last executing test programs:

3.709696887s ago: executing program 1 (id=3154):
r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r1 = mq_open(0x0, 0x40, 0x118, 0x0)
r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x18)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17)
mq_notify(r1, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}})
r5 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r5, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002480), 0x0, 0x1)
write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xfd44)
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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")
open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
close(0xffffffffffffffff)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xc, 0x1, 0x0, 0x0, 0x0, 0x13c2, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x103e40, 0x1, 0x0, 0x0, 0x0, 0x40, 0xfc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0)

3.012417637s ago: executing program 4 (id=3174):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff8}, [@call={0x85, 0x0, 0x0, 0x36}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00'}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

2.933475085s ago: executing program 4 (id=3177):
perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0}, 0x801}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)
close(0xffffffffffffffff)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)=0x6, 0x12)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xf, &(0x7f0000000140)={0x8, 0x200000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000a40)=ANY=[@ANYRES8=r0], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r6}, 0x10)
r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/rcu_expedited', 0x169a82, 0x109)
pwritev2(r7, &(0x7f0000000fc0)=[{&(0x7f0000002980)="81", 0x1}], 0x1, 0x77, 0x0, 0x1)
syz_open_procfs(0x0, 0x0)
syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x18)

2.762368632s ago: executing program 2 (id=3180):
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f00000017c0)='./file1\x00', 0x0, &(0x7f0000000000), 0x1, 0xb80, &(0x7f0000000c40)="$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")
pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3)
open(&(0x7f0000000100)='./file1\x00', 0x64842, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x2000c880)
getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newqdisc={0x4c, 0x24, 0xe0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xfff3, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x842}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}]}}]}, 0x4c}}, 0x4044080)
bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14)
sendto$inet6(r0, &(0x7f0000000800)="4103082c1116480401020200c52cf7c25975e005b02f000006892f000300897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305fbe258161b6fd8f2428652265d94c6fdbaefc57376a57c2feffff188be9427c323ef024a37016d2a7f9ab6e7941a6fc4f95aa73c1dfff4941f6503b5bd8c91db22cd33795481c94085fa12cdc679ac2a5d7b5d99b93fb07acb0da680e78b74c74aae8d7690d5986a9af81622a0ac210bc7b5ca5fed11cb54d046642670041e846bb184ff5d39fe8516d2d2a8d84e6e7dfcb2b8a8023444db513a3d7a124b59f0a5cd36489dbbb75cce3145d0ea3c3aa21af7cbcbc7a7575db782e757ca543109f5ddcec4930aa91f4119ea3d1f56140cb86cfe0724b23904ef5d05c725ee23918a502b1afe09fb0757d", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0)
socket$inet6(0xa, 0x2, 0x0)
r4 = socket(0x10, 0x3, 0x4)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r4)

2.302134428s ago: executing program 1 (id=3183):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8)
listen(r0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x4e24, 0x6, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0xb4}}, 0x0, 0x0, 0x9, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8)
socket$netlink(0x10, 0x3, 0x8000000004)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[@ANYBLOB='\v\x00'], 0x119)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=<r3=>r2, @ANYBLOB="0000000000001ed951b8cc9e3aed00007b8af8ff00000000bfa200000000020007020000f8ffffffb703000000000000b745a73061df8d04b2f8f2cbb304000000"], 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYRES16, @ANYRES8=<r5=>r3, @ANYRES64=r0, @ANYRES8, @ANYRESDEC=r0, @ANYRESDEC=r2, @ANYRES8=0x0, @ANYRESHEX], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000070000000200000007"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r6}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r6, @ANYRESOCT=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r4}, 0x10)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r7}, 0x10)
r8 = socket$inet6(0xa, 0x800000000000002, 0x0)
sendto$inet6(r8, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @local}, 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000380)=ANY=[@ANYRESDEC=r5, @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r9, 0x0, 0x401}, 0x11)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r11}, 0x10)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
r12 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800)
ioctl$SG_GET_VERSION_NUM(r12, 0x2284, &(0x7f00000002c0))
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r10, 0x0, 0x14)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)

1.745225864s ago: executing program 2 (id=3188):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff8}, [@call={0x85, 0x0, 0x0, 0x36}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00'}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

1.627825616s ago: executing program 1 (id=3191):
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3deb7f64e7949790, @perf_config_ext={0x8, 0x7}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
syz_clone(0x41aa1000, 0x0, 0x0, 0x0, 0x0, 0x0)

1.621454796s ago: executing program 2 (id=3193):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x80044940, &(0x7f0000001b00)={<r5=>0x0, ""/256, 0x0, <r6=>0x0, 0x0, 0x0, ""/16, ""/16, ""/16, <r7=>0x0, <r8=>0x0})
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000400)='./file0\x00', 0x1a4243c, &(0x7f0000003f40)=ANY=[@ANYRES16=r7, @ANYRES64=r8, @ANYRES16, @ANYRESOCT=r8, @ANYRESDEC=r5, @ANYRES16=r6, @ANYRESDEC=0x0, @ANYBLOB="9a7f40ad4c7145903a868b9020e1e8899ed5747db23004fc9d248900abcaa6b065cf0800930a71dcd8b8955d93c78b9d4e5e06d8d5c9ac9b75d177754d6eba23e6d2be546c0dfecdf61baf732950a5729c01fbdc11e36cb411be200a9135657acd97d21ee46aac313ebdddd9265af16558dd3e5ba4836659a6abfe08aad84276acf949bdaa34bdf7f7b2dfb2fe8b9d6d225dcecebeb6e15f649994728842bd99fc94897d24315ac2d17bf6c2acfbfa8464d80f36304f88b906b78ab359be3479db5b0e7555f04416807c2202d6551f2425440be741dbe053e0bfeb845623e722a9293843f1cf0a71119dcadf7e353af4da52aed3086d6e5a095774248be9a1b1418dec1c03a2cb0ece0840ebeaaf7b67867da45943b700e2d6dad775ae6f33e55aa86ca84c336c91e3b7d7224f7a9a10d5b45a6ce0769d875415bea136b5508e5e0a88290792da3b11b2284a3d757c301cec78b55d3fcfa073615ccb089f66c5b9a5c84f6c1bb78c3370c4687eab260711fa05525687c7709e15cddea061f70798cbf940ad929eb80f33ad8bb4fcd322dd0558f111d7d01351147976b425a27e573402490055054cf3d80bebde6a89f3086170633740f08780aac3a73f17eaeda8deb642c2887962596b4d78c0ffffb28d0e64073b0641f89cf83a69afaaea03ba6070838fdbdaccb81630a6fdaa77fc10146013b9fd79e965a320daf81c1a51f032a3f462f2740e579eb116cad80b4e233326bf94fea52184517accf608b1fbfb395942869841b9ca0f314beff6b2dc0a74d7599012274b24775f0382e72907c1f0c571b994f048c0266feb775d893fec84e5733cd66a96cd45b60f63743b17b05d99c427a2d00a27fef17cadf128059a2e227b80701755b0bc706f32255c8cd619fa995cc7649f28337361a62cff46669fa4cf095a2d148987a9fafa6e1fb9f59b5ac5ff10a4c62e0187a3c75a983f7f5211142c6c09170a13e29c2044e5568bda8055cee4722e445e83ea01307c42cbe63a5bc529e1200e5874f7500275abacd6cc0e3bf8fd38ab7bab39f54d180d60892e2e3a713a3e654c89b8e9ba4474909991844514c04b655c66ccd6f2a17e29ff69d343ebac7ac5e1510ad4ff52e6a932a97bb0d814259da6545022152dd63f06219a1d66ec2278b694876ed6195b0543b8c9289b8438e8ee57dd38bcdb045a6fc4cede28effaa0354afbd4190fcbccd9a0e91508e4399e0e30a0bfdedcc19454b6dd7c2785a6e4fe74a0ece1d683ad07d76eafec02fb0d88debfeacd3531413185da0ffa4fb9b5e6d5a916f7bb5d51efc8ab61e4953fc6b2d1e670769f3ca56d51b804ceb118278acc90422e1f51e448a27d2fe4f93c88cf7c6148474bf650902dd6dd96541044113d244cf938150ec426e7ed63e1f153bbe328f4232552b104c8dee60b0c4e4c25f2605e97cc6f4263d32e8340be2d167137682373ae4cd501fdc9c5359b40f52803a5e4c0e04a5de0412c5cbd4d05e6135a1209d4b2dff50d39e481f1d1b01ed71004fb0c18e736af8ab176f833a439a85c9132e6d2296f665771c6a284eadc08c94ffa520dcc37fd6426c152364699514b15d4df6732fff39834e8ba29688b19db27a970d9d7fbee973c76bee04fb6164963969ebde0f785606781d63726736d8b60a713d5f72207a23f6f00420fdf24d14c069f36a7e236620481cc7a63857cc1355bac8d4f9a3f32785ad4d9d81719077a816b33b98006c322ee473aa9f8f83fae86a4d421104b298a9e42357c44b773e3504b3f9eb5b29330411b776b78fdb6dd9713dd1aee0cc9c7ee8bd23a50d4c8babaf6d74bc25377009a8c57c941f80e58ac08c93a275656cbad3864df9e791305d66103ab30983b07553ede5b5d5b0aab157f805eb6c11c75dd7f297c2cc9110551131a797164dec422b13799f1c261464c765a62c201eb9c8686eee94642d59f429cd137cba0d1a8126dcdfc28ea5c201526c61164a86f480dfde0c60fdf6afd3cd64719de1d89b5a362e058054a9db73aaffac324b04e8903060e1f14ca4ac31c82183066e6d581685efbe3452a20a665166b03808220770d66051971b61d8114376e22a4511cae9fdf7bbed68bb9f45b57eee1c15775730ef1434731d7b82a7cbcd6155396263984edfcea62196189da0ba9908d7d5ef514d75a3e1d4ae42654365083873fc4ce969fa4fac51d640be8d948bb9464d1a7e494c8df98bd5a569ff7fe1aca542c34610148a8f1dc9d60ff0f761270577f286a362f32164184ffce3ad132637e9f0381e9ce76a11f296f9d1e835cdc44926104e1df4d0a282a84b9fbc23064bfcab0d221c6e3124ae8ba6022e62f170dcc2d655f73b40f83fd65f5c705bc1f9e8df13adeadff9e1fe4660a55be7dc969cfffaed607190162dcd09d0cd86a297b22142b88f0eb28dd1a45152a4f4f2dca0d96d39fa594349040f486cd486af619b7083236cf90324cddc6f1ed0f6a103c8d936d7f2f31d420ef50931838e66721bff7494617b6b4bc385f3e51b3f81cf5d6953ac7fddc0f3466682911b38bc7f082e0c18e3ae0badf7f3fd3e186ebc2bab71fa26f77bb14cd97e6761c93c8c25887c0ef1f3dc1d8d86ce0fb73190f66f4deca77977e8d6064bfeeac3fad2bc50488c144e2a1a82fcc1e1c12ac54bf3e2d468e8f53241e4a6ad9e466746a45b053452ded5caa20461881d78d8235e986ba8b77e83601655d2650bf1b64ce17c75314216b43bbd1101a2e12e57525bb7d3b136a70635bdac8af24367a24ce2fe2a72ef2b0e56ff8dc62a82946f86f9b6b1418a89b1971372dfe7d5ce2e6611befff721f04a19bce7f90b1551a4cdead136662c50513fdde6f9d4a199c3907ed8799f231f54dd8347c71d829ff8ddc5d96b5aac2fe58652c81ff7f54e2568119dff2763ef435aa420630dacc7e9414340ee8688f46c7a8ab96d860937641042b3cdf6857ff1d2d4e47cec1f23e65fe541f38cb96b132666f999002e89cd1896ca58c2e63b87382e1a6c1ee9afa56cf3ba923fa9c989e20bff313f37252632fdcff03fbdd2d334ee93baf75c1bdae30feaa81fb2ac1b63c42dda06f20ce8c9d003eb3efed7931def342fb874fce92763f6f477c7f589b75d2129419fc4cb7a8893a1d3f94533ed9fdf9f21fc254fd80aa74750833d390327a2107e761240928d35a36c5eaca61fd848116b8dd7ec8157928bc2dd87f7756aa517cf6a61d2009fd4ba0579ca3b3129cfd5403546f5ab6d0575799a008fc67da9658427636d8f806d9b8cad64aee438d0a9b45957f31a5afe3ed894add9acadfd347246099c6ff0b4ec6f19ac61557daf8739e528185ab1468ca72d6d72e4f026e371e540b774b6576df3014dcc9e91b2cd1f0403a4fcaa6627b22682bb54f92150c2917acaee1972b2b03bc2bd37fdb9e7352c654d94ef196b7229e4da5ee62b7d395ecdd5177f2563242ea49ff78151a4a816a94e89b03f41c7e6684f8be3e5802e9338e7cbd3b43f708c062f944a59f31b02ca9a177e6b681accee8785d2467d2d78636be4330febaa3f6907db07992a2de74e459f3ae8ee6adae20cbc75aabd2d5d3424de0ddcc3ddd981c3a4966c57f8fdb1c42db87395f0bc800ff8ddb4c228a7d793d8a997885494a8578f5433d3f82886ea573641bf16065efbc25718c88f7277ce04c94af560d8deb7968496f849d3fad78741272b08bf7aec3f3c777428d3b8b897333ae5afb6823af63cb7347601ee2e8d4e21b21a12e6d42f66a1aac26d296bc68a998d8ba179ed5f756c2efd8a7acc0e3f08093bb4a83d37f15b4fe07c90858058ad1ff0e21bb7bf4363079c5d452dba5972b21c8f41daf6f11a51d321d3c1d544190238036d907d965ff469ce4895eb7675f3e94a15f83b837b892a40390d87d76e9b15eda02366299d3dd93943466bceeb2f9e465adccc08e1a02c3ac01815931627ed327e0ffbe09563221a365b88c4f2449bd3634920d5bfbde7cdc92c4cb16a579f35f07dafc87ce6ce4de7bf9e8ff0e80b81cdab8f2164a25a0a6929679ce9ae0dc2ac7ed41a787446676f091597551dc2e8c054224bac6652bba5fb675c0b2c94d2faac160f11b7b96fc96415aca8a47fa03658b8afa24b6bd97f7dbeead9ae5f7ec1cb0d000055f41a5043c6c4c97212398b168b5cb9ee650726eabcc31b6712e815fdaae77885350884fb36d6d5444d5e5500a7d636d4eced14b9d411c765b36a4be06ca9be2965d6d6c06c3b6bcb38babeb2999ee71295d48926bf6e39363fabf74de5e57aa0b59f9dddeca142d0c50ab7ff198196c69c971e6ab591220f4e42d6525e2dbd99b6c57949c854e4ee0e4581f9e3e160b3f66b01f23f4d0472c0a1f307837ac8dac0a257d09ab82975148dcd764fe6359a5f21b9cbe2ae7b9b277489a8b3285b8289a84ff854508b4488ffcf68f47ec7a5c18a8c3d06e26b32f754ac74ea8e93a554147fd3b3daf1fbe924e2e389cac13a5f80f3a21dbd250d3917f7b5acfc739a63f2b3d6b3f099efb4be7a842215c89fc87bd8550d11ba2a4af0f111ab124503b26feeae3be3ee24168dd4553a226b9168edb11c3e61bc850adf995b4d6f1aace6db0b91f805c3d1789a3e6b470e5470968f429d5b05c8f76ca2981e37f5bde4ad00a09755c76774ead7d93f3f41255b1d56152e3699b133b2e0b277427c992323d1b4d8c438434e9e901ddd43788f80cb9a975e9dd1671ce16be5ff8033d5da824f00fd78b540edbcd69a2e9aff03e31af9afefb809434f52b4a1239fdd241ed3a268258addde19d1724155a1a4c877bd59b0659b7a786886f6ffcb5999d1f9c007d615020926f7165a9ddd4aaa3c7b631d30cc951e328131d99282ac06a18f88373092320ea5308f06c376e711aecda4cd1c2b639d9ea7a2613d4e9eaa9a0ef72774fdec622f7d131b45135d577897bf686b460a371083070139ea544bda15012251d6c8e7163c25412841faefba76765648ca7cd1b423403a654b6b5754588ae6c309621477db20f7c9236af1e422ebd3fb6d6a712e7a6d00d58416b7d65a53a2514bf51bedfe9207f16a4d79418600389b98ea8b9e06b8da708a86f191e567925af39a09ac9fd7902e8f8e77567baf1b75c05ba1eb7089b424801405afc982a8d79c80fada184a1ab3bab526a3b0a5e20d2dc6bcdd2c5cb7c49f735f3e8f4d36a388ca805876ae08f0e3acca5dd864c1fa1552068bf799095221480374fd2dcaeddb74be93470eff4fe278e190f0a131f32340ada9cca518af769f42943875f4c5707beee2179771da21cd66405b9973648bd047a516d1cf902fa1f0fcdcbc3f4c1f20fc22f9a7e9f4c3a52576399604c46f83ede44f542d06d54e6e8a1e693a2cfcbb16c178d1bace976133e72cc4533bd02b1c4ec2cc22097435aff5a682ca7227414895450831560fa682493f4814ce8fbdb190f8ce2b533ed9582638511bda93aeae5d0690f745b788db622864ba3fb60952f119427fbe66754c5c038c5fb2cb87c326d65862e353c14950bd1fa7c70e36323e9cf90c81f6275e59c7926acac1560a0b6bbc7a850817f2effa19d485315a219d49e293f871278294d02765cf72caa2f438de3337ed205bf68ff6ddaaa5e4b80de5fba022dfcf9cf074a319678df11eb77b3ef66e512b67ba5182265a60eaf457691e973d23cbaf6000537f886695074ebb616f9cdad9de7c6fe9ecfbd13d537d64c34a7c90ca56b50e60d6a7067e391e63561793edf6ed3c2eeb8555909a59ce73da1f096d41fb42de44494128324a9", @ANYRES64, @ANYRES16], 0x0, 0x0, &(0x7f0000000000))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x80044940, &(0x7f0000000ec0)={<r9=>0x0, ""/256, 0x0, 0x0, <r10=>0x0, 0x0, ""/16, ""/16, ""/16, <r11=>0x0, <r12=>0x0, <r13=>0x0})
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000006c0)='.\x00', 0x1a4243c, &(0x7f0000000700)=ANY=[@ANYRES16=r10, @ANYRESDEC=r11, @ANYRESHEX=r12, @ANYRES8=r13, @ANYRES32=r10, @ANYRES8=r9, @ANYRES64=r9, @ANYRES8=0x0, @ANYRES64, @ANYRES8=r12], 0x0, 0x0, &(0x7f0000000080))
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f0000000340)={"5341d7e7616a5a67e3ed9397357a13c3", r7, r12, {0x4000000000000000, 0x6}, {0x6, 0x9}, 0x0, [0xc, 0x1, 0x2, 0x1, 0xffff, 0x53da, 0x4, 0xadb7, 0x725, 0xb3, 0x191, 0x7fffffffffffffff, 0x39, 0x8, 0x3, 0x9]})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r14 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r15 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000ffff785e396592390000000000000000", @ANYRES32=r14, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r15}, 0x10)
syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc)
socket(0x1, 0x5, 0x0)
r16 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
ioctl$USBDEVFS_CONTROL(r16, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x301, 0x0, 0xe0, 0x101, 0x0})

1.440782835s ago: executing program 2 (id=3195):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000007000000000000000000850000000700000045000000a000020095"], &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x200001, 0xffffffffffffffff, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='afs\x00', 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2060a9, &(0x7f0000000080)=ANY=[@ANYBLOB='nr_blocks'])
r2 = syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000005c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x80}}, {@dax}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@abort}, {@inlinecrypt}]}, 0x1, 0x4d2, &(0x7f0000000f00)="$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")
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005f00000095000000000000007ffd8a2b24e1172a9774c2cd649232bfb1894ddaf5daf3239eba55c1123251842b00829a3745fd8f1484772d52c2b745807c7c5fed0b5f6723508dbd115771b9e3157bef"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYRESHEX=r2, @ANYRESHEX=r2, @ANYRESDEC=r2, @ANYRES32=r2, @ANYBLOB="bf655697cafd81d1f9ceaa1f7c59a276ef4d96f218f6e5623e85f652a1b0d2c8fbd525927915550f5640dd1d105967eedb9ae4a7df0dc265b7972149f9581b0c32e47c98876310700b2320badad8797a1e66a99d2748b49e8c8706fab4cd20079b6d075a8c34f0492aab984f250731d59bde03d74c67b52f3ac4870e", @ANYRESDEC=r1, @ANYBLOB="581bb9d8133ccbabe5ef56dcaf59b7bb7a105e771e5b4f04d6bd0dc4c9133b0e31e926ddc0c5dfcc6c082dfadd0b4699621d280572e1939f248b6c964ee5efa0c0beda5684777c28b9fe8dca375a269e03df6db031ef5d55b07563ffd1f391966ecff30ed81972c4dc01b5a5d7", @ANYRES64, @ANYRESHEX], 0x48)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r4 = open(&(0x7f0000000400)='./file0\x00', 0x64842, 0x2)
pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x1cb041, 0x8)
sendfile(0xffffffffffffffff, r4, 0x0, 0x8000fffffffc)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000540)=ANY=[@ANYRESHEX, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8170a4f7b00bfa200000000000007020000f8ffffffb703000008000000b7048f7e9f4787e1fb02dd2f50927761540d000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000200000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
r6 = socket(0x1d, 0x2, 0x6)
ioctl$sock_SIOCGIFBR(r6, 0x8940, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, r6)
openat(r0, 0x0, 0x260c0, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_opts(r7, 0x0, 0x4, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE_wg(r7, 0x1, 0x19, &(0x7f00000003c0)='wg1\x00', 0x4)
connect$inet(r7, &(0x7f0000000000)={0x2, 0x2, @multicast1}, 0x10)

1.366964282s ago: executing program 3 (id=3196):
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x10)

1.270375552s ago: executing program 3 (id=3197):
syz_emit_ethernet(0x2a, &(0x7f0000000380)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb08070000001c0000000000019078ac1e0001ac1414aa00009078006700080e4948099f0aae7df2a2b4b6432ae607f114b14220e7094be72c494672f429e300dd00398066bc89b5531ebc418a39f279ea6091d382f549e674f6266326d559ec630e55fa7081eff7ae1f9a134cca49468c60e7732e912e5a48d80b537731f03bc4620cfe457084245e18e02cde2cdd1ae611806e6b1e551266f1e5e4941318beb65ca1b31373ab3a92f2ad2c5c33eea617"], 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000008001f5c916500000000950000000000cb16c1ae00"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0, 0x0, 0x2000000000}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x46, 0x0, 0xff, 0x7ffc1ffd}]})
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r1 = gettid()
timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r3 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0)
r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x8000000000000000, 0x200001)
ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000600)={0x80, 0x31, 0x7, 0x8, 0xd5, 0x1, &(0x7f00000004c0)="0bed1fbefd8101a582a74a0b5da90fbd14ed34052a337b44f242c1fd2980bd8e6b37ecd1d4255e9a1d5d18162019761212b5fc9a81a29a670d83ecbf10c4f56c8e93d22d7773a782f9eb717dca4c5b92aca5cb65dceef6f13f4af2a665df9d223fb4b4a84f1b63909ed04ce5b1aba483b5afccf70e887d79d92d8ed2dea102ac911171ca655c1934a59660e5bb62dac7b6e4b2b4dae3b3957d4146910cc764fb1b6b445038f22df20c43d50092bc6d951542ca2ecc044039f4e94cb6a91ddf5734eb877cd6d4f7c1d3bd042268de7c371ead458cd3"})
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1}, 0x94)
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ptrace(0x10, r5)
ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000100)={0x0})
mq_timedreceive(r3, &(0x7f0000036600)=""/102378, 0x18fea, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb8000)
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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")
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
write$binfmt_misc(r6, &(0x7f0000000000), 0xfffffecc)
r7 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
pwritev2(r7, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfffffdd6}], 0x1, 0x9c00, 0x0, 0x3)
socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MIF(r8, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x8, 0x0, 0x401}, 0xc)
r9 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x101400, 0x0)
ioctl$PTP_PEROUT_REQUEST(r9, 0x40383d03, 0x0)
setsockopt$inet_group_source_req(r8, 0x0, 0x2c, &(0x7f0000000200)={0xffffffff, {{0x2, 0x4e23, @loopback}}, {{0x2, 0x4e22, @broadcast}}}, 0x108)

1.19640892s ago: executing program 4 (id=3199):
syz_emit_ethernet(0x2a, &(0x7f0000000380)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb08070000001c0000000000019078ac1e0001ac1414aa00009078006700080e4948099f0aae7df2a2b4b6432ae607f114b14220e7094be72c494672f429e300dd00398066bc89b5531ebc418a39f279ea6091d382f549e674f6266326d559ec630e55fa7081eff7ae1f9a134cca49468c60e7732e912e5a48d80b537731f03bc4620cfe457084245e18e02cde2cdd1ae611806e6b1e551266f1e5e4941318beb65ca1b31373ab3a92f2ad2c5c33eea617"], 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000008001f5c916500000000950000000000cb16c1ae0068"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0, 0x0, 0x2000000000}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x46, 0x0, 0xff, 0x7ffc1ffd}]})
bpf$MAP_CREATE(0x0, 0x0, 0x48)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0)
ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000600)={0x80, 0x31, 0x7, 0x8, 0xd5, 0x1, &(0x7f00000004c0)="0bed1fbefd8101a582a74a0b5da90fbd14ed34052a337b44f242c1fd2980bd8e6b37ecd1d4255e9a1d5d18162019761212b5fc9a81a29a670d83ecbf10c4f56c8e93d22d7773a782f9eb717dca4c5b92aca5cb65dceef6f13f4af2a665df9d223fb4b4a84f1b63909ed04ce5b1aba483b5afccf70e887d79d92d8ed2dea102ac911171ca655c1934a59660e5bb62dac7b6e4b2b4dae3b3957d4146910cc764fb1b6b445038f22df20c43d50092bc6d951542ca2ecc044039f4e94cb6a91ddf5734eb877cd6d4f7c1d3bd042268de7c371ead458cd3"})
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1}, 0x94)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ptrace(0x10, r3)
ptrace$getregset(0x4204, r3, 0x202, &(0x7f0000000100)={0x0})
mq_timedreceive(r2, &(0x7f0000036600)=""/102378, 0x18fea, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb8000)
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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")
pipe(&(0x7f0000000080))
r4 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfffffdd6}], 0x1, 0x9c00, 0x0, 0x3)
socket(0xa, 0x3, 0x3a)
ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, 0x0)

1.10039873s ago: executing program 1 (id=3200):
r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r1 = mq_open(0x0, 0x40, 0x118, 0x0)
r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x18)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17)
mq_notify(r1, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}})
r5 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r5, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002480), 0x0, 0x1)
write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xfd44)
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/NvrWjPA7HcPQ1UwDAP9nrEbEKAPSYRPsPAD0m/x3g5spyOZ+6+4vE3rr+XETsX4s/v765tqQ/u2a3v3kddOhmcteVkSQiRnag/NGI+PjLVz9Np9il65AA7bxxOSLOjoyuP/8n68YsbNUTGyzbl72O3jPf+Q/2zldp/+fpdv2/wu3+T7Tp/wy2OXa3477H/4EdKGQDaf/v2Zaxbbda4s+M9GW5fzX7fAPJufPVSnpu+3dEjMXAYJqf2KCMsRt/3ui0rLX/9+v7r32Slp++3lmj8FP/4N3vmSo1Sg8Sc6vrlyMe6W8Xf3J7+ycd+r+nN1nGi8+8/VGnZWn8abz5tD7+yEYn7Y7VKxGPtd3+d0a0JRuOTxxv7g7j+U7Rxhc/fDjUqfzW7Z9Oafn5d4G9kG7/oY3jH0lax2vWt17Gd1eGv+607P7xt9//9yWvNNN5P+JSqdGYn4jYl7y0fv6xO+/N8/n6afxjj7Y//jfa/9PvhGc3GX//tZ8/2378uyuNf2pL23/riau3Zvo6lb+57T/ZTI1lczZz/ttsBR/kswMAAAAAAAAAAAAAAAAAAAAAAACAzSpExKFICsXb6UKhWFx7hvd/Y6hQrdUbR87VFuamovms7JEYKOS3uhxuuR/qRHY//Dx/7J78kxHxn4j4YPBAkt9HcarLsQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7mCH5/+nfhzsdu0AgF2zv9sVAAD2nPYfAHqP9h8Aeo/2HwB6j/YfAHqP9h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/X1luZzmpy4uLszULh6dqtRnirML5WK5Nn+hOF2rTVcrxXJt9n7/r1qrXZiMuYVL441KvTFeX1w6M1tbmGucOT9bmq6cqQzsSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1xaWZUrVamZfYRmL14ahG9xN92e70sNRnTxPJw1GNHU50+cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DfxVwAAAP//02Ii/w==")
open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
close(0xffffffffffffffff)
r6 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xc, 0x1, 0x0, 0x0, 0x0, 0x13c2, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x103e40, 0x1, 0x0, 0x0, 0x0, 0x40, 0xfc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x201}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@local})
mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
r7 = gettid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000500)={r7, r6, 0x0, 0x0, 0x0}, 0x30)

744.187235ms ago: executing program 2 (id=3204):
r0 = socket$tipc(0x1e, 0x5, 0x0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8080}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
acct(0x0)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r2}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
sendmsg$tipc(r1, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x0)
accept4(r0, 0x0, 0x0, 0x0)

698.24382ms ago: executing program 0 (id=3206):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xc, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="00000000000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1, 0x0, 0x9}, 0x18)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
r2 = syz_io_uring_setup(0x55c2, &(0x7f0000000040)={0x0, 0xebe7, 0x8, 0x3, 0x2fb}, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_FILES2(r2, 0xd, &(0x7f0000001540)={0x1, 0x1, 0x0, &(0x7f0000001480)=[{0x0}], 0x0}, 0x20)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000800)={0x0, 0x3, 0x8}, 0xc)
creat(&(0x7f0000000480)='./file0\x00', 0x100)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f84814000000da6a0602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x24044810)
sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000330000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x840)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000050000090900010073797a310000"], 0x9c}, 0x1, 0x0, 0x0, 0x24000144}, 0x20000050)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1d64, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000a00)='fib_table_lookup\x00', r5}, 0x18)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r6}, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)

682.022192ms ago: executing program 1 (id=3207):
syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0x140)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000100000000000000000000000001000000005f002e002e00"], 0x0, 0x1f, 0x0, 0x8, 0x101}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000540)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000918ae19b5269b05faffd977fdb141e074b67b7b527eeb09fcf6a0a1a8a9162839449df225598f28dc85e17c5888024ef78b96ea5dea84eba005f9109dbfc7356ac45567fef534043612404c0ada4a69f4d2d280d11258fcc6b410ec58be75718b9492bf67555a98462375a3dfaaba4c5698b64a55c827ec07f92f8808aca3b6cdfc38442e5cb33f90b7181e894a1b2f12bc518c6dc897b73201581aff73ef6c49247cfc23002351af3d88ac06fbffb676b09f5c3acb6", @ANYRES32=<r1=>r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r2}, &(0x7f0000000800), &(0x7f0000000840)=r3}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r4}, 0x10)
eventfd(0xc)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000002c0)=0x14)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]})
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1d, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYRES8=r1], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x26, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000100000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="19"], 0x48)
rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0, {[0x8]}}, 0x0, 0x8, &(0x7f0000000440))
r6 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0)
fallocate(r6, 0x1, 0x400002000000000, 0xffff)
socket(0x10, 0x3, 0x0)
r7 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x480, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x4ac269ba, 0xaea}, 0x11aa0, 0x30, 0x10000, 0x0, 0x18bb, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f0000000000)='cpu>00||!')

604.617709ms ago: executing program 2 (id=3208):
statfs(&(0x7f0000000200)='.\x00', &(0x7f0000000440)=""/137)
socket$inet6_sctp(0xa, 0x5, 0x84)
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0)
r1 = epoll_create(0x201)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x90000001})
read$hiddev(r0, &(0x7f0000000500)=""/28, 0x1c)
ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f00000000c0))
r2 = semget(0x0, 0x2, 0x200)
semctl$SETVAL(r2, 0x3, 0x10, 0x0)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x0, 0x3ff, 0x100, <r3=>0x0}, &(0x7f0000000040)=0x10)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
close(r4)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000140)={0x1, [<r6=>0x0]}, &(0x7f0000000240)=0x8)
sendmsg$inet_sctp(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='F', 0x1}, {0x0, 0xe0}], 0x2, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r6}}], 0x20, 0x2400e044}, 0x0)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000080)={r3, 0x3}, 0x8)

552.227455ms ago: executing program 0 (id=3209):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48)
rt_sigsuspend(&(0x7f0000000440)={[0xffffffffffffffff]}, 0x8) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='setgroups\x00')
close_range(r3, 0xffffffffffffffff, 0x0) (async)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@cgroup=r3, 0x8, 0x0, 0x2f7aef9, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], <r4=>0x0}, 0x40) (async, rerun: 64)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r5=>0xffffffffffffffff}) (rerun: 64)
sendmmsg(r5, &(0x7f0000000180), 0x4000190, 0x0) (async, rerun: 64)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000400)={0x0, r2, 0x0, 0x8, &(0x7f00000003c0)='pagemap\x00', <r6=>0x0}, 0x30) (rerun: 64)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@fallback=r5, r1, 0x26, 0x28, 0x0, @void, @void, @void, @value=r6, r4}, 0x20) (async, rerun: 64)
madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) (rerun: 64)
r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00')
pread64(r7, &(0x7f0000001240)=""/102400, 0x19000, 0xffffffff8)

545.097535ms ago: executing program 1 (id=3210):
syz_emit_ethernet(0x2a, &(0x7f0000000380)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb08070000001c0000000000019078ac1e0001ac1414aa00009078006700080e4948099f0aae7df2a2b4b6432ae607f114b14220e7094be72c494672f429e300dd00398066bc89b5531ebc418a39f279ea6091d382f549e674f6266326d559ec630e55fa7081eff7ae1f9a134cca49468c60e7732e912e5a48d80b537731f03bc4620cfe457084245e18e02cde2cdd1ae611806e6b1e551266f1e5e4941318beb65ca1b31373ab3a92f2ad2c5c33eea617"], 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000008001f5c916500000000950000000000cb16c1ae0068"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x46, 0x0, 0xff, 0x7ffc1ffd}]})
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = gettid()
timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x8000000000000000, 0x200001)
ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000600)={0x80, 0x31, 0x7, 0x8, 0xd5, 0x1, &(0x7f00000004c0)="0bed1fbefd8101a582a74a0b5da90fbd14ed34052a337b44f242c1fd2980bd8e6b37ecd1d4255e9a1d5d18162019761212b5fc9a81a29a670d83ecbf10c4f56c8e93d22d7773a782f9eb717dca4c5b92aca5cb65dceef6f13f4af2a665df9d223fb4b4a84f1b63909ed04ce5b1aba483b5afccf70e887d79d92d8ed2dea102ac911171ca655c1934a59660e5bb62dac7b6e4b2b4dae3b3957d4146910cc764fb1b6b445038f22df20c43d50092bc6d951542ca2ecc044039f4e94cb6a91ddf5734eb877cd6d4f7c1d3bd042268de7c371ead458cd3"})
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1}, 0x94)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ptrace(0x10, r4)
ptrace$getregset(0x4204, r4, 0x202, &(0x7f0000000100)={0x0})
mq_timedreceive(r2, &(0x7f0000036600)=""/102378, 0x18fea, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb8000)
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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")
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
write$binfmt_misc(r5, &(0x7f0000000000), 0xfffffecc)
r6 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
pwritev2(r6, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfffffdd6}], 0x1, 0x9c00, 0x0, 0x3)
socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x8, 0x0, 0x401}, 0xc)
r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x101400, 0x0)
ioctl$PTP_PEROUT_REQUEST(r8, 0x40383d03, 0x0)
setsockopt$inet_group_source_req(r7, 0x0, 0x2c, &(0x7f0000000200)={0xffffffff, {{0x2, 0x4e23, @loopback}}, {{0x2, 0x4e22, @broadcast}}}, 0x108)

517.204838ms ago: executing program 0 (id=3211):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff8}, [@call={0x85, 0x0, 0x0, 0x36}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00'}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

515.621818ms ago: executing program 0 (id=3221):
syz_emit_ethernet(0x2a, &(0x7f0000000380)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb08070000001c0000000000019078ac1e0001ac1414aa00009078006700080e4948099f0aae7df2a2b4b6432ae607f114b14220e7094be72c494672f429e300dd00398066bc89b5531ebc418a39f279ea6091d382f549e674f6266326d559ec630e55fa7081eff7ae1f9a134cca49468c60e7732e912e5a48d80b537731f03bc4620cfe457084245e18e02cde2cdd1ae611806e6b1e551266f1e5e4941318beb65ca1b31373ab3a92f2ad2c5c33eea617"], 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000008001f5c916500000000950000000000cb16c1ae0068"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0, 0x0, 0x2000000000}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x46, 0x0, 0xff, 0x7ffc1ffd}]})
bpf$MAP_CREATE(0x0, 0x0, 0x48)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x8000000000000000, 0x200001)
ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000600)={0x80, 0x31, 0x7, 0x8, 0xd5, 0x1, &(0x7f00000004c0)="0bed1fbefd8101a582a74a0b5da90fbd14ed34052a337b44f242c1fd2980bd8e6b37ecd1d4255e9a1d5d18162019761212b5fc9a81a29a670d83ecbf10c4f56c8e93d22d7773a782f9eb717dca4c5b92aca5cb65dceef6f13f4af2a665df9d223fb4b4a84f1b63909ed04ce5b1aba483b5afccf70e887d79d92d8ed2dea102ac911171ca655c1934a59660e5bb62dac7b6e4b2b4dae3b3957d4146910cc764fb1b6b445038f22df20c43d50092bc6d951542ca2ecc044039f4e94cb6a91ddf5734eb877cd6d4f7c1d3bd042268de7c371ead458cd3"})
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1}, 0x94)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ptrace(0x10, r3)
ptrace$getregset(0x4204, r3, 0x202, &(0x7f0000000100)={0x0})
mq_timedreceive(0xffffffffffffffff, &(0x7f0000036600)=""/102378, 0x18fea, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb8000)
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/NvrWjPA7HcPQ1UwDAP9nrEbEKAPSYRPsPAD0m/x3g5spyOZ+6+4vE3rr+XETsX4s/v765tqQ/u2a3v3kddOhmcteVkSQiRnag/NGI+PjLVz9Np9il65AA7bxxOSLOjoyuP/8n68YsbNUTGyzbl72O3jPf+Q/2zldp/+fpdv2/wu3+T7Tp/wy2OXa3477H/4EdKGQDaf/v2Zaxbbda4s+M9GW5fzX7fAPJufPVSnpu+3dEjMXAYJqf2KCMsRt/3ui0rLX/9+v7r32Slp++3lmj8FP/4N3vmSo1Sg8Sc6vrlyMe6W8Xf3J7+ycd+r+nN1nGi8+8/VGnZWn8abz5tD7+yEYn7Y7VKxGPtd3+d0a0JRuOTxxv7g7j+U7Rxhc/fDjUqfzW7Z9Oafn5d4G9kG7/oY3jH0lax2vWt17Gd1eGv+607P7xt9//9yWvNNN5P+JSqdGYn4jYl7y0fv6xO+/N8/n6afxjj7Y//jfa/9PvhGc3GX//tZ8/2378uyuNf2pL23/riau3Zvo6lb+57T/ZTI1lczZz/ttsBR/kswMAAAAAAAAAAAAAAAAAAAAAAACAzSpExKFICsXb6UKhWFx7hvd/Y6hQrdUbR87VFuamovms7JEYKOS3uhxuuR/qRHY//Dx/7J78kxHxn4j4YPBAkt9HcarLsQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7mCH5/+nfhzsdu0AgF2zv9sVAAD2nPYfAHqP9h8Aeo/2HwB6j/YfAHqP9h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/X1luZzmpy4uLszULh6dqtRnirML5WK5Nn+hOF2rTVcrxXJt9n7/r1qrXZiMuYVL441KvTFeX1w6M1tbmGucOT9bmq6cqQzsSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1xaWZUrVamZfYRmL14ahG9xN92e70sNRnTxPJw1GNHU50+cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DfxVwAAAP//02Ii/w==")
pipe(&(0x7f0000000080))
r4 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfffffdd6}], 0x1, 0x9c00, 0x0, 0x3)
socket(0xa, 0x3, 0x3a)
ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, 0x0)

400.43215ms ago: executing program 3 (id=3212):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000180)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8f0, &(0x7f0000002400)=<r1=>0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x2b, 0x81}]}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kmem_cache_free\x00', r3, 0x0, 0x81}, 0x18)
r4 = socket$kcm(0x10, 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2}, 0x94)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000000000000001500000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x18)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r7}, &(0x7f0000001c00)=0x8000000, &(0x7f0000001c40)=r8}, 0x20)
r9 = socket$netlink(0x10, 0x3, 0x0)
writev(r9, &(0x7f00000000c0)=[{&(0x7f0000000040)="3700000013000318680907070000000f0000ff3f13000000170a001700000000040037000d00030001362564aa58b9a6c011f6bbf44dc4", 0x37}], 0x1)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x0)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x14, 0x19, 0xa, 0x101, 0x0, 0x0, {0x2}}, 0x14}}, 0x8004)
sendmsg$NFQNL_MSG_VERDICT(r11, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x58, 0x1, 0x3, 0x101, 0x0, 0x0, {0xa}, [@NFQA_VLAN={0x44, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x6}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x8b6d}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x20000005)
add_key$fscrypt_provisioning(&(0x7f0000000280), &(0x7f0000000400)={'syz', 0x2}, &(0x7f00000004c0)={0x2, 0x0, @auto=[0x14, 0x10, 0x27, 0x26, 0x1d, 0x2c, 0x38, 0x31]}, 0x10, 0xffffffffffffffff)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r12}, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084)
io_submit(r1, 0x1, &(0x7f00000001c0)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)='\x00\x00\x00\x00\x00\x00', 0x6, 0x0, 0x0, 0x2}])

309.090999ms ago: executing program 0 (id=3213):
r0 = socket$tipc(0x1e, 0x5, 0x0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8080}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
acct(0x0)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r2}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0})
sendmsg$tipc(r1, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x0)
accept4(r0, 0x0, 0x0, 0x0)

285.372752ms ago: executing program 4 (id=3214):
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=<r1=>0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000001a40)={&(0x7f0000000400)=@nfc={0x27, r1, 0x1, 0x5}, 0x80, &(0x7f0000001740)=[{&(0x7f0000000480)="b62c719fefc3ec9a0e1b9a4eb5a77a22bad514a83e550c4e2ce10c1fae9dbe78ef88ac17f04262c9bbd98420fd86a237480387f9136b4d4797b726c264726ac2efad013496fdbc07409233781e7ec7c306a9449a3ccdc70c28ca02f3c6cad36337309ba68a679faba60b1c18ee2a23315446762fd97efe1e4cd44f8ab7db9c5d81f2182e00fdb9d1faa3562d2393ea9823a91d8f656e5fe396c7f8209759b109d844", 0xa2}, {&(0x7f0000000540)="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", 0x1000}, {&(0x7f0000000100)="efe031f26421db51", 0x8}, {&(0x7f0000001540)="e3cdc7f9e4a054eb22cf2ab5ebd1a365869f5601bb5a37a96159873a4b29daf1a58470a125e0d293d78c72c2ed62fefb8827deb02ed0bf86d92f9e26262d8b0eb99f4e7a3dbaf4f72843665a82c20cd50f7fe0d8fb6d259177700cac7ea73499236f901d05e103d45474", 0x6a}, {&(0x7f00000015c0)="74087f0f346e7a65ccd249edf0a5fe898ddbc33b21ea2d35e6cd65cdc4b4e0df6cae044b0ba87877a69722ad2560023c3c02f1710ea6da915b1460ae284f337043ff1195c186e8a56fc3ffa88d8e92a7ff23260f32c74ff7ad6e5b3b27793273bf32fc93e94ff77cbcb2e8d19ba11f41107ddaf1244a8748c39ded503d57739b736102aee5bb72241c8ec0d7ca9b52e0670ddadfec3cbf42fbb13251653dba0f309f4a5d8851f0baea34", 0xaa}, {&(0x7f0000001680)="799d85ed4dc8b69ccd40f6f0cf955ca0a942fb55534e28e5b9679c8b57dfe0b255a46a7fa200690cfc46c67cbf436ed3400471d1d49cac430faf04cebf2b696aa1987d508ece", 0x46}, {&(0x7f0000001700)}], 0x7, &(0x7f00000017c0)=[{0x58, 0x3a, 0xcb54, "dff84c2bb950b9ee7fd91fe240b050b5d23b2fe51a4288a6123bc8f5298ad5af7a134d2ba9f1cd74cede8f9912d2d1bf56cfe292e0edd8c9a948bd3bb7aab5635e"}, {0xa0, 0x6, 0x401, "dabcb86bc62955a2e538c4a835c6fe379bd8e09c7d10f235516f46694c22d0064d964723bfc503dd72c630ffae4649331259a2b0eed0b611dfd97478d90f86193d278563f5260441be788540cad39a2b3f21dde98d774d281443b7698be7180b2abcfed3130fef7475e4fae69466511b88c0df42d7f98ad716dfcd5240a050d4c985ca5722db178a5fdcb9c79aee7683"}, {0xe8, 0x112, 0x5, "e23cb769743df34f59b9e1fb93208d6a21b5156e37c5cfcdcc408b2c38f20be9bceabd19151a0522b18c24b72c12a7507ed4a80a1f617f8591c10815b868aed49e498194780513696f0b756f104c4f37dbb49e19f2aacd2d7b605a02ed995771dde1e1ab48c8ba4461990d667caebaf8114221c5ff5521843e10164647e3c15284f8022021c80ec669e2deb7ea324eb317516edbaec50eedbbe272283e75036d01a0b758daedeafec54e7fdf601349b878eaa548a025ccf426f5ce92d050208563f0e3cdf28f188b58e9b374a247b7779b887b025b2239"}, {0x78, 0x116, 0x4, "6f5876661008a2dfc449c82e8a7b40b3434e368f3ca9e6e5e2b2e226b1bc21d475cd62c0e4b900e7d9ff17e54abfc2762d993fba64f7de8415f1287431a67bb8e96cb13b78bcbf9c619d2bd67bed603c0a13a3d27db79179916cd60cd17d26f37f3db4"}], 0x258}, 0x4004004)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0, 0x0, 0xb}, 0x18)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a7c000000060a0b04000000000000ef0002000000500004804c0001800a000100696e6e65720000003c00028008000240000000940800034000000007080004400000000f0800014000000000180005800e001e00696d6d656469617465000000040002800900010073797a30000000000900020073797a32"], 0xa4}}, 0x4004010)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_LIMIT_UNIT={0xc}]}}}, {0x14, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x0)

243.203876ms ago: executing program 4 (id=3215):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x2bc4, 0x0, 0x0, 0x41100}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r1}, 0x10)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x2f}, @in, 0x4e21, 0x0, 0x4e20, 0x0, 0xa, 0x0, 0x0, 0x2}, {0xffff, 0x50d, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x80000000}, {0x800, 0x0, 0x6}, 0x9}, {{@in=@broadcast, 0x0, 0x2b}, 0x0, @in6=@mcast1, 0x0, 0x3}}, 0xe8)
r3 = socket$key(0xf, 0x3, 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
migrate_pages(0x0, 0xfc, &(0x7f0000000200)=0x7ffffffffffffffd, &(0x7f0000000240)=0x1)
sendmsg$key(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1028}}, 0x20000050)
pipe2$9p(&(0x7f00000000c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r6}, 0x10)
mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', &(0x7f0000000140)={'gretap0\x00', <r7=>0x0, 0x1, 0x80, 0x800, 0x5, {{0x35, 0x4, 0x0, 0x24, 0xd4, 0x64, 0x0, 0xa6, 0x2f, 0x0, @rand_addr=0x64010101, @broadcast, {[@timestamp_prespec={0x44, 0x2c, 0x6e, 0x3, 0x2, [{@multicast2, 0x7}, {@remote, 0x7}, {@multicast1, 0x200}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x4}, {@loopback, 0x8001}]}, @timestamp_addr={0x44, 0x14, 0x43, 0x1, 0x4, [{@empty, 0x2}, {@multicast1, 0x81}]}, @noop, @ssrr={0x89, 0xb, 0x3d, [@remote, @local]}, @lsrr={0x83, 0x13, 0xf5, [@multicast1, @remote, @multicast2, @loopback]}, @timestamp={0x44, 0xc, 0xd0, 0x0, 0x9, [0xbf7, 0x200]}, @generic={0x7, 0xc, "4a0fadf4b12eaf4b998a"}, @timestamp_prespec={0x44, 0x3c, 0xc4, 0x3, 0x7, [{@rand_addr=0x64010102, 0x7}, {@multicast2, 0x4}, {@private=0xa010100, 0x5}, {@multicast1, 0x2}, {@private=0xa010102, 0x6}, {@local, 0x2}, {@empty, 0x4a6}]}, @cipso={0x86, 0xd, 0x1, [{0x2, 0x4, '>z'}, {0x5, 0x3, '\r'}]}]}}}}})
r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0)=0xffffffffffffffff, 0x4)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000005c0)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_START_AP(r9, &(0x7f0000000700)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000006c0)={&(0x7f0000002080)={0x470, r10, 0x2, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x9, 0x4}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x6}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88be}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac02}, @NL80211_ATTR_SAE_PASSWORD={0x10, 0x115, "1eb79b0e1cda454c1ac1d6af"}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x17c}], @NL80211_ATTR_PRIVACY={0x4}, @beacon=[@NL80211_ATTR_IE_PROBE_RESP={0xe8, 0x7f, [@ext_channel_switch={0x3c, 0x4, {0x1, 0x40, 0xb9, 0x5}}, @rann={0x7e, 0x15, {{0x0, 0x9}, 0xa, 0x7, @device_b, 0x2, 0x400, 0xfffffff7}}, @fast_bss_trans={0x37, 0xab, {0x0, 0x5, "76ed985f60407a8f62518d552f461749", "6eedc694822cbbf317eeba72e7cf405e03e09d2642c31ec2c6b9a8befd3c9594", "24ae737f4e9a4a7575ec62a802848e73ff5e76de824f370a20e5211cf606bfa6", [{0x3, 0x3, "d48b77"}, {0x2, 0xf, "1a0017bda01ed038c1ad45ffccd8bd"}, {0x4, 0x15, "16496d90afd1962556b544c7fa709c61ef8e5840ad"}, {0x1, 0x27, "636acd54291dabda053dbfc30c4332b83cec9514607b70c705e7a44b60886b895ff01b6ac4fafc"}, {0x2, 0x1, "11"}]}}, @mesh_chsw={0x76, 0x6, {0x0, 0x7, 0x1c, 0x5f0}}, @supported_rates={0x1, 0x3, [{0x2}, {0x4, 0x1}, {0x48}]}, @mesh_chsw={0x76, 0x6, {0xd, 0x1, 0x29, 0xe2}}, @channel_switch={0x25, 0x3, {0x1, 0x5, 0x5}}]}, @NL80211_ATTR_FTM_RESPONDER={0x1b4, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0xf0, 0x2, "f0ed8618dc3f17a23ab53dc07b13189cda5f2fe86998cd38702b88af3db09018a1664b4263ac962ebaab026be228e76abe1883c6a63ac399b390c955a71458431ec9de6cf5ed17c47aa1416a61f090f1d1f22247b6db7417e7704ee9b598ed5fd293efdcaa783c31472b2597f5879d4c90149f84c709866bb2474ad076704dee3d344059cd6d87d14e758b71525efbbbf27bbba9ed8747a407622bc7513407c64db2a9864873a3a111ecdd761a94b2e9aaede21a16fd745e4654c87a537b1aced932b18faf33044964f072fa103249cff088b8e09757eb2bea03a707ba71c0e0e8b01c705198efd0567108b2"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x24, 0x3, "33933a1c7f502c8db49875ee1104640b656a31389d903f57d4d2ea5905487ee3"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x76, 0x3, "a292504cc848cad847c8d37c16046df7a762b9ec92b150732bb0e667f682d0e25a518d59e1ca86d8e9dc77ae8c1c60bc17415a5f736b79633b72ed208f04ac6606dd339a25cc454e73755e4ed139eda20e44f4afe5e3691e30420bae962bbc5c23f8659f16fd33327a1ac2da7526917064ab"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x1f, 0x3, "ccd11b4d49152105b6304862d8e603d1b534b633c2eca7e94c8e47"}]}, @NL80211_ATTR_FTM_RESPONDER={0x168, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x46, 0x3, "f49a1f403ad0d4447a6842b36f71745559b9da91e676e448eb1f995dc46be3c11519ee1a50112469f7480695affea349aae3a92adb899d096224983ea5d14c46807d"}, @NL80211_FTM_RESP_ATTR_LCI={0xc1, 0x2, "55e40ec6cfdcb6c2dc8ba7f0e691da3627cbea26cb3ce545fba7bc3bbd77ed50b70fa8102574de5a5a087b4f0016693c31153b5bab2f1cc6c9f49ef9406b31d1b9d788801a5c2afc44c23bc3b876cf818fed7e3739eefab7f44dac04c8733bb3821b9ef0afad9ba21c4841650c1c04bd997dbf9ffe0d8c81c90544748f3713927998d8dc457690bf13271a3b7c2c4550c0cce60be31882897fd58f2d8a4948fea953956e1285ae3aa512d6a8528f19b35a1bb82683a0e95ada07bcdf7d"}, @NL80211_FTM_RESP_ATTR_LCI={0x4e, 0x2, "2707564a0ddf402a34dfbe98ddcae61b89fd40e8e4a247f70ed13f4352cfbc6e0fe936be41bcd10b6ad6faffabb19b4f69c1764fd75171305bd361d111ac0336841c1bece0f86928c0b9"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}]]}, 0x470}, 0x1, 0x0, 0x0, 0x48884}, 0x4004c)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x1000, '\x00', r7, r8, 0x4, 0x5, 0x4}, 0x50)

160.633464ms ago: executing program 3 (id=3216):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f80000000000b703000000000000850000007000000095000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x94)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kfree\x00', r0, 0x0, 0xa}, 0x18)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003280)=ANY=[@ANYBLOB="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"], 0xb98}, 0x1, 0x0, 0x0, 0x20000000}, 0x40800)
openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18)
r3 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57)
setsockopt$inet_mreqsrc(r3, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc)
r4 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40)

137.818416ms ago: executing program 3 (id=3217):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x7, 0x1}, 0x0, 0x10000, 0xffbffffd, 0x5, 0x2, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = syz_io_uring_setup(0x5c4, &(0x7f0000000140)={0x0, 0x1001, 0x0, 0x4}, &(0x7f00000001c0), &(0x7f00000003c0))
io_uring_enter(r0, 0x6e2, 0x3900, 0x1, 0x0, 0xe00)
syslog(0x4, &(0x7f00000010c0)=""/38, 0x26)
syslog(0x3, &(0x7f0000003640)=""/95, 0x5f)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0)
sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000030000000060a010400000000000000000100000008000b40000000000900010073797a3000000000050007400800000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0x2004c899}, 0x0)
recvmmsg(r1, &(0x7f000000c2c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f00000001c0)={0x80})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
writev(r3, &(0x7f0000000040)=[{&(0x7f0000000100)="2e9b3d0007e03dd65193dfb6c575963f86dd", 0x12}], 0x1)

130.624017ms ago: executing program 0 (id=3218):
r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r1 = mq_open(0x0, 0x40, 0x118, 0x0)
r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x18)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17)
mq_notify(r1, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}})
r5 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r5, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002480), 0x0, 0x1)
write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xfd44)
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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")
open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
close(0xffffffffffffffff)
r6 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xc, 0x1, 0x0, 0x0, 0x0, 0x13c2, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x103e40, 0x1, 0x0, 0x0, 0x0, 0x40, 0xfc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x201}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@local})
mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
r7 = gettid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000500)={r7, r6, 0x0, 0x0, 0x0}, 0x30)

26.201418ms ago: executing program 4 (id=3219):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x4, &(0x7f00000003c0)=ANY=[@ANYRES16], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x24004092)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ff9}]})
r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1225, &(0x7f0000002340)="$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")
copy_file_range(0xffffffffffffffff, 0x0, r1, &(0x7f0000000380)=0xc615, 0x101, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x300)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f00000000c0)={0xff, 0x3ff, 0x1, 'queue1\x00', 0x5})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000200), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400))
pidfd_getfd(0xffffffffffffffff, r1, 0x0)
accept4(0xffffffffffffffff, &(0x7f00000002c0)=@ethernet={0x0, @link_local}, &(0x7f0000000340)=0x80, 0x80800)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r4}, 0x18)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f0000000e40)='./file2\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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")
ioctl$F2FS_IOC_SET_COMPRESS_OPTION(0xffffffffffffffff, 0x4002f516, &(0x7f00000004c0)={0x4, 0x1d})
r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES8=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xf8, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10)
pwrite64(r5, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
r7 = open(&(0x7f0000000240)='./file2\x00', 0x145142, 0x0)
sendfile(r7, r7, 0x0, 0x800000009)

0s ago: executing program 3 (id=3220):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x3d8}, 0x18)
r2 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r7, 0x0, 0x0, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x2d)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r4, 0x9c3fa077fa966179, 0x70bd28, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x7ff, 0x69}}}}}, 0x20}}, 0x4000054)
r10 = dup(r2)
write$binfmt_elf64(r10, &(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c4606ff78a3050000000000000002003e00cd000000c9030000000000004000000000000000ea02000000000000020001000500380001000600b1060004030000000b000d00ff000000000000000900000000000000070000000000000009"], 0x178)
execveat(r10, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

kernel console output (not intermixed with test programs):

apable+0x83/0x90
[  187.506262][T10904]  path_mount+0x4a5/0xb70
[  187.506329][T10904]  ? user_path_at+0x109/0x130
[  187.506349][T10904]  __se_sys_mount+0x28c/0x2e0
[  187.506386][T10904]  ? fput+0x8f/0xc0
[  187.506484][T10904]  __x64_sys_mount+0x67/0x80
[  187.506512][T10904]  x64_sys_call+0x2b51/0x3000
[  187.506537][T10904]  do_syscall_64+0xd2/0x200
[  187.506556][T10904]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  187.506659][T10904]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  187.506691][T10904]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  187.506711][T10904] RIP: 0033:0x7fb3812af6c9
[  187.506726][T10904] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  187.506744][T10904] RSP: 002b:00007fb37fd17038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  187.506803][T10904] RAX: ffffffffffffffda RBX: 00007fb381505fa0 RCX: 00007fb3812af6c9
[  187.506811][T10904] RDX: 00002000000000c0 RSI: 0000200000000240 RDI: 0000000000000000
[  187.506819][T10904] RBP: 00007fb37fd17090 R08: 0000200000000000 R09: 0000000000000000
[  187.506827][T10904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  187.506836][T10904] R13: 00007fb381506038 R14: 00007fb381505fa0 R15: 00007ffee371dd08
[  187.506849][T10904]  </TASK>
[  187.769560][T10911] loop0: detected capacity change from 0 to 128
[  187.797087][T10911] ext4 filesystem being mounted at /500/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  187.838976][T10908] loop4: detected capacity change from 0 to 512
[  187.846037][T10908] ext4: Unknown parameter 'nouser_xattr'
[  187.853490][   T29] kauditd_printk_skb: 806 callbacks suppressed
[  187.853508][   T29] audit: type=1400 audit(1763465751.407:8905): avc:  denied  { remount } for  pid=10907 comm="syz.4.2539" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  187.879697][   T29] audit: type=1400 audit(1763465751.407:8906): avc:  denied  { append } for  pid=10907 comm="syz.4.2539" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  187.883475][T10917] loop1: detected capacity change from 0 to 128
[  188.041486][   T29] audit: type=1326 audit(1763465751.585:8907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10933 comm="syz.4.2546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3812af6c9 code=0x7ffc0000
[  188.065249][   T29] audit: type=1326 audit(1763465751.585:8908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10933 comm="syz.4.2546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb3812af6c9 code=0x7ffc0000
[  188.088850][   T29] audit: type=1326 audit(1763465751.585:8909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10933 comm="syz.4.2546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3812af6c9 code=0x7ffc0000
[  188.150455][   T29] audit: type=1326 audit(1763465751.631:8910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10933 comm="syz.4.2546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3812af6c9 code=0x7ffc0000
[  188.174974][   T29] audit: type=1326 audit(1763465751.660:8911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10933 comm="syz.4.2546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb3812af6c9 code=0x7ffc0000
[  188.198711][   T29] audit: type=1326 audit(1763465751.660:8912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10933 comm="syz.4.2546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3812af6c9 code=0x7ffc0000
[  188.222490][   T29] audit: type=1326 audit(1763465751.660:8913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10933 comm="syz.4.2546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3812af6c9 code=0x7ffc0000
[  188.246293][   T29] audit: type=1326 audit(1763465751.669:8914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10933 comm="syz.4.2546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb3812af6c9 code=0x7ffc0000
[  188.288590][T10934] loop4: detected capacity change from 0 to 1024
[  188.389507][T10950] loop1: detected capacity change from 0 to 164
[  188.606547][T10965] Falling back ldisc for ttyS3.
[  188.705230][T10973] loop0: detected capacity change from 0 to 512
[  188.767708][T10980] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2560'.
[  188.777411][T10973] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  188.814534][T10946] loop4: detected capacity change from 0 to 128
[  188.820262][T10973] EXT4-fs (loop0): 1 truncate cleaned up
[  188.849361][T10946] ext4 filesystem being mounted at /466/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  188.942738][T10988] loop1: detected capacity change from 0 to 512
[  189.003799][T10988] ext4 filesystem being mounted at /482/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  189.017457][T10988] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.2562: corrupted inode contents
[  189.029601][T10988] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #2: comm syz.1.2562: mark_inode_dirty error
[  189.041370][T10988] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.2562: corrupted inode contents
[  189.053329][T10988] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.2562: mark_inode_dirty error
[  190.514137][T11007] loop4: detected capacity change from 0 to 1024
[  190.521684][T11007] EXT4-fs: Ignoring removed orlov option
[  190.584978][T11007] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a002c018, mo2=0002]
[  190.679314][T11007] System zones: 0-1, 3-12
[  190.713008][T11016] netlink: 'syz.0.2573': attribute type 1 has an invalid length.
[  190.805081][T11022] loop0: detected capacity change from 0 to 1024
[  190.829197][T11022] EXT4-fs: Ignoring removed orlov option
[  190.886154][T11027] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2577'.
[  190.897734][T11027] netlink: 'syz.2.2577': attribute type 1 has an invalid length.
[  190.960999][T11027] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11027 comm=syz.2.2577
[  191.072952][T11050] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2585'.
[  191.119754][T11050] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2585'.
[  191.155709][T11053] netlink: 'syz.2.2586': attribute type 1 has an invalid length.
[  191.179255][T11056] loop0: detected capacity change from 0 to 512
[  191.192884][T11056] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[  191.240372][T11056] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  191.258880][T11056] EXT4-fs (loop0): orphan cleanup on readonly fs
[  191.265550][T11056] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  191.280284][T11056] EXT4-fs (loop0): Cannot turn on quotas: error -117
[  191.288245][T11056] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #16: comm syz.0.2587: iget: immutable or append flags not allowed on symlinks
[  191.302909][T11056] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.2587: couldn't read orphan inode 16 (err -117)
[  191.336695][T11056] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check.
[  191.379102][T11067] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2592'.
[  191.529316][T11085] loop0: detected capacity change from 0 to 1024
[  191.536536][T11085] EXT4-fs: Ignoring removed orlov option
[  191.605075][T11093] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  191.613231][T11093] netlink: 'syz.4.2600': attribute type 1 has an invalid length.
[  191.628178][T11093] 8021q: adding VLAN 0 to HW filter on device bond0
[  191.635428][T11095] loop0: detected capacity change from 0 to 512
[  191.649096][T11095] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2601'.
[  191.823405][T11102] sch_tbf: burst 0 is lower than device lo mtu (18) !
[  192.250361][ T4216] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  192.260372][ T4216] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  192.305263][ T4216] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  192.315066][ T4216] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  192.371569][ T4216] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  192.381439][ T4216] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  192.419618][ T4216] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  192.429702][ T4216] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  192.435472][T11087] delete_channel: no stack
[  192.446399][T11121] chnl_net:caif_netlink_parms(): no params data found
[  192.501837][T11121] bridge0: port 1(bridge_slave_0) entered blocking state
[  192.509040][T11121] bridge0: port 1(bridge_slave_0) entered disabled state
[  192.516502][T11121] bridge_slave_0: entered allmulticast mode
[  192.523199][T11121] bridge_slave_0: entered promiscuous mode
[  192.530096][T11121] bridge0: port 2(bridge_slave_1) entered blocking state
[  192.537162][T11121] bridge0: port 2(bridge_slave_1) entered disabled state
[  192.544864][T11121] bridge_slave_1: entered allmulticast mode
[  192.551414][T11121] bridge_slave_1: entered promiscuous mode
[  192.568822][T11144] loop4: detected capacity change from 0 to 128
[  192.577215][T11144] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  192.590351][T11121] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  192.599007][T11144] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  192.607737][T11121] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  192.661338][T11144] program syz.4.2616 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  192.720967][ T3480] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  192.768848][ T9552] IPVS: starting estimator thread 0...
[  192.781646][T11158] loop4: detected capacity change from 0 to 1024
[  192.792933][T11158] EXT4-fs: Ignoring removed orlov option
[  192.809836][ T4216] bond0 (unregistering): Released all slaves
[  192.819291][ T4216] bond1 (unregistering): Released all slaves
[  192.829676][ T4216] bond2 (unregistering): (slave vlan2): Releasing active interface
[  192.841059][ T4216] bond2 (unregistering): Released all slaves
[  192.854988][T11158] ext4 filesystem being mounted at /476/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  192.866180][T11157] IPVS: using max 3024 ests per chain, 151200 per kthread
[  192.881234][T11121] team0: Port device team_slave_0 added
[  192.892145][T11121] team0: Port device team_slave_1 added
[  192.904552][T11158] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: comm syz.4.2621: lblock 0 mapped to illegal pblock 0 (length 6)
[  192.928722][T11121] batman_adv: batadv0: Adding interface: batadv_slave_0
[  192.935755][T11121] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  192.936367][T11158] EXT4-fs error (device loop4): ext4_ext_remove_space:2955: inode #15: comm syz.4.2621: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  192.961718][T11121] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  192.989024][T11158] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: comm syz.4.2621: lblock 0 mapped to illegal pblock 0 (length 1)
[  193.006175][T11158] EXT4-fs error (device loop4): ext4_ext_remove_space:2955: inode #15: comm syz.4.2621: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0)
[  193.029493][T11183] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2629'.
[  193.054526][T11181] loop1: detected capacity change from 0 to 128
[  193.064043][T11121] batman_adv: batadv0: Adding interface: batadv_slave_1
[  193.071024][T11121] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  193.097122][T11121] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  193.138115][T11188] loop4: detected capacity change from 0 to 128
[  193.153246][T11188] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  193.174551][T11188] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  193.186490][ T4216] hsr_slave_0: left promiscuous mode
[  193.192319][T11190] loop1: detected capacity change from 0 to 164
[  193.198651][ T4216] hsr_slave_1: left promiscuous mode
[  193.199477][T11190] iso9660: Unknown parameter '	'
[  193.209201][ T4216] veth1_macvtap: left promiscuous mode
[  193.209388][   T29] kauditd_printk_skb: 440 callbacks suppressed
[  193.209401][   T29] audit: type=1326 audit(1763465756.411:9354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11189 comm="syz.1.2632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb4c51adf10 code=0x7ffc0000
[  193.215004][ T4216] veth0_macvtap: left promiscuous mode
[  193.222219][   T29] audit: type=1326 audit(1763465756.421:9355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11189 comm="syz.1.2632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb4c51af2cb code=0x7ffc0000
[  193.248601][ T4216] veth1_vlan: left promiscuous mode
[  193.250062][   T29] audit: type=1326 audit(1763465756.421:9356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11189 comm="syz.1.2632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fb4c51ae32a code=0x7ffc0000
[  193.250090][   T29] audit: type=1326 audit(1763465756.421:9357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11189 comm="syz.1.2632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4c51af6c9 code=0x7ffc0000
[  193.273553][ T4216] veth0_vlan: left promiscuous mode
[  193.330851][   T29] audit: type=1326 audit(1763465756.486:9358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11189 comm="syz.1.2632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4c51af6c9 code=0x7ffc0000
[  193.354393][   T29] audit: type=1326 audit(1763465756.486:9359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11189 comm="syz.1.2632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb4c51af6c9 code=0x7ffc0000
[  193.378107][   T29] audit: type=1326 audit(1763465756.486:9360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11189 comm="syz.1.2632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4c51af6c9 code=0x7ffc0000
[  193.401696][   T29] audit: type=1326 audit(1763465756.486:9361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11189 comm="syz.1.2632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb4c51af6c9 code=0x7ffc0000
[  193.425251][   T29] audit: type=1326 audit(1763465756.486:9362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11189 comm="syz.1.2632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4c51af6c9 code=0x7ffc0000
[  193.449537][   T29] audit: type=1326 audit(1763465756.486:9363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11189 comm="syz.1.2632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7fb4c51af6c9 code=0x7ffc0000
[  193.482868][ T4242] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  193.550823][ T4216] pim6reg (unregistering): left allmulticast mode
[  193.605151][T11212] loop4: detected capacity change from 0 to 512
[  193.619750][T11212] EXT4-fs: Ignoring removed i_version option
[  193.625889][T11212] EXT4-fs: Ignoring removed bh option
[  193.655011][T11212] ext4 filesystem being mounted at /480/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  193.665514][ T3480] smc: removing ib device !yz!
[  193.847243][T11121] hsr_slave_0: entered promiscuous mode
[  193.863193][T11121] hsr_slave_1: entered promiscuous mode
[  194.979475][T11121] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  195.006477][T11121] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  195.025199][T11121] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  195.033880][T11283] netlink: 'syz.1.2642': attribute type 1 has an invalid length.
[  195.041692][T11283] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2642'.
[  195.075457][T11121] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  195.214153][T11121] 8021q: adding VLAN 0 to HW filter on device bond0
[  195.235584][T11301] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2645'.
[  195.259825][T11121] 8021q: adding VLAN 0 to HW filter on device team0
[  195.286423][T11121] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  195.296875][T11121] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  195.308959][T11301] openvswitch: netlink: Key 0 has unexpected len 2 expected 0
[  195.333071][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  195.340236][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  195.359510][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  195.366680][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  195.497875][T11121] 8021q: adding VLAN 0 to HW filter on device batadv0
[  195.539247][T11326] loop1: detected capacity change from 0 to 2048
[  195.753353][T11311] netlink: 'syz.0.2645': attribute type 10 has an invalid length.
[  195.947810][T11121] veth0_vlan: entered promiscuous mode
[  195.966458][T11121] veth1_vlan: entered promiscuous mode
[  196.004452][T11121] veth0_macvtap: entered promiscuous mode
[  196.012020][T11121] veth1_macvtap: entered promiscuous mode
[  196.026838][T11121] batman_adv: batadv0: Interface activated: batadv_slave_0
[  196.061312][T11121] batman_adv: batadv0: Interface activated: batadv_slave_1
[  196.073445][ T4211] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  196.082571][ T4211] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  196.094183][T11346] SELinux: failed to load policy
[  196.102887][ T4211] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  196.121163][ T4211] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  196.188736][T11350] loop3: detected capacity change from 0 to 1024
[  196.201104][T11350] EXT4-fs: Ignoring removed orlov option
[  196.219709][T11350] EXT4-fs mount: 32 callbacks suppressed
[  196.219726][T11350] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  196.250173][T11341] loop4: detected capacity change from 0 to 2048
[  196.271497][T11121] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  196.337338][T11341] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  196.342372][T11364] devtmpfs: Too few inodes for current use
[  196.370835][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  196.384255][T11364] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  196.438234][T11367] loop3: detected capacity change from 0 to 512
[  196.452478][T11367] EXT4-fs: Ignoring removed i_version option
[  196.458583][T11367] EXT4-fs: Ignoring removed bh option
[  196.459320][T11372] loop0: detected capacity change from 0 to 2048
[  196.471322][T11372] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[  196.481059][T11372] EXT4-fs (loop0): group descriptors corrupted!
[  196.497612][T11367] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  196.510617][T11367] ext4 filesystem being mounted at /2/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  196.559373][T11121] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  196.593872][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  196.607978][T11382] loop3: detected capacity change from 0 to 1024
[  196.623991][T11382] EXT4-fs: Ignoring removed orlov option
[  196.638482][T11382] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  196.663436][T11389] FAULT_INJECTION: forcing a failure.
[  196.663436][T11389] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  196.676711][T11389] CPU: 1 UID: 0 PID: 11389 Comm: syz.4.2667 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  196.676761][T11389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  196.676772][T11389] Call Trace:
[  196.676779][T11389]  <TASK>
[  196.676787][T11389]  __dump_stack+0x1d/0x30
[  196.676810][T11389]  dump_stack_lvl+0xe8/0x140
[  196.676830][T11389]  dump_stack+0x15/0x1b
[  196.676908][T11389]  should_fail_ex+0x265/0x280
[  196.676937][T11389]  should_fail+0xb/0x20
[  196.676954][T11389]  should_fail_usercopy+0x1a/0x20
[  196.677011][T11389]  _copy_to_user+0x20/0xa0
[  196.677041][T11389]  simple_read_from_buffer+0xb5/0x130
[  196.677118][T11389]  proc_fail_nth_read+0x10e/0x150
[  196.677154][T11389]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  196.677207][T11389]  vfs_read+0x1a8/0x770
[  196.677235][T11389]  ? __cond_resched+0x4e/0x90
[  196.677261][T11389]  ksys_read+0xda/0x1a0
[  196.677284][T11389]  __x64_sys_read+0x40/0x50
[  196.677336][T11389]  x64_sys_call+0x27c0/0x3000
[  196.677361][T11389]  do_syscall_64+0xd2/0x200
[  196.677416][T11389]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  196.677441][T11389]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  196.677480][T11389]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  196.677504][T11389] RIP: 0033:0x7fb3812ae0dc
[  196.677522][T11389] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  196.677551][T11389] RSP: 002b:00007fb37fd17030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  196.677574][T11389] RAX: ffffffffffffffda RBX: 00007fb381505fa0 RCX: 00007fb3812ae0dc
[  196.677586][T11389] RDX: 000000000000000f RSI: 00007fb37fd170a0 RDI: 0000000000000004
[  196.677609][T11389] RBP: 00007fb37fd17090 R08: 0000000000000000 R09: 0000000000000000
[  196.677621][T11389] R10: 0000000000001100 R11: 0000000000000246 R12: 0000000000000002
[  196.677701][T11389] R13: 00007fb381506038 R14: 00007fb381505fa0 R15: 00007ffee371dd08
[  196.677723][T11389]  </TASK>
[  196.889769][T11121] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  196.907088][T11393] loop4: detected capacity change from 0 to 128
[  196.924122][T11393] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  196.949748][T11399] loop3: detected capacity change from 0 to 512
[  196.954747][T11393] ext4 filesystem being mounted at /484/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  196.956559][T11399] EXT4-fs: dax option not supported
[  196.998475][T11399] loop3: detected capacity change from 0 to 512
[  197.005027][T11399] EXT4-fs: dax option not supported
[  197.014898][T11399] loop3: detected capacity change from 0 to 512
[  197.021461][T11399] EXT4-fs: dax option not supported
[  197.030669][T11399] loop3: detected capacity change from 0 to 512
[  197.037182][T11399] EXT4-fs: dax option not supported
[  197.046152][T11399] loop3: detected capacity change from 0 to 512
[  197.052755][T11399] EXT4-fs: dax option not supported
[  197.059023][ T3317] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  197.061981][T11399] loop3: detected capacity change from 0 to 512
[  197.074951][T11399] EXT4-fs: dax option not supported
[  197.084046][T11399] loop3: detected capacity change from 0 to 512
[  197.090661][T11399] EXT4-fs: dax option not supported
[  197.099214][T11399] loop3: detected capacity change from 0 to 512
[  197.105956][T11399] EXT4-fs: dax option not supported
[  197.118046][T11399] loop3: detected capacity change from 0 to 512
[  197.124571][T11399] EXT4-fs: dax option not supported
[  197.173754][T11399] loop3: detected capacity change from 0 to 512
[  197.185452][T11399] EXT4-fs: dax option not supported
[  197.204439][T11399] loop3: detected capacity change from 0 to 512
[  197.222695][T11399] EXT4-fs: dax option not supported
[  197.229495][T11416] sch_tbf: burst 0 is lower than device lo mtu (11337746) !
[  197.243753][T11399] loop3: detected capacity change from 0 to 512
[  197.251994][T11399] EXT4-fs: dax option not supported
[  197.273136][T11399] loop3: detected capacity change from 0 to 512
[  197.279900][T11399] EXT4-fs: dax option not supported
[  197.283720][T11420] loop4: detected capacity change from 0 to 1024
[  197.288900][T11399] loop3: detected capacity change from 0 to 512
[  197.292303][T11420] EXT4-fs: Ignoring removed orlov option
[  197.304843][T11399] EXT4-fs: dax option not supported
[  197.312656][T11420] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  197.325470][T11399] loop3: detected capacity change from 0 to 512
[  197.332607][T11399] EXT4-fs: dax option not supported
[  197.349022][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  197.358129][T11399] loop3: detected capacity change from 0 to 512
[  197.365233][T11399] EXT4-fs: dax option not supported
[  197.374594][T11399] loop3: detected capacity change from 0 to 512
[  197.393288][T11399] EXT4-fs: dax option not supported
[  197.402410][T11399] loop3: detected capacity change from 0 to 512
[  197.420751][T11430] loop4: detected capacity change from 0 to 128
[  197.427290][T11399] EXT4-fs: dax option not supported
[  197.437551][T11430] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  197.437592][T11399] loop3: detected capacity change from 0 to 512
[  197.456825][T11399] EXT4-fs: dax option not supported
[  197.463949][T11430] ext4 filesystem being mounted at /490/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  197.465813][T11399] loop3: detected capacity change from 0 to 512
[  197.504077][T11399] EXT4-fs: dax option not supported
[  197.513056][T11399] loop3: detected capacity change from 0 to 512
[  197.519655][T11399] EXT4-fs: dax option not supported
[  197.528649][T11399] loop3: detected capacity change from 0 to 512
[  197.535368][T11399] EXT4-fs: dax option not supported
[  197.535767][ T3317] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  197.545219][T11399] loop3: detected capacity change from 0 to 512
[  197.556498][T11399] EXT4-fs: dax option not supported
[  197.565818][T11399] loop3: detected capacity change from 0 to 512
[  197.572680][T11399] EXT4-fs: dax option not supported
[  197.582269][T11399] loop3: detected capacity change from 0 to 512
[  197.590411][T11399] EXT4-fs: dax option not supported
[  197.599942][T11399] loop3: detected capacity change from 0 to 512
[  197.606805][T11399] EXT4-fs: dax option not supported
[  197.621065][T11437] loop4: detected capacity change from 0 to 128
[  197.640853][T11399] loop3: detected capacity change from 0 to 512
[  197.647895][T11399] EXT4-fs: dax option not supported
[  197.690020][T11399] loop3: detected capacity change from 0 to 512
[  197.701396][T11399] EXT4-fs: dax option not supported
[  197.728218][T11399] loop3: detected capacity change from 0 to 512
[  197.749575][T11399] EXT4-fs: dax option not supported
[  197.883326][T11399] loop3: detected capacity change from 0 to 512
[  197.890126][T11399] EXT4-fs: dax option not supported
[  197.899324][T11399] loop3: detected capacity change from 0 to 512
[  198.167266][T11399] EXT4-fs: dax option not supported
[  198.247601][T11399] loop3: detected capacity change from 0 to 512
[  198.342986][T11399] EXT4-fs: dax option not supported
[  198.438612][T11399] loop3: detected capacity change from 0 to 512
[  198.518529][T11399] EXT4-fs: dax option not supported
[  198.767084][T11459] loop1: detected capacity change from 0 to 2048
[  198.776827][T11461] netlink: 'syz.2.2695': attribute type 1 has an invalid length.
[  198.788493][   T29] kauditd_printk_skb: 112 callbacks suppressed
[  198.788510][   T29] audit: type=1400 audit(1763465761.631:9476): avc:  denied  { create } for  pid=11462 comm="syz.3.2696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  198.817472][T11463] loop3: detected capacity change from 0 to 512
[  198.824268][T11463] EXT4-fs: Ignoring removed bh option
[  198.889934][T11463] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  198.899201][T11459] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[  198.909158][T11459] EXT4-fs (loop1): group descriptors corrupted!
[  198.953470][T11463] EXT4-fs (loop3): 1 truncate cleaned up
[  198.962344][   T29] audit: type=1400 audit(1763465761.790:9477): avc:  denied  { setopt } for  pid=11466 comm="syz.4.2698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  198.998788][   T29] audit: type=1400 audit(1763465761.827:9478): avc:  denied  { sys_module } for  pid=11466 comm="syz.4.2698" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  199.018849][T11463] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  199.056216][   T29] audit: type=1400 audit(1763465761.883:9479): avc:  denied  { setattr } for  pid=11462 comm="syz.3.2696" path="/5/file0/file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  199.080226][T11471] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2699'.
[  199.092912][   T29] audit: type=1326 audit(1763465761.921:9480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11462 comm="syz.3.2696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa81d41f6c9 code=0x7ffc0000
[  199.094590][T11463] binfmt_misc: register: failed to install interpreter file ./file0
[  199.116474][   T29] audit: type=1326 audit(1763465761.921:9481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11462 comm="syz.3.2696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa81d41f6c9 code=0x7ffc0000
[  199.148175][   T29] audit: type=1326 audit(1763465761.921:9482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11462 comm="syz.3.2696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa81d41f6c9 code=0x7ffc0000
[  199.171686][   T29] audit: type=1326 audit(1763465761.921:9483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11462 comm="syz.3.2696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa81d41f6c9 code=0x7ffc0000
[  199.195205][   T29] audit: type=1326 audit(1763465761.921:9484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11462 comm="syz.3.2696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa81d41f6c9 code=0x7ffc0000
[  199.218755][   T29] audit: type=1326 audit(1763465761.921:9485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11462 comm="syz.3.2696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa81d41f6c9 code=0x7ffc0000
[  199.285819][T11121] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  199.402103][T11482] loop3: detected capacity change from 0 to 2048
[  199.415998][T11482] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  199.688912][T11490] pim6reg: entered allmulticast mode
[  200.049901][T11511] loop0: detected capacity change from 0 to 128
[  200.059279][T11511] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  200.072261][T11511] ext4 filesystem being mounted at /537/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  200.142367][ T3316] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  200.162516][T11515] loop0: detected capacity change from 0 to 1024
[  200.169923][T11515] EXT4-fs: Ignoring removed orlov option
[  200.250305][T11515] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  200.269412][T11121] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  200.351373][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  200.963788][T11525] loop1: detected capacity change from 0 to 256
[  200.971516][T11525] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  201.152393][T11538] loop3: detected capacity change from 0 to 128
[  201.191470][T11543] netlink: 'syz.1.2722': attribute type 1 has an invalid length.
[  201.199814][T11538] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  201.220504][T11538] ext4 filesystem being mounted at /7/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  201.307279][T11121] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  201.321795][T11550] batman_adv: batadv0: Adding interface: dummy0
[  201.328151][T11550] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  201.394605][T11550] batman_adv: batadv0: Interface activated: dummy0
[  201.429216][T11551] batadv0: mtu less than device minimum
[  201.435487][T11551] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-208)
[  201.446420][T11551] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-208)
[  201.457206][T11551] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-208)
[  201.468007][T11551] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-208)
[  201.478959][T11551] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-208)
[  201.489849][T11551] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-208)
[  201.500615][T11551] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-208)
[  201.511542][T11551] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-208)
[  201.522298][T11551] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-208)
[  201.703559][T11560] loop1: detected capacity change from 0 to 128
[  201.735684][T11562] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2724'.
[  201.749937][T11562] team0: Port device team_slave_1 removed
[  201.762176][T11560] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  201.814220][T11560] ext4 filesystem being mounted at /520/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  201.925553][ T3314] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  202.034662][T11577] loop1: detected capacity change from 0 to 1024
[  202.041580][T11577] ext2: Unknown parameter 'noacl'
[  202.207025][T11581] loop0: detected capacity change from 0 to 2048
[  202.225251][T11581] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[  202.235012][T11581] EXT4-fs (loop0): group descriptors corrupted!
[  202.277233][T11584] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2736'.
[  202.286370][T11584] netem: unknown loss type 13
[  202.291099][T11584] netem: change failed
[  202.414159][T11590] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2737'.
[  202.589323][T11600] loop4: detected capacity change from 0 to 2048
[  202.623685][T11600] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  202.891429][T11617] FAULT_INJECTION: forcing a failure.
[  202.891429][T11617] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  202.904546][T11617] CPU: 0 UID: 0 PID: 11617 Comm: syz.3.2747 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  202.904577][T11617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  202.904589][T11617] Call Trace:
[  202.904596][T11617]  <TASK>
[  202.904612][T11617]  __dump_stack+0x1d/0x30
[  202.904651][T11617]  dump_stack_lvl+0xe8/0x140
[  202.904673][T11617]  dump_stack+0x15/0x1b
[  202.904704][T11617]  should_fail_ex+0x265/0x280
[  202.904748][T11617]  should_fail+0xb/0x20
[  202.904766][T11617]  should_fail_usercopy+0x1a/0x20
[  202.904789][T11617]  _copy_from_user+0x1c/0xb0
[  202.904871][T11617]  io_submit_one+0x52/0x11d0
[  202.904909][T11617]  __se_sys_io_submit+0xfb/0x280
[  202.904944][T11617]  __x64_sys_io_submit+0x43/0x50
[  202.904995][T11617]  x64_sys_call+0x2d6c/0x3000
[  202.905018][T11617]  do_syscall_64+0xd2/0x200
[  202.905040][T11617]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  202.905073][T11617]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  202.905237][T11617]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  202.905290][T11617] RIP: 0033:0x7fa81d41f6c9
[  202.905308][T11617] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  202.905328][T11617] RSP: 002b:00007fa81be87038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
[  202.905395][T11617] RAX: ffffffffffffffda RBX: 00007fa81d675fa0 RCX: 00007fa81d41f6c9
[  202.905484][T11617] RDX: 0000200000000700 RSI: 0000000000000001 RDI: 00007fa81e1b2000
[  202.905507][T11617] RBP: 00007fa81be87090 R08: 0000000000000000 R09: 0000000000000000
[  202.905521][T11617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  202.905534][T11617] R13: 00007fa81d676038 R14: 00007fa81d675fa0 R15: 00007ffcccc286e8
[  202.905555][T11617]  </TASK>
[  203.140368][T11619] loop0: detected capacity change from 0 to 1024
[  203.148745][T11619] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  203.159856][T11619] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  203.177451][T11619] JBD2: no valid journal superblock found
[  203.183266][T11619] EXT4-fs (loop0): Could not load journal inode
[  203.220210][T11619] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ%ºu@
) failed with errno=-22
[  203.690368][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  203.737903][T11639] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2753'.
[  204.151190][T11657] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2762'.
[  204.154898][   T29] kauditd_printk_skb: 426 callbacks suppressed
[  204.154913][   T29] audit: type=1326 audit(1763465766.654:9912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11658 comm="syz.1.2763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4c51af6c9 code=0x7ffc0000
[  204.191013][T11661] loop3: detected capacity change from 0 to 2048
[  204.198484][T11661] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[  204.208274][T11661] EXT4-fs (loop3): group descriptors corrupted!
[  204.212913][T11659] loop1: detected capacity change from 0 to 1024
[  204.215291][   T29] audit: type=1326 audit(1763465766.682:9913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11658 comm="syz.1.2763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb4c51af6c9 code=0x7ffc0000
[  204.225111][T11659] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  204.244640][   T29] audit: type=1326 audit(1763465766.682:9914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11658 comm="syz.1.2763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4c51af6c9 code=0x7ffc0000
[  204.255473][T11659] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  204.256523][T11659] JBD2: no valid journal superblock found
[  204.279035][   T29] audit: type=1326 audit(1763465766.682:9915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11658 comm="syz.1.2763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb4c51af6c9 code=0x7ffc0000
[  204.288548][T11659] EXT4-fs (loop1): Could not load journal inode
[  204.298196][T11659] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ%ºu@
) failed with errno=-22
[  204.318056][   T29] audit: type=1326 audit(1763465766.682:9916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11658 comm="syz.1.2763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4c51af6c9 code=0x7ffc0000
[  204.357899][   T29] audit: type=1326 audit(1763465766.682:9917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11658 comm="syz.1.2763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb4c51af6c9 code=0x7ffc0000
[  204.381448][   T29] audit: type=1326 audit(1763465766.682:9918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11658 comm="syz.1.2763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4c51af6c9 code=0x7ffc0000
[  204.405046][   T29] audit: type=1326 audit(1763465766.682:9919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11658 comm="syz.1.2763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb4c51af6c9 code=0x7ffc0000
[  204.428783][   T29] audit: type=1326 audit(1763465766.682:9920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11658 comm="syz.1.2763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4c51af6c9 code=0x7ffc0000
[  204.452479][   T29] audit: type=1326 audit(1763465766.682:9921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11658 comm="syz.1.2763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb4c51af6c9 code=0x7ffc0000
[  204.509455][T11667] loop0: detected capacity change from 0 to 1024
[  204.516404][T11667] EXT4-fs: Ignoring removed orlov option
[  204.526420][T11667] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  204.550557][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  204.637843][T11678] loop0: detected capacity change from 0 to 2048
[  204.672127][T11678] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  205.083783][T11698] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[  205.093761][T11698] SELinux: failed to load policy
[  205.443626][T11711] program syz.3.2780 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  205.511379][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  205.532108][T11713] loop1: detected capacity change from 0 to 1024
[  205.550138][T11713] EXT4-fs: Ignoring removed orlov option
[  205.574133][T11713] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  205.674979][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  206.190645][T11736] loop0: detected capacity change from 0 to 2048
[  206.214428][T11736] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  207.168448][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  207.276665][T11760] loop1: detected capacity change from 0 to 128
[  207.287492][T11756] loop0: detected capacity change from 0 to 164
[  207.336558][T11760] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  207.397627][T11760] ext4 filesystem being mounted at /535/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  207.430849][T11769] loop0: detected capacity change from 0 to 128
[  207.445328][T11766] loop4: detected capacity change from 0 to 1024
[  207.452284][T11766] EXT4-fs: Ignoring removed orlov option
[  207.598797][T11775] SELinux: failed to load policy
[  207.608509][ T3314] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  207.625009][T11766] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  207.725893][T11780] loop1: detected capacity change from 0 to 2048
[  207.734075][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  207.750972][T11783] loop0: detected capacity change from 0 to 1024
[  207.766928][T11783] EXT4-fs: Ignoring removed orlov option
[  207.774294][T11780] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  207.804983][T11783] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  207.879430][T11761] loop3: detected capacity change from 0 to 2048
[  207.977437][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  208.055422][T11761] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  208.149270][T11801] netlink: 'syz.0.2807': attribute type 1 has an invalid length.
[  208.168516][T11801] No such timeout policy "syz1"
[  208.244812][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  208.266777][T11807] lo speed is unknown, defaulting to 1000
[  208.273823][T11807] lo speed is unknown, defaulting to 1000
[  208.280046][T11807] lo speed is unknown, defaulting to 1000
[  208.288677][T11807] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  208.303700][T11807] lo speed is unknown, defaulting to 1000
[  208.305087][T11121] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  208.310064][T11807] lo speed is unknown, defaulting to 1000
[  208.325430][T11807] lo speed is unknown, defaulting to 1000
[  208.336403][T11813] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2812'.
[  208.345705][T11813] veth1_to_bond: entered promiscuous mode
[  208.382735][T11807] lo speed is unknown, defaulting to 1000
[  208.400444][T11807] lo speed is unknown, defaulting to 1000
[  208.461072][T11823] loop1: detected capacity change from 0 to 1024
[  208.472657][T11826] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2826'.
[  208.481918][T11826] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2826'.
[  208.491581][T11823] EXT4-fs: Ignoring removed orlov option
[  208.499434][T11826] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2826'.
[  208.508523][T11826] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2826'.
[  208.511488][T11823] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  208.530722][T11826] tipc: Enabling of bearer <eth:s> rejected, failed to enable media
[  208.552842][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  208.801281][T11835] lo speed is unknown, defaulting to 1000
[  209.026423][T11836] SELinux:  policydb magic number 0xc230000 does not match expected magic number 0xf97cff8c
[  209.117004][T11841] loop4: detected capacity change from 0 to 512
[  209.168160][T11841] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  209.199699][T11842] loop0: detected capacity change from 0 to 2048
[  209.221855][T11836] SELinux: failed to load policy
[  209.233165][T11834] loop1: detected capacity change from 0 to 2048
[  209.242439][T11842] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  209.261604][T11841] EXT4-fs (loop4): mount failed
[  209.340573][T11834] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  209.524623][   T29] kauditd_printk_skb: 192 callbacks suppressed
[  209.524644][   T29] audit: type=1326 audit(1763465770.901:10113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11816 comm="syz.3.2814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa81d41f6c9 code=0x7ffc0000
[  209.527579][T11841] netlink: 208 bytes leftover after parsing attributes in process `syz.4.2820'.
[  209.530966][   T29] audit: type=1326 audit(1763465770.901:10114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11816 comm="syz.3.2814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa81d41f6c9 code=0x7ffc0000
[  209.587621][   T29] audit: type=1326 audit(1763465770.901:10115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11816 comm="syz.3.2814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa81d41f6c9 code=0x7ffc0000
[  209.598797][T11841] netlink: 208 bytes leftover after parsing attributes in process `syz.4.2820'.
[  209.611275][   T29] audit: type=1326 audit(1763465770.901:10116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11816 comm="syz.3.2814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa81d41f6c9 code=0x7ffc0000
[  209.611318][   T29] audit: type=1326 audit(1763465770.901:10117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11816 comm="syz.3.2814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa81d41f6c9 code=0x7ffc0000
[  209.667701][   T29] audit: type=1326 audit(1763465770.901:10118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11816 comm="syz.3.2814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa81d41f6c9 code=0x7ffc0000
[  209.691381][   T29] audit: type=1326 audit(1763465770.901:10119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11816 comm="syz.3.2814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa81d41f703 code=0x7ffc0000
[  209.714886][   T29] audit: type=1326 audit(1763465770.901:10120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11816 comm="syz.3.2814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa81d41f703 code=0x7ffc0000
[  209.738375][   T29] audit: type=1326 audit(1763465770.901:10121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11816 comm="syz.3.2814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa81d41f6c9 code=0x7ffc0000
[  209.761993][   T29] audit: type=1326 audit(1763465770.901:10122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11816 comm="syz.3.2814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa81d41f703 code=0x7ffc0000
[  209.834469][T11856] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2822'.
[  209.897148][T11864] loop4: detected capacity change from 0 to 512
[  209.904828][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  209.917043][T11864] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  209.932705][T11864] EXT4-fs (loop4): mount failed
[  209.991492][T11864] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2827'.
[  210.002827][T11864] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2827'.
[  210.016407][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  210.031825][T11872] loop3: detected capacity change from 0 to 1024
[  210.038745][T11872] EXT4-fs: Ignoring removed mblk_io_submit option
[  210.074391][T11872] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  210.110836][T11876] loop0: detected capacity change from 0 to 1024
[  210.118031][T11876] EXT4-fs: Ignoring removed orlov option
[  210.127158][T11876] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  210.160413][T11889] loop9: detected capacity change from 0 to 7
[  210.166886][T11889] buffer_io_error: 14 callbacks suppressed
[  210.166902][T11889] Buffer I/O error on dev loop9, logical block 0, async page read
[  210.167230][T11121] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  210.173267][T11889] Buffer I/O error on dev loop9, logical block 0, async page read
[  210.197934][T11889]  loop9: unable to read partition table
[  210.204731][T11889] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ �â·û
[  210.204731][T11889] 
) failed (rc=-5)
[  210.339156][T11894] loop1: detected capacity change from 0 to 128
[  210.368464][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  210.381152][T11890] netlink: 'syz.2.2834': attribute type 13 has an invalid length.
[  210.392757][T11890] 0ªî{X¹¦: refused to change device tx_queue_len
[  210.399712][T11890] net_ratelimit: 10 callbacks suppressed
[  210.399726][T11890] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  210.445232][T11889] IPv6: Can't replace route, no match found
[  210.483553][T11894] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  210.498094][T11894] ext4 filesystem being mounted at /542/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  210.866061][T11900] loop4: detected capacity change from 0 to 128
[  210.878461][T11906] loop0: detected capacity change from 0 to 1024
[  211.049748][T11906] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  211.058604][ T3314] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  211.074118][T11909] loop3: detected capacity change from 0 to 512
[  211.081364][T11906] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #11: comm syz.0.2837: iget: bogus i_mode (1)
[  211.093965][T11906] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.2837: couldn't read orphan inode 11 (err -117)
[  211.109946][T11906] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  211.129986][T11904] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  211.148064][T11920] loop1: detected capacity change from 0 to 1024
[  211.155994][T11920] EXT4-fs: Ignoring removed orlov option
[  211.170579][T11909] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2842: bg 0: block 248: padding at end of block bitmap is not set
[  211.188674][T11920] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  211.201591][T11909] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.2842: Failed to acquire dquot type 1
[  211.219909][T11920] EXT4-fs error (device loop1): ext4_iget_extra_inode:5075: inode #15: comm syz.1.2846: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled
[  211.237939][T11909] EXT4-fs (loop3): 1 truncate cleaned up
[  211.244230][T11909] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  211.257935][T11920] SELinux:  Context ׸ýßX7ªÞd¹Q¬‰YI{C´¨pUèÒ–hÙ»ŒÐr: is not valid (left unmapped).
[  211.258391][T11909] ext4 filesystem being mounted at /28/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  211.324558][T11937] loop4: detected capacity change from 0 to 128
[  211.333298][T11937] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  211.345740][T11937] ext4 filesystem being mounted at /524/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  211.346339][T11939] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=229 sclass=netlink_route_socket pid=11939 comm=syz.2.2848
[  211.477091][T11941] netlink: 'syz.3.2842': attribute type 1 has an invalid length.
[  211.491938][T11947] loop4: detected capacity change from 0 to 2048
[  211.670618][T11961] loop1: detected capacity change from 0 to 1024
[  211.677817][T11961] EXT4-fs: Ignoring removed orlov option
[  211.730940][T11969] loop1: detected capacity change from 0 to 512
[  211.737572][T11969] EXT4-fs: Ignoring removed nobh option
[  211.745245][T11969] EXT4-fs error (device loop1): __ext4_iget:5443: inode #11: block 1: comm syz.1.2861: invalid block
[  211.756563][T11969] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.2861: couldn't read orphan inode 11 (err -117)
[  211.811207][T11975] loop1: detected capacity change from 0 to 128
[  211.821105][T11975] ext4 filesystem being mounted at /552/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  211.924744][T11980] loop3: detected capacity change from 0 to 2048
[  212.200039][T11997] netlink: 'syz.1.2873': attribute type 10 has an invalid length.
[  212.212686][T11997] team0 (unregistering): Port device bridge1 removed
[  212.371251][T12013] sch_tbf: peakrate 7 is lower than or equals to rate 2428583716095585370 !
[  212.500131][T12030] loop4: detected capacity change from 0 to 1024
[  212.507008][T12030] EXT4-fs: Ignoring removed orlov option
[  212.624100][T12042] loop4: detected capacity change from 0 to 1024
[  212.649118][T12042] EXT4-fs: Ignoring removed orlov option
[  212.788244][T12054] loop3: detected capacity change from 0 to 256
[  212.932032][T12064] netlink: 'syz.3.2898': attribute type 10 has an invalid length.
[  212.940293][T12064] bond0: entered promiscuous mode
[  212.945362][T12064] bond_slave_0: entered promiscuous mode
[  212.951306][T12064] bond_slave_1: entered promiscuous mode
[  212.965129][T12064] bridge0: port 3(bond0) entered blocking state
[  212.971577][T12064] bridge0: port 3(bond0) entered disabled state
[  212.978265][T12064] bond0: entered allmulticast mode
[  212.983614][T12064] bond_slave_0: entered allmulticast mode
[  212.989380][T12064] bond_slave_1: entered allmulticast mode
[  212.997104][T12064] bridge0: port 3(bond0) entered blocking state
[  213.003490][T12064] bridge0: port 3(bond0) entered forwarding state
[  213.040989][T12069] loop0: detected capacity change from 0 to 8192
[  213.097806][T12069]  loop0: p1 < > p2 p4 < p5 >
[  213.102522][T12069] loop0: partition table partially beyond EOD, truncated
[  213.109819][T12069] loop0: p1 start 524299 is beyond EOD, truncated
[  213.116288][T12069] loop0: p2 size 16128 extends beyond EOD, truncated
[  213.124339][T12069] loop0: p5 size 16128 extends beyond EOD, truncated
[  213.329615][T12088] loop3: detected capacity change from 0 to 2048
[  213.418331][T12095] FAULT_INJECTION: forcing a failure.
[  213.418331][T12095] name failslab, interval 1, probability 0, space 0, times 0
[  213.418363][T12095] CPU: 1 UID: 0 PID: 12095 Comm: syz.1.2908 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  213.418391][T12095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  213.418404][T12095] Call Trace:
[  213.418412][T12095]  <TASK>
[  213.418419][T12095]  __dump_stack+0x1d/0x30
[  213.418522][T12095]  dump_stack_lvl+0xe8/0x140
[  213.418565][T12095]  dump_stack+0x15/0x1b
[  213.418581][T12095]  should_fail_ex+0x265/0x280
[  213.418654][T12095]  should_failslab+0x8c/0xb0
[  213.418680][T12095]  kmem_cache_alloc_node_noprof+0x57/0x4a0
[  213.418709][T12095]  ? __alloc_skb+0x101/0x320
[  213.418737][T12095]  __alloc_skb+0x101/0x320
[  213.418825][T12095]  ? audit_log_start+0x342/0x720
[  213.418847][T12095]  audit_log_start+0x3a0/0x720
[  213.418867][T12095]  ? kstrtouint+0x76/0xc0
[  213.418966][T12095]  audit_seccomp+0x48/0x100
[  213.419038][T12095]  ? __seccomp_filter+0x82d/0x1250
[  213.419064][T12095]  __seccomp_filter+0x83e/0x1250
[  213.419109][T12095]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  213.419137][T12095]  ? vfs_write+0x7e8/0x960
[  213.419160][T12095]  ? __rcu_read_unlock+0x4f/0x70
[  213.419209][T12095]  ? __fget_files+0x184/0x1c0
[  213.419237][T12095]  __secure_computing+0x82/0x150
[  213.419262][T12095]  syscall_trace_enter+0xcf/0x1e0
[  213.419302][T12095]  do_syscall_64+0xac/0x200
[  213.419323][T12095]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  213.419349][T12095]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  213.419431][T12095]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  213.419452][T12095] RIP: 0033:0x7fb4c51af6c9
[  213.419525][T12095] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  213.419542][T12095] RSP: 002b:00007fb4c3c0f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000063
[  213.419562][T12095] RAX: ffffffffffffffda RBX: 00007fb4c5405fa0 RCX: 00007fb4c51af6c9
[  213.419575][T12095] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000f80
[  213.419587][T12095] RBP: 00007fb4c3c0f090 R08: 0000000000000000 R09: 0000000000000000
[  213.419599][T12095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  213.419611][T12095] R13: 00007fb4c5406038 R14: 00007fb4c5405fa0 R15: 00007ffeee3bea08
[  213.419630][T12095]  </TASK>
[  213.634157][T12100] loop1: detected capacity change from 0 to 1024
[  213.634582][T12100] EXT4-fs: Ignoring removed orlov option
[  213.720245][T12108] siw: device registration error -23
[  213.774882][T12118] batadv_slave_1: entered promiscuous mode
[  213.816242][T12114] SELinux: failed to load policy
[  213.823428][T12114] __nla_validate_parse: 7 callbacks suppressed
[  213.823444][T12114] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2916'.
[  213.823461][T12114] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2916'.
[  213.833472][T12119] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[  213.860362][T12119] SELinux: failed to load policy
[  214.095410][T12123] SELinux: failed to load policy
[  214.272491][T12131] loop3: detected capacity change from 0 to 2048
[  214.359586][T12122] loop1: detected capacity change from 0 to 2048
[  214.546028][T12142] loop1: detected capacity change from 0 to 1024
[  214.552975][T12142] EXT4-fs: Ignoring removed orlov option
[  214.574761][T12142] ext4 filesystem being mounted at /568/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  214.669242][T12118] batadv_slave_1: left promiscuous mode
[  214.691484][T12158] netlink: 'syz.4.2930': attribute type 4 has an invalid length.
[  214.705852][T12158] netlink: 'syz.4.2930': attribute type 4 has an invalid length.
[  214.777667][T12168] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2935'.
[  214.928898][T12173] loop4: detected capacity change from 0 to 2048
[  215.066032][T12166] SELinux: failed to load policy
[  215.125587][T12179] loop3: detected capacity change from 0 to 1024
[  215.132547][T12179] EXT4-fs: Ignoring removed orlov option
[  215.194103][T12185] loop1: detected capacity change from 0 to 1024
[  215.201069][T12185] EXT4-fs: Ignoring removed i_version option
[  215.207174][T12185] EXT4-fs: Ignoring removed nomblk_io_submit option
[  215.215036][T12185] EXT4-fs: Mount option(s) incompatible with ext2
[  215.239673][   T29] kauditd_printk_skb: 507 callbacks suppressed
[  215.239692][   T29] audit: type=1400 audit(1763465777.028:10625): avc:  denied  { create } for  pid=12186 comm="syz.4.2941" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  215.270157][T12187] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2941'.
[  215.298763][   T29] audit: type=1400 audit(1763465777.074:10626): avc:  denied  { unlink } for  pid=3317 comm="syz-executor" name="file0" dev="tmpfs" ino=2926 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  215.335378][T12189] loop1: detected capacity change from 0 to 128
[  215.353451][   T29] audit: type=1326 audit(1763465777.121:10627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12188 comm="syz.1.2953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4c51af6c9 code=0x7ffc0000
[  215.377922][   T29] audit: type=1326 audit(1763465777.159:10628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12188 comm="syz.1.2953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=102 compat=0 ip=0x7fb4c51af6c9 code=0x7ffc0000
[  215.401873][   T29] audit: type=1326 audit(1763465777.159:10629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12188 comm="syz.1.2953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4c51af6c9 code=0x7ffc0000
[  215.425801][   T29] audit: type=1326 audit(1763465777.159:10630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12188 comm="syz.1.2953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4c51af6c9 code=0x7ffc0000
[  215.450939][   T29] audit: type=1326 audit(1763465777.177:10631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12188 comm="syz.1.2953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7fb4c51af6c9 code=0x7ffc0000
[  215.474608][   T29] audit: type=1326 audit(1763465777.177:10632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12188 comm="syz.1.2953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4c51af6c9 code=0x7ffc0000
[  215.498252][   T29] audit: type=1326 audit(1763465777.177:10633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12188 comm="syz.1.2953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4c51af6c9 code=0x7ffc0000
[  215.514925][T12197] netlink: 'syz.2.2944': attribute type 4 has an invalid length.
[  215.521984][   T29] audit: type=1326 audit(1763465777.177:10634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12188 comm="syz.1.2953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb4c51af6c9 code=0x7ffc0000
[  215.578216][T12203] netlink: 'syz.2.2944': attribute type 4 has an invalid length.
[  215.688122][T12216] loop4: detected capacity change from 0 to 2048
[  215.700462][T12219] wg1 speed is unknown, defaulting to 1000
[  215.716831][T12219] wg1 speed is unknown, defaulting to 1000
[  215.746056][T12219] wg1 speed is unknown, defaulting to 1000
[  215.766874][T12219] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98
[  215.783271][T12219] wg1 speed is unknown, defaulting to 1000
[  215.789727][T12219] wg1 speed is unknown, defaulting to 1000
[  215.799584][T12219] wg1 speed is unknown, defaulting to 1000
[  215.904835][T12219] wg1 speed is unknown, defaulting to 1000
[  215.913017][T12219] wg1 speed is unknown, defaulting to 1000
[  215.946175][T12230] sch_tbf: burst 0 is lower than device lo mtu (18) !
[  216.136702][T12237] netlink: 'syz.0.2962': attribute type 10 has an invalid length.
[  216.144614][T12237] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2962'.
[  216.177664][T12237] bond0: entered promiscuous mode
[  216.189065][T12237] 8021q: adding VLAN 0 to HW filter on device bond0
[  216.205381][T12237] bridge0: port 1(bond0) entered blocking state
[  216.212081][T12237] bridge0: port 1(bond0) entered disabled state
[  216.234633][T12237] bond0: entered allmulticast mode
[  216.343433][T12245] syzkaller0: entered allmulticast mode
[  216.352904][T12245] loop1: detected capacity change from 0 to 512
[  216.362386][T12245] ext4 filesystem being mounted at /588/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  216.381248][T12243] syzkaller0: left allmulticast mode
[  216.400407][T12239] lo speed is unknown, defaulting to 1000
[  216.407034][T12239] wg1 speed is unknown, defaulting to 1000
[  216.472832][T12239] chnl_net:caif_netlink_parms(): no params data found
[  216.583496][T12239] bridge0: port 1(bridge_slave_0) entered blocking state
[  216.590678][T12239] bridge0: port 1(bridge_slave_0) entered disabled state
[  216.604514][T12239] bridge_slave_0: entered allmulticast mode
[  216.622049][T12239] bridge_slave_0: entered promiscuous mode
[  216.633419][T12239] bridge0: port 2(bridge_slave_1) entered blocking state
[  216.635911][T12270] loop4: detected capacity change from 0 to 512
[  216.640667][T12239] bridge0: port 2(bridge_slave_1) entered disabled state
[  216.660360][T12271] loop1: detected capacity change from 0 to 1024
[  216.660915][T12239] bridge_slave_1: entered allmulticast mode
[  216.673665][T12239] bridge_slave_1: entered promiscuous mode
[  216.678170][T12271] EXT4-fs: Ignoring removed orlov option
[  216.686079][T12270] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  216.739531][ T5097] IPVS: starting estimator thread 0...
[  216.766975][T12270] EXT4-fs (loop4): 1 orphan inode deleted
[  216.772849][T12270] EXT4-fs (loop4): 1 truncate cleaned up
[  216.788224][T12239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  216.823967][T12239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  216.849965][T12282] IPVS: using max 2976 ests per chain, 148800 per kthread
[  216.859835][T12273] lo speed is unknown, defaulting to 1000
[  216.866394][T12273] wg1 speed is unknown, defaulting to 1000
[  216.925227][T12239] team0: Port device team_slave_0 added
[  216.932670][T12239] team0: Port device team_slave_1 added
[  216.975049][T12239] batman_adv: batadv0: Adding interface: batadv_slave_0
[  216.982164][T12239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  217.008173][T12239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  217.042160][T12296] SELinux: failed to load policy
[  217.047314][T12297] loop4: detected capacity change from 0 to 2048
[  217.057717][T12239] batman_adv: batadv0: Adding interface: batadv_slave_1
[  217.064832][T12239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  217.090958][T12239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  217.192624][T12239] hsr_slave_0: entered promiscuous mode
[  217.198755][T12239] hsr_slave_1: entered promiscuous mode
[  217.204746][T12239] debugfs: 'hsr0' already exists in 'hsr'
[  217.210484][T12239] Cannot create hsr debugfs directory
[  217.238090][T12307] netlink: 'syz.0.2977': attribute type 39 has an invalid length.
[  217.342106][T12239] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  217.426586][T12293] loop1: detected capacity change from 0 to 2048
[  217.441445][T12316] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  217.475355][T12239] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  217.547256][T12239] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  217.616380][T12239] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  217.621450][T12337] SELinux:  policydb magic number 0xc230000 does not match expected magic number 0xf97cff8c
[  217.637248][T12337] SELinux: failed to load policy
[  217.659785][T12339] loop3: detected capacity change from 0 to 128
[  217.681374][T12337] loop0: detected capacity change from 0 to 2048
[  217.692602][T12339] ext4 filesystem being mounted at /59/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  217.730288][T12239] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  217.766642][T12239] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  217.791463][T12239] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  217.803531][T12239] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  217.949172][T12354] loop4: detected capacity change from 0 to 1024
[  217.963652][T12354] EXT4-fs: Ignoring removed i_version option
[  217.969734][T12354] EXT4-fs: Ignoring removed nomblk_io_submit option
[  218.027370][T12354] EXT4-fs: Mount option(s) incompatible with ext2
[  218.099857][T12356] SELinux: failed to load policy
[  218.126894][T12239] 8021q: adding VLAN 0 to HW filter on device bond0
[  218.158503][T12239] 8021q: adding VLAN 0 to HW filter on device team0
[  218.181009][T12360] loop4: detected capacity change from 0 to 256
[  218.188999][ T4222] bridge0: port 1(bridge_slave_0) entered blocking state
[  218.196106][ T4222] bridge0: port 1(bridge_slave_0) entered forwarding state
[  218.207415][T12360] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-208); Ignoring new local tt entry: 14:00:06:00:1e:00
[  218.219637][ T4222] bridge0: port 2(bridge_slave_1) entered blocking state
[  218.228870][ T4222] bridge0: port 2(bridge_slave_1) entered forwarding state
[  218.245734][T12360] Process accounting resumed
[  218.265170][T12239] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  218.275834][T12239] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  218.296729][T12362] netlink: 'syz.4.2993': attribute type 13 has an invalid length.
[  218.327213][T12362] gretap0: refused to change device tx_queue_len
[  218.333597][T12362] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  218.515487][T12375] loop4: detected capacity change from 0 to 128
[  218.533411][T12353] loop3: detected capacity change from 0 to 2048
[  218.533644][T12375] ext4 filesystem being mounted at /549/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  218.619663][T12239] 8021q: adding VLAN 0 to HW filter on device batadv0
[  218.816238][T12397] loop4: detected capacity change from 0 to 1024
[  218.830514][T12397] EXT4-fs: Ignoring removed orlov option
[  218.867042][T12239] veth0_vlan: entered promiscuous mode
[  218.876895][T12239] veth1_vlan: entered promiscuous mode
[  218.901955][T12239] veth0_macvtap: entered promiscuous mode
[  218.952919][T12404] loop0: detected capacity change from 0 to 2048
[  218.963256][T12239] veth1_macvtap: entered promiscuous mode
[  218.975890][T12239] batman_adv: batadv0: Interface activated: batadv_slave_0
[  218.985259][T12239] batman_adv: batadv0: Interface activated: batadv_slave_1
[  219.040714][T12404]  loop0: p2 p3 p7
[  219.123693][ T4222] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  219.205631][ T4222] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  219.258101][ T4222] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  219.396291][ T4222] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  219.601191][T12411] loop2: detected capacity change from 0 to 512
[  220.702366][T12421] loop3: detected capacity change from 0 to 512
[  220.725566][   T29] kauditd_printk_skb: 85 callbacks suppressed
[  220.725583][   T29] audit: type=1326 audit(1763465782.154:10720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12418 comm="syz.3.3008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa81d41f6c9 code=0x7ffc0000
[  220.762846][T12423] syzkaller0: entered allmulticast mode
[  220.787865][T12426] loop4: detected capacity change from 0 to 128
[  220.810518][T12422] syzkaller0: left allmulticast mode
[  220.818438][T12426] ext4 filesystem being mounted at /554/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  220.850628][   T29] audit: type=1326 audit(1763465782.191:10721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12418 comm="syz.3.3008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa81d41f6c9 code=0x7ffc0000
[  220.874393][   T29] audit: type=1326 audit(1763465782.191:10722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12418 comm="syz.3.3008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fa81d41f6c9 code=0x7ffc0000
[  221.011490][   T29] audit: type=1400 audit(1763465782.425:10723): avc:  denied  { write } for  pid=12429 comm="syz.3.3012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  221.226644][T12439] loop1: detected capacity change from 0 to 128
[  221.235341][T12439] ext4 filesystem being mounted at /595/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  221.270186][   T29] audit: type=1400 audit(1763465782.668:10724): avc:  denied  { setattr } for  pid=12438 comm="syz.1.3015" name="file1" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  221.609755][T12446] loop4: detected capacity change from 0 to 512
[  221.617325][T12446] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal
[  221.664093][T12447] loop1: detected capacity change from 0 to 2048
[  222.006504][T12456] SELinux: failed to load policy
[  222.247564][   T29] audit: type=1400 audit(1763465783.472:10725): avc:  denied  { read } for  pid=12457 comm="syz.3.3019" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  222.272242][   T29] audit: type=1400 audit(1763465783.472:10726): avc:  denied  { open } for  pid=12457 comm="syz.3.3019" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  222.297263][   T29] audit: type=1400 audit(1763465783.472:10727): avc:  denied  { ioctl } for  pid=12457 comm="syz.3.3019" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  222.351770][T12453] loop2: detected capacity change from 0 to 2048
[  222.384838][T12466] loop0: detected capacity change from 0 to 128
[  222.397378][T12466] ext4 filesystem being mounted at /596/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  222.550044][T12469] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  222.595976][T12475] loop0: detected capacity change from 0 to 1024
[  222.613077][   T29] audit: type=1400 audit(1763465783.921:10728): avc:  denied  { read } for  pid=12477 comm="syz.1.3026" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  222.636563][   T29] audit: type=1400 audit(1763465783.921:10729): avc:  denied  { open } for  pid=12477 comm="syz.1.3026" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  222.641046][T12475] EXT4-fs: Ignoring removed orlov option
[  222.693351][T12469] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  222.774706][T12469] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  222.813773][T12489] loop0: detected capacity change from 0 to 1024
[  222.857737][T12489] EXT4-fs: Ignoring removed orlov option
[  222.868691][T12469] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  222.992895][T12491] lo speed is unknown, defaulting to 1000
[  222.999109][T12491] wg1 speed is unknown, defaulting to 1000
[  223.030740][ T4232] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  223.034363][T12500] loop2: detected capacity change from 0 to 2048
[  223.046694][ T4211] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  223.069982][ T4211] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  223.100033][ T4211] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  223.128696][T12491] chnl_net:caif_netlink_parms(): no params data found
[  223.199384][T12491] bridge0: port 1(bridge_slave_0) entered blocking state
[  223.206546][T12491] bridge0: port 1(bridge_slave_0) entered disabled state
[  223.222287][T12491] bridge_slave_0: entered allmulticast mode
[  223.225232][T12515] loop4: detected capacity change from 0 to 128
[  223.239055][T12491] bridge_slave_0: entered promiscuous mode
[  223.281700][T12515] ext4 filesystem being mounted at /559/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  223.320706][T12491] bridge0: port 2(bridge_slave_1) entered blocking state
[  223.327810][T12491] bridge0: port 2(bridge_slave_1) entered disabled state
[  223.381942][T12491] bridge_slave_1: entered allmulticast mode
[  223.407453][T12491] bridge_slave_1: entered promiscuous mode
[  223.452405][T12520] pim6reg: entered allmulticast mode
[  223.482476][T12491] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  223.505989][T12491] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  223.527288][T12530] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  223.560859][T12491] team0: Port device team_slave_0 added
[  223.567856][T12491] team0: Port device team_slave_1 added
[  223.613244][T12491] batman_adv: batadv0: Adding interface: batadv_slave_0
[  223.620298][T12491] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  223.646285][T12491] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  223.657575][T12529] loop4: detected capacity change from 0 to 1024
[  223.668333][T12529] EXT4-fs: Ignoring removed orlov option
[  223.744655][T12491] batman_adv: batadv0: Adding interface: batadv_slave_1
[  223.751854][T12491] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  223.778127][T12491] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  223.796682][T12536] loop4: detected capacity change from 0 to 1024
[  223.805064][T12536] EXT4-fs: Ignoring removed orlov option
[  223.854062][T12491] hsr_slave_0: entered promiscuous mode
[  223.860519][T12491] hsr_slave_1: entered promiscuous mode
[  223.871107][T12491] debugfs: 'hsr0' already exists in 'hsr'
[  223.877082][T12491] Cannot create hsr debugfs directory
[  223.908620][T12552] loop0: detected capacity change from 0 to 128
[  223.929533][T12552] ext4 filesystem being mounted at /608/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  224.073882][T12570] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3053'.
[  224.124926][T12571] loop3: detected capacity change from 0 to 2048
[  224.125310][T12572] loop4: detected capacity change from 0 to 2048
[  224.292866][ T4240] $Hÿ (unregistering): (slave dummy0): Releasing backup interface
[  224.301900][ T4240] $Hÿ (unregistering): Released all slaves
[  224.312308][ T4240] bond0 (unregistering): Released all slaves
[  224.321220][ T4240] bond1 (unregistering): Released all slaves
[  224.332924][T12582] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3054'.
[  224.376961][ T4240] pim6reg (unregistering): left allmulticast mode
[  224.505783][T12589] sctp: [Deprecated]: syz.0.3056 (pid 12589) Use of int in max_burst socket option.
[  224.505783][T12589] Use struct sctp_assoc_value instead
[  224.637565][T12491] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  224.646559][T12491] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  224.658273][T12491] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  224.669354][T12491] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  224.717715][T12491] 8021q: adding VLAN 0 to HW filter on device bond0
[  224.732927][T12491] 8021q: adding VLAN 0 to HW filter on device team0
[  224.744856][ T4232] bridge0: port 1(bridge_slave_0) entered blocking state
[  224.752044][ T4232] bridge0: port 1(bridge_slave_0) entered forwarding state
[  224.763200][T12601] loop0: detected capacity change from 0 to 2048
[  224.770561][ T4211] bridge0: port 2(bridge_slave_1) entered blocking state
[  224.777806][ T4211] bridge0: port 2(bridge_slave_1) entered forwarding state
[  224.788199][T12603] netlink: 'syz.2.3060': attribute type 1 has an invalid length.
[  224.795988][T12491] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  224.806780][T12491] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  224.820787][T12601] EXT4-fs (loop0): failed to initialize system zone (-117)
[  224.829020][T12601] EXT4-fs (loop0): mount failed
[  224.900273][T12491] 8021q: adding VLAN 0 to HW filter on device batadv0
[  224.986016][T12491] veth0_vlan: entered promiscuous mode
[  225.002865][T12491] veth1_vlan: entered promiscuous mode
[  225.029718][T12491] veth0_macvtap: entered promiscuous mode
[  225.041658][T12491] veth1_macvtap: entered promiscuous mode
[  225.048166][T12631] loop4: detected capacity change from 0 to 512
[  225.070292][T12491] batman_adv: batadv0: Interface activated: batadv_slave_0
[  225.093820][T12491] batman_adv: batadv0: Interface activated: batadv_slave_1
[  225.196649][ T4211] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  225.230424][ T4211] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  225.240601][ T4211] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  226.259570][ T4211] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  227.403794][T12634] loop2: detected capacity change from 0 to 512
[  227.415323][T12640] loop1: detected capacity change from 0 to 512
[  227.532115][T12634] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  227.540305][T12634] EXT4-fs (loop2): orphan cleanup on readonly fs
[  227.549690][T12634] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm +}[@: corrupted inode contents
[  227.561521][T12634] EXT4-fs (loop2): Remounting filesystem read-only
[  227.568190][T12634] EXT4-fs (loop2): 1 truncate cleaned up
[  227.574706][ T4222] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  227.585472][ T4222] __quota_error: 18 callbacks suppressed
[  227.585490][ T4222] Quota error (device loop2): write_blk: dquota write failed
[  227.599426][ T4222] Quota error (device loop2): remove_free_dqentry: Can't write block (5) with free entries
[  227.609580][ T4222] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  227.620219][ T4222] Quota error (device loop2): write_blk: dquota write failed
[  227.620311][T12635] loop3: detected capacity change from 0 to 2048
[  227.627746][ T4222] Quota error (device loop2): free_dqentry: Can't move quota data block (5) to free list
[  227.635172][T12628] SELinux: failed to load policy
[  227.644946][ T4222] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started
[  227.659561][ T4222] Quota error (device loop2): v2_write_file_info: Can't write info structure
[  227.668941][ T4222] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  227.686369][T12640] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  227.812765][T12649] loop0: detected capacity change from 0 to 2048
[  228.216737][T12640] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.3028: corrupted inode contents
[  228.277060][T12649] Alternate GPT is invalid, using primary GPT.
[  228.283386][T12649]  loop0: p1 p2 p3
[  228.287120][T12649] loop0: partition table partially beyond EOD, truncated
[  228.495186][T12640] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #2: comm syz.1.3028: mark_inode_dirty error
[  228.508856][T12655] loop2: detected capacity change from 0 to 1024
[  228.529968][T12655] EXT4-fs: Ignoring removed orlov option
[  228.566220][T12640] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.3028: corrupted inode contents
[  228.618327][T12646] wg1 speed is unknown, defaulting to 1000
[  228.626252][T12655] EXT4-fs mount: 83 callbacks suppressed
[  228.626272][T12655] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  228.671844][T11121] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  228.681360][T12239] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  228.699987][T12491] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  228.937130][T12685] bpf: Bad value for 'gid'
[  228.967398][T12688] loop3: detected capacity change from 0 to 2048
[  228.978410][T12685] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3076'.
[  228.978622][T12659] wg1 speed is unknown, defaulting to 1000
[  229.004030][   T29] audit: type=1326 audit(1763466045.897:10748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12689 comm="syz.2.3077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a4bfcf6c9 code=0x7ffc0000
[  229.027739][   T29] audit: type=1326 audit(1763466045.897:10749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12689 comm="syz.2.3077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a4bfcf6c9 code=0x7ffc0000
[  229.051613][   T29] audit: type=1326 audit(1763466045.897:10750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12689 comm="syz.2.3077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a4bfcf6c9 code=0x7ffc0000
[  229.075339][   T29] audit: type=1326 audit(1763466045.897:10751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12689 comm="syz.2.3077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a4bfcf6c9 code=0x7ffc0000
[  229.100788][T12694] loop2: detected capacity change from 0 to 256
[  229.109104][T12694] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  229.121808][T12688] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  229.231360][T12699] loop2: detected capacity change from 0 to 128
[  229.251283][T12659] chnl_net:caif_netlink_parms(): no params data found
[  229.261170][T12699] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  229.277232][T12699] ext4 filesystem being mounted at /12/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  229.330471][T12239] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  229.376539][T12659] bridge0: port 1(bridge_slave_0) entered blocking state
[  229.383703][T12659] bridge0: port 1(bridge_slave_0) entered disabled state
[  229.400780][T12659] bridge_slave_0: entered allmulticast mode
[  229.410486][T12659] bridge_slave_0: entered promiscuous mode
[  229.419056][T12659] bridge0: port 2(bridge_slave_1) entered blocking state
[  229.426229][T12659] bridge0: port 2(bridge_slave_1) entered disabled state
[  229.433780][T12659] bridge_slave_1: entered allmulticast mode
[  229.440385][T12659] bridge_slave_1: entered promiscuous mode
[  229.453686][T12710] loop2: detected capacity change from 0 to 128
[  229.462338][T12659] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  229.463087][T12710] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  229.473696][T12659] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  229.492833][T12710] ext4 filesystem being mounted at /14/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  229.531601][ T4222] bond0: left allmulticast mode
[  229.536691][ T4222] bridge0: port 1(bond0) entered disabled state
[  229.556210][T12239] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  229.606056][ T4222] bond0 (unregistering): Released all slaves
[  229.614344][ T4222] bond1 (unregistering): Released all slaves
[  229.623209][T12659] team0: Port device team_slave_0 added
[  229.629721][T12659] team0: Port device team_slave_1 added
[  229.635518][T12718] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3084'.
[  229.662935][T12719] loop4: detected capacity change from 0 to 2048
[  229.670366][T12659] batman_adv: batadv0: Adding interface: batadv_slave_0
[  229.677427][T12659] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  229.703420][T12659] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  229.715705][T12659] batman_adv: batadv0: Adding interface: batadv_slave_1
[  229.722802][T12659] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  229.748752][T12659] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  229.763488][T12719] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  229.786155][ T4222] tipc: Left network mode
[  229.827967][T12659] hsr_slave_0: entered promiscuous mode
[  229.836848][T12659] hsr_slave_1: entered promiscuous mode
[  229.837898][T11121] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  229.842976][T12659] debugfs: 'hsr0' already exists in 'hsr'
[  229.857458][T12659] Cannot create hsr debugfs directory
[  229.925906][ T4222] hsr_slave_0: left promiscuous mode
[  229.934104][ T4222] pim6reg (unregistering): left allmulticast mode
[  230.070304][T12730] xt_CT: You must specify a L4 protocol and not use inversions on it
[  230.214091][T12741] loop3: detected capacity change from 0 to 1024
[  230.220897][T12741] EXT4-fs: Ignoring removed orlov option
[  230.236197][T12741] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  230.240045][T12737] SELinux: failed to load policy
[  230.266096][T11121] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  230.280617][ T4222] IPVS: stop unused estimator thread 0...
[  230.302220][T12745] loop3: detected capacity change from 0 to 128
[  230.319582][T12745] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  230.332358][T12745] ext4 filesystem being mounted at /75/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  230.367069][T12737] loop2: detected capacity change from 0 to 2048
[  230.381732][T11121] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  230.400583][T12737] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  230.473226][T12659] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  230.482579][T12659] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  230.491818][T12659] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  230.505569][T12659] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  230.514169][T12239] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  230.524816][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  230.581074][T12659] 8021q: adding VLAN 0 to HW filter on device bond0
[  230.594432][T12659] 8021q: adding VLAN 0 to HW filter on device team0
[  230.604898][ T4222] bridge0: port 1(bridge_slave_0) entered blocking state
[  230.612099][ T4222] bridge0: port 1(bridge_slave_0) entered forwarding state
[  230.647415][T12659] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  230.657873][T12659] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  230.677028][ T4222] bridge0: port 2(bridge_slave_1) entered blocking state
[  230.684320][ T4222] bridge0: port 2(bridge_slave_1) entered forwarding state
[  230.735653][T12659] 8021q: adding VLAN 0 to HW filter on device batadv0
[  230.830928][T12659] veth0_vlan: entered promiscuous mode
[  230.843369][T12659] veth1_vlan: entered promiscuous mode
[  230.859983][T12659] veth0_macvtap: entered promiscuous mode
[  230.868669][T12659] veth1_macvtap: entered promiscuous mode
[  230.880245][T12659] batman_adv: batadv0: Interface activated: batadv_slave_0
[  230.892874][T12659] batman_adv: batadv0: Interface activated: batadv_slave_1
[  230.904629][ T4222] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  230.913751][ T4222] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  230.925803][T12775] SELinux: failed to load policy
[  230.935327][ T4222] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  230.951826][ T4222] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  230.988333][T12785] loop0: detected capacity change from 0 to 1024
[  230.995198][T12785] EXT4-fs: Ignoring removed orlov option
[  231.016898][T12785] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  231.045409][T12659] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  231.057178][T12775] loop4: detected capacity change from 0 to 2048
[  231.073900][T12789] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3100'.
[  231.082926][T12789] 0ªX¹¦À: renamed from caif0
[  231.089201][T12789] 0ªX¹¦À: entered allmulticast mode
[  231.094486][T12789] A link change request failed with some changes committed already. Interface 
60ªX¹¦À may have been left with an inconsistent configuration, please check.
[  231.103230][T12775] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  231.132357][T12789] netlink: 'syz.0.3100': attribute type 4 has an invalid length.
[  231.140251][T12789] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3100'.
[  231.153382][T12789] .`: renamed from bond0 (while UP)
[  231.230331][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  231.361764][T12803] SELinux: failed to load policy
[  231.522794][T12810] loop3: detected capacity change from 0 to 256
[  231.532388][T12810] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  231.562567][T12797] loop0: detected capacity change from 0 to 2048
[  231.637568][T12797] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  231.855964][T12830] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3114'.
[  231.865226][T12830] 0ªX¹¦À: renamed from caif0
[  231.880133][T12830] 0ªX¹¦À: entered allmulticast mode
[  231.885572][T12830] A link change request failed with some changes committed already. Interface 
60ªX¹¦À may have been left with an inconsistent configuration, please check.
[  231.905489][T12659] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  231.920680][T12830] netlink: 'syz.3.3114': attribute type 4 has an invalid length.
[  231.928618][T12830] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3114'.
[  231.943939][T12830] .`: renamed from bond0 (while UP)
[  231.950927][T12830] bridge0: port 3(.`) entered disabled state
[  232.110463][T12838] loop3: detected capacity change from 0 to 1024
[  232.117252][T12838] EXT4-fs: Ignoring removed orlov option
[  232.128997][T12838] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  232.155061][T11121] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  232.215947][T12847] loop3: detected capacity change from 0 to 128
[  232.225180][T12847] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  232.237696][T12847] ext4 filesystem being mounted at /89/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  232.270361][T12849] loop0: detected capacity change from 0 to 2048
[  232.307709][T11121] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  232.324668][T12849] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  232.367880][T12862] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3125'.
[  232.377037][T12862] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3125'.
[  232.381937][T12864] netlink: 'syz.4.3126': attribute type 17 has an invalid length.
[  232.395543][T12864] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[  232.520265][T12873] pim6reg: entered allmulticast mode
[  232.551592][T12876] netlink: 'syz.3.3129': attribute type 9 has an invalid length.
[  232.559417][T12876] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3129'.
[  232.721560][T12885] loop3: detected capacity change from 0 to 128
[  232.757823][T12875] SELinux: failed to load policy
[  232.785524][T12880] loop1: detected capacity change from 0 to 2048
[  232.801373][T12885] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  232.824705][T12885] ext4 filesystem being mounted at /93/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  232.887078][T12880] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  232.910652][T11121] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  232.948079][   T29] kauditd_printk_skb: 223 callbacks suppressed
[  232.948099][   T29] audit: type=1400 audit(1763466049.583:10975): avc:  denied  { getopt } for  pid=12882 comm="syz.4.3132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  233.028614][   T29] audit: type=1400 audit(1763466049.667:10976): avc:  denied  { create } for  pid=12882 comm="syz.4.3132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  233.075810][T12659] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  233.154164][   T29] audit: type=1400 audit(1763466049.779:10977): avc:  denied  { read } for  pid=12901 comm="syz.0.3138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  233.201360][T12491] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  233.221517][T12902] loop0: detected capacity change from 0 to 512
[  233.279641][T12902] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  233.295572][   T29] audit: type=1400 audit(1763466049.910:10978): avc:  denied  { connect } for  pid=12907 comm="+}[@" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  233.321576][T12902] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  233.353587][T12911] loop1: detected capacity change from 0 to 2048
[  233.366501][T12902] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280
[  233.390298][T12911] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  233.479118][T12659] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  233.610725][T12919] loop2: detected capacity change from 0 to 2048
[  233.623974][T12917] SELinux: failed to load policy
[  233.641436][T12921] wg1 speed is unknown, defaulting to 1000
[  233.657355][T12919] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  233.684021][T12927] loop4: detected capacity change from 0 to 128
[  233.708018][T12239] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  233.720606][T12927] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  233.738893][T12927] ext4 filesystem being mounted at /583/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  233.790546][ T3317] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  233.810031][   T29] audit: type=1400 audit(1763466050.396:10979): avc:  denied  { write } for  pid=1036 comm="kworker/0:2" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=39072 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  233.849906][T12930] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3145'.
[  233.859201][   T29] audit: type=1326 audit(1763466050.424:10980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12929 comm="syz.2.3145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a4bfcf6c9 code=0x7ffc0000
[  233.882843][   T29] audit: type=1326 audit(1763466050.434:10981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12929 comm="syz.2.3145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7f5a4bfcf6c9 code=0x7ffc0000
[  233.906545][   T29] audit: type=1326 audit(1763466050.434:10982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12929 comm="syz.2.3145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a4bfcf6c9 code=0x7ffc0000
[  233.930306][   T29] audit: type=1326 audit(1763466050.434:10983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12929 comm="syz.2.3145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5a4bfcf6c9 code=0x7ffc0000
[  233.953918][   T29] audit: type=1326 audit(1763466050.434:10984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12929 comm="syz.2.3145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a4bfcf6c9 code=0x7ffc0000
[  234.046538][T12935] wg1 speed is unknown, defaulting to 1000
[  234.160462][T12491] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  234.254066][T12955] loop2: detected capacity change from 0 to 1024
[  234.276073][T12955] EXT4-fs: Ignoring removed orlov option
[  234.298357][T12958] loop3: detected capacity change from 0 to 128
[  234.315021][T12958] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  234.327705][T12955] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  234.368426][T12959] SELinux: failed to load policy
[  234.381866][T12958] ext4 filesystem being mounted at /98/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  234.432089][T12239] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  234.481441][T11121] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  234.523632][T12968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3160'.
[  234.643131][T12988] loop3: detected capacity change from 0 to 128
[  234.653232][T12988] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[  234.685312][T12989] loop0: detected capacity change from 0 to 1024
[  234.690732][T12988] binfmt_misc: register: failed to install interpreter file ./file2
[  234.692009][T12989] EXT4-fs: Ignoring removed orlov option
[  234.722681][T12994] loop2: detected capacity change from 0 to 128
[  234.729597][T12989] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  234.743439][T12954] loop1: detected capacity change from 0 to 2048
[  234.765560][T12994] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  234.784449][T12989] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  234.807159][T12994] ext4 filesystem being mounted at /35/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  234.870253][T12989] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  234.895130][T12954] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  234.897238][T12239] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  234.926295][T13010] loop3: detected capacity change from 0 to 1024
[  234.944701][T12659] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  234.963379][T13013] ------------[ cut here ]------------
[  234.968950][T13013] verifier bug: REG INVARIANTS VIOLATION (false_reg1): range bounds violation u64=[0x4000000, 0x0] s64=[0x4000000, 0x0] u32=[0x4000000, 0x0] s32=[0x4000000, 0x0] var_off=(0x0, 0x0)
[  234.987755][T13013] WARNING: CPU: 0 PID: 13013 at kernel/bpf/verifier.c:2721 reg_bounds_sanity_check+0x673/0x680
[  234.998439][T13013] Modules linked in:
[  235.003145][T13013] CPU: 0 UID: 0 PID: 13013 Comm: syz.4.3177 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  235.013344][T13013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  235.023510][T13013] RIP: 0010:reg_bounds_sanity_check+0x673/0x680
[  235.030025][T13013] Code: 7c 24 18 41 ff 74 24 20 55 41 56 4d 89 ee 53 48 8b 5c 24 30 ff 74 24 40 ff 74 24 50 ff 74 24 30 e8 12 f7 ba ff 48 83 c4 38 90 <0f> 0b 90 90 e9 02 fb ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90
[  235.050470][T13013] RSP: 0018:ffffc9000676f408 EFLAGS: 00010282
[  235.057529][T13013] RAX: 5e66a88166269800 RBX: ffff888118c84ae0 RCX: 0000000000080000
[  235.065749][T13013] RDX: ffffc90006299000 RSI: 0000000000004833 RDI: 0000000000004834
[  235.073855][T13013] RBP: 0000000000000000 R08: 0001c9000676f257 R09: 0000000000000000
[  235.082106][T13013] R10: 0001c9000f22fcd1 R11: 0000000000000002 R12: ffff888118c84aa0
[  235.090279][T13013] R13: ffff88811cca8000 R14: ffff88811cca8000 R15: ffff888118c84ad8
[  235.098670][T13013] FS:  00007fb37fd176c0(0000) GS:ffff8882aee11000(0000) knlGS:0000000000000000
[  235.108008][T13013] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  235.114850][T13013] CR2: 0000000100000000 CR3: 000000012798a000 CR4: 00000000003506f0
[  235.122976][T13013] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  235.131318][T13013] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  235.139517][T13013] Call Trace:
[  235.142934][T13013]  <TASK>
[  235.146006][T13013]  reg_set_min_max+0x215/0x260
[  235.151083][T13013]  check_cond_jmp_op+0x130d/0x19e0
[  235.156428][T13013]  do_check+0x3363/0x8460
[  235.160870][T13013]  do_check_common+0xc5e/0x12b0
[  235.165908][T13013]  bpf_check+0xaaae/0xd9d0
[  235.170623][T13013]  ? __pmu_ctx_sched_in+0x8a/0xb0
[  235.173793][T13022] loop2: detected capacity change from 0 to 4096
[  235.175771][T13013]  ? ctx_sched_in+0x34d/0x370
[  235.186886][T13013]  ? __rcu_read_unlock+0x4f/0x70
[  235.192184][T13013]  ? sysvec_apic_timer_interrupt+0x44/0x80
[  235.198210][T13013]  ? pcpu_block_update+0x24e/0x3b0
[  235.203636][T13013]  ? pcpu_block_refresh_hint+0x157/0x170
[  235.209430][T13013]  ? pcpu_block_update_hint_alloc+0x63d/0x660
[  235.215965][T13013]  ? css_rstat_updated+0xb7/0x240
[  235.217678][T13022] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  235.221404][T13013]  ? __rcu_read_unlock+0x4f/0x70
[  235.237572][T13022] __nla_validate_parse: 4 callbacks suppressed
[  235.237588][T13022] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3180'.
[  235.238714][T13013]  ? pcpu_memcg_post_alloc_hook+0xf1/0x150
[  235.259968][T13013]  ? bpf_prog_alloc+0x5b/0x150
[  235.264937][T13013]  ? pcpu_alloc_noprof+0xd29/0x1250
[  235.270385][T13013]  ? should_fail_ex+0x30/0x280
[  235.275501][T13013]  ? should_failslab+0x8c/0xb0
[  235.280400][T13013]  ? __kmalloc_noprof+0x2a2/0x570
[  235.285664][T13013]  ? security_bpf_prog_load+0x60/0x140
[  235.291306][T13013]  ? selinux_bpf_prog_load+0xad/0xd0
[  235.296855][T13013]  ? security_bpf_prog_load+0x9e/0x140
[  235.302650][T13013]  bpf_prog_load+0xf6e/0x1100
[  235.307426][T13013]  ? security_bpf+0x2b/0x90
[  235.312188][T13013]  __sys_bpf+0x469/0x7c0
[  235.316634][T13013]  __x64_sys_bpf+0x41/0x50
[  235.321149][T13013]  x64_sys_call+0x2aee/0x3000
[  235.326014][T13013]  do_syscall_64+0xd2/0x200
[  235.330613][T13013]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  235.336735][T13013]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  235.342810][T13013] RIP: 0033:0x7fb3812af6c9
[  235.347370][T13013] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  235.367184][T13013] RSP: 002b:00007fb37fd17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  235.375885][T13013] RAX: ffffffffffffffda RBX: 00007fb381505fa0 RCX: 00007fb3812af6c9
[  235.384101][T13013] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005
[  235.392289][T13013] RBP: 00007fb381331f91 R08: 0000000000000000 R09: 0000000000000000
[  235.400471][T13013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  235.408524][T13013] R13: 00007fb381506038 R14: 00007fb381505fa0 R15: 00007ffee371dd08
[  235.416775][T13013]  </TASK>
[  235.419902][T13013] ---[ end trace 0000000000000000 ]---
[  235.572125][T12491] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  235.636857][T13035] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13035 comm=syz.2.3180
[  235.673687][T13034] loop3: detected capacity change from 0 to 1024
[  235.700219][T13034] EXT4-fs: Ignoring removed orlov option
[  235.821246][T13034] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  236.021601][T11121] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  236.033913][T13041] loop0: detected capacity change from 0 to 128
[  236.052025][T13041] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  236.071933][T13041] ext4 filesystem being mounted at /18/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  236.120868][T12239] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  236.160309][T12659] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  236.233861][T13025] wg1 speed is unknown, defaulting to 1000
[  236.458434][T13064] loop2: detected capacity change from 0 to 512
[  236.465286][T13064] EXT4-fs: dax option not supported
[  236.475025][T13062] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3194'.
[  236.565680][T13057] wg1 speed is unknown, defaulting to 1000
[  236.654223][T13073] loop3: detected capacity change from 0 to 2048
[  236.688213][T13073] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  236.715051][T13080] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3198'.
[  236.724238][T13080] 1ªX¹¦À: renamed from 
60ªX¹¦À
[  236.731281][T13080] A link change request failed with some changes committed already. Interface 
61ªX¹¦À may have been left with an inconsistent configuration, please check.
[  236.751669][T13080] netlink: 'syz.0.3198': attribute type 4 has an invalid length.
[  236.759615][T13080] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3198'.
[  236.768750][T13083] loop4: detected capacity change from 0 to 2048
[  236.829510][T13085] SELinux: failed to load policy
[  236.880493][T13083] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  236.986395][T13082] loop1: detected capacity change from 0 to 2048
[  237.032067][T13082] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  237.186978][T12491] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  237.194229][T13104] netlink: 'syz.0.3206': attribute type 10 has an invalid length.
[  237.204671][T13104] batadv0: entered allmulticast mode
[  237.216492][T13104] 8021q: adding VLAN 0 to HW filter on device batadv0
[  237.225430][T13104] .`: (slave batadv0): Enslaving as an active interface with an up link
[  237.247267][T13104] netlink: 'syz.0.3206': attribute type 10 has an invalid length.
[  237.255282][T13104] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3206'.
[  237.264898][T13104] batadv0: entered promiscuous mode
[  237.272530][T13104] .`: (slave batadv0): Releasing backup interface
[  237.282554][T13104] bridge0: port 3(batadv0) entered blocking state
[  237.289174][T13104] bridge0: port 3(batadv0) entered disabled state
[  237.368938][T13122] loop0: detected capacity change from 0 to 2048
[  237.388456][T13122] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  237.407655][T13126] loop1: detected capacity change from 0 to 2048
[  237.421717][T13126] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  237.486453][T13131] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3212'.
[  237.504404][ T4255] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  237.513734][ T4255] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  237.519545][T13131] 1ªX¹¦À: renamed from 
60ªX¹¦À
[  237.552636][T13131] A link change request failed with some changes committed already. Interface 
61ªX¹¦À may have been left with an inconsistent configuration, please check.
[  237.577869][T13131] netlink: 'syz.3.3212': attribute type 4 has an invalid length.
[  237.584469][T13133] pim6reg: entered allmulticast mode
[  237.585721][T13131] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3212'.
[  237.843604][T13149] loop4: detected capacity change from 0 to 8192
[  238.013780][T13150] loop0: detected capacity change from 0 to 2048
[  238.028700][T13146] SELinux: failed to load policy
[  238.160932][T13154] ==================================================================
[  238.169048][T13154] BUG: KCSAN: data-race in fat16_ent_put / fat_mirror_bhs
[  238.176180][T13154] 
[  238.178514][T13154] write to 0xffff88814d9117c0 of 2 bytes by task 13149 on cpu 0:
[  238.186231][T13154]  fat16_ent_put+0x28/0x60
[  238.190654][T13154]  fat_ent_write+0x6c/0xe0
[  238.195099][T13154]  fat_chain_add+0x15d/0x440
[  238.199704][T13154]  fat_get_block+0x46c/0x5e0
[  238.204304][T13154]  __block_write_begin_int+0x400/0xf90
[  238.209787][T13154]  cont_write_begin+0x5fc/0x970
[  238.214648][T13154]  fat_write_begin+0x4f/0xe0
[  238.219248][T13154]  generic_perform_write+0x184/0x490
[  238.224534][T13154]  __generic_file_write_iter+0x9e/0x120
[  238.230081][T13154]  generic_file_write_iter+0x8d/0x2f0
[  238.235481][T13154]  vfs_write+0x52a/0x960
[  238.239736][T13154]  ksys_write+0xda/0x1a0
[  238.243985][T13154]  __x64_sys_write+0x40/0x50
[  238.248579][T13154]  x64_sys_call+0x2802/0x3000
[  238.253268][T13154]  do_syscall_64+0xd2/0x200
[  238.257773][T13154]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  238.263666][T13154] 
[  238.265988][T13154] read to 0xffff88814d911600 of 512 bytes by task 13154 on cpu 1:
[  238.273790][T13154]  fat_mirror_bhs+0x1df/0x320
[  238.278488][T13154]  fat_ent_write+0xd0/0xe0
[  238.282937][T13154]  fat_chain_add+0x15d/0x440
[  238.287536][T13154]  fat_get_block+0x46c/0x5e0
[  238.292226][T13154]  __block_write_begin_int+0x400/0xf90
[  238.298054][T13154]  cont_write_begin+0x5fc/0x970
[  238.302932][T13154]  fat_write_begin+0x4f/0xe0
[  238.307559][T13154]  generic_perform_write+0x184/0x490
[  238.312865][T13154]  __generic_file_write_iter+0x9e/0x120
[  238.318546][T13154]  generic_file_write_iter+0x8d/0x2f0
[  238.324012][T13154]  vfs_write+0x52a/0x960
[  238.328261][T13154]  __x64_sys_pwrite64+0xfd/0x150
[  238.333208][T13154]  x64_sys_call+0xc4d/0x3000
[  238.337831][T13154]  do_syscall_64+0xd2/0x200
[  238.342359][T13154]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  238.348269][T13154] 
[  238.350604][T13154] Reported by Kernel Concurrency Sanitizer on:
[  238.356765][T13154] CPU: 1 UID: 0 PID: 13154 Comm: syz.4.3219 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  238.368152][T13154] Tainted: [W]=WARN
[  238.371952][T13154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  238.382007][T13154] ==================================================================