last executing test programs:

5.073481449s ago: executing program 2 (id=493):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0xd4, 0x0, 0x101, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'lo\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x5}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'netdevsim0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}]}, @IPVS_CMD_ATTR_DAEMON={0x60, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x16}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bridge\x00'}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x80}, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000"], 0x48)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@jqfmt_vfsv1}]}, 0xc1, 0x7da, &(0x7f0000000fc0)="$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")
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=<r1=>0x0)
timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="0d43091e23185efab09db3eb9f1ce3bbb628c90e2bd302758c6a742c6a0411fa2cb5075841fe72be758b5483ede68b3a817ca029fbe5231a2fb1b36152387c03a8ff098c71850c61eb056c8fd505063120a4e8036ffc64c601e7bd76c91fe9a99af98c54269e2de7acaa16d185de8c5632a08198454203d0", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="170d08c2925db236e1de576f08c6da8502a70521298a000b405947058a309a0b89162be866a16f3eaf89e62c586cf2c1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2}, 0x94)
gettid()
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000300)=0x2)
ioctl$PPPIOCSACTIVE(r3, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0})
read(r3, 0x0, 0x0)

4.152773674s ago: executing program 2 (id=504):
syz_io_uring_setup(0x10d, &(0x7f00000004c0)={0x0, 0x8b7c, 0x800, 0x7, 0x22}, &(0x7f0000000940)=<r0=>0x0, &(0x7f0000000280)=<r1=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r0, r1, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0})
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0)
finit_module(r2, 0x0, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRES16=r0, @ANYRES16=r1], 0x48)
socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1000401, &(0x7f0000000100)={[{@user_xattr}, {@data_err_ignore}, {@noblock_validity}]}, 0x84, 0x4ac, &(0x7f0000001bc0)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6002, &(0x7f0000000000)=0x3, 0xf, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = gettid()
timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
r4 = signalfd(0xffffffffffffffff, &(0x7f0000000140)={[0x3]}, 0x8)
read$msr(r4, &(0x7f0000000bc0)=""/4096, 0x1000)
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0)

3.82250402s ago: executing program 4 (id=509):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc53c06d2626cc3f0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18)
r2 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0<Q8\xbeX\xde\xd6 \xef\x0e\xc2.\x9c=1\x15d\xddIv\x0fh\xe6M(D\xad\xeb\xcfX8\xb9\x8d\xbe(\xd3\x16?x\xbd@\x0f\xf5\xdb\xeb\xd7i*\xea\x86JX\xff;\x96\xbb\xa7\xa8u5R\xa2,\xba\xbc\x01\x12\xb3q,\x9d\xf8\xbdb`\xb3\xc6\x0f\xb3\xac\xc7\xa4O@\x81\xfc\x1a4$\x885\x97\xa9|\x99\x86*.\xda\x96RQ\xe5\xb1\xef\xb7\x10\x99\xd4\xa7\b\xcd\xe9\xa5\xf6wR\xc1\xdfH).\a\x9a\xab\x9e&+\xc4#\x90\xc9%\xb9\xd7o\x86\x13\a\xc0\x01w9u6\xdd\x9fJ^o\x1d\xda\x11?\xc1\xf5\xf7\xff\xec\x916\xceQ\xcfU\x035\x96\x8f\xc7\x84\"2\xef\x02\xcf\a+\x8a\xd1\x11\xb5\xa8\x92\f\xb3R\",\xfc!_&pD\xeb5\xc6\xc8\xff2\xee\x14\x83\x14l\x04\x80\xaa7\x80\xf1\x18\xf5\xa5\xd23\xe5\b\x00\xe8\x9c\xd4\xd0\a\x93#\xb9Z\xc0y\x97<\xe5i\xe9\xe4\xb02Cu\xe1d\r\x0e\xc1\xf1\x81^\xa7\xffz)\x19U\xe5\xd4\xf5@O#W\x8a\xbb3c+\n\x97\xa6\xf7\x90$\xd6*\xd0\x1b\x10\xe4HM:XO\x1b\rx\xc7\x12|\x7fN\xc9\xf9i\xe4\xe5-\x9b\xe407\x9d\xe8\xc6\x90\x9f_Jf\x05\r\x1b\x9af\v\xbcv\x83\xf3j\xaf\xd0F91 ^x\x85\x80[\xa3B\n#!\xc2R\xdd\xf4)\xba\x1e\xfb6U\xabc\xda\x9a)\xc3\x9a\x06\xc5\xccP)\xdf.\xa7-\x84\xdf8\xbf\xfc1^}B\xee\xccR/z\x1e\xe8\x1e\x99\x99\n\xf4u\xd4\xbd^L\xb2j\xda\xff\x1d\x10\xc8\xad\xbd_OI\xb1\xe8y\x003\a\x06\x92\x8e\n\x8b\xf3\xd4G\x85\xbd\x1a\x81+3\x99jq\xd1\xacK^\xef\xb6!8\xcd?\x1e\\\x16W2\xbd4$zn\xa9\x7f\x9dE\xaf\x0f\xdb\xe0\xfa\x10\xc3\xb2\xf8\x80\x8c\xec$\xda\xc0\x94y1\t\xc5`\xda\xca\xd1\xab:\x18\x10\x9b\xd0w', 0x0)
execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xfff3}}}, 0x24}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
socket$key(0xf, 0x3, 0x2)
socket$nl_xfrm(0x10, 0x3, 0x6)

3.802042783s ago: executing program 4 (id=510):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r3}, &(0x7f0000001c00), &(0x7f0000001c40)=r4}, 0x20)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0xc4140, 0x0)
unshare(0x64000600)

3.506048427s ago: executing program 1 (id=513):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10)
r3 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$VT_DISALLOCATE(r3, 0x5608)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, r5, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x0]}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x34}}, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0)
syz_open_procfs(0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0, @generic={0x65}, @initr0, @exit, @alu={0x4, 0x0, 0x6, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)

3.46040404s ago: executing program 0 (id=514):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x2000c16, &(0x7f0000000040)={[{@nobh}, {@usrjquota}]}, 0xff, 0x240, &(0x7f00000002c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x181242, 0x0)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1)
r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x905f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa19a, 0x1000}, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8040, 0x0)
r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x20c000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r3, {r2}}, './file0\x00'})
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x1, 0x0, 0x80, "ff00f7000000000000000000af88008300"})
r5 = inotify_init1(0x0)
inotify_add_watch(r5, &(0x7f0000000140)='.\x00', 0x40000022)
r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0)
fcntl$notify(r6, 0x402, 0x1e)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
r7 = syz_open_pts(r3, 0x141601)
r8 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
write(r7, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TCSETSF(r7, 0x5404, &(0x7f0000000080)={0x8, 0x20000000, 0xfffffffc, 0x7, 0x5, "682341f2fd71a6a76177920ea7e60c1acfa4a5"})

3.134022586s ago: executing program 2 (id=515):
move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x76)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0), 0x64, 0x50a, &(0x7f0000000940)="$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")
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2)
r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_ext={0x1c, 0x1f, &(0x7f00000004c0)=ANY=[@ANYBLOB="180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f330000085000000060000004a1406000800000018160000", @ANYBLOB="000010080500000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000ffffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000185000000d000000000000000000000085100000020000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000030000008500000006000000"], &(0x7f0000000040)='syzkaller\x00', 0x1, 0xb1, &(0x7f00000005c0)=""/177, 0x41000, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x373, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2f}, 0x94)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f0000000180)={'ip_vti0\x00', <r5=>0x0, 0x700, 0x20, 0x8, 0x9, {{0x5, 0x4, 0x2, 0x27, 0x14, 0x66, 0x0, 0x2, 0x4, 0x0, @multicast1, @broadcast}}}})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r5, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10)
r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r6, 0x6, 0x0, 0x0, 0x0)
r7 = fsmount(r6, 0x0, 0x0)
r8 = openat$cgroup_subtree(r7, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_subtree(r8, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5)

2.863572069s ago: executing program 4 (id=516):
bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0xe3b9}, 0x18)
add_key(0x0, 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630b00c145f94cd977", 0x18, 0xffffffffffffffff)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x18)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000008140)={0x11, 0xd, &(0x7f0000000240)=ANY=[], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
umount2(&(0x7f0000000580)='./file0\x00', 0x3)
syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000280)='./file0\x00', 0xfb2514f08c55c983, 0x0, 0x0, 0x0, &(0x7f0000000380))

2.621262308s ago: executing program 3 (id=517):
r0 = gettid()
prctl$PR_SET_KEEPCAPS(0x8, 0xfdfffffffffffffb)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)=<r1=>0x0)
r2 = socket(0x10, 0x803, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000004}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x4c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x8}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1cc05}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x3}]}}]}, 0x4c}}, 0x400c084)
bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[], 0x50)
r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r7}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
madvise(&(0x7f00005ee000/0x2000)=nil, 0x2000, 0x64)
unshare(0x6060600)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
timer_settime(0x0, 0x0, &(0x7f0000000880)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfd, 0x0, 0x7ffc9ffb}]})
getrandom(0x0, 0x0, 0x0)
timer_getoverrun(r1)

2.583516991s ago: executing program 1 (id=518):
bind$pptp(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x2, {0x0, @empty}}, 0x1e)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x22000011, &(0x7f0000000000)={[{@commit}, {@noblock_validity}, {@user_xattr}]}, 0x86, 0x48e, &(0x7f0000000400)="$eJzs3EtvVFUcAPD/nXaKFUoLPnkoo0hsRFtaUFmYGI0mbExMdKHLWipBChioiRAiaAwujZ9AXZr4CVzpxqgrjVvdGxNi2IguzJj7KlM6rdPpTKcyv18y7Tn3dc7/nnt6H+dOA+hbtfRHErEtIn6JiNE8u3SBWv7rxvVLs39dvzSbRL3+yh9Jttyf1y/NlotuK35vLbY5XomofJjEniblnr9w8dTM/PzcuSI/uXD67cnzFy4+cfL0zIm5E3Nnpo8ePXJ46umnpp/sSJwjaV13v3d2765jr3/y0mw93vj+y7T+A8X8xjhyY+susxa1GI56vbJk6lD288C6t765jDSkk8EeVoQ1SY//tLmqWf8fjYG42Xij8eIHPa0c0FX1er2+Y9nU/KxYOZBk84HblT4O/ao846f3v+VnY69Aeuvac/kNUBr3jeKTzxmM9L49Gcvv2Ae6VP62iHjtyt+fpp9o+hwCAKCzvk6vfx5vdv1XiXsblttejA2NRcTBiNgZEXdFxN0RcU9Etux9EXH/Gsuv3ZLPy682TPlpuN3YWpFe/z1TjG0tvf5bHLUZGyhyI1n81eTNk/Nzh4p9Mh7VLWl+apUyvnnh54+zRJNIag3Xf+knLb+8Fizq8fvglqXrHJ9ZmFlv3KVr70fsHny2SfzJ4khAEhG7ImJ3G9tP99nJx77Ym6a3b10+/7/jX0UHxpnqn0c8mrf/lbgl/lKSl7TS+OTkHTE/d2iyPCqW++HHqy835huP7loWRpvxd0Da/nc2Pf6L+MtuUI7Xnl97GVd//WjFe5p2j/+h5NUsPVRMe3dmYeHcVMRQMWHJ9Omb65b5cvk0/vH9zfv/zoh/PivW2xMR6UH8QEQ8GBH7iro/FBEPR8T+VeL/7vlH3lp9D/W2/Y+v1v4RY0kRf+rc4sB964mBU99+tVL5rbX/kSw1Xkxp5e9fqxVsd78BAADA/0klG4NOKhOL6UplYiJ/h7987HKwFu+cOZ6PVY9FtVI+6RpteB46VTwbLvPTt+QPR8SO7E2j4Sw/MXt2fqTHsUO/27pC/0/91q2XXoDNY03jaEn36gFsPN/XhP7VvP939b0rYJNw/of+pf9D/2rW/y9H3OhBVYAN5vwP/av1/u+NALjdOP9D/9L/oS8t/0r8cPGvE9r5pv/NxM5j61p9rYnqBpbV4cRAl7Ycjf+0owuJqPR817WfqGyGauwrElsiotW1Lje0aXna7kYNq/M9/KMEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQQf8GAAD//4F+194=")
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x18)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_opts(r1, 0x0, 0xc, 0x0, 0x0)
setsockopt$inet_opts(r1, 0x0, 0x8, 0x0, 0x0)
getsockopt$inet_opts(r1, 0x0, 0x9, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x66)
perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_clone(0x280200, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0)
creat(0x0, 0xecf86c37d53049cc)
pipe2$9p(&(0x7f0000000240)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x30, r6, 0xc4fc9e906872338b, 0x70bd2a, 0x0, {{0x15}, {@void, @val={0xc, 0x99, {0xc7, 0x3a}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4, 0x3, 0x0, 0x0}]}]}]}]}, 0x30}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
mount$9p_fd(0x0, 0x0, &(0x7f0000000300), 0x80, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_uid}]}})
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48)

2.272289736s ago: executing program 0 (id=519):
creat(0x0, 0xd931d3864d39dcca)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b000000000000000000000000000400000000001cd7e027beae10b39f70670f89e2d44c1bdb7a8aa42c3466b96e2b0738cf99fefbca5b2e6779e9154ff60e5df03f00919f6dc370b4c08da19c38e4e49f5d6ba8bc052499dcfeb38d5e50", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
listen(r2, 0x1)
r3 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r3, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0}, 0x0)
accept4(r2, 0x0, 0x0, 0x400000000000000)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
lsm_get_self_attr(0x66, 0x0, &(0x7f0000000640), 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
time(&(0x7f0000000180))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000d8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
flock(r5, 0x5)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)

2.235801909s ago: executing program 3 (id=520):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x100, 0x45, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r0}, 0x18)
bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {0x0}, &(0x7f0000000340)=[{&(0x7f0000001140)=""/102, 0x66}], 0x1, 0x60, 0xfffffffefffffffe}}], 0x48, 0x8004}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000400)=@generic={&(0x7f00000001c0)='./file0\x00'}, 0x18)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00')
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f0000000340)={[{@minixdf}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@stripe}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}]}, 0x3, 0x451, &(0x7f0000000f80)="$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")
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r1}, &(0x7f00000002c0), &(0x7f0000000500)='%pK    \x00'}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xc2c})

2.10589739s ago: executing program 1 (id=523):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]})
openat(0xffffffffffffff9c, 0x0, 0x103a42, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
mlockall(0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000005000000e27f00000100000000000000", @ANYRES32, @ANYBLOB="00000000000000000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x800000, &(0x7f0000006680))
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0)
ptrace(0x10, r1)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xf, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3}, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000007c0)=0xfffffffffffffccd)
sendmsg$nl_route_sched(r4, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)=@newtaction={0x1b8, 0x30, 0x300, 0x80000000, 0xfffffffe, {0x0, 0x0, 0x6a00}, [{0x1a4, 0x1, [@m_mirred={0x148, 0x1, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x6}, 0x2, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x6, 0x3, 0x7, 0x6}, 0x4, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7f, 0x200, 0x1, 0x57b, 0x9}, 0x1, r5}}]}, {0xbb, 0xa, "f6388c92747e56686d9521cae3d6f6b724f90431f67813e55ce9ff193e608d5a4f14b1f726910cad1f4a2a344c1051581b9a78fcc1ee7786f10d9a93acd79b375f9e78a13b676db3223d75e71245a2b396b7743e524c25dc222eb010f268c2c371c4676ac1e8514dc4bcdca4d8a272139a16945e29d80daafa3a4bbd64edd6fbf95af46d665735986563cf877796f8799687e401914bd3747b09e208bbf446a7bc128735ced6a6d7bf07272a71207426fdb9b6e314cdd2"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_skbmod={0x58, 0x10, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @local}]}, {0x1d, 0x6, "85f5c5d9b77e55376753adac7dbdd17dff83b2ea9bbaca08b5"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x1b8}}, 0x0)
tkill(r1, 0x2e)
ptrace$peeksig(0x4209, r1, &(0x7f0000000340)={0x0, 0x0, 0x2e}, 0x0)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCSETA(r6, 0x560a, &(0x7f0000001040)={0x0, 0x3, 0x4, 0x20, 0x0, "0000e5ff0100"})

2.064996923s ago: executing program 0 (id=525):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc53c06d2626cc3f0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18)
r2 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0<Q8\xbeX\xde\xd6 \xef\x0e\xc2.\x9c=1\x15d\xddIv\x0fh\xe6M(D\xad\xeb\xcfX8\xb9\x8d\xbe(\xd3\x16?x\xbd@\x0f\xf5\xdb\xeb\xd7i*\xea\x86JX\xff;\x96\xbb\xa7\xa8u5R\xa2,\xba\xbc\x01\x12\xb3q,\x9d\xf8\xbdb`\xb3\xc6\x0f\xb3\xac\xc7\xa4O@\x81\xfc\x1a4$\x885\x97\xa9|\x99\x86*.\xda\x96RQ\xe5\xb1\xef\xb7\x10\x99\xd4\xa7\b\xcd\xe9\xa5\xf6wR\xc1\xdfH).\a\x9a\xab\x9e&+\xc4#\x90\xc9%\xb9\xd7o\x86\x13\a\xc0\x01w9u6\xdd\x9fJ^o\x1d\xda\x11?\xc1\xf5\xf7\xff\xec\x916\xceQ\xcfU\x035\x96\x8f\xc7\x84\"2\xef\x02\xcf\a+\x8a\xd1\x11\xb5\xa8\x92\f\xb3R\",\xfc!_&pD\xeb5\xc6\xc8\xff2\xee\x14\x83\x14l\x04\x80\xaa7\x80\xf1\x18\xf5\xa5\xd23\xe5\b\x00\xe8\x9c\xd4\xd0\a\x93#\xb9Z\xc0y\x97<\xe5i\xe9\xe4\xb02Cu\xe1d\r\x0e\xc1\xf1\x81^\xa7\xffz)\x19U\xe5\xd4\xf5@O#W\x8a\xbb3c+\n\x97\xa6\xf7\x90$\xd6*\xd0\x1b\x10\xe4HM:XO\x1b\rx\xc7\x12|\x7fN\xc9\xf9i\xe4\xe5-\x9b\xe407\x9d\xe8\xc6\x90\x9f_Jf\x05\r\x1b\x9af\v\xbcv\x83\xf3j\xaf\xd0F91 ^x\x85\x80[\xa3B\n#!\xc2R\xdd\xf4)\xba\x1e\xfb6U\xabc\xda\x9a)\xc3\x9a\x06\xc5\xccP)\xdf.\xa7-\x84\xdf8\xbf\xfc1^}B\xee\xccR/z\x1e\xe8\x1e\x99\x99\n\xf4u\xd4\xbd^L\xb2j\xda\xff\x1d\x10\xc8\xad\xbd_OI\xb1\xe8y\x003\a\x06\x92\x8e\n\x8b\xf3\xd4G\x85\xbd\x1a\x81+3\x99jq\xd1\xacK^\xef\xb6!8\xcd?\x1e\\\x16W2\xbd4$zn\xa9\x7f\x9dE\xaf\x0f\xdb\xe0\xfa\x10\xc3\xb2\xf8\x80\x8c\xec$\xda\xc0\x94y1\t\xc5`\xda\xca\xd1\xab:\x18\x10\x9b\xd0w', 0x0)
execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@loopback, {0x0, 0x0, 0x2}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x71}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
socket$key(0xf, 0x3, 0x2)
socket$nl_xfrm(0x10, 0x3, 0x6)

1.919956665s ago: executing program 0 (id=526):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
io_uring_setup(0x4663, 0x0)
setxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000280), 0x0, 0x0, 0x2)
kexec_load(0x0, 0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x41000000}], 0x0)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/kexec_crash_size', 0x202, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[], 0x48)
r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4, 0x0, 0x80010000}, 0x18)
gettid()
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1}, './file0\x00'})
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
read(r5, &(0x7f0000000200)=""/209, 0xd1)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_ADD(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x40, r3, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x40}}, 0x0)

1.893999037s ago: executing program 2 (id=527):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a0000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000"], 0x0, 0xfff, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
syz_open_dev$usbfs(&(0x7f0000000280), 0x4, 0x1135c1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffa, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x1}, 0x50)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vxcan1\x00', <r1=>0x0})
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000030000000d00000000842d00000001000000522803ea5a9ff3c33d635c30338a"], &(0x7f0000000400)=""/19, 0x33, 0x13, 0x40000000, 0x8, 0x10000}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="21000000c61d0000ffffffff0a00000000540000", @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="00000000050000000100"/28], 0x50)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="200000000c1431002dbd7000fbdbdf25080001000000000008003d00"], 0x20}, 0x1, 0x0, 0x0, 0x4004400}, 0x0)
r3 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$int_in(r4, 0x5452, &(0x7f0000b28000)=0x20003)
fcntl$setsig(r4, 0xa, 0x12)
poll(&(0x7f0000b2c000)=[{r5}], 0x2c, 0xffffffffffbffff8)
futex(&(0x7f00000006c0)=0x2, 0x0, 0x2, 0x0, 0x0, 0x80000002)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100))
tkill(0x0, 0x16)
dup2(r4, r5)
fcntl$setown(r4, 0x8, r3)
tkill(r3, 0x13)

1.884063128s ago: executing program 4 (id=537):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc53c06d2626cc3f0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18)
memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0<Q8\xbeX\xde\xd6 \xef\x0e\xc2.\x9c=1\x15d\xddIv\x0fh\xe6M(D\xad\xeb\xcfX8\xb9\x8d\xbe(\xd3\x16?x\xbd@\x0f\xf5\xdb\xeb\xd7i*\xea\x86JX\xff;\x96\xbb\xa7\xa8u5R\xa2,\xba\xbc\x01\x12\xb3q,\x9d\xf8\xbdb`\xb3\xc6\x0f\xb3\xac\xc7\xa4O@\x81\xfc\x1a4$\x885\x97\xa9|\x99\x86*.\xda\x96RQ\xe5\xb1\xef\xb7\x10\x99\xd4\xa7\b\xcd\xe9\xa5\xf6wR\xc1\xdfH).\a\x9a\xab\x9e&+\xc4#\x90\xc9%\xb9\xd7o\x86\x13\a\xc0\x01w9u6\xdd\x9fJ^o\x1d\xda\x11?\xc1\xf5\xf7\xff\xec\x916\xceQ\xcfU\x035\x96\x8f\xc7\x84\"2\xef\x02\xcf\a+\x8a\xd1\x11\xb5\xa8\x92\f\xb3R\",\xfc!_&pD\xeb5\xc6\xc8\xff2\xee\x14\x83\x14l\x04\x80\xaa7\x80\xf1\x18\xf5\xa5\xd23\xe5\b\x00\xe8\x9c\xd4\xd0\a\x93#\xb9Z\xc0y\x97<\xe5i\xe9\xe4\xb02Cu\xe1d\r\x0e\xc1\xf1\x81^\xa7\xffz)\x19U\xe5\xd4\xf5@O#W\x8a\xbb3c+\n\x97\xa6\xf7\x90$\xd6*\xd0\x1b\x10\xe4HM:XO\x1b\rx\xc7\x12|\x7fN\xc9\xf9i\xe4\xe5-\x9b\xe407\x9d\xe8\xc6\x90\x9f_Jf\x05\r\x1b\x9af\v\xbcv\x83\xf3j\xaf\xd0F91 ^x\x85\x80[\xa3B\n#!\xc2R\xdd\xf4)\xba\x1e\xfb6U\xabc\xda\x9a)\xc3\x9a\x06\xc5\xccP)\xdf.\xa7-\x84\xdf8\xbf\xfc1^}B\xee\xccR/z\x1e\xe8\x1e\x99\x99\n\xf4u\xd4\xbd^L\xb2j\xda\xff\x1d\x10\xc8\xad\xbd_OI\xb1\xe8y\x003\a\x06\x92\x8e\n\x8b\xf3\xd4G\x85\xbd\x1a\x81+3\x99jq\xd1\xacK^\xef\xb6!8\xcd?\x1e\\\x16W2\xbd4$zn\xa9\x7f\x9dE\xaf\x0f\xdb\xe0\xfa\x10\xc3\xb2\xf8\x80\x8c\xec$\xda\xc0\x94y1\t\xc5`\xda\xca\xd1\xab:\x18\x10\x9b\xd0w', 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xfff3}}}, 0x24}}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@loopback, {0x0, 0x0, 0x2}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x71}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
socket$key(0xf, 0x3, 0x2)
socket$nl_xfrm(0x10, 0x3, 0x6)

1.812717523s ago: executing program 3 (id=528):
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x3, @multicast, 'lo\x00'}}, 0x1e)
ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001f00))
recvmmsg(r0, &(0x7f0000006640)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x102, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000800)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x23, 0x9, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe10800000000000000b22d0000b420a9c81f2c1b020000000000000000002ff57f2c39cc18b800000000000000000200", "83b0d50000000500", [0x4, 0x40000000000000]}})
r2 = syz_open_dev$loop(&(0x7f00000001c0), 0x5, 0x88000)
r3 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_DEL_MIF(r3, 0x29, 0xcb, 0x0, 0x0)
futex(0x0, 0x84, 0x0, 0x0, 0x0, 0x0)
ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001280)={r1, 0x0, {0x2a12, 0x80010000, 0x0, 0x2, 0x4, 0x0, 0x0, 0x3, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca73d64c6a4b4e00e9603dda1af1ea84000000000000000deff00000000020014a2648f6f4fd0e4000100", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x800]}})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000780)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
geteuid()
r4 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
msync(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1)
r5 = socket$netlink(0x10, 0x3, 0x0)
writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)

1.802559044s ago: executing program 4 (id=529):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r3}, &(0x7f0000001c00), &(0x7f0000001c40)=r4}, 0x20)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0xc4140, 0x0)
unshare(0x64000600)

1.696285943s ago: executing program 3 (id=530):
bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
rt_sigprocmask(0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x10, 0x0, 0x0, 0x7, 0x8, 0x20005, 0x2, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[@ANYRESOCT=r0], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x4e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9576}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={r1, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001f000c0cae0e4000632177fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x5c, 0xc0, &(0x7f0000000000), &(0x7f0000002c80)="8dc92a8ff39080a675b6565efa3ed46f2a2756e43abbfd8c44686c04d6a0c42f2599fc2b73f432c834dac249597b646035045af99decf86f5b32dc0404e599f56091e15e581ff6805ee283c0313298a5b8ba1c84f1850c217b5a2c2bc547eaf4585e5ba878d1660fa871a275fb61d1fec75942919083919f8d8fdad79615bc5d2d3fa40e054d38d49dfbebc2f137fc7110"}, 0x48)
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2800f38c", @ANYRES16=0x0, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x20008080}, 0x814)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
ustat(0x3, &(0x7f0000000000))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setown(r2, 0x8, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="be75155e628be22536f518d88a256829766b7cb40c86211dc663ad1dbc970d9d4135502b9f2269a8a830ef4f37d8334caf7625a2acb1339cf5a850e267f741599a727d4fee6c6e7571b5f36942536751cb1b9b602dceea9f31013e68c039fca5aa9db5f464f087b6431c038e2d405892647ed0c8439b8bf68b1efe65bef61ff1a287b9b08e36c7bb5bde7527d208a8e9268e2fb441f5cde19291cca0df588ffd7a0d7d9e54eba9c9b6298b8ebc9e71c54b4b5872e59ddcd7933a4b336c4c241ab7afb1d8e0a90b8b80526093e8701024d5ec27656bb6561f4e09de7a", @ANYRES64=r3, @ANYRESHEX=r2], &(0x7f0000000200)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
pipe2$9p(0x0, 0x4000)
socket$inet_smc(0x2b, 0x1, 0x0)
sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001400010600000200000000002b"], 0x14}}, 0x810)
r4 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40)
setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c)
r5 = socket$netlink(0x10, 0x3, 0x0)
writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17", 0x2b}], 0x1)

1.024411137s ago: executing program 2 (id=531):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}}, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
socket$inet6(0xa, 0x1, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r5 = msgget$private(0x0, 0x0)
msgsnd(r5, &(0x7f0000000480)=ANY=[@ANYRESDEC], 0x2000, 0x0)
msgrcv(r5, &(0x7f0000001080), 0x8, 0x2, 0x3000)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYRES8, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYRESHEX=r5, @ANYRESHEX=r3, @ANYRES8, @ANYBLOB="17bb6dfe9401c1f8d59331f959c85b7bce86"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000002c0)={'bridge0\x00', <r9=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000008c0)=@newlink={0x5c, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_MACSEC_REPLAY_PROTECT={0x5, 0xc, 0xb}, @IFLA_MACSEC_PROTECT={0xfffffffffffffe52, 0x8, 0x4}, @IFLA_MACSEC_ES={0x5, 0xa, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2004d888}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r7, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r10 = socket$inet6(0xa, 0x3, 0x3c)
setsockopt$inet6_IPV6_RTHDR(r10, 0x29, 0x39, &(0x7f0000000340)=ANY=[@ANYBLOB="00020201"], 0x18)
connect$inet6(r10, &(0x7f0000000380)={0xa, 0x0, 0xf7ffffff, @private2={0xfc, 0x2, '\x00', 0x2}}, 0x1c)
writev(r10, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1)

1.023291518s ago: executing program 1 (id=542):
creat(0x0, 0xd931d3864d39dcca)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b000000000000000000000000000400000000001cd7e027beae10b39f70670f89e2d44c1bdb7a8aa42c3466b96e2b0738cf99fefbca5b2e6779e9154ff60e5df03f00919f6dc370b4c08da19c38e4e49f5d6ba8bc052499dcfeb38d5e50", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
listen(r2, 0x1)
r3 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r3, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0}, 0x0)
accept4(r2, 0x0, 0x0, 0x400000000000000)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
lsm_get_self_attr(0x66, 0x0, &(0x7f0000000640), 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
time(&(0x7f0000000180))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000d8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
flock(r5, 0x5)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)

1.022681298s ago: executing program 3 (id=543):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x101800, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='sched_switch\x00', r0, 0x0, 0xa}, 0x18)
r1 = gettid()
timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
pipe(&(0x7f00000008c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
splice(r2, 0x0, r4, 0x0, 0x7, 0x9)
write$P9_RWRITE(r4, &(0x7f0000000040)={0xb, 0x77, 0x87}, 0x10c00)
read(r3, &(0x7f0000032440)=""/102364, 0x18fdc)
open(&(0x7f00000002c0)='./file0\x00', 0x2a4c0, 0x0)
syz_io_uring_setup(0x1e1e, 0x0, &(0x7f0000002000), &(0x7f0000000440))
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x0)

928.043805ms ago: executing program 0 (id=532):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10)
r3 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$VT_DISALLOCATE(r3, 0x5608)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, r5, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x0]}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x34}}, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0)
syz_open_procfs(0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0, @generic={0x65}, @initr0, @exit, @alu={0x4, 0x0, 0x6, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)

893.783468ms ago: executing program 4 (id=533):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x2000c16, &(0x7f0000000040)={[{@nobh}, {@usrjquota}]}, 0xff, 0x240, &(0x7f00000002c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x181242, 0x0)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1)
r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x905f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa19a, 0x1000}, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8040, 0x0)
r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x20c000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r3, {r2}}, './file0\x00'})
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x1, 0x0, 0x80, "ff00f7000000000000000000af88008300"})
r5 = inotify_init1(0x0)
inotify_add_watch(r5, &(0x7f0000000140)='.\x00', 0x40000022)
r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0)
fcntl$notify(r6, 0x402, 0x1e)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
r7 = syz_open_pts(r3, 0x141601)
r8 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
write(r7, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TCSETSF(r7, 0x5404, &(0x7f0000000080)={0x8, 0x20000000, 0xfffffffc, 0x7, 0x5, "682341f2fd71a6a76177920ea7e60c1acfa4a5"})

893.111008ms ago: executing program 1 (id=546):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r3}, &(0x7f0000001c00), &(0x7f0000001c40)=r4}, 0x20)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0xc4140, 0x0)
unshare(0x64000600)

127.28774ms ago: executing program 2 (id=534):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc53c06d2626cc3f0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18)
r2 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0<Q8\xbeX\xde\xd6 \xef\x0e\xc2.\x9c=1\x15d\xddIv\x0fh\xe6M(D\xad\xeb\xcfX8\xb9\x8d\xbe(\xd3\x16?x\xbd@\x0f\xf5\xdb\xeb\xd7i*\xea\x86JX\xff;\x96\xbb\xa7\xa8u5R\xa2,\xba\xbc\x01\x12\xb3q,\x9d\xf8\xbdb`\xb3\xc6\x0f\xb3\xac\xc7\xa4O@\x81\xfc\x1a4$\x885\x97\xa9|\x99\x86*.\xda\x96RQ\xe5\xb1\xef\xb7\x10\x99\xd4\xa7\b\xcd\xe9\xa5\xf6wR\xc1\xdfH).\a\x9a\xab\x9e&+\xc4#\x90\xc9%\xb9\xd7o\x86\x13\a\xc0\x01w9u6\xdd\x9fJ^o\x1d\xda\x11?\xc1\xf5\xf7\xff\xec\x916\xceQ\xcfU\x035\x96\x8f\xc7\x84\"2\xef\x02\xcf\a+\x8a\xd1\x11\xb5\xa8\x92\f\xb3R\",\xfc!_&pD\xeb5\xc6\xc8\xff2\xee\x14\x83\x14l\x04\x80\xaa7\x80\xf1\x18\xf5\xa5\xd23\xe5\b\x00\xe8\x9c\xd4\xd0\a\x93#\xb9Z\xc0y\x97<\xe5i\xe9\xe4\xb02Cu\xe1d\r\x0e\xc1\xf1\x81^\xa7\xffz)\x19U\xe5\xd4\xf5@O#W\x8a\xbb3c+\n\x97\xa6\xf7\x90$\xd6*\xd0\x1b\x10\xe4HM:XO\x1b\rx\xc7\x12|\x7fN\xc9\xf9i\xe4\xe5-\x9b\xe407\x9d\xe8\xc6\x90\x9f_Jf\x05\r\x1b\x9af\v\xbcv\x83\xf3j\xaf\xd0F91 ^x\x85\x80[\xa3B\n#!\xc2R\xdd\xf4)\xba\x1e\xfb6U\xabc\xda\x9a)\xc3\x9a\x06\xc5\xccP)\xdf.\xa7-\x84\xdf8\xbf\xfc1^}B\xee\xccR/z\x1e\xe8\x1e\x99\x99\n\xf4u\xd4\xbd^L\xb2j\xda\xff\x1d\x10\xc8\xad\xbd_OI\xb1\xe8y\x003\a\x06\x92\x8e\n\x8b\xf3\xd4G\x85\xbd\x1a\x81+3\x99jq\xd1\xacK^\xef\xb6!8\xcd?\x1e\\\x16W2\xbd4$zn\xa9\x7f\x9dE\xaf\x0f\xdb\xe0\xfa\x10\xc3\xb2\xf8\x80\x8c\xec$\xda\xc0\x94y1\t\xc5`\xda\xca\xd1\xab:\x18\x10\x9b\xd0w', 0x0)
execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xfff3}}}, 0x24}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000880))
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
socket$key(0xf, 0x3, 0x2)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0)

111.231942ms ago: executing program 3 (id=535):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, <r1=>0xffffffffffffffff}, 0x4)
r2 = syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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")
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0)
write(r4, &(0x7f0000004200)='t', 0x1)
sendfile(r4, r3, 0x0, 0x3ffff)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0x1ff}}, './file0\x00'})
r5 = socket$inet(0x2, 0x3, 0x8d)
setsockopt$inet_msfilter(r5, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x1)
getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000200)={<r6=>0x0, @local, @local}, &(0x7f0000000040)=0xc)
r7 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x73, r6})
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
connect$phonet_pipe(r3, &(0x7f0000000800)={0x23, 0x17, 0x2, 0x27}, 0x10)
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
syz_emit_ethernet(0x13b, &(0x7f0000000940)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x105, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, [{0x0, 0x0, '\x00\x00'}, {}, {0x0, 0x19, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a14"}, {}, {0x21}, {0x0, 0x4, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02"}]}}}}}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x8, &(0x7f0000000080)=@raw=[@cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffe}, @map_val={0x18, 0x7, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x2}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x2}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0xb8}], 0x0, 0x1, 0xa4, &(0x7f0000000200)=""/164, 0x41000, 0x0, '\x00', r6, 0x0, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94)
sendfile(r4, r3, 0x0, 0x7ffff000)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r8}, 0x10)

969.79µs ago: executing program 0 (id=536):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r0, 0x0, 0x2000000005}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x4, &(0x7f0000000080)=[{0x200000000006, 0xff, 0x0, 0x9}, {0x0, 0x1, 0x9, 0x8}, {0xf3ba, 0x2, 0x9, 0x3}, {0xffff, 0xff, 0x6, 0x86d}]})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10)
r3 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10)
unshare(0x44040000)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r4}, &(0x7f0000000800), &(0x7f0000000840)=r5}, 0x20)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000940)=@o_path={&(0x7f0000000900)='./file0\x00', 0x0, 0x4008}, 0x18)
mkdir(&(0x7f0000000140)='./control\x00', 0x5)
close(r3)
r6 = inotify_init1(0x800)
fcntl$setstatus(r3, 0x4, 0x2c00)
r7 = gettid()
fcntl$setown(r3, 0x8, r7)
inotify_add_watch(r6, &(0x7f0000000180)='./control\x00', 0xa4000960)
rmdir(&(0x7f0000000100)='./control\x00')

0s ago: executing program 1 (id=538):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0xd4, 0x0, 0x101, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'lo\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x5}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'netdevsim0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}]}, @IPVS_CMD_ATTR_DAEMON={0x60, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x16}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bridge\x00'}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x80}, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000"], 0x48)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@jqfmt_vfsv1}]}, 0xc1, 0x7da, &(0x7f0000000fc0)="$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")
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=<r1=>0x0)
timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="0d43091e23185efab09db3eb9f1ce3bbb628c90e2bd302758c6a742c6a0411fa2cb5075841fe72be758b5483ede68b3a817ca029fbe5231a2fb1b36152387c03a8ff098c71850c61eb056c8fd505063120a4e8036ffc64c601e7bd76c91fe9a99af98c54269e2de7acaa16d185de8c5632a08198454203d0", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="170d08c2925db236e1de576f08c6da8502a70521298a000b405947058a309a0b89162be866a16f3eaf89e62c586cf2c1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2}, 0x94)
gettid()
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000300)=0x2)
ioctl$PPPIOCSACTIVE(r3, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0})
read(r3, 0x0, 0x0)

kernel console output (not intermixed with test programs):

r" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f0bdbade9a9 code=0x7ffc0000
[   41.153614][   T29] audit: type=1326 audit(1753922200.611:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3779 comm="syz.1.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bdbade9a9 code=0x7ffc0000
[   41.269099][ T3805] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3805 comm=syz.1.69
[   41.320555][ T3802] EXT4-fs (loop4): failed to initialize system zone (-117)
[   41.340279][ T3802] EXT4-fs (loop4): mount failed
[   41.494846][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.536825][   T29] audit: type=1400 audit(1753922200.701:868): avc:  denied  { name_bind } for  pid=3804 comm="syz.1.69" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[   41.560159][   T29] audit: type=1400 audit(1753922200.701:869): avc:  denied  { node_bind } for  pid=3804 comm="syz.1.69" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[   41.581181][   T29] audit: type=1400 audit(1753922200.761:870): avc:  denied  { mount } for  pid=3791 comm="syz.3.66" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   41.603952][   T29] audit: type=1400 audit(1753922201.131:871): avc:  denied  { create } for  pid=3758 comm="syz.4.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   41.623845][   T29] audit: type=1400 audit(1753922201.141:872): avc:  denied  { create } for  pid=3781 comm="syz.0.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   41.644121][ T3803] netlink: 'syz.0.68': attribute type 32 has an invalid length.
[   41.651904][ T3803] netlink: 8 bytes leftover after parsing attributes in process `syz.0.68'.
[   41.664239][ T3803] (unnamed net_device) (uninitialized): option coupled_control: invalid value (17)
[   41.694454][ T3813] loop2: detected capacity change from 0 to 512
[   41.716992][ T3813] EXT4-fs: Ignoring removed nomblk_io_submit option
[   41.739979][ T3813] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   41.830977][ T3813] EXT4-fs (loop2): 1 truncate cleaned up
[   41.854556][ T3819] netlink: 20 bytes leftover after parsing attributes in process `syz.3.73'.
[   41.864917][ T3813] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   41.974247][ T3822] loop4: detected capacity change from 0 to 8192
[   41.984406][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.923351][ T3847] loop3: detected capacity change from 0 to 1024
[   42.939484][ T3847] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (12806!=20869)
[   43.032369][ T3847] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002]
[   43.072011][ T3847] System zones: 0-1, 3-36
[   43.084054][ T3847] EXT4-fs (loop3): orphan cleanup on readonly fs
[   43.212406][ T3847] EXT4-fs (loop3): 1 orphan inode deleted
[   43.242844][ T3847] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   43.617763][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.862049][ T3859] netlink: 'syz.3.84': attribute type 10 has an invalid length.
[   43.882536][ T3859] bridge0: port 3(dummy0) entered disabled state
[   43.918451][ T3859] dummy0: left allmulticast mode
[   43.938472][ T3859] dummy0: left promiscuous mode
[   43.943479][ T3859] bridge0: port 3(dummy0) entered disabled state
[   43.980526][ T3859] team0: Port device dummy0 added
[   44.006694][ T3867] sit0: entered allmulticast mode
[   44.055213][ T3869] loop2: detected capacity change from 0 to 128
[   44.294849][ T3887] loop3: detected capacity change from 0 to 1024
[   44.327655][ T3887] EXT4-fs: Ignoring removed orlov option
[   44.390799][ T3887] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   44.487224][ T3893] loop2: detected capacity change from 0 to 512
[   44.559124][ T3893] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   44.609363][ T3893] EXT4-fs (loop2): can't mount with commit=, fs mounted w/o journal
[   44.914681][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.964087][ T3900] ÿÿÿÿÿÿ: renamed from vlan1 (while UP)
[   45.105420][ T3905] loop3: detected capacity change from 0 to 512
[   45.145552][ T3905] EXT4-fs: Ignoring removed mblk_io_submit option
[   45.161515][ T3905] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   45.174455][ T3905] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   45.189396][ T3905] EXT4-fs (loop3): 1 truncate cleaned up
[   45.195471][ T3905] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   45.528212][ T3912] mmap: syz.4.96 (3912) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   45.866445][ T3917] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   45.953159][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.967143][ T3917] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   46.024558][ T3917] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   46.094634][   T29] kauditd_printk_skb: 136 callbacks suppressed
[   46.094650][   T29] audit: type=1400 audit(1753922205.621:1009): avc:  denied  { create } for  pid=3922 comm="syz.1.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   46.094841][   T29] audit: type=1400 audit(1753922205.621:1010): avc:  denied  { write } for  pid=3922 comm="syz.1.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   46.096432][   T29] audit: type=1400 audit(1753922205.621:1011): avc:  denied  { nlmsg_write } for  pid=3922 comm="syz.1.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   46.096464][   T29] audit: type=1400 audit(1753922205.621:1012): avc:  denied  { write } for  pid=3922 comm="syz.1.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[   46.137277][ T3917] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   46.178851][ T3931] lo speed is unknown, defaulting to 1000
[   46.317231][  T340] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   46.407431][   T41] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   46.439645][ T3940] lo speed is unknown, defaulting to 1000
[   46.536075][   T41] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   46.546025][   T41] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   46.598520][ T3941] loop1: detected capacity change from 0 to 2048
[   46.690028][   T29] audit: type=1400 audit(1753922206.221:1013): avc:  denied  { create } for  pid=3942 comm="syz.0.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   46.712648][ T3941] EXT4-fs: quotafile must be on filesystem root
[   46.850103][ T3941] netlink: 'syz.1.103': attribute type 13 has an invalid length.
[   46.938426][   T29] audit: type=1400 audit(1753922206.301:1014): avc:  denied  { read } for  pid=3942 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   46.957408][   T29] audit: type=1400 audit(1753922206.301:1015): avc:  denied  { write } for  pid=3942 comm="+}[@" path="socket:[6593]" dev="sockfs" ino=6593 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   47.338052][   T29] audit: type=1326 audit(1753922206.691:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3946 comm="syz.0.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff8fa9e9a9 code=0x7ffc0000
[   47.362003][   T29] audit: type=1326 audit(1753922206.691:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3946 comm="syz.0.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff8fa9e9a9 code=0x7ffc0000
[   47.385457][   T29] audit: type=1326 audit(1753922206.691:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3946 comm="syz.0.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7eff8fa9e9a9 code=0x7ffc0000
[   47.858331][  T340] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   47.869527][ T3951] lo speed is unknown, defaulting to 1000
[   47.885250][ T3954] lo speed is unknown, defaulting to 1000
[   47.890705][  T340] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   47.911647][  T340] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   48.018693][ T3961] netlink: 'syz.0.111': attribute type 1 has an invalid length.
[   48.026736][ T3961] netlink: 'syz.0.111': attribute type 2 has an invalid length.
[   48.037786][ T3961] netlink: 4 bytes leftover after parsing attributes in process `syz.0.111'.
[   48.044885][  T340] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   48.292106][ T3972] netlink: 4 bytes leftover after parsing attributes in process `syz.4.115'.
[   48.312027][ T3974] netlink: 24 bytes leftover after parsing attributes in process `syz.2.113'.
[   48.443953][ T3978] $Hÿ: renamed from bond0 (while UP)
[   48.452617][ T3978] $Hÿ: entered promiscuous mode
[   48.457858][ T3978] bond_slave_0: entered promiscuous mode
[   48.463789][ T3978] bond_slave_1: entered promiscuous mode
[   48.720611][ T3980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   48.729374][ T3980] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   49.248382][ T3992] lo speed is unknown, defaulting to 1000
[   49.286273][ T3994] loop2: detected capacity change from 0 to 1024
[   49.300604][ T3994] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (12806!=20869)
[   49.312186][ T3994] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002]
[   49.321458][ T3994] System zones: 0-1, 3-36
[   49.325927][ T3994] EXT4-fs (loop2): orphan cleanup on readonly fs
[   49.351247][ T3994] EXT4-fs (loop2): 1 orphan inode deleted
[   49.367779][ T3994] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   49.477749][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.870869][ T4004] lo speed is unknown, defaulting to 1000
[   50.107364][ T4013] lo speed is unknown, defaulting to 1000
[   50.135203][ T4015] netlink: 12 bytes leftover after parsing attributes in process `syz.1.128'.
[   50.144213][ T4015] netlink: 12 bytes leftover after parsing attributes in process `syz.1.128'.
[   50.159569][ T4015] loop1: detected capacity change from 0 to 512
[   50.178521][ T4015] EXT4-fs (loop1): revision level too high, forcing read-only mode
[   50.178720][ T4015] EXT4-fs (loop1): orphan cleanup on readonly fs
[   50.180028][ T4015] EXT4-fs (loop1): 1 orphan inode deleted
[   50.235960][ T2374] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 1
[   50.250496][ T4015] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   50.290859][ T4022] siw: device registration error -23
[   50.531257][ T4027] netlink: 24 bytes leftover after parsing attributes in process `syz.0.132'.
[   50.680996][ T4030] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   50.741442][ T4030] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   50.807457][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.835151][ T4030] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   50.881746][ T4030] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   50.938856][ T2374] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   50.950066][ T2374] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   50.962534][ T2374] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   50.974764][ T2374] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   51.034148][ T4033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   51.050326][ T4033] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   51.116051][   T29] kauditd_printk_skb: 71 callbacks suppressed
[   51.116065][   T29] audit: type=1400 audit(1753922210.641:1089): avc:  denied  { unlink } for  pid=3300 comm="syz-executor" name="file0" dev="tmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   51.342937][   T29] audit: type=1326 audit(1753922210.871:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4039 comm="syz.0.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff8fa9e9a9 code=0x7ffc0000
[   51.366588][   T29] audit: type=1326 audit(1753922210.871:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4039 comm="syz.0.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff8fa9e9a9 code=0x7ffc0000
[   51.395334][   T29] audit: type=1326 audit(1753922210.931:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4039 comm="syz.0.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7eff8fa9e9a9 code=0x7ffc0000
[   51.425098][   T29] audit: type=1326 audit(1753922210.951:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4039 comm="syz.0.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff8fa9e9a9 code=0x7ffc0000
[   51.449808][   T29] audit: type=1326 audit(1753922210.951:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4039 comm="syz.0.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff8fa9e9a9 code=0x7ffc0000
[   51.474068][   T29] audit: type=1326 audit(1753922210.951:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4039 comm="syz.0.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7eff8fa9e9a9 code=0x7ffc0000
[   51.497788][   T29] audit: type=1326 audit(1753922210.951:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4039 comm="syz.0.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff8fa9e9a9 code=0x7ffc0000
[   51.522496][   T29] audit: type=1326 audit(1753922210.951:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4039 comm="syz.0.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff8fa9e9a9 code=0x7ffc0000
[   51.546023][   T29] audit: type=1326 audit(1753922210.951:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4039 comm="syz.0.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7eff8fa9e9a9 code=0x7ffc0000
[   51.588388][ T4046] netlink: 'syz.4.140': attribute type 1 has an invalid length.
[   51.597058][ T4046] netlink: 'syz.4.140': attribute type 2 has an invalid length.
[   51.617547][ T4046] netlink: 4 bytes leftover after parsing attributes in process `syz.4.140'.
[   51.646523][ T4047] lo speed is unknown, defaulting to 1000
[   52.225190][ T4060] loop3: detected capacity change from 0 to 1024
[   52.234465][ T4060] EXT4-fs: inline encryption not supported
[   52.240602][ T4060] EXT4-fs: Ignoring removed i_version option
[   52.254874][ T4060] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   52.267258][ T4060] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 2: comm syz.3.143: lblock 2 mapped to illegal pblock 2 (length 1)
[   52.298019][ T4060] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 48: comm syz.3.143: lblock 0 mapped to illegal pblock 48 (length 1)
[   52.313475][ T4060] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.143: Failed to acquire dquot type 0
[   52.325920][ T4060] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6250: Corrupt filesystem
[   52.335692][ T4060] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.143: mark_inode_dirty error
[   52.353138][ T4060] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[   52.364082][ T4060] EXT4-fs (loop3): 1 orphan inode deleted
[   52.370552][ T4060] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   52.378105][ T2374] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1)
[   52.396797][ T2374] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 0
[   52.409971][ T4060] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.419783][ T4060] EXT4-fs error (device loop3): __ext4_get_inode_loc:4787: comm syz.3.143: Invalid inode table block 1 in block_group 0
[   52.433804][ T4060] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6250: Corrupt filesystem
[   52.443730][ T4060] EXT4-fs error (device loop3): ext4_quota_off:7217: inode #3: comm syz.3.143: mark_inode_dirty error
[   52.497363][ T4064] lo speed is unknown, defaulting to 1000
[   52.847996][ T4066] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   52.921883][ T4073] loop4: detected capacity change from 0 to 512
[   52.933517][ T4073] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   52.974275][ T4066] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   53.145004][ T4066] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   53.274973][ T4066] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   53.700629][ T4060] siw: device registration error -23
[   53.768707][ T4083] netlink: 4 bytes leftover after parsing attributes in process `syz.3.150'.
[   53.849420][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   53.865668][ T4086] loop4: detected capacity change from 0 to 164
[   53.904737][   T41] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   53.936042][ T4086] Unsupported NM flag settings (8)
[   53.936220][   T41] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   53.950104][   T41] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   53.971278][   T41] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   54.034761][ T4088] lo speed is unknown, defaulting to 1000
[   54.065861][ T4090] netlink: 'syz.0.152': attribute type 13 has an invalid length.
[   54.150053][ T4095] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   54.204339][ T4090] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.211632][ T4090] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.262831][ T4090] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   54.274137][ T4090] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   54.339560][ T4098] smc: net device bond0 applied user defined pnetid SYZ0
[   54.346704][ T2374] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   54.359634][ T4095] smc: net device bond0 erased user defined pnetid SYZ0
[   54.365533][ T4096] lo speed is unknown, defaulting to 1000
[   54.370863][ T2374] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   54.403037][ T2374] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   54.433680][ T4100] loop1: detected capacity change from 0 to 1024
[   54.440304][ T2374] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   54.468953][ T4100] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   54.495870][ T4090] syz.0.152 (4090) used greatest stack depth: 9752 bytes left
[   54.520646][ T4105] tipc: Started in network mode
[   54.525576][ T4105] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711
[   54.532934][ T4105] tipc: Enabled bearer <eth:team0>, priority 0
[   54.552256][ T4107] loop4: detected capacity change from 0 to 512
[   54.560944][ T4107] EXT4-fs: Ignoring removed oldalloc option
[   54.574492][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   54.602509][ T4107] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   54.616156][ T4107] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   54.868972][ T4122] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.389543][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.434371][ T4129] loop1: detected capacity change from 0 to 8192
[   55.478107][ T3495]  loop1: p1 < > p2 p4
[   55.482211][ T3495] loop1: partition table partially beyond EOD, truncated
[   55.491472][ T3495] loop1: p1 start 408832 is beyond EOD, truncated
[   55.498120][ T3495] loop1: p2 size 8388352 extends beyond EOD, truncated
[   55.537360][   T23] tipc: Node number set to 11578026
[   55.544173][ T4129]  loop1: p1 < > p2 p4
[   55.548339][ T4129] loop1: partition table partially beyond EOD, truncated
[   55.555626][ T4129] loop1: p1 start 408832 is beyond EOD, truncated
[   55.562247][ T4129] loop1: p2 size 8388352 extends beyond EOD, truncated
[   55.616670][ T4129] netlink: 20 bytes leftover after parsing attributes in process `syz.1.176'.
[   55.683440][ T4135] smc: net device bond0 applied user defined pnetid SYZ0
[   55.693863][ T4135] smc: net device bond0 erased user defined pnetid SYZ0
[   55.719677][ T3495] udevd[3495]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[   55.729794][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory
[   55.749405][ T4138] loop2: detected capacity change from 0 to 2048
[   55.762443][ T4138] EXT4-fs: quotafile must be on filesystem root
[   55.774091][ T4138] netlink: 'syz.2.168': attribute type 13 has an invalid length.
[   55.818159][ T4142] netlink: 8 bytes leftover after parsing attributes in process `syz.1.178'.
[   55.831721][ T4138] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.838998][ T4138] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.947123][  T340] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   55.957760][ T4140] lo speed is unknown, defaulting to 1000
[   55.969596][  T340] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   55.983114][  T340] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   55.995023][  T340] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   56.063052][ T4145] loop2: detected capacity change from 0 to 1024
[   56.085765][ T4145] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   56.121296][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   56.307699][ T4154] lo speed is unknown, defaulting to 1000
[   56.595321][ T4157] lo speed is unknown, defaulting to 1000
[   57.304598][ T4161] loop4: detected capacity change from 0 to 1024
[   57.327838][ T4161] EXT4-fs: inline encryption not supported
[   57.333691][ T4161] EXT4-fs: Ignoring removed i_version option
[   57.360815][ T4161] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   57.463312][ T4161] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 2: comm syz.4.173: lblock 2 mapped to illegal pblock 2 (length 1)
[   57.484556][ T4165] loop2: detected capacity change from 0 to 164
[   57.510406][ T4167] loop1: detected capacity change from 0 to 1024
[   57.531390][   T29] kauditd_printk_skb: 164 callbacks suppressed
[   57.531406][   T29] audit: type=1400 audit(1753922217.051:1260): avc:  denied  { create } for  pid=4168 comm="syz.3.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   57.559082][ T4161] Quota error (device loop4): qtree_write_dquot: dquota write failed
[   57.567163][ T4161] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 48: comm syz.4.173: lblock 0 mapped to illegal pblock 48 (length 1)
[   57.582656][ T4167] EXT4-fs: inline encryption not supported
[   57.618981][ T4167] EXT4-fs: Ignoring removed bh option
[   57.671440][ T4167] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   57.695756][ T4161] Quota error (device loop4): v2_write_file_info: Can't write info structure
[   57.704905][ T4161] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.173: Failed to acquire dquot type 0
[   57.717772][ T4165] Unsupported NM flag settings (8)
[   57.737818][   T29] audit: type=1400 audit(1753922217.271:1261): avc:  denied  { read } for  pid=4163 comm="syz.1.174" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   57.774525][ T4161] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6250: Corrupt filesystem
[   57.822551][ T4161] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.173: mark_inode_dirty error
[   57.827374][   T29] audit: type=1400 audit(1753922217.341:1262): avc:  denied  { ioctl } for  pid=4163 comm="syz.1.174" path="/37/file1/file1" dev="loop1" ino=15 ioctlcmd=0x662a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   57.858367][   T29] audit: type=1400 audit(1753922217.341:1263): avc:  denied  { mounton } for  pid=4163 comm="syz.1.174" path="/37/file1/file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   57.881512][   T29] audit: type=1400 audit(1753922217.341:1264): avc:  denied  { mount } for  pid=4163 comm="syz.1.174" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   57.885450][ T4161] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[   57.903360][   T29] audit: type=1400 audit(1753922217.351:1265): avc:  denied  { bind } for  pid=4163 comm="syz.1.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   57.933253][   T29] audit: type=1400 audit(1753922217.351:1266): avc:  denied  { unmount } for  pid=4163 comm="syz.1.174" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   57.972192][ T4161] EXT4-fs (loop4): 1 orphan inode deleted
[   57.993078][   T29] audit: type=1400 audit(1753922217.391:1267): avc:  denied  { create } for  pid=4175 comm="syz.3.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   57.997484][   T31] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1)
[   58.013399][ T4161] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   58.041279][   T31] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 0
[   58.079172][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   58.080856][ T4183] loop3: detected capacity change from 0 to 1024
[   58.088919][ T4161] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   58.104600][ T4161] EXT4-fs error (device loop4): __ext4_get_inode_loc:4787: comm syz.4.173: Invalid inode table block 1 in block_group 0
[   58.118197][ T4183] EXT4-fs: inline encryption not supported
[   58.124583][ T4183] EXT4-fs: Ignoring removed i_version option
[   58.136901][ T4179] loop2: detected capacity change from 0 to 8192
[   58.148141][ T4161] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6250: Corrupt filesystem
[   58.169050][ T4183] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   58.180041][ T4161] EXT4-fs error (device loop4): ext4_quota_off:7217: inode #3: comm syz.4.173: mark_inode_dirty error
[   58.192896][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.201050][ T4179]  loop2: p1 < > p2 p4
[   58.205157][ T4179] loop2: partition table partially beyond EOD, truncated
[   58.213631][ T4183] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 2: comm syz.3.191: lblock 2 mapped to illegal pblock 2 (length 1)
[   58.229334][ T4179] loop2: p1 start 408832 is beyond EOD, truncated
[   58.235841][ T4179] loop2: p2 size 8388352 extends beyond EOD, truncated
[   58.245030][ T4183] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 48: comm syz.3.191: lblock 0 mapped to illegal pblock 48 (length 1)
[   58.266242][ T4183] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.191: Failed to acquire dquot type 0
[   58.286936][ T4183] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6250: Corrupt filesystem
[   58.298661][ T4183] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.191: mark_inode_dirty error
[   58.311731][ T4183] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[   58.311763][ T4183] EXT4-fs (loop3): 1 orphan inode deleted
[   58.312175][ T4183] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   58.320117][   T31] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1)
[   58.320263][   T31] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 0
[   58.322883][ T4183] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   58.328757][ T4183] EXT4-fs error (device loop3): __ext4_get_inode_loc:4787: comm syz.3.191: Invalid inode table block 1 in block_group 0
[   58.361076][ T4193] loop4: detected capacity change from 0 to 2048
[   58.378903][ T4183] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6250: Corrupt filesystem
[   58.408871][ T4193] EXT4-fs: Ignoring removed bh option
[   58.418826][ T4183] EXT4-fs error (device loop3): ext4_quota_off:7217: inode #3: comm syz.3.191: mark_inode_dirty error
[   58.439827][ T4179] netlink: 20 bytes leftover after parsing attributes in process `syz.2.180'.
[   58.442618][ T4193] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   58.470901][ T4183] siw: device registration error -23
[   58.495171][ T4193] EXT4-fs error (device loop4): ext4_iget_extra_inode:5030: inode #12: comm syz.4.183: corrupted in-inode xattr: e_name out of bounds
[   58.527089][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   58.557975][ T4205] loop4: detected capacity change from 0 to 128
[   58.586083][ T4205] syz.4.187: attempt to access beyond end of device
[   58.586083][ T4205] loop4: rw=2049, sector=145, nr_sectors = 16 limit=128
[   58.609393][ T4205] syz.4.187: attempt to access beyond end of device
[   58.609393][ T4205] loop4: rw=2049, sector=169, nr_sectors = 16 limit=128
[   58.627169][ T4205] syz.4.187: attempt to access beyond end of device
[   58.627169][ T4205] loop4: rw=2049, sector=193, nr_sectors = 8 limit=128
[   58.636819][ T4207] lo speed is unknown, defaulting to 1000
[   58.650502][ T4205] syz.4.187: attempt to access beyond end of device
[   58.650502][ T4205] loop4: rw=2049, sector=209, nr_sectors = 8 limit=128
[   58.694268][ T4205] syz.4.187: attempt to access beyond end of device
[   58.694268][ T4205] loop4: rw=2049, sector=225, nr_sectors = 8 limit=128
[   58.730656][ T4205] syz.4.187: attempt to access beyond end of device
[   58.730656][ T4205] loop4: rw=2049, sector=241, nr_sectors = 8 limit=128
[   58.756395][ T4205] syz.4.187: attempt to access beyond end of device
[   58.756395][ T4205] loop4: rw=2049, sector=257, nr_sectors = 8 limit=128
[   58.780180][ T4205] syz.4.187: attempt to access beyond end of device
[   58.780180][ T4205] loop4: rw=2049, sector=273, nr_sectors = 8 limit=128
[   58.816283][ T4205] syz.4.187: attempt to access beyond end of device
[   58.816283][ T4205] loop4: rw=2049, sector=289, nr_sectors = 9 limit=128
[   58.994321][ T4217] lo speed is unknown, defaulting to 1000
[   59.031505][ T4220] lo speed is unknown, defaulting to 1000
[   59.084676][ T4224] loop4: detected capacity change from 0 to 1024
[   59.102679][ T4224] EXT4-fs: inline encryption not supported
[   59.119127][ T4224] EXT4-fs: Ignoring removed bh option
[   59.154119][ T4224] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   59.329372][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   59.380256][ T4233] loop2: detected capacity change from 0 to 1024
[   59.384315][ T4235] loop1: detected capacity change from 0 to 1024
[   59.402238][ T4233] EXT4-fs: inline encryption not supported
[   59.408197][ T4233] EXT4-fs: Ignoring removed i_version option
[   59.422950][ T4235] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (12806!=20869)
[   59.443668][ T4233] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   59.446592][ T4235] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002]
[   59.488410][ T4235] System zones: 0-1, 3-36
[   59.492987][ T4235] EXT4-fs (loop1): orphan cleanup on readonly fs
[   59.505858][ T4233] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 2: comm syz.2.198: lblock 2 mapped to illegal pblock 2 (length 1)
[   59.530621][ T4233] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 48: comm syz.2.198: lblock 0 mapped to illegal pblock 48 (length 1)
[   59.558160][ T4233] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.198: Failed to acquire dquot type 0
[   59.576579][ T4235] EXT4-fs (loop1): 1 orphan inode deleted
[   59.592932][ T4233] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6250: Corrupt filesystem
[   59.617982][ T4235] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   59.637357][ T4233] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.198: mark_inode_dirty error
[   59.678965][ T4233] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[   59.700610][ T4233] EXT4-fs (loop2): 1 orphan inode deleted
[   59.706762][ T4233] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   59.727031][   T31] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1)
[   59.741936][   T31] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 0
[   59.762994][ T4244] SELinux: syz.4.201 (4244) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[   59.763271][ T4233] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   59.786519][ T4233] EXT4-fs error (device loop2): __ext4_get_inode_loc:4787: comm syz.2.198: Invalid inode table block 1 in block_group 0
[   59.798870][ T4246] loop3: detected capacity change from 0 to 512
[   59.800503][ T4233] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6250: Corrupt filesystem
[   59.828433][ T4246] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   59.849242][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   59.859414][ T4233] EXT4-fs error (device loop2): ext4_quota_off:7217: inode #3: comm syz.2.198: mark_inode_dirty error
[   59.860079][ T4248] netlink: 4 bytes leftover after parsing attributes in process `syz.4.201'.
[   59.879990][ T4246] EXT4-fs (loop3): mount failed
[   59.936949][ T4242] netlink: 20 bytes leftover after parsing attributes in process `syz.0.200'.
[   59.950687][ T4233] siw: device registration error -23
[   59.962717][ T4254] loop1: detected capacity change from 0 to 2048
[   59.972561][ T4254] EXT4-fs: Ignoring removed bh option
[   59.989535][ T4254] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   60.005523][ T4258] 8021q: adding VLAN 0 to HW filter on device bond0
[   60.016911][ T4254] EXT4-fs error (device loop1): ext4_iget_extra_inode:5030: inode #12: comm syz.1.204: corrupted in-inode xattr: e_name out of bounds
[   60.066251][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   60.117546][ T4268] netlink: 'syz.1.208': attribute type 10 has an invalid length.
[   60.171065][ T4267] lo speed is unknown, defaulting to 1000
[   60.460346][ T4282] lo speed is unknown, defaulting to 1000
[   60.767236][ T4284] netlink: 'syz.3.214': attribute type 32 has an invalid length.
[   60.775124][ T4284] netlink: 8 bytes leftover after parsing attributes in process `syz.3.214'.
[   60.784395][ T4284] (unnamed net_device) (uninitialized): option coupled_control: invalid value (17)
[   64.846070][ T4302] loop2: detected capacity change from 0 to 512
[   64.867433][   T29] kauditd_printk_skb: 89 callbacks suppressed
[   64.867451][   T29] audit: type=1326 audit(1753922224.391:1349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4295 comm="syz.3.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e0a0de9a9 code=0x7ffc0000
[   64.888180][ T4306] loop1: detected capacity change from 0 to 1024
[   64.897185][   T29] audit: type=1326 audit(1753922224.391:1350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4295 comm="syz.3.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e0a0de9a9 code=0x7ffc0000
[   64.906645][ T4306] EXT4-fs: inline encryption not supported
[   64.927083][   T29] audit: type=1326 audit(1753922224.391:1351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4295 comm="syz.3.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f5e0a0de9a9 code=0x7ffc0000
[   64.927115][   T29] audit: type=1326 audit(1753922224.391:1352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4295 comm="syz.3.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5e0a0de9e3 code=0x7ffc0000
[   64.927135][   T29] audit: type=1326 audit(1753922224.391:1353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4295 comm="syz.3.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5e0a0dd45f code=0x7ffc0000
[   64.932988][ T4306] EXT4-fs: Ignoring removed i_version option
[   64.982083][ T4297] loop3: detected capacity change from 0 to 2048
[   65.007666][ T4302] EXT4-fs: Ignoring removed bh option
[   65.026473][ T4297] EXT4-fs: Ignoring removed bh option
[   65.045878][ T4304] loop4: detected capacity change from 0 to 8192
[   65.052877][ T4302] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   65.055351][   T29] audit: type=1326 audit(1753922224.491:1354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4295 comm="syz.3.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f5e0a0dea37 code=0x7ffc0000
[   65.065488][ T4299] netlink: 'syz.0.228': attribute type 10 has an invalid length.
[   65.086685][   T29] audit: type=1326 audit(1753922224.521:1355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4295 comm="syz.3.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5e0a0dd310 code=0x7ffc0000
[   65.096531][ T4306] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   65.118683][   T29] audit: type=1326 audit(1753922224.521:1356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4295 comm="syz.3.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5e0a0de5ab code=0x7ffc0000
[   65.134810][ T4302] EXT4-fs (loop2): 1 truncate cleaned up
[   65.152890][   T29] audit: type=1326 audit(1753922224.561:1357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4295 comm="syz.3.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f5e0a0dd60a code=0x7ffc0000
[   65.152986][   T29] audit: type=1326 audit(1753922224.561:1358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4295 comm="syz.3.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f5e0a0dd60a code=0x7ffc0000
[   65.160236][ T4306] EXT4-fs error (device loop1): ext4_map_blocks:780: inode #3: block 2: comm syz.1.221: lblock 2 mapped to illegal pblock 2 (length 1)
[   65.183131][ T4302] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   65.208825][ T4299] tipc: Disabling bearer <eth:team0>
[   65.221122][ T4307]  loop4: p1 < > p2 p4
[   65.232780][ T4297] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   65.237502][ T4307] loop4: partition table partially beyond EOD, truncated
[   65.237775][ T4307] loop4: p1 start 408832 is beyond EOD, 
[   65.247546][ T4306] EXT4-fs error (device loop1): ext4_map_blocks:780: inode #3: block 48: comm syz.1.221: lblock 0 mapped to illegal pblock 48 (length 1)
[   65.253703][ T4307] truncated
[   65.274903][ T4297] EXT4-fs error (device loop3): ext4_iget_extra_inode:5030: inode #12: comm syz.3.219: corrupted in-inode xattr: e_name out of bounds
[   65.281230][ T4307] loop4: p2 size 8388352 extends beyond EOD, truncated
[   65.306173][ T4306] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.221: Failed to acquire dquot type 0
[   65.306591][ T4306] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6250: Corrupt filesystem
[   65.306660][ T4306] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.221: mark_inode_dirty error
[   65.308162][ T4299] team0 (unregistering): Port device team_slave_0 removed
[   65.308324][ T4306] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[   65.308358][ T4306] EXT4-fs (loop1): 1 orphan inode deleted
[   65.320272][   T31] EXT4-fs error (device loop1): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1)
[   65.320963][   T31] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 0
[   65.323467][ T4299] team0 (unregistering): Port device team_slave_1 removed
[   65.354411][ T4304]  loop4: p1 < > p2 p4
[   65.354425][ T4304] loop4: partition table partially beyond EOD, truncated
[   65.354526][ T4304] loop4: p1 start 408832 is beyond EOD, truncated
[   65.354563][ T4304] loop4: p2 size 8388352 extends beyond EOD, truncated
[   65.361571][ T4306] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   65.460752][ T4306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   65.470653][ T4306] EXT4-fs error (device loop1): __ext4_get_inode_loc:4787: comm syz.1.221: Invalid inode table block 1 in block_group 0
[   65.484312][ T4323] netlink: 8 bytes leftover after parsing attributes in process `syz.2.229'.
[   65.496414][ T4323] team0 (unregistering): Port device team_slave_0 removed
[   65.504683][ T4306] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6250: Corrupt filesystem
[   65.514998][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   65.515191][ T4306] EXT4-fs error (device loop1): ext4_quota_off:7217: inode #3: comm syz.1.221: mark_inode_dirty error
[   65.537822][ T4323] team0 (unregistering): Port device team_slave_1 removed
[   65.563675][ T4296] udevd[4296]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[   65.566115][ T4307] udevd[4307]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[   65.620752][ T4306] siw: device registration error -23
[   65.663186][ T4331] loop1: detected capacity change from 0 to 512
[   65.673099][ T4327] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4327 comm=syz.4.224
[   65.686725][ T4331] EXT4-fs: Ignoring removed oldalloc option
[   65.711178][ T4331] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   65.726571][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   65.757736][ T4331] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   65.799006][ T4338] loop4: detected capacity change from 0 to 512
[   65.799568][ T4330] netlink: 20 bytes leftover after parsing attributes in process `syz.0.235'.
[   65.833069][ T4338] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   65.864899][ T4338] EXT4-fs (loop4): mount failed
[   65.871074][ T4341] lo speed is unknown, defaulting to 1000
[   65.871924][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   65.991654][ T4344] loop3: detected capacity change from 0 to 8192
[   66.089818][ T4358] loop2: detected capacity change from 0 to 1024
[   66.121876][ T4358] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   66.157471][ T4358] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   66.334424][ T4362] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.232: bg 0: block 393: padding at end of block bitmap is not set
[   66.356668][ T4362] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2035 with error 117
[   66.369646][ T4362] EXT4-fs (loop2): This should not happen!! Data will be lost
[   66.369646][ T4362] 
[   66.532048][ T4364] loop1: detected capacity change from 0 to 2048
[   66.539029][ T4364] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[   66.903364][ T4370] loop1: detected capacity change from 0 to 512
[   66.917846][ T4370] EXT4-fs: Ignoring removed mblk_io_submit option
[   66.939960][ T4370] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   66.948739][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   66.968618][ T4370] EXT4-fs (loop1): 1 truncate cleaned up
[   66.991509][ T4370] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   67.017963][ T4373] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.056918][ T4382] siw: device registration error -23
[   67.165860][ T4393] loop2: detected capacity change from 0 to 8192
[   67.188247][ T4307]  loop2: p1 < > p2 p4
[   67.192522][ T4307] loop2: partition table partially beyond EOD, truncated
[   67.199936][ T4307] loop2: p1 start 408832 is beyond EOD, truncated
[   67.206550][ T4307] loop2: p2 size 8388352 extends beyond EOD, truncated
[   67.226455][ T4395] netlink: 'syz.4.237': attribute type 32 has an invalid length.
[   67.234274][ T4395] netlink: 8 bytes leftover after parsing attributes in process `syz.4.237'.
[   67.248215][ T4395] (unnamed net_device) (uninitialized): option coupled_control: invalid value (17)
[   67.260515][ T4393]  loop2: p1 < > p2 p4
[   67.264628][ T4393] loop2: partition table partially beyond EOD, truncated
[   67.272069][ T4393] loop2: p1 start 408832 is beyond EOD, truncated
[   67.278644][ T4393] loop2: p2 size 8388352 extends beyond EOD, truncated
[   67.333365][ T4393] netlink: 20 bytes leftover after parsing attributes in process `syz.2.244'.
[   67.406575][ T4307] udevd[4307]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory
[   67.569398][ T4397] hsr0: entered promiscuous mode
[   67.577597][ T4397] netlink: 4 bytes leftover after parsing attributes in process `syz.0.245'.
[   67.597564][ T4397] hsr_slave_0: left promiscuous mode
[   67.617371][ T4397] hsr_slave_1: left promiscuous mode
[   67.623488][ T4397] hsr0 (unregistering): left promiscuous mode
[   67.662390][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   67.708827][ T4401] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4401 comm=syz.2.258
[   67.912836][ T4408] loop2: detected capacity change from 0 to 8192
[   68.011541][ T4410] hsr0: entered promiscuous mode
[   68.017127][ T4410] netlink: 4 bytes leftover after parsing attributes in process `syz.3.262'.
[   68.026937][ T4410] hsr_slave_0: left promiscuous mode
[   68.038671][ T4410] hsr_slave_1: left promiscuous mode
[   68.062692][ T4410] hsr0 (unregistering): left promiscuous mode
[   68.300369][ T4423] lo speed is unknown, defaulting to 1000
[   68.725190][ T4425] loop3: detected capacity change from 0 to 2048
[   68.736299][ T4425] EXT4-fs: Ignoring removed bh option
[   68.748445][ T4430] loop2: detected capacity change from 0 to 1024
[   68.756168][ T4430] EXT4-fs: Ignoring removed orlov option
[   68.763944][ T4425] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   68.785039][ T4430] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   68.800508][ T4425] EXT4-fs error (device loop3): ext4_iget_extra_inode:5030: inode #12: comm syz.3.254: corrupted in-inode xattr: e_name out of bounds
[   68.828598][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   68.942799][ T4443] loop3: detected capacity change from 0 to 128
[   68.952905][ T4445] loop4: detected capacity change from 0 to 1024
[   68.962654][ T4443] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   68.975941][ T4445] EXT4-fs: inline encryption not supported
[   68.981833][ T4445] EXT4-fs: Ignoring removed i_version option
[   69.022905][ T4443] ext4 filesystem being mounted at /54/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   69.060055][ T4445] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   69.081597][ T3300] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   69.102217][ T4445] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 2: comm syz.4.255: lblock 2 mapped to illegal pblock 2 (length 1)
[   69.129581][ T4445] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 48: comm syz.4.255: lblock 0 mapped to illegal pblock 48 (length 1)
[   69.145436][ T4445] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.255: Failed to acquire dquot type 0
[   69.181686][ T4445] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6250: Corrupt filesystem
[   69.210365][ T4445] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.255: mark_inode_dirty error
[   69.230322][ T4452] lo speed is unknown, defaulting to 1000
[   69.236430][ T4445] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[   69.260288][ T4445] EXT4-fs (loop4): 1 orphan inode deleted
[   69.267031][  T176] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1)
[   69.267372][ T4445] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   69.292414][  T176] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 0
[   69.311516][ T4454] loop1: detected capacity change from 0 to 128
[   69.323651][ T4454] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   69.326281][ T4445] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   69.336890][ T4454] ext4 filesystem being mounted at /54/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   69.345790][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   69.399716][ T4445] EXT4-fs error (device loop4): __ext4_get_inode_loc:4787: comm syz.4.255: Invalid inode table block 1 in block_group 0
[   69.442785][ T4445] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6250: Corrupt filesystem
[   69.470698][ T4445] EXT4-fs error (device loop4): ext4_quota_off:7217: inode #3: comm syz.4.255: mark_inode_dirty error
[   69.522399][ T4458] loop2: detected capacity change from 0 to 512
[   69.548594][ T4458] EXT4-fs: Ignoring removed mblk_io_submit option
[   69.576204][ T3299] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   69.589169][ T4458] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   69.619806][ T4458] EXT4-fs (loop2): 1 truncate cleaned up
[   69.625242][ T4466] loop1: detected capacity change from 0 to 512
[   69.646354][ T4458] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   69.668450][ T4466] EXT4-fs: Ignoring removed bh option
[   69.680938][ T4463] loop3: detected capacity change from 0 to 2048
[   69.716945][ T4463] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[   69.737408][ T4466] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[   69.780968][ T4466] EXT4-fs (loop1): 1 truncate cleaned up
[   69.812025][ T4466] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   69.841720][ T4470] Zero length message leads to an empty skb
[   69.881645][ T4470] loop4: detected capacity change from 0 to 512
[   69.891326][ T4470] EXT4-fs: Ignoring removed nomblk_io_submit option
[   69.905343][ T4470] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[   69.914847][ T4470] EXT4-fs (loop4): 1 truncate cleaned up
[   69.921362][ T4470] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   69.938966][ T4470] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000.
[   69.952591][   T29] kauditd_printk_skb: 231 callbacks suppressed
[   69.952610][   T29] audit: type=1400 audit(1753922229.471:1583): avc:  denied  { remount } for  pid=4469 comm="syz.4.264" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   69.978910][   T29] audit: type=1326 audit(1753922229.481:1584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4472 comm="syz.3.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e0a0de9a9 code=0x7ffc0000
[   70.002390][   T29] audit: type=1326 audit(1753922229.481:1585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4472 comm="syz.3.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e0a0de9a9 code=0x7ffc0000
[   70.026140][   T29] audit: type=1326 audit(1753922229.481:1586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4472 comm="syz.3.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5e0a0de9a9 code=0x7ffc0000
[   70.049708][   T29] audit: type=1326 audit(1753922229.481:1587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4472 comm="syz.3.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e0a0de9a9 code=0x7ffc0000
[   70.055707][ T4475] sit0: entered allmulticast mode
[   70.075486][   T29] audit: type=1326 audit(1753922229.481:1588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4472 comm="syz.3.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e0a0de9a9 code=0x7ffc0000
[   70.107189][   T29] audit: type=1326 audit(1753922229.481:1589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4472 comm="syz.3.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5e0a0de9a9 code=0x7ffc0000
[   70.131753][   T29] audit: type=1326 audit(1753922229.481:1590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4472 comm="syz.3.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e0a0de9a9 code=0x7ffc0000
[   70.155678][   T29] audit: type=1326 audit(1753922229.491:1591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4472 comm="syz.3.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5e0a0de9a9 code=0x7ffc0000
[   70.180089][   T29] audit: type=1326 audit(1753922229.491:1592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4472 comm="syz.3.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e0a0de9a9 code=0x7ffc0000
[   70.189728][ T4483] netlink: 'syz.0.268': attribute type 10 has an invalid length.
[   70.268257][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.331506][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.731431][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.740933][ T4487] loop4: detected capacity change from 0 to 2048
[   70.754902][ T4487] EXT4-fs: Ignoring removed bh option
[   70.778896][ T4487] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   70.810840][ T4487] EXT4-fs error (device loop4): ext4_iget_extra_inode:5030: inode #12: comm syz.4.270: corrupted in-inode xattr: e_name out of bounds
[   70.845970][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.011031][ T4508] loop4: detected capacity change from 0 to 1024
[   72.018882][ T4508] EXT4-fs: Ignoring removed orlov option
[   72.280921][ T4512] loop2: detected capacity change from 0 to 128
[   72.296845][ T4508] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   72.318269][ T4512] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   72.331630][ T4512] ext4 filesystem being mounted at /56/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   72.512324][ T3308] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   72.554135][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.563504][ T4523] loop2: detected capacity change from 0 to 2048
[   72.570852][ T4523] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[   72.677138][ T4536] netlink: 'syz.2.283': attribute type 10 has an invalid length.
[   72.743255][ T4539] loop2: detected capacity change from 0 to 512
[   72.750132][ T4539] EXT4-fs: Ignoring removed nomblk_io_submit option
[   72.764738][ T4539] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[   72.773509][ T4539] EXT4-fs (loop2): 1 truncate cleaned up
[   72.780712][ T4539] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   72.798085][ T4539] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000.
[   72.868078][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.333891][ T4555] loop2: detected capacity change from 0 to 512
[   73.354532][ T4555] EXT4-fs: Ignoring removed bh option
[   73.441884][ T4555] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[   73.480705][ T4555] EXT4-fs (loop2): 1 truncate cleaned up
[   73.506919][ T4555] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   74.543068][ T4561] loop1: detected capacity change from 0 to 1024
[   74.557817][ T4561] EXT4-fs: Ignoring removed orlov option
[   74.577110][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   74.599627][ T4561] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   74.755362][ T4580] loop4: detected capacity change from 0 to 128
[   74.771757][ T4580] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   74.787204][ T4580] ext4 filesystem being mounted at /48/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   74.953147][ T3315] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   74.964597][   T29] kauditd_printk_skb: 868 callbacks suppressed
[   74.964611][   T29] audit: type=1326 audit(1753922234.501:2461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4565 comm="syz.2.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd022a85967 code=0x7ffc0000
[   75.004195][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   75.022150][   T29] audit: type=1326 audit(1753922234.501:2462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4565 comm="syz.2.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd022a2ab89 code=0x7ffc0000
[   75.045576][   T29] audit: type=1326 audit(1753922234.531:2463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4565 comm="syz.2.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd022a85967 code=0x7ffc0000
[   75.069145][   T29] audit: type=1326 audit(1753922234.531:2464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4565 comm="syz.2.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd022a2ab89 code=0x7ffc0000
[   75.093106][   T29] audit: type=1326 audit(1753922234.531:2465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4565 comm="syz.2.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fd022a8e9a9 code=0x7ffc0000
[   75.117002][   T29] audit: type=1326 audit(1753922234.541:2466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4565 comm="syz.2.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd022a85967 code=0x7ffc0000
[   75.140787][   T29] audit: type=1326 audit(1753922234.541:2467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4565 comm="syz.2.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd022a2ab89 code=0x7ffc0000
[   75.142683][ T4590] netlink: 'syz.4.298': attribute type 10 has an invalid length.
[   75.164431][   T29] audit: type=1326 audit(1753922234.541:2468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4565 comm="syz.2.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fd022a8e9a9 code=0x7ffc0000
[   75.164459][   T29] audit: type=1326 audit(1753922234.551:2469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4565 comm="syz.2.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd022a85967 code=0x7ffc0000
[   75.218878][   T29] audit: type=1326 audit(1753922234.551:2470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4565 comm="syz.2.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd022a2ab89 code=0x7ffc0000
[   75.284307][ T4590] team0: Port device dummy0 added
[   75.330335][ T4596] netlink: 'syz.0.301': attribute type 2 has an invalid length.
[   75.338136][ T4596] netlink: 'syz.0.301': attribute type 1 has an invalid length.
[   75.346196][ T4596] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.301'.
[   75.403867][ T4595] hsr0: entered promiscuous mode
[   75.409683][ T4595] netlink: 4 bytes leftover after parsing attributes in process `syz.1.299'.
[   75.419167][ T4595] hsr_slave_0: left promiscuous mode
[   75.424849][ T4595] hsr_slave_1: left promiscuous mode
[   75.431305][ T4595] hsr0 (unregistering): left promiscuous mode
[   76.245095][ T4610] loop4: detected capacity change from 0 to 512
[   76.251880][ T4610] EXT4-fs: Ignoring removed bh option
[   76.259189][ T4610] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[   76.387730][ T4610] EXT4-fs (loop4): 1 truncate cleaned up
[   76.394026][ T4610] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   76.414740][ T4619] loop3: detected capacity change from 0 to 512
[   77.373040][ T4619] EXT4-fs: Ignoring removed nomblk_io_submit option
[   77.498167][ T4626] lo speed is unknown, defaulting to 1000
[   77.864906][ T4619] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[   77.873804][ T4619] EXT4-fs (loop3): 1 truncate cleaned up
[   77.881242][ T4619] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   77.896789][ T4619] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000.
[   77.968787][ T4632] loop2: detected capacity change from 0 to 2048
[   78.033160][ T4630] loop1: detected capacity change from 0 to 8192
[   78.046850][ T4632] EXT4-fs (loop2): failed to initialize system zone (-117)
[   78.067312][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   78.088990][ T4632] EXT4-fs (loop2): mount failed
[   78.201560][ T4640] lo speed is unknown, defaulting to 1000
[   78.461568][ T4632] siw: device registration error -23
[   78.748821][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   78.818634][ T4645] loop3: detected capacity change from 0 to 1024
[   78.822374][ T4647] loop4: detected capacity change from 0 to 512
[   78.825601][ T4645] EXT4-fs: Ignoring removed orlov option
[   78.847157][ T4650] netlink: 20 bytes leftover after parsing attributes in process `syz.2.311'.
[   78.867580][ T4645] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   78.904857][ T4647] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   78.932923][ T4658] netlink: 76 bytes leftover after parsing attributes in process `syz.2.316'.
[   78.948618][ T4647] EXT4-fs (loop4): mount failed
[   78.992412][ T4651] netlink: 'syz.1.315': attribute type 12 has an invalid length.
[   79.360326][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.433543][ T4675] loop4: detected capacity change from 0 to 1024
[   79.453799][ T4675] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   80.386312][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   80.411387][ T4687] loop3: detected capacity change from 0 to 512
[   80.419269][ T4687] EXT4-fs: Ignoring removed bh option
[   80.424956][ T4687] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[   80.434564][ T4687] EXT4-fs (loop3): 1 truncate cleaned up
[   80.441803][ T4687] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   80.534940][   T29] kauditd_printk_skb: 610 callbacks suppressed
[   80.534957][   T29] audit: type=1400 audit(1753922240.061:3080): avc:  denied  { name_connect } for  pid=4692 comm="syz.0.335" dest=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1
[   80.670232][ T4695] loop2: detected capacity change from 0 to 8192
[   81.394426][   T29] audit: type=1326 audit(1753922240.201:3081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4688 comm="syz.1.327" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0bdbade9a9 code=0x0
[   81.525481][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   81.577019][ T4708] netlink: 20 bytes leftover after parsing attributes in process `syz.0.330'.
[   81.595046][ T4711] netlink: 'syz.3.329': attribute type 10 has an invalid length.
[   81.647139][ T4711] team0: Port device dummy0 removed
[   81.656462][ T4711] dummy0: entered promiscuous mode
[   81.663075][ T4711] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link
[   81.746644][ T4717] loop1: detected capacity change from 0 to 2048
[   81.802713][ T4715] bond1: entered promiscuous mode
[   81.808236][ T4715] bond1: entered allmulticast mode
[   81.819054][ T4717] EXT4-fs (loop1): failed to initialize system zone (-117)
[   81.850308][ T4717] EXT4-fs (loop1): mount failed
[   81.859370][ T4715] 8021q: adding VLAN 0 to HW filter on device bond1
[   81.940045][ T4715] bond1 (unregistering): Released all slaves
[   81.990708][ T4731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   82.003109][ T4731] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   82.007110][ T4728] netlink: 12 bytes leftover after parsing attributes in process `syz.0.333'.
[   82.019984][ T4730] netlink: 'syz.2.331': attribute type 12 has an invalid length.
[   82.030865][ T4714] lo speed is unknown, defaulting to 1000
[   82.044788][ T4714] lo speed is unknown, defaulting to 1000
[   82.051712][ T4714] lo speed is unknown, defaulting to 1000
[   82.070445][ T4714] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   82.081328][ T4714] lo speed is unknown, defaulting to 1000
[   82.097901][ T4714] lo speed is unknown, defaulting to 1000
[   82.115882][ T4714] lo speed is unknown, defaulting to 1000
[   82.122071][ T4714] lo speed is unknown, defaulting to 1000
[   82.129325][ T4714] lo speed is unknown, defaulting to 1000
[   82.135503][ T4714] lo speed is unknown, defaulting to 1000
[   82.142505][ T4714] lo speed is unknown, defaulting to 1000
[   83.394288][ T4761] loop2: detected capacity change from 0 to 512
[   83.403496][ T4761] EXT4-fs: Ignoring removed bh option
[   83.423567][ T4761] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[   83.442344][ T4761] EXT4-fs (loop2): 1 truncate cleaned up
[   83.448516][ T4761] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   83.641712][ T4766] lo speed is unknown, defaulting to 1000
[   84.285943][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   84.415842][ T4769] loop3: detected capacity change from 0 to 8192
[   84.426021][ T4775] netlink: 76 bytes leftover after parsing attributes in process `syz.4.344'.
[   84.480919][ T4778] netlink: 'syz.2.356': attribute type 2 has an invalid length.
[   84.488882][ T4778] netlink: 'syz.2.356': attribute type 1 has an invalid length.
[   84.496643][ T4778] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.356'.
[   84.986103][ T4787] lo speed is unknown, defaulting to 1000
[   85.181568][ T4792] lo speed is unknown, defaulting to 1000
[   85.452022][ T4794] netlink: 20 bytes leftover after parsing attributes in process `syz.3.345'.
[   85.611175][ T4799] lo speed is unknown, defaulting to 1000
[   85.647200][ T4803] netlink: 'syz.3.349': attribute type 12 has an invalid length.
[   85.734740][ T4802] loop2: detected capacity change from 0 to 512
[   85.775677][ T4802] EXT4-fs: Ignoring removed nobh option
[   85.858615][ T4802] EXT4-fs error (device loop2): ext4_do_update_inode:5563: inode #3: comm syz.2.350: corrupted inode contents
[   85.882892][ T4802] EXT4-fs error (device loop2): ext4_dirty_inode:6454: inode #3: comm syz.2.350: mark_inode_dirty error
[   85.891508][   T29] audit: type=1326 audit(1753922245.411:3082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4809 comm="syz.4.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f331427e9a9 code=0x7ffc0000
[   85.903458][ T4802] EXT4-fs error (device loop2): ext4_do_update_inode:5563: inode #3: comm syz.2.350: corrupted inode contents
[   85.919487][   T29] audit: type=1326 audit(1753922245.411:3083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4809 comm="syz.4.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f331427e9a9 code=0x7ffc0000
[   85.919532][   T29] audit: type=1326 audit(1753922245.411:3084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4809 comm="syz.4.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f331427e9a9 code=0x7ffc0000
[   85.919557][   T29] audit: type=1326 audit(1753922245.411:3085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4809 comm="syz.4.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f331427e9a9 code=0x7ffc0000
[   85.919582][   T29] audit: type=1326 audit(1753922245.411:3086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4809 comm="syz.4.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f331427e9a9 code=0x7ffc0000
[   85.919645][   T29] audit: type=1326 audit(1753922245.411:3087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4809 comm="syz.4.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f331427e9a9 code=0x7ffc0000
[   85.919671][   T29] audit: type=1326 audit(1753922245.411:3088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4809 comm="syz.4.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f331427e9a9 code=0x7ffc0000
[   85.919696][   T29] audit: type=1326 audit(1753922245.411:3089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4809 comm="syz.4.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f331427e9a9 code=0x7ffc0000
[   86.098630][   T29] audit: type=1326 audit(1753922245.411:3090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4809 comm="syz.4.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f331427e9a9 code=0x7ffc0000
[   86.122564][   T29] audit: type=1326 audit(1753922245.411:3091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4809 comm="syz.4.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f331427e9a9 code=0x7ffc0000
[   86.155542][ T4802] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.350: mark_inode_dirty error
[   86.200654][ T4814] loop3: detected capacity change from 0 to 1024
[   86.211467][ T4802] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.350: Failed to acquire dquot type 0
[   86.261467][ T4814] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   86.324501][ T4802] EXT4-fs error (device loop2): ext4_do_update_inode:5563: inode #16: comm syz.2.350: corrupted inode contents
[   86.339486][ T4802] EXT4-fs error (device loop2): ext4_dirty_inode:6454: inode #16: comm syz.2.350: mark_inode_dirty error
[   86.387145][ T4823] netlink: 'syz.1.357': attribute type 21 has an invalid length.
[   86.395016][ T4823] netlink: 156 bytes leftover after parsing attributes in process `syz.1.357'.
[   86.405140][ T4802] EXT4-fs error (device loop2): ext4_do_update_inode:5563: inode #16: comm syz.2.350: corrupted inode contents
[   86.439616][ T4802] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.350: mark_inode_dirty error
[   86.454446][ T4802] EXT4-fs error (device loop2): ext4_do_update_inode:5563: inode #16: comm syz.2.350: corrupted inode contents
[   86.484679][ T4802] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem
[   86.506336][ T4802] EXT4-fs error (device loop2): ext4_do_update_inode:5563: inode #16: comm syz.2.350: corrupted inode contents
[   86.512615][ T4825] bond1: entered promiscuous mode
[   86.523610][ T4825] bond1: entered allmulticast mode
[   86.529236][ T4825] 8021q: adding VLAN 0 to HW filter on device bond1
[   86.536951][ T4802] EXT4-fs error (device loop2): ext4_truncate:4592: inode #16: comm syz.2.350: mark_inode_dirty error
[   86.552403][ T4802] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem
[   86.564793][ T4825] bond1 (unregistering): Released all slaves
[   86.572955][ T4802] EXT4-fs (loop2): 1 truncate cleaned up
[   86.587004][ T4802] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   86.609218][ T4830] netlink: 12 bytes leftover after parsing attributes in process `syz.4.359'.
[   86.634647][ T4802] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   86.651260][ T4825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   86.660974][ T4825] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   86.799345][ T4802] syz.2.350 (4802) used greatest stack depth: 9608 bytes left
[   86.812344][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   86.881148][ T4833] loop2: detected capacity change from 0 to 8192
[   86.892411][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   87.104054][ T4841] loop2: detected capacity change from 0 to 8192
[   87.136978][ T4843] netlink: 'syz.1.362': attribute type 2 has an invalid length.
[   87.144761][ T4843] netlink: 'syz.1.362': attribute type 1 has an invalid length.
[   87.152644][ T4843] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.362'.
[   87.250526][ T4846] netlink: 20 bytes leftover after parsing attributes in process `syz.4.363'.
[   87.289307][ T4848] loop2: detected capacity change from 0 to 8192
[   87.389460][ T4854] netlink: 4 bytes leftover after parsing attributes in process `syz.2.365'.
[   87.406181][ T4854] team0: entered promiscuous mode
[   87.411324][ T4854] team0: entered allmulticast mode
[   87.484311][ T4862] lo speed is unknown, defaulting to 1000
[   87.516947][ T4865] block device autoloading is deprecated and will be removed.
[   87.538065][ T4865] syz.4.364: attempt to access beyond end of device
[   87.538065][ T4865] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0
[   87.558239][ T4862] netlink: 'syz.0.367': attribute type 12 has an invalid length.
[   87.589986][ T4866] loop3: detected capacity change from 0 to 2048
[   87.608811][ T4866] EXT4-fs (loop3): failed to initialize system zone (-117)
[   87.633410][ T4866] EXT4-fs (loop3): mount failed
[   87.656045][ T4866] siw: device registration error -23
[   88.022673][ T4873] loop1: detected capacity change from 0 to 1024
[   88.029455][ T4873] EXT4-fs: Ignoring removed orlov option
[   88.038018][ T4873] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   88.136209][ T4877] loop3: detected capacity change from 0 to 512
[   88.180374][ T4877] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   88.193023][ T4877] ext4 filesystem being mounted at /78/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   88.672144][ T4880] loop0: detected capacity change from 0 to 2048
[   88.721187][ T4880] EXT4-fs (loop0): failed to initialize system zone (-117)
[   88.751800][ T4880] EXT4-fs (loop0): mount failed
[   88.758586][ T4882] loop4: detected capacity change from 0 to 512
[   88.785060][ T4882] EXT4-fs: Ignoring removed nobh option
[   88.819010][ T4882] EXT4-fs error (device loop4): ext4_do_update_inode:5563: inode #3: comm syz.4.371: corrupted inode contents
[   88.832444][ T4882] EXT4-fs error (device loop4): ext4_dirty_inode:6454: inode #3: comm syz.4.371: mark_inode_dirty error
[   89.056403][ T4880] siw: device registration error -23
[   89.067937][ T4882] EXT4-fs error (device loop4): ext4_do_update_inode:5563: inode #3: comm syz.4.371: corrupted inode contents
[   89.083116][ T4882] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #3: comm syz.4.371: mark_inode_dirty error
[   89.113515][ T4882] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.371: Failed to acquire dquot type 0
[   89.130524][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   89.142334][ T4882] EXT4-fs error (device loop4): ext4_do_update_inode:5563: inode #16: comm syz.4.371: corrupted inode contents
[   89.157870][ T4882] EXT4-fs error (device loop4): ext4_dirty_inode:6454: inode #16: comm syz.4.371: mark_inode_dirty error
[   89.174054][ T4882] EXT4-fs error (device loop4): ext4_do_update_inode:5563: inode #16: comm syz.4.371: corrupted inode contents
[   89.190273][ T4882] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.371: mark_inode_dirty error
[   89.217328][ T4882] EXT4-fs error (device loop4): ext4_do_update_inode:5563: inode #16: comm syz.4.371: corrupted inode contents
[   89.237148][ T4882] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem
[   89.251449][ T4882] EXT4-fs error (device loop4): ext4_do_update_inode:5563: inode #16: comm syz.4.371: corrupted inode contents
[   89.271284][ T4891] netlink: 'syz.2.373': attribute type 21 has an invalid length.
[   89.279182][ T4891] netlink: 156 bytes leftover after parsing attributes in process `syz.2.373'.
[   89.289868][ T4882] EXT4-fs error (device loop4): ext4_truncate:4592: inode #16: comm syz.4.371: mark_inode_dirty error
[   89.304943][ T4882] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem
[   89.319288][ T4882] EXT4-fs (loop4): 1 truncate cleaned up
[   89.329337][ T4882] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   89.343977][ T4882] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   89.364368][ T4882] syz.4.371 (4882) used greatest stack depth: 9544 bytes left
[   89.383088][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   89.514231][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   89.539800][ T4895] loop0: detected capacity change from 0 to 512
[   89.561425][ T4895] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.378: Failed to acquire dquot type 1
[   89.583652][ T4894] loop1: detected capacity change from 0 to 8192
[   89.597812][ T4898] bond1: entered promiscuous mode
[   89.603570][ T4898] bond1: entered allmulticast mode
[   89.615903][ T4898] 8021q: adding VLAN 0 to HW filter on device bond1
[   89.627504][ T4895] EXT4-fs error (device loop0): ext4_do_update_inode:5563: inode #16: comm syz.0.378: corrupted inode contents
[   89.650948][ T4898] bond1 (unregistering): Released all slaves
[   89.666097][ T4900] netlink: 20 bytes leftover after parsing attributes in process `syz.4.377'.
[   89.675281][ T4895] EXT4-fs error (device loop0): ext4_dirty_inode:6454: inode #16: comm syz.0.378: mark_inode_dirty error
[   89.679414][ T4905] netlink: 12 bytes leftover after parsing attributes in process `syz.3.376'.
[   89.703614][ T4895] EXT4-fs error (device loop0): ext4_do_update_inode:5563: inode #16: comm syz.0.378: corrupted inode contents
[   89.716518][ T4895] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.378: mark_inode_dirty error
[   89.729453][ T4895] EXT4-fs error (device loop0): ext4_do_update_inode:5563: inode #16: comm syz.0.378: corrupted inode contents
[   89.748067][ T4898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   89.758434][ T4898] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   89.766479][ T4895] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem
[   89.776843][ T4895] EXT4-fs error (device loop0): ext4_do_update_inode:5563: inode #16: comm syz.0.378: corrupted inode contents
[   89.792011][ T4895] EXT4-fs error (device loop0): ext4_truncate:4592: inode #16: comm syz.0.378: mark_inode_dirty error
[   89.803958][ T4895] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem
[   89.813537][ T4895] EXT4-fs (loop0): 1 truncate cleaned up
[   89.819858][ T4895] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   89.832615][ T4895] ext4 filesystem being mounted at /80/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   89.916872][ T4913] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.378: Failed to acquire dquot type 1
[   89.953854][ T4916] netlink: 'syz.4.382': attribute type 4 has an invalid length.
[   90.500555][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   90.696427][ T4937] loop0: detected capacity change from 0 to 512
[   90.733044][ T4937] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   90.772082][ T4941] lo speed is unknown, defaulting to 1000
[   91.125538][ T4937] EXT4-fs (loop0): 1 truncate cleaned up
[   91.159871][ T4937] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   91.201956][ T4946] loop4: detected capacity change from 0 to 1024
[   91.208914][ T4946] EXT4-fs: Ignoring removed orlov option
[   91.221504][ T4946] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   91.323972][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   91.422813][ T4961] lo speed is unknown, defaulting to 1000
[   91.591523][ T4966] loop2: detected capacity change from 0 to 512
[   91.629138][ T4966] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   91.642733][ T4966] ext4 filesystem being mounted at /81/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   92.137232][ T4959] loop3: detected capacity change from 0 to 512
[   92.172539][ T4959] EXT4-fs: Ignoring removed nobh option
[   92.422442][   T29] kauditd_printk_skb: 302 callbacks suppressed
[   92.422458][   T29] audit: type=1326 audit(1753922251.951:3386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4977 comm="syz.0.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff8fa9e9a9 code=0x7ffc0000
[   92.452219][   T29] audit: type=1326 audit(1753922251.951:3387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4977 comm="syz.0.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff8fa9e9a9 code=0x7ffc0000
[   92.476568][   T29] audit: type=1326 audit(1753922251.951:3388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4977 comm="syz.0.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7eff8fa9e9a9 code=0x7ffc0000
[   92.501268][   T29] audit: type=1326 audit(1753922251.951:3389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4977 comm="syz.0.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff8fa9e9a9 code=0x7ffc0000
[   92.525466][   T29] audit: type=1326 audit(1753922251.951:3390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4977 comm="syz.0.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7eff8fa9e9a9 code=0x7ffc0000
[   92.549027][   T29] audit: type=1326 audit(1753922251.951:3391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4977 comm="syz.0.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff8fa9e9a9 code=0x7ffc0000
[   92.572398][   T29] audit: type=1326 audit(1753922251.951:3392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4977 comm="syz.0.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7eff8fa9e9a9 code=0x7ffc0000
[   92.595659][   T29] audit: type=1326 audit(1753922251.951:3393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4977 comm="syz.0.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff8fa9e9a9 code=0x7ffc0000
[   92.620611][   T29] audit: type=1326 audit(1753922251.951:3394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4977 comm="syz.0.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7eff8fa9e9a9 code=0x7ffc0000
[   92.647154][   T29] audit: type=1326 audit(1753922251.951:3395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4977 comm="syz.0.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff8fa9e9a9 code=0x7ffc0000
[   92.707522][ T4978] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[   92.981741][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   93.013182][ T4959] EXT4-fs error (device loop3): ext4_do_update_inode:5563: inode #3: comm syz.3.388: corrupted inode contents
[   93.038176][ T4981] smc: net device bond0 applied user defined pnetid SYZ0
[   93.059515][ T4959] EXT4-fs error (device loop3): ext4_dirty_inode:6454: inode #3: comm syz.3.388: mark_inode_dirty error
[   93.098596][ T4959] EXT4-fs error (device loop3): ext4_do_update_inode:5563: inode #3: comm syz.3.388: corrupted inode contents
[   93.157189][ T4959] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.388: mark_inode_dirty error
[   93.192060][ T4959] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.388: Failed to acquire dquot type 0
[   93.244529][ T4959] EXT4-fs error (device loop3): ext4_do_update_inode:5563: inode #16: comm syz.3.388: corrupted inode contents
[   93.272307][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   93.325976][ T4959] EXT4-fs error (device loop3): ext4_dirty_inode:6454: inode #16: comm syz.3.388: mark_inode_dirty error
[   93.326089][ T4998] netlink: 'syz.0.392': attribute type 21 has an invalid length.
[   93.345203][ T4998] netlink: 156 bytes leftover after parsing attributes in process `syz.0.392'.
[   93.353646][ T4959] EXT4-fs error (device loop3): ext4_do_update_inode:5563: inode #16: comm syz.3.388: corrupted inode contents
[   93.367237][ T4959] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.388: mark_inode_dirty error
[   93.380199][ T4959] EXT4-fs error (device loop3): ext4_do_update_inode:5563: inode #16: comm syz.3.388: corrupted inode contents
[   93.392418][ T4959] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem
[   93.402376][ T4959] EXT4-fs error (device loop3): ext4_do_update_inode:5563: inode #16: comm syz.3.388: corrupted inode contents
[   93.434659][ T4959] EXT4-fs error (device loop3): ext4_truncate:4592: inode #16: comm syz.3.388: mark_inode_dirty error
[   93.446314][ T4959] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem
[   93.457017][ T4959] EXT4-fs (loop3): 1 truncate cleaned up
[   93.466912][ T4959] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   93.481832][ T4959] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   93.558886][ T5000] lo speed is unknown, defaulting to 1000
[   93.578076][ T5004] netlink: 'syz.1.395': attribute type 4 has an invalid length.
[   93.685496][ T5011] lo speed is unknown, defaulting to 1000
[   93.834157][ T5025] syz.3.396: attempt to access beyond end of device
[   93.834157][ T5025] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0
[   94.016955][ T5029] loop2: detected capacity change from 0 to 1024
[   94.031337][ T5029] EXT4-fs: Ignoring removed orlov option
[   94.254982][ T5036] lo speed is unknown, defaulting to 1000
[   94.596938][ T5032] loop4: detected capacity change from 0 to 8192
[   94.728282][ T5042] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[   94.986177][ T5049] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[   95.031605][ T5051] loop0: detected capacity change from 0 to 512
[   95.483737][ T5051] ext4 filesystem being mounted at /86/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   95.836396][ T5065] lo speed is unknown, defaulting to 1000
[   96.033970][ T5070] loop1: detected capacity change from 0 to 512
[   96.052244][ T5070] EXT4-fs: Ignoring removed nobh option
[   96.573179][ T5070] EXT4-fs error (device loop1): ext4_do_update_inode:5563: inode #3: comm syz.1.409: corrupted inode contents
[   96.640664][ T5074] lo speed is unknown, defaulting to 1000
[   96.652369][ T5070] EXT4-fs error (device loop1): ext4_dirty_inode:6454: inode #3: comm syz.1.409: mark_inode_dirty error
[   96.681105][ T5082] SELinux: failed to load policy
[   96.831751][ T5070] EXT4-fs error (device loop1): ext4_do_update_inode:5563: inode #3: comm syz.1.409: corrupted inode contents
[   96.859646][ T5089] loop4: detected capacity change from 0 to 2048
[   96.870000][ T5070] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #3: comm syz.1.409: mark_inode_dirty error
[   96.884199][ T5070] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.409: Failed to acquire dquot type 0
[   96.899785][ T5070] EXT4-fs error (device loop1): ext4_do_update_inode:5563: inode #16: comm syz.1.409: corrupted inode contents
[   96.915289][ T5070] EXT4-fs error (device loop1): ext4_dirty_inode:6454: inode #16: comm syz.1.409: mark_inode_dirty error
[   96.936341][ T5070] EXT4-fs error (device loop1): ext4_do_update_inode:5563: inode #16: comm syz.1.409: corrupted inode contents
[   96.962366][ T5070] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.409: mark_inode_dirty error
[   97.006782][ T5070] EXT4-fs error (device loop1): ext4_do_update_inode:5563: inode #16: comm syz.1.409: corrupted inode contents
[   97.040811][ T5089] EXT4-fs mount: 5 callbacks suppressed
[   97.040831][ T5089] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[   97.059521][ T5070] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem
[   97.069512][ T5070] EXT4-fs error (device loop1): ext4_do_update_inode:5563: inode #16: comm syz.1.409: corrupted inode contents
[   97.085706][ T5070] EXT4-fs error (device loop1): ext4_truncate:4592: inode #16: comm syz.1.409: mark_inode_dirty error
[   97.100965][ T5070] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem
[   97.116012][ T5070] EXT4-fs (loop1): 1 truncate cleaned up
[   97.131804][ T5070] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   97.150429][ T5070] ext4 filesystem being mounted at /78/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   97.224305][ T5112] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   97.240545][ T5112] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1978 with error 28
[   97.253202][ T5112] EXT4-fs (loop4): This should not happen!! Data will be lost
[   97.253202][ T5112] 
[   97.262997][ T5112] EXT4-fs (loop4): Total free blocks count 0
[   97.269201][ T5112] EXT4-fs (loop4): Free/Dirty block details
[   97.275176][ T5112] EXT4-fs (loop4): free_blocks=2415919104
[   97.281028][ T5112] EXT4-fs (loop4): dirty_blocks=1984
[   97.286485][ T5112] EXT4-fs (loop4): Block reservation details
[   97.292581][ T5112] EXT4-fs (loop4): i_reserved_data_blocks=124
[   97.317946][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   97.632329][ T5140] loop1: detected capacity change from 0 to 1024
[   97.645276][ T5140] EXT4-fs: Ignoring removed orlov option
[   97.734909][ T5145] loop2: detected capacity change from 0 to 1024
[   97.771858][ T5145] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   97.794926][ T5140] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   97.884434][ T5165] lo speed is unknown, defaulting to 1000
[   98.262554][  T176] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28
[   98.541982][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   98.582274][ T5186] loop3: detected capacity change from 0 to 512
[   98.622980][ T5186] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   98.648558][ T5186] EXT4-fs (loop3): 1 truncate cleaned up
[   98.665034][ T5186] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   98.684066][ T5190] loop2: detected capacity change from 0 to 8192
[   98.710889][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   98.750278][ T5195] loop3: detected capacity change from 0 to 512
[   98.798678][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   98.808622][ T5195] __quota_error: 139 callbacks suppressed
[   98.808639][ T5195] Quota error (device loop3): do_check_range: Getting dqdh_next_free 256 out of range 0-7
[   98.845134][ T5193] SELinux: failed to load policy
[   98.859962][ T5195] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[   98.871125][ T5195] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.423: Failed to acquire dquot type 1
[   98.883116][ T5195] EXT4-fs error (device loop3): ext4_do_update_inode:5563: inode #16: comm syz.3.423: corrupted inode contents
[   98.895927][ T5195] EXT4-fs error (device loop3): ext4_dirty_inode:6454: inode #16: comm syz.3.423: mark_inode_dirty error
[   98.921075][ T5188] netlink: 4 bytes leftover after parsing attributes in process `+}[@'.
[   98.929798][ T5188] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   98.937624][ T5188] batman_adv: batadv0: Removing interface: batadv_slave_0
[   98.957376][ T5195] EXT4-fs error (device loop3): ext4_do_update_inode:5563: inode #16: comm syz.3.423: corrupted inode contents
[   98.979735][ T5188] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   98.987253][ T5188] batman_adv: batadv0: Removing interface: batadv_slave_1
[   98.997667][ T5195] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.423: mark_inode_dirty error
[   99.064943][ T5195] EXT4-fs error (device loop3): ext4_do_update_inode:5563: inode #16: comm syz.3.423: corrupted inode contents
[   99.110185][ T5202] lo speed is unknown, defaulting to 1000
[   99.123909][ T5195] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem
[   99.137811][ T5195] EXT4-fs error (device loop3): ext4_do_update_inode:5563: inode #16: comm syz.3.423: corrupted inode contents
[   99.150906][ T5195] EXT4-fs error (device loop3): ext4_truncate:4592: inode #16: comm syz.3.423: mark_inode_dirty error
[   99.163997][ T5195] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem
[   99.171182][   T29] audit: type=1400 audit(1753922258.701:3531): avc:  denied  { block_suspend } for  pid=5203 comm="syz.0.425" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   99.195849][ T5195] EXT4-fs (loop3): 1 truncate cleaned up
[   99.215085][ T5195] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   99.243008][ T5195] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   99.258016][ T5208] netlink: 4 bytes leftover after parsing attributes in process `syz.1.426'.
[   99.295533][ T5208] team0: entered promiscuous mode
[   99.300769][ T5208] team0: entered allmulticast mode
[   99.315337][ T5204] lo speed is unknown, defaulting to 1000
[   99.357523][ T5209] Quota error (device loop3): do_check_range: Getting dqdh_next_free 256 out of range 0-7
[   99.377714][ T5209] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[   99.404009][ T5209] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.423: Failed to acquire dquot type 1
[   99.461531][ T5213] netlink: 4 bytes leftover after parsing attributes in process `syz.4.430'.
[   99.624136][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   99.886283][ T5229] loop2: detected capacity change from 0 to 512
[   99.893100][ T5229] EXT4-fs: Ignoring removed mblk_io_submit option
[   99.899608][ T5229] EXT4-fs: Ignoring removed bh option
[   99.905496][ T5229] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   99.920652][ T5229] EXT4-fs (loop2): 1 truncate cleaned up
[   99.926862][ T5229] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  100.356489][ T5233] syzkaller0: entered promiscuous mode
[  100.362085][ T5233] syzkaller0: entered allmulticast mode
[  100.451281][ T5242] loop0: detected capacity change from 0 to 1024
[  100.694035][ T5245] lo speed is unknown, defaulting to 1000
[  100.878145][ T5242] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  100.899497][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  100.952626][ T5254] netlink: 'syz.2.438': attribute type 3 has an invalid length.
[  101.058359][ T5261] SELinux:  policydb magic number 0xa202123 does not match expected magic number 0xf97cff8c
[  101.076795][ T5261] SELinux: failed to load policy
[  101.204087][ T5267] loop3: detected capacity change from 0 to 256
[  101.216809][ T5267] netlink: 4 bytes leftover after parsing attributes in process `syz.3.443'.
[  101.237004][ T5265] lo speed is unknown, defaulting to 1000
[  101.262737][   T29] audit: type=1326 audit(1753922260.751:3532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5266 comm="syz.3.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e0a0de9a9 code=0x7ffc0000
[  101.286488][   T29] audit: type=1326 audit(1753922260.751:3533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5266 comm="syz.3.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e0a0de9a9 code=0x7ffc0000
[  101.312494][   T29] audit: type=1326 audit(1753922260.751:3534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5266 comm="syz.3.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f5e0a0de9a9 code=0x7ffc0000
[  101.336485][   T29] audit: type=1326 audit(1753922260.751:3535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5266 comm="syz.3.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e0a0de9a9 code=0x7ffc0000
[  101.360389][   T29] audit: type=1326 audit(1753922260.751:3536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5266 comm="syz.3.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e0a0de9a9 code=0x7ffc0000
[  101.416156][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.624157][ T5268] netlink: 4 bytes leftover after parsing attributes in process `+}[@'.
[  102.009577][ T5292] loop0: detected capacity change from 0 to 2048
[  102.029298][ T5292] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  102.155816][ T5300] lo speed is unknown, defaulting to 1000
[  102.196642][ T5299] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  102.230650][ T5299] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 682 with error 28
[  102.243337][ T5299] EXT4-fs (loop0): This should not happen!! Data will be lost
[  102.243337][ T5299] 
[  102.253789][ T5299] EXT4-fs (loop0): Total free blocks count 0
[  102.259971][ T5299] EXT4-fs (loop0): Free/Dirty block details
[  102.266200][ T5299] EXT4-fs (loop0): free_blocks=2415919104
[  102.272130][ T5299] EXT4-fs (loop0): dirty_blocks=1040
[  102.277605][ T5299] EXT4-fs (loop0): Block reservation details
[  102.283966][ T5299] EXT4-fs (loop0): i_reserved_data_blocks=65
[  102.644484][ T5305] loop3: detected capacity change from 0 to 512
[  102.652027][ T5305] EXT4-fs: Ignoring removed mblk_io_submit option
[  102.658821][ T5305] EXT4-fs: Ignoring removed bh option
[  102.666272][ T5305] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  102.686591][ T5305] EXT4-fs (loop3): 1 truncate cleaned up
[  102.693260][ T5305] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  102.986877][ T5308] syzkaller0: entered promiscuous mode
[  102.992458][ T5308] syzkaller0: entered allmulticast mode
[  103.032237][ T4726] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28
[  103.102977][ T5317] loop1: detected capacity change from 0 to 1024
[  103.110669][ T5317] EXT4-fs: Ignoring removed orlov option
[  103.157891][ T5314] SELinux: failed to load policy
[  103.191128][ T5317] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  103.291075][ T5321] lo speed is unknown, defaulting to 1000
[  103.328250][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.356347][ T5323] loop2: detected capacity change from 0 to 256
[  103.412343][ T5323] netlink: 4 bytes leftover after parsing attributes in process `syz.2.455'.
[  103.702098][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.824534][   T29] kauditd_printk_skb: 165 callbacks suppressed
[  103.824547][   T29] audit: type=1326 audit(1753922263.351:3702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5326 comm="syz.3.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5e0a0d5967 code=0x7ffc0000
[  103.854831][   T29] audit: type=1326 audit(1753922263.351:3703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5326 comm="syz.3.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5e0a07ab89 code=0x7ffc0000
[  103.878881][   T29] audit: type=1326 audit(1753922263.351:3704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5326 comm="syz.3.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f5e0a0de9a9 code=0x7ffc0000
[  103.903062][   T29] audit: type=1326 audit(1753922263.361:3705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5326 comm="syz.3.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5e0a0d5967 code=0x7ffc0000
[  103.926304][   T29] audit: type=1326 audit(1753922263.361:3706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5326 comm="syz.3.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5e0a07ab89 code=0x7ffc0000
[  103.949837][   T29] audit: type=1326 audit(1753922263.361:3707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5326 comm="syz.3.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f5e0a0de9a9 code=0x7ffc0000
[  103.973112][   T29] audit: type=1326 audit(1753922263.371:3708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5326 comm="syz.3.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5e0a0d5967 code=0x7ffc0000
[  103.996944][   T29] audit: type=1326 audit(1753922263.371:3709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5326 comm="syz.3.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5e0a07ab89 code=0x7ffc0000
[  104.020625][   T29] audit: type=1326 audit(1753922263.371:3710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5326 comm="syz.3.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f5e0a0de9a9 code=0x7ffc0000
[  104.044010][   T29] audit: type=1326 audit(1753922263.381:3711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5326 comm="syz.3.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5e0a0d5967 code=0x7ffc0000
[  104.118722][ T5335] netlink: 'syz.4.458': attribute type 3 has an invalid length.
[  104.120710][ T5336] loop2: detected capacity change from 0 to 1024
[  104.133674][ T5336] EXT4-fs: Ignoring removed orlov option
[  104.151595][ T5336] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  104.270858][ T5346] netlink: 16 bytes leftover after parsing attributes in process `syz.1.470'.
[  104.337868][ T5333] netlink: 4 bytes leftover after parsing attributes in process `+}[@'.
[  104.346332][ T5333] batman_adv: batadv0: Removing interface: batadv_slave_0
[  104.357633][ T5333] batman_adv: batadv0: Removing interface: batadv_slave_1
[  104.405373][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.694901][ T5369] loop3: detected capacity change from 0 to 128
[  104.703839][ T5369] EXT4-fs: Ignoring removed nobh option
[  104.719317][ T5369] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  104.733840][ T5369] ext4 filesystem being mounted at /98/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  104.765165][ T5367] loop0: detected capacity change from 0 to 512
[  104.796209][ T5367] EXT4-fs (loop0): orphan cleanup on readonly fs
[  104.811566][ T5367] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.467: bg 0: block 248: padding at end of block bitmap is not set
[  104.826787][ T5367] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.467: Failed to acquire dquot type 1
[  104.839236][ T5367] EXT4-fs (loop0): 1 truncate cleaned up
[  104.845668][ T5367] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  104.985748][ T5380] loop1: detected capacity change from 0 to 1024
[  105.005922][ T5380] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  105.329334][ T5367] syz.0.467 (5367) used greatest stack depth: 9176 bytes left
[  105.468587][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.548041][ T5388] loop4: detected capacity change from 0 to 1024
[  105.564047][ T5390] bridge0: entered allmulticast mode
[  105.580173][ T5388] EXT4-fs: Ignoring removed orlov option
[  105.590267][ T5390] netlink: 4 bytes leftover after parsing attributes in process `syz.0.474'.
[  105.611079][ T5390] bridge_slave_1: left allmulticast mode
[  105.617136][ T5390] bridge_slave_1: left promiscuous mode
[  105.623278][ T5390] bridge0: port 2(bridge_slave_1) entered disabled state
[  105.631844][ T5390] bridge_slave_0: left allmulticast mode
[  105.637690][ T5390] bridge_slave_0: left promiscuous mode
[  105.643417][ T5390] bridge0: port 1(bridge_slave_0) entered disabled state
[  105.656786][ T5388] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  105.687658][ T5390] bridge0 (unregistering): left allmulticast mode
[  105.766816][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.780445][ T3300] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  105.828134][ T5399] loop2: detected capacity change from 0 to 256
[  105.999614][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.031609][ T5414] loop3: detected capacity change from 0 to 1024
[  106.038445][ T5414] EXT4-fs: Ignoring removed orlov option
[  106.048966][ T5414] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  106.322410][ T5440] netlink: 16 bytes leftover after parsing attributes in process `syz.0.483'.
[  106.420414][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.522788][ T5449] loop3: detected capacity change from 0 to 1024
[  106.549749][ T5449] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  106.649311][ T5450] loop4: detected capacity change from 0 to 512
[  106.684644][ T5450] EXT4-fs (loop4): orphan cleanup on readonly fs
[  106.702414][ T5450] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.485: bg 0: block 248: padding at end of block bitmap is not set
[  106.750952][ T5450] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.485: Failed to acquire dquot type 1
[  106.759174][ T5456] loop1: detected capacity change from 0 to 128
[  106.769918][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.783324][ T5450] EXT4-fs (loop4): 1 truncate cleaned up
[  106.807575][ T5456] EXT4-fs: Ignoring removed nobh option
[  106.818054][ T5450] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  106.835847][ T5456] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  106.868975][ T5456] ext4 filesystem being mounted at /92/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  107.035399][ T5465] loop2: detected capacity change from 0 to 2048
[  107.049446][ T5465] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  107.249632][ T5469] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  107.305390][ T5469] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 124 with max blocks 68 with error 28
[  107.318113][ T5469] EXT4-fs (loop2): This should not happen!! Data will be lost
[  107.318113][ T5469] 
[  107.327865][ T5469] EXT4-fs (loop2): Total free blocks count 0
[  107.334188][ T5469] EXT4-fs (loop2): Free/Dirty block details
[  107.340297][ T5469] EXT4-fs (loop2): free_blocks=2415919104
[  107.346033][ T5469] EXT4-fs (loop2): dirty_blocks=1280
[  107.351606][ T5469] EXT4-fs (loop2): Block reservation details
[  107.357649][ T5469] EXT4-fs (loop2): i_reserved_data_blocks=80
[  107.394364][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.439862][ T5476] bridge0: entered allmulticast mode
[  107.449093][ T5476] netlink: 4 bytes leftover after parsing attributes in process `syz.4.495'.
[  107.458301][ T5476] gretap0: left allmulticast mode
[  107.463589][ T5476] gretap0: left promiscuous mode
[  107.469051][ T5476] bridge0: port 3(gretap0) entered disabled state
[  107.476632][ T5476] bridge_slave_1: left allmulticast mode
[  107.482399][ T5476] bridge_slave_1: left promiscuous mode
[  107.488200][ T5476] bridge0: port 2(bridge_slave_1) entered disabled state
[  107.496732][ T5476] bridge_slave_0: left allmulticast mode
[  107.502433][ T5476] bridge_slave_0: left promiscuous mode
[  107.508337][ T5476] bridge0: port 1(bridge_slave_0) entered disabled state
[  107.528082][ T5476] bridge0 (unregistering): left allmulticast mode
[  107.616031][ T3299] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  107.671708][ T5488] loop1: detected capacity change from 0 to 256
[  107.868794][ T5497] netlink: 'syz.4.501': attribute type 4 has an invalid length.
[  107.917878][  T340] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28
[  107.927205][ T5501] loop4: detected capacity change from 0 to 512
[  107.937965][ T5499] loop3: detected capacity change from 0 to 512
[  107.947854][ T5501] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  107.957764][ T5501] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities
[  107.967030][ T5499] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  107.975176][ T5499] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002]
[  107.983897][ T5499] EXT4-fs (loop3): orphan cleanup on readonly fs
[  107.992237][ T5499] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #13: comm syz.3.502: iget: bad i_size value: 12154761577498
[  108.020756][ T5499] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.502: couldn't read orphan inode 13 (err -117)
[  108.034547][ T5499] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  108.052212][ T5506] Invalid ELF header magic: != ELF
[  108.064890][ T5506] loop2: detected capacity change from 0 to 512
[  108.067289][ T5501] lo speed is unknown, defaulting to 1000
[  108.072551][ T5507] EXT4-fs warning (device loop3): dx_probe:861: inode #2: comm syz.3.502: dx entry: limit 65535 != root limit 120
[  108.089261][ T5507] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.502: Corrupt directory, running e2fsck is recommended
[  108.113875][ T5506] EXT4-fs (loop2): #blocks per group too big: 466944
[  108.124787][ T3300] EXT4-fs warning (device loop3): dx_probe:861: inode #2: comm syz-executor: dx entry: limit 65535 != root limit 120
[  108.137230][ T3300] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz-executor: Corrupt directory, running e2fsck is recommended
[  108.157918][ T3300] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 3: comm syz-executor: path /106/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0
[  108.179275][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.386462][ T5529] bridge0: entered allmulticast mode
[  108.393380][ T5529] netlink: 4 bytes leftover after parsing attributes in process `syz.3.511'.
[  108.412280][ T5529] bridge_slave_1: left allmulticast mode
[  108.418267][ T5529] bridge_slave_1: left promiscuous mode
[  108.424014][ T5529] bridge0: port 2(bridge_slave_1) entered disabled state
[  108.432261][ T5529] bridge_slave_0: left allmulticast mode
[  108.438130][ T5529] bridge_slave_0: left promiscuous mode
[  108.444039][ T5529] bridge0: port 1(bridge_slave_0) entered disabled state
[  108.465089][ T5529] bridge0 (unregistering): left allmulticast mode
[  108.505778][ T5525] lo speed is unknown, defaulting to 1000
[  108.628231][ T5546] loop0: detected capacity change from 0 to 128
[  108.635322][ T5546] EXT4-fs: Ignoring removed nobh option
[  108.662013][ T5546] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  108.674889][ T5546] ext4 filesystem being mounted at /107/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  108.694869][ T5550] netlink: 16 bytes leftover after parsing attributes in process `syz.3.512'.
[  109.479754][ T5559] loop2: detected capacity change from 0 to 512
[  109.521169][ T5564] loop1: detected capacity change from 0 to 512
[  109.523944][   T29] kauditd_printk_skb: 604 callbacks suppressed
[  109.523960][   T29] audit: type=1326 audit(1753922269.051:4312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5561 comm="syz.3.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e0a0de9a9 code=0x7ffc0000
[  109.529434][ T5564] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  109.533814][   T29] audit: type=1326 audit(1753922269.051:4313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5561 comm="syz.3.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7f5e0a0de9a9 code=0x7ffc0000
[  109.557430][ T5564] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002]
[  109.565603][   T29] audit: type=1326 audit(1753922269.051:4314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5561 comm="syz.3.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e0a0de9a9 code=0x7ffc0000
[  109.595569][ T5564] EXT4-fs (loop1): orphan cleanup on readonly fs
[  109.604860][   T29] audit: type=1326 audit(1753922269.051:4315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5561 comm="syz.3.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7f5e0a0de9a9 code=0x7ffc0000
[  109.669387][   T29] audit: type=1326 audit(1753922269.051:4316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5561 comm="syz.3.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e0a0de9a9 code=0x7ffc0000
[  109.700897][ T5564] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #13: comm syz.1.518: iget: bad i_size value: 12154761577498
[  109.727694][ T5559] EXT4-fs (loop2): orphan cleanup on readonly fs
[  109.734692][ T5564] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.518: couldn't read orphan inode 13 (err -117)
[  109.755215][ T5559] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.515: bg 0: block 248: padding at end of block bitmap is not set
[  109.781541][ T5559] Quota error (device loop2): write_blk: dquota write failed
[  109.782412][ T3306] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  109.789306][ T5559] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  109.799482][ T5564] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  109.809163][ T5559] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.515: Failed to acquire dquot type 1
[  109.839012][ T5559] EXT4-fs (loop2): 1 truncate cleaned up
[  109.860845][ T5559] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  109.880192][ T5569] loop3: detected capacity change from 0 to 512
[  109.892283][ T5569] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  109.902416][ T5569] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities
[  109.906067][ T5572] EXT4-fs warning (device loop1): dx_probe:861: inode #2: comm syz.1.518: dx entry: limit 65535 != root limit 120
[  109.923440][ T5572] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.518: Corrupt directory, running e2fsck is recommended
[  109.972653][   T29] audit: type=1326 audit(1753922269.481:4317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5570 comm="syz.0.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff8fa9e9a9 code=0x7ffc0000
[  109.996509][   T29] audit: type=1326 audit(1753922269.481:4318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5570 comm="syz.0.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff8fa9e9a9 code=0x7ffc0000
[  110.020390][   T29] audit: type=1326 audit(1753922269.481:4319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5570 comm="syz.0.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7eff8fa9e9a9 code=0x7ffc0000
[  110.024392][ T5569] lo speed is unknown, defaulting to 1000
[  110.052795][ T3299] EXT4-fs warning (device loop1): dx_probe:861: inode #2: comm syz-executor: dx entry: limit 65535 != root limit 120
[  110.065506][ T3299] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz-executor: Corrupt directory, running e2fsck is recommended
[  110.086821][ T3299] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 3: comm syz-executor: path /98/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0
[  110.169218][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  110.178897][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  110.279965][ T5594] netlink: 'syz.3.528': attribute type 4 has an invalid length.
[  110.391783][ T5603] program syz.3.530 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  110.409520][ T5603] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  110.477208][ T5601] lo speed is unknown, defaulting to 1000
[  111.194873][ T5618] loop4: detected capacity change from 0 to 128
[  111.204885][ T5618] EXT4-fs: Ignoring removed nobh option
[  111.271284][ T5618] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  111.286881][ T5618] ext4 filesystem being mounted at /98/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  111.307520][ T5622] netlink: 16 bytes leftover after parsing attributes in process `syz.2.531'.
[  111.428460][ T5630] lo speed is unknown, defaulting to 1000
[  111.981310][ T5635] loop3: detected capacity change from 0 to 1024
[  112.077839][ T5635] EXT4-fs: Ignoring removed orlov option
[  112.101488][ T5635] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  112.163655][ T5642] loop1: detected capacity change from 0 to 2048
[  112.172876][ T5640] lo speed is unknown, defaulting to 1000
[  112.212877][ T5642] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  112.235993][ T3315] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  112.282274][ T5647] ==================================================================
[  112.294901][ T5647] BUG: KCSAN: data-race in filemap_read / filemap_read
[  112.301946][ T5647] 
[  112.304933][ T5647] read to 0xffff888119bcaca8 of 8 bytes by task 5635 on cpu 1:
[  112.313087][ T5647]  filemap_read+0x6f/0xa00
[  112.317703][ T5647]  generic_file_read_iter+0x79/0x330
[  112.323007][ T5647]  ext4_file_read_iter+0x1cc/0x290
[  112.328135][ T5647]  copy_splice_read+0x3c1/0x5f0
[  112.333010][ T5647]  splice_direct_to_actor+0x290/0x680
[  112.338410][ T5647]  do_splice_direct+0xda/0x150
[  112.343206][ T5647]  do_sendfile+0x380/0x650
[  112.347990][ T5647]  __x64_sys_sendfile64+0x105/0x150
[  112.353363][ T5647]  x64_sys_call+0x2bb0/0x2ff0
[  112.358062][ T5647]  do_syscall_64+0xd2/0x200
[  112.362878][ T5647]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  112.368835][ T5647] 
[  112.371317][ T5647] write to 0xffff888119bcaca8 of 8 bytes by task 5647 on cpu 0:
[  112.379039][ T5647]  filemap_read+0x974/0xa00
[  112.383556][ T5647]  generic_file_read_iter+0x79/0x330
[  112.389394][ T5647]  ext4_file_read_iter+0x1cc/0x290
[  112.395236][ T5647]  copy_splice_read+0x3c1/0x5f0
[  112.401052][ T5647]  splice_direct_to_actor+0x290/0x680
[  112.406443][ T5647]  do_splice_direct+0xda/0x150
[  112.411647][ T5647]  do_sendfile+0x380/0x650
[  112.416061][ T5647]  __x64_sys_sendfile64+0x105/0x150
[  112.421968][ T5647]  x64_sys_call+0x2bb0/0x2ff0
[  112.426927][ T5647]  do_syscall_64+0xd2/0x200
[  112.432904][ T5647]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  112.439069][ T5647] 
[  112.441511][ T5647] value changed: 0x0000000000000117 -> 0x0000000000000118
[  112.448858][ T5647] 
[  112.451274][ T5647] Reported by Kernel Concurrency Sanitizer on:
[  112.457965][ T5647] CPU: 0 UID: 0 PID: 5647 Comm: syz.3.535 Not tainted 6.16.0-syzkaller-06699-ge8d780dcd957 #0 PREEMPT(voluntary) 
[  112.473283][ T5647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  112.486866][ T5647] ==================================================================
[  112.531071][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000900.
[  112.553551][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.