last executing test programs:

1.674548194s ago: executing program 0 (id=429):
r0 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e4, 0x1, 0x8}, &(0x7f0000000040), &(0x7f0000000000))
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00"/11], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffefc}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x10000}, 0x18)
io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, 0xfffffffffffffffe, 0x0)

1.615071588s ago: executing program 4 (id=430):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
io_cancel(0x0, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x16, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x10000000, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0xc3}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket(0x10, 0x80003, 0x0)
socket$key(0xf, 0x3, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c000000"], 0x50)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a808682b7fc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c00008008000340000000023f0000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a31"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

1.614885298s ago: executing program 0 (id=431):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x32)
write(r1, &(0x7f00000001c0)="49bda8f11851b8436bebb25ac5f8202ffb", 0x11)
sendfile(r1, r0, 0x0, 0x3ffff)
sendfile(r1, r0, 0x0, 0x7ffffffffffffffd)
syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="b405000000000000611034000000000063012000000000009500000000000000f4c32bf3df05a034da1b7fdcf645f3580fe49be316bdb665f1b42ff7ef474df46c0f44ef6fb5e031f7cfef720e05af49fad256a74dbc05ae220102a88002814a88e2fac93f6bba2d4d44db49d45e449d31fa52c326486bc1c908dd9b372f7a455c9566ed5ee0a65f3909cfe1219a0a38b416dc55927f32ab452e0ccaf193c27af10a12c42ef8a3199d0fad0a9521094cc7acdcdff80231586f968fab531515e8aaaa1d4a225592ebf062bba60775d0b7daa8ba68c0cd0642ce3efca015362a7b63f629629efb"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='comm\x00')
ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f00000000c0)={0x0, 0x3, 0x13})
write$cgroup_subtree(r2, &(0x7f0000000680)={[{0x2d, 'rlimit'}]}, 0x8)
openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff)

1.471763597s ago: executing program 4 (id=434):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x2}, 0xfffffcce)
r1 = epoll_create(0xb213)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)={0xa0000000})
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000280)={0x2000000})
bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, 0x0, &(0x7f0000001640)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000)
r5 = getpid()
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x8, 0x3, 0x4e8, 0x340, 0x11, 0x148, 0x0, 0x0, 0x450, 0x2a8, 0x2a8, 0x450, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x38, 0x0, [{0x4, 0x1, 0x7f}, {0x4, 0x1, 0x2, 0x5}, {0xdccf, 0x3, 0xfd, 0x2}, {0x6, 0x1a, 0x0, 0x7}, {0x8, 0x4f, 0x4, 0x8}, {0x0, 0x9b, 0x1, 0x4}, {0x80, 0x6, 0x5}, {0x0, 0x2, 0x8, 0x7}, {0xff, 0x6, 0xaa, 0x5}, {0x3, 0xc, 0x2, 0x1}, {0x0, 0xc5, 0x7}, {0x1, 0xfb, 0x3, 0x1}, {0x1, 0x0, 0x7f, 0x3}, {0x5, 0x7, 0x2, 0x8}, {0x0, 0xe, 0x9, 0x9}, {0x86c0, 0x4, 0xf, 0x1}, {0x7, 0x78, 0x81, 0x7fffffff}, {0x5, 0x1, 0x5}, {0xe, 0xf6, 0x4, 0x40f}, {0xdc, 0x8, 0x2, 0x2}, {0xef, 0x7, 0x1, 0x6}, {0x7, 0x4, 0x5, 0x8001}, {0x9, 0x80, 0x12, 0x2}, {0x10, 0x1, 0x16}, {0xd, 0x92, 0x8, 0x2}, {0x3, 0x10, 0x3, 0x10001}, {0x4, 0x1e, 0x7, 0xe}, {0x5, 0x0, 0x8d, 0x2}, {0xd2a3, 0x3, 0x3, 0x5}, {0x340, 0x9, 0x7, 0x5}, {0x3, 0x6, 0xff, 0x4}, {0xff, 0x0, 0x2}, {0x8000, 0x5, 0x43, 0xea}, {0x7fff, 0x15, 0xac, 0xffffffff}, {0x0, 0x5, 0x6, 0x2}, {0x5, 0xa2, 0x2, 0x2}, {0x2, 0x4, 0x7, 0x9}, {0x5ae, 0x81, 0xf6, 0x3ff}, {0x1, 0x80, 0xff, 0x29}, {0x2, 0x8, 0x3, 0xb}, {0xffff, 0x2c, 0xf}, {0x7, 0x8, 0x4, 0x143}, {0x4, 0x2, 0x0, 0xfc56}, {0x2, 0x5, 0x31, 0x7}, {0x5, 0x9, 0x9, 0x2}, {0x1, 0x40, 0x3, 0x3}, {0x100, 0x0, 0x80, 0x655}, {0x9, 0x6, 0x7, 0x71}, {0x5, 0x8a, 0x0, 0x8}, {0x4, 0x40, 0xb5, 0x2}, {0x0, 0x8e, 0x4, 0xfffffc00}, {0xfffd, 0x0, 0x1, 0x7fff}, {0x40, 0x2d, 0x4, 0x8bd}, {0x8, 0xbf, 0xf, 0x1a}, {0xb, 0x9, 0x7, 0x7}, {0xfff, 0x4, 0x4, 0x6}, {0x359, 0x9, 0xe, 0x779}, {0x0, 0x2, 0xf8, 0x3}, {0x220, 0x5, 0xb2, 0x3b7}, {0xe, 0x0, 0x80, 0x1}, {0x4b7c, 0xe0, 0xaa, 0x6}, {0x1, 0x2, 0xb}, {0x1ff, 0x7f, 0x4, 0xfff}, {0x5, 0x7, 0x8, 0x10001}], {0x4}}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @rand_addr=0x64010102, 0x0, 0x0, 'vlan0\x00', 'dvmrp1\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fd0000cb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000015c0)={'syztnl0\x00', &(0x7f0000001540)={'syztnl1\x00', 0x0, 0x7, 0x7, 0x0, 0xfffffffa, {{0x14, 0x4, 0x2, 0x3f, 0x50, 0x68, 0x0, 0x38, 0x2f, 0x0, @multicast2, @rand_addr=0x64010100, {[@cipso={0x86, 0x3b, 0x2, [{0x6, 0xc, "99da9cef5a7249b77d42"}, {0x1, 0x7, "661f66b01d"}, {0x0, 0x6, "b95ed6e6"}, {0x5, 0x5, "ea3901"}, {0x5, 0x6, "b2fe2573"}, {0x5, 0x11, "53a31fcae4fae0222c7b9d11faffd7"}]}]}}}}})
bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x13, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = syz_io_uring_setup(0x4175, &(0x7f0000000180)={0x0, 0xbf56, 0x10000, 0x2, 0x2d0}, &(0x7f0000000440), &(0x7f0000000400))
io_uring_enter(r7, 0x7b1d, 0xe93c, 0xc, 0x0, 0x0)
io_uring_register$IORING_REGISTER_NAPI(r7, 0x1b, &(0x7f00000000c0)={0x5, 0x6}, 0x1)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303, 0x37}, "475566172f45f011", "bd14060000000000000092f94413582b", "00001000", "4e67cb72f328ac2f"}, 0x28)
tkill(r5, 0x37)
preadv2(r4, &(0x7f0000000000)=[{&(0x7f0000000780)=""/66, 0x42}], 0x1, 0x80, 0x8000, 0x0)

1.42404527s ago: executing program 1 (id=435):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd3a, 0x0, 0x0, 0x0, 0x100}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2, <r3=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r3, &(0x7f0000000600), &(0x7f0000000780)=""/70}, 0x20)

1.332892936s ago: executing program 1 (id=437):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
bind$inet(r0, 0x0, 0xfffffdf6)
syz_emit_ethernet(0xbe, &(0x7f0000000a40)=ANY=[@ANYBLOB], 0x0)
io_uring_setup(0x258d, 0x0)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f0000000a00)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x5, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r2, 0x0, 0x10000001}, 0x18)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x20000000000000c2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x14}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="03000000c31006002000128008000100736974001400028008000200ac14142d08000c00ee00"], 0x40}}, 0x4008040)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="d8000000150081044e81f782db44b9040a78080206000000040000a118000300ff05000006000e1208000f0100810401a80016eaa400010000005f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e00600000000d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed0bfffdccf85df947e5e0", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)

1.332599696s ago: executing program 1 (id=438):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000880)={[{@nomblk_io_submit}]}, 0x1, 0x44a, &(0x7f0000000400)="$eJzs281vG0UbAPBn10n6vv1KKOWjpUCgQkR8JE1aoAcuIJA4FIEEh3IMTlpVdRvUBIlWFQ0IlQsSqgRnxBGJv4AbFwSckLjCHVWqoJcWTkG73m1t106b1rFD/ftJm8x4x555PDve2R07gIE1nv1JIrZGxG8RMVrPNhcYr/+7evls9e/LZ6tJrKy89WeSl7ty+Wy1LFo+b0uRmUgj0k+SopJmi6fPHJ+t1eZPFfmppRPvTS2ePvPssROzR+ePzp+cOXjwwP7pF56fea4rcWZxXdn94cKeXa+9c+H16uEL7/70bdbercX+xji6ZTwL/K+VXOu+J7pdWZ9ta0gnQ31sCGtSiYisu4bz8T8albjeeaPx6sd9bRywrrJz06bOu5dXgLtYEv1uAdAf5Yk+u/4ttx5NPTaESy/VL4CyuK8WW33PUKRFmeGW69tuGo+Iw8v/fJVtsU73IQAAGn1W/fJQPNNu/pfG/Q3lthdrKGMRcU9E7IiIeyNiZ0TcF5GXfSAiHlxj/a1LQzfOf9KLtxXYLcrmfy8Wa1vN879y9hdjlSK3LY9/ODlyrDa/r3hPJmJ4U5afXqWO71/59fNO+xrnf9mW1V/OBYt2XBxquUE3N7s0m09Ku+DSRxG7h9rFn1xbCUgiYldE7F7bS28vE8ee+mZPp0I3j38VXVhnWvk64sl6/y9HS/ylZPX1yan/RW1+31R5VNzo51/Ov9mp/juKvwuy/t/cfPy3FhlLGtdrF9dex/nfP+14TXO7x/9I8nbeLyPFYx/MLi2dmo4YSQ7l+abHZ64/t8yX5bP4J/a2H/87iudk9TwUEdlB/HBEPBIRjxZtfywiHo+IvavE/+PLnfdthP6fa/v5d+34b+n/tScqx3/4rlP9t9b/B/LURPFI/vl3E7fawDt57wAAAOC/Is2/A5+kk9fSaTo5Wf8O/87YnNYWFpeePrLw/sm5+nflx2I4Le90jTbcD51OlotXrOdninvF5f79xX3jLyr/z/OT1YXaXJ9jh0G3pcP4z/xR6XfrgHXXbh1tZqQPDQF6rnX8p83Zc2/0sjFAT/m9Ngyum4z/tFftAHrP+R8GV7vxf64lby0A7k7O/zC4jH8YXMY/DC7jHwbSnfyuX2KQE5FuiGZIrFOi359MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3fFvAAAA//+uEO7O")
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0x5, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc000000850000002300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xdc0, 0x0, &(0x7f0000000080)="c14eb0800060d308098e00000000fbd1c168f956014ef772cbd4e89b8a937462a87eaffd19fb6c8b994df281ef4e51df22025c98e8da", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x1c)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x02\x00', 0x8000, 0x19e)
r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x1, 0x6)
fchdir(r3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1/file3\x00', 0x0)
renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0)
ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000600)={0x23e3, 0x0, 0xd, 0x2})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0)
setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, 0xfffffffffffffffd, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x2, @private0}, 0x1c)
mkdir(&(0x7f0000000000)='.\x02\x00', 0x80)
renameat2(r4, &(0x7f00000001c0)='./file0\x00', r4, &(0x7f0000000200)='.\x02\x00', 0x4)
ioctl$X86_IOC_RDMSR_REGS(r4, 0xc02063a0, &(0x7f0000000240)=[0x1f, 0x7, 0x1, 0x401, 0x2, 0x7, 0x3, 0x2])

1.101301761s ago: executing program 1 (id=440):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0)

1.055916584s ago: executing program 1 (id=441):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x32)
sendfile(r1, r0, 0x0, 0x3ffff)

951.89494ms ago: executing program 1 (id=442):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000008c0)={'ip6_vti0\x00', &(0x7f00000006c0)={'ip6gre0\x00', <r0=>0x0, 0x29, 0x6, 0x2, 0x401, 0x40, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80, 0x7, 0x200, 0xc0000000}})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', r0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8d}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{}, &(0x7f0000000180), &(0x7f0000000200)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x5, 0x20000132, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = open(&(0x7f0000000240)='./file0\x00', 0x105142, 0xa4)
ftruncate(r2, 0x2007ffc)
sendfile(r2, r2, 0x0, 0x800000009)
write$char_usb(r2, &(0x7f00000003c0)="65b8392e7c8d40d0d0fabea14838cbad3292b0a697fb442023024b01bc530c6d7924fb266dd5814efa666776f2fa5ece3ba7211216eee4a67c25fde5225002d23d", 0x41)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
io_setup(0x400e, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000140), &(0x7f0000000040)='%pI4   \x00'}, 0x2a)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r4}, 0x10)
r5 = socket(0xa, 0x2400000001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000000300)={0x0, {{0xa, 0x0, 0x0, @mcast1, 0x10000008}}}, 0x88)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1)
write$binfmt_misc(0xffffffffffffffff, &(0x7f00000007c0)="9d6cbee3ca75220c164bb1938044e53c8447418c3a590991af95c293dd85d5383d8051702458b9bc0a5bd03a4e62b4826a7c3a5bce363aa05856b1c0b6ffa79a005619c20d9d832329fe9f73b8dbb9cb42b59234f2e5bd473e0279495faa62838aad7d4133cdb3616c78cdfc0d2a32a5afc31fc5ca0745f2ee63469e913df9db8577b9992041446f3ece8e1b1a012cef73aca0952166abf4bf04e5959e850fee49985e6ef37cfd6b5cdc91430cc909b97b405cdeee201258e2d591cac938b6479e1ff2c5df2adb4d", 0xc8)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000000500000095"], &(0x7f0000000500)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r6, 0x0, 0x36, 0x0, &(0x7f0000000680)="c1188e19b95d02ff4284860186ddd712070016b67ef0f3762afeede9f909bee035cb7dde6cf4fb5a1241ee65c91e0ea151c97198e452", 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5}, 0x50)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x59d, &(0x7f0000001100)="$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")
r7 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
syz_usb_disconnect(r7)

628.958551ms ago: executing program 0 (id=445):
openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$inet(0x2, 0x2, 0xeb)
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000140))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='kfree\x00', r0}, 0x18)
symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')
close(0x4)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)=ANY=[], 0x20)
setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000000)={0x1, 0x0, 0x3, 0x0, 0x205}, 0xc)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={@mcast2, @private1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5, 0x0, 0x4, 0x400, 0xf44, 0x80000})
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r3 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x14}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bind$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20)
connect$l2tp6(0xffffffffffffffff, &(0x7f0000000f40)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x20)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x4000, @empty, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0xff00)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r4)
sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00006000000080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000)
getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, &(0x7f0000000180)=0xfffffe1f)
sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4040000)

558.769545ms ago: executing program 4 (id=446):
openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='kfree\x00', r0}, 0x18)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1)
sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00006000000080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000)

550.127736ms ago: executing program 3 (id=447):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000000), &(0x7f0000000180)=r1}, 0x20)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001"], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x4c080)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
flock(r5, 0x5)
r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
flock(r6, 0x1)
sendmsg$NL80211_CMD_SET_PMKSA(r6, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="50000000b3c1440e2e18bbfef2e590fbd2440e1136c3a6a60b7f16a35f6abd0e7d702fe87cf0bc0ce11f29cbb00df98e997cfd1b8f66e8ea62461dd3a0d493855f883fbd234debbe31eacf", @ANYRES16=0x0, @ANYBLOB="200025bd7000fedbdf253400000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ff070000390000001400550052bfaf8c9117ec6be124f11d93e9b7c014005500d7ec3f5978804fe0b2846511e87e20f2"], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x4)
flock(r6, 0x2)
dup3(r6, r5, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1018, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x8, 0x6}, 0x2021, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0)

542.926936ms ago: executing program 4 (id=448):
r0 = socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc}, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x6, 0x0, 0x1, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]})
process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000000c0)="ee", 0x1}, {&(0x7f0000000640)="dfcb69b47bc485ae32a07519b21e53d1a0c728e6022d523d4a1c28357862834ca9f743eab2e748cdd769a07e6a7bf39d17964f3a3bf2e0a7fe24ff05b529057a78c4b2f85c4a4e76d9e685ca317f6e8850c8ebb1af4c5ad4041e8492ef", 0x5d}], 0x2}}], 0x1, 0x9200000000000000)
r2 = dup3(r1, r0, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x40000001, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r2], 0x50)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000020000000000000002000004000000000000000002000000000000000000000002000000000000000100000000000001"], 0x0, 0x4e}, 0x20)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000010000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="0100000001"], 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001680)={r5, 0x0, 0x0}, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r6}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x19, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r7, &(0x7f0000000000), &(0x7f0000000080)=@buf="1d"}, 0x20)
bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000001600)={r7, &(0x7f0000000100)}, 0x20)
setsockopt$packet_int(r1, 0x107, 0x13, &(0x7f00000004c0)=0x8, 0x4)
lsm_list_modules(0x0, 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000c55640ab5d3bb281c3ed8b49770ae212930332e18a5c12c4f93915d65b407bcf4f116c8af7101aa1d755a79dcfc50a6959bb9f537752760fdcc071550ae85dc0ac422b6e37a4321c920f2f049514ab77ffb67f3cf5730fbfdbb3c8c9a9efea59b97f8b6204a018182f0cb7a7f8087f38e8ff57d440f31e681de88fd259657d7661", @ANYRES32, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000500)=ANY=[@ANYBLOB="010007000000"], 0x6)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r8, 0x0, 0x5}, 0x18)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}, {0x0, 0xffe0}}}, 0x24}}, 0x0)
r9 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020e0000150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff0000000006003300000000000000000000000000fe8000000000000000000000000000aa0000000000000000000000000000000004"], 0xa8}}, 0x0)

476.71874ms ago: executing program 0 (id=449):
getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0xd2, &(0x7f00000001c0)={@link_local, @random="2059249b3790", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "108114", 0x9c, 0x11, 0x0, @empty, @mcast2, {[], {0x4000, 0xe22, 0x9c, 0x0, @wg=@initiation={0x1, 0x1, "90f0160460908d11d936dc939cb76e8a9b6356f73ffcb6da93e8781f9654b4c9", "799ce6b310bf72a0b28228945546b9e1a0633f625a27749491160b1c9f0f888ec2c820979eee07d947f079121831c393", "8a8d02659c721e51c0792cd4716ed73937bd34d5dca4454e697e87f5", {"158f1711558536b9fdaf59e8a154a573", "178b89bb58a02dd1f1c2981a9cd571a7"}}}}}}}}, 0x0)
r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@resgid}, {@barrier}, {@bsdgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$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")
r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0)
write$P9_RREADLINK(r5, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sys_enter\x00', r6, 0x0, 0x1000000000000000}, 0x18)
arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x13)
fadvise64(r5, 0x7f, 0x0, 0x4)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000001200)={[{@nodiscard}, {@norecovery}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xeb}}, {@abort}, {@user_xattr}, {@bh}, {@errors_remount}]}, 0x1, 0x55f, &(0x7f0000000580)="$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")
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r7}, 0x4)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000000)='kmem_cache_free\x00', r8}, 0x18)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2060, 0x0)
fcntl$setlease(r9, 0x400, 0x0)
fsetxattr$trusted_overlay_redirect(r9, &(0x7f0000000040), 0x0, 0x0, 0x0)
fremovexattr(r9, &(0x7f00000000c0)=@known='trusted.overlay.redirect\x00')
syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r5)
sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x28000084}, 0xc081)
lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0x361, 0x0)

451.323842ms ago: executing program 2 (id=450):
r0 = socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc}, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x6, 0x0, 0x1, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]})
process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000000c0)="ee", 0x1}, {&(0x7f0000000640)="dfcb69b47bc485ae32a07519b21e53d1a0c728e6022d523d4a1c28357862834ca9f743eab2e748cdd769a07e6a7bf39d17964f3a3bf2e0a7fe24ff05b529057a78c4b2f85c4a4e76d9e685ca317f6e8850c8ebb1af4c5ad4041e8492ef", 0x5d}], 0x2}}], 0x1, 0x9200000000000000)
r2 = dup3(r1, r0, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x40000001, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r2], 0x50)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000020000000000000002000004000000000000000002000000000000000000000002000000000000000100000000000001"], 0x0, 0x4e}, 0x20)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000010000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="0100000001"], 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001680)={r5, 0x0, 0x0}, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r6}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x19, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r7, &(0x7f0000000000), &(0x7f0000000080)=@buf="1d"}, 0x20)
bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000001600)={r7, &(0x7f0000000100)}, 0x20)
setsockopt$packet_int(r1, 0x107, 0x13, &(0x7f00000004c0)=0x8, 0x4)
lsm_list_modules(0x0, 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000c55640ab5d3bb281c3ed8b49770ae212930332e18a5c12c4f93915d65b407bcf4f116c8af7101aa1d755a79dcfc50a6959bb9f537752760fdcc071550ae85dc0ac422b6e37a4321c920f2f049514ab77ffb67f3cf5730fbfdbb3c8c9a9efea59b97f8b6204a018182f0cb7a7f8087f38e8ff57d440f31e681de88fd259657d7661", @ANYRES32, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000500)=ANY=[@ANYBLOB="010007000000"], 0x6)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r8, 0x0, 0x5}, 0x18)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}, {0x0, 0xffe0}}}, 0x24}}, 0x0)
r9 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020e0000150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff0000000006003300000000000000000000000000fe8000000000000000000000000000aa0000000000000000000000000000000004"], 0xa8}}, 0x0)

450.623372ms ago: executing program 4 (id=451):
r0 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e4, 0x1, 0x8}, &(0x7f0000000040), &(0x7f0000000000))
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00"/11], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffefc}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x10000}, 0x18)
io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, 0xfffffffffffffffe, 0x0)

371.528227ms ago: executing program 4 (id=452):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet6_icmp(0xa, 0x2, 0x3a)
sendmsg$inet6(r1, &(0x7f0000000880)={&(0x7f0000000000)={0xa, 0x4e20, 0x2, @mcast1, 0x49}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000001c0)="8000e8beec9dbc13", 0x8}], 0x1, &(0x7f00000003c0)=[@hopopts={{0x18}}, @hopopts_2292={{0x18, 0x29, 0x36, {0x3b}}}], 0x30}, 0x4004000)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12000000030000000400000002"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20)
close(r0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x60, 0x1411, 0x400, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x240400d4}, 0x4044051)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='nodots,allow_utime=000000000034,usefree,check=strict,dots,\x00'/70], 0x1, 0x1e9, &(0x7f00000002c0)="$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")
creat(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
syz_usb_connect(0x5, 0x24, &(0x7f0000000180)=ANY=[], 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TCSBRKP(r5, 0x5425, 0x0)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x200402, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xe)
ioctl$TCSETSW2(r6, 0x5408, &(0x7f0000000040)={0x2, 0x8, 0x0, 0x2, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf"})
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0x20, &(0x7f00000006c0)={&(0x7f0000001000)=""/4096, 0x1000, <r7=>0x0, &(0x7f0000000600)=""/163, 0xa3}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0x1d, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x8}, [@map_idx={0x18, 0x5, 0x5, 0x0, 0xc}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000000500)='GPL\x00', 0x4, 0x22, &(0x7f0000000540)=""/34, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x5, 0x4}, 0x8, 0x10, &(0x7f00000005c0)={0x0, 0x1, 0x4, 0x101d}, 0x10, r7, r4, 0x3, 0x0, &(0x7f0000000740)=[{0x2, 0x1, 0x9, 0x9}, {0x2, 0x4, 0x3}, {0x5, 0x2, 0xc, 0x1}], 0x10, 0x1}, 0x94)
ioctl$TIOCGPGRP(r5, 0x5437, 0x0)

371.086766ms ago: executing program 3 (id=453):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x32)
sendfile(r1, r0, 0x0, 0x3ffff)

294.189972ms ago: executing program 2 (id=454):
symlinkat(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001940), 0x100000, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x4}, 0x18)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000001980)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x5}}, './file0\x00'}) (fail_nth: 2)

222.732386ms ago: executing program 3 (id=455):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x10, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x0}, {}, {}, {0x85, 0x0, 0x0, 0xa0}, {0x7, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1f}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x19}}}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x48}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xe, 0x200cc, 0x6, 0x5}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000740), 0x4af, r0}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, &(0x7f0000000080)=""/231, &(0x7f0000000180), 0x0, 0x2, r0}, 0x38)

222.623716ms ago: executing program 2 (id=456):
pipe2(&(0x7f0000001cc0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x800)
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '\xd0\xae\xde\xc1\xaa \xff\xd8\x1d\x1b\xf8\x93)!|\xb0X\xa3\x96\xed\xa2\xab@\xa2m\x93\xdd\b<\x00t\xdc\xabl\xab!\xae\x16\xc4\xcd\xf9{\xdc5_;A\xd2{eC\x014\\\xb3\xc4\xce\xc3yS2-\x01\xbe\xaarW\x96O\xd3\x0f\xe2\xd7/\x17\x1d\xa7.8\x9f8-\xea<\x8d\x91\x90j\xea\xd5\xd5\xae\xcc\xc0\x97\xef\x10\x92\xea\x98|+\x00\x00\x00\x00\x00\x00\x00\x00'}}]}})

182.824529ms ago: executing program 3 (id=457):
bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000004100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50)

125.701713ms ago: executing program 3 (id=458):
bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='sched_switch\x00', r0}, 0x18)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000680003806400dec6080003400000000258000b80200001800a0001"], 0x118}}, 0x0)
r2 = socket$inet(0x2, 0x2, 0x1)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000007"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r3, 0x0, 0xd76}, 0x18)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r4}, &(0x7f00000005c0), &(0x7f0000000600)=r5}, 0x20)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10)
r7 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r7, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10)
connect$vsock_stream(r7, &(0x7f0000000400)={0x28, 0x0, 0x2710, @host}, 0x10)
sendmsg$inet(r2, 0x0, 0x801)
r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8, 0x0, 0x2}, 0x18)
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x3, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
write(r9, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24)

117.563023ms ago: executing program 2 (id=459):
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0, r0}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000400)})
llistxattr(&(0x7f0000000000)='./file1\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)='P', &(0x7f0000000740), 0x4af}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, &(0x7f0000000080)=""/231, &(0x7f0000000180), &(0x7f0000000240), 0x2}, 0x38)

77.924185ms ago: executing program 0 (id=460):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='sched_switch\x00', r0}, 0x18)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000680003806400dec60800034000000002"], 0x118}}, 0x0)

51.255347ms ago: executing program 2 (id=461):
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{}], 0x8, 0x10, &(0x7f0000002e00), &(0x7f0000000000), 0x8, 0xfffffffd, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0x66, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd48, 0x0, 0x0, 0x0, 0x1000000, 0x8, 0x0, 0x0}}, 0x10)

49.778977ms ago: executing program 3 (id=462):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet6_icmp(0xa, 0x2, 0x3a)
sendmsg$inet6(r1, &(0x7f0000000880)={&(0x7f0000000000)={0xa, 0x4e20, 0x2, @mcast1, 0x49}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000001c0)="8000e8beec9dbc13", 0x8}], 0x1, &(0x7f00000003c0)=[@hopopts={{0x18}}, @hopopts_2292={{0x18, 0x29, 0x36, {0x3b}}}], 0x30}, 0x4004000)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12000000030000000400000002"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20)
close(r0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x60, 0x1411, 0x400, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x240400d4}, 0x4044051)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='nodots,allow_utime=000000000034,usefree,check=strict,dots,\x00'/70], 0x1, 0x1e9, &(0x7f00000002c0)="$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")
creat(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x18)
syz_usb_connect(0x5, 0x24, &(0x7f0000000180)=ANY=[], 0x0)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TCSBRKP(r6, 0x5425, 0x0)
r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x200402, 0x0)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0xe)
ioctl$TCSETSW2(r7, 0x5408, &(0x7f0000000040)={0x2, 0x8, 0x0, 0x2, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf"})
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0x20, &(0x7f00000006c0)={&(0x7f0000001000)=""/4096, 0x1000, <r8=>0x0, &(0x7f0000000600)=""/163, 0xa3}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0x1d, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x8}, [@map_idx={0x18, 0x5, 0x5, 0x0, 0xc}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000000500)='GPL\x00', 0x4, 0x22, &(0x7f0000000540)=""/34, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, r5, 0x8, &(0x7f0000000580)={0x5, 0x4}, 0x8, 0x10, &(0x7f00000005c0)={0x0, 0x1, 0x4, 0x101d}, 0x10, r8, r4, 0x3, 0x0, &(0x7f0000000740)=[{0x2, 0x1, 0x9, 0x9}, {0x2, 0x4, 0x3}, {0x5, 0x2, 0xc, 0x1}], 0x10, 0x1}, 0x94)
ioctl$TIOCGPGRP(r6, 0x5437, 0x0)

861.551碌s ago: executing program 2 (id=463):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x32)
write(r1, &(0x7f00000001c0)="49bda8f11851b8436bebb25ac5", 0xd)
sendfile(r1, r0, 0x0, 0x3ffff)
sendfile(r1, r0, 0x0, 0x7ffffffffffffffd)

0s ago: executing program 0 (id=464):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0500000004000000df7f000001"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000001340), 0x2931b90f, r2}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fe0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = dup2(r2, r2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x10)
clock_gettime(0x1, &(0x7f0000000000)={<r4=>0x0, <r5=>0x0})
clock_settime(0x0, &(0x7f0000000040)={r4, r5+10000000})
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x40000)
syz_emit_ethernet(0x4a, &(0x7f00000005c0)=ANY=[@ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ac1000ca9078100013085a5b01018a1cee9105dd621d57e641730000764f77a61deeae3c97a7fdfa35d0d1ccf3b78eaef30b27e30ba29ff6e8736e426f3600c726f83e225767d0093d1ff47ac3a82bf7db48a3255292a84a5965589ea02fa3e50e66e0d2b9394aa2ca54bea82c01a2f0189ce6d95365d48b32cce062834986996f963966b71a9d5ff5a58a1cf8d71c870cb4d140df157cdfefdaeadb7230c5d7432971b39d562442464a99593ae81eb3802e62d5e38afa8371ac72b8a09581aefdd0e454"], 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
memfd_create(&(0x7f00000003c0)='IPVS\x00', 0x4)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r7 = dup(r6)
ioctl$TIOCL_SETSEL(r7, 0x541c, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r8}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r9}, 0x10)
setrlimit(0x2, &(0x7f0000000000)={0x4000051, 0xfffffffa})
read$nci(r7, &(0x7f0000000340)=""/105, 0x69)
r10 = syz_genetlink_get_family_id$ipvs(&(0x7f00000018c0), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000004c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002abd7000ffdbdf25090000006400038008000100010000000800030004000000140002007665744e315f6d616376746170000000060004000200000008000500e0000000140002006970766c616e31"], 0x78}, 0x1, 0x0, 0x0, 0x4885}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.117' (ED25519) to the list of known hosts.
[   27.700678][   T29] audit: type=1400 audit(1761623863.344:62): avc:  denied  { mounton } for  pid=3300 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   27.723728][   T29] audit: type=1400 audit(1761623863.374:63): avc:  denied  { mount } for  pid=3300 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   27.724737][ T3300] cgroup: Unknown subsys name 'net'
[   27.752657][   T29] audit: type=1400 audit(1761623863.404:64): avc:  denied  { unmount } for  pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   27.852235][ T3300] cgroup: Unknown subsys name 'cpuset'
[   27.859940][ T3300] cgroup: Unknown subsys name 'rlimit'
[   27.990146][   T29] audit: type=1400 audit(1761623863.634:65): avc:  denied  { setattr } for  pid=3300 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   28.019147][   T29] audit: type=1400 audit(1761623863.634:66): avc:  denied  { create } for  pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   28.040011][   T29] audit: type=1400 audit(1761623863.634:67): avc:  denied  { write } for  pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   28.064025][   T29] audit: type=1400 audit(1761623863.634:68): avc:  denied  { read } for  pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   28.084868][   T29] audit: type=1400 audit(1761623863.634:69): avc:  denied  { mounton } for  pid=3300 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   28.093890][ T3305] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
Setting up swapspace version 1, size = 127995904 bytes
[   28.109756][   T29] audit: type=1400 audit(1761623863.634:70): avc:  denied  { mount } for  pid=3300 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   28.141828][   T29] audit: type=1400 audit(1761623863.764:71): avc:  denied  { relabelto } for  pid=3305 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   28.184986][ T3300] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   29.327810][ T3312] chnl_net:caif_netlink_parms(): no params data found
[   29.424012][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.431346][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.439118][ T3312] bridge_slave_0: entered allmulticast mode
[   29.445739][ T3312] bridge_slave_0: entered promiscuous mode
[   29.460340][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.467536][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.474727][ T3312] bridge_slave_1: entered allmulticast mode
[   29.481259][ T3312] bridge_slave_1: entered promiscuous mode
[   29.487880][ T3313] chnl_net:caif_netlink_parms(): no params data found
[   29.520136][ T3320] chnl_net:caif_netlink_parms(): no params data found
[   29.539859][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   29.571682][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   29.623853][ T3312] team0: Port device team_slave_0 added
[   29.645107][ T3316] chnl_net:caif_netlink_parms(): no params data found
[   29.654844][ T3312] team0: Port device team_slave_1 added
[   29.670971][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.678078][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.685543][ T3313] bridge_slave_0: entered allmulticast mode
[   29.692313][ T3313] bridge_slave_0: entered promiscuous mode
[   29.715484][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.722705][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.729834][ T3320] bridge_slave_0: entered allmulticast mode
[   29.736852][ T3320] bridge_slave_0: entered promiscuous mode
[   29.743385][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.750709][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.758176][ T3313] bridge_slave_1: entered allmulticast mode
[   29.764776][ T3313] bridge_slave_1: entered promiscuous mode
[   29.781123][ T3318] chnl_net:caif_netlink_parms(): no params data found
[   29.790904][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0
[   29.797907][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   29.824603][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   29.835412][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.842541][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.849734][ T3320] bridge_slave_1: entered allmulticast mode
[   29.856624][ T3320] bridge_slave_1: entered promiscuous mode
[   29.873024][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1
[   29.880003][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   29.906006][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   29.948164][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   29.958434][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   29.975002][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   29.985349][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.039550][ T3313] team0: Port device team_slave_0 added
[   30.045556][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.052789][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.060348][ T3316] bridge_slave_0: entered allmulticast mode
[   30.066865][ T3316] bridge_slave_0: entered promiscuous mode
[   30.080830][ T3312] hsr_slave_0: entered promiscuous mode
[   30.087094][ T3312] hsr_slave_1: entered promiscuous mode
[   30.093978][ T3320] team0: Port device team_slave_0 added
[   30.100346][ T3313] team0: Port device team_slave_1 added
[   30.110855][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.118141][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.125539][ T3316] bridge_slave_1: entered allmulticast mode
[   30.132388][ T3316] bridge_slave_1: entered promiscuous mode
[   30.144203][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.151416][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.159044][ T3318] bridge_slave_0: entered allmulticast mode
[   30.166354][ T3318] bridge_slave_0: entered promiscuous mode
[   30.173823][ T3320] team0: Port device team_slave_1 added
[   30.200775][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.208270][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.215795][ T3318] bridge_slave_1: entered allmulticast mode
[   30.222461][ T3318] bridge_slave_1: entered promiscuous mode
[   30.229067][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.236158][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.262237][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.279160][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   30.305399][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.312523][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.339262][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.351125][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.368121][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.375881][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.401870][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.432864][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.439874][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.465829][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.478655][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   30.491984][ T3316] team0: Port device team_slave_0 added
[   30.501158][ T3316] team0: Port device team_slave_1 added
[   30.514173][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.545811][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.552893][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.578898][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.590688][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.597697][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.623702][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.647718][ T3318] team0: Port device team_slave_0 added
[   30.664281][ T3313] hsr_slave_0: entered promiscuous mode
[   30.670552][ T3313] hsr_slave_1: entered promiscuous mode
[   30.676670][ T3313] debugfs: 'hsr0' already exists in 'hsr'
[   30.682491][ T3313] Cannot create hsr debugfs directory
[   30.688701][ T3318] team0: Port device team_slave_1 added
[   30.722727][ T3320] hsr_slave_0: entered promiscuous mode
[   30.728801][ T3320] hsr_slave_1: entered promiscuous mode
[   30.734784][ T3320] debugfs: 'hsr0' already exists in 'hsr'
[   30.740604][ T3320] Cannot create hsr debugfs directory
[   30.753191][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.760171][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.786158][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.799641][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.806754][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.832698][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.871585][ T3316] hsr_slave_0: entered promiscuous mode
[   30.877873][ T3316] hsr_slave_1: entered promiscuous mode
[   30.884013][ T3316] debugfs: 'hsr0' already exists in 'hsr'
[   30.889745][ T3316] Cannot create hsr debugfs directory
[   30.943555][ T3318] hsr_slave_0: entered promiscuous mode
[   30.950360][ T3318] hsr_slave_1: entered promiscuous mode
[   30.956921][ T3318] debugfs: 'hsr0' already exists in 'hsr'
[   30.962693][ T3318] Cannot create hsr debugfs directory
[   31.030527][ T3312] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   31.048528][ T3312] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   31.074480][ T3312] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   31.094561][ T3312] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   31.148876][ T3313] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   31.161339][ T3313] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   31.174436][ T3313] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   31.186447][ T3313] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   31.212662][ T3320] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   31.232197][ T3320] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   31.241586][ T3320] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   31.259668][ T3320] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   31.270737][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0
[   31.298619][ T3312] 8021q: adding VLAN 0 to HW filter on device team0
[   31.313552][   T57] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.320766][   T57] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.331741][   T57] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.338839][   T57] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.364004][ T3318] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   31.387461][ T3318] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   31.402047][ T3318] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   31.411088][ T3318] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   31.436842][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0
[   31.445314][ T3316] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   31.481285][ T3316] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   31.490814][ T3316] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   31.502806][ T3313] 8021q: adding VLAN 0 to HW filter on device team0
[   31.512660][ T3316] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   31.525479][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0
[   31.540578][   T57] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.547695][   T57] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.565255][   T57] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.572453][   T57] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.589807][ T3320] 8021q: adding VLAN 0 to HW filter on device team0
[   31.598410][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.613332][   T57] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.620425][   T57] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.642297][   T57] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.649385][   T57] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.689929][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0
[   31.704901][ T3320] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   31.715446][ T3320] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   31.753429][ T3318] 8021q: adding VLAN 0 to HW filter on device team0
[   31.766004][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0
[   31.784311][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.791446][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.800892][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.808073][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.827414][ T3316] 8021q: adding VLAN 0 to HW filter on device team0
[   31.843855][  T380] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.851004][  T380] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.874396][ T1456] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.881613][ T1456] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.901726][ T3312] veth0_vlan: entered promiscuous mode
[   31.910328][ T3312] veth1_vlan: entered promiscuous mode
[   31.946837][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.960537][ T3312] veth0_macvtap: entered promiscuous mode
[   31.968603][ T3312] veth1_macvtap: entered promiscuous mode
[   31.978614][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0
[   32.021704][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0
[   32.052439][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1
[   32.067126][   T31] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   32.090583][   T31] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   32.112299][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0
[   32.131502][   T31] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   32.153349][   T31] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   32.167109][ T3320] veth0_vlan: entered promiscuous mode
[   32.175245][ T3312] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   32.187360][ T3320] veth1_vlan: entered promiscuous mode
[   32.198699][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0
[   32.258543][ T3320] veth0_macvtap: entered promiscuous mode
[   32.273354][ T3320] veth1_macvtap: entered promiscuous mode
[   32.297207][ T3472] raw_sendmsg: syz.1.2 forgot to set AF_INET. Fix it!
[   32.305938][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0
[   32.325689][ T3313] veth0_vlan: entered promiscuous mode
[   32.339677][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1
[   32.356097][ T3313] veth1_vlan: entered promiscuous mode
[   32.386891][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   32.400249][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   32.414352][ T3318] veth0_vlan: entered promiscuous mode
[   32.423854][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   32.438232][ T3483] : renamed from veth0_to_bond (while UP)
[   32.452746][ T3318] veth1_vlan: entered promiscuous mode
[   32.457721][    C1] hrtimer: interrupt took 43192 ns
[   32.465634][ T3313] veth0_macvtap: entered promiscuous mode
[   32.473171][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   32.485827][ T3313] veth1_macvtap: entered promiscuous mode
[   32.505519][ T3318] veth0_macvtap: entered promiscuous mode
[   32.512902][ T3316] veth0_vlan: entered promiscuous mode
[   32.525637][ T3318] veth1_macvtap: entered promiscuous mode
[   32.548643][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0
[   32.558324][ T3316] veth1_vlan: entered promiscuous mode
[   32.586467][ T3316] veth0_macvtap: entered promiscuous mode
[   32.605356][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1
[   32.617564][ T3316] veth1_macvtap: entered promiscuous mode
[   32.625599][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0
[   32.637054][ T1456] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   32.654650][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1
[   32.670049][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0
[   32.682075][ T1456] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   32.693104][ T3491] netlink: 5 bytes leftover after parsing attributes in process `syz.1.7'.
[   32.703437][ T1456] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   32.713285][ T3491] 0{X功: renamed from gretap0 (while UP)
[   32.720686][ T3491] 0{X功: entered allmulticast mode
[   32.726692][ T3491] A link change request failed with some changes committed already. Interface 
30{X功 may have been left with an inconsistent configuration, please check.
[   32.744078][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1
[   32.752140][ T1456] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   32.766773][ T1456] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   32.779889][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   32.784083][ T3493] netlink: 88 bytes leftover after parsing attributes in process `syz.1.8'.
[   32.797496][ T3493] netlink: 88 bytes leftover after parsing attributes in process `syz.1.8'.
[   32.803561][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   32.829024][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   32.838920][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   32.868133][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   32.877379][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   32.894167][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   32.907405][   T29] kauditd_printk_skb: 47 callbacks suppressed
[   32.907497][   T29] audit: type=1326 audit(1761623868.554:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3496 comm="syz.1.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c7ad2efc9 code=0x7ffc0000
[   32.937697][   T29] audit: type=1326 audit(1761623868.554:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3496 comm="syz.1.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c7ad2efc9 code=0x7ffc0000
[   32.961232][   T29] audit: type=1326 audit(1761623868.554:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3496 comm="syz.1.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7f5c7ad2efc9 code=0x7ffc0000
[   32.984598][   T29] audit: type=1326 audit(1761623868.554:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3496 comm="syz.1.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c7ad2efc9 code=0x7ffc0000
[   33.007725][   T29] audit: type=1326 audit(1761623868.554:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3496 comm="syz.1.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c7ad2efc9 code=0x7ffc0000
[   33.031044][   T29] audit: type=1326 audit(1761623868.554:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3496 comm="syz.1.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5c7ad2efc9 code=0x7ffc0000
[   33.054323][   T29] audit: type=1326 audit(1761623868.554:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3496 comm="syz.1.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c7ad2efc9 code=0x7ffc0000
[   33.078074][   T29] audit: type=1326 audit(1761623868.554:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3496 comm="syz.1.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5c7ad2efc9 code=0x7ffc0000
[   33.086854][ T3504] netlink: 19 bytes leftover after parsing attributes in process `syz.2.3'.
[   33.101811][   T29] audit: type=1326 audit(1761623868.554:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3496 comm="syz.1.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c7ad2efc9 code=0x7ffc0000
[   33.125428][ T3505] loop1: detected capacity change from 0 to 128
[   33.133464][   T29] audit: type=1326 audit(1761623868.554:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3496 comm="syz.1.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5c7ad2efc9 code=0x7ffc0000
[   33.178357][ T3507] loop0: detected capacity change from 0 to 1024
[   33.184898][ T3506] capability: warning: `syz.4.5' uses 32-bit capabilities (legacy support in use)
[   33.195215][ T3507] =======================================================
[   33.195215][ T3507] WARNING: The mand mount option has been deprecated and
[   33.195215][ T3507]          and is ignored by this kernel. Remove the mand
[   33.195215][ T3507]          option from the mount to silence this warning.
[   33.195215][ T3507] =======================================================
[   33.232235][ T3507] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   33.246272][ T3507] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #11: comm syz.0.1: iget: bogus i_mode (1)
[   33.259247][ T3507] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.1: couldn't read orphan inode 11 (err -117)
[   33.271774][ T3507] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   33.288033][ T3501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   33.297411][ T3501] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   33.501933][ T3509] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 10: padding at end of block bitmap is not set
[   33.530352][ T3517] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   33.533348][ T3519] loop3: detected capacity change from 0 to 512
[   33.551911][ T3519] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   33.565103][ T3519] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   33.585579][ T3519] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters
[   33.603171][ T3519] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   33.621692][ T3519] EXT4-fs (loop3): 1 truncate cleaned up
[   33.628361][ T3519] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   33.658233][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   33.834210][ T3527] : renamed from veth0_to_bond (while UP)
[   33.930354][ T3529] loop3: detected capacity change from 0 to 128
[   34.096475][ T3533] netlink: 88 bytes leftover after parsing attributes in process `syz.4.17'.
[   34.105475][ T3533] netlink: 88 bytes leftover after parsing attributes in process `syz.4.17'.
[   34.234202][ T3543] netlink: 19 bytes leftover after parsing attributes in process `syz.0.22'.
[   34.254611][ T3539] loop4: detected capacity change from 0 to 512
[   34.288865][ T3539] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   34.315506][ T3539] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters
[   34.330531][ T3539] EXT4-fs (loop4): 1 truncate cleaned up
[   34.340329][ T3539] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   34.363425][ T3548] loop1: detected capacity change from 0 to 128
[   34.389016][ T3550] netlink: 28 bytes leftover after parsing attributes in process `syz.0.25'.
[   34.406839][ T3550] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[   34.422079][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   34.433052][ T3553] netlink: 4 bytes leftover after parsing attributes in process `syz.2.24'.
[   34.451853][ T3553] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   34.458565][ T3529] syz.3.16: attempt to access beyond end of device
[   34.458565][ T3529] loop3: rw=2049, sector=128, nr_sectors = 1 limit=128
[   34.459348][ T3553] batman_adv: batadv0: Removing interface: batadv_slave_0
[   34.472650][ T3529] Buffer I/O error on dev loop3, logical block 128, lost async page write
[   34.504751][ T3530] syz.3.16: attempt to access beyond end of device
[   34.504751][ T3530] loop3: rw=2049, sector=128, nr_sectors = 1 limit=128
[   34.514002][ T3426] IPVS: starting estimator thread 0...
[   34.518088][ T3530] Buffer I/O error on dev loop3, logical block 128, lost async page write
[   34.532489][ T3553] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   34.534310][ T3530] syz.3.16: attempt to access beyond end of device
[   34.534310][ T3530] loop3: rw=2049, sector=128, nr_sectors = 1 limit=128
[   34.539989][ T3553] batman_adv: batadv0: Removing interface: batadv_slave_1
[   34.553362][ T3530] Buffer I/O error on dev loop3, logical block 128, lost async page write
[   34.635672][ T3558] IPVS: using max 2400 ests per chain, 120000 per kthread
[   34.698941][ T3566] loop3: detected capacity change from 0 to 128
[   34.714625][ T3566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   34.724911][ T3566] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   34.924111][ T3548] syz.1.23: attempt to access beyond end of device
[   34.924111][ T3548] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128
[   34.937526][ T3548] Buffer I/O error on dev loop1, logical block 128, lost async page write
[   34.947079][ T3555] syz.1.23: attempt to access beyond end of device
[   34.947079][ T3555] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128
[   34.962560][ T3555] Buffer I/O error on dev loop1, logical block 128, lost async page write
[   34.973227][ T3555] syz.1.23: attempt to access beyond end of device
[   34.973227][ T3555] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128
[   34.986585][ T3555] Buffer I/O error on dev loop1, logical block 128, lost async page write
[   35.024979][ T3569] netlink: 88 bytes leftover after parsing attributes in process `syz.2.30'.
[   35.168676][ T3578] loop1: detected capacity change from 0 to 128
[   35.433186][ T3590] loop0: detected capacity change from 0 to 512
[   35.447041][ T3592] 0{X功: renamed from gretap0 (while UP)
[   35.453287][ T3590] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   35.465220][ T3592] 0{X功: entered allmulticast mode
[   35.472443][ T3590] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters
[   35.472505][ T3592] A link change request failed with some changes committed already. Interface 
30{X功 may have been left with an inconsistent configuration, please check.
[   35.488480][ T3590] EXT4-fs (loop0): 1 truncate cleaned up
[   35.510165][ T3590] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   35.575331][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.590443][ T3595] loop3: detected capacity change from 0 to 1024
[   35.648624][ T3595] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   35.681242][ T3599] bridge_slave_1: left allmulticast mode
[   35.687036][ T3599] bridge_slave_1: left promiscuous mode
[   35.693172][ T3599] bridge0: port 2(bridge_slave_1) entered disabled state
[   35.703064][ T3578] syz.1.34: attempt to access beyond end of device
[   35.703064][ T3578] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128
[   35.716597][ T3578] Buffer I/O error on dev loop1, logical block 128, lost async page write
[   35.725628][ T3599] bridge_slave_0: left allmulticast mode
[   35.731392][ T3599] bridge_slave_0: left promiscuous mode
[   35.737061][ T3599] bridge0: port 1(bridge_slave_0) entered disabled state
[   35.744766][ T3580] syz.1.34: attempt to access beyond end of device
[   35.744766][ T3580] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128
[   35.758565][ T3580] Buffer I/O error on dev loop1, logical block 128, lost async page write
[   35.881621][ T3609] loop1: detected capacity change from 0 to 128
[   36.081570][ T3616] loop0: detected capacity change from 0 to 1024
[   36.111179][ T3619] lo speed is unknown, defaulting to 1000
[   36.117147][ T3619] lo speed is unknown, defaulting to 1000
[   36.123346][ T3619] lo speed is unknown, defaulting to 1000
[   36.130078][ T3619] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   36.139115][ T3619] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   36.181362][ T3619] lo speed is unknown, defaulting to 1000
[   36.187545][ T3619] lo speed is unknown, defaulting to 1000
[   36.215688][ T3619] lo speed is unknown, defaulting to 1000
[   36.222300][ T3619] lo speed is unknown, defaulting to 1000
[   36.228661][ T3619] lo speed is unknown, defaulting to 1000
[   36.305925][ T3616] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.45: Failed to acquire dquot type 0
[   36.322137][ T3616] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt.
[   36.362239][ T3616] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #13: comm syz.0.45: corrupted inode contents
[   36.381143][ T3616] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #13: comm syz.0.45: mark_inode_dirty error
[   36.398216][ T3616] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #13: comm syz.0.45: corrupted inode contents
[   36.457172][ T3616] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #13: comm syz.0.45: mark_inode_dirty error
[   36.512446][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.522121][ T3616] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #13: comm syz.0.45: corrupted inode contents
[   36.538336][ T3616] EXT4-fs error (device loop0) in ext4_orphan_del:301: Corrupt filesystem
[   36.556848][ T3616] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #13: comm syz.0.45: corrupted inode contents
[   36.575288][ T3616] EXT4-fs error (device loop0): ext4_truncate:4637: inode #13: comm syz.0.45: mark_inode_dirty error
[   36.615544][ T3616] EXT4-fs error (device loop0) in ext4_process_orphan:343: Corrupt filesystem
[   36.656500][ T3612] syz.1.43: attempt to access beyond end of device
[   36.656500][ T3612] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128
[   36.669809][ T3612] Buffer I/O error on dev loop1, logical block 128, lost async page write
[   36.678755][ T3616] EXT4-fs (loop0): 1 truncate cleaned up
[   36.683707][ T3612] syz.1.43: attempt to access beyond end of device
[   36.683707][ T3612] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128
[   36.697998][ T3612] Buffer I/O error on dev loop1, logical block 128, lost async page write
[   36.707202][ T3616] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   36.762773][ T3616] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.799133][ T3642] loop3: detected capacity change from 0 to 128
[   38.017665][   T29] kauditd_printk_skb: 204 callbacks suppressed
[   38.017715][   T29] audit: type=1400 audit(37.983:331): avc:  denied  { getopt } for  pid=3664 comm="syz.2.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   38.054215][ T3669] __nla_validate_parse: 16 callbacks suppressed
[   38.054233][ T3669] netlink: 5 bytes leftover after parsing attributes in process `syz.3.62'.
[   38.074223][ T3665] netlink: 4 bytes leftover after parsing attributes in process `syz.2.61'.
[   38.085581][ T3669] 0{X功: renamed from gretap0 (while UP)
[   38.093407][   T29] audit: type=1400 audit(38.013:332): avc:  denied  { name_connect } for  pid=3664 comm="syz.2.61" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1
[   38.113962][   T29] audit: type=1400 audit(38.043:333): avc:  denied  { shutdown } for  pid=3664 comm="syz.2.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   38.156947][ T3669] 0{X功: entered allmulticast mode
[   38.163313][ T3669] A link change request failed with some changes committed already. Interface 
30{X功 may have been left with an inconsistent configuration, please check.
[   38.244800][ T3672] SELinux:  Context 沋7霍j
[   38.244800][ T3672] u/$2S贌�2'磧k�s2-�	vj譫灻	�#灮�,貼<
[   38.244800][ T3672] �:婧E]Y�碶?�图�=戬賸�1跭I嬂卿顐k伍皗kL^墬�0�译}�4n歳籂}枹�
p寞�貼粀
焸辻xiu?+膻妖�蹾~涼籉�1鵚す濛jm	&8沀蹅V妰�嫓N�挏2�)Gx芕�%�5滜xeRM4r4cヮ�J峴螲U&煋佷�'p厡2EMM鄈&壩c玝U兾�,�,现萘饴f覢��8颗鴾�湺b翀D櫒%$瑴觙�=綒诀8瓳��弅|睨�恮 鞳�&KCH;凛x-澩K巢o�4榠!��Oi�%趥2碏"2婨,P] 梏k�? is not valid (left unmapped).
[   38.337300][ T3672] SELinux:  Context *m⺧X�I菲$h穢4郢終� is not valid (left unmapped).
[   38.354791][ T3672] SELinux:  Context 朘M*�,h胏都Iㄇ臼没愤虌y衷�+�.�+y��0�[pr�;J〢9伵鯈岻q�jη�=7)o
M{鞖�杗F��=鴫Xmnx簻r禗咩憠澇鍨崇4腾TW
颤}籺婓趄�%葨Y吷^s靗F瑎ぇB�53矇h謒靿��5䙌咩;J崣罼om%~"峥~9mM緰~al屎L郔8瓌i is not valid (left unmapped).
[   38.408694][ T3673] SELinux:  Context � is not valid (left unmapped).
[   38.447858][ T3672] SELinux:  Context 5秨摠M3雙�X:潩]濹?尊支帷p徼珄阏O)B�癛�節D缓P_N肹剑`娲3�?"軎Mp$�=J�9[諆�CZ<R is not valid (left unmapped).
[   38.493752][ T3672] SELinux:  Context 77Q幇�.磞宫H.j萼o偋鞞�怛M馆缾森+櫬婑�~�o荠)酒¨s�#�瀧�2t尡厲眹f粸判浳齹7賈Dt�)橷� is not valid (left unmapped).
[   38.561707][   T29] audit: type=1326 audit(38.503:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3651 comm="syz.1.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c7ad2efc9 code=0x7ffc0000
[   38.584635][   T29] audit: type=1326 audit(38.503:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3651 comm="syz.1.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c7ad2efc9 code=0x7ffc0000
[   38.613911][ T3672] SELinux:  Context A锹)脶t�'�民�*'暮睘��k氮�ǘ卮淟�&褚z�
[   38.613911][ T3672] :_t� �0碧H^寪B鲴>&嗗淶w8	lX&鬌;t鎑婤灏I泘㎜
[   38.613911][ T3672] uS膵蔾xI審R兢I$4"﹍X�
7f9�佻苁b柅廈涯|72�*�
梻k憣 is not valid (left unmapped).
[   38.662932][ T3672] SELinux:  Context 錡榻X螽扙霑�][O�:迅枉�o囘璒�飒蘠ZD睥fq	:舿�t6祏Y紉�答(� is not valid (left unmapped).
[   38.693859][   T29] audit: type=1326 audit(38.653:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3674 comm="syz.4.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c8eaaefc9 code=0x7ffc0000
[   38.716899][   T29] audit: type=1326 audit(38.663:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3674 comm="syz.4.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c8eaaefc9 code=0x7ffc0000
[   38.740041][   T29] audit: type=1326 audit(38.663:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3674 comm="syz.4.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7f4c8eaaefc9 code=0x7ffc0000
[   38.763165][   T29] audit: type=1326 audit(38.663:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3674 comm="syz.4.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c8eaaefc9 code=0x7ffc0000
[   38.775576][ T3675] netlink: 19 bytes leftover after parsing attributes in process `syz.4.65'.
[   38.786322][   T29] audit: type=1326 audit(38.663:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3674 comm="syz.4.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c8eaaefc9 code=0x7ffc0000
[   38.873785][ T3683] loop1: detected capacity change from 0 to 128
[   38.888285][ T3681] netlink: 16 bytes leftover after parsing attributes in process `syz.0.64'.
[   38.897704][ T3681] netlink: 16 bytes leftover after parsing attributes in process `syz.0.64'.
[   38.906601][ T3681] netlink: 16 bytes leftover after parsing attributes in process `syz.0.64'.
[   38.930782][ T3681] netlink: 16 bytes leftover after parsing attributes in process `syz.0.64'.
[   38.933991][ T3690] loop3: detected capacity change from 0 to 128
[   38.939864][ T3681] netlink: 16 bytes leftover after parsing attributes in process `syz.0.64'.
[   38.951232][ T3691] netlink: 4 bytes leftover after parsing attributes in process `syz.0.64'.
[   38.955101][ T3681] netlink: 16 bytes leftover after parsing attributes in process `syz.0.64'.
[   39.097632][ T3701] lo speed is unknown, defaulting to 1000
[   39.307698][ T3712] loop0: detected capacity change from 0 to 1024
[   39.343668][ T3712] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   39.354685][ T3712] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[   39.394640][ T3712] JBD2: no valid journal superblock found
[   39.400508][ T3712] EXT4-fs (loop0): Could not load journal inode
[   39.565040][ T3683] syz.1.69: attempt to access beyond end of device
[   39.565040][ T3683] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128
[   39.578691][ T3683] Buffer I/O error on dev loop1, logical block 128, lost async page write
[   39.590387][ T3698] syz.1.69: attempt to access beyond end of device
[   39.590387][ T3698] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128
[   39.603718][ T3698] Buffer I/O error on dev loop1, logical block 128, lost async page write
[   39.633522][ T3698] syz.1.69: attempt to access beyond end of device
[   39.633522][ T3698] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128
[   39.646919][ T3698] Buffer I/O error on dev loop1, logical block 128, lost async page write
[   39.650252][ T3717] SELinux:  Context 錡榻X螽扙霑�][O�:迅枉�o囘璒�飒蘠ZD睥fq	:舿�t6祏Y紉�答(氰Q唢�8吪作NPZ饛eo�灬[aS赆I> is not valid (left unmapped).
[   39.994566][ T3735] loop0: detected capacity change from 0 to 1024
[   40.065669][ T3735] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.82: Failed to acquire dquot type 0
[   40.113419][ T3744] loop1: detected capacity change from 0 to 512
[   40.122550][ T3739] syzkaller1: entered promiscuous mode
[   40.128070][ T3739] syzkaller1: entered allmulticast mode
[   40.165000][ T3747] bridge_slave_1: left allmulticast mode
[   40.170791][ T3747] bridge_slave_1: left promiscuous mode
[   40.172591][ T3744] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   40.176758][ T3747] bridge0: port 2(bridge_slave_1) entered disabled state
[   40.208388][ T3735] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt.
[   40.223947][ T3747] bridge_slave_0: left allmulticast mode
[   40.224982][ T3744] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, 
[   40.229732][ T3747] bridge_slave_0: left promiscuous mode
[   40.229734][ T3744] block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters
[   40.230327][ T3744] EXT4-fs (loop1): 1 truncate cleaned up
[   40.238401][ T3747] bridge0: port 1(bridge_slave_0) entered disabled state
[   40.259945][ T3735] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #13: comm syz.0.82: corrupted inode contents
[   40.266920][ T3744] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   40.290264][ T3735] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #13: comm syz.0.82: mark_inode_dirty error
[   40.311879][ T3735] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #13: comm syz.0.82: corrupted inode contents
[   40.326905][ T3735] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #13: comm syz.0.82: mark_inode_dirty error
[   40.353104][ T3735] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #13: comm syz.0.82: corrupted inode contents
[   40.387511][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.409326][ T3735] EXT4-fs error (device loop0) in ext4_orphan_del:301: Corrupt filesystem
[   40.449200][ T3735] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #13: comm syz.0.82: corrupted inode contents
[   40.503933][ T3735] EXT4-fs error (device loop0): ext4_truncate:4637: inode #13: comm syz.0.82: mark_inode_dirty error
[   40.518250][ T3758] loop2: detected capacity change from 0 to 128
[   40.535254][ T3735] EXT4-fs error (device loop0) in ext4_process_orphan:343: Corrupt filesystem
[   40.574341][ T3735] EXT4-fs (loop0): 1 truncate cleaned up
[   40.580587][ T3735] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   40.632320][ T3764] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   40.660409][ T3735] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.753696][ T3777] 1{X功: renamed from 
30{X功 (while UP)
[   40.769753][ T3777] A link change request failed with some changes committed already. Interface 
31{X功 may have been left with an inconsistent configuration, please check.
[   40.785827][ T3781] bridge_slave_1: left allmulticast mode
[   40.791582][ T3781] bridge_slave_1: left promiscuous mode
[   40.797542][ T3781] bridge0: port 2(bridge_slave_1) entered disabled state
[   40.816123][ T3781] bridge_slave_0: left allmulticast mode
[   40.821884][ T3781] bridge_slave_0: left promiscuous mode
[   40.827755][ T3781] bridge0: port 1(bridge_slave_0) entered disabled state
[   40.922176][ T3786] bridge_slave_1: left allmulticast mode
[   40.928046][ T3786] bridge_slave_1: left promiscuous mode
[   40.933929][ T3786] bridge0: port 2(bridge_slave_1) entered disabled state
[   40.942808][ T3786] bridge_slave_0: left allmulticast mode
[   40.948746][ T3786] bridge_slave_0: left promiscuous mode
[   40.954643][ T3786] bridge0: port 1(bridge_slave_0) entered disabled state
[   41.123608][ T3810] loop4: detected capacity change from 0 to 512
[   41.188587][ T3810] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   41.224299][ T3810] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters
[   41.243318][ T3810] EXT4-fs (loop4): 1 truncate cleaned up
[   41.256437][ T3810] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   41.292904][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.585156][ T3836] loop4: detected capacity change from 0 to 512
[   41.592364][ T3836] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   41.603546][ T3836] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters
[   41.620035][ T3836] EXT4-fs (loop4): 1 truncate cleaned up
[   41.626319][ T3836] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   41.649960][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.919135][ T3865] loop0: detected capacity change from 0 to 128
[   41.919838][ T3859] loop4: detected capacity change from 0 to 512
[   41.950572][ T3859] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   41.992545][ T3859] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters
[   42.038837][ T3859] EXT4-fs (loop4): 1 truncate cleaned up
[   42.051699][ T3859] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   42.182091][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.335446][ T3894] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[   42.446866][ T3865] syz.0.130: attempt to access beyond end of device
[   42.446866][ T3865] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128
[   42.460428][ T3865] Buffer I/O error on dev loop0, logical block 128, lost async page write
[   42.470234][ T3877] syz.0.130: attempt to access beyond end of device
[   42.470234][ T3877] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128
[   42.483605][ T3877] Buffer I/O error on dev loop0, logical block 128, lost async page write
[   42.501202][ T3877] syz.0.130: attempt to access beyond end of device
[   42.501202][ T3877] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128
[   42.514710][ T3877] Buffer I/O error on dev loop0, logical block 128, lost async page write
[   42.706915][ T3910] loop1: detected capacity change from 0 to 1024
[   42.720044][ T3910] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.143: Failed to acquire dquot type 0
[   42.734383][ T3910] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt.
[   42.749727][ T3910] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #13: comm syz.1.143: corrupted inode contents
[   42.763780][ T3909] : renamed from veth0_to_bond (while UP)
[   42.812189][ T3910] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #13: comm syz.1.143: mark_inode_dirty error
[   42.879080][ T3910] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #13: comm syz.1.143: corrupted inode contents
[   43.013361][ T3910] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #13: comm syz.1.143: mark_inode_dirty error
[   43.080902][ T3910] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #13: comm syz.1.143: corrupted inode contents
[   43.099561][ T3920] __nla_validate_parse: 79 callbacks suppressed
[   43.099575][ T3920] netlink: 16 bytes leftover after parsing attributes in process `syz.2.148'.
[   43.134789][   T29] kauditd_printk_skb: 505 callbacks suppressed
[   43.134816][   T29] audit: type=1326 audit(43.100:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3921 comm="syz.3.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8488eefc9 code=0x7ffc0000
[   43.166417][   T29] audit: type=1326 audit(43.100:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3921 comm="syz.3.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8488eefc9 code=0x7ffc0000
[   43.192001][   T29] audit: type=1326 audit(43.150:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3921 comm="syz.3.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd8488eefc9 code=0x7ffc0000
[   43.214823][   T29] audit: type=1326 audit(43.150:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3921 comm="syz.3.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8488eefc9 code=0x7ffc0000
[   43.215942][ T3910] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem
[   43.237683][   T29] audit: type=1326 audit(43.150:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3921 comm="syz.3.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8488eefc9 code=0x7ffc0000
[   43.237768][   T29] audit: type=1326 audit(43.150:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3921 comm="syz.3.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd8488eefc9 code=0x7ffc0000
[   43.292198][   T29] audit: type=1326 audit(43.150:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3921 comm="syz.3.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8488eefc9 code=0x7ffc0000
[   43.314951][   T29] audit: type=1326 audit(43.150:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3921 comm="syz.3.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8488eefc9 code=0x7ffc0000
[   43.338176][   T29] audit: type=1326 audit(43.160:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3921 comm="syz.3.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd8488eefc9 code=0x7ffc0000
[   43.361040][   T29] audit: type=1326 audit(43.160:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3921 comm="syz.3.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8488eefc9 code=0x7ffc0000
[   43.393693][ T3910] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #13: comm syz.1.143: corrupted inode contents
[   43.418989][ T3926] netlink: 19 bytes leftover after parsing attributes in process `syz.3.151'.
[   43.428526][ T3910] EXT4-fs error (device loop1): ext4_truncate:4637: inode #13: comm syz.1.143: mark_inode_dirty error
[   43.433145][ T3925] netlink: 28 bytes leftover after parsing attributes in process `syz.4.150'.
[   43.440249][ T3910] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem
[   43.450145][ T3925] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[   43.459112][ T3910] EXT4-fs (loop1): 1 truncate cleaned up
[   43.471865][ T3910] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   43.518571][ T3930] loop2: detected capacity change from 0 to 128
[   43.525187][ T3910] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.651161][ T3937] loop4: detected capacity change from 0 to 1024
[   43.679285][ T3937] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.155: Failed to acquire dquot type 0
[   43.699959][ T3937] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt.
[   43.771019][ T3937] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #13: comm syz.4.155: corrupted inode contents
[   43.796771][ T3937] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #13: comm syz.4.155: mark_inode_dirty error
[   43.812103][ T3937] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #13: comm syz.4.155: corrupted inode contents
[   43.826504][ T3937] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #13: comm syz.4.155: mark_inode_dirty error
[   43.838389][ T3937] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #13: comm syz.4.155: corrupted inode contents
[   43.860748][ T3937] EXT4-fs error (device loop4) in ext4_orphan_del:301: Corrupt filesystem
[   43.901241][ T3937] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #13: comm syz.4.155: corrupted inode contents
[   43.913920][ T3937] EXT4-fs error (device loop4): ext4_truncate:4637: inode #13: comm syz.4.155: mark_inode_dirty error
[   43.926051][ T3937] EXT4-fs error (device loop4) in ext4_process_orphan:343: Corrupt filesystem
[   43.937160][ T3937] EXT4-fs (loop4): 1 truncate cleaned up
[   43.945415][ T3937] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   43.963457][ T3937] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.981330][ T3936] syz.2.153: attempt to access beyond end of device
[   43.981330][ T3936] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128
[   43.995244][ T3936] Buffer I/O error on dev loop2, logical block 128, lost async page write
[   44.004296][ T3930] syz.2.153: attempt to access beyond end of device
[   44.004296][ T3930] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128
[   44.017729][ T3930] Buffer I/O error on dev loop2, logical block 128, lost async page write
[   44.037353][ T3930] syz.2.153: attempt to access beyond end of device
[   44.037353][ T3930] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128
[   44.051868][ T3930] Buffer I/O error on dev loop2, logical block 128, lost async page write
[   44.497382][ T3961] netlink: 19 bytes leftover after parsing attributes in process `syz.1.162'.
[   44.538452][ T3967] loop3: detected capacity change from 0 to 128
[   44.554813][ T3969] netlink: 88 bytes leftover after parsing attributes in process `syz.1.167'.
[   44.563826][ T3969] netlink: 88 bytes leftover after parsing attributes in process `syz.1.167'.
[   44.574391][ T3967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   44.583491][ T3967] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   44.650774][ T3975] netlink: 4 bytes leftover after parsing attributes in process `syz.1.170'.
[   44.659760][ T3975] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   44.667244][ T3975] batman_adv: batadv0: Removing interface: batadv_slave_0
[   44.675171][ T3975] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   44.682596][ T3975] batman_adv: batadv0: Removing interface: batadv_slave_1
[   44.705087][ T3376] IPVS: starting estimator thread 0...
[   44.791005][ T3979] IPVS: using max 2400 ests per chain, 120000 per kthread
[   44.945492][ T3990] netlink: 19 bytes leftover after parsing attributes in process `syz.4.175'.
[   44.986150][ T3992] syzkaller1: entered promiscuous mode
[   44.991750][ T3992] syzkaller1: entered allmulticast mode
[   45.067252][ T3994] netlink: 28 bytes leftover after parsing attributes in process `syz.4.177'.
[   45.078589][ T3994] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[   45.159271][ T4002] loop3: detected capacity change from 0 to 128
[   45.185470][ T4002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   45.219097][ T4002] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   45.247798][ T4013] netlink: 16 bytes leftover after parsing attributes in process `syz.4.186'.
[   45.306107][ T4026] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[   45.368131][ T4029] syzkaller1: entered promiscuous mode
[   45.373949][ T4029] syzkaller1: entered allmulticast mode
[   45.395562][ T4033] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   45.403185][ T4033] batman_adv: batadv0: Removing interface: batadv_slave_0
[   45.411387][ T4033] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   45.418896][ T4033] batman_adv: batadv0: Removing interface: batadv_slave_1
[   45.451108][ T3376] IPVS: starting estimator thread 0...
[   45.541102][ T4039] IPVS: using max 2400 ests per chain, 120000 per kthread
[   46.397604][ T4112] : renamed from veth0_to_bond (while UP)
[   47.244126][ T4153] loop0: detected capacity change from 0 to 128
[   47.987023][ T4216] loop2: detected capacity change from 0 to 1024
[   48.038530][ T4216] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.255: Failed to acquire dquot type 0
[   48.052720][ T4226] FAULT_INJECTION: forcing a failure.
[   48.052720][ T4226] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   48.066018][ T4226] CPU: 1 UID: 0 PID: 4226 Comm: syz.4.259 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   48.066048][ T4226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   48.066061][ T4226] Call Trace:
[   48.066068][ T4226]  <TASK>
[   48.066077][ T4226]  __dump_stack+0x1d/0x30
[   48.066151][ T4226]  dump_stack_lvl+0xe8/0x140
[   48.066172][ T4226]  dump_stack+0x15/0x1b
[   48.066190][ T4226]  should_fail_ex+0x265/0x280
[   48.066211][ T4226]  should_fail+0xb/0x20
[   48.066227][ T4226]  should_fail_usercopy+0x1a/0x20
[   48.066249][ T4226]  _copy_from_user+0x1c/0xb0
[   48.066348][ T4226]  ___sys_sendmsg+0xc1/0x1d0
[   48.066398][ T4226]  __sys_sendmmsg+0x178/0x300
[   48.066474][ T4226]  __x64_sys_sendmmsg+0x57/0x70
[   48.066495][ T4226]  x64_sys_call+0x1c4a/0x3000
[   48.066520][ T4226]  do_syscall_64+0xd2/0x200
[   48.066575][ T4226]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   48.066632][ T4226]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   48.066731][ T4226]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   48.066839][ T4226] RIP: 0033:0x7f4c8eaaefc9
[   48.066857][ T4226] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   48.066878][ T4226] RSP: 002b:00007f4c8d50f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[   48.066966][ T4226] RAX: ffffffffffffffda RBX: 00007f4c8ed05fa0 RCX: 00007f4c8eaaefc9
[   48.066979][ T4226] RDX: 0000000000000001 RSI: 0000200000001040 RDI: 0000000000000003
[   48.066992][ T4226] RBP: 00007f4c8d50f090 R08: 0000000000000000 R09: 0000000000000000
[   48.067005][ T4226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   48.067017][ T4226] R13: 00007f4c8ed06038 R14: 00007f4c8ed05fa0 R15: 00007ffe2bfdea88
[   48.067046][ T4226]  </TASK>
[   48.281266][ T4216] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt.
[   48.313605][ T4216] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #13: comm syz.2.255: corrupted inode contents
[   48.329121][ T4232] __nla_validate_parse: 90 callbacks suppressed
[   48.329139][ T4232] netlink: 88 bytes leftover after parsing attributes in process `syz.0.263'.
[   48.337124][ T4216] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #13: comm syz.2.255: mark_inode_dirty error
[   48.344667][ T4232] netlink: 88 bytes leftover after parsing attributes in process `syz.0.263'.
[   48.358267][ T4216] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #13: comm syz.2.255: corrupted inode contents
[   48.379508][ T4234] netlink: 16 bytes leftover after parsing attributes in process `syz.4.262'.
[   48.388479][ T4234] netlink: 16 bytes leftover after parsing attributes in process `syz.4.262'.
[   48.390253][ T4216] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #13: comm syz.2.255: mark_inode_dirty error
[   48.397383][ T4234] netlink: 16 bytes leftover after parsing attributes in process `syz.4.262'.
[   48.440963][ T4236] Zero length message leads to an empty skb
[   48.449726][   T29] kauditd_printk_skb: 305 callbacks suppressed
[   48.449744][   T29] audit: type=1326 audit(48.416:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4237 comm="syz.3.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8488eefc9 code=0x7ffc0000
[   48.457967][ T4234] netlink: 16 bytes leftover after parsing attributes in process `syz.4.262'.
[   48.488483][ T4234] netlink: 16 bytes leftover after parsing attributes in process `syz.4.262'.
[   48.497423][ T4234] netlink: 16 bytes leftover after parsing attributes in process `syz.4.262'.
[   48.507931][ T4216] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #13: comm syz.2.255: corrupted inode contents
[   48.509026][   T29] audit: type=1326 audit(48.456:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4237 comm="syz.3.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7fd8488eefc9 code=0x7ffc0000
[   48.542823][   T29] audit: type=1326 audit(48.456:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4237 comm="syz.3.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8488eefc9 code=0x7ffc0000
[   48.551371][ T4216] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem
[   48.565618][   T29] audit: type=1326 audit(48.456:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4237 comm="syz.3.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fd8488eefc9 code=0x7ffc0000
[   48.596870][   T29] audit: type=1326 audit(48.456:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4237 comm="syz.3.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8488eefc9 code=0x7ffc0000
[   48.619611][   T29] audit: type=1326 audit(48.456:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4237 comm="syz.3.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7fd8488eefc9 code=0x7ffc0000
[   48.642265][   T29] audit: type=1326 audit(48.456:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4237 comm="syz.3.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8488eefc9 code=0x7ffc0000
[   48.665133][   T29] audit: type=1326 audit(48.456:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4237 comm="syz.3.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fd8488eefc9 code=0x7ffc0000
[   48.687925][   T29] audit: type=1326 audit(48.456:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4237 comm="syz.3.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8488eefc9 code=0x7ffc0000
[   48.707004][ T4216] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #13: comm syz.2.255: corrupted inode contents
[   48.710794][   T29] audit: type=1326 audit(48.456:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4237 comm="syz.3.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd8488eefc9 code=0x7ffc0000
[   48.768176][ T4234] netlink: 16 bytes leftover after parsing attributes in process `syz.4.262'.
[   48.777225][ T4234] netlink: 16 bytes leftover after parsing attributes in process `syz.4.262'.
[   48.829144][ T4216] EXT4-fs error (device loop2): ext4_truncate:4637: inode #13: comm syz.2.255: mark_inode_dirty error
[   48.840873][ T4216] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem
[   48.897173][ T4216] EXT4-fs (loop2): 1 truncate cleaned up
[   48.943099][ T4216] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   48.964530][ T4216] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.964684][ T4258] loop3: detected capacity change from 0 to 2048
[   49.042862][ T4258] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   49.084019][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.322168][ T4295] loop3: detected capacity change from 0 to 128
[   49.417215][ T4303] loop0: detected capacity change from 0 to 128
[   49.428583][ T4303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   49.451317][ T4303] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   49.548014][ T4317] loop4: detected capacity change from 0 to 128
[   49.669088][ T4332] loop3: detected capacity change from 0 to 128
[   49.948654][ T4366] loop2: detected capacity change from 0 to 128
[   50.071998][ T4378] loop4: detected capacity change from 0 to 1024
[   50.079162][ T4378] EXT4-fs: Ignoring removed bh option
[   50.086913][ T4378] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled
[   50.104169][ T4378] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   50.134590][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.265553][ T4391] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[   50.332673][ T4402] loop4: detected capacity change from 0 to 128
[   50.523550][ T4425] FAULT_INJECTION: forcing a failure.
[   50.523550][ T4425] name failslab, interval 1, probability 0, space 0, times 1
[   50.536489][ T4425] CPU: 0 UID: 0 PID: 4425 Comm: syz.0.341 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   50.536572][ T4425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   50.536588][ T4425] Call Trace:
[   50.536597][ T4425]  <TASK>
[   50.536607][ T4425]  __dump_stack+0x1d/0x30
[   50.536636][ T4425]  dump_stack_lvl+0xe8/0x140
[   50.536728][ T4425]  dump_stack+0x15/0x1b
[   50.536830][ T4425]  should_fail_ex+0x265/0x280
[   50.536899][ T4425]  should_failslab+0x8c/0xb0
[   50.536978][ T4425]  kmem_cache_alloc_node_noprof+0x57/0x4a0
[   50.537071][ T4425]  ? __alloc_skb+0x101/0x320
[   50.537108][ T4425]  __alloc_skb+0x101/0x320
[   50.537169][ T4425]  netlink_alloc_large_skb+0xbf/0xf0
[   50.537213][ T4425]  netlink_sendmsg+0x3cf/0x6b0
[   50.537289][ T4425]  ? __pfx_netlink_sendmsg+0x10/0x10
[   50.537308][ T4425]  __sock_sendmsg+0x145/0x180
[   50.537336][ T4425]  ____sys_sendmsg+0x31e/0x4e0
[   50.537381][ T4425]  ___sys_sendmsg+0x17b/0x1d0
[   50.537570][ T4425]  __x64_sys_sendmsg+0xd4/0x160
[   50.537619][ T4425]  x64_sys_call+0x191e/0x3000
[   50.537726][ T4425]  do_syscall_64+0xd2/0x200
[   50.537746][ T4425]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   50.537779][ T4425]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   50.537811][ T4425]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   50.537898][ T4425] RIP: 0033:0x7fc53480efc9
[   50.537917][ T4425] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   50.537939][ T4425] RSP: 002b:00007fc533277038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   50.537960][ T4425] RAX: ffffffffffffffda RBX: 00007fc534a65fa0 RCX: 00007fc53480efc9
[   50.538017][ T4425] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003
[   50.538029][ T4425] RBP: 00007fc533277090 R08: 0000000000000000 R09: 0000000000000000
[   50.538040][ T4425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   50.538052][ T4425] R13: 00007fc534a66038 R14: 00007fc534a65fa0 R15: 00007fff1b106f68
[   50.538071][ T4425]  </TASK>
[   50.802089][ T4429] loop3: detected capacity change from 0 to 512
[   50.822159][ T4432] loop0: detected capacity change from 0 to 512
[   50.842665][ T4429] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #13: comm syz.3.343: iget: bad i_size value: 12154757448730
[   50.845738][ T4432] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #13: comm syz.0.344: iget: bad i_size value: 12154757448730
[   50.883552][ T4429] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.343: couldn't read orphan inode 13 (err -117)
[   50.883654][ T4432] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.344: couldn't read orphan inode 13 (err -117)
[   50.897043][ T4429] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   50.912188][ T4439] loop2: detected capacity change from 0 to 128
[   50.921138][ T4429] FAULT_INJECTION: forcing a failure.
[   50.921138][ T4429] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   50.940197][ T4429] CPU: 0 UID: 0 PID: 4429 Comm: syz.3.343 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   50.940225][ T4429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   50.940238][ T4429] Call Trace:
[   50.940245][ T4429]  <TASK>
[   50.940253][ T4429]  __dump_stack+0x1d/0x30
[   50.940280][ T4429]  dump_stack_lvl+0xe8/0x140
[   50.940319][ T4429]  dump_stack+0x15/0x1b
[   50.940341][ T4429]  should_fail_ex+0x265/0x280
[   50.940364][ T4429]  should_fail+0xb/0x20
[   50.940382][ T4429]  should_fail_usercopy+0x1a/0x20
[   50.940411][ T4429]  _copy_to_user+0x20/0xa0
[   50.940444][ T4429]  __se_sys_newfstatat+0x207/0x260
[   50.940500][ T4429]  __x64_sys_newfstatat+0x55/0x70
[   50.940555][ T4429]  x64_sys_call+0x135a/0x3000
[   50.940581][ T4429]  do_syscall_64+0xd2/0x200
[   50.940601][ T4429]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   50.940629][ T4429]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   50.940763][ T4429]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   50.940792][ T4429] RIP: 0033:0x7fd8488eefc9
[   50.941025][ T4429] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   50.941044][ T4429] RSP: 002b:00007fd84734f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000106
[   50.941065][ T4429] RAX: ffffffffffffffda RBX: 00007fd848b45fa0 RCX: 00007fd8488eefc9
[   50.941080][ T4429] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffff9c
[   50.941095][ T4429] RBP: 00007fd84734f090 R08: 0000000000000000 R09: 0000000000000000
[   50.941110][ T4429] R10: 0000000000003800 R11: 0000000000000246 R12: 0000000000000001
[   50.941190][ T4429] R13: 00007fd848b46038 R14: 00007fd848b45fa0 R15: 00007ffdccb227f8
[   50.941216][ T4429]  </TASK>
[   51.128471][ T4432] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   51.166402][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.179190][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.346453][ T4466] loop0: detected capacity change from 0 to 128
[   52.602379][ T4509] loop4: detected capacity change from 0 to 2048
[   52.634064][ T4509] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   52.695805][ T4509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   52.719004][ T4509] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   52.779194][ T4509] netlink: 'syz.4.371': attribute type 1 has an invalid length.
[   52.900439][ T4533] loop1: detected capacity change from 0 to 128
[   53.354167][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   53.404765][ T4540] loop4: detected capacity change from 0 to 512
[   53.423088][ T4540] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #13: comm syz.4.382: iget: bad i_size value: 12154757448730
[   53.445696][ T4544] __nla_validate_parse: 65 callbacks suppressed
[   53.445609][ T4540] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.382: couldn't read orphan inode 13 (err -117)
[   53.445712][ T4544] netlink: 4 bytes leftover after parsing attributes in process `syz.2.381'.
[   53.495223][ T4546] netlink: 19 bytes leftover after parsing attributes in process `syz.2.383'.
[   53.504835][ T4540] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   53.509166][ T4534] syz.1.380: attempt to access beyond end of device
[   53.509166][ T4534] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128
[   53.530496][ T4534] Buffer I/O error on dev loop1, logical block 128, lost async page write
[   53.540044][ T4533] syz.1.380: attempt to access beyond end of device
[   53.540044][ T4533] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128
[   53.553665][ T4533] Buffer I/O error on dev loop1, logical block 128, lost async page write
[   53.562445][ T4540] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[   53.615371][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   53.650304][   T29] kauditd_printk_skb: 599 callbacks suppressed
[   53.650320][   T29] audit: type=1326 audit(53.616:1762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4555 comm="syz.0.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc53480efc9 code=0x7ffc0000
[   53.714415][ T4556] netlink: 19 bytes leftover after parsing attributes in process `syz.0.389'.
[   53.747110][   T29] audit: type=1326 audit(53.656:1763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4555 comm="syz.0.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc53480efc9 code=0x7ffc0000
[   53.769898][   T29] audit: type=1326 audit(53.666:1764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4555 comm="syz.0.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7fc53480efc9 code=0x7ffc0000
[   53.793167][   T29] audit: type=1326 audit(53.666:1765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4555 comm="syz.0.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc53480efc9 code=0x7ffc0000
[   53.815904][   T29] audit: type=1326 audit(53.666:1766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4555 comm="syz.0.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc53480efc9 code=0x7ffc0000
[   53.838685][   T29] audit: type=1326 audit(53.666:1767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4555 comm="syz.0.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc53480efc9 code=0x7ffc0000
[   53.861637][   T29] audit: type=1326 audit(53.666:1768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4555 comm="syz.0.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fc53480efc9 code=0x7ffc0000
[   53.884438][   T29] audit: type=1326 audit(53.666:1769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4555 comm="syz.0.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc53480efc9 code=0x7ffc0000
[   53.907218][   T29] audit: type=1326 audit(53.666:1770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4555 comm="syz.0.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc53480efc9 code=0x7ffc0000
[   53.929893][   T29] audit: type=1326 audit(53.666:1771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4555 comm="syz.0.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc53480efc9 code=0x7ffc0000
[   54.046973][ T4566] loop2: detected capacity change from 0 to 1024
[   54.125328][ T4566] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.385: Failed to acquire dquot type 0
[   54.191698][ T4566] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt.
[   54.213655][ T4566] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #13: comm syz.2.385: corrupted inode contents
[   54.226126][ T4566] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #13: comm syz.2.385: mark_inode_dirty error
[   54.281766][ T4566] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #13: comm syz.2.385: corrupted inode contents
[   54.309663][ T4566] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #13: comm syz.2.385: mark_inode_dirty error
[   54.343834][ T4592] netlink: 20 bytes leftover after parsing attributes in process `syz.4.402'.
[   54.365704][ T4566] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #13: comm syz.2.385: corrupted inode contents
[   54.402377][ T4566] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem
[   54.435450][ T4566] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #13: comm syz.2.385: corrupted inode contents
[   54.447673][ T4598] loop1: detected capacity change from 0 to 512
[   54.460833][ T4598] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #13: comm syz.1.404: iget: bad i_size value: 12154757448730
[   54.479799][ T4598] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.404: couldn't read orphan inode 13 (err -117)
[   54.492847][ T4566] EXT4-fs error (device loop2): ext4_truncate:4637: inode #13: comm syz.2.385: mark_inode_dirty error
[   54.497933][ T4598] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   54.516500][ T4566] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem
[   54.527061][ T4566] EXT4-fs (loop2): 1 truncate cleaned up
[   54.533342][ T4566] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   54.546816][ T4566] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   54.573654][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   54.644208][ T4610] FAULT_INJECTION: forcing a failure.
[   54.644208][ T4610] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   54.657569][ T4610] CPU: 1 UID: 0 PID: 4610 Comm: syz.1.409 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   54.657648][ T4610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   54.657664][ T4610] Call Trace:
[   54.657673][ T4610]  <TASK>
[   54.657683][ T4610]  __dump_stack+0x1d/0x30
[   54.657711][ T4610]  dump_stack_lvl+0xe8/0x140
[   54.657738][ T4610]  dump_stack+0x15/0x1b
[   54.657760][ T4610]  should_fail_ex+0x265/0x280
[   54.657830][ T4610]  should_fail+0xb/0x20
[   54.657922][ T4610]  should_fail_usercopy+0x1a/0x20
[   54.657985][ T4610]  _copy_to_user+0x20/0xa0
[   54.658019][ T4610]  __snd_timer_user_ioctl+0x1328/0x2470
[   54.658076][ T4610]  ? do_vfs_ioctl+0x866/0xe10
[   54.658107][ T4610]  ? selinux_file_ioctl+0x308/0x3a0
[   54.658148][ T4610]  ? __pfx_snd_timer_user_ioctl+0x10/0x10
[   54.658181][ T4610]  snd_timer_user_ioctl+0x45/0x90
[   54.658248][ T4610]  __se_sys_ioctl+0xce/0x140
[   54.658327][ T4610]  __x64_sys_ioctl+0x43/0x50
[   54.658368][ T4610]  x64_sys_call+0x1816/0x3000
[   54.658398][ T4610]  do_syscall_64+0xd2/0x200
[   54.658422][ T4610]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   54.658458][ T4610]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   54.658499][ T4610]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   54.658573][ T4610] RIP: 0033:0x7f5c7ad2efc9
[   54.658590][ T4610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   54.658607][ T4610] RSP: 002b:00007f5c79797038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   54.658636][ T4610] RAX: ffffffffffffffda RBX: 00007f5c7af85fa0 RCX: 00007f5c7ad2efc9
[   54.658647][ T4610] RDX: 0000200000000100 RSI: 0000000080e85411 RDI: 0000000000000003
[   54.658659][ T4610] RBP: 00007f5c79797090 R08: 0000000000000000 R09: 0000000000000000
[   54.658674][ T4610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   54.658712][ T4610] R13: 00007f5c7af86038 R14: 00007f5c7af85fa0 R15: 00007ffd7b537238
[   54.658737][ T4610]  </TASK>
[   54.932740][ T4621] netlink: 16 bytes leftover after parsing attributes in process `syz.0.414'.
[   54.941841][ T4621] netlink: 16 bytes leftover after parsing attributes in process `syz.0.414'.
[   54.950786][ T4621] netlink: 16 bytes leftover after parsing attributes in process `syz.0.414'.
[   54.984513][ T4621] netlink: 16 bytes leftover after parsing attributes in process `syz.0.414'.
[   54.993577][ T4621] netlink: 16 bytes leftover after parsing attributes in process `syz.0.414'.
[   55.002596][ T4621] netlink: 16 bytes leftover after parsing attributes in process `syz.0.414'.
[   55.204250][ T4647] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   55.216074][ T4647] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[   55.294360][ T4650] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[   55.369745][ T4654] bridge_slave_1: left allmulticast mode
[   55.375599][ T4654] bridge_slave_1: left promiscuous mode
[   55.381503][ T4654] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.389595][ T4654] bridge_slave_0: left allmulticast mode
[   55.395400][ T4654] bridge_slave_0: left promiscuous mode
[   55.401100][ T4654] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.703738][ T4687] loop1: detected capacity change from 0 to 512
[   55.744519][ T4687] EXT4-fs: Ignoring removed nomblk_io_submit option
[   55.791973][ T4687] EXT4-fs error (device loop1): ext4_iget_extra_inode:5075: inode #15: comm syz.1.438: corrupted in-inode xattr: invalid ea_ino
[   55.816812][ T4691] loop2: detected capacity change from 0 to 512
[   55.857671][ T4687] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.438: couldn't read orphan inode 15 (err -117)
[   55.886777][ T4687] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   55.902490][ T4691] EXT4-fs (loop2): revision level too high, forcing read-only mode
[   55.925543][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.966827][ T4691] EXT4-fs (loop2): orphan cleanup on readonly fs
[   56.007932][ T4691] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.439: corrupted inode contents
[   56.121526][ T4691] EXT4-fs (loop2): Remounting filesystem read-only
[   56.128236][ T4691] EXT4-fs (loop2): 1 truncate cleaned up
[   56.134017][   T12] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   56.144875][   T12] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   56.164898][ T4705] loop1: detected capacity change from 0 to 1024
[   56.177914][ T4703] lo speed is unknown, defaulting to 1000
[   56.184421][   T12] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started
[   56.186074][ T4705] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.442: Failed to acquire dquot type 0
[   56.201887][ T4691] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   56.225289][ T4705] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt.
[   56.240347][ T4705] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #13: comm syz.1.442: corrupted inode contents
[   56.252977][ T4705] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #13: comm syz.1.442: mark_inode_dirty error
[   56.266979][ T4705] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #13: comm syz.1.442: corrupted inode contents
[   56.291620][ T4691] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   56.318639][ T4705] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #13: comm syz.1.442: mark_inode_dirty error
[   56.331403][ T4705] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #13: comm syz.1.442: corrupted inode contents
[   56.553019][ T4705] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem
[   56.590767][ T4727] loop0: detected capacity change from 0 to 2048
[   56.610392][ T4705] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #13: comm syz.1.442: corrupted inode contents
[   56.628956][ T4705] EXT4-fs error (device loop1): ext4_truncate:4637: inode #13: comm syz.1.442: mark_inode_dirty error
[   56.641893][ T4727] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   56.660082][ T4734] loop4: detected capacity change from 0 to 128
[   56.692383][ T4734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   56.711893][ T4705] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem
[   56.714228][ T4734] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   56.756779][ T4705] EXT4-fs (loop1): 1 truncate cleaned up
[   56.783200][ T4744] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.449: bg 0: block 345: padding at end of block bitmap is not set
[   56.811886][ T4705] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   56.831793][ T4705] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   56.845811][ T4744] EXT4-fs (loop0): Remounting filesystem read-only
[   56.854488][  T380] EXT4-fs warning (device loop0): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30
[   56.869602][ T4750] Driver unsupported XDP return value 0 on prog  (id 283) dev N/A, expect packet loss!
[   56.929050][ T4744] syz.0.449 (4744) used greatest stack depth: 10360 bytes left
[   56.949073][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   57.008654][ T4761] loop3: detected capacity change from 0 to 128
[   57.033220][ T4761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   57.044257][ T4767] loop2: detected capacity change from 0 to 128
[   57.054149][ T4761] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   57.135785][ T4767] ==================================================================
[   57.144010][ T4767] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark
[   57.151755][ T4767] 
[   57.154087][ T4767] write to 0xffff88811a83da14 of 4 bytes by task 4770 on cpu 1:
[   57.161773][ T4767]  xas_set_mark+0x12b/0x140
[   57.166299][ T4767]  __folio_start_writeback+0x155/0x390
[   57.171768][ T4767]  mpage_writepages+0xd18/0x1250
[   57.176721][ T4767]  fat_writepages+0x24/0x30
[   57.181243][ T4767]  do_writepages+0x1c6/0x310
[   57.185840][ T4767]  file_write_and_wait_range+0x156/0x2c0
[   57.191490][ T4767]  __generic_file_fsync+0x46/0x140
[   57.196625][ T4767]  fat_file_fsync+0x49/0x100
[   57.201227][ T4767]  vfs_fsync_range+0x10d/0x130
[   57.206052][ T4767]  generic_file_write_iter+0x1b8/0x2f0
[   57.211528][ T4767]  iter_file_splice_write+0x666/0xa60
[   57.217025][ T4767]  direct_splice_actor+0x156/0x2a0
[   57.222192][ T4767]  splice_direct_to_actor+0x312/0x680
[   57.227590][ T4767]  do_splice_direct+0xda/0x150
[   57.232399][ T4767]  do_sendfile+0x380/0x650
[   57.236837][ T4767]  __x64_sys_sendfile64+0x105/0x150
[   57.242063][ T4767]  x64_sys_call+0x2bb4/0x3000
[   57.246904][ T4767]  do_syscall_64+0xd2/0x200
[   57.251427][ T4767]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   57.257328][ T4767] 
[   57.259653][ T4767] read to 0xffff88811a83da14 of 4 bytes by task 4767 on cpu 0:
[   57.267197][ T4767]  xas_find_marked+0x5dc/0x620
[   57.272053][ T4767]  find_get_entry+0x5d/0x380
[   57.276670][ T4767]  filemap_get_folios_tag+0x92/0x210
[   57.281997][ T4767]  filemap_fdatawait_range+0x88/0x1d0
[   57.287418][ T4767]  __writeback_single_inode+0xdb/0x7c0
[   57.292885][ T4767]  writeback_single_inode+0x16d/0x3f0
[   57.298374][ T4767]  sync_inode_metadata+0x5b/0x90
[   57.303364][ T4767]  __generic_file_fsync+0xf8/0x140
[   57.308683][ T4767]  fat_file_fsync+0x49/0x100
[   57.313431][ T4767]  vfs_fsync_range+0x10d/0x130
[   57.318226][ T4767]  generic_file_write_iter+0x1b8/0x2f0
[   57.323707][ T4767]  iter_file_splice_write+0x666/0xa60
[   57.329100][ T4767]  direct_splice_actor+0x156/0x2a0
[   57.334225][ T4767]  splice_direct_to_actor+0x312/0x680
[   57.339620][ T4767]  do_splice_direct+0xda/0x150
[   57.344420][ T4767]  do_sendfile+0x380/0x650
[   57.349139][ T4767]  __x64_sys_sendfile64+0x105/0x150
[   57.354371][ T4767]  x64_sys_call+0x2bb4/0x3000
[   57.359077][ T4767]  do_syscall_64+0xd2/0x200
[   57.363618][ T4767]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   57.369536][ T4767] 
[   57.371865][ T4767] value changed: 0x0a000021 -> 0x04000021
[   57.377596][ T4767] 
[   57.379943][ T4767] Reported by Kernel Concurrency Sanitizer on:
[   57.386098][ T4767] CPU: 0 UID: 0 PID: 4767 Comm: syz.2.463 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   57.395850][ T4767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   57.405967][ T4767] ==================================================================
[   57.689819][ T4767] syz.2.463: attempt to access beyond end of device
[   57.689819][ T4767] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128
[   57.703306][ T4767] Buffer I/O error on dev loop2, logical block 128, lost async page write
[   57.712544][ T4770] syz.2.463: attempt to access beyond end of device
[   57.712544][ T4770] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128
[   57.726101][ T4770] Buffer I/O error on dev loop2, logical block 128, lost async page write
[   57.735516][ T4770] syz.2.463: attempt to access beyond end of device
[   57.735516][ T4770] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128
[   57.748912][ T4770] Buffer I/O error on dev loop2, logical block 128, lost async page write
[   57.820129][ T4767] syz.2.463 (4767) used greatest stack depth: 10072 bytes left