last executing test programs:

52.494889313s ago: executing program 4 (id=2044):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000010c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
recvmsg(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0)
r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0)

52.11607869s ago: executing program 4 (id=2054):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x1, 0x8, &(0x7f0000001480)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB='L\x00\x00\x00 '], 0x4c}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0)
ioctl$TUNSETLINK(r4, 0x400454cd, 0x312)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94)

51.638340359s ago: executing program 4 (id=2056):
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x100, 0x19800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x700000, 0x2, 0x200000000, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, 0x0, 0x4040)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000880)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYBLOB="4dd31830e04d40195e4d8ad8bc0ee6e5d36cd5ff3ccbc24b1d4bbd0c482906aff8c297d464c428007dc1e0b4efaf96738c2419258854cdcbf392616c06cf3d16f992d08e8ad959b0be339c022f5504f0ef193e6a4eb2377c627191191bb662361a1384827ece5b9b5c9626dacf6f61f8ef2c76b188619579d7ef1642f815ec6c6a6b223c91944e82c00c1fc69ded3569f7bc9468c6189556627fd1590c9ad8d474739cb1d3701357427eeb32310274559234261069ac61deaac5cf1c1da36cd9735626255b419c7be5f45b0f7d86e681fce14ea295e8e7923029a3c1c28af4d2e08ee33ec4d7b22e16bee132400041e85c7cde9287437200c1", @ANYBLOB="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", @ANYRESDEC, @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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")
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
fadvise64(r2, 0x2, 0x0, 0x4)

51.197070898s ago: executing program 4 (id=2059):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0040, &(0x7f0000002a00)={[{@noblock_validity}, {@resgid={'resgid', 0x3d, 0xee00}}, {@acl}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@nodiscard}]}, 0xfe, 0x472, &(0x7f0000000940)="$eJzs3MtvG8UfAPDvOk6a9PFLf6U8WloIFETFI2nSBz1wAYHEAQQSHIo4BSetSt0GNUGiVQSBQxDigCpxRxyR+As4wQUBJySucEeVEMqlhZPRenfTxLVDHk6c4s9H2nZmd92Z786OPTtjN4CuNZT+kUTsjohfI2Iwyy4/YSj76+bCbOWvhdlKErXaa38m9fNuLMxW8n9i8XW7sh21Wp7f0aTc+TcjxqvVyct5fmTm4jsj01euPnX+4vi5yXOTl8ZOnz5x/HDfqbGTbYkzjevGwfenDh148Y1rL1fOXHvrx6/T+u7OjxdxtNNQdnWberTdhXXYniXppNzBirAmabulzdVb7/+D0RMDi8cG44WPOlo5YFPVarVas8/n3FwN+A9LotM1ADqj+KBPn3+LbYuGHtvCH89mD0Bp3DfzLTtSjlJ+Tm/D82079UfEmbm/v0i32KR5CACApb5Nxz9PNhv/leKeJef9L19D2RsR/4+IfRFxV0Tsj4i7I+rn3hsR962x/MYVktvHP6Xr6wpsldLx3zP52tby8V8x+ou9PXluTz3+3uTs+erksfyaHI3eHWl+dNlLlvvu+V8+a9z3aT7NPrRk/JduafnFWDCvx/VywwTdxPjMeFuCT+P/MOJguVn8SRTLOElEHIiIg+ss4/zjXx1qdezf419BG9aZal9GPJa1/1w0xF9IWq5Pjj59auzkSH9UJ4+NFHfF7X76ef7VVuVvKP42SNt/Z9P7P4s/fUZM+iOmr1y9UF+vnV57GfO/fVxJWhzbv877vy95vZ7uy/e9Nz4zc3k0oi95Kc0OLNs/duu1Rb44P43/6JHm/X9f9nhWvxL3R0R6Ex+OiAci4sG87R6KiIcj4sgK8f/w3CNvtzrWuv1XmJVvozT+iRXaP33LS1O32n/tiZ4L33/Tqvzaqtr/RD11NN+zmve/1VZwI9cOAAAA7hSl+nfgk9LwYrpUGh7OvsO/P3aWqlPTM0+cnXr30kT2Xfm90VsqZroGl8yHjuZzw0V+rCF/PJ83/rxnoJ4frkxVJzodPHS5XS36f+r3nk7XDth0fq8F3Uv/h+6l/0P30v+he+n/0KX6mu/+YKvrAXTE2j//+zelHsDWM/6H7qX/Q/fS/6ErtfxtfGlDP/m/UxPl7VGNpomB7VGNIhGlbVGN9iVe+STrEtulPkWivOr/zGKdiR1ND3X6nQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA9/gkAAP//Uo/mdg==")
syz_open_pts(0xffffffffffffffff, 0x2800)
prlimit64(0x0, 0xe, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = syz_io_uring_setup(0xd5, &(0x7f0000000640)={0x0, 0xc12d, 0x1, 0x0, 0x109}, &(0x7f0000000000)=<r3=>0x0, &(0x7f00000000c0)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0xffffffffffffffff, 0x0})
io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0)

51.06386039s ago: executing program 4 (id=2062):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x30, 0x3, 0x8, 0x201, 0x0, 0x0, {0x2, 0x0, 0x7}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x8e}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x30}}, 0x400)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x44004)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00'}, 0x10)
r3 = socket$inet(0x2, 0x2, 0x1)
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xfffffffffffffe54, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4010)
sendmsg$inet(r3, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000004c0)="1ed8b7f9d457", 0x14}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000)

50.501192551s ago: executing program 4 (id=2067):
r0 = socket$kcm(0xa, 0x1, 0x106)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4)
syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r1)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r2}, &(0x7f00000004c0), &(0x7f0000000300)=r3}, 0x20)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4)
sendmsg$kcm(r0, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x5}, 0x80, 0x0}, 0x24004059)
close(r0)

50.457824862s ago: executing program 32 (id=2067):
r0 = socket$kcm(0xa, 0x1, 0x106)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4)
syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r1)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r2}, &(0x7f00000004c0), &(0x7f0000000300)=r3}, 0x20)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4)
sendmsg$kcm(r0, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x5}, 0x80, 0x0}, 0x24004059)
close(r0)

2.845435585s ago: executing program 0 (id=2725):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x7, 0x8000, 0x1}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, <r1=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000020d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r4}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0)

2.573188581s ago: executing program 0 (id=2736):
set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004"], 0x48)
r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
readv(r0, &(0x7f0000000600)=[{&(0x7f00000005c0)=""/59, 0x3b}], 0x1)
r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="02"], 0xfe44, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendmmsg$inet6(r2, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050)
syz_read_part_table(0x59d, &(0x7f0000000000)="$eJzs0r1Le1cYB/CTgIRCJSKCgx0Eg0ujQhx0SAYrMWQxIlYcnAUHHQQHB0mJzr78A4pvIC5iZ0cxgijESTKKc0FxyZTS9hZq7dIWU/rj81ku55znuc89fG/gfy0efmo2m7EQQjPx97u/P8tPFHunxqZnQoiF+RBC/puvfz2JRRW/v/UiWpeidTGRqR3cjr+eddz1PVRTR/Ho/DIewg8hhKWn4+S/vRtfvvPcdXJjc6WwtZZbfCysPw8vDOR7tvPLuyOH2fJsd3Yu+rEu462Zn6qNntw3Sy977YNt1VojcxPVpWOfM5//1p/z3++q1CuNyf7T1aF0Z/2qvBPl/iZ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgk53nrpMbmyuFrbXc4mNh/Xl4YSDfs51f3h05zJZnu7Nz8d/qLuOtmZ+qjZ7cN0sve+2DbdVaI3MT1aVjH1q/+/FzPokW+ja8z3+/q1KvNCb7T1eH0p31q/JOlPvbx/wBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5SfqLYOzU2PRNCLMyHEMbjHce/7DcT7+suomcp2i8mMrWD2/HXs467vodq6mgqEcIfW5aejpNfteoS/GM/BwAA//8394ZP")

2.387518424s ago: executing program 3 (id=2727):
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x18)
symlink(0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00'}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94)
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0xfe, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x2, @loopback, @loopback}}}}}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain)

2.324024435s ago: executing program 0 (id=2729):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r3}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r5}, 0x10)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x20040840)

1.968789472s ago: executing program 2 (id=2730):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000"], 0x0}, 0x94)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1)
r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, &(0x7f0000000280), &(0x7f00000002c0)=r3}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10)
close(r1)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
syz_clone(0x20083500, 0x0, 0x0, 0x0, 0x0, 0x0)

1.792226105s ago: executing program 0 (id=2731):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20008050)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000500)={0x0, 0x2, 0x1, [0x0]}, 0xa)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4000004}, 0x10)
write(r0, &(0x7f0000000080)="240000001a007f0214f9f407000904080a000000000000050002000008000f40fe00000e", 0x24)

1.692338248s ago: executing program 0 (id=2732):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x0, &(0x7f0000000080)})
syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x36e, &(0x7f00000007c0)="$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")
openat(0xffffffffffffff9c, 0x0, 0x105042, 0x40)
syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00')
ioperm(0x1, 0x9, 0xfffffffffffffff8)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0)

1.56801908s ago: executing program 3 (id=2735):
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xc, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x1809049, 0x0, 0xff, 0x0, 0x0)
syz_io_uring_setup(0x800070ca, 0x0, 0x0, 0x0)
pipe2$9p(0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x58e, &(0x7f0000000180), 0x1, 0x451, &(0x7f0000000780)="$eJzs289vFFUcAPDvTFug/LAV8Qc/1CoaG3+0tKBy8KLRxIMmJl7wWNtCkIUaWhMhRNEYPBoS78ajiX+BJ70Y9WTiVe+GhBguoqc1szvD/mC3tMu2g+znkwx9b+YN7333zdt9M283gIE1kf2TROyMiN8jYqyebS0wUf9z/dqF+X+uXZhPolp9+6+kVu7vaxfmi6LFeTvyzGQakX6WxP4O9S6fO39qrlJZPJvnp1dOvz+9fO78cydPz51YPLF4Zvbo0SOHZ158Yfb5vsR5b9bWfR8tHdj7+juX35w/dvndn78dKuJvi6NPJlY7+GS12ufqyrWrKZ0Ml9gQ1iUbA1l3jdTG/1gMRaPzxuK1T0ttHLChqrkuhy9WgbtYEmW3AChH8UGf3f8W2+bNPsp39eX6DVAW9/V8qx8ZjjQvM9J2f9tPExFx7OK/X2VbbMxzCACAFt9n859nO83/0nigqdw9+drQeL6Wsjsi7ouIPRFxf0St7IMR8dA6629fJLl5/pNe6SmwNcrmfy/la1ut879i9hfjQ3luVy3+keT4ycriofw1mYyRrVl+ZpU6fnj1ty+6HWue/2VbVn8xF8zbcWV4a+s5C3Mrc7cTc7Orn0TsG+4Uf3JjJSCJiL0Rsa/HOk4+/c2BbsduHf8q+rDOVP064ql6/1+MtvgLyerrk9PborJ4aLq4Km72y6+X3upW/23F3wdZ/2/veP3fiH88aV6vXV5/HZf++LzrPc1UT9d/Y8eW/O+HcysrZ2citiRv1BvdvH+2cW6RL8pn8U8e7Dz+d0fjldgfEdlF/HBEPBIRj+Z991hEPB4RB9viar6//umVJ97rFv+d0P8Lbf0/3lqkrf8biS3RvqdzYujUj9+1/o+N5Nre/47UUpP5nrW8/62lXb1dzQAAAPD/k0bEzkjSqRvp0XRqqv4d/j2xPa0sLa88c3zpgzML9d8IjMdIWjzpGmt6HjqT39YX+dm2/OH8ufGXQ6O1/NT8UmWh7OBhwO24afyntfGf+XOo7NYBG87vtWBwNY3/pMx2AJvP5z8MLuMfBleH8T9aRjuAzdfp8//jEtoBbL628W/ZDwaI+38YXMY/DK7m8e8LADAwlkfj1j+S75TYFr2cJXHXJCK9I5rRn0TS4yhYa2Jn2QGuP1H2OxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB//BcAAP//pgHvrg==")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
getdents64(r1, &(0x7f0000000080)=""/109, 0x6d)
lseek(r1, 0x3, 0x1)
getdents64(r1, 0x0, 0x0)

1.53616499s ago: executing program 2 (id=2738):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r1)
bind$inet6(r1, 0x0, 0x0)
listen(0xffffffffffffffff, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094)

1.405643903s ago: executing program 3 (id=2741):
socket$inet6_sctp(0xa, 0x1, 0x84)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d0000000c000300686173683a69700005000400000000000900020073797a31000000000c000780080008400000005d05000500020000000500010006"], 0x50}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084)
fsopen(&(0x7f0000000100)='ramfs\x00', 0x1)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r3, 0x0, 0xfffffffffffffffd}, 0x18)
symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffffff, 0x0)

1.098841649s ago: executing program 5 (id=2745):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1276, 0x0)
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x141488c, &(0x7f0000000040)={[{@orlov}, {@discard}]}, 0x1, 0x776, &(0x7f0000001180)="$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")
r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x10)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x2d)
write(r4, &(0x7f0000004200)='t', 0x1)
sendfile(r4, r3, 0x0, 0x7ffff019)
fallocate(r2, 0x0, 0x0, 0x1001f0)

937.157262ms ago: executing program 5 (id=2746):
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0x20)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0xff, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x2, 0x10000, 0x8, 0x1, 0x9, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0)
perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0x20)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
open$dir(0x0, 0x614001, 0xef)
syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4507}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2)

882.279643ms ago: executing program 0 (id=2747):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
socket$inet6_sctp(0xa, 0x5, 0x84)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10)
syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4, 0x10000}, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
readv(r1, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/135, 0x87}], 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10)

674.137567ms ago: executing program 2 (id=2749):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002c00)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@enum64={0x7, 0x0, 0x0, 0x13, 0x1, 0x2}]}, {0x0, [0x0, 0x5f, 0x2e, 0x2e, 0x2e, 0x5f, 0x5f]}}, 0x0, 0x2d, 0x0, 0x1}, 0x28)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x2501, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x10)
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="030000000400000004000000b5"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000180)="c1dfb080cd21d308098ee68886dd", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

655.301497ms ago: executing program 1 (id=2750):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0xffff7ffffffffffd}, 0x18)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103)
pipe2$9p(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r3 = dup(r2)
write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="001800"/17, @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0xc}, 0x94)
write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3])
creat(&(0x7f00000003c0)='./file0\x00', 0x36)

584.014619ms ago: executing program 1 (id=2751):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18)
creat(&(0x7f00000000c0)='./file0\x00', 0x48)
pipe2$9p(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r3 = dup(r2)
write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3])
stat(&(0x7f0000000600)='./file0\x00', 0x0)

565.059329ms ago: executing program 2 (id=2752):
r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
bind$packet(r0, &(0x7f0000000040)={0x11, 0xf7, 0x0, 0x1, 0x1, 0x6, @random="99830002ce28"}, 0x14)
memfd_create(0x0, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010}, &(0x7f0000000040)=<r3=>0x0, &(0x7f0000000340)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
gettid()
io_uring_enter(r2, 0x47ba, 0x3e80, 0x0, 0x0, 0x0)

557.081469ms ago: executing program 5 (id=2753):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
ppoll(&(0x7f0000000180)=[{r0}], 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f6003300", 0x10)
r1 = syz_io_uring_setup(0x10e, &(0x7f0000000280)={0x0, 0x334e, 0x10, 0x2004, 0x1000030e}, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000300)=<r3=>0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000240)={0x2, 0x0, 0x5, 0xffffffff})
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7})
write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100})
io_uring_enter(r1, 0x7277, 0x0, 0x28, 0x0, 0x0)
shutdown(r0, 0x0)

516.70955ms ago: executing program 3 (id=2754):
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0)
fcntl$notify(r0, 0x402, 0x20)
r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18)
r3 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x201, 0xa401)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"})
ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000180)={0xa1, 0xe, 0xfffe, 0x3f00, 0x0, 0x40002, 0x0})
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(r5, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e1c}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r4, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0)

479.327121ms ago: executing program 1 (id=2755):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='sys_enter\x00', r2}, 0x18)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff})
r5 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x80, 0x2000000, 0x3a6}, &(0x7f00000001c0)=<r6=>0x0, &(0x7f0000000200)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r4, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000010000000100000009"], 0x18}, 0x0, 0x40000, 0x1})
io_uring_enter(r5, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)

451.348621ms ago: executing program 5 (id=2756):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080))
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[], 0x48)
socket$xdp(0x2c, 0x3, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
waitid(0x0, 0x0, 0x0, 0x4, 0x0)

416.000772ms ago: executing program 1 (id=2757):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, 0x0, 0x0)
r1 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000080)=@ethtool_sset_info={0x37, 0x8, 0xfffffffffffffffb}})
setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000400)='kfree\x00', r3}, 0x18)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40)
sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)

352.397903ms ago: executing program 2 (id=2758):
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x18)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200010, &(0x7f0000000680)=ANY=[@ANYBLOB="64656275672c757466383d312c757466383d302c757466383d312c73686f72746e616d653d77696e39352c636865636b3d7374726963742c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c002bc08d8cca74e8ecafb48437094fe1a4a2383bd9d85bff651d1101fd722e01b9b5d22f08b5fc0ac7cbf33fb553a90ae4d01d71ddeeb089f517aeaaa271899287d5b8949b22b23c2807b7d81714b89e9682f6c3faa6107733a77a4cf985560ed64ec24e255dee3654aa2ba55be4bf3ae257adba34bed8e32e4122bb46aa57a75dab0288098e42f886f09bdf63537db28a454b02a4204a7e7dac3c30a6d4b5c814916b02"], 0x3, 0x25a, &(0x7f0000000240)="$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")

289.076084ms ago: executing program 1 (id=2759):
prctl$PR_MCE_KILL(0x23, 0x2, 0x7ffffffff000)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$kcm(0x2, 0x1, 0x0)
r2 = syz_clone(0x2000, 0x0, 0x0, 0x0, 0x0, 0x0)
fcntl$lock(r1, 0x25, &(0x7f0000000100)={0x1, 0x2, 0x6, 0x9, r2})
sendmsg$nl_route(r0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000a80)='kfree\x00', r4, 0x0, 0x68f}, 0x18)
r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x100000000003, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x1000}, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x4}, 0x0, 0x1000000000000000, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000340)='!pu\t&-&&\t')

154.182907ms ago: executing program 3 (id=2760):
socket$tipc(0x1e, 0x5, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4)
syz_io_uring_setup(0x1244, 0x0, &(0x7f0000000400), &(0x7f0000010200))
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030038000b12d25a80648c2594f90224fc600d0c034002000000053582c10a153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0xc}, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000580)='./file0\x00', 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x1, 0x120b, &(0x7f0000002300)="$eJzs3M9rXFUUB/CTNv1hajJRa7UF6UE3unk2WbhyEyQF6YDSNoVWEF7NRIeZzIS8ITBFbHdu/TvEpTtB/AeyceNacJeNyy7EJ84LtglxEcFOWz6fzRzm3i9zH28YeJd7Zu/9bzZ7G1WxUY7ixMxMzG5F5MOMjBNxMhoP4p1bv/z6xo3bd66ttNur1zOvrtxcei8zFy7/+MmX37350+jcre8XfjgTu4uf7v2+/Nvuhd2Le3/e/KJbZbfKwXCUZd4dDkfl3X4n17tVr8j8uN8pq052B1Vn+8D4Rn+4tTXOcrA+P7e13amqLAfj7HXGORrmaHuc5edld5BFUeT8XPDfnY61bx/WdR1R16fidNR1Xb8Qc3EuXoz5WIhWLMZL8XK8Eufj1bgQr8XrcXEya9orBwAAAAAAAAAAAAAAAAAAgOeL/n8AAAAAAAAAAAAAAAAAAACYPv3/AAAAAAAAAAAAAAAAAAAAMH36/wEAAAAAAAAAAAAAAAAAAGD6bty+c22l3V69nnk2YvPrnbWdtea1GV/ZiG70oxNXohV/xKT7v9HUVz9sr17JicV4d/P+fv7+ztrJg/mlyd8JHJlfavJ5MH8m5h7PL0crzh+dXz4yfzbefuuxfBGt+PmzGEY/1uPv7KP8V0uZH3zUPpS/NJkHAAAAz4Mi/3Hk83tR5MxMM/XQePPmv+8P1K1D+wOHnq9n49LsFC+ciWp8r1f2+53tZ6vY/0rGvV55+WlYj+IYxf69e/C0rOcZLU5FxP/4EVP8UeKJeXTTp70SAAAAAAAAAAAAjuMYBwNnm/O2xz9OOO1rBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5iB44FAAAAAIT5W6fRsQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFcFAAD//78558w=")
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x3, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x5, 0xb9, &(0x7f00000005c0)=""/185, 0x0, 0x4e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
prctl$PR_SET_SECUREBITS(0x1c, 0x1d)
syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000004000086dd60fca33f00080000fe800000000000000000000000000000fe8000000000000000000000000000aa0000000500000000"], 0x0)
prctl$PR_SET_SECUREBITS(0x1c, 0x4)
rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000001300)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

154.000327ms ago: executing program 2 (id=2761):
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000005c0)={[{@discard}, {@bh}, {@nomblk_io_submit}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$P9_RGETLOCK(r1, &(0x7f0000000040)={0x1e, 0x37, 0x2, {0x0, 0x4, 0x8}}, 0x1e)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10)
sendfile(r1, r0, 0x0, 0x3ffff)
sendfile(r1, r0, 0x0, 0x7ffff000)

153.650147ms ago: executing program 5 (id=2762):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7fff}, 0x18)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r3 = openat$vcsa(0xffffffffffffff9c, 0x0, 0xc01, 0x0)
getsockopt$bt_BT_VOICE(r3, 0x112, 0xb, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = io_uring_setup(0x4d42, &(0x7f0000000240)={0x0, 0xca6a, 0x40, 0x0, 0x3})
io_uring_register$IORING_REGISTER_RESTRICTIONS(r4, 0xb, &(0x7f0000000480), 0x0)

40.289859ms ago: executing program 5 (id=2763):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x6, 0x0, 0x7, 0x8, 0x20005, 0x80, 0x0, 0x0, 0x0, 0x20000009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0)
getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x4c094)
r4 = socket(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x79}}, 0x800)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x74, 0x28, 0xd27, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xffff, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x44, 0x2, [@TCA_CGROUP_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0xfffffffc, 0x8, 0x0, 0x8, 0x80, {0x4, 0x1, 0x0, 0x2, 0x61f, 0x10000}, {0x5, 0x1, 0x6b4a, 0x9, 0xa6, 0x10000}, 0x4, 0x80000001, 0xc6}}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x404c0c0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@delchain={0x24, 0x11, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {0x0, 0x1}, {0x8}}}, 0x24}}, 0x10)

159.74µs ago: executing program 1 (id=2764):
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xc, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x1809049, 0x0, 0xff, 0x0, 0x0)
syz_io_uring_setup(0x800070ca, 0x0, 0x0, 0x0)
pipe2$9p(0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x58e, &(0x7f0000000180), 0x1, 0x451, &(0x7f0000000780)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
getdents64(r1, &(0x7f0000000080)=""/109, 0x6d)
lseek(r1, 0x3, 0x1)
getdents64(r1, 0x0, 0x0)

0s ago: executing program 3 (id=2765):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x18, 0x0, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x0)
close(0xffffffffffffffff)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000001000000280001801400040000000000000002000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r4, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800)

kernel console output (not intermixed with test programs):

tes leftover after parsing attributes in process `syz.2.1952'.
[  130.759898][ T8778] syz.0.1951: attempt to access beyond end of device
[  130.759898][ T8778] loop0: rw=1, sector=161, nr_sectors = 8 limit=128
[  130.828533][ T8778] syz.0.1951: attempt to access beyond end of device
[  130.828533][ T8778] loop0: rw=1, sector=177, nr_sectors = 8 limit=128
[  130.917003][ T8778] syz.0.1951: attempt to access beyond end of device
[  130.917003][ T8778] loop0: rw=1, sector=193, nr_sectors = 8 limit=128
[  130.937304][ T8778] syz.0.1951: attempt to access beyond end of device
[  130.937304][ T8778] loop0: rw=1, sector=209, nr_sectors = 8 limit=128
[  130.990352][   T29] kauditd_printk_skb: 3929 callbacks suppressed
[  130.990418][   T29] audit: type=1400 audit(1757538951.484:12806): avc:  denied  { write } for  pid=8784 comm="syz.2.1953" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  131.032890][ T8778] syz.0.1951: attempt to access beyond end of device
[  131.032890][ T8778] loop0: rw=1, sector=225, nr_sectors = 8 limit=128
[  131.113969][ T8791] sit0: entered promiscuous mode
[  131.119030][ T8791] sit0: entered allmulticast mode
[  131.223759][ T8778] syz.0.1951: attempt to access beyond end of device
[  131.223759][ T8778] loop0: rw=1, sector=241, nr_sectors = 8 limit=128
[  131.247502][   T29] audit: type=1400 audit(1757538951.734:12807): avc:  denied  { connect } for  pid=8792 comm="syz.3.1956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  131.308053][ T8778] syz.0.1951: attempt to access beyond end of device
[  131.308053][ T8778] loop0: rw=1, sector=257, nr_sectors = 8 limit=128
[  131.322226][ T8778] syz.0.1951: attempt to access beyond end of device
[  131.322226][ T8778] loop0: rw=1, sector=273, nr_sectors = 8 limit=128
[  131.341852][ T8778] syz.0.1951: attempt to access beyond end of device
[  131.341852][ T8778] loop0: rw=1, sector=289, nr_sectors = 8 limit=128
[  131.364659][ T8798] netlink: 'syz.4.1959': attribute type 13 has an invalid length.
[  131.501548][    T9] lo speed is unknown, defaulting to 1000
[  131.507441][    T9] syz0: Port: 1 Link DOWN
[  131.517977][ T8801] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1961'.
[  131.547056][ T8807] loop0: detected capacity change from 0 to 1024
[  131.553925][ T8807] EXT4-fs: Ignoring removed orlov option
[  131.588799][ T8807] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  131.663859][ T8818] netlink: 'syz.2.1965': attribute type 1 has an invalid length.
[  131.671684][ T8818] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1965'.
[  131.703322][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  131.718402][ T8821] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1967'.
[  131.782737][ T8829] siw: device registration error -23
[  131.796123][   T29] audit: type=1326 audit(1757538952.234:12808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8822 comm="syz.2.1968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d6f75eba9 code=0x7ffc0000
[  131.819889][   T29] audit: type=1326 audit(1757538952.234:12809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8822 comm="syz.2.1968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d6f75eba9 code=0x7ffc0000
[  131.843679][   T29] audit: type=1326 audit(1757538952.234:12810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8822 comm="syz.2.1968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f6d6f75eba9 code=0x7ffc0000
[  131.867832][   T29] audit: type=1326 audit(1757538952.234:12811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8822 comm="syz.2.1968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d6f75eba9 code=0x7ffc0000
[  131.884501][ T8831] lo speed is unknown, defaulting to 1000
[  131.891917][   T29] audit: type=1326 audit(1757538952.234:12812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8822 comm="syz.2.1968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6d6f75eba9 code=0x7ffc0000
[  131.921412][   T29] audit: type=1326 audit(1757538952.234:12813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8822 comm="syz.2.1968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d6f75eba9 code=0x7ffc0000
[  131.945400][   T29] audit: type=1326 audit(1757538952.234:12814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8822 comm="syz.2.1968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6d6f75eba9 code=0x7ffc0000
[  131.952218][ T8831] lo speed is unknown, defaulting to 1000
[  131.969066][   T29] audit: type=1326 audit(1757538952.234:12815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8822 comm="syz.2.1968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d6f75eba9 code=0x7ffc0000
[  132.069838][ T8836] netlink: 'syz.2.1973': attribute type 13 has an invalid length.
[  132.123713][ T8840] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1972'.
[  132.169857][ T8836] bridge0: port 1(dummy0) entered disabled state
[  132.281931][ T8845] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1972'.
[  132.310434][ T3518] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  132.323560][ T3518] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  132.328897][ T8847] netlink: zone id is out of range
[  132.340483][ T8847] netlink: zone id is out of range
[  132.345773][ T8847] netlink: zone id is out of range
[  132.346045][ T3518] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  132.351062][ T8847] netlink: zone id is out of range
[  132.360847][ T3518] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  132.366054][ T8847] netlink: zone id is out of range
[  132.379526][ T8847] netlink: zone id is out of range
[  132.384690][ T8847] netlink: zone id is out of range
[  132.389927][ T8847] netlink: zone id is out of range
[  132.395115][ T8847] netlink: zone id is out of range
[  132.401799][ T8847] netlink: zone id is out of range
[  132.515964][ T8857] loop1: detected capacity change from 0 to 512
[  132.523467][ T8857] EXT4-fs: Ignoring removed nobh option
[  132.539212][ T8857] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.1980: corrupted inode contents
[  132.551453][ T8857] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #3: comm syz.1.1980: mark_inode_dirty error
[  132.564042][ T8857] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.1980: corrupted inode contents
[  132.578208][ T8857] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #3: comm syz.1.1980: mark_inode_dirty error
[  132.607736][ T8857] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.1980: Failed to acquire dquot type 0
[  132.622003][ T8866] sg_write: data in/out 8156/14 bytes for SCSI command 0x0-- guessing data in;
[  132.622003][ T8866]    program syz.4.1983 not setting count and/or reply_len properly
[  132.641273][ T8857] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.1980: corrupted inode contents
[  132.672794][ T8857] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #16: comm syz.1.1980: mark_inode_dirty error
[  132.698784][ T8869] netlink: 496 bytes leftover after parsing attributes in process `syz.4.1984'.
[  132.726041][ T8857] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.1980: corrupted inode contents
[  132.766974][ T8857] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.1980: mark_inode_dirty error
[  132.790064][ T8857] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.1980: corrupted inode contents
[  132.807661][ T8857] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem
[  132.816615][ T8857] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.1980: corrupted inode contents
[  132.829564][ T8857] EXT4-fs error (device loop1): ext4_truncate:4666: inode #16: comm syz.1.1980: mark_inode_dirty error
[  132.841024][ T8857] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem
[  132.855333][ T8857] EXT4-fs (loop1): 1 truncate cleaned up
[  132.861500][ T8857] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  132.875061][ T8857] ext4 filesystem being mounted at /409/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  132.902615][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  132.969575][ T8876] $Hÿ: (slave 
5
@ÿ): Releasing backup interface
[  133.000783][ T8876] $Hÿ: (slave bond_slave_1): Releasing backup interface
[  133.021631][ T8876] team0: Port device team_slave_0 removed
[  133.033085][ T8876] team0: Port device team_slave_1 removed
[  133.034949][ T8882] netlink: 'syz.2.1999': attribute type 16 has an invalid length.
[  133.056456][ T8876] bond1: (slave ip6gretap1): Releasing active interface
[  133.312692][ T8907] loop1: detected capacity change from 0 to 512
[  133.319950][ T8907] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  133.366339][ T8907] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  133.389392][ T8912] loop2: detected capacity change from 0 to 512
[  133.396908][ T8912] EXT4-fs: Ignoring removed nobh option
[  133.419377][ T8912] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.1997: corrupted inode contents
[  133.451572][ T8907] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 3: comm syz.1.1998: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0
[  133.473448][ T8912] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #3: comm syz.2.1997: mark_inode_dirty error
[  133.511277][ T8907] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 12: comm syz.1.1998: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0
[  133.514821][ T8925] bond3: left allmulticast mode
[  133.533231][ T8912] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.1997: corrupted inode contents
[  133.537195][ T8925] bond3: left promiscuous mode
[  133.549651][ T8912] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.1997: mark_inode_dirty error
[  133.554053][ T8925] bridge0: port 1(bond3) entered disabled state
[  133.565580][ T8907] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 13: comm syz.1.1998: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0
[  133.575227][ T8912] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.1997: Failed to acquire dquot type 0
[  133.595087][ T8924] random: crng reseeded on system resumption
[  133.606883][ T8907] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 14: comm syz.1.1998: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[  133.637264][ T8912] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.1997: corrupted inode contents
[  133.649879][ T8907] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 15: comm syz.1.1998: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0
[  133.671151][ T8912] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #16: comm syz.2.1997: mark_inode_dirty error
[  133.682797][ T8912] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.1997: corrupted inode contents
[  133.695529][ T8907] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 16: comm syz.1.1998: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0
[  133.709317][ T8912] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.1997: mark_inode_dirty error
[  133.728935][ T8912] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.1997: corrupted inode contents
[  133.736544][ T8907] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 17: comm syz.1.1998: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[  133.741972][ T8912] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem
[  133.769445][ T8907] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #2: block 18: comm syz.1.1998: lblock 23 mapped to illegal pblock 18 (length 1)
[  133.770993][ T8912] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.1997: corrupted inode contents
[  133.796824][ T8912] EXT4-fs error (device loop2): ext4_truncate:4666: inode #16: comm syz.2.1997: mark_inode_dirty error
[  133.812798][ T8912] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem
[  133.812796][ T8907] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 19: comm syz.1.1998: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0
[  133.845251][ T8912] EXT4-fs (loop2): 1 truncate cleaned up
[  133.850728][ T8907] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 20: comm syz.1.1998: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0
[  133.851677][ T8912] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  133.884941][ T8912] ext4 filesystem being mounted at /381/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  133.932982][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.518016][ T3304] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1128: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  134.533897][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.616134][ T8955] loop1: detected capacity change from 0 to 128
[  134.900866][ T8985] loop0: detected capacity change from 0 to 512
[  134.919084][ T8985] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  134.932176][ T8985] ext4 filesystem being mounted at /403/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  135.059920][ T8992] macsec1: entered promiscuous mode
[  135.065173][ T8992] bridge0: entered promiscuous mode
[  135.081066][ T8992] bridge0: left promiscuous mode
[  135.095977][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  135.598853][ T8999] wg2: left allmulticast mode
[  135.612154][ T8998] loop0: detected capacity change from 0 to 512
[  135.638724][ T8998] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  135.655328][ T8999] wg2: entered promiscuous mode
[  135.660373][ T8999] wg2: entered allmulticast mode
[  135.676130][ T8998] ext4 filesystem being mounted at /405/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  135.682275][ T9003] loop1: detected capacity change from 0 to 128
[  135.710170][ T9005] __nla_validate_parse: 7 callbacks suppressed
[  135.710182][ T9005] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2030'.
[  135.736012][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  135.784875][ T9008] bio_check_eod: 28 callbacks suppressed
[  135.784890][ T9008] syz.1.2029: attempt to access beyond end of device
[  135.784890][ T9008] loop1: rw=1, sector=145, nr_sectors = 8 limit=128
[  135.804771][ T9008] syz.1.2029: attempt to access beyond end of device
[  135.804771][ T9008] loop1: rw=1, sector=161, nr_sectors = 8 limit=128
[  135.861860][ T9008] syz.1.2029: attempt to access beyond end of device
[  135.861860][ T9008] loop1: rw=1, sector=177, nr_sectors = 8 limit=128
[  135.886135][ T9008] syz.1.2029: attempt to access beyond end of device
[  135.886135][ T9008] loop1: rw=1, sector=193, nr_sectors = 8 limit=128
[  135.946995][ T9008] syz.1.2029: attempt to access beyond end of device
[  135.946995][ T9008] loop1: rw=1, sector=209, nr_sectors = 8 limit=128
[  135.963680][ T9008] syz.1.2029: attempt to access beyond end of device
[  135.963680][ T9008] loop1: rw=1, sector=225, nr_sectors = 8 limit=128
[  135.978575][ T9008] syz.1.2029: attempt to access beyond end of device
[  135.978575][ T9008] loop1: rw=1, sector=241, nr_sectors = 8 limit=128
[  136.002689][ T9008] syz.1.2029: attempt to access beyond end of device
[  136.002689][ T9008] loop1: rw=1, sector=257, nr_sectors = 8 limit=128
[  136.018168][   T29] kauditd_printk_skb: 142 callbacks suppressed
[  136.018179][   T29] audit: type=1326 audit(1757538956.514:12954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9017 comm="syz.0.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f086936eba9 code=0x7ffc0000
[  136.048046][   T29] audit: type=1326 audit(1757538956.514:12955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9017 comm="syz.0.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f086936eba9 code=0x7ffc0000
[  136.071516][   T29] audit: type=1326 audit(1757538956.514:12956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9017 comm="syz.0.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f086936eba9 code=0x7ffc0000
[  136.106838][ T9008] syz.1.2029: attempt to access beyond end of device
[  136.106838][ T9008] loop1: rw=1, sector=273, nr_sectors = 8 limit=128
[  136.120053][   T29] audit: type=1326 audit(1757538956.584:12957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9017 comm="syz.0.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f086936eba9 code=0x7ffc0000
[  136.146149][   T29] audit: type=1326 audit(1757538956.584:12958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9017 comm="syz.0.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f086936eba9 code=0x7ffc0000
[  136.169868][   T29] audit: type=1326 audit(1757538956.584:12959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9017 comm="syz.0.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f086936eba9 code=0x7ffc0000
[  136.193414][   T29] audit: type=1326 audit(1757538956.584:12960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9017 comm="syz.0.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f086936eba9 code=0x7ffc0000
[  136.217233][   T29] audit: type=1326 audit(1757538956.584:12961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9017 comm="syz.0.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f086936eba9 code=0x7ffc0000
[  136.240725][   T29] audit: type=1326 audit(1757538956.584:12962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9017 comm="syz.0.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f086936eba9 code=0x7ffc0000
[  136.264306][   T29] audit: type=1326 audit(1757538956.594:12963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9017 comm="syz.0.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f086936eba9 code=0x7ffc0000
[  136.267267][ T9008] syz.1.2029: attempt to access beyond end of device
[  136.267267][ T9008] loop1: rw=1, sector=289, nr_sectors = 8 limit=128
[  136.334688][ T9031] netlink: 'syz.3.2041': attribute type 27 has an invalid length.
[  136.355546][ T9031] sit0: left promiscuous mode
[  136.360422][ T9031] sit0: left allmulticast mode
[  136.377319][ T9031] vxcan1: left allmulticast mode
[  136.384745][ T9031] geneve0: left allmulticast mode
[  136.390899][ T9031] bond2: left promiscuous mode
[  136.435094][ T9031] ip6gre1: left allmulticast mode
[  136.460928][ T3392] lo speed is unknown, defaulting to 1000
[  136.466700][ T3392] syz2: Port: 1 Link DOWN
[  136.474270][ T3587] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  136.492343][ T9038] 8021q: adding VLAN 0 to HW filter on device 

[  136.499362][ T9051] netlink: 332 bytes leftover after parsing attributes in process `syz.1.2047'.
[  136.513382][ T9038] 8021q: adding VLAN 0 to HW filter on device team0
[  136.548926][   T36] lo speed is unknown, defaulting to 1000
[  136.565203][ T3587] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  136.585139][ T3587] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  136.593868][ T3468] lo speed is unknown, defaulting to 1000
[  136.600012][ T3468] syz2: Port: 1 Link ACTIVE
[  136.627085][ T3587] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  136.693592][ T9061] loop3: detected capacity change from 0 to 512
[  136.729234][ T9061] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  136.787541][ T9061] EXT4-fs (loop3): 1 orphan inode deleted
[  136.793536][ T9061] EXT4-fs (loop3): 1 truncate cleaned up
[  136.801587][ T9061] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  136.825925][ T9065] lo speed is unknown, defaulting to 1000
[  136.841381][ T9061] EXT4-fs error (device loop3): ext4_inlinedir_to_tree:1314: inode #12: block 7: comm syz.3.2051: path /407/file0/file0: bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0
[  136.892187][ T9065] lo speed is unknown, defaulting to 1000
[  137.294083][ T9075] loop4: detected capacity change from 0 to 128
[  137.380892][ T9077] loop2: detected capacity change from 0 to 2048
[  137.387331][ T9061] EXT4-fs (loop3): Remounting filesystem read-only
[  137.418160][ T9077] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  137.465152][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  137.490325][ T9077] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  137.703706][ T9084] loop4: detected capacity change from 0 to 512
[  137.714609][ T9084] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.2059: iget: bad extended attribute block 1
[  137.728009][ T9084] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.2059: couldn't read orphan inode 15 (err -117)
[  137.741297][ T9084] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  137.817054][ T9088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  137.825915][ T3305] EXT4-fs error (device loop4): ext4_readdir:264: inode #11: block 20: comm syz-executor: path /425/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=393216, rec_len=0, size=1024 fake=0
[  137.848247][ T9088] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  137.877620][ T3305] EXT4-fs error (device loop4): ext4_empty_dir:3120: inode #11: block 20: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=393216, rec_len=0, size=1024 fake=0
[  137.938820][ T3305] EXT4-fs error (device loop4): ext4_readdir:264: inode #11: block 20: comm syz-executor: path /425/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=393216, rec_len=0, size=1024 fake=0
[  137.991378][ T3305] EXT4-fs error (device loop4): ext4_empty_dir:3120: inode #11: block 20: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=393216, rec_len=0, size=1024 fake=0
[  138.029343][ T3305] EXT4-fs error (device loop4): ext4_readdir:264: inode #11: block 20: comm syz-executor: path /425/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=393216, rec_len=0, size=1024 fake=0
[  138.061469][ T3305] EXT4-fs error (device loop4): ext4_empty_dir:3120: inode #11: block 20: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=393216, rec_len=0, size=1024 fake=0
[  138.107672][ T3305] EXT4-fs error (device loop4): ext4_readdir:264: inode #11: block 20: comm syz-executor: path /425/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=393216, rec_len=0, size=1024 fake=0
[  138.137598][ T3305] EXT4-fs error (device loop4): ext4_empty_dir:3120: inode #11: block 20: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=393216, rec_len=0, size=1024 fake=0
[  138.164768][ T3305] EXT4-fs error (device loop4): ext4_readdir:264: inode #11: block 20: comm syz-executor: path /425/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=393216, rec_len=0, size=1024 fake=0
[  138.188151][ T3305] EXT4-fs error (device loop4): ext4_empty_dir:3120: inode #11: block 20: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=393216, rec_len=0, size=1024 fake=0
[  138.262147][ T9099] netlink: 'syz.0.2065': attribute type 13 has an invalid length.
[  138.270289][ T9099] netlink: 'syz.0.2065': attribute type 17 has an invalid length.
[  138.279751][ T9099] lo: left allmulticast mode
[  138.285736][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  138.300596][ T9099] tunl0: left allmulticast mode
[  138.306160][ T9099] gre0: left allmulticast mode
[  138.313315][ T9099] gretap0: left allmulticast mode
[  138.319140][ T9101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  138.331664][ T9099] erspan0: left allmulticast mode
[  138.336945][ T9101] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  138.384702][ T9099] ip_vti0: left allmulticast mode
[  138.398349][ T9099] v: left allmulticast mode
[  138.407473][ T9103] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2066'.
[  138.420608][ T9099] sit0: left allmulticast mode
[  138.434527][ T9099] ip6tnl0: left allmulticast mode
[  138.451792][ T9099] ip6gre0: left allmulticast mode
[  138.481918][ T9099] ip6gretap0: left allmulticast mode
[  138.536052][ T9099] team0: left allmulticast mode
[  138.548110][ T9099] 8021q: adding VLAN 0 to HW filter on device team0
[  138.568726][ T9099] nlmon0: left allmulticast mode
[  138.627321][ T9099] caif0: left allmulticast mode
[  138.632246][ T9099] net_ratelimit: 4 callbacks suppressed
[  138.632258][ T9099] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  138.746563][ T9094] Set syz1 is full, maxelem 65536 reached
[  138.849279][ T9106] lo speed is unknown, defaulting to 1000
[  138.899142][ T9106] lo speed is unknown, defaulting to 1000
[  138.945257][ T9106] chnl_net:caif_netlink_parms(): no params data found
[  138.987253][ T9106] bridge0: port 1(bridge_slave_0) entered blocking state
[  138.994353][ T9106] bridge0: port 1(bridge_slave_0) entered disabled state
[  139.001666][ T9106] bridge_slave_0: entered allmulticast mode
[  139.008623][ T9106] bridge_slave_0: entered promiscuous mode
[  139.018332][ T9106] bridge0: port 2(bridge_slave_1) entered blocking state
[  139.025760][ T9106] bridge0: port 2(bridge_slave_1) entered disabled state
[  139.033146][ T9106] bridge_slave_1: entered allmulticast mode
[  139.039808][ T9106] bridge_slave_1: entered promiscuous mode
[  139.320118][ T3556] 
 (unregistering): Released all slaves
[  139.337351][ T3556] bond1 (unregistering): Released all slaves
[  139.355209][ T3556] bond2 (unregistering): Released all slaves
[  139.373909][ T3556] bond3 (unregistering): Released all slaves
[  139.391369][ T3556] bond0 (unregistering): Released all slaves
[  139.428966][ T9106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  139.448521][ T9106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  139.459975][ T3556] tipc: Left network mode
[  139.484683][ T9106] team0: Port device team_slave_0 added
[  139.522241][ T9106] team0: Port device team_slave_1 added
[  139.577418][ T9106] batman_adv: batadv0: Adding interface: batadv_slave_0
[  139.584532][ T9106] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  139.610611][ T9106] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  139.657993][ T9106] batman_adv: batadv0: Adding interface: batadv_slave_1
[  139.665037][ T9106] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  139.691255][ T9106] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  139.708643][ T3556] hsr_slave_0: left promiscuous mode
[  139.726922][ T3556] hsr_slave_1: left promiscuous mode
[  139.739115][ T3556] pimreg (unregistering): left allmulticast mode
[  139.775091][ T9154] loop2: detected capacity change from 0 to 128
[  139.795588][ T9154] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  139.837570][ T9154] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  139.855570][ T3583] smc: removing ib device syz!
[  139.892347][ T3572] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  139.911023][ T9160] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2083'.
[  139.930982][ T9106] hsr_slave_0: entered promiscuous mode
[  139.944662][ T9106] hsr_slave_1: entered promiscuous mode
[  139.963653][ T9164] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2083'.
[  139.973383][ T9106] debugfs: 'hsr0' already exists in 'hsr'
[  139.986542][ T9106] Cannot create hsr debugfs directory
[  140.178032][ T9106] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  140.189156][ T9106] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  140.198492][ T9106] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  140.207960][ T9106] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  140.244959][ T9106] 8021q: adding VLAN 0 to HW filter on device bond0
[  140.258926][ T9106] 8021q: adding VLAN 0 to HW filter on device team0
[  140.268981][ T3572] bridge0: port 1(bridge_slave_0) entered blocking state
[  140.276056][ T3572] bridge0: port 1(bridge_slave_0) entered forwarding state
[  140.287132][ T3583] bridge0: port 2(bridge_slave_1) entered blocking state
[  140.294235][ T3583] bridge0: port 2(bridge_slave_1) entered forwarding state
[  140.369796][ T9106] 8021q: adding VLAN 0 to HW filter on device batadv0
[  140.495944][ T9106] veth0_vlan: entered promiscuous mode
[  140.504447][ T9106] veth1_vlan: entered promiscuous mode
[  140.520969][ T9106] veth0_macvtap: entered promiscuous mode
[  140.529401][ T9106] veth1_macvtap: entered promiscuous mode
[  140.540843][ T9106] batman_adv: batadv0: Interface activated: batadv_slave_0
[  140.552987][ T9106] batman_adv: batadv0: Interface activated: batadv_slave_1
[  140.565143][ T3583] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  140.575471][ T3583] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  140.584624][ T9215] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2093'.
[  140.596220][ T3556] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  140.611265][ T3556] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  140.669313][ T9220] loop1: detected capacity change from 0 to 512
[  140.693048][ T9220] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  140.728111][ T9220] EXT4-fs (loop1): 1 orphan inode deleted
[  140.733884][ T9220] EXT4-fs (loop1): 1 truncate cleaned up
[  140.740243][ T9220] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  140.765827][ T9220] EXT4-fs error (device loop1): ext4_inlinedir_to_tree:1314: inode #12: block 7: comm syz.1.2094: path /433/file0/file0: bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0
[  140.792662][ T9229] netlink: 332 bytes leftover after parsing attributes in process `syz.3.2098'.
[  140.819994][ T9220] EXT4-fs (loop1): Remounting filesystem read-only
[  140.834843][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  140.878803][ T9237] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2099'.
[  141.207827][ T9253] lo speed is unknown, defaulting to 1000
[  141.748950][ T9262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  141.766855][ T9262] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  141.814828][ T9268] loop3: detected capacity change from 0 to 1024
[  141.823135][ T9268] EXT4-fs: Ignoring removed orlov option
[  141.839341][ T9268] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  141.915278][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  141.915428][ T9276] loop2: detected capacity change from 0 to 1024
[  141.947095][ T9276] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  141.958189][ T9276] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  142.059074][ T9276] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #2: comm syz.2.2112: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 2, max 1(4), depth 0(0)
[  142.109406][ T9276] EXT4-fs (loop2): no journal found
[  142.191753][ T9282] tipc: Failed to remove unknown binding: 66,1,1/2886997007:330986927/330986929
[  142.276401][ T9289] loop2: detected capacity change from 0 to 2048
[  142.288621][ T9289] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  142.322719][ T9296] netlink: 196 bytes leftover after parsing attributes in process `syz.0.2121'.
[  142.410930][ T9300] loop0: detected capacity change from 0 to 512
[  142.423161][ T9299] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  142.427776][ T9300] EXT4-fs: Ignoring removed nobh option
[  142.438125][ T9299] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2000 with error 28
[  142.456161][ T9299] EXT4-fs (loop2): This should not happen!! Data will be lost
[  142.456161][ T9299] 
[  142.466220][ T9299] EXT4-fs (loop2): Total free blocks count 0
[  142.472309][ T9299] EXT4-fs (loop2): Free/Dirty block details
[  142.478256][ T9299] EXT4-fs (loop2): free_blocks=2415919104
[  142.483970][ T9299] EXT4-fs (loop2): dirty_blocks=2016
[  142.489398][ T9299] EXT4-fs (loop2): Block reservation details
[  142.495393][ T9299] EXT4-fs (loop2): i_reserved_data_blocks=126
[  142.515148][ T9300] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.2122: corrupted inode contents
[  142.534828][ T9300] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #3: comm syz.0.2122: mark_inode_dirty error
[  142.547525][ T9300] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.2122: corrupted inode contents
[  142.566993][ T9300] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.2122: mark_inode_dirty error
[  142.586521][ T9300] __quota_error: 145 callbacks suppressed
[  142.586536][ T9300] Quota error (device loop0): write_blk: dquota write failed
[  142.600175][ T9300] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  142.610206][ T9300] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.2122: Failed to acquire dquot type 0
[  142.627431][ T9300] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.2122: corrupted inode contents
[  142.639794][ T9309] loop1: detected capacity change from 0 to 512
[  142.646166][ T9300] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #16: comm syz.0.2122: mark_inode_dirty error
[  142.667335][ T9300] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.2122: corrupted inode contents
[  142.670930][ T9309] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  142.691339][   T29] audit: type=1400 audit(1757538963.184:13109): avc:  denied  { write } for  pid=9310 comm="syz.3.2126" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  142.702743][ T9300] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.2122: mark_inode_dirty error
[  142.727470][ T9300] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.2122: corrupted inode contents
[  142.739911][ T9309] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a84fc018, mo2=0002]
[  142.748415][ T9309] System zones: 0-2, 18-18, 34-34
[  142.751517][ T9300] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem
[  142.754628][ T9309] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  142.762942][ T9300] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.2122: corrupted inode contents
[  142.775569][ T3572] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28
[  142.787039][ T9309] ext4 filesystem being mounted at /439/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  142.809968][ T9300] EXT4-fs error (device loop0): ext4_truncate:4666: inode #16: comm syz.0.2122: mark_inode_dirty error
[  142.828713][ T9300] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem
[  142.839861][ T9300] EXT4-fs (loop0): 1 truncate cleaned up
[  142.846204][ T9300] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  142.859216][ T9300] ext4 filesystem being mounted at /427/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  142.871226][ T9300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  142.896816][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  143.011961][ T9330] blktrace: Concurrent blktraces are not allowed on loop7
[  143.072373][ T9339] lo speed is unknown, defaulting to 1000
[  143.078831][ T9339] lo speed is unknown, defaulting to 1000
[  143.086876][ T9339] lo speed is unknown, defaulting to 1000
[  143.092794][ T9341] loop2: detected capacity change from 0 to 1024
[  143.100585][ T9341] EXT4-fs: Ignoring removed orlov option
[  143.110609][ T9339] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  143.120435][ T9339] lo speed is unknown, defaulting to 1000
[  143.122175][ T9343] loop3: detected capacity change from 0 to 764
[  143.126566][ T9339] lo speed is unknown, defaulting to 1000
[  143.138936][ T9339] lo speed is unknown, defaulting to 1000
[  143.139629][ T9341] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  143.145206][ T9339] lo speed is unknown, defaulting to 1000
[  143.158024][ T9343] rock: directory entry would overflow storage
[  143.163147][ T9339] lo speed is unknown, defaulting to 1000
[  143.168938][ T9343] rock: sig=0x5245, size=8, remaining=5
[  143.230557][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  143.261905][ T9349] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2141'.
[  143.271042][ T9349] unsupported nlmsg_type 40
[  143.432705][ T9360] loop2: detected capacity change from 0 to 128
[  143.502960][ T9362] bio_check_eod: 105 callbacks suppressed
[  143.502976][ T9362] syz.2.2145: attempt to access beyond end of device
[  143.502976][ T9362] loop2: rw=1, sector=145, nr_sectors = 16 limit=128
[  143.522241][ T9362] syz.2.2145: attempt to access beyond end of device
[  143.522241][ T9362] loop2: rw=1, sector=169, nr_sectors = 8 limit=128
[  143.535810][ T9362] syz.2.2145: attempt to access beyond end of device
[  143.535810][ T9362] loop2: rw=1, sector=185, nr_sectors = 8 limit=128
[  143.549387][ T9362] syz.2.2145: attempt to access beyond end of device
[  143.549387][ T9362] loop2: rw=1, sector=201, nr_sectors = 8 limit=128
[  143.563066][ T9362] syz.2.2145: attempt to access beyond end of device
[  143.563066][ T9362] loop2: rw=1, sector=217, nr_sectors = 8 limit=128
[  143.578234][ T9362] syz.2.2145: attempt to access beyond end of device
[  143.578234][ T9362] loop2: rw=1, sector=233, nr_sectors = 8 limit=128
[  143.595898][ T9362] syz.2.2145: attempt to access beyond end of device
[  143.595898][ T9362] loop2: rw=1, sector=249, nr_sectors = 8 limit=128
[  143.624648][ T9363] lo speed is unknown, defaulting to 1000
[  143.721207][ T9363] lo speed is unknown, defaulting to 1000
[  143.843059][ T9362] syz.2.2145: attempt to access beyond end of device
[  143.843059][ T9362] loop2: rw=1, sector=265, nr_sectors = 8 limit=128
[  143.861508][ T9362] syz.2.2145: attempt to access beyond end of device
[  143.861508][ T9362] loop2: rw=1, sector=281, nr_sectors = 8 limit=128
[  143.906594][ T9365] netlink: 'syz.0.2146': attribute type 4 has an invalid length.
[  143.914708][ T9362] syz.2.2145: attempt to access beyond end of device
[  143.914708][ T9362] loop2: rw=1, sector=297, nr_sectors = 8 limit=128
[  143.934736][ T9365] netlink: 'syz.0.2146': attribute type 4 has an invalid length.
[  144.055521][ T9367] loop1: detected capacity change from 0 to 2048
[  144.085972][ T9367] EXT4-fs: Ignoring removed orlov option
[  144.120683][ T9367] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  144.458446][ T9380] loop0: detected capacity change from 0 to 1024
[  144.478951][ T9380] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  144.500068][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  144.527847][ T9380] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.2152: Allocating blocks 449-513 which overlap fs metadata
[  144.559528][ T9380] EXT4-fs (loop0): pa ffff888106dcfa10: logic 48, phys. 177, len 21
[  144.567631][ T9380] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4
[  144.599933][   T29] audit: type=1326 audit(1757538965.094:13110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9385 comm="syz.1.2154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42e708eba9 code=0x7ffc0000
[  144.623655][   T29] audit: type=1326 audit(1757538965.094:13111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9385 comm="syz.1.2154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42e708eba9 code=0x7ffc0000
[  144.647202][   T29] audit: type=1326 audit(1757538965.094:13112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9385 comm="syz.1.2154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f42e708eba9 code=0x7ffc0000
[  144.670810][   T29] audit: type=1326 audit(1757538965.094:13113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9385 comm="syz.1.2154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42e708eba9 code=0x7ffc0000
[  144.694327][   T29] audit: type=1326 audit(1757538965.094:13114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9385 comm="syz.1.2154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f42e708eba9 code=0x7ffc0000
[  144.717918][   T29] audit: type=1326 audit(1757538965.094:13115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9385 comm="syz.1.2154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42e708eba9 code=0x7ffc0000
[  144.741741][   T29] audit: type=1326 audit(1757538965.094:13116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9385 comm="syz.1.2154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f42e708eba9 code=0x7ffc0000
[  144.820756][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  144.925446][ T9389] SELinux: ebitmap: truncated map
[  144.932220][ T9389] SELinux: failed to load policy
[  144.951809][ T9395] siw: device registration error -23
[  144.968086][ T9398] netlink: 'syz.1.2160': attribute type 4 has an invalid length.
[  144.977490][ T9398] netlink: 'syz.1.2160': attribute type 4 has an invalid length.
[  144.985649][    T9] lo speed is unknown, defaulting to 1000
[  144.989766][   T23] lo speed is unknown, defaulting to 1000
[  145.017110][ T9410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  145.025791][ T9410] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  145.038638][ T9412] netlink: 'syz.1.2163': attribute type 1 has an invalid length.
[  145.046784][ T9412] netlink: 'syz.1.2163': attribute type 2 has an invalid length.
[  145.055318][ T9412] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2163'.
[  145.066704][ T9414] netlink: 260 bytes leftover after parsing attributes in process `syz.2.2164'.
[  145.076035][ T9414] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2164'.
[  145.096769][ T9416] loop1: detected capacity change from 0 to 512
[  145.104220][ T9416] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  145.116360][ T9416] EXT4-fs (loop1): 1 truncate cleaned up
[  145.120648][ T9418] sd 0:0:1:0: device reset
[  145.122682][ T9416] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  145.217435][ T9434] loop5: detected capacity change from 0 to 512
[  145.225159][ T9434] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  145.234480][ T9436] siw: device registration error -23
[  145.258454][ T9434] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a84fc018, mo2=0002]
[  145.267410][ T9434] System zones: 0-2, 18-18, 34-34
[  145.274335][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  145.284689][ T9434] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  145.288401][ T9443] netlink: 'syz.0.2176': attribute type 27 has an invalid length.
[  145.299586][ T9434] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  145.341790][ T9106] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  145.353028][ T9443] batadv0: left allmulticast mode
[  145.358348][ T9443] veth0: left allmulticast mode
[  145.363419][ T9443] veth1: left allmulticast mode
[  145.368532][ T9443] wg0: left allmulticast mode
[  145.373536][ T9443] wg2: left allmulticast mode
[  145.378373][ T9443] veth0_to_bridge: left allmulticast mode
[  145.384269][ T9443] veth1_to_bridge: left allmulticast mode
[  145.390217][ T9443] bridge_slave_1: left allmulticast mode
[  145.396334][ T9443] veth0_to_bond: left allmulticast mode
[  145.402001][ T9443] bond_slave_0: left allmulticast mode
[  145.407517][ T9443] veth1_to_bond: left allmulticast mode
[  145.413170][ T9443] bond_slave_1: left allmulticast mode
[  145.418813][ T9443] veth0_to_team: left allmulticast mode
[  145.424617][ T9443] team_slave_0: left allmulticast mode
[  145.430256][ T9443] veth1_to_team: left allmulticast mode
[  145.435939][ T9443] team_slave_1: left allmulticast mode
[  145.441482][ T9443] veth0_to_batadv: left allmulticast mode
[  145.447402][ T9443] batadv_slave_0: left allmulticast mode
[  145.453178][ T9443] veth1_to_batadv: left allmulticast mode
[  145.459343][ T9443] batadv_slave_1: left allmulticast mode
[  145.465238][ T9443] xfrm0: left allmulticast mode
[  145.470224][ T9443] veth0_to_hsr: left allmulticast mode
[  145.475883][ T9443] veth1_to_hsr: left allmulticast mode
[  145.481610][ T9443] hsr0: left allmulticast mode
[  145.486439][ T9443] hsr_slave_0: left allmulticast mode
[  145.491817][ T9443] hsr_slave_1: left allmulticast mode
[  145.497341][ T9443] veth1_virt_wifi: left allmulticast mode
[  145.503076][ T9443] veth0_virt_wifi: left allmulticast mode
[  145.509084][ T9443] vlan0: left allmulticast mode
[  145.513987][ T9443] macvlan0: left allmulticast mode
[  145.519284][ T9443] macvlan1: left allmulticast mode
[  145.524604][ T9443] ipvlan0: left allmulticast mode
[  145.529965][ T9443] ipvlan1: left allmulticast mode
[  145.535042][ T9443] veth1_macvtap: left allmulticast mode
[  145.541081][ T9443] veth0_macvtap: left allmulticast mode
[  145.546820][ T9443] macsec0: left allmulticast mode
[  145.551874][ T9443] geneve0: left allmulticast mode
[  145.557014][ T9443] geneve1: left allmulticast mode
[  145.562184][ T9443] sit1: left allmulticast mode
[  145.567310][ T9443] veth2: left allmulticast mode
[  145.572370][ T9443] veth3: left allmulticast mode
[  145.577551][ T9443] ·¡: left allmulticast mode
[  145.582255][ T9443] bond1: left allmulticast mode
[  145.587303][ T9443] vlan2: left allmulticast mode
[  145.592173][ T9443] bond2: left allmulticast mode
[  145.597331][ T9443] dummy0: left allmulticast mode
[  145.602767][ T9443] team1: left allmulticast mode
[  145.625161][ T9449] 8021q: adding VLAN 0 to HW filter on device team0
[  145.641529][ T9449] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  145.667372][ T9460] loop1: detected capacity change from 0 to 164
[  146.000203][ T9489] loop1: detected capacity change from 0 to 1024
[  146.007810][ T9489] EXT4-fs: Ignoring removed orlov option
[  146.019208][ T9489] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  146.068096][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  146.088462][ T9494] netlink: 'syz.1.2195': attribute type 27 has an invalid length.
[  146.158615][ T9494] veth0: left allmulticast mode
[  146.163607][ T9494] veth1: left allmulticast mode
[  146.168694][ T9494] wg0: left allmulticast mode
[  146.173419][ T9494] wg2: left allmulticast mode
[  146.178386][ T9494] veth0_to_bridge: left allmulticast mode
[  146.184307][ T9494] bridge_slave_0: left allmulticast mode
[  146.190131][ T9494] veth1_to_bridge: left allmulticast mode
[  146.195968][ T9494] bridge_slave_1: left allmulticast mode
[  146.201693][ T9494] veth0_to_bond: left allmulticast mode
[  146.207328][ T9494] 
@ÿ: left allmulticast mode
[  146.212210][ T9494] veth1_to_bond: left allmulticast mode
[  146.218199][ T9494] bond_slave_1: left allmulticast mode
[  146.223855][ T9494] veth0_to_team: left promiscuous mode
[  146.229385][ T9494] team_slave_0: left allmulticast mode
[  146.234980][ T9494] veth1_to_team: left allmulticast mode
[  146.240624][ T9494] team_slave_1: left allmulticast mode
[  146.246164][ T9494] veth0_to_batadv: left allmulticast mode
[  146.252304][ T9494] batadv_slave_0: left allmulticast mode
[  146.258079][ T9494] veth1_to_batadv: left allmulticast mode
[  146.264216][ T9494] batadv_slave_1: left allmulticast mode
[  146.270019][ T9494] xfrm0: left allmulticast mode
[  146.275047][ T9494] veth0_to_hsr: left allmulticast mode
[  146.280763][ T9494] veth1_virt_wifi: left allmulticast mode
[  146.286677][ T9494] veth0_virt_wifi: left allmulticast mode
[  146.335590][ T9494] vlan0: left allmulticast mode
[  146.340574][ T9494] vlan1: left allmulticast mode
[  146.345548][ T9494] macvlan0: left allmulticast mode
[  146.351384][ T9494] macvlan1: left allmulticast mode
[  146.356543][ T9494] ipvlan0: left allmulticast mode
[  146.361706][ T9494] ipvlan1: left allmulticast mode
[  146.366719][ T9494] veth0_vlan: left allmulticast mode
[  146.372257][ T9494] veth1_macvtap: left allmulticast mode
[  146.377940][ T9494] veth0_macvtap: left allmulticast mode
[  146.383673][ T9494] macvtap0: left allmulticast mode
[  146.389213][ T9494] macsec0: left allmulticast mode
[  146.394299][ T9494] geneve0: left allmulticast mode
[  146.399471][ T9494] geneve1: left allmulticast mode
[  146.404579][ T9494] syztnl0: left allmulticast mode
[  146.409921][ T9494] bond1: left allmulticast mode
[  146.414820][ T9494] ip6gretap1: left allmulticast mode
[  146.420480][ T9494] ip6_vti1: left allmulticast mode
[  146.425653][ T9494] team1: left allmulticast mode
[  146.430640][ T9494] bridge1: left allmulticast mode
[  146.528385][ T9494] vlan2: left allmulticast mode
[  146.533352][ T9494] hsr0: left allmulticast mode
[  146.538441][ T9494] hsr_slave_0: left allmulticast mode
[  146.565769][ T9494] bond0: left promiscuous mode
[  146.574989][   T36] lo speed is unknown, defaulting to 1000
[  146.580982][   T36] syz0: Port: 1 Link DOWN
[  146.608070][ T9496] 8021q: adding VLAN 0 to HW filter on device $Hÿ
[  146.626280][ T9496] 8021q: adding VLAN 0 to HW filter on device team0
[  146.642128][ T9496] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  146.659848][   T36] lo speed is unknown, defaulting to 1000
[  146.665631][   T36] syz0: Port: 1 Link ACTIVE
[  146.747594][ T9508] futex_wake_op: syz.3.2200 tries to shift op by -1; fix this program
[  146.759420][ T9508] pim6reg: entered allmulticast mode
[  146.835346][ T9513] lo speed is unknown, defaulting to 1000
[  146.937714][ T9513] lo speed is unknown, defaulting to 1000
[  147.097073][ T9508] pim6reg: left allmulticast mode
[  147.318619][ T9531] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2209'.
[  147.525415][ T9538] bridge0: entered promiscuous mode
[  147.526209][ T9542] netlink: 'syz.2.2212': attribute type 27 has an invalid length.
[  147.537354][ T9538] macsec1: entered promiscuous mode
[  147.548998][ T9541] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2222'.
[  147.568194][ T9538] bridge0: left promiscuous mode
[  147.576101][ T9542] vxcan1: left allmulticast mode
[  147.583270][ T9542] vlan2: left promiscuous mode
[  147.588106][ T9542] bond2: left promiscuous mode
[  147.593417][ T9542] team1: left promiscuous mode
[  147.598422][ T9542] team1: left allmulticast mode
[  147.669170][ T9542] 8021q: adding VLAN 0 to HW filter on device bond0
[  147.678315][ T9542] 8021q: adding VLAN 0 to HW filter on device team0
[  147.686913][ T9542] bridge0: port 1(dummy0) entered blocking state
[  147.693298][ T9542] bridge0: port 1(dummy0) entered forwarding state
[  147.702862][ T9542] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  147.887083][   T29] kauditd_printk_skb: 97 callbacks suppressed
[  147.887099][   T29] audit: type=1400 audit(1757538968.384:13214): avc:  denied  { ioctl } for  pid=9552 comm="syz.0.2216" path="socket:[30120]" dev="sockfs" ino=30120 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  147.954377][ T9557] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2218'.
[  147.971591][ T9557] 8021q: adding VLAN 0 to HW filter on device bond3
[  147.985244][ T9557] 8021q: adding VLAN 0 to HW filter on device bond3
[  147.992877][ T9557] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address
[  148.006020][ T9557] bond3: (slave vxcan1): Error -95 calling set_mac_address
[  148.040048][ T9559] macvlan2: entered promiscuous mode
[  148.045383][ T9559] macvlan2: entered allmulticast mode
[  148.057128][ T9559] bond3: (slave macvlan2): Error -98 calling set_mac_address
[  148.209276][ T9563] loop0: detected capacity change from 0 to 128
[  148.222343][ T9565] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2231'.
[  148.231991][ T9567] loop5: detected capacity change from 0 to 1024
[  148.239076][ T9567] EXT4-fs: Ignoring removed orlov option
[  148.247871][ T9563] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  148.261619][ T9563] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  148.281969][ T9567] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  148.303120][ T3532] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  148.352498][ T9106] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  148.431389][ T9591] netlink: 'syz.5.2227': attribute type 13 has an invalid length.
[  148.469700][ T9591] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  148.487582][ T9598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  148.496288][ T9598] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  149.215966][   T29] audit: type=1400 audit(1757538969.704:13215): avc:  denied  { read write } for  pid=9615 comm="syz.5.2243" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  149.239750][   T29] audit: type=1400 audit(1757538969.704:13216): avc:  denied  { open } for  pid=9615 comm="syz.5.2243" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  149.245381][ T9620] loop0: detected capacity change from 0 to 1024
[  149.265257][ T9619] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2242'.
[  149.279514][ T9620] EXT4-fs: Ignoring removed orlov option
[  149.292002][   T29] audit: type=1400 audit(1757538969.774:13217): avc:  denied  { ioctl } for  pid=9615 comm="syz.5.2243" path="/dev/nvram" dev="devtmpfs" ino=98 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  149.325124][ T9619] team0 (unregistering): Port device bond0 removed
[  149.325345][ T9622] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2244'.
[  149.340799][ T9622] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2244'.
[  149.342701][ T9620] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  149.349870][ T9622] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2244'.
[  149.372583][ T9619] team0 (unregistering): Port device geneve1 removed
[  149.382909][ T9622] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2244'.
[  149.386255][   T29] audit: type=1326 audit(1757538969.864:13218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9625 comm="syz.1.2245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42e708eba9 code=0x7ffc0000
[  149.416313][   T29] audit: type=1326 audit(1757538969.864:13219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9625 comm="syz.1.2245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f42e708eba9 code=0x7ffc0000
[  149.439862][   T29] audit: type=1326 audit(1757538969.864:13220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9625 comm="syz.1.2245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42e708eba9 code=0x7ffc0000
[  149.449687][ T9627] ÿÿÿÿÿÿ: renamed from vlan1
[  149.463461][   T29] audit: type=1326 audit(1757538969.864:13221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9625 comm="syz.1.2245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42e708eba9 code=0x7ffc0000
[  149.463517][   T29] audit: type=1326 audit(1757538969.864:13222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9625 comm="syz.1.2245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f42e708eba9 code=0x7ffc0000
[  149.463595][   T29] audit: type=1326 audit(1757538969.864:13223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9625 comm="syz.1.2245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42e708eba9 code=0x7ffc0000
[  149.545559][ T9631] serio: Serial port ptm0
[  149.554062][ T9632] loop3: detected capacity change from 0 to 1024
[  149.561852][ T9632] EXT4-fs: Ignoring removed orlov option
[  149.577538][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  149.597724][ T9632] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  149.670504][ T9641] loop2: detected capacity change from 0 to 2048
[  149.678003][ T9641] EXT4-fs: Ignoring removed orlov option
[  149.881524][ T9641] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  149.914086][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  149.931974][ T9651] loop1: detected capacity change from 0 to 512
[  149.938969][ T9651] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  149.951974][ T9651] EXT4-fs (loop1): 1 truncate cleaned up
[  149.957991][ T9651] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  150.037053][ T9661] bridge0: entered allmulticast mode
[  150.095483][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  150.174802][ T9666] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2257'.
[  150.185969][ T9666] netem: change failed
[  150.247447][ T9670] loop3: detected capacity change from 0 to 8192
[  150.288085][ T9670]  loop3: p1 p2[DM] p4
[  150.292877][ T9670] loop3: p1 size 196608 extends beyond EOD, truncated
[  150.300516][ T9670] loop3: p2 start 4292936063 is beyond EOD, truncated
[  150.307470][ T9670] loop3: p4 size 50331648 extends beyond EOD, truncated
[  150.587838][ T9688] validate_nla: 1 callbacks suppressed
[  150.587854][ T9688] netlink: 'syz.0.2266': attribute type 1 has an invalid length.
[  150.617333][ T9688] 8021q: adding VLAN 0 to HW filter on device bond4
[  150.814469][ T9692] lo speed is unknown, defaulting to 1000
[  150.919721][ T9692] lo speed is unknown, defaulting to 1000
[  151.055086][ T9688] 8021q: adding VLAN 0 to HW filter on device batadv1
[  151.075928][ T9688] bond4: (slave batadv1): making interface the new active one
[  151.113420][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  151.114698][ T9688] bond4: (slave batadv1): Enslaving as an active interface with an up link
[  151.164907][ T9695] netlink: 'syz.3.2269': attribute type 4 has an invalid length.
[  151.179497][    T9] lo speed is unknown, defaulting to 1000
[  151.185396][    T9] syz2: Port: 1 Link DOWN
[  151.186404][ T9695] netlink: 'syz.3.2269': attribute type 4 has an invalid length.
[  151.200723][ T3392] lo speed is unknown, defaulting to 1000
[  151.206475][ T3392] syz2: Port: 1 Link ACTIVE
[  151.233526][ T9701] netlink: 'syz.2.2272': attribute type 10 has an invalid length.
[  151.274774][ T3406] lo speed is unknown, defaulting to 1000
[  151.779538][ T9713] lo speed is unknown, defaulting to 1000
[  151.877844][ T9713] lo speed is unknown, defaulting to 1000
[  152.227044][ T9722] loop2: detected capacity change from 0 to 1024
[  152.255023][ T9724] lo speed is unknown, defaulting to 1000
[  152.365840][ T9724] lo speed is unknown, defaulting to 1000
[  152.564391][ T9737] pim6reg: entered allmulticast mode
[  152.580100][ T9737] pim6reg: left allmulticast mode
[  152.700210][ T9744] __nla_validate_parse: 2 callbacks suppressed
[  152.700226][ T9744] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2287'.
[  152.774770][ T9744] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2287'.
[  152.882806][ T9751] loop5: detected capacity change from 0 to 8192
[  152.993640][ T9722] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  153.043615][ T9722] SELinux:  Context @ is not valid (left unmapped).
[  153.050506][   T29] kauditd_printk_skb: 126 callbacks suppressed
[  153.050518][   T29] audit: type=1400 audit(1757538973.544:13350): avc:  denied  { relabelto } for  pid=9721 comm="syz.2.2280" name="cgroup.controllers" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="@"
[  153.120338][ T9766] loop8: detected capacity change from 0 to 7
[  153.162431][   T29] audit: type=1400 audit(1757538973.644:13351): avc:  denied  { read append } for  pid=9768 comm="syz.1.2297" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  153.186527][   T29] audit: type=1400 audit(1757538973.644:13352): avc:  denied  { open } for  pid=9768 comm="syz.1.2297" path="/dev/ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  153.226228][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  153.253652][ T9774] loop2: detected capacity change from 0 to 128
[  153.261603][   T29] audit: type=1400 audit(1757538973.744:13353): avc:  denied  { ioctl } for  pid=9772 comm="syz.2.2299" path="/dev/cpu/1/msr" dev="devtmpfs" ino=87 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  153.319581][ T9777] loop0: detected capacity change from 0 to 128
[  153.354113][ T9779] bio_check_eod: 15 callbacks suppressed
[  153.354128][ T9779] syz.2.2299: attempt to access beyond end of device
[  153.354128][ T9779] loop2: rw=2049, sector=145, nr_sectors = 8 limit=128
[  153.376128][ T9779] syz.2.2299: attempt to access beyond end of device
[  153.376128][ T9779] loop2: rw=2049, sector=161, nr_sectors = 8 limit=128
[  153.390292][ T9779] syz.2.2299: attempt to access beyond end of device
[  153.390292][ T9779] loop2: rw=2049, sector=177, nr_sectors = 8 limit=128
[  153.405779][ T9779] syz.2.2299: attempt to access beyond end of device
[  153.405779][ T9779] loop2: rw=2049, sector=193, nr_sectors = 8 limit=128
[  153.419811][ T9779] syz.2.2299: attempt to access beyond end of device
[  153.419811][ T9779] loop2: rw=2049, sector=209, nr_sectors = 8 limit=128
[  153.434018][ T9779] syz.2.2299: attempt to access beyond end of device
[  153.434018][ T9779] loop2: rw=2049, sector=225, nr_sectors = 8 limit=128
[  153.454535][ T9779] syz.2.2299: attempt to access beyond end of device
[  153.454535][ T9779] loop2: rw=2049, sector=241, nr_sectors = 8 limit=128
[  153.470497][ T9779] syz.2.2299: attempt to access beyond end of device
[  153.470497][ T9779] loop2: rw=2049, sector=257, nr_sectors = 8 limit=128
[  153.484114][ T9779] syz.2.2299: attempt to access beyond end of device
[  153.484114][ T9779] loop2: rw=2049, sector=273, nr_sectors = 8 limit=128
[  153.497956][ T9779] syz.2.2299: attempt to access beyond end of device
[  153.497956][ T9779] loop2: rw=2049, sector=289, nr_sectors = 8 limit=128
[  153.583609][ T9782] netlink: 'syz.5.2302': attribute type 83 has an invalid length.
[  153.757152][ T9789] Falling back ldisc for ttyS3.
[  153.845151][ T9794] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2306'.
[  153.894252][ T9795] lo speed is unknown, defaulting to 1000
[  153.991724][ T9795] lo speed is unknown, defaulting to 1000
[  154.233055][   T29] audit: type=1326 audit(1757538974.724:13354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9798 comm="syz.1.2307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f42e7085b67 code=0x7ffc0000
[  154.309861][ T9797] loop5: detected capacity change from 0 to 2048
[  154.359741][ T9797] EXT4-fs: Ignoring removed orlov option
[  154.454844][   T29] audit: type=1326 audit(1757538974.754:13355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9798 comm="syz.1.2307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f42e702ada9 code=0x7ffc0000
[  154.478431][   T29] audit: type=1326 audit(1757538974.754:13356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9798 comm="syz.1.2307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f42e7085b67 code=0x7ffc0000
[  154.502046][   T29] audit: type=1326 audit(1757538974.754:13357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9798 comm="syz.1.2307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f42e702ada9 code=0x7ffc0000
[  154.525805][   T29] audit: type=1326 audit(1757538974.754:13358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9798 comm="syz.1.2307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42e708eba9 code=0x7ffc0000
[  154.550165][   T29] audit: type=1326 audit(1757538974.754:13359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9798 comm="syz.1.2307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42e708eba9 code=0x7ffc0000
[  154.891540][ T9807] loop8: detected capacity change from 0 to 7
[  155.318188][ T9814] netlink: 'syz.3.2314': attribute type 10 has an invalid length.
[  155.352086][ T9814] netlink: 'syz.3.2314': attribute type 10 has an invalid length.
[  155.427238][ T9826] netlink: 'syz.5.2312': attribute type 1 has an invalid length.
[  155.435002][ T9826] netlink: 'syz.5.2312': attribute type 4 has an invalid length.
[  155.442822][ T9826] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.2312'.
[  155.453078][ T9826] netlink: 'syz.5.2312': attribute type 1 has an invalid length.
[  155.460945][ T9826] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.2312'.
[  155.638379][ T9844] tipc: Started in network mode
[  155.643331][ T9844] tipc: Node identity ac14140f, cluster identity 4711
[  155.650905][ T9844] tipc: New replicast peer: 255.255.255.83
[  155.656895][ T9844] tipc: Enabled bearer <udp:£>, priority 10
[  155.771773][ T9853] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  155.779213][ T9853] IPv6: NLM_F_CREATE should be set when creating new route
[  155.835053][ T9858] veth0: entered promiscuous mode
[  155.854969][ T9858] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2329'.
[  156.482098][ T9889] sch_tbf: burst 32855 is lower than device lo mtu (11337746) !
[  156.509829][ T9891] loop0: detected capacity change from 0 to 512
[  156.528889][ T9891] ext4 filesystem being mounted at /465/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  156.666962][ T3392] tipc: Node number set to 2886997007
[  156.725567][ T9909] loop3: detected capacity change from 0 to 128
[  156.855011][ T9913] validate_nla: 1 callbacks suppressed
[  156.855021][ T9913] netlink: 'syz.5.2350': attribute type 12 has an invalid length.
[  157.163101][ T9935] loop3: detected capacity change from 0 to 1024
[  157.193028][ T9935] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.2360: Allocating blocks 449-513 which overlap fs metadata
[  157.214182][ T9935] EXT4-fs (loop3): pa ffff888106dcfa80: logic 48, phys. 177, len 21
[  157.222333][ T9935] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4
[  157.279195][ T9941] program syz.3.2362 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  157.288894][ T9941] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  157.382474][ T9947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  157.391249][ T9947] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  157.482781][ T9953] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2368'.
[  157.663188][ T3392] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=3392 comm=kworker/1:3
[  157.676308][ T9962] 9pnet: p9_errstr2errno: server reported unknown error 1844674407
[  157.751248][ T9966] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.809588][ T9966] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.869674][ T9966] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.919976][ T9966] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.992620][   T12] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  158.003586][   T12] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  158.017818][ T3550] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  158.033194][ T3550] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  158.043869][ T9970] loop1: detected capacity change from 0 to 128
[  158.266548][   T29] kauditd_printk_skb: 155 callbacks suppressed
[  158.266560][   T29] audit: type=1326 audit(1757538978.754:13515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9986 comm="syz.3.2383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85be44eba9 code=0x7ffc0000
[  158.297805][   T29] audit: type=1326 audit(1757538978.794:13516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9986 comm="syz.3.2383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85be44eba9 code=0x7ffc0000
[  158.322559][   T29] audit: type=1326 audit(1757538978.824:13517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9986 comm="syz.3.2383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f85be44eba9 code=0x7ffc0000
[  158.346114][   T29] audit: type=1326 audit(1757538978.824:13518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9986 comm="syz.3.2383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85be44eba9 code=0x7ffc0000
[  158.369683][   T29] audit: type=1326 audit(1757538978.824:13519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9986 comm="syz.3.2383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85be44eba9 code=0x7ffc0000
[  158.393293][   T29] audit: type=1326 audit(1757538978.844:13520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9986 comm="syz.3.2383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f85be44eba9 code=0x7ffc0000
[  158.417002][   T29] audit: type=1326 audit(1757538978.844:13521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9986 comm="syz.3.2383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85be44eba9 code=0x7ffc0000
[  158.440710][   T29] audit: type=1326 audit(1757538978.844:13522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9986 comm="syz.3.2383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85be44eba9 code=0x7ffc0000
[  158.464315][   T29] audit: type=1326 audit(1757538978.844:13523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9986 comm="syz.3.2383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f85be44eba9 code=0x7ffc0000
[  158.487861][   T29] audit: type=1326 audit(1757538978.844:13524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9986 comm="syz.3.2383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85be44eba9 code=0x7ffc0000
[  158.538542][ T9994] unsupported nla_type 52263
[  158.568855][ T9992] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  158.598710][T10004] Set syz1 is full, maxelem 65536 reached
[  158.609999][T10004] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2398'.
[  158.619156][T10004] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2398'.
[  158.629827][T10009] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.652340][T10004] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2398'.
[  158.661688][T10004] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2398'.
[  158.695922][T10004] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2398'.
[  158.705178][T10004] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2398'.
[  158.752544][T10009] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.804706][T10021] tipc: Started in network mode
[  158.809781][T10021] tipc: Node identity 3a1eb64030b4, cluster identity 4711
[  158.816985][T10021] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  158.825018][T10009] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.836683][T10021] tipc: Disabling bearer <eth:syzkaller0>
[  158.878505][T10009] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.076349][T10030] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2397'.
[  159.112330][T10037] loop1: detected capacity change from 0 to 164
[  159.122596][T10037] bio_check_eod: 103 callbacks suppressed
[  159.122609][T10037] syz.1.2400: attempt to access beyond end of device
[  159.122609][T10037] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164
[  159.143101][T10037] syz.1.2400: attempt to access beyond end of device
[  159.143101][T10037] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164
[  159.183070][T10039] loop3: detected capacity change from 0 to 1024
[  159.190316][T10039] EXT4-fs: Ignoring removed orlov option
[  159.200863][T10039] EXT4-fs mount: 6 callbacks suppressed
[  159.200898][T10039] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  159.228100][T10044] loop1: detected capacity change from 0 to 128
[  159.246938][T10046] netlink: 'syz.0.2404': attribute type 10 has an invalid length.
[  159.297482][T10046] bond2: (slave dummy0): Releasing active interface
[  159.313676][T10046] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  159.329580][T10046] team0: Failed to send options change via netlink (err -105)
[  159.337111][T10046] team0: Port device dummy0 added
[  159.352557][T10046] netlink: 'syz.0.2404': attribute type 10 has an invalid length.
[  159.361991][T10046] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  159.412837][T10046] team0: Failed to send options change via netlink (err -105)
[  159.420845][T10046] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  159.434842][T10046] team0: Port device dummy0 removed
[  159.776447][T10060] bridge0: entered allmulticast mode
[  159.838050][T10062] loop2: detected capacity change from 0 to 1024
[  159.845393][T10062] EXT4-fs: Ignoring removed orlov option
[  159.873523][T10062] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  160.011900][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  160.045801][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  160.291823][T10077] lo speed is unknown, defaulting to 1000
[  160.396049][T10077] lo speed is unknown, defaulting to 1000
[  160.677952][T10081] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2419'.
[  160.809362][T10092] loop3: detected capacity change from 0 to 512
[  160.816226][T10092] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  160.828106][T10092] EXT4-fs (loop3): 1 truncate cleaned up
[  160.834187][T10092] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  160.862648][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  161.045698][T10103] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  161.057210][T10102] tipc: Resetting bearer <eth:syzkaller0>
[  161.091228][T10102] tipc: Disabling bearer <eth:syzkaller0>
[  161.147584][T10118] loop7: detected capacity change from 0 to 16384
[  161.210235][T10119] pim6reg: entered allmulticast mode
[  161.217567][T10119] pim6reg: left allmulticast mode
[  161.776820][T10118] loop7: detected capacity change from 16384 to 16383
[  161.825709][T10125] loop1: detected capacity change from 0 to 1024
[  161.869163][T10125] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  161.890757][T10124] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2445'.
[  161.899764][T10124] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2445'.
[  161.902127][T10125] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.2435: Allocating blocks 449-513 which overlap fs metadata
[  161.940266][T10125] EXT4-fs (loop1): pa ffff888105b667e0: logic 48, phys. 177, len 21
[  161.948339][T10125] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4
[  162.034303][T10137] loop2: detected capacity change from 0 to 512
[  162.060594][T10137] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  162.071538][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  162.072390][T10137] EXT4-fs (loop2): 1 truncate cleaned up
[  162.091969][T10137] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  162.114196][T10142] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  162.127772][T10142] tipc: Disabling bearer <eth:syzkaller0>
[  162.134642][T10144] netlink: 'syz.0.2440': attribute type 1 has an invalid length.
[  162.149093][T10144] 8021q: adding VLAN 0 to HW filter on device bond5
[  162.159613][T10144] bond5 (unregistering): Released all slaves
[  162.218160][T10151] netlink: 'syz.1.2442': attribute type 4 has an invalid length.
[  162.241575][ T3406] lo speed is unknown, defaulting to 1000
[  162.247478][ T3406] syz0: Port: 1 Link DOWN
[  162.254798][T10151] netlink: 'syz.1.2442': attribute type 4 has an invalid length.
[  162.264427][ T3392] lo speed is unknown, defaulting to 1000
[  162.270565][ T3392] syz0: Port: 1 Link ACTIVE
[  162.299224][T10155] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  162.601783][T10162] lo speed is unknown, defaulting to 1000
[  162.699644][T10162] lo speed is unknown, defaulting to 1000
[  163.036295][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  163.053507][T10169] loop2: detected capacity change from 0 to 128
[  163.062607][T10169] syz.2.2449: attempt to access beyond end of device
[  163.062607][T10169] loop2: rw=2049, sector=138, nr_sectors = 8 limit=128
[  163.076644][T10169] syz.2.2449: attempt to access beyond end of device
[  163.076644][T10169] loop2: rw=2049, sector=146, nr_sectors = 8 limit=128
[  163.091509][T10169] syz.2.2449: attempt to access beyond end of device
[  163.091509][T10169] loop2: rw=2049, sector=152, nr_sectors = 2 limit=128
[  163.104976][T10169] Buffer I/O error on dev loop2, logical block 76, lost async page write
[  163.124371][T10169] syz.2.2449: attempt to access beyond end of device
[  163.124371][T10169] loop2: rw=2049, sector=170, nr_sectors = 8 limit=128
[  163.138828][T10169] syz.2.2449: attempt to access beyond end of device
[  163.138828][T10169] loop2: rw=2049, sector=176, nr_sectors = 2 limit=128
[  163.152334][T10169] Buffer I/O error on dev loop2, logical block 88, lost async page write
[  163.161407][T10169] syz.2.2449: attempt to access beyond end of device
[  163.161407][T10169] loop2: rw=2049, sector=178, nr_sectors = 8 limit=128
[  163.180504][ T3592] kworker/u8:66: attempt to access beyond end of device
[  163.180504][ T3592] loop2: rw=1, sector=138, nr_sectors = 8 limit=128
[  163.194316][ T3592] kworker/u8:66: attempt to access beyond end of device
[  163.194316][ T3592] loop2: rw=1, sector=146, nr_sectors = 2 limit=128
[  163.207799][ T3592] Buffer I/O error on dev loop2, logical block 73, lost async page write
[  163.208722][T10169] Buffer I/O error on dev loop2, logical block 92, lost async page write
[  163.217875][ T3592] Buffer I/O error on dev loop2, logical block 74, lost async page write
[  163.233838][ T3592] Buffer I/O error on dev loop2, logical block 75, lost async page write
[  163.243205][ T3592] Buffer I/O error on dev loop2, logical block 76, lost async page write
[  163.253976][T10169] Buffer I/O error on dev loop2, logical block 104, lost async page write
[  163.264592][T10169] Buffer I/O error on dev loop2, logical block 108, lost async page write
[  163.275154][T10169] Buffer I/O error on dev loop2, logical block 120, lost async page write
[  163.296027][   T29] kauditd_printk_skb: 221 callbacks suppressed
[  163.296116][   T29] audit: type=1326 audit(1757538983.784:13746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10168 comm="syz.2.2449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d6f75eba9 code=0x7ffc0000
[  163.327002][   T29] audit: type=1326 audit(1757538983.784:13747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10168 comm="syz.2.2449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d6f75eba9 code=0x7ffc0000
[  163.502151][ T3564] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  163.512978][ T3569] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  163.523351][ T3569] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  163.535861][ T3569] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  163.554467][T10175] loop2: detected capacity change from 0 to 1024
[  163.573013][T10181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  163.582447][T10181] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  163.585723][T10175] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  163.663496][   T29] audit: type=1326 audit(1757538984.154:13748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10189 comm="syz.0.2466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f086936eba9 code=0x7ffc0000
[  163.687271][   T29] audit: type=1326 audit(1757538984.154:13749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10189 comm="syz.0.2466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f086936eba9 code=0x7ffc0000
[  163.692572][T10188] bridge0: port 2(bridge_slave_1) entered disabled state
[  163.719462][T10188] bridge0: port 1(bridge_slave_0) entered disabled state
[  163.727894][T10188] bridge0: entered allmulticast mode
[  163.741442][   T29] audit: type=1326 audit(1757538984.204:13750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10189 comm="syz.0.2466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f086936eba9 code=0x7ffc0000
[  163.765393][   T29] audit: type=1326 audit(1757538984.234:13751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10189 comm="syz.0.2466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f086936eba9 code=0x7ffc0000
[  163.778660][T10192] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.2451: Allocating blocks 257-513 which overlap fs metadata
[  163.815271][T10195] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  163.816382][   T29] audit: type=1326 audit(1757538984.294:13752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10189 comm="syz.0.2466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f086936eba9 code=0x7ffc0000
[  163.845712][   T29] audit: type=1326 audit(1757538984.294:13753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10189 comm="syz.0.2466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f086936eba9 code=0x7ffc0000
[  163.869909][   T29] audit: type=1326 audit(1757538984.294:13754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10189 comm="syz.0.2466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f086936eba9 code=0x7ffc0000
[  163.893573][   T29] audit: type=1326 audit(1757538984.304:13755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10189 comm="syz.0.2466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f086936eba9 code=0x7ffc0000
[  163.937130][T10195] tipc: Disabling bearer <eth:syzkaller0>
[  163.948539][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  164.069524][T10209] loop5: detected capacity change from 0 to 128
[  164.076471][T10209] /dev/loop5: Can't open blockdev
[  164.127847][T10212] __nla_validate_parse: 6 callbacks suppressed
[  164.127863][T10212] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2464'.
[  164.416680][T10221] syzkaller1: entered promiscuous mode
[  164.422317][T10221] syzkaller1: entered allmulticast mode
[  164.517780][T10228] SELinux: failed to load policy
[  164.544441][T10231] loop1: detected capacity change from 0 to 1024
[  164.570029][T10231] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  164.626283][T10238] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  164.640001][T10238] tipc: Disabling bearer <eth:syzkaller0>
[  164.780779][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  164.813963][T10247] loop0: detected capacity change from 0 to 1024
[  164.863521][T10247] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  164.877948][T10247] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #3: block 1: comm syz.0.2479: lblock 1 mapped to illegal pblock 1 (length 1)
[  164.883536][T10253] loop3: detected capacity change from 0 to 1024
[  164.899378][T10247] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.2479: Failed to acquire dquot type 0
[  164.911111][T10247] EXT4-fs error (device loop0): ext4_free_blocks:6696: comm syz.0.2479: Freeing blocks not in datazone - block = 0, count = 4096
[  164.930597][T10247] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.2479: Invalid inode bitmap blk 0 in block_group 0
[  164.932841][T10253] EXT4-fs: Ignoring removed orlov option
[  164.957881][ T3569] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:50: lblock 1 mapped to illegal pblock 1 (length 1)
[  164.976449][T10247] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem
[  164.997463][T10253] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  165.014002][T10247] EXT4-fs (loop0): 1 orphan inode deleted
[  165.020608][ T3569] EXT4-fs error (device loop0): ext4_release_dquot:6973: comm kworker/u8:50: Failed to release dquot type 0
[  165.033502][T10247] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  165.052805][T10247] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  165.103198][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  165.235480][T10275] loop5: detected capacity change from 0 to 1024
[  165.247041][T10275] EXT4-fs: Ignoring removed orlov option
[  165.259630][T10275] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  165.743046][T10285] lo speed is unknown, defaulting to 1000
[  165.843897][T10285] lo speed is unknown, defaulting to 1000
[  166.686859][T10291] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  166.694881][T10291] tipc: Disabling bearer <eth:syzkaller0>
[  166.715230][T10288] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2491'.
[  166.724370][T10288] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2491'.
[  166.756563][ T9106] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  166.808857][T10297] loop1: detected capacity change from 0 to 1024
[  166.815791][T10297] EXT4-fs: Ignoring removed orlov option
[  166.824088][T10297] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  167.240402][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  167.260954][T10306] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.279502][T10307] loop1: detected capacity change from 0 to 512
[  167.287401][T10307] msdos: Unknown parameter '€
'
[  167.318268][T10306] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.368430][T10306] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.418667][T10306] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.789457][T10331] netlink: 14 bytes leftover after parsing attributes in process `gtp'.
[  167.798545][T10331] hsr_slave_0: left promiscuous mode
[  168.082854][T10346] tipc: New replicast peer: 255.255.255.83
[  168.088844][T10346] tipc: Enabled bearer <udp:£>, priority 10
[  168.521423][T10358] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2514'.
[  168.530544][T10358] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2514'.
[  168.552490][T10358] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2514'.
[  168.561610][T10358] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2514'.
[  168.564463][T10364] loop0: detected capacity change from 0 to 512
[  168.578925][T10364] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  168.589739][T10364] EXT4-fs (loop0): 1 truncate cleaned up
[  168.595862][T10364] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  168.630073][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  168.639335][T10358] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2514'.
[  168.653222][T10358] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2514'.
[  168.671954][T10370] netlink: 'syz.1.2519': attribute type 4 has an invalid length.
[  168.697351][T10368] lo speed is unknown, defaulting to 1000
[  168.702347][T10370] netlink: 'syz.1.2519': attribute type 4 has an invalid length.
[  168.717979][ T4856] lo speed is unknown, defaulting to 1000
[  168.723720][ T4856] syz0: Port: 1 Link DOWN
[  168.740843][ T3392] lo speed is unknown, defaulting to 1000
[  168.746742][ T3392] syz0: Port: 1 Link ACTIVE
[  168.803214][T10368] lo speed is unknown, defaulting to 1000
[  168.933576][T10379] loop0: detected capacity change from 0 to 1024
[  168.950288][ T3599] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  168.971875][T10379] EXT4-fs: Ignoring removed nobh option
[  168.977532][T10379] EXT4-fs: Ignoring removed bh option
[  168.988908][ T3599] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  169.008088][T10379] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  169.020610][ T3569] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  169.029587][ T3569] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  169.045848][T10379] pimreg: entered allmulticast mode
[  169.053497][T10379] pimreg: left allmulticast mode
[  169.113940][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  169.255844][T10396] loop3: detected capacity change from 0 to 512
[  169.279584][T10396] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  169.336730][T10396] EXT4-fs (loop3): 1 truncate cleaned up
[  169.357047][T10396] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  169.395174][   T29] kauditd_printk_skb: 274 callbacks suppressed
[  169.395187][   T29] audit: type=1326 audit(1757539245.881:14027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10399 comm="syz.1.2529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42e708eba9 code=0x7ffc0000
[  169.425351][   T29] audit: type=1326 audit(1757539245.881:14028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10399 comm="syz.1.2529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42e708eba9 code=0x7ffc0000
[  169.543246][   T29] audit: type=1326 audit(1757539245.941:14029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10399 comm="syz.1.2529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f42e708eba9 code=0x7ffc0000
[  169.564835][T10402] loop1: detected capacity change from 0 to 2048
[  169.567081][   T29] audit: type=1326 audit(1757539245.941:14030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10399 comm="syz.1.2529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42e708eba9 code=0x7ffc0000
[  169.597082][   T29] audit: type=1326 audit(1757539245.941:14031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10399 comm="syz.1.2529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42e708eba9 code=0x7ffc0000
[  169.620927][   T29] audit: type=1326 audit(1757539245.971:14032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10399 comm="syz.1.2529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f42e708eba9 code=0x7ffc0000
[  169.644764][   T29] audit: type=1326 audit(1757539245.971:14033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10399 comm="syz.1.2529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42e708eba9 code=0x7ffc0000
[  169.668435][   T29] audit: type=1326 audit(1757539245.971:14034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10399 comm="syz.1.2529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42e708eba9 code=0x7ffc0000
[  169.692033][   T29] audit: type=1326 audit(1757539245.971:14035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10399 comm="syz.1.2529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f42e708eba9 code=0x7ffc0000
[  169.716406][   T29] audit: type=1326 audit(1757539245.971:14036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10399 comm="syz.1.2529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42e708eba9 code=0x7ffc0000
[  169.740434][T10403] delete_channel: no stack
[  169.786107][T10402]  loop1: p1 < > p4
[  169.805785][T10402] loop1: p4 size 8388608 extends beyond EOD, truncated
[  169.957845][T10416] loop5: detected capacity change from 0 to 256
[  169.972268][T10416] FAT-fs (loop5): Invalid FSINFO signature: 0x0ffffff8, 0x00000000 (sector = 33)
[  169.981887][T10416] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 1, start df000002)
[  169.992108][T10416] FAT-fs (loop5): Filesystem has been set read-only
[  170.226772][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  170.324192][T10430] syzkaller1: entered promiscuous mode
[  170.329823][T10430] syzkaller1: entered allmulticast mode
[  171.338564][T10451] __nla_validate_parse: 1 callbacks suppressed
[  171.338574][T10451] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2548'.
[  171.374131][T10453] loop0: detected capacity change from 0 to 128
[  171.400855][T10456] loop3: detected capacity change from 0 to 128
[  171.410671][T10456] bio_check_eod: 27 callbacks suppressed
[  171.410687][T10456] syz.3.2550: attempt to access beyond end of device
[  171.410687][T10456] loop3: rw=2049, sector=138, nr_sectors = 8 limit=128
[  171.430175][T10456] syz.3.2550: attempt to access beyond end of device
[  171.430175][T10456] loop3: rw=2049, sector=146, nr_sectors = 8 limit=128
[  171.445299][T10456] syz.3.2550: attempt to access beyond end of device
[  171.445299][T10456] loop3: rw=2049, sector=152, nr_sectors = 2 limit=128
[  171.458741][T10456] buffer_io_error: 9 callbacks suppressed
[  171.458823][T10456] Buffer I/O error on dev loop3, logical block 76, lost async page write
[  171.617068][T10456] syz.3.2550: attempt to access beyond end of device
[  171.617068][T10456] loop3: rw=2049, sector=170, nr_sectors = 8 limit=128
[  171.892706][ T3599] kworker/u8:67: attempt to access beyond end of device
[  171.892706][ T3599] loop3: rw=1, sector=138, nr_sectors = 8 limit=128
[  171.908036][T10456] syz.3.2550: attempt to access beyond end of device
[  171.908036][T10456] loop3: rw=2049, sector=176, nr_sectors = 2 limit=128
[  171.921826][T10456] Buffer I/O error on dev loop3, logical block 88, lost async page write
[  171.931856][ T3599] kworker/u8:67: attempt to access beyond end of device
[  171.931856][ T3599] loop3: rw=1, sector=146, nr_sectors = 2 limit=128
[  171.945851][ T3599] Buffer I/O error on dev loop3, logical block 73, lost async page write
[  171.956402][T10456] syz.3.2550: attempt to access beyond end of device
[  171.956402][T10456] loop3: rw=2049, sector=178, nr_sectors = 8 limit=128
[  171.970623][ T3599] kworker/u8:67: attempt to access beyond end of device
[  171.970623][ T3599] loop3: rw=1, sector=148, nr_sectors = 2 limit=128
[  171.984060][ T3599] Buffer I/O error on dev loop3, logical block 74, lost async page write
[  172.039560][ T3599] kworker/u8:67: attempt to access beyond end of device
[  172.039560][ T3599] loop3: rw=1, sector=150, nr_sectors = 2 limit=128
[  172.053210][ T3599] Buffer I/O error on dev loop3, logical block 75, lost async page write
[  172.111871][ T3599] Buffer I/O error on dev loop3, logical block 76, lost async page write
[  172.122885][T10456] Buffer I/O error on dev loop3, logical block 92, lost async page write
[  172.134271][T10456] Buffer I/O error on dev loop3, logical block 104, lost async page write
[  172.187904][T10456] Buffer I/O error on dev loop3, logical block 108, lost async page write
[  172.228768][T10456] Buffer I/O error on dev loop3, logical block 120, lost async page write
[  172.613556][T10469] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2553'.
[  172.659009][T10469] 8021q: adding VLAN 0 to HW filter on device bond5
[  172.675685][T10469] bond5: (slave dummy0): Enslaving as an active interface with an up link
[  172.689065][T10469] netlink: 'syz.0.2553': attribute type 10 has an invalid length.
[  172.696941][T10469] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2553'.
[  172.710187][T10469] dummy0: entered promiscuous mode
[  172.716786][T10469] bond5: (slave dummy0): Releasing backup interface
[  172.778435][T10475] syzkaller1: entered promiscuous mode
[  172.784078][T10475] syzkaller1: entered allmulticast mode
[  173.068612][T10485] lo speed is unknown, defaulting to 1000
[  173.130637][T10485] lo speed is unknown, defaulting to 1000
[  173.723228][T10488] lo speed is unknown, defaulting to 1000
[  173.788936][T10488] lo speed is unknown, defaulting to 1000
[  174.514714][   T29] kauditd_printk_skb: 98 callbacks suppressed
[  174.514728][   T29] audit: type=1326 audit(1757539251.013:14135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10493 comm="syz.3.2561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85be44eba9 code=0x7ffc0000
[  174.600126][T10497] tipc: New replicast peer: 255.255.255.83
[  174.606299][T10497] tipc: Enabled bearer <udp:£>, priority 10
[  174.623036][   T29] audit: type=1326 audit(1757539251.013:14136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10493 comm="syz.3.2561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f85be44eba9 code=0x7ffc0000
[  174.646959][   T29] audit: type=1326 audit(1757539251.013:14137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10493 comm="syz.3.2561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85be44eba9 code=0x7ffc0000
[  174.670632][   T29] audit: type=1326 audit(1757539251.013:14138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10493 comm="syz.3.2561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f85be44eba9 code=0x7ffc0000
[  174.694427][   T29] audit: type=1326 audit(1757539251.013:14139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10493 comm="syz.3.2561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f85be44ebe3 code=0x7ffc0000
[  174.718088][   T29] audit: type=1326 audit(1757539251.013:14140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10493 comm="syz.3.2561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f85be44ebe3 code=0x7ffc0000
[  174.741591][   T29] audit: type=1326 audit(1757539251.013:14141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10493 comm="syz.3.2561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85be44eba9 code=0x7ffc0000
[  174.765479][   T29] audit: type=1326 audit(1757539251.053:14142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10493 comm="syz.3.2561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85be44eba9 code=0x7ffc0000
[  174.799218][   T29] audit: type=1326 audit(1757539251.063:14143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10493 comm="syz.3.2561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85be44eba9 code=0x7ffc0000
[  174.822907][   T29] audit: type=1326 audit(1757539251.063:14144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10493 comm="syz.3.2561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85be44eba9 code=0x7ffc0000
[  175.066830][T10534] loop5: detected capacity change from 0 to 128
[  175.078066][T10534] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002]
[  175.087159][T10534] System zones: 1-3, 19-19, 35-36
[  175.095259][T10534] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  175.116185][T10534] ext4 filesystem being mounted at /78/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  175.130575][T10538] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2577'.
[  175.175173][ T9106] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  175.363627][   T36] lo speed is unknown, defaulting to 1000
[  175.369475][   T36] syz0: Port: 1 Link DOWN
[  175.602771][ T4839] tipc: Node number set to 178959936
[  175.622205][T10571] loop3: detected capacity change from 0 to 128
[  175.634177][T10571] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002]
[  175.662177][T10571] System zones: 1-3, 19-19, 35-36
[  175.668001][T10571] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  175.681028][T10571] ext4 filesystem being mounted at /536/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  175.744392][ T3309] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  175.793226][T10574] lo speed is unknown, defaulting to 1000
[  175.879520][   T36] hid_parser_main: 16 callbacks suppressed
[  175.879536][   T36] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  175.916282][   T36] hid-generic 0000:0000:0000.0007: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  176.014825][T10574] lo speed is unknown, defaulting to 1000
[  176.421433][T10595] loop3: detected capacity change from 0 to 128
[  176.969278][T10631] batman_adv: batadv0: Removing interface: veth1_vlan
[  176.978462][T10631] bond4: (slave batadv1): Releasing active interface
[  177.009894][T10633] loop1: detected capacity change from 0 to 1024
[  177.023248][T10633] EXT4-fs: Ignoring removed orlov option
[  177.031187][T10633] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  177.060904][T10636] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2612'.
[  177.295069][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  177.347215][T10648] loop1: detected capacity change from 0 to 8192
[  177.361068][T10650] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2618'.
[  177.497816][T10660] IPVS: Error connecting to the multicast addr
[  177.555748][    T9] IPVS: starting estimator thread 0...
[  177.580628][T10648] FAT-fs (loop1): error, corrupted directory (invalid entries)
[  177.588341][T10648] FAT-fs (loop1): Filesystem has been set read-only
[  177.598022][T10672] loop0: detected capacity change from 0 to 1024
[  177.606745][T10672] EXT4-fs: Ignoring removed orlov option
[  177.634494][T10672] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  177.651866][T10673] IPVS: using max 2736 ests per chain, 136800 per kthread
[  177.946174][T10690] loop5: detected capacity change from 0 to 512
[  177.962559][T10690] EXT4-fs: Mount option(s) incompatible with ext2
[  178.013553][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  178.046823][T10698] netlink: 'syz.0.2636': attribute type 10 has an invalid length.
[  178.055817][T10698] dummy0: left promiscuous mode
[  178.062199][T10698] team0: Port device dummy0 added
[  178.069978][T10698] netlink: 'syz.0.2636': attribute type 10 has an invalid length.
[  178.079319][T10698] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  178.090692][T10698] team0: Failed to send options change via netlink (err -105)
[  178.099300][T10698] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  178.108738][T10698] team0: Port device dummy0 removed
[  178.163416][T10708] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2642'.
[  178.324779][T10713] lo speed is unknown, defaulting to 1000
[  178.418831][T10713] lo speed is unknown, defaulting to 1000
[  178.957840][T10724] loop1: detected capacity change from 0 to 1024
[  179.102979][T10724] EXT4-fs: Ignoring removed orlov option
[  179.108682][T10724] EXT4-fs: Ignoring removed nomblk_io_submit option
[  179.113980][T10730] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2651'.
[  179.156029][T10730] 8021q: adding VLAN 0 to HW filter on device bond1
[  179.168379][T10724] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  179.199366][T10730] bond1: (slave dummy0): Enslaving as an active interface with an up link
[  179.203375][T10738] loop2: detected capacity change from 0 to 2048
[  179.237033][T10730] netlink: 'syz.5.2651': attribute type 10 has an invalid length.
[  179.245017][T10730] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2651'.
[  179.258800][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  179.307872][T10730] dummy0: entered promiscuous mode
[  179.332089][T10738] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  179.344337][T10730] bond1: (slave dummy0): Releasing backup interface
[  179.411948][T10738] ext4 filesystem being mounted at /486/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  179.554161][T10748] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2653'.
[  179.683772][T10756] lo speed is unknown, defaulting to 1000
[  179.732314][T10760] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2660'.
[  179.769248][T10756] lo speed is unknown, defaulting to 1000
[  179.832513][T10765] veth0: entered promiscuous mode
[  179.838139][T10765] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2661'.
[  179.848246][T10765] veth0 (unregistering): left promiscuous mode
[  179.908854][ T3592] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:66: bg 0: block 345: padding at end of block bitmap is not set
[  179.923900][ T3592] EXT4-fs (loop2): Remounting filesystem read-only
[  179.930534][ T3564] EXT4-fs warning (device loop2): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30
[  179.997804][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  180.025846][T10773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  180.034470][T10773] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  180.065834][T10776] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2665'.
[  180.080036][T10776] 8021q: adding VLAN 0 to HW filter on device bond2
[  180.093435][T10776] netlink: 'syz.1.2665': attribute type 10 has an invalid length.
[  180.101727][T10776] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2665'.
[  180.565429][T10783] loop5: detected capacity change from 0 to 512
[  180.576037][T10783] msdos: Unknown parameter '€
'
[  180.595138][   T29] kauditd_printk_skb: 305 callbacks suppressed
[  180.595153][   T29] audit: type=1326 audit(1757539257.096:14450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10788 comm="syz.0.2669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f086936eba9 code=0x7ffc0000
[  180.627264][   T29] audit: type=1326 audit(1757539257.126:14451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10788 comm="syz.0.2669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f086936eba9 code=0x7ffc0000
[  180.651067][   T29] audit: type=1326 audit(1757539257.126:14452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10788 comm="syz.0.2669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f086936eba9 code=0x7ffc0000
[  180.675056][   T29] audit: type=1326 audit(1757539257.126:14453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10788 comm="syz.0.2669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f086936eba9 code=0x7ffc0000
[  180.698817][   T29] audit: type=1326 audit(1757539257.126:14454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10788 comm="syz.0.2669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f086936eba9 code=0x7ffc0000
[  180.722564][   T29] audit: type=1326 audit(1757539257.126:14455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10788 comm="syz.0.2669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f086936eba9 code=0x7ffc0000
[  180.746285][   T29] audit: type=1326 audit(1757539257.126:14456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10788 comm="syz.0.2669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f086936eba9 code=0x7ffc0000
[  180.770030][   T29] audit: type=1326 audit(1757539257.126:14457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10788 comm="syz.0.2669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f086936eba9 code=0x7ffc0000
[  180.793972][   T29] audit: type=1326 audit(1757539257.126:14458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10788 comm="syz.0.2669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f086936eba9 code=0x7ffc0000
[  180.817905][   T29] audit: type=1326 audit(1757539257.126:14459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10788 comm="syz.0.2669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f086936eba9 code=0x7ffc0000
[  181.083926][T10800] hub 8-0:1.0: USB hub found
[  181.095695][T10806] loop1: detected capacity change from 0 to 512
[  181.114666][T10800] hub 8-0:1.0: 8 ports detected
[  181.822735][T10806] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2675: bg 0: block 248: padding at end of block bitmap is not set
[  181.839009][T10806] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.2675: Failed to acquire dquot type 1
[  181.858187][T10806] EXT4-fs (loop1): 1 truncate cleaned up
[  181.865189][T10806] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  181.880209][T10806] ext4 filesystem being mounted at /560/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  181.935882][T10806] syz.1.2675 (10806) used greatest stack depth: 9200 bytes left
[  182.412244][T10826] __nla_validate_parse: 3 callbacks suppressed
[  182.412312][T10826] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2683'.
[  182.459553][T10826] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2683'.
[  182.705897][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  183.714736][ T4856] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  183.808770][ T4856] hid-generic 0000:0000:0000.0008: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  184.270445][T10892] vlan0: entered allmulticast mode
[  184.404290][T10894] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2710'.
[  184.627074][T10896] loop3: detected capacity change from 0 to 1024
[  184.676851][T10898] loop5: detected capacity change from 0 to 4096
[  184.695338][T10896] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  184.714083][T10898] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  184.748811][T10906] loop2: detected capacity change from 0 to 2048
[  184.755284][T10896] ext4 filesystem being mounted at /567/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  184.789490][T10906] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  184.839438][ T9106] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  184.943842][T10909] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  184.979416][T10909] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1034 with error 28
[  184.991930][T10909] EXT4-fs (loop2): This should not happen!! Data will be lost
[  184.991930][T10909] 
[  185.001700][T10909] EXT4-fs (loop2): Total free blocks count 0
[  185.007699][T10909] EXT4-fs (loop2): Free/Dirty block details
[  185.013599][T10909] EXT4-fs (loop2): free_blocks=2415919104
[  185.019407][T10909] EXT4-fs (loop2): dirty_blocks=1040
[  185.024749][T10909] EXT4-fs (loop2): Block reservation details
[  185.030932][T10909] EXT4-fs (loop2): i_reserved_data_blocks=65
[  185.040626][T10905] loop0: detected capacity change from 0 to 512
[  185.049253][T10905] msdos: Unknown parameter '€
'
[  185.402918][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  185.427272][T10919] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  185.434857][T10919] batman_adv: batadv0: Removing interface: batadv_slave_0
[  185.444227][T10919] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  185.451762][T10919] batman_adv: batadv0: Removing interface: batadv_slave_1
[  185.551707][ T3599] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28
[  185.583381][T10923] new mount options do not match the existing superblock, will be ignored
[  185.633615][T10932] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2719'.
[  185.642570][T10932] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2719'.
[  185.992197][   T29] kauditd_printk_skb: 72 callbacks suppressed
[  185.992211][   T29] audit: type=1400 audit(1757539262.499:14530): avc:  denied  { setattr } for  pid=10939 comm="syz.0.2724" name="TIPC" dev="sockfs" ino=36421 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  186.304547][   T29] audit: type=1400 audit(1757539262.809:14531): avc:  denied  { unmount } for  pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  186.346897][T10945] loop0: detected capacity change from 0 to 2048
[  186.469490][T10945] Alternate GPT is invalid, using primary GPT.
[  186.475863][T10945]  loop0: p2 p3 p7
[  186.585316][T10953] lo speed is unknown, defaulting to 1000
[  186.677280][T10953] lo speed is unknown, defaulting to 1000
[  186.924167][T10957] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2729'.
[  187.159708][T10963] loop0: detected capacity change from 0 to 128
[  187.243003][T10966] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2733'.
[  187.278423][T10966] ip6gre1: entered allmulticast mode
[  187.326013][T10971] loop3: detected capacity change from 0 to 512
[  187.347387][T10971] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  187.361328][T10971] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.2735: invalid indirect mapped block 4294967295 (level 0)
[  187.376337][T10971] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.2735: invalid indirect mapped block 4294967295 (level 1)
[  187.381701][T10979] netlink: 'syz.5.2739': attribute type 4 has an invalid length.
[  187.391978][T10971] EXT4-fs (loop3): 1 orphan inode deleted
[  187.404119][T10971] EXT4-fs (loop3): 1 truncate cleaned up
[  187.410399][T10971] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  187.426551][T10981] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2738'.
[  187.435586][T10981] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2738'.
[  187.451814][   T29] audit: type=1400 audit(1757539263.960:14532): avc:  denied  { unmount } for  pid=10982 comm="syz.5.2740" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  187.474822][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  187.480662][   T29] audit: type=1400 audit(1757539263.980:14533): avc:  denied  { remount } for  pid=10982 comm="syz.5.2740" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  187.519882][   T29] audit: type=1400 audit(1757539264.030:14534): avc:  denied  { read } for  pid=10984 comm="syz.5.2742" laddr=fe80::b lport=54723 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  187.749730][T10990] Set syz1 is full, maxelem 65536 reached
[  187.791958][T10996] loop5: detected capacity change from 0 to 2048
[  187.798625][T10996] EXT4-fs: Ignoring removed orlov option
[  187.808811][T10996] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  187.941994][ T9106] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  187.969391][T11001] lo speed is unknown, defaulting to 1000
[  188.024366][T11001] lo speed is unknown, defaulting to 1000
[  188.232336][   T29] audit: type=1400 audit(1757539264.740:14535): avc:  denied  { append } for  pid=11009 comm="syz.2.2749" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  188.256160][T11010] random: crng reseeded on system resumption
[  188.373071][   T29] audit: type=1400 audit(1757539264.870:14536): avc:  denied  { watch } for  pid=11019 comm="syz.3.2754" path="/proc/1428" dev="proc" ino=37150 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[  188.404590][T11020] vhci_hcd: default hub control req: a10e vfffe i0000 l0
[  188.491910][T11029] netlink: 'syz.1.2757': attribute type 10 has an invalid length.
[  188.507071][T11029] netlink: 'syz.1.2757': attribute type 10 has an invalid length.
[  188.590941][T11031] loop2: detected capacity change from 0 to 128
[  188.591988][   T29] audit: type=1326 audit(1757539265.080:14537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11030 comm="syz.2.2758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6d6f755b67 code=0x7ffc0000
[  188.621083][   T29] audit: type=1326 audit(1757539265.080:14538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11030 comm="syz.2.2758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6d6f6fada9 code=0x7ffc0000
[  188.644983][   T29] audit: type=1326 audit(1757539265.080:14539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11030 comm="syz.2.2758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6d6f755b67 code=0x7ffc0000
[  188.690160][T11036] netlink: 202920 bytes leftover after parsing attributes in process `syz.3.2760'.
[  188.734897][T11038] loop2: detected capacity change from 0 to 1024
[  188.746532][T11038] EXT4-fs: Ignoring removed bh option
[  188.752035][T11038] EXT4-fs: Ignoring removed nomblk_io_submit option
[  188.773006][T11038] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  188.798236][T11044] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2763'.
[  188.823233][T11036] loop3: detected capacity change from 0 to 8192
[  188.823904][T11044] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2763'.
[  188.893352][T11045] ==================================================================
[  188.901554][T11045] BUG: KCSAN: data-race in generic_buffers_fsync_noflush / writeback_single_inode
[  188.910861][T11045] 
[  188.913195][T11045] read-write to 0xffff8881198a8ea8 of 4 bytes by task 11038 on cpu 1:
[  188.921334][T11045]  writeback_single_inode+0x2fa/0x3e0
[  188.926890][T11045]  sync_inode_metadata+0x5b/0x90
[  188.931848][T11045]  generic_buffers_fsync_noflush+0xd9/0x120
[  188.937752][T11045]  ext4_sync_file+0x1ab/0x690
[  188.942537][T11045]  vfs_fsync_range+0x10d/0x130
[  188.947288][T11045]  ext4_buffered_write_iter+0x34f/0x3c0
[  188.952924][T11045]  ext4_file_write_iter+0x383/0xf00
[  188.958112][T11045]  iter_file_splice_write+0x663/0xa60
[  188.963644][T11045]  direct_splice_actor+0x153/0x2a0
[  188.968736][T11045]  splice_direct_to_actor+0x30f/0x680
[  188.974091][T11045]  do_splice_direct+0xda/0x150
[  188.978838][T11045]  do_sendfile+0x380/0x650
[  188.983257][T11045]  __x64_sys_sendfile64+0x105/0x150
[  188.988447][T11045]  x64_sys_call+0x2bb0/0x2ff0
[  188.993115][T11045]  do_syscall_64+0xd2/0x200
[  188.997785][T11045]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  189.003663][T11045] 
[  189.005977][T11045] read to 0xffff8881198a8ea8 of 4 bytes by task 11045 on cpu 0:
[  189.013588][T11045]  generic_buffers_fsync_noflush+0x80/0x120
[  189.019471][T11045]  ext4_sync_file+0x1ab/0x690
[  189.024141][T11045]  vfs_fsync_range+0x10d/0x130
[  189.028890][T11045]  ext4_buffered_write_iter+0x34f/0x3c0
[  189.034432][T11045]  ext4_file_write_iter+0x383/0xf00
[  189.039626][T11045]  iter_file_splice_write+0x663/0xa60
[  189.045002][T11045]  direct_splice_actor+0x153/0x2a0
[  189.050094][T11045]  splice_direct_to_actor+0x30f/0x680
[  189.055461][T11045]  do_splice_direct+0xda/0x150
[  189.060213][T11045]  do_sendfile+0x380/0x650
[  189.064626][T11045]  __x64_sys_sendfile64+0x105/0x150
[  189.069917][T11045]  x64_sys_call+0x2bb0/0x2ff0
[  189.074581][T11045]  do_syscall_64+0xd2/0x200
[  189.079159][T11045]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  189.085034][T11045] 
[  189.087338][T11045] value changed: 0x00000002 -> 0x00000020
[  189.093034][T11045] 
[  189.095343][T11045] Reported by Kernel Concurrency Sanitizer on:
[  189.101661][T11045] CPU: 0 UID: 0 PID: 11045 Comm: syz.2.2761 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  189.113121][T11045] Tainted: [W]=WARN
[  189.116904][T11045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  189.127033][T11045] ==================================================================
[  189.145457][T11047] loop1: detected capacity change from 0 to 512
[  189.155452][T11047] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  189.167611][T11047] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.2764: invalid indirect mapped block 4294967295 (level 0)
[  189.187365][T11047] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.2764: invalid indirect mapped block 4294967295 (level 1)
[  189.205132][T11047] EXT4-fs (loop1): 1 orphan inode deleted
[  189.210991][T11047] EXT4-fs (loop1): 1 truncate cleaned up
[  189.219795][T11047] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  189.246346][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  189.588232][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.