netlink: 40 bytes leftover after parsing attributes in process `syz.1.296'.
[   57.011608][ T4370] netlink: 'syz.0.297': attribute type 10 has an invalid length.
[   57.020325][ T4370] netlink: 40 bytes leftover after parsing attributes in process `syz.0.297'.
[   57.076236][ T4377] loop0: detected capacity change from 0 to 512
[   57.140675][ T4383] loop4: detected capacity change from 0 to 764
[   57.170915][ T4377] EXT4-fs (loop0): too many log groups per flexible block group
[   57.183185][ T4383] rock: directory entry would overflow storage
[   57.189413][ T4383] rock: sig=0x4f50, size=4, remaining=3
[   57.195030][ T4383] iso9660: Corrupted directory entry in block 6 of inode 1792
[   57.213583][ T4377] EXT4-fs (loop0): failed to initialize mballoc (-12)
[   57.229915][ T4377] EXT4-fs (loop0): mount failed
[   57.321839][ T4390] 9pnet_fd: Insufficient options for proto=fd
[   57.345977][ T4395] netlink: 8 bytes leftover after parsing attributes in process `syz.4.303'.
[   57.354972][ T4395] netlink: 8 bytes leftover after parsing attributes in process `syz.4.303'.
[   57.384969][ T4390] loop2: detected capacity change from 0 to 2048
[   57.426418][ T4398] IPv6: Can't replace route, no match found
[   57.452841][ T3501] Alternate GPT is invalid, using primary GPT.
[   57.459334][ T3501]  loop2: p2 p3 p7
[   57.473521][ T4400] 9pnet_fd: Insufficient options for proto=fd
[   57.486509][ T4390] Alternate GPT is invalid, using primary GPT.
[   57.492854][ T4390]  loop2: p2 p3 p7
[   57.506876][ T4400] loop3: detected capacity change from 0 to 2048
[   57.586376][ T3500] Alternate GPT is invalid, using primary GPT.
[   57.592945][ T3500]  loop3: p2 p3 p7
[   57.632496][ T4400] Alternate GPT is invalid, using primary GPT.
[   57.639072][ T4400]  loop3: p2 p3 p7
[   58.175643][ T4428] loop4: detected capacity change from 0 to 512
[   58.197892][ T4430] ALSA: seq fatal error: cannot create timer (-22)
[   58.238967][ T4428] EXT4-fs (loop4): too many log groups per flexible block group
[   58.246854][ T4428] EXT4-fs (loop4): failed to initialize mballoc (-12)
[   58.253698][ T4428] EXT4-fs (loop4): mount failed
[   58.304352][ T4434] IPv6: Can't replace route, no match found
[   58.309487][ T4436] netlink: 'syz.4.320': attribute type 10 has an invalid length.
[   58.318827][ T4436] netlink: 40 bytes leftover after parsing attributes in process `syz.4.320'.
[   58.342729][ T4438] netlink: 204 bytes leftover after parsing attributes in process `syz.3.321'.
[   58.378598][ T4436] loop4: detected capacity change from 0 to 512
[   58.452560][ T4451] loop3: detected capacity change from 0 to 512
[   58.460322][ T4436] EXT4-fs (loop4): too many log groups per flexible block group
[   58.490699][ T4436] EXT4-fs (loop4): failed to initialize mballoc (-12)
[   58.499982][ T4451] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   58.514438][ T4436] EXT4-fs (loop4): mount failed
[   58.517683][ T4451] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   58.552933][ T4451] EXT4-fs error (device loop3): ext4_get_first_dir_block:3529: inode #12: comm syz.3.323: Directory hole found for htree leaf block 0
[   58.590588][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   58.604533][ T4464] loop4: detected capacity change from 0 to 764
[   58.616765][ T4464] rock: directory entry would overflow storage
[   58.623054][ T4464] rock: sig=0x4f50, size=4, remaining=3
[   58.628697][ T4464] iso9660: Corrupted directory entry in block 6 of inode 1792
[   58.661917][ T4470] netlink: 'syz.3.328': attribute type 4 has an invalid length.
[   58.704233][ T4474] netlink: 'syz.0.332': attribute type 10 has an invalid length.
[   58.736677][ T4473] IPv6: Can't replace route, no match found
[   58.753258][ T4474] loop0: detected capacity change from 0 to 512
[   58.829874][ T4474] EXT4-fs (loop0): too many log groups per flexible block group
[   58.930672][ T4474] EXT4-fs (loop0): failed to initialize mballoc (-12)
[   58.957009][ T4474] EXT4-fs (loop0): mount failed
[   59.390779][ T4497] netlink: 'syz.1.338': attribute type 10 has an invalid length.
[   59.606014][ T4508] IPv6: Can't replace route, no match found
[   59.651961][ T4511] sctp: [Deprecated]: syz.0.342 (pid 4511) Use of int in maxseg socket option.
[   59.651961][ T4511] Use struct sctp_assoc_value instead
[   59.816736][ T4515] loop2: detected capacity change from 0 to 2048
[   59.876357][ T4515] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4515 comm=syz.2.346
[   59.905126][   T29] kauditd_printk_skb: 148 callbacks suppressed
[   59.905140][   T29] audit: type=1400 audit(1759313534.334:1090): avc:  denied  { audit_write } for  pid=4514 comm="syz.2.346" capability=29  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[   59.905217][   T29] audit: type=1107 audit(1759313534.334:1091): pid=4514 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg=''
[   59.988880][ T4522] netlink: 'syz.2.349': attribute type 10 has an invalid length.
[   59.997238][ T4522] __nla_validate_parse: 5 callbacks suppressed
[   59.997275][ T4522] netlink: 40 bytes leftover after parsing attributes in process `syz.2.349'.
[   60.057655][ T4525] loop2: detected capacity change from 0 to 512
[   60.068338][ T4525] EXT4-fs (loop2): too many log groups per flexible block group
[   60.068399][ T4525] EXT4-fs (loop2): failed to initialize mballoc (-12)
[   60.068425][ T4525] EXT4-fs (loop2): mount failed
[   60.299196][ T4532] loop3: detected capacity change from 0 to 512
[   60.316311][   T29] audit: type=1326 audit(1759313534.714:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4533 comm="syz.2.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c054aeec9 code=0x7ffc0000
[   60.339672][   T29] audit: type=1326 audit(1759313534.714:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4533 comm="syz.2.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c054aeec9 code=0x7ffc0000
[   60.339791][   T29] audit: type=1326 audit(1759313534.714:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4533 comm="syz.2.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f1c054aeec9 code=0x7ffc0000
[   60.339817][   T29] audit: type=1326 audit(1759313534.714:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4533 comm="syz.2.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c054aeec9 code=0x7ffc0000
[   60.339843][   T29] audit: type=1326 audit(1759313534.714:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4533 comm="syz.2.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c054aeec9 code=0x7ffc0000
[   60.339913][   T29] audit: type=1326 audit(1759313534.714:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4533 comm="syz.2.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7f1c054aeec9 code=0x7ffc0000
[   60.339946][   T29] audit: type=1326 audit(1759313534.714:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4533 comm="syz.2.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c054aeec9 code=0x7ffc0000
[   60.527595][ T4532] EXT4-fs (loop3): too many log groups per flexible block group
[   60.538995][ T4540] mmap: syz.1.356 (4540) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   60.553346][   T29] audit: type=1326 audit(1759313534.974:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4545 comm="syz.0.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f793873eec9 code=0x7ffc0000
[   60.558718][ T4532] EXT4-fs (loop3): failed to initialize mballoc (-12)
[   60.705700][ T4532] EXT4-fs (loop3): mount failed
[   61.519842][ T4572] sctp: [Deprecated]: syz.0.367 (pid 4572) Use of int in maxseg socket option.
[   61.519842][ T4572] Use struct sctp_assoc_value instead
[   61.930193][ T4584] IPv6: Can't replace route, no match found
[   62.812121][ T4632] ALSA: seq fatal error: cannot create timer (-22)
[   62.845738][ T4629] loop4: detected capacity change from 0 to 512
[   62.877788][ T4629] EXT4-fs (loop4): too many log groups per flexible block group
[   62.886459][ T4629] EXT4-fs (loop4): failed to initialize mballoc (-12)
[   62.900507][ T4629] EXT4-fs (loop4): mount failed
[   63.240406][ T4663] netlink: 'syz.2.404': attribute type 10 has an invalid length.
[   63.250987][ T4663] netlink: 40 bytes leftover after parsing attributes in process `syz.2.404'.
[   63.277162][ T4665] netlink: 32 bytes leftover after parsing attributes in process `syz.3.406'.
[   63.297752][ T4668] loop2: detected capacity change from 0 to 512
[   63.336253][ T4668] EXT4-fs (loop2): too many log groups per flexible block group
[   63.344104][ T4668] EXT4-fs (loop2): failed to initialize mballoc (-12)
[   63.357192][ T4668] EXT4-fs (loop2): mount failed
[   63.416052][ T4667] loop0: detected capacity change from 0 to 512
[   63.449293][ T4675] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4675 comm=syz.3.408
[   63.615317][ T4667] EXT4-fs (loop0): too many log groups per flexible block group
[   63.626547][ T4667] EXT4-fs (loop0): failed to initialize mballoc (-12)
[   63.634484][ T4667] EXT4-fs (loop0): mount failed
[   63.831955][ T4688] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22
[   63.840243][ T4688] netdevsim netdevsim0: Direct firmware load for . failed with error -22
[   64.114984][ T4702] ALSA: seq fatal error: cannot create timer (-22)
[   64.307130][ T4711] loop0: detected capacity change from 0 to 512
[   64.341516][ T4711] EXT4-fs (loop0): too many log groups per flexible block group
[   64.350448][ T4711] EXT4-fs (loop0): failed to initialize mballoc (-12)
[   64.358897][ T4711] EXT4-fs (loop0): mount failed
[   64.409718][ T4717] netlink: 'syz.0.424': attribute type 10 has an invalid length.
[   64.417689][ T4717] netlink: 40 bytes leftover after parsing attributes in process `syz.0.424'.
[   64.470339][ T4717] loop0: detected capacity change from 0 to 512
[   64.510521][ T4717] EXT4-fs (loop0): too many log groups per flexible block group
[   64.522126][ T4717] EXT4-fs (loop0): failed to initialize mballoc (-12)
[   64.532057][ T4717] EXT4-fs (loop0): mount failed
[   64.675390][ T4732] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22
[   64.683736][ T4732] netdevsim netdevsim0: Direct firmware load for . failed with error -22
[   65.217466][ T4758] sctp: [Deprecated]: syz.0.438 (pid 4758) Use of int in maxseg socket option.
[   65.217466][ T4758] Use struct sctp_assoc_value instead
[   65.327622][ T4764] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22
[   65.335926][ T4764] netdevsim netdevsim0: Direct firmware load for . failed with error -22
[   65.622852][ T4786] sctp: [Deprecated]: syz.4.452 (pid 4786) Use of int in maxseg socket option.
[   65.622852][ T4786] Use struct sctp_assoc_value instead
[   65.759477][ T4798] netlink: 4 bytes leftover after parsing attributes in process `syz.4.457'.
[   65.815984][ T4798] team0: Port device team_slave_0 removed
[   65.844402][   T29] kauditd_printk_skb: 47 callbacks suppressed
[   65.844428][   T29] audit: type=1400 audit(1759313540.264:1147): avc:  denied  { mount } for  pid=4797 comm="syz.4.457" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[   65.875215][   T29] audit: type=1400 audit(1759313540.294:1148): avc:  denied  { mount } for  pid=4797 comm="syz.4.457" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   65.927629][   T29] audit: type=1400 audit(1759313540.354:1149): avc:  denied  { unmount } for  pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   65.948431][   T29] audit: type=1400 audit(1759313540.374:1150): avc:  denied  { unmount } for  pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[   66.037827][   T29] audit: type=1400 audit(1759313540.434:1151): avc:  denied  { getopt } for  pid=4807 comm="syz.1.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   66.075338][ T4806] loop4: detected capacity change from 0 to 764
[   66.085448][ T4806] rock: directory entry would overflow storage
[   66.091631][ T4806] rock: sig=0x4f50, size=4, remaining=3
[   66.097287][ T4806] iso9660: Corrupted directory entry in block 6 of inode 1792
[   66.181037][   T29] audit: type=1400 audit(1759313540.534:1152): avc:  denied  { bind } for  pid=4807 comm="syz.1.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   66.200527][   T29] audit: type=1400 audit(1759313540.534:1153): avc:  denied  { setopt } for  pid=4807 comm="syz.1.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   66.271565][ T4819] netlink: 'syz.1.464': attribute type 4 has an invalid length.
[   66.337438][ T4822] netlink: 8 bytes leftover after parsing attributes in process `syz.4.459'.
[   66.346505][ T4822] netlink: 8 bytes leftover after parsing attributes in process `syz.4.459'.
[   66.362356][ T4821] netlink: 'syz.1.465': attribute type 10 has an invalid length.
[   66.371013][ T4821] netlink: 40 bytes leftover after parsing attributes in process `syz.1.465'.
[   66.457792][ T4827] sctp: [Deprecated]: syz.3.467 (pid 4827) Use of int in maxseg socket option.
[   66.457792][ T4827] Use struct sctp_assoc_value instead
[   67.164803][   T29] audit: type=1400 audit(1759313541.594:1154): avc:  denied  { mount } for  pid=4852 comm="syz.2.478" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[   67.215527][   T29] audit: type=1400 audit(1759313541.614:1155): avc:  denied  { mounton } for  pid=4852 comm="syz.2.478" path="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1
[   67.236732][   T29] audit: type=1326 audit(1759313541.614:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4852 comm="syz.2.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c054aeec9 code=0x7ffc0000
[   67.280178][ T4865] netlink: 4 bytes leftover after parsing attributes in process `syz.3.482'.
[   67.300170][ T4856] loop4: detected capacity change from 0 to 1024
[   67.324543][ T4865] team0: Port device team_slave_0 removed
[   67.340988][ T4856] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   67.358939][ T4856] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   67.438814][ T4856] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[   67.454853][ T4856] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[   67.467102][ T4856] EXT4-fs (loop4): This should not happen!! Data will be lost
[   67.467102][ T4856] 
[   67.476851][ T4856] EXT4-fs (loop4): Total free blocks count 0
[   67.483366][ T4856] EXT4-fs (loop4): Free/Dirty block details
[   67.489739][ T4856] EXT4-fs (loop4): free_blocks=4293918720
[   67.495715][ T4856] EXT4-fs (loop4): dirty_blocks=16
[   67.500830][ T4856] EXT4-fs (loop4): Block reservation details
[   67.506847][ T4856] EXT4-fs (loop4): i_reserved_data_blocks=1
[   67.530435][ T4856] vhci_hcd: invalid port number 255
[   67.535711][ T4856] vhci_hcd: default hub control req: 8012 v0303 i00ff l0
[   67.551529][ T4879] syz_tun: entered allmulticast mode
[   67.575654][ T4879] netlink: 36 bytes leftover after parsing attributes in process `syz.1.486'.
[   67.661561][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   67.778357][ T4904] 9pnet_fd: Insufficient options for proto=fd
[   67.854660][ T4904] loop2: detected capacity change from 0 to 2048
[   67.865472][ T4913] netlink: 4 bytes leftover after parsing attributes in process `syz.0.500'.
[   67.931429][ T4913] team0: Port device team_slave_0 removed
[   67.948476][ T4919] 9pnet_fd: Insufficient options for proto=fd
[   67.974476][ T3501] Alternate GPT is invalid, using primary GPT.
[   67.980984][ T3501]  loop2: p2 p3 p7
[   67.993310][ T4921] loop4: detected capacity change from 0 to 512
[   68.115956][ T4921] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   68.146682][ T4921] ext4 filesystem being mounted at /107/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   68.172695][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   68.348559][ T4904] Alternate GPT is invalid, using primary GPT.
[   68.355045][ T4904]  loop2: p2 p3 p7
[   68.450684][ T4948] netlink: 204 bytes leftover after parsing attributes in process `syz.0.514'.
[   68.460811][ T4949] netlink: 'syz.4.509': attribute type 4 has an invalid length.
[   68.551854][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory
[   68.555824][ T3501] udevd[3501]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory
[   68.572889][ T3500] udevd[3500]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[   68.630526][ T3500] udevd[3500]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[   68.632378][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory
[   68.642145][ T3501] udevd[3501]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory
[   68.758058][ T4979] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22
[   68.766929][ T4979] netdevsim netdevsim2: Direct firmware load for . failed with error -22
[   68.814260][ T4986] 9pnet_fd: Insufficient options for proto=fd
[   68.861696][ T4986] loop0: detected capacity change from 0 to 2048
[   68.934437][ T3501] Alternate GPT is invalid, using primary GPT.
[   68.940950][ T3501]  loop0: p2 p3 p7
[   68.968111][ T4986] Alternate GPT is invalid, using primary GPT.
[   68.974494][ T4986]  loop0: p2 p3 p7
[   69.018270][ T5001] IPv6: Can't replace route, no match found
[   69.276573][ T3501] udevd[3501]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory
[   69.291915][ T5025] loop2: detected capacity change from 0 to 512
[   69.297525][ T3500] udevd[3500]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory
[   69.307118][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory
[   69.458429][ T5025] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   69.462129][ T5042] IPv6: Can't replace route, no match found
[   69.506446][ T5025] ext4 filesystem being mounted at /98/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   69.521655][ T5043] netlink: 204 bytes leftover after parsing attributes in process `syz.0.549'.
[   69.549440][ T5047] ALSA: seq fatal error: cannot create timer (-22)
[   69.576026][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   69.609002][ T5049] netlink: 'syz.0.553': attribute type 4 has an invalid length.
[   69.640636][ T5051] netlink: 'syz.1.554': attribute type 10 has an invalid length.
[   69.649497][ T5051] netlink: 40 bytes leftover after parsing attributes in process `syz.1.554'.
[   69.921159][ T5078] ALSA: seq fatal error: cannot create timer (-22)
[   69.931082][ T5079] netlink: 'syz.0.566': attribute type 4 has an invalid length.
[   69.975019][ T5083] loop0: detected capacity change from 0 to 512
[   70.007759][ T5083] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   70.021325][ T5083] ext4 filesystem being mounted at /128/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   70.048122][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.102342][ T5087] netlink: 'syz.0.569': attribute type 10 has an invalid length.
[   70.161959][ T5087] loop0: detected capacity change from 0 to 512
[   70.210282][ T5087] EXT4-fs (loop0): too many log groups per flexible block group
[   70.226145][ T5087] EXT4-fs (loop0): failed to initialize mballoc (-12)
[   70.242572][ T5087] EXT4-fs (loop0): mount failed
[   70.378707][ T5111] 9pnet_fd: Insufficient options for proto=fd
[   70.389638][ T5109] netlink: 'syz.1.578': attribute type 4 has an invalid length.
[   70.413624][ T5111] loop3: detected capacity change from 0 to 2048
[   70.508442][ T5111] Alternate GPT is invalid, using primary GPT.
[   70.514940][ T5111]  loop3: p2 p3 p7
[   70.528119][ T5124] netlink: 'syz.4.585': attribute type 10 has an invalid length.
[   70.565773][ T5111] blktrace: Concurrent blktraces are not allowed on loop3p2
[   70.660206][ T5124] loop4: detected capacity change from 0 to 512
[   70.790828][ T5124] EXT4-fs (loop4): too many log groups per flexible block group
[   70.819901][ T5124] EXT4-fs (loop4): failed to initialize mballoc (-12)
[   70.916218][ T5124] EXT4-fs (loop4): mount failed
[   70.933410][ T5154] 9pnet_fd: Insufficient options for proto=fd
[   70.948443][ T5154] loop3: detected capacity change from 0 to 2048
[   71.026219][ T3501] Alternate GPT is invalid, using primary GPT.
[   71.032685][ T3501]  loop3: p2 p3 p7
[   71.069556][ T5154] Alternate GPT is invalid, using primary GPT.
[   71.076139][ T5154]  loop3: p2 p3 p7
[   71.089829][ T5154] blktrace: Concurrent blktraces are not allowed on loop3p2
[   71.101788][ T5165] __nla_validate_parse: 4 callbacks suppressed
[   71.101804][ T5165] netlink: 204 bytes leftover after parsing attributes in process `syz.1.602'.
[   71.185929][ T3500] udevd[3500]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[   71.188311][ T5175] ALSA: seq fatal error: cannot create timer (-22)
[   71.209179][   T29] kauditd_printk_skb: 12 callbacks suppressed
[   71.209194][   T29] audit: type=1400 audit(1759313545.634:1169): avc:  denied  { read } for  pid=5172 comm="syz.2.605" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[   71.239545][   T29] audit: type=1400 audit(1759313545.634:1170): avc:  denied  { open } for  pid=5172 comm="syz.2.605" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[   71.264118][   T29] audit: type=1400 audit(1759313545.634:1171): avc:  denied  { ioctl } for  pid=5172 comm="syz.2.605" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[   71.543693][   T29] audit: type=1326 audit(1759313545.964:1172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5189 comm="syz.3.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a81d8eec9 code=0x7ffc0000
[   71.602580][   T29] audit: type=1326 audit(1759313545.994:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5189 comm="syz.3.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a81d8eec9 code=0x7ffc0000
[   71.625967][   T29] audit: type=1326 audit(1759313545.994:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5189 comm="syz.3.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f5a81d8eec9 code=0x7ffc0000
[   71.649359][   T29] audit: type=1326 audit(1759313545.994:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5189 comm="syz.3.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a81d8eec9 code=0x7ffc0000
[   71.672736][   T29] audit: type=1326 audit(1759313545.994:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5189 comm="syz.3.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7f5a81d8eec9 code=0x7ffc0000
[   71.696127][   T29] audit: type=1326 audit(1759313545.994:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5189 comm="syz.3.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a81d8eec9 code=0x7ffc0000
[   71.779866][ T5201] 9pnet_fd: Insufficient options for proto=fd
[   71.804111][ T5203] ALSA: seq fatal error: cannot create timer (-22)
[   71.986395][   T29] audit: type=1326 audit(1759313546.414:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5221 comm="syz.0.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f793873eec9 code=0x7ffc0000
[   72.020151][ T5220] netlink: 'syz.3.626': attribute type 4 has an invalid length.
[   72.084865][ T5229] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22
[   72.093215][ T5229] netdevsim netdevsim0: Direct firmware load for . failed with error -22
[   72.155670][ T5243] 9pnet_fd: Insufficient options for proto=fd
[   72.183823][ T5247] ALSA: seq fatal error: cannot create timer (-22)
[   72.197577][ T5233] loop3: detected capacity change from 0 to 2048
[   72.242279][ T5252] netlink: 'syz.0.638': attribute type 4 has an invalid length.
[   72.262578][ T5233] Alternate GPT is invalid, using primary GPT.
[   72.269100][ T5233]  loop3: p2 p3 p7
[   72.290409][ T2990] Alternate GPT is invalid, using primary GPT.
[   72.296812][ T2990]  loop3: p2 p3 p7
[   72.527012][ T5264] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22
[   72.535281][ T5264] netdevsim netdevsim2: Direct firmware load for . failed with error -22
[   72.539255][ T5260] loop3: detected capacity change from 0 to 8192
[   72.565259][ T5265] loop0: detected capacity change from 0 to 1024
[   72.583316][ T5265] EXT4-fs: Ignoring removed bh option
[   72.602295][ T5265] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   72.617991][ T3501]  loop3: p4 < >
[   72.623866][ T5260]  loop3: p4 < >
[   72.662578][ T5265] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   72.728014][ T5265] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0100]
[   72.757250][ T5265] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 2: comm syz.0.640: lblock 2 mapped to illegal pblock 2 (length 1)
[   72.774174][ T5265] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.640: lblock 0 mapped to illegal pblock 48 (length 1)
[   72.789969][ T5265] EXT4-fs error (device loop0): ext4_acquire_dquot:6943: comm syz.0.640: Failed to acquire dquot type 0
[   72.802467][ T5265] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem
[   72.824409][ T5265] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.640: mark_inode_dirty error
[   72.931271][ T5265] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[   72.945077][ T5265] EXT4-fs (loop0): 1 orphan inode deleted
[   72.952410][ T5265] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   72.984650][ T4125] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:13: lblock 1 mapped to illegal pblock 1 (length 1)
[   72.999191][ T4125] EXT4-fs error (device loop0): ext4_release_dquot:6979: comm kworker/u8:13: Failed to release dquot type 0
[   73.031107][ T5282] netlink: 4 bytes leftover after parsing attributes in process `syz.1.649'.
[   73.078420][ T5282] team0: Port device team_slave_0 removed
[   73.165768][ T5293] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22
[   73.174211][ T5293] netdevsim netdevsim4: Direct firmware load for . failed with error -22
[   73.321426][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.341558][ T3303] EXT4-fs error (device loop0): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0
[   73.496397][ T3303] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem
[   73.510599][ T3303] EXT4-fs error (device loop0): ext4_quota_off:7227: inode #3: comm syz-executor: mark_inode_dirty error
[   73.621535][ T5314] netlink: 'syz.4.663': attribute type 4 has an invalid length.
[   73.866037][ T5326] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[   73.867421][ T5328] IPv6: Can't replace route, no match found
[   73.874266][ T5326] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[   74.259863][ T5343] loop0: detected capacity change from 0 to 764
[   74.307352][ T5343] rock: directory entry would overflow storage
[   74.313559][ T5343] rock: sig=0x4f50, size=4, remaining=3
[   74.319255][ T5343] iso9660: Corrupted directory entry in block 6 of inode 1792
[   74.446649][ T5362] netlink: 8 bytes leftover after parsing attributes in process `syz.0.674'.
[   74.455568][ T5362] netlink: 8 bytes leftover after parsing attributes in process `syz.0.674'.
[   74.529735][ T5371] 9pnet_fd: Insufficient options for proto=fd
[   74.617042][ T5379] 9pnet_fd: Insufficient options for proto=fd
[   74.641385][ T5379] loop4: detected capacity change from 0 to 2048
[   74.700614][ T5389] IPv6: Can't replace route, no match found
[   74.724432][ T3501] Alternate GPT is invalid, using primary GPT.
[   74.730883][ T3501]  loop4: p2 p3 p7
[   74.746214][ T5379] Alternate GPT is invalid, using primary GPT.
[   74.752649][ T5379]  loop4: p2 p3 p7
[   74.797771][ T5397] 9pnet_fd: Insufficient options for proto=fd
[   75.128457][ T5424] 9pnet_fd: Insufficient options for proto=fd
[   75.429872][ T5450] netlink: 204 bytes leftover after parsing attributes in process `syz.0.720'.
[   75.489479][ T5457] 9pnet_fd: Insufficient options for proto=fd
[   75.627537][ T5465] 9pnet_fd: Insufficient options for proto=fd
[   75.654246][ T5465] loop0: detected capacity change from 0 to 2048
[   75.699426][ T5465] Alternate GPT is invalid, using primary GPT.
[   75.705877][ T5465]  loop0: p2 p3 p7
[   75.736198][ T5465] blktrace: Concurrent blktraces are not allowed on loop0p2
[   75.786817][ T5470] loop4: detected capacity change from 0 to 8192
[   75.835456][ T5470]  loop4: p4 < >
[   75.835458][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory
[   75.837782][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory
[   75.843591][ T3501] udevd[3501]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory
[   75.891424][ T5482] 9pnet_fd: Insufficient options for proto=fd
[   75.954325][ T3501] udevd[3501]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[   76.186645][ T5501] loop3: detected capacity change from 0 to 512
[   76.208254][ T5501] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   76.266545][ T5501] ext4 filesystem being mounted at /113/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   76.341606][ T5501] EXT4-fs error (device loop3): ext4_get_first_dir_block:3529: inode #12: comm syz.3.744: Directory hole found for htree leaf block 0
[   76.359761][ T5512] 9pnet_fd: Insufficient options for proto=fd
[   76.414276][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   76.467635][ T5517] netlink: 'syz.1.749': attribute type 10 has an invalid length.
[   76.478777][ T5517] netlink: 40 bytes leftover after parsing attributes in process `syz.1.749'.
[   76.662085][ T5532] netlink: 204 bytes leftover after parsing attributes in process `syz.2.756'.
[   76.760713][ T5536] netlink: 'syz.2.757': attribute type 10 has an invalid length.
[   76.772735][ T5536] netlink: 40 bytes leftover after parsing attributes in process `syz.2.757'.
[   76.816051][ T5539] loop2: detected capacity change from 0 to 512
[   76.853658][ T5541] 9pnet_fd: Insufficient options for proto=fd
[   76.892494][ T5539] EXT4-fs (loop2): too many log groups per flexible block group
[   76.895437][ T5550] loop3: detected capacity change from 0 to 512
[   76.907026][ T5550] EXT4-fs: Ignoring removed nobh option
[   76.915264][ T5552] loop0: detected capacity change from 0 to 512
[   76.922470][ T5539] EXT4-fs (loop2): failed to initialize mballoc (-12)
[   76.929485][ T5539] EXT4-fs (loop2): mount failed
[   76.937572][ T5552] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   76.958412][ T5550] EXT4-fs warning (device loop3): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop3.
[   76.996742][ T5552] ext4 filesystem being mounted at /161/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   77.058307][ T5552] EXT4-fs error (device loop0): ext4_get_first_dir_block:3529: inode #12: comm syz.0.760: Directory hole found for htree leaf block 0
[   77.064539][ T5569] netlink: 204 bytes leftover after parsing attributes in process `syz.4.767'.
[   77.093431][ T5568] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22
[   77.101782][ T5568] netdevsim netdevsim2: Direct firmware load for . failed with error -22
[   77.141813][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   77.259787][ T5580] 9pnet_fd: Insufficient options for proto=fd
[   77.645943][ T5599] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[   77.654172][ T5599] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[   77.668770][ T5602] loop0: detected capacity change from 0 to 512
[   77.737438][ T5607] 9pnet_fd: Insufficient options for proto=fd
[   77.745292][ T5602] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   77.774905][ T5602] ext4 filesystem being mounted at /168/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   77.833293][ T5602] EXT4-fs error (device loop0): ext4_get_first_dir_block:3529: inode #12: comm syz.0.782: Directory hole found for htree leaf block 0
[   77.900691][ T5624] ALSA: seq fatal error: cannot create timer (-22)
[   78.070561][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   78.281873][ T5639] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22
[   78.290355][ T5639] netdevsim netdevsim0: Direct firmware load for . failed with error -22
[   78.480234][ T5647] 9pnet_fd: Insufficient options for proto=fd
[   78.804125][ T5667] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22
[   78.812381][ T5667] netdevsim netdevsim4: Direct firmware load for . failed with error -22
[   78.925994][ T5675] 9pnet_fd: Insufficient options for proto=fd
[   79.016013][ T5688] ALSA: seq fatal error: cannot create timer (-22)
[   79.056938][ T5690] loop0: detected capacity change from 0 to 512
[   79.099839][ T5690] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   79.208772][ T5690] ext4 filesystem being mounted at /177/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   79.252514][ T5703] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22
[   79.260811][ T5703] netdevsim netdevsim2: Direct firmware load for . failed with error -22
[   79.269185][ T5690] EXT4-fs error (device loop0): ext4_get_first_dir_block:3529: inode #12: comm syz.0.819: Directory hole found for htree leaf block 0
[   79.325935][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.491686][ T5716] loop4: detected capacity change from 0 to 512
[   79.525945][ T5728] ALSA: seq fatal error: cannot create timer (-22)
[   79.544067][ T5716] EXT4-fs (loop4): too many log groups per flexible block group
[   79.557775][ T5716] EXT4-fs (loop4): failed to initialize mballoc (-12)
[   79.574521][ T5716] EXT4-fs (loop4): mount failed
[   79.752456][ T5737] loop0: detected capacity change from 0 to 512
[   79.776145][ T5737] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   79.816674][ T5737] ext4 filesystem being mounted at /183/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   79.883825][ T5737] EXT4-fs error (device loop0): ext4_get_first_dir_block:3529: inode #12: comm syz.0.837: Directory hole found for htree leaf block 0
[   79.906146][   T29] kauditd_printk_skb: 46 callbacks suppressed
[   79.906158][   T29] audit: type=1326 audit(1759313554.334:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5743 comm="syz.4.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f013796eec9 code=0x7ffc0000
[   79.969426][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.970128][   T29] audit: type=1326 audit(1759313554.364:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5743 comm="syz.4.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f013796eec9 code=0x7ffc0000
[   80.001794][   T29] audit: type=1326 audit(1759313554.364:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5743 comm="syz.4.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f013796eec9 code=0x7ffc0000
[   80.025126][   T29] audit: type=1326 audit(1759313554.364:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5743 comm="syz.4.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f013796eec9 code=0x7ffc0000
[   80.031035][ T5749] loop3: detected capacity change from 0 to 8192
[   80.048535][   T29] audit: type=1326 audit(1759313554.364:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5743 comm="syz.4.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f013796eec9 code=0x7ffc0000
[   80.048581][   T29] audit: type=1326 audit(1759313554.364:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5743 comm="syz.4.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7f013796eec9 code=0x7ffc0000
[   80.048612][   T29] audit: type=1326 audit(1759313554.364:1228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5743 comm="syz.4.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f013796eec9 code=0x7ffc0000
[   80.159396][ T5751] netlink: 'syz.0.842': attribute type 4 has an invalid length.
[   80.167686][ T3501]  loop3: p4 < >
[   80.185835][ T5749]  loop3: p4 < >
[   80.228571][ T5757] 9pnet_fd: Insufficient options for proto=fd
[   80.275707][ T3501] udevd[3501]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[   80.285592][ T5761] netlink: 'syz.0.848': attribute type 10 has an invalid length.
[   80.293669][ T5761] netlink: 40 bytes leftover after parsing attributes in process `syz.0.848'.
[   80.322599][ T5767] IPv6: Can't replace route, no match found
[   80.380522][   T29] audit: type=1326 audit(1759313554.804:1229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5769 comm="syz.4.851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f013796eec9 code=0x7ffc0000
[   80.404415][ T5761] loop0: detected capacity change from 0 to 512
[   80.431820][   T29] audit: type=1326 audit(1759313554.834:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5769 comm="syz.4.851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f013796eec9 code=0x7ffc0000
[   80.455355][   T29] audit: type=1326 audit(1759313554.834:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5769 comm="syz.4.851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f013796eec9 code=0x7ffc0000
[   80.549663][ T5761] EXT4-fs (loop0): too many log groups per flexible block group
[   80.569957][ T5786] 9pnet_fd: Insufficient options for proto=fd
[   80.586082][ T5761] EXT4-fs (loop0): failed to initialize mballoc (-12)
[   80.626774][ T5761] EXT4-fs (loop0): mount failed
[   80.673211][ T5793] netlink: 20 bytes leftover after parsing attributes in process `syz.3.860'.
[   80.725841][ T5784] loop2: detected capacity change from 0 to 512
[   80.765108][ T5799] netlink: 32 bytes leftover after parsing attributes in process `syz.0.862'.
[   80.775325][ T5798] IPv6: Can't replace route, no match found
[   80.801852][ T5784] EXT4-fs (loop2): too many log groups per flexible block group
[   80.836302][ T5784] EXT4-fs (loop2): failed to initialize mballoc (-12)
[   80.847732][ T5784] EXT4-fs (loop2): mount failed
[   80.923562][ T5818] 9pnet_fd: Insufficient options for proto=fd
[   81.071561][ T5832] netlink: 'syz.0.876': attribute type 4 has an invalid length.
[   81.129449][ T5838] netlink: 'syz.2.877': attribute type 4 has an invalid length.
[   81.144276][ T5838] netlink: 'syz.2.877': attribute type 4 has an invalid length.
[   81.254040][ T5849] netlink: 204 bytes leftover after parsing attributes in process `syz.1.884'.
[   81.345976][ T5855] netlink: 'syz.0.882': attribute type 13 has an invalid length.
[   81.353763][ T5855] netlink: 'syz.0.882': attribute type 17 has an invalid length.
[   81.470930][ T5846] loop3: detected capacity change from 0 to 512
[   81.503956][ T5860] netlink: 12 bytes leftover after parsing attributes in process `syz.2.877'.
[   81.531913][ T5855] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   81.566602][ T5850] loop2: detected capacity change from 0 to 32768
[   81.611777][ T5846] EXT4-fs (loop3): too many log groups per flexible block group
[   81.625909][ T5846] EXT4-fs (loop3): failed to initialize mballoc (-12)
[   81.649595][ T5850]  loop2: p1 p3 < >
[   81.711710][ T5846] EXT4-fs (loop3): mount failed
[   81.750704][ T5869] 9pnet_fd: Insufficient options for proto=fd
[   81.806389][ T5872] netlink: 'syz.1.891': attribute type 4 has an invalid length.
[   82.150120][ T5893] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[   82.158537][ T5893] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[   82.171025][ T5890] netlink: 'syz.4.902': attribute type 10 has an invalid length.
[   82.179256][ T5890] netlink: 40 bytes leftover after parsing attributes in process `syz.4.902'.
[   82.262613][ T5890] loop4: detected capacity change from 0 to 512
[   82.323039][ T5890] EXT4-fs (loop4): too many log groups per flexible block group
[   82.374826][ T5890] EXT4-fs (loop4): failed to initialize mballoc (-12)
[   82.431315][ T5890] EXT4-fs (loop4): mount failed
[   82.458901][ T5905] ALSA: seq fatal error: cannot create timer (-22)
[   82.462287][ T3500] udevd[3500]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[   82.485449][ T3501] udevd[3501]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[   82.708610][ T5915] netlink: 204 bytes leftover after parsing attributes in process `syz.2.910'.
[   82.945914][ T5930] netlink: 12 bytes leftover after parsing attributes in process `syz.2.917'.
[   83.109295][ T5934] loop4: detected capacity change from 0 to 8192
[   83.170047][ T3501]  loop4: p4 < >
[   83.175026][ T5945] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[   83.183221][ T5945] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[   83.209533][ T5934]  loop4: p4 < >
[   83.291924][ T5952] loop3: detected capacity change from 0 to 512
[   83.396236][ T5952] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   83.411549][ T3501] udevd[3501]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[   83.422617][ T5952] ext4 filesystem being mounted at /149/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   83.475062][ T5952] EXT4-fs error (device loop3): ext4_get_first_dir_block:3529: inode #12: comm syz.3.927: Directory hole found for htree leaf block 0
[   83.491121][ T5968] netlink: 'syz.4.934': attribute type 4 has an invalid length.
[   83.538559][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   84.045758][ T5982] ALSA: seq fatal error: cannot create timer (-22)
[   84.685199][ T6000] ALSA: seq fatal error: cannot create timer (-22)
[   85.241298][ T6017] ALSA: seq fatal error: cannot create timer (-22)
[   85.525705][ T6020] netlink: 204 bytes leftover after parsing attributes in process `syz.1.952'.
[   85.715024][ T6032] ALSA: seq fatal error: cannot create timer (-22)
[   86.093468][ T6047] netlink: 'syz.3.962': attribute type 4 has an invalid length.
[   86.207479][ T6049] loop4: detected capacity change from 0 to 512
[   86.323527][ T6049] EXT4-fs (loop4): too many log groups per flexible block group
[   86.374369][ T6049] EXT4-fs (loop4): failed to initialize mballoc (-12)
[   86.409964][ T6049] EXT4-fs (loop4): mount failed
[   86.470822][ T6068] sctp: [Deprecated]: syz.1.968 (pid 6068) Use of int in maxseg socket option.
[   86.470822][ T6068] Use struct sctp_assoc_value instead
[   86.622287][ T6071] loop4: detected capacity change from 0 to 8192
[   86.656310][ T3501]  loop4: p4 < >
[   86.664535][ T6071]  loop4: p4 < >
[   86.747962][ T6079] netlink: 'syz.4.974': attribute type 4 has an invalid length.
[   86.788748][ T3501] udevd[3501]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[   86.798931][ T3501] udevd[3501]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[   86.920548][ T6096] IPv6: Can't replace route, no match found
[   86.960793][   T29] kauditd_printk_skb: 24 callbacks suppressed
[   86.960806][   T29] audit: type=1326 audit(1759313561.384:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6097 comm="syz.4.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f013796eec9 code=0x7ffc0000
[   86.961033][   T29] audit: type=1326 audit(1759313561.384:1257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6097 comm="syz.4.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f013796eec9 code=0x7ffc0000
[   87.073269][   T29] audit: type=1326 audit(1759313561.454:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6097 comm="syz.4.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f013796eec9 code=0x7ffc0000
[   87.073347][   T29] audit: type=1326 audit(1759313561.454:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6097 comm="syz.4.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f013796eec9 code=0x7ffc0000
[   87.073372][   T29] audit: type=1326 audit(1759313561.454:1260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6097 comm="syz.4.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f013796eec9 code=0x7ffc0000
[   87.088145][   T29] audit: type=1326 audit(1759313561.494:1261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6097 comm="syz.4.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7f013796eec9 code=0x7ffc0000
[   87.175069][   T29] audit: type=1326 audit(1759313561.524:1262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6097 comm="syz.4.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f013796eec9 code=0x7ffc0000
[   87.175124][   T29] audit: type=1326 audit(1759313561.524:1263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6097 comm="syz.4.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f013796eec9 code=0x7ffc0000
[   87.175158][   T29] audit: type=1326 audit(1759313561.524:1264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6097 comm="syz.4.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f013796eec9 code=0x7ffc0000
[   87.175191][   T29] audit: type=1326 audit(1759313561.524:1265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6097 comm="syz.4.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f013796eec9 code=0x7ffc0000
[   87.361288][ T6115] netlink: 'syz.1.988': attribute type 4 has an invalid length.
[   87.435065][ T6124] netlink: 108 bytes leftover after parsing attributes in process `syz.2.993'.
[   87.444145][ T6124] netlink: 20 bytes leftover after parsing attributes in process `syz.2.993'.
[   87.459184][ T6124] netlink: 7 bytes leftover after parsing attributes in process `syz.2.993'.
[   87.499652][ T6124] netlink: 7 bytes leftover after parsing attributes in process `syz.2.993'.
[   87.601245][ T6127] loop3: detected capacity change from 0 to 512
[   87.653714][ T6139] sctp: [Deprecated]: syz.4.998 (pid 6139) Use of int in maxseg socket option.
[   87.653714][ T6139] Use struct sctp_assoc_value instead
[   87.665562][ T6134] loop0: detected capacity change from 0 to 512
[   87.678347][ T6141] netlink: 'syz.2.1000': attribute type 4 has an invalid length.
[   87.733868][ T6127] EXT4-fs (loop3): too many log groups per flexible block group
[   87.776535][ T6134] EXT4-fs (loop0): too many log groups per flexible block group
[   87.785214][ T6127] EXT4-fs (loop3): failed to initialize mballoc (-12)
[   87.790584][ T6127] EXT4-fs (loop3): mount failed
[   87.801606][ T6134] EXT4-fs (loop0): failed to initialize mballoc (-12)
[   87.801937][ T6134] EXT4-fs (loop0): mount failed
[   88.125774][ T6164] loop0: detected capacity change from 0 to 8192
[   88.145822][ T3500]  loop0: p4 < >
[   88.150982][ T6164]  loop0: p4 < >
[   88.220388][ T3501] udevd[3501]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[   88.225461][ T3501] udevd[3501]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[   88.258975][ T6178] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1014'.
[   88.315238][ T6181] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1016'.
[   88.725617][ T6210] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1026'.
[   89.319440][ T6250] netlink: 'syz.2.1042': attribute type 4 has an invalid length.
[   89.520645][ T6258] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1045'.
[   89.783335][ T6278] netlink: 'syz.0.1053': attribute type 4 has an invalid length.
[   90.030227][ T6288] loop0: detected capacity change from 0 to 2048
[   90.118698][ T3501] Alternate GPT is invalid, using primary GPT.
[   90.125077][ T3501]  loop0: p2 p3 p7
[   90.234504][ T6288] Alternate GPT is invalid, using primary GPT.
[   90.240983][ T6288]  loop0: p2 p3 p7
[   90.261495][ T6308] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1066'.
[   90.302189][ T6313] netlink: 'syz.4.1067': attribute type 10 has an invalid length.
[   90.310855][ T6313] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1067'.
[   90.387924][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory
[   90.399217][ T3501] udevd[3501]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory
[   90.410867][ T3500] udevd[3500]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory
[   90.426486][ T6319] loop4: detected capacity change from 0 to 512
[   90.466382][ T6315] loop0: detected capacity change from 0 to 8192
[   90.475538][ T6319] EXT4-fs (loop4): too many log groups per flexible block group
[   90.483393][ T6319] EXT4-fs (loop4): failed to initialize mballoc (-12)
[   90.487188][ T3500] udevd[3500]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory
[   90.503198][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory
[   90.514657][ T6319] EXT4-fs (loop4): mount failed
[   90.537923][ T3501] udevd[3501]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory
[   90.554247][ T6315]  loop0: p4 < >
[   90.641102][ T3501] udevd[3501]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[   90.702693][ T3501] udevd[3501]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[   91.461535][ T6361] IPv6: Can't replace route, no match found
[   91.589060][ T6362] loop3: detected capacity change from 0 to 8192
[   91.655837][ T6368] loop0: detected capacity change from 0 to 512
[   91.683846][ T6368] EXT4-fs (loop0): too many log groups per flexible block group
[   91.702319][ T3501]  loop3: p4 < >
[   91.708414][ T6362]  loop3: p4 < >
[   91.762425][ T6368] EXT4-fs (loop0): failed to initialize mballoc (-12)
[   91.815081][ T6368] EXT4-fs (loop0): mount failed
[   91.938188][ T6378] loop0: detected capacity change from 0 to 512
[   91.941632][ T6344] syz.1.1079 (6344) used greatest stack depth: 7144 bytes left
[   91.989580][ T6378] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   92.055718][ T6378] ext4 filesystem being mounted at /222/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   92.108400][ T6378] EXT4-fs error (device loop0): ext4_get_first_dir_block:3529: inode #12: comm syz.0.1091: Directory hole found for htree leaf block 0
[   92.168720][ T6389] loop2: detected capacity change from 0 to 2048
[   92.196650][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   92.215051][   T29] kauditd_printk_skb: 26 callbacks suppressed
[   92.215065][   T29] audit: type=1400 audit(1759313566.644:1292): avc:  denied  { mount } for  pid=6386 comm="syz.1.1093" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   92.274903][ T6393] IPv6: Can't replace route, no match found
[   92.284598][ T6389] Alternate GPT is invalid, using primary GPT.
[   92.291033][ T6389]  loop2: p2 p3 p7
[   92.314653][   T29] audit: type=1400 audit(1759313566.734:1293): avc:  denied  { unmount } for  pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   92.395794][ T6389] blktrace: Concurrent blktraces are not allowed on loop2p2
[   92.439102][ T6406] dummy0: left allmulticast mode
[   92.444092][ T6406] dummy0: left promiscuous mode
[   92.449253][ T6406] bridge0: port 3(dummy0) entered disabled state
[   92.524172][ T6406] bridge_slave_1: left allmulticast mode
[   92.530051][ T6406] bridge_slave_1: left promiscuous mode
[   92.535839][ T6406] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.604829][   T29] audit: type=1326 audit(1759313567.024:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6418 comm="syz.1.1103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa39a29eec9 code=0x7ffc0000
[   92.684283][ T6406] bridge_slave_0: left allmulticast mode
[   92.690028][ T6406] bridge_slave_0: left promiscuous mode
[   92.695743][ T6406] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.726503][ T6417] loop0: detected capacity change from 0 to 1024
[   92.747203][ T6417] Quota error (device loop0): do_check_range: Getting block 64 out of range 1-5
[   92.756383][ T6417] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0
[   92.762590][   T29] audit: type=1326 audit(1759313567.054:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6418 comm="syz.1.1103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7fa39a29eec9 code=0x7ffc0000
[   92.765860][ T6417] EXT4-fs error (device loop0): ext4_acquire_dquot:6943: comm syz.0.1100: Failed to acquire dquot type 0
[   92.800596][   T29] audit: type=1326 audit(1759313567.054:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6418 comm="syz.1.1103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa39a29eec9 code=0x7ffc0000
[   92.823610][ T6417] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 13: 
[   92.823985][   T29] audit: type=1326 audit(1759313567.054:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6418 comm="syz.1.1103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa39a29eec9 code=0x7ffc0000
[   92.823964][ T6417] block 144:
[   92.832430][   T29] audit: type=1326 audit(1759313567.054:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6418 comm="syz.1.1103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7fa39a29eec9 code=0x7ffc0000
[   92.855859][ T6417] freeing already freed block (bit 9); block bitmap corrupt.
[   92.890147][   T29] audit: type=1326 audit(1759313567.054:1299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6418 comm="syz.1.1103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa39a29eec9 code=0x7ffc0000
[   92.954616][ T6417] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #13: comm syz.0.1100: corrupted inode contents
[   92.985599][ T6417] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #13: comm syz.0.1100: mark_inode_dirty error
[   93.058920][ T6417] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #13: comm syz.0.1100: corrupted inode contents
[   93.130622][ T6417] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #13: comm syz.0.1100: mark_inode_dirty error
[   93.214695][ T6417] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #13: comm syz.0.1100: corrupted inode contents
[   93.227943][ T6417] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem
[   93.262629][ T6417] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #13: comm syz.0.1100: corrupted inode contents
[   93.284857][ T6417] EXT4-fs error (device loop0): ext4_truncate:4666: inode #13: comm syz.0.1100: mark_inode_dirty error
[   93.314584][ T6417] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem
[   93.331981][ T6417] EXT4-fs (loop0): 1 truncate cleaned up
[   93.342065][ T6417] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   93.487549][ T6400] devtmpfs: Unknown parameter 'dirsyncâ'
[   93.505659][ T6400] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   93.543315][ T6444] loop4: detected capacity change from 0 to 8192
[   93.551489][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   93.584080][ T6450] pim6reg: entered allmulticast mode
[   93.734833][ T3500]  loop4: p4 < >
[   93.752554][ T6457] loop0: detected capacity change from 0 to 512
[   93.779423][ T6444]  loop4: p4 < >
[   93.817474][ T6457] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[   93.830537][ T6450] __nla_validate_parse: 2 callbacks suppressed
[   93.830554][ T6450] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1116'.
[   93.884827][ T6457] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002]
[   93.892840][ T6457] EXT4-fs (loop0): orphan cleanup on readonly fs
[   93.899284][ T6457] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.1119: bad orphan inode 267
[   93.967896][ T3501] udevd[3501]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[   94.004899][ T6457] EXT4-fs (loop0): Remounting filesystem read-only
[   94.011842][ T6457] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[   94.074020][ T6456] EXT4-fs warning (device loop0): dx_probe:861: inode #2: comm syz.0.1119: dx entry: limit 0 != root limit 125
[   94.085864][ T6456] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.1119: Corrupt directory, running e2fsck is recommended
[   94.156185][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[   94.202249][ T2990] ==================================================================
[   94.210388][ T2990] BUG: KCSAN: data-race in dont_mount / lookup_fast
[   94.217008][ T2990] 
[   94.219341][ T2990] read-write to 0xffff8881055da840 of 4 bytes by task 3501 on cpu 1:
[   94.227411][ T2990]  dont_mount+0x2a/0x40
[   94.231606][ T2990]  vfs_unlink+0x28f/0x420
[   94.235958][ T2990]  do_unlinkat+0x24e/0x480
[   94.240397][ T2990]  __x64_sys_unlink+0x2e/0x40
[   94.245102][ T2990]  x64_sys_call+0x2dcf/0x3000
[   94.249788][ T2990]  do_syscall_64+0xd2/0x200
[   94.254320][ T2990]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   94.256173][ T6470] 9pnet_fd: Insufficient options for proto=fd
[   94.260244][ T2990] 
[   94.260253][ T2990] read to 0xffff8881055da840 of 4 bytes by task 2990 on cpu 0:
[   94.260275][ T2990]  lookup_fast+0xf0/0x320
[   94.280553][ T2990]  walk_component+0x3f/0x220
[   94.285169][ T2990]  path_lookupat+0xfe/0x2a0
[   94.289687][ T2990]  filename_lookup+0x147/0x340
[   94.294463][ T2990]  do_readlinkat+0x7d/0x320
[   94.298982][ T2990]  __x64_sys_readlink+0x47/0x60
[   94.303847][ T2990]  x64_sys_call+0x28de/0x3000
[   94.308534][ T2990]  do_syscall_64+0xd2/0x200
[   94.313057][ T2990]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   94.318989][ T2990] 
[   94.321312][ T2990] value changed: 0x00300080 -> 0x00004080
[   94.327030][ T2990] 
[   94.329375][ T2990] Reported by Kernel Concurrency Sanitizer on:
[   94.335529][ T2990] CPU: 0 UID: 0 PID: 2990 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) 
[   94.344820][ T2990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   94.354892][ T2990] ==================================================================
[   94.379523][ T6470] loop0: detected capacity change from 0 to 2048
[   94.423718][ T6470] Alternate GPT is invalid, using primary GPT.
[   94.430203][ T6470]  loop0: p2 p3 p7
[   94.447810][ T6470] blktrace: Concurrent blktraces are not allowed on loop0p2
[   94.506079][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory
[   94.506145][ T3500] udevd[3500]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory
[   94.517751][ T3501] udevd[3501]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory
[   95.003229][ T6433] syz.2.1107 (6433) used greatest stack depth: 7096 bytes left