last executing test programs:

1m45.577742804s ago: executing program 0 (id=152):
socket(0x2a, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x2}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x4b}]}}]}, 0x44}}, 0x4000000)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, 0x0, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b000000"], 0x50)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
getpgid(0xffffffffffffffff)

1m45.529774285s ago: executing program 0 (id=153):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
ioperm(0x8, 0x401, 0x1000)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, 0x0, 0x0, 0xffffffffffffffff)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x20001400)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='io_uring_register\x00', r3}, 0x10)
io_uring_setup(0x78f6, &(0x7f0000005000)={0x0, 0x1000329c, 0x100, 0x0, 0x3e4, 0x0, r1})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = io_uring_setup(0x410f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2f5})
io_uring_register$IORING_REGISTER_BUFFERS2(r5, 0xf, &(0x7f0000001580)={0x2, 0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/47, 0x2f}, {0x0, 0x6}], &(0x7f0000001540)=[0x4]}, 0x20)

1m45.403096175s ago: executing program 0 (id=154):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a000000030000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000e3ff00000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10)
socket$inet6(0xa, 0x803, 0x6)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x4206, r2)
r3 = syz_clone(0x12a84600, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
r4 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
r5 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e$U\xb4X\xc7\xfa\f\b\x8f\xc4\xbeIt\xe4\xc51\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5', 0x0)
pwritev(r5, &(0x7f0000000600)=[{&(0x7f0000000180)="10", 0x1}], 0x1, 0x800000, 0x0)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r4, r4, 0x0, 0x24002de8)
ioctl$LOOP_CLR_FD(r4, 0x4c01)

1m44.958997417s ago: executing program 0 (id=159):
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x301c042, &(0x7f00000001c0), 0x9, 0x5d8, &(0x7f0000000600)="$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")
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = dup(r0)
ioctl$PTP_EXTTS_REQUEST2(r1, 0x43403d05, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00'}, 0x10)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r2}, 0x18)
setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='freezer.state\x00', 0x275a, 0x0)

1m44.866892688s ago: executing program 0 (id=162):
r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x5, 0x6, 0x5, 0x0, 0x8000000000000000, 0x20018, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x1, 0x7}, 0x1000cf, 0x8, 0x3, 0x4, 0x744c, 0x7, 0xea4, 0x0, 0xfffffffa, 0x0, 0x5}, 0x0, 0x4, 0xffffffffffffffff, 0xa)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000080)='{-^/\x00')
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x73b, 0x200}, 0x280, 0x0, 0xfffffffe, 0x5, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
futex(0x0, 0x3, 0x801, 0x0, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
write$cgroup_pid(0xffffffffffffffff, &(0x7f00000031c0), 0x12)
socket(0x11, 0x800000003, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@getchain={0x2c, 0x11, 0x839, 0x0, 0x25dfdbfb, {}, [{0x8, 0xb, 0x4}]}, 0x2c}}, 0x4000)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6(0xa, 0xa, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x418, 0x0, 0x940c, 0x3002, 0x210, 0x2c0, 0x348, 0x3d8, 0x3d8, 0x348, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1c8, 0x210, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x2, 0x1, 0x0, 'syz0\x00'}}, @common=@eui64={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@ipv6={@loopback, @empty, [0xffffff00, 0xffff00, 0xff, 0xffffff00], [0xff, 0xff000000, 0x0, 0xff000000], 'syzkaller1\x00', 'macvtap0\x00', {}, {}, 0x1, 0x9, 0x1, 0x8}, 0x0, 0xd0, 0x138, 0x0, {0x700}, [@common=@inet=@socket2={{0x28}, 0x2}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x478)

1m44.459003099s ago: executing program 0 (id=166):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0xe, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0xee01)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x0, 0x0}, 0x10)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
clock_gettime(0x0, &(0x7f0000000040))
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x804810, &(0x7f0000000d40), 0x9, 0x61c, &(0x7f0000000700)="$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")

1m44.458289389s ago: executing program 32 (id=166):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0xe, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0xee01)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x0, 0x0}, 0x10)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
clock_gettime(0x0, &(0x7f0000000040))
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x804810, &(0x7f0000000d40), 0x9, 0x61c, &(0x7f0000000700)="$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")

5.012598328s ago: executing program 4 (id=1039):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
close(r0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000008c0)='sys_enter\x00', r2}, 0x10)
tkill(0x0, 0x15)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
epoll_create(0xe)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$autofs(0xffffffffffffff9c, 0x0, 0x200, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x19, 0x4, 0x4, 0xfffe, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x4, 0x0, @void, @value, @void, @value}, 0x50)
mount$tmpfs(0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB])
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c)
listen(r3, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
accept(r3, 0x0, 0x0)

4.938487838s ago: executing program 5 (id=1041):
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x9)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f00000004c0)={0x1f, 0xffff, 0x3}, 0x6)
write(r2, &(0x7f0000000040), 0x0)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$FOU_CMD_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14, r5, 0x19}, 0x14}}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r7, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x30}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x200000c0)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={0xffffffffffffffff, 0x0, &(0x7f0000001700)=""/53}, 0x20)

4.67029954s ago: executing program 3 (id=1043):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000005000000010000000000000400000000005f612a00"], 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff024}, {0x6}]}, 0x10)
r2 = dup(r0)
sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f0000003700)={0x0, 0x0, &(0x7f00000036c0)={0x0}}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000083850000002d0000001801000020696c2500000000002020207b1af8ff00000000bfa1000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_io_uring_setup(0x4172, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x17, 0x3, 0xc8})
r5 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000001e00)={'bond0\x00', <r6=>0x0})
setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000680)={r6, 0x3, 0x6}, 0x10)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r6, @ANYBLOB="c9b9ec43d8"], 0x20}}, 0x20004010)

4.66957413s ago: executing program 5 (id=1053):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="190000000400000004000000", @ANYRES32], 0x50)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000100000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x80040, 0x0)
r7 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r6, 0xc0189371, &(0x7f0000000440)={{0x1, 0x1, 0x18, r7}, './file0\x00'})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r5}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r4}, &(0x7f0000000040), &(0x7f0000000280)=r5}, 0x20)
ioprio_set$pid(0x1, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r3)
getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0)
socket$netlink(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x1, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x6}}]}, 0x38}}, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01000000000000000000090000003c000380140002007663616e30000000000100000000000008000300000000000800010001"], 0x50}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0x8}}}, 0x24}}, 0x4000084)

4.64184812s ago: executing program 2 (id=1044):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x6c, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x6, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x0, @private0, 0xe}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x6c}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r0, 0x0, 0x100)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0)
sendto$packet(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r4=>0xffffffffffffffff})
splice(r4, 0x0, r3, 0x0, 0x1, 0x4)
vmsplice(r3, &(0x7f00000013c0)=[{0x0}, {&(0x7f0000000100)="a7", 0x1}, {&(0x7f0000000880)="9f3846581b1b5159fa75b369536aed7fc089b18592fd1bd099864f1ed35c7046e78c84f4cf0e59594f6dac655efbe84343ff8c186af752f7691c612987b6c089fc2ac412de8edab1f67d0300a1acf9ef331f2b436ff4322adcde8648bcd1e193eb1cb83b0ff2de12", 0x68}, {&(0x7f0000000300)='b', 0x1}], 0x4, 0x0)
ioctl$sock_SIOCINQ(r3, 0x541b, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r7 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x3c8, 0x1f8, 0x110, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2}}, {@mac=@random="3c192477987a"}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @dev={0xac, 0x14, 0x14, 0x22}, @broadcast, 0x4}}}, {{@arp={@loopback, @private=0xa010102, 0xff, 0xffffff00, 0xd, 0x10, {@mac=@multicast, {[0xff, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0x0, 0xff]}}, 0x8, 0x0, 0x0, 0x8, 0x1, 0x5a, 'macvlan0\x00', 'ipvlan0\x00', {0xff}, {}, 0x0, 0x100}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x0, 0x0, 0x0, {@mac=@link_local, {[0xff]}}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x3}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418)
write$binfmt_script(r5, 0x0, 0x0)
ioctl$FS_IOC_RESVSP(r5, 0x40305829, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x80000003})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

4.57766968s ago: executing program 3 (id=1045):
io_submit(0x0, 0x0, &(0x7f0000000d40))
ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, 0x0)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000400500040000000000050005000a00000014000780"], 0x60}}, 0x0)
syz_mount_image$ext4(&(0x7f0000001140)='ext3\x00', &(0x7f00000007c0)='./file1\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x786, &(0x7f0000001900)="$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")
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$RTC_VL_READ(r2, 0x80047013, &(0x7f0000000300))
r3 = syz_open_dev$usbfs(&(0x7f0000000340), 0x800000001fe, 0x802)
r4 = dup(r3)
ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x17, 0x2, 0x0, 0x0, 0x0})
socket$inet6(0xa, 0x2, 0x3a)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001500)=ANY=[@ANYBLOB="1b001f00000700000000000000000013af55c5886c0ac620eaf09d27dce0f4019a85f97dcdaffa", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x90)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000080000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000021440011800a0001006d617463680000003400028008000240000000001c0003000afe6cbf96caa5debdad61b67ddb2fb68fcf19f7807076430a00010071756f7461"], 0xc8}}, 0x0)
read$msr(0xffffffffffffffff, &(0x7f00000004c0)=""/4096, 0x1000)
prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='\\\x00')
r6 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc))
socketpair(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8932, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x3, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x4, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

4.54994574s ago: executing program 5 (id=1046):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x71, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1803000000000000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
pwrite64(r1, &(0x7f0000000080), 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f00000004c0), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
r3 = socket(0x1, 0x3, 0x0)
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000080)={0xa000200f})
write$binfmt_script(r1, &(0x7f0000000580)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', [{0x20, '\\}'}, {0x20, '\xe1b\x1d\x1c<\rA\xa9M\xc6\xfc\nt(\xc7\x17\x95@\'/\xa5`:\xf4\xc3\xad\xc5\xe9\x94K\xe1\f\t\xbf\xc1\xdd\xcb\x14\xb9\x93\xa4\x90\x05\xabi\xe9\xd2\xe8q\xc3\x8f$fz\xb7\xad>\x1boO\xc73\xe8\x10z\xd1\f\xa3\xc4,\xce\x92#_\x8b%\xb9W\xa8QF\x1ao[x\xd75.\xfa\x0e\xc94\xbc\xd1K[}\x9aW\x18\xbew;\xe2C\x92D\x1d\xca\xa6\xc5F1Q\x0faU\xc1A\xd6/uk{ZL'}, {0x20, '(]!*['}, {0x20, '.:\xde/W\xab\x0fL\xe7c\xf0x\x1c\xe3<@A\xa2M}\xd2\xd4\xde\xac\xe0b\a\v\xe4\xb1_\xc1?\x88\xe9\xa3!\xdd\x80\n\x8c\x0e|bbq\xed\xcd\xe4\x06\xd6\xd0\xec\"\xda\x81U?\x10I\xf2\x83\xab\x9f#\xe2e\xe5\xf17\xf1C\\\xb7va\xdbN`\xdd\x9f7\x9fB 8\xd1\xe4C\x02\x1fiu.\x05\x15\x16y\xea\xfbE7\x80\x9c\x9a\xe6y\x915\xc5N\xa3\xe9\x03\x1b\xa3v\x80\xb2\xbb{\xbb\x7f|)JJ\xe5Q\x9e\xa9\xbd\xab\xe8kI\xf2G\xef\xed\xa9\x17@\xd1\r\x8e\xd7\xfbJyM\x91f\x87*1P\x9c\x1b\xe0\x00\x86s\xcfOA\xb7B\xde\r\xad\xfa\xeb^^\xdb\xad\xdby\xdb?eX\xd2l\xa5\xf9\x0e\xc3K\x18\xc8\x0e\xe3J6\xe9\x9a\x96R\a\x01\xf1\x1e\x8b\xea\xcf\xb2tAO\xca6\xd1mO\xefg\xd6P\xe3\xfb\x18>\xcb\xf56V\xab6ga\xa4\xce\xdc\x9f 7\x17\x81\xaf\xc6#H\x83:i\xe8\xd7`\xc7[\xc3'}, {0x20, '*+*%:'}], 0xa, "38836d5f00784c178979224e031f9789f2eeadbc35"}, 0x3ad)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x6a, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5}, 0x10)
unshare(0x24020400)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_ACTIVATE(r6, 0x4b4b, 0x10000000000004)
syz_io_uring_setup(0x10d, 0x0, &(0x7f0000000240)=<r7=>0x0, 0x0)
syz_io_uring_submit(r7, 0x0, &(0x7f00000002c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}})
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYRES64], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r8}, 0x10)
r9 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$selinux_load(r9, &(0x7f0000000100)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e7578"], 0x118)

4.362894021s ago: executing program 2 (id=1047):
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
socket(0x1000000010, 0x80002, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x7, 0x6, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r1, &(0x7f0000000540)={0x1f, @none}, 0x8)
listen(r1, 0x0)
accept(r1, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={0x0, r2}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x18}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r3 = socket$packet(0x11, 0x3, 0x300)
socket$igmp6(0xa, 0x3, 0x2)
setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000080)=0x1, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r4=>0xffffffffffffffff})
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
bind$packet(r3, &(0x7f0000000440)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14)
sendto$inet6(r3, &(0x7f0000000280)="4103092cc1f7480401020200c52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f)

4.362370031s ago: executing program 3 (id=1048):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x100100, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_free\x00', r0, 0x0, 0xfff7ffffffffff76}, 0x18)
openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0xa3331ddc6211143)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000007c0)='map_files\x00')
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0, r1, 0x0, 0x8}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x0, 0x0, 0x0, 0xa9cf, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, 0x0, &(0x7f0000000300)}, 0x20)
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
ftruncate(r2, 0xc17a)
syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff)
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x200c840, &(0x7f0000000300)={[{@sb={'sb', 0x3d, 0x1}}, {@usrquota}]}, 0x64, 0x537, &(0x7f0000000f80)="$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")

4.331416721s ago: executing program 5 (id=1049):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000004e91f66d73743c91730100000000", @ANYRES16, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f00000003c0), &(0x7f0000000580)}, 0x20)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000300)='cachefiles_prep_read\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18)
r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
fcntl$setsig(r1, 0xa, 0x13)
fcntl$setlease(r1, 0x400, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280))
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
truncate(&(0x7f0000000040)='./file0\x00', 0x0)
fcntl$setlease(r1, 0x400, 0x2)
r2 = timerfd_create(0x1, 0x0)
timerfd_settime(r2, 0x3, &(0x7f0000000000)={{0x77359400}, {0x0, 0x3938700}}, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
syz_usb_disconnect(0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000022a25eda0000000000feff800c0000000000000054000000a000020095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
epoll_create1(0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
socket$isdn_base(0x22, 0x3, 0x0)
io_uring_register$IORING_REGISTER_ENABLE_RINGS(0xffffffffffffffff, 0xc, 0x0, 0x0)

4.157416692s ago: executing program 3 (id=1050):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1d64, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x11, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r7}, 0x10)
sendmsg$nl_route_sched(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=@newtaction={0x488, 0x30, 0x2d, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x5105, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x8, 0x0, 0x0, 0x0, 0x0, 0x6}}}]]}, {0x4}, {0xc, 0xa}, {0xc}}}]}]}, 0x488}}, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10)
setpgid(0x0, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x10)
mount$9p_tcp(0x0, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000004c0), 0x8, &(0x7f0000000080)={'trans=tcp,', {'port', 0x3d, 0x4e21}})
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, r4}, 0x38)
syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x201c448, &(0x7f0000000080)=ANY=[@ANYBLOB='map=acorn,utf8,session=0x0000000000000004,session=0x0000000000000056,map=normal,session=0x000000000000003d,unhide,norock,block=0x0000000000000400,map=off,session=0x0000000000000001,uid=', @ANYRESDEC=0x0, @ANYRES16=0x0, @ANYRESDEC=0x0, @ANYRESOCT=0x0], 0x1, 0xa82, &(0x7f0000000180)="$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")

4.101153372s ago: executing program 1 (id=1052):
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x58a, &(0x7f0000000b40)="$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")
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
modify_ldt$write2(0x11, &(0x7f0000000980)={0x8, 0x1000, 0x5000, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1}, 0x10)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0)
sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=ANY=[@ANYBLOB="14010000", @ANYRES16=r1, @ANYBLOB="cd3e0000000000000000010000000800020005000000ce0001"], 0x114}}, 0x0)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000327bd7000fcdbdf250a0000000c0006000300000003000000060009000300000006000900fcff00000c00060003000000000000000600090001000000"], 0x44}, 0x1, 0x0, 0x0, 0x41}, 0x8000)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x5, 0x2, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
mq_getsetattr(0xffffffffffffffff, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xffffffffffffff2b)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000002c0)='page_pool_state_hold\x00', r4}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r5, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

3.823426993s ago: executing program 4 (id=1054):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x50801, 0x125)
ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x541c, &(0x7f00000006c0))
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x4, &(0x7f0000000240)=ANY=[@ANYRESOCT=r0], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0})
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000440)='kmem_cache_free\x00', r2}, 0x10)
io_destroy(0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="020000000400000008000000010000008000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000232927df342dc7da2e89c388f671a19f02a5eb05ade0701563fb2cd39bc9343581cf18b3976e43818d54dd8ae6bda2e38b6e949008c3db6d392ddeabd4be709d44ff6f6f0af9a3eec218c29e09ec"], 0x48)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1d, &(0x7f0000000000)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1b}}, {}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x5}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x8, 0xa, 0x4}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x0}, {}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x0, 0x0, 0x76}}, @jmp={0x5, 0x1, 0x6, 0x0, 0x0, 0xffffffffffffffff}], {{}, {0x6, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
socket$packet(0x11, 0x3, 0x300)
ioctl$INCFS_IOC_CREATE_FILE(r2, 0xc058671e, &(0x7f00000003c0)={{}, {0xc}, 0x180, 0x0, 0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)="856fc72b19e52334012da0ac5ea4bc27d162020d29242fabfdebfb3fc0f5fde322f43de707609ddc77f358cc8fcacd1cc9287a7fc639177d838b0491ab46b6a149ea04ec17cc8dd47aca1d860fb0", 0x4e, 0x0, &(0x7f0000000280)={0x2, 0x58, {0x1, 0xc, 0x1d, "501b96975755d6e004eeab5a33c941b17040fdcac9181747769169ac06", 0x2e, "52134791526a898c4825c7b6d698d4070caef9f7dbb9f013dadff722b08eafcacb123bd5ca5124becaac74c63b23"}, 0xb7, "4bf2a50c2afff3077f394778b90277684275439133a8772bad2e6b166eafb02b84d97978d222f28c7397a86f4ca0ca06e1d5e91255985b0bec076a7a0195ac72ec1d56e9f3f4d40b7e0ea3b7549c6bd82576db81be5e4f0df2f6cd2ccfb0682980c465cb2468a8396adc55bb3ae7dc06cf462b340566474ef2a2d3566f3eb6fa0f91025cb0a9bb2fe1cd8bfd789797d330a7eaba6dc5c1c98da709107357eb5582a33882a7984f8d4221f0ba42d1b3e59928d5f03255b2"}, 0x11b})
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000640), 0x81000, 0x0)
ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0)
sendto$inet6(r0, &(0x7f00000004c0)="047cb93513aa", 0x6, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e00000085"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_io_uring_setup(0x145c, &(0x7f0000000080)={0x0, 0x635d, 0x10100, 0x2000}, &(0x7f0000000240), &(0x7f0000000280))
prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000540)={0x1, &(0x7f0000000500)=[{0xff, 0x7, 0x5, 0x9}]})
shutdown(r0, 0x1)

3.732131324s ago: executing program 1 (id=1055):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]})
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/vmstat\x00', 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
openat$cgroup_devices(r1, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0)
getdents64(r0, &(0x7f0000000240)=""/242, 0xf2)
rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={0x0, r0, 0x0, 0x1}, 0x18)
r2 = socket$inet6(0xa, 0x3, 0x5)
r3 = socket$l2tp6(0xa, 0x2, 0x73)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x9, 0x7ffc1ffb}]})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000007f1600850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10)
dup3(r3, r2, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001340)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2006, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xc74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x1000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x10000, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x80}, 0x2}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x488}}, 0x20040084)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8044, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./file0\x00', 0x21160ca, &(0x7f0000000a80)=ANY=[], 0x1, 0x11e2, &(0x7f0000002480)="$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")
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c680000", @ANYRES16=0x0, @ANYBLOB="10002dbd7000ffdbdf250f00000008003200a15f0000"], 0x1c}, 0x1, 0x0, 0x0, 0x24000804}, 0x4000000)
socket$inet(0x2, 0x6, 0x6)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000200)="a9050000000074640000000000003552bde5c064c6", 0x15}, {&(0x7f0000000340)="174640b6d80fb2eedc81ba60ccbb9d", 0xf}], 0x2}}], 0x1, 0x0)

3.731438454s ago: executing program 4 (id=1056):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x60}, 0x1, 0x7}, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000ed07449e0000000000000000180100003b7663d73bc86c052f85e5a1c980ccfb487b733e59162884bf000ef22be65fee7589c499762a66e969f556fff5dcda9dbe96a8d8d30a7327bb3fb6648a5ae599024f2a34d5b2415bc9f15e674f8da25ebf4a530b36417ff0eec17ffdd296defa904b10585b10c2bcfc75ef9acdad9e2758afc669c64c427d59cee44e253728f4d4f13e8e2be7c98aa4608f77beaf344f05ac4fcb60abcfee1ea4", @ANYBLOB="0000000000000000b70800000000396f7a8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000054"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
readv(r2, &(0x7f0000000200)=[{&(0x7f0000002740)=""/4107, 0x100b}, {0x0}], 0x2)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3, <r4=>0xffffffffffffffff}, 0x4)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10)
r6 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f00000001c0)={'batadv0\x00', <r7=>0x0})
sendto$packet(r6, &(0x7f0000000000)="05000806", 0x5e0, 0x0, &(0x7f0000000080)={0x11, 0x8100, r7}, 0x14)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
getpgrp(0xffffffffffffffff)
ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000240)=r1)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff8, 0x8}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
close(r9)
recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r10=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r10, &(0x7f0000000280)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa6c"], 0xfdef)

3.492838955s ago: executing program 4 (id=1057):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000005000000010000000000000400000000005f612a00"], 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff024}, {0x6}]}, 0x10)
r2 = dup(r0)
sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f0000003700)={0x0, 0x0, &(0x7f00000036c0)={0x0}}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000083850000002d0000001801000020696c2500000000002020207b1af8ff00000000bfa1000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_io_uring_setup(0x4172, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x17, 0x3, 0xc8})
r5 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000001e00)={'bond0\x00', <r6=>0x0})
setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000680)={r6, 0x3, 0x6}, 0x10)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r6, @ANYBLOB="c9b9ec43d8"], 0x20}}, 0x20004010)

3.338844375s ago: executing program 2 (id=1058):
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xbc, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0xa8, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4, 0x2, 0x0, 0x1, [[]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_bpf={0x2c, 0x3, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0xbc}}, 0x0)
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000280)={'batadv0\x00', <r7=>0x0})
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x57, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffdffff18d6, 0x96ef}, 0x1206c, 0x80, 0x7, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}}, 0x0)

3.338338215s ago: executing program 1 (id=1059):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_DISABLE_SE(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={0x0, 0x14}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000080)={[{@nolazytime}, {}]}, 0x6, 0x4eb, &(0x7f0000000a40)="$eJzs3c9vVFsdAPDvnXZoKQMFZaFGBRFFQ5j+ABqCC2GjMYTESFy5gNoOTdMZpum0SCuLsnRvIokr/RPcuTBh5cKdO925wYUJKnkv9CVvMS/3zqUd2g7te7Qd6Hw+ye2955xhvufMcM6Ze2B6AuhZZyNiNSKORMS9iBjO85P8iButI33cq5ePp9ZePp5Kotm8878kK0/zou3PpI7lzzkYET/7ccQvk61xG8src5PVamUhT48s1uZHGssrl2YLec74xNjE6LXLV8f3rK1nan968aPZWz//y5+/8fzvq9//dVqt0m+OZ2Xt7dhLraYXo9SW1x8Rt/YjWJf0539/+PCkve1LEXEu6//D0Ze9mwDAYdZsDkdzuD0NABx26f1/KZJCOV8LKEWhUC631vBOx1ChWm8sXhyuLz2YjmwN62QUC/dnq5XRfK3wZBSTND2WXW+kxzelL0fEqYj47cDRLF2eqlenu/nBBwB62LFN8//HA635HwA45Aa7XQEA4MCZ/wGg95j/AaD3fI7537cDAeCQcP8PAL3H/A8AvWfH+f/JwdQDADgQP719Oz2aa/nvv55+uLz0g9LDS9OVxly5tjRVnqovzJdn6vWZaqU81Wzu9HzVen1+7Mp6srG8crdWX3qweHe2NjlTuVsp7nN7AICdnTrz7J9JRKxeP5od0baXg7kaDrdCtysAdE1ftysAdI3v80Dv2sU9vmUAOOS22aL3DR3/i9BTm7/Ch+rCV63/Q6+y/g+964ut//9wz+sBHDzr/9C7ms3Env8A0GOs8QPv9O//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KNK2ZEUytle4Kvpz0K5HHE8Ik5GMbk/W62MRsSJiPjHQHEgTY91u9IAwDsq/CfJ9/+6MHy+tLn0SPLJQHaOiF/9/s7vHk0uLi6Mpfn/X89ffJrnjx/pRgMAgHY3tma15un83HYj/+rl46nXx0FW8cXN1uaiady1/GiV9Ed/dh6MYkQMfZTk6Zb080rfHsRffRIRX9lo/6O2CKVsDaS18+nm+Gns4/sQf+P13xy/8Eb8QlaWnovZa/HlPagL9JpnN1vjZN730i6W979CnM3O2/f/wWyEenevx7+1LeNfYX3869sSP8n6/Nn19Ntr8uLKX3+yJbM53Cp7EvG1/u3iJ+vxkw7j7/ldtvFfX//muU5lzT9EXIjt47fUsmF2ZLE2P9JYXrk0W5ucqcxUHoyPT4xNjF67fHV8JFujbv3823Yx/nv94olO8dP2D3WIP7hD+7+zy/b/8dN7v/jWW+J/79vbv/+n3xI/nRO/u8v4k0M3Om7fncaf7tD+nd7/i7uM//zfK9O7fCgAcAAayytzk9VqZWGHi/Sz5k6PcfFhXsRqxHtQDRfv1UW3RyZgv210+m7XBAAAAAAAAAAAAAAA6KSxvDI3EPv7daJutxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDD67MAAAD//w/PzvM=")
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r3}, 0x18)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, 0x0)
write$binfmt_script(r2, &(0x7f0000000380), 0x208e24b)
sendmmsg$unix(r1, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000008500000072000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x1a1281)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, 0x0, 0x0)
ioctl$USBDEVFS_SETCONFIGURATION(r4, 0x5522, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/19, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r7 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301)
ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)

3.286711236s ago: executing program 4 (id=1060):
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000280)={0x0, 'xfrm0\x00', {}, 0xfbc8})
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0)
r1 = socket$netlink(0x10, 0x3, 0xf)
bind$netlink(r1, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r4, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
splice(r4, 0x0, r5, 0x0, 0xaf4, 0x0)
r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000240)={0xffffffffffffffff, 0x8000, 0x10}, 0xc)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10)
r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0)
write$cgroup_int(r8, &(0x7f0000000040)=0x900, 0x12)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_tracing={0x1a, 0x15, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@map_idx_val={0x18, 0x8, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, @alu={0x7, 0x1, 0x8, 0x4, 0x8, 0xfffffffffffffff4, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffff70, 0x0, 0x0, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x1, 0x2}, 0x8, 0x10, &(0x7f00000001c0)={0x3, 0x4, 0x7, 0x6}, 0x10, 0x2c01b, r0, 0x3, &(0x7f00000002c0)=[r2, r0, r6, r2, 0xffffffffffffffff, r2, r0], &(0x7f00000003c0)=[{0x2, 0x4, 0xc, 0x6}, {0x0, 0x2, 0x0, 0x4}, {0x1, 0x3, 0x3, 0xf}], 0x10, 0x80000000, @void, @value}, 0x94)
sendfile(r0, r0, 0x0, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x10100, 0x20)

3.135884177s ago: executing program 3 (id=1061):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180), 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r1, 0x0, 0x21, 0xfa, &(0x7f0000000200)="ba3cef99f5df1e4691a5f817833e9a4ba56d2c23a58326228440e6f3b0e26e3ced", &(0x7f0000000540)=""/250, 0x4, 0x0, 0x0, 0xd, &(0x7f0000000400), &(0x7f0000000640)="a1b21a0e5a84290c6dbba5d080", 0x0, 0x0, 0x7f}, 0x50)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
syz_open_dev$usbfs(0x0, 0x75, 0x109301)
pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="8d", 0x1}, {&(0x7f0000000b00)="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", 0x296}], 0x2, 0x300400, 0x0, 0x1e)
syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0x1}], 0x1, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x208, 0x0, 0x1}}], 0x30, 0x4000000}], 0x1, 0x0)
sendmsg$MPTCP_PM_CMD_REMOVE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000001c00)=ANY=[@ANYBLOB="3400000057eb640e8fab5bb27a6b72b42635fa37d1837799d958b960011b8bef104f886980b05b4b091207fe80eab7ae7d584d2626f52f56f651d8094d7c5bda7998bf10f65fff2e0ee48d4217cc3ab434c86ad4be548e0443240107c0ea73d8d27be7ee10c68407e1696cbda0f23c9f474d63f22cd154fb15e5392ce4574ff0547e3bf5ca0b37fae0743d65b90482901d5598c9fcdcb03efee3106dd785eb1b2b562c595c58d2", @ANYRES16=0x0, @ANYBLOB="000202000000ffdbdf25090000000800030002000072050005000a00000008000200020000002700020803000000"], 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="340000001900020028bd7000fddbdf2502201400fd04fe020002000008000b000800000008000500e000000206001d004e2400002022332d438bb0dd108f0f62cf446de403fb4062b63ef85a06e599b1bae7ddc04494e0bc29f0474116827aaf060000005f80"], 0x34}, 0x1, 0x0, 0x0, 0xa0}, 0x4018000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)=@generic={&(0x7f0000000080)='./file0\x00', r4}, 0x18)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={0xffffffffffffffff, 0x0, &(0x7f0000001700)=""/53}, 0x20)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)

3.104295437s ago: executing program 2 (id=1062):
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0xa1cf846912a3acbb, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x5}, 0x18)
r2 = socket$inet(0x2, 0x3, 0x4)
r3 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_mq={0x7}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}, @TCA_RATE={0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', 0xffffffffffffffff, 0x0, 0x80000}, 0x18)
r8 = socket(0x80000000000000a, 0x2, 0x0)
getsockopt$IP_VS_SO_GET_INFO(r8, 0x0, 0x481, &(0x7f0000000000), &(0x7f00000000c0)=0xc)

2.943047867s ago: executing program 1 (id=1063):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="6c00050000e3afe18bc7c7f00806935485f5b768401527d7f78a6f62cce98d127e44", @ANYRES16, @ANYBLOB="01000000000000000000030000005800018044000400200001000a00ffff000000002e0000000000005f000000000000005f"], 0x6c}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10)
open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0)
pipe2$9p(&(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r3 = dup(r2)
write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3])
creat(&(0x7f0000002200)='./file0\x00', 0x80)
getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0)

2.720107658s ago: executing program 1 (id=1064):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000180)=<r3=>0x0)
ioprio_get$pid(0x2, r3)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @local, 0x4e23, 0x3, 'wrr\x00', 0xe, 0x7, 0x49}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x4, 0x0}, 0x4e21, 0x3, 'lc\x00', 0xa, 0x81, 0x37}, {@local, 0x4e23, 0x4, 0xc3, 0x12d5c, 0x12d5c}}, 0x44)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x4, 0x0}, 0x4e21, 0x3, 'lc\x00', 0x2, 0x81, 0x19}, {@local, 0x4e20, 0x4, 0xc3, 0x12d5c, 0x12d5c}}, 0x44)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0)

2.44616271s ago: executing program 5 (id=1065):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000004e91f66d73743c91730100000000", @ANYRES16, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f00000003c0), &(0x7f0000000580)}, 0x20)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000300)='cachefiles_prep_read\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18)
r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
fcntl$setsig(r1, 0xa, 0x13)
fcntl$setlease(r1, 0x400, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280))
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
truncate(&(0x7f0000000040)='./file0\x00', 0x0)
fcntl$setlease(r1, 0x400, 0x2)
r2 = timerfd_create(0x1, 0x0)
timerfd_settime(r2, 0x3, &(0x7f0000000000)={{0x77359400}, {0x0, 0x3938700}}, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
syz_usb_disconnect(0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000022a25eda0000000000feff800c0000000000000054000000a000020095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
epoll_create1(0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
socket$isdn_base(0x22, 0x3, 0x0)
io_uring_register$IORING_REGISTER_ENABLE_RINGS(0xffffffffffffffff, 0xc, 0x0, 0x0)

2.034997241s ago: executing program 2 (id=1066):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x1101088, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{}, &(0x7f00000004c0), 0x0}, 0x20)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000140)={0x19, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="02090000020000000040000000000000b0ba3906977ca111d90557c54fe138fdb754c240d19db45f70279f2b5c0aa460867bedbc2f22c271968908194daa1cfa64b81c11a1864781e3cdd4e3e3a84ba0d5ac91b214adf88928325f55029b7b04118029b1a5739c3431fcbe889f1096d24335bc10ba6edd8d88fad7a22112ab69e43a16bd30431cb9c0390be5a80b861358b1aa6cbf45345c7547dda5f5da1ee2147a74ea01b843092ba1a9dfb1425b1e4445b1ba88ea01161a499676673a539ed993ff74bdc6a697d49eb158a437022780fae1a37c72b0c990d92d68dc081e2ab50fc859513193c4352581699d"], 0x10}}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="ec000000210004000000000000000000ffffffff0000000000000000000000006401010100000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100ff010000000000000000000000000001ffffffff000000000000000000000000ac1414aa00c3d5e05139ef44ce0000000000000000000000fc01000000000000000000000000000100000000030000000a000200fc000000000000000000000000000001ff02000000000000000000000000000100000000000000000000000000000000ac1414bb00000000000000000000000000040000000000000000"], 0xec}}, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r3 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080))
ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x2})
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x77c, &(0x7f0000001180)="$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")
getgroups(0x0, 0x0)
mknod$loop(0x0, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000080), 0x0}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r4}, &(0x7f0000bbdffc)=<r5=>0x0)
pipe(&(0x7f0000000000)={<r6=>0xffffffffffffffff})
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
splice(r6, 0x0, r7, 0x0, 0x80, 0x4)
timer_settime(r5, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)

1.650253143s ago: executing program 1 (id=1067):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000810"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x14806, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x6fd, &(0x7f0000000c40)="$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")
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[@ANYBLOB="2000000002"], 0x0)
r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x142, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, r2, 0x3)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000280)={0x0, 0xfe, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}}, 0x0)
sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x4c}}, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r6)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$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")
r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x120)
r8 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', <r9=>0x0})
bind$can_raw(r8, &(0x7f0000000040)={0x1d, r9}, 0x10)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff})
getsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x1b, 0x0, &(0x7f0000000340))
setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000240)=0x1002, 0x4)
bind$can_raw(r8, &(0x7f0000000480), 0x10)
pwritev2(r7, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0)

1.094187345s ago: executing program 2 (id=1068):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000004e0001000000000000a8"], 0x14}}, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xb, &(0x7f00000001c0)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x19f, &(0x7f00000002c0), 0x0, 0x557, &(0x7f0000000a40)="$eJzs3c9vHFcdAPDvrHfd/HBqFzhAJUqhRUkFWcc1bS0OJUgITpUQ5R6MvbGsrL2RvW5jK1KdvwAJIUBwggsXJP4AJBSJC0eEFAnOIBWBEDhwqARk0MzObhx31nbCZtc/Ph9pMm/e27ff9yae8byZ8UwAp9aLEXE1Ih6kafpKREwW+ZViiu3OlH3u/s7thWxKIk3f/nsSSZHX/a6kmJ8vqp2JiG98LeLb3YK8pGN9c+vGfLPZWCuWp9srN6fXN7cuL6/MLzWWGquzszOvz70x99rclYH080JEvPmVP3//Oz/76pu/+vy7f7r210tZt2OiKN/dj8eQraLqfh/odL2Wr4uurMJavPcE4Y6mat7DwtmyT6Rpmj5IJ3fl3BlKywAA2Cs7gP1IRHwmIl6JyRjb/3AWAAAAOIbSL03Ef5LOFZoS433yAQAAgGOkkt8Dm1Tqxb0AE1Gp1OudO3U/FucqzdZ6+3PXWxuri/d+NBERU1GrXF9uNq4U9wpPRS3Jlmfy9MPlV3vL1ciWZyPiuYj43uTZvLy+0GoujvrkBwAAAJwS5/eM//812Rn/AwAAACfM1IezKqNoBwAAAPD0lIz/AQAAgBPG+B8AAABOtK+/9VY2pd33Xy++s7lxo/XO5cXG+o36ysZCfaG1drO+1Got5c/sW9ldd6zk+5qt1s0vxOrGrel2Y709vb65dW2ltbHavrZcvAL7gyF1DAAAAOh57lN3/5BExPYXz+ZTZnzUjQKGotpLJcW8ZOv/47Od+ftDahQwFGXn8Pd6/5khNAQYuuoT1UoPs9sAjrjaqBsAjFxyQPmZfgW/LeafHmx7AACAwbv4iUeu/z9yOnD/dwBse0UAHHM2Yji99lzISydH1RBg6PID/sPe8OtgAU6U2qHuAAROsv/7+v+B0vSxGgQAAAzcRD4llXpxem8iKpV6PeJC/lqAWnJ9udm4EhHPRsTvJ2vPZMszec3kwDEDAAAAAAAAAAAAAAAAAAAAAAAAANCRpkmk+7m6bykAAABwDERU/pL8uvMs/4uTL0/sPT8wnnyQvxJ4PCLe/fHbP7g1326vzWT5/+jlt39Y5L86ijMYAAAAwF7dcXp3HA8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAg3R/5/bC/Z3b6b93bi8MM+7fvhwRU734+dQpqcaZfH4mahFx7p9JVHfVSyJibADxt+9ExMfL4idZs3ohy+KfffrxY6pYC2Xxzw8gPpxmd7P9z9Wy7a8SL+bz8u2vGvHI8pPqv/+L3v5vrM/2f+GQMZ6/94vpvvHvRDxfLd//dOMnfeK/FJVO4gDf+ubWVr+y9CcRF6M8/u5Y0+2Vm9Prm1uXl1fmlxpLjdXZ2ZnX596Ye23uyvT15Waj+Lc0xnc/+csH+/X/XJ/4Uwf0/+WDu577771bOx/tJGtl8S+9VBL/Nz8tPvHh+JXid99ni3RWfrGb3u6kd3vh5797Yb/+Lz7sf+1x/v8vHbL/RcVBbC4AwACsb27dmG82G2vHIVF7klrZKL2sqDgiiyPQL4kRJd4b6BemaZr2+Ym6GxGH+Z4kjsJqyROj3S8BAACD9/Cgf9QtAQAAAAAAAAAAAAAAAAAAgNOr+Pv/sQE8CHC89DF7JU8W2O6lEs8EBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACOjP8FAAD//wfy3Tg=")
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r0}, 0x10)
unshare(0xe000480)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_GET_TARGET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r3)
sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x28, r4, 0x1, 0x60, 0x0, {0x1e}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x8d0}, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSTI(r6, 0x5412, &(0x7f00000000c0)=0x77)
ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x17)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0x14)
r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCVHANGUP(r7, 0x5437, 0x2)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

539.237047ms ago: executing program 5 (id=1069):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x320000, 0x1000, 0x10000000}, 0x20)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000c41c00"/28], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000003c0), 0x5, r0}, 0x38)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kfree\x00', r1}, 0x10)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0)
write$cgroup_int(r2, &(0x7f0000000000)=0xfe8e, 0x12)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="2100000000000000000000000000000000000000f61c55cb1b201f9f4f96bd19a2657c4c3f5ddab8f1cb428ecbd9a1ab2c7f1780df8e6e7d70f9b5f027b9b4714accfdf244ea8579284d9ee94cfd785b5bf3b94ec611bbca37ae1c0412f41942ae0dba721cd4d2a5070549748feb2edac419a51dc6c164a2bf934a176b851ae40915f24b", @ANYRES32, @ANYBLOB="519b00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000500"/28], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x4a16, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYRESDEC, @ANYRESHEX, @ANYRESHEX, @ANYRES32], 0x5, 0x31e, &(0x7f0000000a80)="$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")
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b)
r4 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040))
ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f0000165000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0, 0x0, 0x4, 0x73, 0x0, 0x26})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]})
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000c40000000100000000000001", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r5 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r5, 0x0, 0x0, 0x1000f4)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
write$cgroup_int(r6, &(0x7f0000000380), 0x101bf)
r7 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0)
ioctl$EVIOCSMASK(r7, 0x40104593, &(0x7f0000000000)={0x0, 0x0, 0x0})
ioctl$EVIOCGRAB(r7, 0x40044590, &(0x7f0000000080)=0xffffff7f)
r8 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r8, &(0x7f0000000040)="e2", 0x2250)

165.683149ms ago: executing program 4 (id=1070):
syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x420, &(0x7f0000000500)={[{@dax_inode}]}, 0x0, 0x597, &(0x7f0000000d80)="$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")
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000059c0)='./bus\x00', 0x1400e, &(0x7f0000005a00), 0x1, 0x42f, &(0x7f0000000940)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000140), 0xfcb8)
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1, 0xa4, 0x0, 0xa4}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00e6ffffffffff3f00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r5}, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge0\x00'})

0s ago: executing program 3 (id=1071):
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x95, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x7, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='rxrpc_rx_packet\x00', r0}, 0x18)
syz_mount_image$vfat(&(0x7f0000000380), &(0x7f00000004c0)='./file0\x00', 0x8104e2, &(0x7f0000000a80)=ANY=[], 0x1, 0x263, &(0x7f0000000a00)="$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")
syz_mount_image$ext4(&(0x7f0000000500)='ext2\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f00000006c0)={[{@noload}, {@i_version}, {@discard}, {@nobarrier}, {@grpid}, {@usrjquota}, {@barrier_val={'barrier', 0x3d, 0x5}}]}, 0x6, 0x56a, &(0x7f00000015c0)="$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")
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000300)=ANY=[], 0x835, 0x0)
statx(0xffffffffffffffff, &(0x7f0000003e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x6000, 0x40, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000e6ffffffffc40000001f00000095"], &(0x7f0000000180)='GPL\x00', 0xc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r1}, 0x10)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x800, 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x10400, 0x0)
sendfile(r3, r4, &(0x7f0000000340)=0x5, 0x0)
sendmsg$nl_xfrm(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b0001000000000000000000fe8000000000000000000000000000bbe000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\f\x00\b'], 0xd8}}, 0x0)
r5 = gettid()
timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000640)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0xfffffffd}, 0x1c)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000000))
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRES16, @ANYRES8=0x0], 0x48)

kernel console output (not intermixed with test programs):

p3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[   95.291620][  T376] EXT4-fs (loop3): This should not happen!! Data will be lost
[   95.291620][  T376] 
[   95.301312][  T376] EXT4-fs (loop3): Total free blocks count 0
[   95.307391][  T376] EXT4-fs (loop3): Free/Dirty block details
[   95.313332][  T376] EXT4-fs (loop3): free_blocks=2415919104
[   95.319085][  T376] EXT4-fs (loop3): dirty_blocks=6240
[   95.324453][  T376] EXT4-fs (loop3): Block reservation details
[   95.330486][  T376] EXT4-fs (loop3): i_reserved_data_blocks=390
[   95.342396][ T1311] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28
[   95.355051][ T1311] EXT4-fs (loop3): This should not happen!! Data will be lost
[   95.355051][ T1311] 
[   95.458603][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[   96.304043][ T5748] syz.2.647 (5748) used greatest stack depth: 6328 bytes left
[   96.327085][ T5765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   96.336510][ T5765] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   96.498601][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[   97.527154][ T5783] loop2: detected capacity change from 0 to 8192
[   97.538621][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[   97.559900][ T5783] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   97.578971][ T5783] Process accounting resumed
[   97.674876][ T5787] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5787 comm=+}[@
[   97.810608][ T5785] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present!
[   98.222180][ T5811] loop5: detected capacity change from 0 to 512
[   98.331633][ T5811] EXT4-fs: Ignoring removed orlov option
[   98.371260][ T5811] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   98.578619][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[   98.672981][ T5811] EXT4-fs (loop5): 1 orphan inode deleted
[   98.678842][ T5811] EXT4-fs (loop5): 1 truncate cleaned up
[   98.700031][ T5811] EXT4-fs mount: 28 callbacks suppressed
[   98.700050][ T5811] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   98.821354][ T5811] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[   98.931544][ T3909] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   99.296443][   T29] kauditd_printk_skb: 413 callbacks suppressed
[   99.296459][   T29] audit: type=1326 audit(1733311977.773:9084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5837 comm="syz.1.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92f48aff19 code=0x7ffc0000
[   99.352159][ T5836] ������: renamed from vlan0 (while UP)
[   99.355268][   T29] audit: type=1326 audit(1733311977.813:9085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5837 comm="syz.1.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92f48aff19 code=0x7ffc0000
[   99.381380][   T29] audit: type=1326 audit(1733311977.813:9086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5837 comm="syz.1.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f92f48aff19 code=0x7ffc0000
[   99.410184][   T29] audit: type=1326 audit(1733311977.813:9087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5837 comm="syz.1.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92f48aff19 code=0x7ffc0000
[   99.433740][   T29] audit: type=1326 audit(1733311977.813:9088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5837 comm="syz.1.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92f48aff19 code=0x7ffc0000
[   99.460126][   T29] audit: type=1326 audit(1733311977.813:9089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5837 comm="syz.1.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f92f48aff19 code=0x7ffc0000
[   99.483775][   T29] audit: type=1326 audit(1733311977.813:9090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5837 comm="syz.1.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92f48aff19 code=0x7ffc0000
[   99.507147][   T29] audit: type=1326 audit(1733311977.813:9091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5837 comm="syz.1.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92f48aff19 code=0x7ffc0000
[   99.530622][   T29] audit: type=1326 audit(1733311977.813:9092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5837 comm="syz.1.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f92f48aff19 code=0x7ffc0000
[   99.554014][   T29] audit: type=1326 audit(1733311977.813:9093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5837 comm="syz.1.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92f48aff19 code=0x7ffc0000
[   99.613561][ T5846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   99.618619][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[   99.628695][ T5846] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   99.646752][ T5848] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5848 comm=+}[@
[  100.024521][ T5825] syz.4.663 (5825) used greatest stack depth: 5152 bytes left
[  100.658598][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  100.809061][ T5871] netlink: 8 bytes leftover after parsing attributes in process `syz.2.674'.
[  100.846431][ T5867] ebtables: ebtables: counters copy to user failed while replacing table
[  100.875730][ T5875] netlink: 4 bytes leftover after parsing attributes in process `syz.1.675'.
[  100.911137][ T5875] hsr_slave_1 (unregistering): left promiscuous mode
[  101.086753][ T5888] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5888 comm=+}[@
[  101.332789][ T5895] loop5: detected capacity change from 0 to 512
[  101.524688][ T5895] EXT4-fs error (device loop5): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.5.681: corrupted xattr block 95: invalid header
[  101.574280][ T5895] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.681: bg 0: block 7: invalid block bitmap
[  101.587276][ T5895] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6550: Corrupt filesystem
[  101.596904][ T5895] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2977: inode #11: comm syz.5.681: corrupted xattr block 95: invalid header
[  101.610990][ T5895] EXT4-fs warning (device loop5): ext4_evict_inode:276: xattr delete (err -117)
[  101.620197][ T5895] EXT4-fs (loop5): 1 orphan inode deleted
[  101.626978][ T5895] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  101.698601][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  101.912318][ T5904] netlink: 4 bytes leftover after parsing attributes in process `syz.2.685'.
[  102.670598][ T3909] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  102.720293][ T5912] loop1: detected capacity change from 0 to 2048
[  102.733438][ T5914] loop5: detected capacity change from 0 to 512
[  102.738627][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  102.766405][ T5912] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  102.792176][ T5914] EXT4-fs error (device loop5): ext4_ext_check_inode:524: inode #2: comm syz.5.689: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  102.821832][ T5914] EXT4-fs (loop5): get root inode failed
[  102.827507][ T5914] EXT4-fs (loop5): mount failed
[  102.845572][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  102.859189][ T5921] mmap: syz.4.691 (5921) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  102.911920][ T5923] loop1: detected capacity change from 0 to 256
[  102.912537][ T5914] loop5: detected capacity change from 0 to 2048
[  102.929761][ T5923] FAT-fs (loop1): Directory bread(block 1285) failed
[  102.937987][ T5914] EXT4-fs: Ignoring removed mblk_io_submit option
[  102.952283][ T5923] netlink: 596 bytes leftover after parsing attributes in process `syz.1.690'.
[  102.970452][ T5914] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  102.972218][ T5923] FAT-fs (loop1): Directory bread(block 1285) failed
[  103.008643][ T5923] FAT-fs (loop1): Directory bread(block 1285) failed
[  103.026917][ T5923] FAT-fs (loop1): Directory bread(block 1285) failed
[  103.057267][ T5914] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.689: bg 0: block 234: padding at end of block bitmap is not set
[  103.078585][ T5914] EXT4-fs (loop5): Remounting filesystem read-only
[  103.332513][ T3909] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.517337][ T5951] netlink: 36 bytes leftover after parsing attributes in process `syz.2.696'.
[  103.526336][ T5951] netlink: 16 bytes leftover after parsing attributes in process `syz.2.696'.
[  103.535256][ T5951] netlink: 36 bytes leftover after parsing attributes in process `syz.2.696'.
[  103.654436][ T5954] loop5: detected capacity change from 0 to 512
[  103.712732][ T5954] EXT4-fs: Ignoring removed nobh option
[  103.743953][ T5951] netlink: 36 bytes leftover after parsing attributes in process `syz.2.696'.
[  103.778589][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  103.780224][ T5954] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13
[  103.892197][ T5958] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  103.902400][ T5954] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.694: attempt to clear invalid blocks 2 len 1
[  103.951969][ T5964] loop3: detected capacity change from 0 to 1024
[  103.958628][ T5954] EXT4-fs (loop5): Remounting filesystem read-only
[  103.965674][ T5954] EXT4-fs (loop5): 1 truncate cleaned up
[  103.983349][ T5954] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  103.995986][ T5954] SELinux: (dev loop5, type ext4) getxattr errno 5
[  104.003469][ T5954] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.027127][ T5967] loop2: detected capacity change from 0 to 8192
[  104.058832][ T5964] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  104.100066][ T5954] loop5: detected capacity change from 0 to 512
[  104.106949][ T5967] netlink: 8 bytes leftover after parsing attributes in process `syz.2.701'.
[  104.115920][ T5967] netlink: 4 bytes leftover after parsing attributes in process `syz.2.701'.
[  104.129029][ T5954] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  104.143472][ T5954] EXT4-fs (loop5): 1 truncate cleaned up
[  104.150137][ T5954] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  104.198177][  T376] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 12 with max blocks 4 with error 28
[  104.210693][  T376] EXT4-fs (loop3): This should not happen!! Data will be lost
[  104.210693][  T376] 
[  104.220432][  T376] EXT4-fs (loop3): Total free blocks count 0
[  104.226440][  T376] EXT4-fs (loop3): Free/Dirty block details
[  104.232379][  T376] EXT4-fs (loop3): free_blocks=0
[  104.237512][  T376] EXT4-fs (loop3): dirty_blocks=0
[  104.242618][  T376] EXT4-fs (loop3): Block reservation details
[  104.248674][  T376] EXT4-fs (loop3): i_reserved_data_blocks=0
[  104.263171][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.326837][   T29] kauditd_printk_skb: 539 callbacks suppressed
[  104.326855][   T29] audit: type=1400 audit(1733311982.803:9633): avc:  denied  { create } for  pid=5979 comm="syz.3.705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  104.401037][   T29] audit: type=1400 audit(1733311982.873:9634): avc:  denied  { getopt } for  pid=5984 comm="syz.3.707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  104.405755][ T3909] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.420605][   T29] audit: type=1400 audit(1733311982.873:9635): avc:  denied  { connect } for  pid=5984 comm="syz.3.707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  104.449509][   T29] audit: type=1400 audit(1733311982.873:9636): avc:  denied  { name_connect } for  pid=5984 comm="syz.3.707" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1
[  104.470040][ T5973] syz.1.703[5973] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  104.470103][ T5973] syz.1.703[5973] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  104.481501][ T5973] syz.1.703[5973] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  104.493370][   T29] audit: type=1400 audit(1733311982.933:9637): avc:  denied  { setopt } for  pid=5984 comm="syz.3.707" laddr=fe80::31 lport=57522 faddr=fe80::bb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  104.527796][   T29] audit: type=1400 audit(1733311982.963:9638): avc:  denied  { execute_no_trans } for  pid=5972 comm="syz.1.703" path="/135/file1" dev="tmpfs" ino=760 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  104.622307][   T29] audit: type=1400 audit(1733311983.103:9639): avc:  denied  { audit_write } for  pid=5992 comm="syz.2.710" capability=29  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  104.646197][ T5993] loop2: detected capacity change from 0 to 512
[  104.652809][ T5993] EXT4-fs: Ignoring removed orlov option
[  104.659164][ T5993] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  104.673263][ T5994] loop1: detected capacity change from 0 to 512
[  104.682310][ T5993] EXT4-fs (loop2): 1 orphan inode deleted
[  104.688129][ T5993] EXT4-fs (loop2): 1 truncate cleaned up
[  104.694299][ T5993] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  104.708909][ T5993] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  104.719766][   T29] audit: type=1326 audit(1733311983.183:9640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5992 comm="syz.2.710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a99b8ff19 code=0x7ffc0000
[  104.747283][   T29] audit: type=1326 audit(1733311983.183:9641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5992 comm="syz.2.710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f4a99b8ff19 code=0x7ffc0000
[  104.750324][ T5994] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  104.770990][   T29] audit: type=1326 audit(1733311983.203:9642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5992 comm="syz.2.710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a99b8ff19 code=0x7ffc0000
[  104.798953][ T5994] ext4 filesystem being mounted at /136/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  104.818651][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  104.826876][ T6001] random: crng reseeded on system resumption
[  104.961351][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.043095][ T6004] xt_policy: neither incoming nor outgoing policy selected
[  105.136843][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.202446][ T6005] loop2: detected capacity change from 0 to 512
[  105.244234][ T6005] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  105.282832][ T6005] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.712: invalid indirect mapped block 4294967295 (level 0)
[  105.297618][ T6005] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.712: invalid indirect mapped block 4294967295 (level 1)
[  105.313364][ T6005] EXT4-fs (loop2): 1 orphan inode deleted
[  105.319147][ T6005] EXT4-fs (loop2): 1 truncate cleaned up
[  105.326164][ T6005] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  105.452300][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.513391][ T6020] loop5: detected capacity change from 0 to 512
[  105.565376][ T6021] loop3: detected capacity change from 0 to 512
[  105.696834][ T6021] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:164: inode #15: comm syz.3.714: inline data xattr refers to an external xattr inode
[  105.714748][ T6021] EXT4-fs (loop3): Remounting filesystem read-only
[  105.727425][ T6021] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  105.740299][ T6021] SELinux: (dev loop3, type ext4) getxattr errno 5
[  105.752315][ T6021] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.777084][ T6020] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002]
[  105.786274][ T6020] System zones: 0-2, 18-18, 34-34
[  105.807441][ T6020] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.715: bg 0: block 248: padding at end of block bitmap is not set
[  105.858621][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  105.865898][ T6020] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.715: Failed to acquire dquot type 1
[  105.884579][ T6020] EXT4-fs (loop5): 1 truncate cleaned up
[  105.890664][ T6020] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  105.903333][ T6020] ext4 filesystem being mounted at /99/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  105.905898][ T6029] __nla_validate_parse: 3 callbacks suppressed
[  105.905915][ T6029] netlink: 4 bytes leftover after parsing attributes in process `syz.4.716'.
[  105.928775][ T6029] netlink: 4 bytes leftover after parsing attributes in process `syz.4.716'.
[  105.937675][ T6029] netlink: 4 bytes leftover after parsing attributes in process `syz.4.716'.
[  105.939826][ T3909] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.241124][ T6041] netlink: 'syz.3.720': attribute type 28 has an invalid length.
[  106.249052][ T6041] netlink: 55 bytes leftover after parsing attributes in process `syz.3.720'.
[  106.258848][ T6043] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6043 comm=+}[@
[  106.307212][ T6034] loop4: detected capacity change from 0 to 8192
[  106.314068][ T6034] vfat: Unknown parameter ''
[  106.665194][ T6063] loop4: detected capacity change from 0 to 512
[  106.681362][ T6063] EXT4-fs: Ignoring removed oldalloc option
[  106.687812][ T6063] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  106.711785][ T6063] EXT4-fs (loop4): 1 truncate cleaned up
[  106.717802][ T6063] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  106.898615][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  107.301913][ T6068] loop2: detected capacity change from 0 to 1024
[  107.319179][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.345501][ T6073] loop3: detected capacity change from 0 to 2048
[  107.348871][ T6068] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  107.365962][ T6073] EXT4-fs: Ignoring removed mblk_io_submit option
[  107.378650][ T6071] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  107.386252][ T6071] batman_adv: batadv0: Removing interface: batadv_slave_0
[  107.400931][ T6071] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  107.408400][ T6071] batman_adv: batadv0: Removing interface: batadv_slave_1
[  107.422072][ T6073] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  107.439341][ T6073] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 234: padding at end of block bitmap is not set
[  107.455923][ T6073] EXT4-fs (loop3): Remounting filesystem read-only
[  107.486090][   T36] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 12 with max blocks 4 with error 28
[  107.497657][ T6087] netlink: 740 bytes leftover after parsing attributes in process `syz.4.734'.
[  107.498415][   T36] EXT4-fs (loop2): This should not happen!! Data will be lost
[  107.498415][   T36] 
[  107.517149][   T36] EXT4-fs (loop2): Total free blocks count 0
[  107.523318][   T36] EXT4-fs (loop2): Free/Dirty block details
[  107.529268][   T36] EXT4-fs (loop2): free_blocks=0
[  107.534210][   T36] EXT4-fs (loop2): dirty_blocks=0
[  107.539322][   T36] EXT4-fs (loop2): Block reservation details
[  107.545314][   T36] EXT4-fs (loop2): i_reserved_data_blocks=0
[  107.552019][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.553332][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.587737][ T6090] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6090 comm=+}[@
[  107.753151][ T6097] netlink: 44 bytes leftover after parsing attributes in process `syz.2.739'.
[  107.772774][ T6097] netlink: 44 bytes leftover after parsing attributes in process `syz.2.739'.
[  107.800756][ T6097] netlink: 44 bytes leftover after parsing attributes in process `syz.2.739'.
[  107.938629][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  108.555931][ T6123] loop1: detected capacity change from 0 to 1024
[  108.582023][ T6123] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  108.646493][ T6130] netlink: 4 bytes leftover after parsing attributes in process `syz.3.747'.
[  108.844911][ T6136] random: crng reseeded on system resumption
[  108.978639][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  109.023709][ T6138] netlink: 24 bytes leftover after parsing attributes in process `syz.5.749'.
[  109.395259][   T29] kauditd_printk_skb: 325 callbacks suppressed
[  109.395285][   T29] audit: type=1400 audit(1733311987.873:9966): avc:  denied  { unmount } for  pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  109.424247][ T1313] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 4 with error 28
[  109.436619][ T1313] EXT4-fs (loop1): This should not happen!! Data will be lost
[  109.436619][ T1313] 
[  109.446313][ T1313] EXT4-fs (loop1): Total free blocks count 0
[  109.452368][ T1313] EXT4-fs (loop1): Free/Dirty block details
[  109.458259][ T1313] EXT4-fs (loop1): free_blocks=0
[  109.463289][ T1313] EXT4-fs (loop1): dirty_blocks=0
[  109.468402][ T1313] EXT4-fs (loop1): Block reservation details
[  109.474410][ T1313] EXT4-fs (loop1): i_reserved_data_blocks=0
[  109.482821][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  109.500847][   T29] audit: type=1326 audit(1733311987.973:9967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6145 comm="syz.5.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafb94eff19 code=0x7ffc0000
[  109.524344][   T29] audit: type=1326 audit(1733311987.973:9968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6145 comm="syz.5.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fafb94eff19 code=0x7ffc0000
[  109.547763][   T29] audit: type=1326 audit(1733311987.973:9969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6145 comm="syz.5.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafb94eff19 code=0x7ffc0000
[  109.571137][   T29] audit: type=1326 audit(1733311987.973:9970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6145 comm="syz.5.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fafb94eff19 code=0x7ffc0000
[  109.594547][   T29] audit: type=1326 audit(1733311987.973:9971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6145 comm="syz.5.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafb94eff19 code=0x7ffc0000
[  109.617879][   T29] audit: type=1326 audit(1733311987.983:9972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6145 comm="syz.5.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fafb94eff19 code=0x7ffc0000
[  109.641223][   T29] audit: type=1326 audit(1733311987.983:9973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6145 comm="syz.5.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafb94eff19 code=0x7ffc0000
[  109.664854][   T29] audit: type=1326 audit(1733311987.983:9974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6145 comm="syz.5.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fafb94eff19 code=0x7ffc0000
[  109.690545][   T29] audit: type=1400 audit(1733311988.113:9975): avc:  denied  { read } for  pid=2985 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[  109.881369][ T6163] loop4: detected capacity change from 0 to 512
[  109.888433][ T6163] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  109.898320][ T6163] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[  109.907986][ T6163] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended
[  109.917049][ T6163] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[  109.925252][ T6163] System zones: 0-2, 18-18, 34-34
[  109.931043][ T6163] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  109.946065][ T6163] EXT4-fs (loop4): 1 truncate cleaned up
[  109.952143][ T6163] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  109.966331][ T6163] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none.
[  110.008529][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  110.018601][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  110.071758][ T6171] loop3: detected capacity change from 0 to 512
[  110.079432][ T6171] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  110.090586][ T6171] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  110.102414][ T6175] loop4: detected capacity change from 0 to 1024
[  110.110088][ T6175] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[  110.111856][ T6171] ext4 filesystem being mounted at /136/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  110.189933][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  110.449456][ T6188] loop1: detected capacity change from 0 to 512
[  110.456390][ T6188] EXT4-fs: Ignoring removed nobh option
[  110.481999][ T6188] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13
[  110.496068][ T6188] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.764: attempt to clear invalid blocks 2 len 1
[  110.517399][ T6188] EXT4-fs (loop1): Remounting filesystem read-only
[  110.553751][ T6188] EXT4-fs (loop1): 1 truncate cleaned up
[  110.561947][ T6191] loop5: detected capacity change from 0 to 4096
[  110.570329][ T6188] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  110.601591][ T6188] SELinux: (dev loop1, type ext4) getxattr errno 5
[  110.609691][ T6191] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  110.623369][ T6188] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  110.695384][ T6188] loop1: detected capacity change from 0 to 512
[  110.730847][ T6188] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  110.756615][ T6188] EXT4-fs (loop1): 1 truncate cleaned up
[  110.762847][ T6188] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  110.944093][ T3909] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  111.021610][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  111.058601][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  111.345252][ T6212] loop1: detected capacity change from 0 to 512
[  111.654415][ T6212] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:164: inode #15: comm syz.1.769: inline data xattr refers to an external xattr inode
[  111.670633][ T6212] EXT4-fs (loop1): Remounting filesystem read-only
[  111.681415][ T6212] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  111.695144][ T6212] SELinux: (dev loop1, type ext4) getxattr errno 5
[  111.706805][ T6212] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  111.965407][ T6222] loop3: detected capacity change from 0 to 512
[  111.972235][ T6222] EXT4-fs: Ignoring removed orlov option
[  111.978833][ T6222] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  111.990099][ T6222] EXT4-fs (loop3): 1 orphan inode deleted
[  111.995881][ T6222] EXT4-fs (loop3): 1 truncate cleaned up
[  112.002834][ T6222] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  112.019634][ T6222] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  112.070952][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  112.095438][ T6228] __nla_validate_parse: 5 callbacks suppressed
[  112.095456][ T6228] netlink: 24 bytes leftover after parsing attributes in process `syz.1.777'.
[  112.104716][ T6227] netlink: 28 bytes leftover after parsing attributes in process `syz.4.776'.
[  112.110660][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  112.181843][ T6228] netlink: 52 bytes leftover after parsing attributes in process `syz.1.777'.
[  112.216100][ T6234] loop4: detected capacity change from 0 to 512
[  112.234444][ T6234] EXT4-fs: inline encryption not supported
[  112.261938][ T6234] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  112.278996][ T6234] ext4 filesystem being mounted at /168/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  112.293231][ T6234] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #2: comm syz.4.779: corrupted inode contents
[  112.305974][ T6234] EXT4-fs error (device loop4): ext4_dirty_inode:6041: inode #2: comm syz.4.779: mark_inode_dirty error
[  112.318514][ T6234] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #2: comm syz.4.779: corrupted inode contents
[  112.333585][ T6234] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #2: comm syz.4.779: corrupted inode contents
[  112.346024][ T6234] EXT4-fs error (device loop4): ext4_dirty_inode:6041: inode #2: comm syz.4.779: mark_inode_dirty error
[  112.360554][ T6234] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #2: comm syz.4.779: corrupted inode contents
[  112.376334][ T6234] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #2: comm syz.4.779: mark_inode_dirty error
[  112.392288][ T6234] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #2: comm syz.4.779: corrupted inode contents
[  112.404604][ T6234] EXT4-fs error (device loop4): ext4_dirty_inode:6041: inode #2: comm syz.4.779: mark_inode_dirty error
[  112.451735][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  112.684894][ T6244] loop4: detected capacity change from 0 to 256
[  112.697914][ T6244] msdos: Unknown parameter 'qy�0M'
[  112.905158][ T6249] loop2: detected capacity change from 0 to 512
[  112.919361][ T6249] EXT4-fs (loop2): external journal device major/minor numbers have changed
[  113.005033][ T6249] EXT4-fs (loop2): failed to open journal device unknown-block(4,137) -6
[  113.045816][ T6259] loop4: detected capacity change from 0 to 512
[  113.066060][ T6259] EXT4-fs: Ignoring removed orlov option
[  113.117393][ T6260] loop1: detected capacity change from 0 to 512
[  113.138634][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  113.187504][ T6259] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  113.343660][ T6260] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.1.787: corrupted xattr block 95: invalid header
[  113.358521][ T6260] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.787: bg 0: block 7: invalid block bitmap
[  113.372054][ T6260] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem
[  113.381588][ T6260] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2977: inode #11: comm syz.1.787: corrupted xattr block 95: invalid header
[  113.396506][ T6260] EXT4-fs warning (device loop1): ext4_evict_inode:276: xattr delete (err -117)
[  113.405637][ T6260] EXT4-fs (loop1): 1 orphan inode deleted
[  113.412170][ T6260] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  113.437380][ T6259] EXT4-fs (loop4): 1 orphan inode deleted
[  113.443186][ T6259] EXT4-fs (loop4): 1 truncate cleaned up
[  113.481186][ T6259] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  113.591714][ T6259] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  113.919591][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  113.942514][ T6269] netlink: 28 bytes leftover after parsing attributes in process `syz.2.791'.
[  114.178658][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  114.452561][   T29] kauditd_printk_skb: 359 callbacks suppressed
[  114.452578][   T29] audit: type=1400 audit(1733311992.933:10335): avc:  denied  { create } for  pid=6272 comm="syz.2.793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  114.524294][   T29] audit: type=1326 audit(1733311993.003:10336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6270 comm="syz.4.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f917332ff19 code=0x7ffc0000
[  114.581656][   T29] audit: type=1326 audit(1733311993.033:10337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6270 comm="syz.4.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f917332ff19 code=0x7ffc0000
[  114.636660][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  114.657281][   T29] audit: type=1400 audit(1733311993.133:10338): avc:  denied  { read } for  pid=6278 comm="syz.5.804" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  114.681674][   T29] audit: type=1400 audit(1733311993.133:10339): avc:  denied  { open } for  pid=6278 comm="syz.5.804" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  114.706356][   T29] audit: type=1400 audit(1733311993.133:10340): avc:  denied  { ioctl } for  pid=6278 comm="syz.5.804" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  114.732608][   T29] audit: type=1326 audit(1733311993.133:10341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6277 comm="syz.3.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe99da0ff19 code=0x7ffc0000
[  114.733508][ T6279] loop5: detected capacity change from 0 to 1024
[  114.756099][   T29] audit: type=1326 audit(1733311993.133:10342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6277 comm="syz.3.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe99da0ff19 code=0x7ffc0000
[  114.756165][   T29] audit: type=1326 audit(1733311993.133:10343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6277 comm="syz.3.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe99da0ff19 code=0x7ffc0000
[  114.763069][ T3379] page_pool_release_retry() stalled pool shutdown: id 34, 1 inflight 60 sec
[  114.786001][   T29] audit: type=1326 audit(1733311993.133:10344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6277 comm="syz.3.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe99da0ff19 code=0x7ffc0000
[  114.815156][ T6285] netlink: 4 bytes leftover after parsing attributes in process `syz.1.794'.
[  114.824730][ T6279] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  114.862266][ T6279] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  114.870648][ T6279] EXT4-fs (loop5): orphan cleanup on readonly fs
[  114.879106][ T6279] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5837: Corrupt filesystem
[  114.888933][ T6279] EXT4-fs (loop5): Remounting filesystem read-only
[  114.895666][ T6279] EXT4-fs (loop5): 1 orphan inode deleted
[  114.904237][ T6279] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  114.939096][ T6279] SELinux: (dev loop5, type ext4) getxattr errno 5
[  114.946033][ T6279] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.074863][ T6290] loop5: detected capacity change from 0 to 128
[  115.101185][ T6290] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  115.138887][ T6290] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  115.158287][ T6290] xt_hashlimit: size too large, truncated to 1048576
[  115.218629][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  115.285592][ T6297] loop4: detected capacity change from 0 to 1024
[  115.301345][ T6297] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[  115.321474][ T6297] netlink: 8 bytes leftover after parsing attributes in process `syz.4.799'.
[  115.665604][ T6303] loop3: detected capacity change from 0 to 512
[  115.677771][ T6303] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  115.689143][ T6303] EXT4-fs (loop3): 1 truncate cleaned up
[  115.695202][ T6303] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  115.725517][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.906588][ T6307] loop5: detected capacity change from 0 to 8192
[  115.924793][ T6307] vfat: Unknown parameter ''
[  115.978338][ T6314] block device autoloading is deprecated and will be removed.
[  116.003863][ T6314] bio_check_eod: 16 callbacks suppressed
[  116.003883][ T6314] syz.3.815: attempt to access beyond end of device
[  116.003883][ T6314] md34: rw=2048, sector=0, nr_sectors = 8 limit=0
[  116.231675][ T6332] loop3: detected capacity change from 0 to 1024
[  116.240764][ T6332] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  116.251843][ T6332] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  116.259997][ T6332] EXT4-fs (loop3): orphan cleanup on readonly fs
[  116.266934][ T6332] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5837: Corrupt filesystem
[  116.268615][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  116.276553][ T6332] EXT4-fs (loop3): Remounting filesystem read-only
[  116.289916][ T6332] EXT4-fs (loop3): 1 orphan inode deleted
[  116.297059][ T6332] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  116.309098][ T6332] SELinux: (dev loop3, type ext4) getxattr errno 5
[  116.316081][ T6332] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  116.330787][ T6342] loop4: detected capacity change from 0 to 512
[  116.357120][ T6342] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.4.812: corrupted xattr block 95: invalid header
[  116.371430][ T6342] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.812: bg 0: block 7: invalid block bitmap
[  116.383959][ T6342] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem
[  116.393286][ T6342] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2977: inode #11: comm syz.4.812: corrupted xattr block 95: invalid header
[  116.407056][ T6342] EXT4-fs warning (device loop4): ext4_evict_inode:276: xattr delete (err -117)
[  116.416508][ T6342] EXT4-fs (loop4): 1 orphan inode deleted
[  116.423328][ T6342] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  116.448953][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  116.485016][ T6350] loop4: detected capacity change from 0 to 512
[  116.492523][ T6348] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6348 comm=+}[@
[  116.493647][ T6350] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  116.522939][ T6350] EXT4-fs (loop4): 1 truncate cleaned up
[  116.529750][ T6350] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  116.563540][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  116.655505][ T6354] netlink: 12 bytes leftover after parsing attributes in process `syz.4.816'.
[  116.721655][ T6362] loop4: detected capacity change from 0 to 512
[  116.746966][ T6364] @: (slave bridge0): Releasing backup interface
[  116.747136][ T6362] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  116.766186][ T6362] ext4 filesystem being mounted at /181/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  116.774560][ T6364] bridge_slave_0: left allmulticast mode
[  116.778396][ T6362] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  116.782352][ T6364] bridge_slave_0: left promiscuous mode
[  116.797033][ T6364] bridge0: port 1(bridge_slave_0) entered disabled state
[  116.806572][ T6364] bridge_slave_1: left allmulticast mode
[  116.812387][ T6364] bridge_slave_1: left promiscuous mode
[  116.818180][ T6364] bridge0: port 2(bridge_slave_1) entered disabled state
[  116.828268][ T6364] @: (slave bond_slave_1): Releasing backup interface
[  116.843050][ T6364] team0: Port device team_slave_0 removed
[  116.862254][ T6364] team0: Port device team_slave_1 removed
[  116.869767][ T6364] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  116.877343][ T6364] batman_adv: batadv0: Removing interface: batadv_slave_0
[  116.886814][ T6364] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  116.894262][ T6364] batman_adv: batadv0: Removing interface: batadv_slave_1
[  117.180699][ T6379] loop2: detected capacity change from 0 to 512
[  117.197147][ T6379] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.2.827: corrupted xattr block 95: invalid header
[  117.218923][ T6379] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.827: bg 0: block 7: invalid block bitmap
[  117.232624][ T6379] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem
[  117.243161][ T6379] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2977: inode #11: comm syz.2.827: corrupted xattr block 95: invalid header
[  117.257421][ T6379] EXT4-fs warning (device loop2): ext4_evict_inode:276: xattr delete (err -117)
[  117.266709][ T6379] EXT4-fs (loop2): 1 orphan inode deleted
[  117.308595][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  117.346409][ T6385] netlink: 'syz.1.828': attribute type 4 has an invalid length.
[  117.357838][ T6385] netlink: 'syz.1.828': attribute type 4 has an invalid length.
[  117.406582][ T6388] siw: device registration error -23
[  117.410208][ T6389] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6389 comm=+}[@
[  117.490360][ T6395] loop3: detected capacity change from 0 to 512
[  117.521056][ T6395] ext4 filesystem being mounted at /154/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  117.563638][ T6395] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #20: comm syz.3.833: corrupted inode contents
[  117.576488][ T6395] EXT4-fs error (device loop3): ext4_dirty_inode:6041: inode #20: comm syz.3.833: mark_inode_dirty error
[  117.588204][ T6395] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #20: comm syz.3.833: corrupted inode contents
[  117.600656][ T6395] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3006: inode #20: comm syz.3.833: mark_inode_dirty error
[  117.613177][ T6395] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3009: inode #20: comm syz.3.833: mark inode dirty (error -117)
[  117.637363][ T6395] EXT4-fs warning (device loop3): ext4_evict_inode:276: xattr delete (err -117)
[  117.916215][ T6408] syz.4.837[6408] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  117.916295][ T6408] syz.4.837[6408] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  117.927883][ T6408] syz.4.837[6408] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  117.940333][ T6408] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6408 comm=syz.4.837
[  118.259030][ T6419] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6419 comm=+}[@
[  118.338600][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  118.531922][ T6429] sg_write: data in/out 588840944/3 bytes for SCSI command 0x94-- guessing data in;
[  118.531922][ T6429]    program syz.1.845 not setting count and/or reply_len properly
[  118.552945][ T6429] rdma_rxe: rxe_newlink: failed to add bond0
[  118.563227][ T6429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  118.573569][ T6429] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  118.588895][ T6430] netlink: 20 bytes leftover after parsing attributes in process `syz.2.843'.
[  118.597826][ T6430] netlink: 8 bytes leftover after parsing attributes in process `syz.2.843'.
[  118.613879][ T6429] netlink: 4 bytes leftover after parsing attributes in process `syz.1.845'.
[  118.905754][ T6432] loop5: detected capacity change from 0 to 512
[  118.913574][ T6432] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[  118.945534][ T6432] netlink: 12 bytes leftover after parsing attributes in process `syz.5.846'.
[  118.959237][ T6432] team0: left allmulticast mode
[  118.964147][ T6432] team_slave_0: left allmulticast mode
[  118.969665][ T6432] team_slave_1: left allmulticast mode
[  118.975266][ T6432] bridge0: port 3(team0) entered disabled state
[  118.983893][ T6432] bridge_slave_1: left allmulticast mode
[  118.989625][ T6432] bridge_slave_1: left promiscuous mode
[  118.995382][ T6432] bridge0: port 2(bridge_slave_1) entered disabled state
[  119.003470][ T6432] bridge_slave_0: left allmulticast mode
[  119.009197][ T6432] bridge_slave_0: left promiscuous mode
[  119.014868][ T6432] bridge0: port 1(bridge_slave_0) entered disabled state
[  119.035780][ T6435] No such timeout policy "syz0"
[  119.042741][ T6435] loop5: detected capacity change from 0 to 128
[  119.056087][ T6435] FAT-fs (loop5): bogus number of reserved sectors
[  119.062711][ T6435] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[  119.072061][ T6435] FAT-fs (loop5): Can't find a valid FAT filesystem
[  119.378608][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  120.022226][   T29] kauditd_printk_skb: 814 callbacks suppressed
[  120.022243][   T29] audit: type=1326 audit(1733311998.503:11151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6454 comm="syz.1.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92f48aff19 code=0x7ffc0000
[  120.075675][ T6459] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6459 comm=+}[@
[  120.089774][ T6460] loop2: detected capacity change from 0 to 2048
[  120.096349][   T29] audit: type=1326 audit(1733311998.513:11152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6454 comm="syz.1.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f92f48aff19 code=0x7ffc0000
[  120.119936][   T29] audit: type=1326 audit(1733311998.513:11153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6454 comm="syz.1.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92f48aff19 code=0x7ffc0000
[  120.143572][   T29] audit: type=1326 audit(1733311998.513:11154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6454 comm="syz.1.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f92f48aff19 code=0x7ffc0000
[  120.166919][   T29] audit: type=1326 audit(1733311998.513:11155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6454 comm="syz.1.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92f48aff19 code=0x7ffc0000
[  120.190376][   T29] audit: type=1326 audit(1733311998.513:11156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6454 comm="syz.1.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f92f48aff19 code=0x7ffc0000
[  120.213802][   T29] audit: type=1326 audit(1733311998.513:11157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6454 comm="syz.1.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92f48aff19 code=0x7ffc0000
[  120.237352][   T29] audit: type=1326 audit(1733311998.513:11158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6454 comm="syz.1.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f92f48aff19 code=0x7ffc0000
[  120.260876][   T29] audit: type=1326 audit(1733311998.513:11159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6454 comm="syz.1.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92f48aff19 code=0x7ffc0000
[  120.284335][   T29] audit: type=1326 audit(1733311998.513:11160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6454 comm="syz.1.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f92f48aff19 code=0x7ffc0000
[  120.374501][ T6473] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  120.389701][ T6473] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  120.401976][ T6473] EXT4-fs (loop2): This should not happen!! Data will be lost
[  120.401976][ T6473] 
[  120.411693][ T6473] EXT4-fs (loop2): Total free blocks count 0
[  120.417701][ T6473] EXT4-fs (loop2): Free/Dirty block details
[  120.423656][ T6473] EXT4-fs (loop2): free_blocks=2415919104
[  120.428677][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  120.429439][ T6473] EXT4-fs (loop2): dirty_blocks=2128
[  120.441705][ T6473] EXT4-fs (loop2): Block reservation details
[  120.447765][ T6473] EXT4-fs (loop2): i_reserved_data_blocks=133
[  120.693460][ T6482] loop4: detected capacity change from 0 to 512
[  120.796314][ T6482] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.4.855: corrupted xattr block 95: invalid header
[  120.811674][ T6482] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.855: bg 0: block 7: invalid block bitmap
[  120.825220][ T6482] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem
[  120.834569][ T6482] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2977: inode #11: comm syz.4.855: corrupted xattr block 95: invalid header
[  120.848615][ T6482] EXT4-fs warning (device loop4): ext4_evict_inode:276: xattr delete (err -117)
[  120.857696][ T6482] EXT4-fs (loop4): 1 orphan inode deleted
[  121.458586][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  121.566067][   T36] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28
[  121.578335][   T36] EXT4-fs (loop2): This should not happen!! Data will be lost
[  121.578335][   T36] 
[  122.201481][ T6498] netlink: 12 bytes leftover after parsing attributes in process `syz.4.864'.
[  122.234977][ T6495] vlan0: entered promiscuous mode
[  122.240183][ T6495] batadv0: entered promiscuous mode
[  122.249899][ T6495] batadv0: left promiscuous mode
[  122.399579][ T6506] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6506 comm=+}[@
[  122.498629][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  122.538980][ T6509] loop1: detected capacity change from 0 to 1024
[  122.610213][ T6509] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.868: Failed to acquire dquot type 0
[  123.538598][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  124.578586][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  125.378567][   T29] kauditd_printk_skb: 312 callbacks suppressed
[  125.378587][   T29] audit: type=1326 audit(1733312001.073:11471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6503 comm="syz.4.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f917332ff19 code=0x7ffc0000
[  125.408324][   T29] audit: type=1326 audit(1733312001.073:11472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6503 comm="syz.4.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f917332ff19 code=0x7ffc0000
[  125.618581][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  125.772719][ T6509] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt.
[  125.798354][ T6513] loop5: detected capacity change from 0 to 512
[  125.806005][ T6509] EXT4-fs error (device loop1): ext4_do_update_inode:5153: inode #13: comm syz.1.868: corrupted inode contents
[  125.816801][   T29] audit: type=1400 audit(1733312004.293:11473): avc:  denied  { bind } for  pid=6511 comm="syz.2.869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  125.823812][ T6516] netlink: 4 bytes leftover after parsing attributes in process `syz.4.870'.
[  125.837289][   T29] audit: type=1400 audit(1733312004.293:11474): avc:  denied  { name_bind } for  pid=6511 comm="syz.2.869" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[  125.867195][   T29] audit: type=1400 audit(1733312004.293:11475): avc:  denied  { node_bind } for  pid=6511 comm="syz.2.869" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[  125.891552][ T6509] EXT4-fs error (device loop1): ext4_dirty_inode:6041: inode #13: comm syz.1.868: mark_inode_dirty error
[  125.910161][ T6509] EXT4-fs error (device loop1): ext4_do_update_inode:5153: inode #13: comm syz.1.868: corrupted inode contents
[  125.921785][ T6520] loop3: detected capacity change from 0 to 512
[  125.923387][ T6509] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #13: comm syz.1.868: mark_inode_dirty error
[  125.939819][ T6509] EXT4-fs error (device loop1): ext4_do_update_inode:5153: inode #13: comm syz.1.868: corrupted inode contents
[  125.940737][ T6513] ext4 filesystem being mounted at /125/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  125.951955][ T6509] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem
[  125.971430][ T6509] EXT4-fs error (device loop1): ext4_do_update_inode:5153: inode #13: comm syz.1.868: corrupted inode contents
[  125.985243][ T6516] netlink: 'syz.4.870': attribute type 4 has an invalid length.
[  125.992973][ T6516] netlink: 17 bytes leftover after parsing attributes in process `syz.4.870'.
[  125.999760][   T29] audit: type=1326 audit(1733312004.483:11476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6522 comm="syz.2.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a99b8ff19 code=0x7ffc0000
[  126.025369][   T29] audit: type=1326 audit(1733312004.483:11477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6522 comm="syz.2.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a99b8ff19 code=0x7ffc0000
[  126.049948][ T6509] EXT4-fs error (device loop1): ext4_truncate:4240: inode #13: comm syz.1.868: mark_inode_dirty error
[  126.053074][   T29] audit: type=1326 audit(1733312004.533:11478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6522 comm="syz.2.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4a99b8ff19 code=0x7ffc0000
[  126.065040][ T6509] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem
[  126.084431][   T29] audit: type=1326 audit(1733312004.533:11479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6522 comm="syz.2.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a99b8ff19 code=0x7ffc0000
[  126.116809][   T29] audit: type=1326 audit(1733312004.533:11480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6522 comm="syz.2.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a99b8ff19 code=0x7ffc0000
[  126.117203][ T6509] EXT4-fs (loop1): 1 truncate cleaned up
[  126.147330][ T6520] ext4 filesystem being mounted at /162/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  126.165141][ T6520] Process accounting resumed
[  126.192524][ T6529] syz.4.876 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  126.212582][ T6520] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback.
[  126.253433][ T6532] netlink: 12 bytes leftover after parsing attributes in process `syz.5.875'.
[  126.330685][ T6541] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6541 comm=+}[@
[  126.424509][ T6544] loop5: detected capacity change from 0 to 128
[  126.479294][ T6546] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  126.597140][ T6552] netlink: 'syz.5.881': attribute type 4 has an invalid length.
[  126.618763][ T6552] netlink: 'syz.5.881': attribute type 4 has an invalid length.
[  126.662873][ T6560] bridge_slave_0: left allmulticast mode
[  126.668656][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  126.675706][ T6560] bridge_slave_0: left promiscuous mode
[  126.681720][ T6560] bridge0: port 1(bridge_slave_0) entered disabled state
[  126.693808][ T6560] bridge_slave_1: left allmulticast mode
[  126.699704][ T6560] bridge_slave_1: left promiscuous mode
[  126.705513][ T6560] bridge0: port 2(bridge_slave_1) entered disabled state
[  126.722000][ T6560] @: (slave bond_slave_0): Releasing backup interface
[  126.746846][ T6560] @: (slave bond_slave_1): Releasing backup interface
[  126.829681][ T6568] loop4: detected capacity change from 0 to 2048
[  126.854951][ T6571] loop3: detected capacity change from 0 to 512
[  126.873648][ T6571] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002]
[  126.882415][ T6571] System zones: 0-2, 18-18, 34-34
[  126.884353][ T6568] netlink: 28 bytes leftover after parsing attributes in process `syz.4.885'.
[  126.896544][ T6568] netlink: 28 bytes leftover after parsing attributes in process `syz.4.885'.
[  126.908072][ T6571] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.886: bg 0: block 248: padding at end of block bitmap is not set
[  126.931576][ T6571] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.886: Failed to acquire dquot type 1
[  126.940870][ T6563] loop5: detected capacity change from 0 to 512
[  126.954635][ T6571] EXT4-fs (loop3): 1 truncate cleaned up
[  126.960787][ T6571] ext4 filesystem being mounted at /163/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  126.972191][ T6563] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002]
[  126.980822][ T6563] System zones: 0-2, 18-18, 34-34
[  126.986925][ T6563] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.884: bg 0: block 248: padding at end of block bitmap is not set
[  127.002274][ T6563] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.884: Failed to acquire dquot type 1
[  127.002377][ T6571] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback.
[  127.024499][ T6563] EXT4-fs (loop5): 1 truncate cleaned up
[  127.030716][ T6563] ext4 filesystem being mounted at /130/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  127.170569][ T6586] syz.3.888[6586] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  127.170646][ T6586] syz.3.888[6586] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  127.182286][ T6586] syz.3.888[6586] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  127.197814][ T6586] netlink: 4 bytes leftover after parsing attributes in process `syz.3.888'.
[  127.293911][ T6587] netlink: 'syz.2.889': attribute type 10 has an invalid length.
[  127.304725][ T6590] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  127.313721][ T6587] team0: Failed to send options change via netlink (err -105)
[  127.322926][ T6587] team0: Port device netdevsim1 added
[  127.337407][ T1311] team0: Failed to send port change of device netdevsim1 via netlink (err -105)
[  127.708621][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  127.763987][ T6601] loop5: detected capacity change from 0 to 1024
[  127.782259][ T6601] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  127.803700][ T6601] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  127.812610][ T6601] EXT4-fs (loop5): orphan cleanup on readonly fs
[  127.823924][ T6601] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5837: Corrupt filesystem
[  127.849176][ T6601] EXT4-fs (loop5): Remounting filesystem read-only
[  127.856123][ T6601] EXT4-fs (loop5): 1 orphan inode deleted
[  127.862739][ T6601] SELinux: (dev loop5, type ext4) getxattr errno 5
[  127.919399][ T6613] loop5: detected capacity change from 0 to 2048
[  127.950535][ T6614] loop3: detected capacity change from 0 to 256
[  128.042928][ T6613] netlink: 28 bytes leftover after parsing attributes in process `syz.5.898'.
[  128.051991][ T6613] netlink: 28 bytes leftover after parsing attributes in process `syz.5.898'.
[  128.065684][ T6613] netdevsim netdevsim5 netdevsim0: entered promiscuous mode
[  128.074841][ T6613] @: entered promiscuous mode
[  128.079596][ T6613] bond_slave_0: entered promiscuous mode
[  128.085443][ T6613] bond_slave_1: entered promiscuous mode
[  128.190006][ T6618] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6618 comm=+}[@
[  128.748632][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  128.785294][ T6624] netlink: 20 bytes leftover after parsing attributes in process `syz.1.901'.
[  128.794228][ T6624] netlink: 8 bytes leftover after parsing attributes in process `syz.1.901'.
[  129.574485][ T6632] loop4: detected capacity change from 0 to 512
[  129.581172][ T6632] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[  129.683302][ T6632] loop4: detected capacity change from 0 to 128
[  129.699584][ T6632] FAT-fs (loop4): bogus number of reserved sectors
[  129.706140][ T6632] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[  129.715543][ T6632] FAT-fs (loop4): Can't find a valid FAT filesystem
[  129.744725][ T6649] loop5: detected capacity change from 0 to 2048
[  129.778623][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  129.787580][ T6649] EXT4-fs mount: 20 callbacks suppressed
[  129.787596][ T6649] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  129.886628][ T6649] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  129.929572][ T6657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  129.959544][ T6657] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  130.035064][ T6649] program syz.5.909 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  130.092583][ T6661] loop2: detected capacity change from 0 to 512
[  130.102786][ T3909] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  130.175706][ T6661] EXT4-fs (loop2): too many log groups per flexible block group
[  130.183515][ T6661] EXT4-fs (loop2): failed to initialize mballoc (-12)
[  130.209304][ T6667] sd 0:0:1:0: device reset
[  130.244228][ T6661] EXT4-fs (loop2): mount failed
[  130.255589][ T6667] loop5: detected capacity change from 0 to 512
[  130.271524][ T6661] loop2: detected capacity change from 0 to 256
[  130.304511][ T6661] FAT-fs (loop2): IO charset cp869 not found
[  130.320882][ T6667] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  130.378772][ T6667] ext4 filesystem being mounted at /139/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  130.436639][   T29] kauditd_printk_skb: 821 callbacks suppressed
[  130.436658][   T29] audit: type=1326 audit(1733312008.913:12294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6654 comm="syz.4.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f917332ff19 code=0x7ffc0000
[  130.466421][   T29] audit: type=1326 audit(1733312008.913:12295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6654 comm="syz.4.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f917332ff19 code=0x7ffc0000
[  130.503449][ T3909] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  130.543075][ T6681] loop1: detected capacity change from 0 to 1024
[  130.562208][ T6682] IPVS: Error connecting to the multicast addr
[  130.569655][   T29] audit: type=1326 audit(1733312009.043:12296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6679 comm="syz.5.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafb94eff19 code=0x7ffc0000
[  130.593265][   T29] audit: type=1326 audit(1733312009.043:12297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6679 comm="syz.5.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafb94eff19 code=0x7ffc0000
[  130.616751][   T29] audit: type=1326 audit(1733312009.043:12298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6679 comm="syz.5.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fafb94eff19 code=0x7ffc0000
[  130.640242][   T29] audit: type=1326 audit(1733312009.043:12299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6679 comm="syz.5.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafb94eff19 code=0x7ffc0000
[  130.663849][   T29] audit: type=1326 audit(1733312009.043:12300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6679 comm="syz.5.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fafb94eff19 code=0x7ffc0000
[  130.671999][ T6681] ext4: Bad value for 'auto_da_alloc'
[  130.687333][   T29] audit: type=1326 audit(1733312009.043:12301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6679 comm="syz.5.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafb94eff19 code=0x7ffc0000
[  130.716245][   T29] audit: type=1326 audit(1733312009.043:12302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6679 comm="syz.5.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fafb94eff19 code=0x7ffc0000
[  130.724736][ T6681] netlink: 'syz.1.918': attribute type 27 has an invalid length.
[  130.739750][   T29] audit: type=1326 audit(1733312009.043:12303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6679 comm="syz.5.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafb94eff19 code=0x7ffc0000
[  130.802933][ T6681] bridge0: port 2(bridge_slave_1) entered disabled state
[  130.810304][ T6681] bridge0: port 1(bridge_slave_0) entered disabled state
[  130.818637][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  130.854346][ T6674] loop3: detected capacity change from 0 to 512
[  130.866635][ T6681] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  130.875841][ T6674] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002]
[  130.884396][ T6674] System zones: 0-2, 18-18, 34-34
[  130.891205][ T6681] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  130.891309][ T6674] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.916: bg 0: block 248: padding at end of block bitmap is not set
[  130.914600][ T6674] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.916: Failed to acquire dquot type 1
[  130.927193][ T6674] EXT4-fs (loop3): 1 truncate cleaned up
[  130.933298][ T6674] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  130.946154][ T6674] ext4 filesystem being mounted at /167/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  130.958400][ T6681] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  130.966839][ T6681] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  130.975344][ T6681] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  130.983818][ T6681] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  130.993289][ T6681] team0: left promiscuous mode
[  130.998113][ T6681] team_slave_0: left promiscuous mode
[  131.003626][ T6681] team_slave_1: left promiscuous mode
[  131.039087][ T6688] netlink: 'syz.2.920': attribute type 3 has an invalid length.
[  131.111404][ T6692] loop2: detected capacity change from 0 to 128
[  131.232798][ T6693] netlink: 'syz.1.919': attribute type 10 has an invalid length.
[  131.271640][ T6701] syz.4.925[6701] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  131.271715][ T6701] syz.4.925[6701] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  131.283886][ T6701] syz.4.925[6701] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  131.309952][ T6701] __nla_validate_parse: 1 callbacks suppressed
[  131.309968][ T6701] netlink: 4 bytes leftover after parsing attributes in process `syz.4.925'.
[  131.337894][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  131.475855][ T6713] loop4: detected capacity change from 0 to 2048
[  131.490492][ T6713] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  131.564275][ T6720] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  131.593018][ T6720] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  131.605388][ T6720] EXT4-fs (loop4): This should not happen!! Data will be lost
[  131.605388][ T6720] 
[  131.615340][ T6720] EXT4-fs (loop4): Total free blocks count 0
[  131.621391][ T6720] EXT4-fs (loop4): Free/Dirty block details
[  131.627675][ T6720] EXT4-fs (loop4): free_blocks=2415919104
[  131.633483][ T6720] EXT4-fs (loop4): dirty_blocks=1232
[  131.638860][ T6720] EXT4-fs (loop4): Block reservation details
[  131.643178][ T6722] loop6: detected capacity change from 0 to 7
[  131.644843][ T6720] EXT4-fs (loop4): i_reserved_data_blocks=77
[  131.685005][ T6722] buffer_io_error: 1303 callbacks suppressed
[  131.685021][ T6722] Buffer I/O error on dev loop6, logical block 0, async page read
[  131.725831][ T6722] Buffer I/O error on dev loop6, logical block 0, async page read
[  131.733770][ T6722]  loop6: unable to read partition table
[  131.761814][ T6725] loop3: detected capacity change from 0 to 128
[  131.775839][ T6722] loop_reread_partitions: partition scan of loop6 (�被x������ڬ��dƤ����ݡ�����
[  131.775839][ T6722] 
) failed (rc=-5)
[  131.858618][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  131.944944][ T6727] loop5: detected capacity change from 0 to 2048
[  131.996886][ T6727] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  132.040841][ T6727] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  132.054352][ T6725] syz.3.930: attempt to access beyond end of device
[  132.054352][ T6725] loop3: rw=2049, sector=356, nr_sectors = 8 limit=128
[  132.056389][ T6727] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28
[  132.079398][ T6725] syz.3.930: attempt to access beyond end of device
[  132.079398][ T6725] loop3: rw=2049, sector=372, nr_sectors = 8 limit=128
[  132.081083][ T6727] EXT4-fs (loop5): This should not happen!! Data will be lost
[  132.081083][ T6727] 
[  132.104099][ T6727] EXT4-fs (loop5): Total free blocks count 0
[  132.110164][ T6727] EXT4-fs (loop5): Free/Dirty block details
[  132.116207][ T6727] EXT4-fs (loop5): free_blocks=2415919104
[  132.122053][ T6727] EXT4-fs (loop5): dirty_blocks=16
[  132.125165][ T6725] syz.3.930: attempt to access beyond end of device
[  132.125165][ T6725] loop3: rw=2049, sector=388, nr_sectors = 8 limit=128
[  132.127163][ T6727] EXT4-fs (loop5): Block reservation details
[  132.146481][ T6727] EXT4-fs (loop5): i_reserved_data_blocks=1
[  132.152692][ T6725] syz.3.930: attempt to access beyond end of device
[  132.152692][ T6725] loop3: rw=2049, sector=404, nr_sectors = 8 limit=128
[  132.166199][ T6725] syz.3.930: attempt to access beyond end of device
[  132.166199][ T6725] loop3: rw=2049, sector=420, nr_sectors = 8 limit=128
[  132.179745][ T6725] syz.3.930: attempt to access beyond end of device
[  132.179745][ T6725] loop3: rw=2049, sector=436, nr_sectors = 8 limit=128
[  132.193121][ T6725] syz.3.930: attempt to access beyond end of device
[  132.193121][ T6725] loop3: rw=2049, sector=452, nr_sectors = 8 limit=128
[  132.208580][ T6725] syz.3.930: attempt to access beyond end of device
[  132.208580][ T6725] loop3: rw=2049, sector=468, nr_sectors = 8 limit=128
[  132.222572][ T6725] syz.3.930: attempt to access beyond end of device
[  132.222572][ T6725] loop3: rw=2049, sector=484, nr_sectors = 8 limit=128
[  132.236184][ T6725] syz.3.930: attempt to access beyond end of device
[  132.236184][ T6725] loop3: rw=2049, sector=500, nr_sectors = 8 limit=128
[  132.259497][ T3909] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  132.280506][   T36] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28
[  132.379245][ T6738] netlink: 76 bytes leftover after parsing attributes in process `syz.2.938'.
[  132.648397][ T6748] loop4: detected capacity change from 0 to 512
[  132.681081][ T6748] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002]
[  132.698830][ T6748] System zones: 0-2, 18-18, 34-34
[  132.705228][ T6748] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.937: bg 0: block 248: padding at end of block bitmap is not set
[  132.722157][ T6748] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.937: Failed to acquire dquot type 1
[  132.736470][ T6748] EXT4-fs (loop4): 1 truncate cleaned up
[  132.743828][ T6748] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  132.756448][ T6748] ext4 filesystem being mounted at /206/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  132.908622][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  132.942596][ T6756] loop2: detected capacity change from 0 to 512
[  132.980544][ T6756] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002]
[  132.989168][ T6756] System zones: 0-2, 18-18, 34-34
[  132.995007][ T6756] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.941: bg 0: block 248: padding at end of block bitmap is not set
[  133.010840][ T6756] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.941: Failed to acquire dquot type 1
[  133.023848][ T6756] EXT4-fs (loop2): 1 truncate cleaned up
[  133.030543][ T6756] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  133.043349][ T6756] ext4 filesystem being mounted at /204/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  133.062861][ T6756] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback.
[  133.085911][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  133.146678][ T6760] loop2: detected capacity change from 0 to 512
[  133.153539][ T6760] EXT4-fs: Ignoring removed i_version option
[  133.159671][ T6760] EXT4-fs: Ignoring removed mblk_io_submit option
[  133.167170][ T6760] EXT4-fs: dax option not supported
[  133.176530][ T6760] loop2: detected capacity change from 0 to 256
[  133.356984][ T6765] sd 0:0:1:0: device reset
[  133.381238][ T6765] loop1: detected capacity change from 0 to 512
[  133.403026][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  133.413926][ T6765] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  133.429821][ T6765] ext4 filesystem being mounted at /179/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  133.459646][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  133.502670][ T6772] loop4: detected capacity change from 0 to 2048
[  133.598007][ T6772] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  133.640386][ T6772] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  133.656387][ T6772] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28
[  133.668653][ T6772] EXT4-fs (loop4): This should not happen!! Data will be lost
[  133.668653][ T6772] 
[  133.678316][ T6772] EXT4-fs (loop4): Total free blocks count 0
[  133.683023][ T6782] loop5: detected capacity change from 0 to 2048
[  133.684353][ T6772] EXT4-fs (loop4): Free/Dirty block details
[  133.696687][ T6772] EXT4-fs (loop4): free_blocks=2415919104
[  133.702539][ T6772] EXT4-fs (loop4): dirty_blocks=16
[  133.707680][ T6772] EXT4-fs (loop4): Block reservation details
[  133.713710][ T6772] EXT4-fs (loop4): i_reserved_data_blocks=1
[  133.726535][ T6782] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  133.768671][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  133.797910][ T6788] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  133.940715][ T6790] loop1: detected capacity change from 0 to 256
[  133.948602][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  133.948822][ T6788] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  133.967736][ T6788] EXT4-fs (loop5): This should not happen!! Data will be lost
[  133.967736][ T6788] 
[  133.977413][ T6788] EXT4-fs (loop5): Total free blocks count 0
[  133.983449][ T6788] EXT4-fs (loop5): Free/Dirty block details
[  133.989380][ T6788] EXT4-fs (loop5): free_blocks=2415919104
[  133.995203][ T6788] EXT4-fs (loop5): dirty_blocks=1872
[  134.000542][ T6788] EXT4-fs (loop5): Block reservation details
[  134.006534][ T6788] EXT4-fs (loop5): i_reserved_data_blocks=117
[  134.722461][ T1313] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28
[  134.988575][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  135.481611][   T29] kauditd_printk_skb: 489 callbacks suppressed
[  135.481629][   T29] audit: type=1326 audit(1733312013.963:12787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6800 comm="syz.1.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92f48aff19 code=0x7ffc0000
[  135.511465][   T29] audit: type=1326 audit(1733312013.963:12788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6800 comm="syz.1.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92f48aff19 code=0x7ffc0000
[  135.681111][ T6811] loop2: detected capacity change from 0 to 1024
[  135.687876][ T6811] ext4: Bad value for 'auto_da_alloc'
[  135.696133][   T29] audit: type=1400 audit(1733312014.173:12789): avc:  denied  { write } for  pid=6810 comm="syz.2.956" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  135.724403][ T6811] netlink: 'syz.2.956': attribute type 27 has an invalid length.
[  135.724527][   T29] audit: type=1400 audit(1733312014.193:12790): avc:  denied  { write } for  pid=6810 comm="syz.2.956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  135.751743][   T29] audit: type=1400 audit(1733312014.193:12791): avc:  denied  { connect } for  pid=6810 comm="syz.2.956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  135.771439][   T29] audit: type=1400 audit(1733312014.193:12792): avc:  denied  { name_connect } for  pid=6810 comm="syz.2.956" dest=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1
[  135.816545][ T6811] bridge0: left allmulticast mode
[  135.837017][ T6811] wg2: left promiscuous mode
[  135.841715][ T6811] wg2: left allmulticast mode
[  135.854063][   T29] audit: type=1400 audit(1733312014.323:12793): avc:  denied  { unlink } for  pid=3303 comm="syz-executor" name="file0" dev="tmpfs" ino=969 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  135.879715][   T29] audit: type=1326 audit(1733312014.333:12794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6813 comm="syz.3.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe99da0ff19 code=0x7ffc0000
[  135.903264][   T29] audit: type=1326 audit(1733312014.333:12795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6813 comm="syz.3.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe99da0ff19 code=0x7ffc0000
[  135.926782][   T29] audit: type=1326 audit(1733312014.333:12796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6813 comm="syz.3.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7fe99da0ff19 code=0x7ffc0000
[  136.019411][ T6817] loop5: detected capacity change from 0 to 128
[  136.028578][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  136.034054][ T6817] FAT-fs (loop5): bogus logical sector size 12
[  136.041675][ T6817] FAT-fs (loop5): Can't find a valid FAT filesystem
[  136.064989][ T6817] loop5: detected capacity change from 0 to 512
[  136.090565][ T6811] netdevsim netdevsim2 ������*�'����0|: unset [1, 0] type 2 family 0 port 6081 - 0
[  136.100132][ T6811] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  136.101511][ T6817] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  136.109101][ T6811] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  136.109142][ T6811] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  136.134715][ T6819] netlink: 28 bytes leftover after parsing attributes in process `syz.4.958'.
[  136.144897][ T6819] netlink: 28 bytes leftover after parsing attributes in process `syz.4.958'.
[  136.164295][ T6821] loop3: detected capacity change from 0 to 1024
[  136.176635][ T6821] EXT4-fs: Ignoring removed nomblk_io_submit option
[  136.184599][ T6811] bridge1: left promiscuous mode
[  136.185637][ T6817] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  136.189590][ T6811] bridge1: left allmulticast mode
[  136.208613][ T6819] netlink: 28 bytes leftover after parsing attributes in process `syz.4.958'.
[  136.217549][ T6819] netlink: 28 bytes leftover after parsing attributes in process `syz.4.958'.
[  136.221870][ T6823] vlan0: entered promiscuous mode
[  136.231658][ T6823] batadv0: entered promiscuous mode
[  136.244145][ T6821] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  136.253067][ T6823] batadv0: left promiscuous mode
[  136.271769][ T6817] team_slave_0: left promiscuous mode
[  136.286840][ T6817] team0 (unregistering): Port device team_slave_0 removed
[  136.294858][ T6817] team_slave_1: left promiscuous mode
[  136.306527][ T6817] team0 (unregistering): Port device team_slave_1 removed
[  136.359874][ T6837] loop2: detected capacity change from 0 to 1024
[  136.376791][ T6837] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.965: Failed to acquire dquot type 0
[  136.391538][ T6837] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt.
[  136.397817][ T3909] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  136.406530][ T6837] EXT4-fs error (device loop2): ext4_do_update_inode:5153: inode #13: comm syz.2.965: corrupted inode contents
[  136.427826][ T6837] EXT4-fs error (device loop2): ext4_dirty_inode:6041: inode #13: comm syz.2.965: mark_inode_dirty error
[  136.439740][ T6837] EXT4-fs error (device loop2): ext4_do_update_inode:5153: inode #13: comm syz.2.965: corrupted inode contents
[  136.453382][ T6837] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #13: comm syz.2.965: mark_inode_dirty error
[  136.466159][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  136.471844][ T6837] EXT4-fs error (device loop2): ext4_do_update_inode:5153: inode #13: comm syz.2.965: corrupted inode contents
[  136.487544][ T6837] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem
[  136.498052][ T6837] EXT4-fs error (device loop2): ext4_do_update_inode:5153: inode #13: comm syz.2.965: corrupted inode contents
[  136.510738][ T6837] EXT4-fs error (device loop2): ext4_truncate:4240: inode #13: comm syz.2.965: mark_inode_dirty error
[  136.522170][ T6837] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem
[  136.536245][ T6847] loop5: detected capacity change from 0 to 1024
[  136.538888][ T6837] EXT4-fs (loop2): 1 truncate cleaned up
[  136.550525][ T6847] EXT4-fs (loop5): warning: checktime reached, running e2fsck is recommended
[  136.554475][ T6837] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  136.568943][ T6847] EXT4-fs warning (device loop5): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  136.598818][ T6847] EXT4-fs (loop5): mount failed
[  136.617215][ T6847] loop5: detected capacity change from 0 to 128
[  136.626878][ T6837] netlink: 40 bytes leftover after parsing attributes in process `syz.2.965'.
[  136.681033][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  136.726044][ T6859] block device autoloading is deprecated and will be removed.
[  136.877975][ T6867] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0
[  136.972169][ T6873] loop2: detected capacity change from 0 to 128
[  136.988754][ T6873] FAT-fs (loop2): bogus logical sector size 12
[  136.994999][ T6873] FAT-fs (loop2): Can't find a valid FAT filesystem
[  137.017195][ T6873] loop2: detected capacity change from 0 to 512
[  137.025090][ T6873] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  137.058585][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  137.070206][ T6873] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  137.087516][ T6873] team0 (unregistering): Port device netdevsim1 removed
[  137.089945][ T6878] loop4: detected capacity change from 0 to 1024
[  137.102472][ T6878] EXT4-fs: Ignoring removed nomblk_io_submit option
[  137.120746][ T6878] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  137.249991][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  137.271820][ T6888] loop6: detected capacity change from 0 to 7
[  137.278120][ T6888] Buffer I/O error on dev loop6, logical block 0, async page read
[  137.287367][ T6888] Buffer I/O error on dev loop6, logical block 0, async page read
[  137.295264][ T6888]  loop6: unable to read partition table
[  137.301541][ T6888] loop_reread_partitions: partition scan of loop6 (�被x������ڬ��dƤ����ݡ�����
[  137.301541][ T6888] 
) failed (rc=-5)
[  137.339073][ T6888] loop4: detected capacity change from 0 to 128
[  137.379079][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  137.382000][ T6890] loop5: detected capacity change from 0 to 1024
[  137.398019][ T6890] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.983: Failed to acquire dquot type 0
[  137.419289][ T6890] EXT4-fs error (device loop5): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt.
[  137.434221][ T6890] EXT4-fs error (device loop5): ext4_do_update_inode:5153: inode #13: comm syz.5.983: corrupted inode contents
[  137.459442][ T6890] EXT4-fs error (device loop5): ext4_dirty_inode:6041: inode #13: comm syz.5.983: mark_inode_dirty error
[  137.471362][ T6890] EXT4-fs error (device loop5): ext4_do_update_inode:5153: inode #13: comm syz.5.983: corrupted inode contents
[  137.483708][ T6890] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #13: comm syz.5.983: mark_inode_dirty error
[  137.496327][ T6890] EXT4-fs error (device loop5): ext4_do_update_inode:5153: inode #13: comm syz.5.983: corrupted inode contents
[  137.509215][ T6890] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem
[  137.518154][ T6890] EXT4-fs error (device loop5): ext4_do_update_inode:5153: inode #13: comm syz.5.983: corrupted inode contents
[  137.530725][ T6890] EXT4-fs error (device loop5): ext4_truncate:4240: inode #13: comm syz.5.983: mark_inode_dirty error
[  137.542042][ T6890] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem
[  137.552235][ T6890] EXT4-fs (loop5): 1 truncate cleaned up
[  137.558383][ T6890] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  137.585391][ T6890] netlink: 40 bytes leftover after parsing attributes in process `syz.5.983'.
[  137.624135][ T6888] bio_check_eod: 76 callbacks suppressed
[  137.624157][ T6888] syz.4.982: attempt to access beyond end of device
[  137.624157][ T6888] loop4: rw=2049, sector=276, nr_sectors = 8 limit=128
[  137.644311][ T3909] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  137.674533][ T6888] syz.4.982: attempt to access beyond end of device
[  137.674533][ T6888] loop4: rw=2049, sector=292, nr_sectors = 8 limit=128
[  137.689469][ T6888] syz.4.982: attempt to access beyond end of device
[  137.689469][ T6888] loop4: rw=2049, sector=308, nr_sectors = 48 limit=128
[  137.705077][ T6888] syz.4.982: attempt to access beyond end of device
[  137.705077][ T6888] loop4: rw=2049, sector=364, nr_sectors = 8 limit=128
[  137.720719][ T6888] syz.4.982: attempt to access beyond end of device
[  137.720719][ T6888] loop4: rw=2049, sector=380, nr_sectors = 8 limit=128
[  137.768302][ T6902] netlink: 12 bytes leftover after parsing attributes in process `syz.5.987'.
[  137.768701][ T6888] syz.4.982: attempt to access beyond end of device
[  137.768701][ T6888] loop4: rw=2049, sector=396, nr_sectors = 8 limit=128
[  137.791125][ T6888] syz.4.982: attempt to access beyond end of device
[  137.791125][ T6888] loop4: rw=2049, sector=412, nr_sectors = 8 limit=128
[  137.824573][ T6906] loop1: detected capacity change from 0 to 512
[  137.837097][ T6888] syz.4.982: attempt to access beyond end of device
[  137.837097][ T6888] loop4: rw=2049, sector=428, nr_sectors = 8 limit=128
[  137.870323][ T6906] loop1: detected capacity change from 0 to 512
[  137.871239][ T6888] syz.4.982: attempt to access beyond end of device
[  137.871239][ T6888] loop4: rw=2049, sector=444, nr_sectors = 8 limit=128
[  137.904418][ T6888] syz.4.982: attempt to access beyond end of device
[  137.904418][ T6888] loop4: rw=2049, sector=460, nr_sectors = 8 limit=128
[  137.910915][ T6906] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  138.033530][ T6906] EXT4-fs (loop1): 1 truncate cleaned up
[  138.048085][ T6906] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  138.069347][ T6917] loop3: detected capacity change from 0 to 512
[  138.086270][ T6917] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities
[  138.098577][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  138.140082][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  138.171219][ T6922] loop5: detected capacity change from 0 to 256
[  138.175695][ T3376] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  138.184993][ T3376] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  138.192508][ T3376] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  138.200009][ T3376] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  138.207472][ T3376] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  138.214978][ T3376] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  138.222409][ T3376] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  138.229833][ T3376] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  138.237234][ T3376] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  138.244676][ T3376] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  138.252106][ T3376] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  138.259849][ T3376] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  138.267261][ T3376] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  138.274789][ T3376] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  138.282209][ T3376] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  138.289713][ T3376] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  138.297138][ T3376] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  138.304570][ T3376] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  138.312068][ T3376] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  138.319583][ T3376] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  138.327005][ T3376] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  138.334606][ T3376] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  138.342083][ T3376] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  138.349604][ T3376] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  138.357064][ T3376] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  138.364496][ T3376] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  138.371913][ T3376] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  138.379420][ T3376] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  138.386819][ T3376] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  138.394257][ T3376] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  138.401713][ T3376] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  138.409149][ T3376] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  138.416542][ T3376] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  138.423971][ T3376] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  138.431397][ T3376] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  138.438867][ T3376] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  138.446361][ T3376] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  138.453833][ T3376] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  138.461248][ T3376] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  138.468730][ T3376] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  138.476179][ T3376] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  138.483618][ T3376] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  138.491056][ T3376] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  138.499347][ T3376] hid-generic 0000:0000:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  139.106322][ T6962] netlink: 720 bytes leftover after parsing attributes in process `syz.3.1002'.
[  139.126173][ T6962] veth7: entered promiscuous mode
[  139.138593][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  139.321795][ T6970] loop5: detected capacity change from 0 to 2048
[  139.328971][ T6970] EXT4-fs: Ignoring removed mblk_io_submit option
[  139.370905][ T6970] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a840e128, mo2=0102]
[  139.379267][ T6970] System zones: 0-7
[  139.383774][ T6970] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  139.500446][ T6974] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  139.587778][ T6970] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1004: bg 0: block 234: padding at end of block bitmap is not set
[  139.602832][ T6970] EXT4-fs (loop5): Remounting filesystem read-only
[  139.734202][ T3909] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  139.938642][ T3376] page_pool_release_retry() stalled pool shutdown: id 41, 1 inflight 60 sec
[  140.178626][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  140.238110][ T6993] dvmrp1: entered allmulticast mode
[  140.308496][ T6997] loop3: detected capacity change from 0 to 512
[  140.318336][ T6997] EXT4-fs (loop3): can't mount with journal_checksum, fs mounted w/o journal
[  140.491227][   T29] kauditd_printk_skb: 839 callbacks suppressed
[  140.491309][   T29] audit: type=1326 audit(1733312018.973:13632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7000 comm="syz.4.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f917332ff19 code=0x7ffc0000
[  140.521104][   T29] audit: type=1326 audit(1733312018.973:13633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7000 comm="syz.4.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f917332ff19 code=0x7ffc0000
[  140.544605][   T29] audit: type=1326 audit(1733312018.973:13634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7000 comm="syz.4.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f917332ff19 code=0x7ffc0000
[  140.572030][   T29] audit: type=1326 audit(1733312019.053:13635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7000 comm="syz.4.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f917332ff19 code=0x7ffc0000
[  140.595638][   T29] audit: type=1326 audit(1733312019.053:13636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7000 comm="syz.4.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f917332ff19 code=0x7ffc0000
[  140.619218][   T29] audit: type=1326 audit(1733312019.053:13637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7000 comm="syz.4.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f917332ff19 code=0x7ffc0000
[  140.642769][   T29] audit: type=1326 audit(1733312019.053:13638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7000 comm="syz.4.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f917332ff19 code=0x7ffc0000
[  140.666318][   T29] audit: type=1326 audit(1733312019.053:13639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7000 comm="syz.4.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f917332ff19 code=0x7ffc0000
[  140.689936][   T29] audit: type=1326 audit(1733312019.053:13640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7000 comm="syz.4.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f917332ff19 code=0x7ffc0000
[  140.713579][   T29] audit: type=1326 audit(1733312019.053:13641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7000 comm="syz.4.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f917332ff19 code=0x7ffc0000
[  140.807881][ T7006] loop5: detected capacity change from 0 to 128
[  140.819465][ T7006] vfat: Bad value for 'shortname'
[  140.831855][ T7006] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1013'.
[  141.154731][ T7019] loop3: detected capacity change from 0 to 164
[  141.163944][ T7019] ISOFS: unable to read i-node block
[  141.218601][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  141.226247][ T7020] rock: directory entry would overflow storage
[  141.232546][ T7020] rock: sig=0x4f50, size=4, remaining=3
[  141.238136][ T7020] iso9660: Corrupted directory entry in block 4 of inode 1792
[  141.394531][ T7024] loop4: detected capacity change from 0 to 1024
[  141.410060][ T7024] EXT4-fs: Ignoring removed nobh option
[  141.450393][ T7024] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  141.607525][ T7030] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1020'.
[  141.671465][ T7031] loop5: detected capacity change from 0 to 512
[  141.701193][ T7031] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  141.713918][ T7031] ext4 filesystem being mounted at /164/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  141.729551][ T7031] Process accounting resumed
[  141.735669][ T7031] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback.
[  141.795781][ T7036] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1021'.
[  141.901026][ T7018] syz.3.1018 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[  141.912085][ T7018] CPU: 1 UID: 0 PID: 7018 Comm: syz.3.1018 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0
[  141.922805][ T7018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  141.932866][ T7018] Call Trace:
[  141.936166][ T7018]  <TASK>
[  141.939101][ T7018]  dump_stack_lvl+0xf2/0x150
[  141.943729][ T7018]  dump_stack+0x15/0x1a
[  141.947895][ T7018]  dump_header+0x83/0x2d0
[  141.952297][ T7018]  oom_kill_process+0x341/0x4c0
[  141.957159][ T7018]  out_of_memory+0x9af/0xbe0
[  141.961776][ T7018]  ? css_next_descendant_pre+0x11c/0x140
[  141.967417][ T7018]  mem_cgroup_out_of_memory+0x13e/0x190
[  141.973008][ T7018]  try_charge_memcg+0x508/0x7f0
[  141.977870][ T7018]  charge_memcg+0x50/0xc0
[  141.982276][ T7018]  mem_cgroup_swapin_charge_folio+0xd0/0x150
[  141.988285][ T7018]  __read_swap_cache_async+0x236/0x480
[  141.993781][ T7018]  swap_cluster_readahead+0x279/0x3f0
[  141.999276][ T7018]  swapin_readahead+0xe4/0x6f0
[  142.004047][ T7018]  ? __lruvec_stat_mod_folio+0xdb/0x120
[  142.009651][ T7018]  ? swap_cache_get_folio+0x77/0x210
[  142.015018][ T7018]  do_swap_page+0x31b/0x2550
[  142.019722][ T7018]  ? __rcu_read_lock+0x36/0x50
[  142.024504][ T7018]  ? __pfx_default_wake_function+0x10/0x10
[  142.030366][ T7018]  handle_mm_fault+0x8e4/0x2ac0
[  142.035245][ T7018]  exc_page_fault+0x3b9/0x650
[  142.039951][ T7018]  asm_exc_page_fault+0x26/0x30
[  142.044884][ T7018] RIP: 0033:0x7fe99d8e28ac
[  142.049383][ T7018] Code: 72 64 0f 1f 40 00 69 3d 06 2e e2 00 e8 03 00 00 48 8d 1d 07 37 2f 00 e8 d2 d5 12 00 eb 0c 48 81 c3 e0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 e0 00 00
[  142.069081][ T7018] RSP: 002b:00007ffc36e103e0 EFLAGS: 00010206
[  142.075169][ T7018] RAX: 0000000000000000 RBX: 00007fe99dbd5fa0 RCX: 0000000000000000
[  142.083154][ T7018] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555e0d8808
[  142.091141][ T7018] RBP: 00007fe99dbd7ba0 R08: 0000000000000000 R09: 7fffffffffffffff
[  142.099130][ T7018] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000022a8d
[  142.107100][ T7018] R13: 00007fe99dbd6080 R14: 0000000000000032 R15: ffffffffffffffff
[  142.115132][ T7018]  </TASK>
[  142.118319][ T7018] memory: usage 307200kB, limit 307200kB, failcnt 1174
[  142.125277][ T7018] memory+swap: usage 307696kB, limit 9007199254740988kB, failcnt 0
[  142.133353][ T7018] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0
[  142.140667][ T7018] Memory cgroup stats for /syz3:
[  142.141099][ T7018] cache 0
[  142.149009][ T7018] rss 8192
[  142.152070][ T7018] shmem 0
[  142.155082][ T7018] mapped_file 0
[  142.158585][ T7018] dirty 0
[  142.161543][ T7018] writeback 8192
[  142.165102][ T7018] workingset_refault_anon 254
[  142.169834][ T7018] workingset_refault_file 580
[  142.174584][ T7018] swap 507904
[  142.177874][ T7018] swapcached 16384
[  142.181865][ T7018] pgpgin 189277
[  142.185362][ T7018] pgpgout 189273
[  142.189171][ T7018] pgfault 186803
[  142.192776][ T7018] pgmajfault 128
[  142.194938][ T7039] loop1: detected capacity change from 0 to 512
[  142.196319][ T7018] inactive_anon 0
[  142.196330][ T7018] active_anon 16384
[  142.196339][ T7018] inactive_file 0
[  142.204662][ T7039] EXT4-fs: Ignoring removed i_version option
[  142.206209][ T7018] active_file 0
[  142.206220][ T7018] unevictable 0
[  142.210070][ T7039] EXT4-fs: Ignoring removed mblk_io_submit option
[  142.213658][ T7018] hierarchical_memory_limit 314572800
[  142.213670][ T7018] hierarchical_memsw_limit 9223372036854771712
[  142.213681][ T7018] total_cache 0
[  142.213690][ T7018] total_rss 8192
[  142.223573][ T7040] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  142.226601][ T7018] total_shmem 0
[  142.226611][ T7018] total_mapped_file 0
[  142.237423][ T7040] loop2: detected capacity change from 0 to 128
[  142.238414][ T7018] total_dirty 0
[  142.238425][ T7018] total_writeback 8192
[  142.249444][ T7039] EXT4-fs: dax option not supported
[  142.251647][ T7018] total_workingset_refault_anon 254
[  142.268577][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  142.269871][ T7039] loop1: detected capacity change from 0 to 256
[  142.274841][ T7018] total_workingset_refault_file 580
[  142.274854][ T7018] total_swap 507904
[  142.274863][ T7018] total_swapcached 16384
[  142.274872][ T7018] total_pgpgin 189277
[  142.323486][ T7018] total_pgpgout 189273
[  142.327614][ T7018] total_pgfault 186803
[  142.331743][ T7018] total_pgmajfault 128
[  142.335818][ T7018] total_inactive_anon 0
[  142.340106][ T7018] total_active_anon 16384
[  142.344467][ T7018] total_inactive_file 0
[  142.348679][ T7018] total_active_file 0
[  142.352728][ T7018] total_unevictable 0
[  142.356715][ T7018] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1018,pid=7018,uid=0
[  142.371567][ T7018] Memory cgroup out of memory: Killed process 7018 (syz.3.1018) total-vm:95328kB, anon-rss:540kB, file-rss:22332kB, shmem-rss:0kB, UID:0 pgtables:116kB oom_score_adj:1000
[  142.450413][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  142.730466][ T7049] loop3: detected capacity change from 0 to 1024
[  142.738071][ T7049] EXT4-fs: Ignoring removed nobh option
[  142.751355][ T7049] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  142.764465][ T3909] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  142.888577][ T7054] geneve0: entered allmulticast mode
[  143.148963][ T7061] @: (slave bond_slave_0): Releasing backup interface
[  143.156625][ T7061] bond_slave_0: left promiscuous mode
[  143.165822][ T7061] @: (slave bond_slave_1): Releasing backup interface
[  143.176636][ T7061] bond_slave_1: left promiscuous mode
[  143.308588][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  143.462439][ T7081] netlink: 720 bytes leftover after parsing attributes in process `syz.5.1034'.
[  143.478038][ T7081] veth7: entered promiscuous mode
[  143.602791][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  144.021457][ T7089] loop2: detected capacity change from 0 to 2048
[  144.055245][ T7089] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  144.103790][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  144.267954][ T7098] loop2: detected capacity change from 0 to 128
[  144.286969][ T7098] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  144.318585][ T7101] loop1: detected capacity change from 0 to 512
[  144.332617][ T7098] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  144.348587][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  144.384330][ T7101] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  144.407078][ T7101] ext4 filesystem being mounted at /195/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  144.575685][ T7114] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  144.589360][ T7111] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1053'.
[  144.610709][ T7111] IPVS: Unknown mcast interface: vcan0
[  144.662368][ T7117] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1045'.
[  144.680882][ T7117] loop3: detected capacity change from 0 to 2048
[  144.706969][ T7117] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities
[  144.838288][ T7120] SELinux:  policydb version 0 does not match my version range 15-33
[  144.847617][ T7120] SELinux: failed to load policy
[  144.921789][ T7131] loop3: detected capacity change from 0 to 512
[  144.941363][ T7131] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a84ec01c, mo2=0002]
[  144.952866][ T7131] System zones: 0-2, 18-18, 34-34
[  144.959820][ T7131] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1048: bg 0: block 248: padding at end of block bitmap is not set
[  144.974842][ T7131] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.1048: Failed to acquire dquot type 1
[  144.989840][ T7131] EXT4-fs (loop3): 1 truncate cleaned up
[  144.996126][ T7131] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  145.009688][ T7131] ext4 filesystem being mounted at /193/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  145.049890][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  145.060693][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  145.141602][ T7145] loop1: detected capacity change from 0 to 1024
[  145.155745][ T7145] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.1052: Failed to acquire dquot type 0
[  145.169783][ T7145] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt.
[  145.185172][ T7145] EXT4-fs error (device loop1): ext4_do_update_inode:5153: inode #13: comm syz.1.1052: corrupted inode contents
[  145.199788][ T7145] EXT4-fs error (device loop1): ext4_dirty_inode:6041: inode #13: comm syz.1.1052: mark_inode_dirty error
[  145.211733][ T7145] EXT4-fs error (device loop1): ext4_do_update_inode:5153: inode #13: comm syz.1.1052: corrupted inode contents
[  145.239311][ T7145] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #13: comm syz.1.1052: mark_inode_dirty error
[  145.261144][ T7145] EXT4-fs error (device loop1): ext4_do_update_inode:5153: inode #13: comm syz.1.1052: corrupted inode contents
[  145.271837][ T7148] loop3: detected capacity change from 0 to 1764
[  145.284737][ T7145] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem
[  145.299349][ T7145] EXT4-fs error (device loop1): ext4_do_update_inode:5153: inode #13: comm syz.1.1052: corrupted inode contents
[  145.314127][ T7145] EXT4-fs error (device loop1): ext4_truncate:4240: inode #13: comm syz.1.1052: mark_inode_dirty error
[  145.314207][ T7148] ISOFS: unable to read i-node block
[  145.330677][ T7148] isofs_fill_super: get root inode failed
[  145.331682][ T7145] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem
[  145.355380][ T7145] EXT4-fs (loop1): 1 truncate cleaned up
[  145.368950][ T7145] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  145.388568][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  145.422750][ T7145] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1052'.
[  145.476635][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  145.519804][   T29] kauditd_printk_skb: 574 callbacks suppressed
[  145.519821][   T29] audit: type=1326 audit(1733312024.003:14212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7156 comm="syz.1.1055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92f48aff19 code=0x7ffc0000
[  145.588472][   T29] audit: type=1326 audit(1733312024.003:14213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7156 comm="syz.1.1055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92f48aff19 code=0x7ffc0000
[  145.605200][ T7157] loop1: detected capacity change from 0 to 8192
[  145.612165][   T29] audit: type=1326 audit(1733312024.003:14214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7156 comm="syz.1.1055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f92f48aff19 code=0x7ffc0000
[  145.642103][   T29] audit: type=1326 audit(1733312024.003:14215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7156 comm="syz.1.1055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92f48aff19 code=0x7ffc0000
[  145.665839][   T29] audit: type=1326 audit(1733312024.003:14216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7156 comm="syz.1.1055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92f48aff19 code=0x7ffc0000
[  145.689696][   T29] audit: type=1326 audit(1733312024.003:14217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7156 comm="syz.1.1055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f92f48aff19 code=0x7ffc0000
[  145.713463][   T29] audit: type=1326 audit(1733312024.003:14218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7156 comm="syz.1.1055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92f48aff19 code=0x7ffc0000
[  145.737256][   T29] audit: type=1326 audit(1733312024.003:14219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7156 comm="syz.1.1055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f92f48aff19 code=0x7ffc0000
[  145.761276][   T29] audit: type=1326 audit(1733312024.003:14220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7156 comm="syz.1.1055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92f48aff19 code=0x7ffc0000
[  145.785018][   T29] audit: type=1326 audit(1733312024.003:14221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7156 comm="syz.1.1055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f92f48aff19 code=0x7ffc0000
[  145.897071][ T7169] loop1: detected capacity change from 0 to 512
[  145.904899][ T7166] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1058'.
[  145.963853][ T7169] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  145.995795][ T7169] ext4 filesystem being mounted at /199/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  146.049816][ T7174] bio_check_eod: 45 callbacks suppressed
[  146.049835][ T7174] syz.4.1060: attempt to access beyond end of device
[  146.049835][ T7174] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  146.079111][ T7169] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1059'.
[  146.088724][ T7169] hub 6-0:1.0: USB hub found
[  146.093442][ T7169] hub 6-0:1.0: 8 ports detected
[  146.228494][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  146.418588][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  147.458633][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  147.485138][ T7192] loop2: detected capacity change from 0 to 2048
[  147.542458][ T7192] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  147.570928][ T7200] loop1: detected capacity change from 0 to 164
[  147.589883][ T7200] ISOFS: unable to read i-node block
[  147.648874][ T7201] rock: directory entry would overflow storage
[  147.655105][ T7201] rock: sig=0x4f50, size=4, remaining=3
[  147.660757][ T7201] iso9660: Corrupted directory entry in block 4 of inode 1792
[  148.112453][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  148.183192][ T7203] loop2: detected capacity change from 0 to 512
[  148.203049][ T7203] EXT4-fs (loop2): orphan cleanup on readonly fs
[  148.215094][ T7203] EXT4-fs warning (device loop2): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  148.235188][ T7203] EXT4-fs (loop2): Cannot turn on quotas: error -117
[  148.248902][ T7203] EXT4-fs error (device loop2): ext4_ext_check_inode:524: inode #13: comm syz.2.1068: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  148.377643][ T3302] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[  148.388637][ T3302] CPU: 1 UID: 0 PID: 3302 Comm: syz-executor Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0
[  148.399653][ T3302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  148.409729][ T3302] Call Trace:
[  148.413071][ T3302]  <TASK>
[  148.416018][ T3302]  dump_stack_lvl+0xf2/0x150
[  148.420657][ T3302]  dump_stack+0x15/0x1a
[  148.424841][ T3302]  dump_header+0x83/0x2d0
[  148.429192][ T3302]  oom_kill_process+0x341/0x4c0
[  148.434123][ T3302]  out_of_memory+0x9af/0xbe0
[  148.438818][ T3302]  ? css_next_descendant_pre+0x11c/0x140
[  148.444483][ T3302]  mem_cgroup_out_of_memory+0x13e/0x190
[  148.450107][ T3302]  try_charge_memcg+0x508/0x7f0
[  148.455007][ T3302]  charge_memcg+0x50/0xc0
[  148.459356][ T3302]  mem_cgroup_swapin_charge_folio+0xd0/0x150
[  148.465362][ T3302]  __read_swap_cache_async+0x236/0x480
[  148.470956][ T3302]  swap_cluster_readahead+0x279/0x3f0
[  148.476378][ T3302]  swapin_readahead+0xe4/0x6f0
[  148.481170][ T3302]  ? update_load_avg+0x1f7/0x7c0
[  148.486194][ T3302]  ? swap_cache_get_folio+0x77/0x210
[  148.491651][ T3302]  do_swap_page+0x31b/0x2550
[  148.496268][ T3302]  ? hrtimer_try_to_cancel+0x106/0x1d0
[  148.501821][ T3302]  ? __rcu_read_lock+0x36/0x50
[  148.506622][ T3302]  ? __pfx_default_wake_function+0x10/0x10
[  148.512467][ T3302]  handle_mm_fault+0x8e4/0x2ac0
[  148.517428][ T3302]  exc_page_fault+0x3b9/0x650
[  148.522135][ T3302]  asm_exc_page_fault+0x26/0x30
[  148.527062][ T3302] RIP: 0033:0x7f92f48e2785
[  148.531548][ T3302] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d be ed 15 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 <c3> 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74
[  148.551183][ T3302] RSP: 002b:00007ffef0365cb8 EFLAGS: 00010246
[  148.557282][ T3302] RAX: 0000000000000000 RBX: 0000000000000223 RCX: 00007f92f48e2783
[  148.565269][ T3302] RDX: 00007ffef0365cd0 RSI: 0000000000000000 RDI: 0000000000000000
[  148.573321][ T3302] RBP: 00007ffef0365d2c R08: 000000001367e9e0 R09: 7fffffffffffffff
[  148.581391][ T3302] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000032
[  148.589472][ T3302] R13: 0000000000024152 R14: 000000000002405a R15: 00007ffef0365d80
[  148.597543][ T3302]  </TASK>
[  148.600671][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  148.607618][ T3302] memory: usage 307200kB, limit 307200kB, failcnt 281
[  148.614506][ T3302] memory+swap: usage 307556kB, limit 9007199254740988kB, failcnt 0
[  148.622498][ T3302] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0
[  148.629815][ T3302] Memory cgroup stats for /syz1:
[  148.674687][ T7206] loop5: detected capacity change from 0 to 128
[  148.806841][ T3302] cache 0
[  148.809875][ T3302] rss 0
[  148.812719][ T3302] shmem 0
[  148.815733][ T3302] mapped_file 0
[  148.819260][ T3302] dirty 0
[  148.822200][ T3302] writeback 0
[  148.825551][ T3302] workingset_refault_anon 160
[  148.830271][ T3302] workingset_refault_file 166
[  148.834999][ T3302] swap 368640
[  148.838346][ T3302] swapcached 0
[  148.841732][ T3302] pgpgin 198704
[  148.845203][ T3302] pgpgout 198704
[  148.848779][ T3302] pgfault 222896
[  148.852323][ T3302] pgmajfault 83
[  148.855796][ T3302] inactive_anon 0
[  148.859469][ T3302] active_anon 0
[  148.863008][ T3302] inactive_file 0
[  148.866644][ T3302] active_file 0
[  148.870122][ T3302] unevictable 0
[  148.873588][ T3302] hierarchical_memory_limit 314572800
[  148.879050][ T3302] hierarchical_memsw_limit 9223372036854771712
[  148.885210][ T3302] total_cache 0
[  148.888714][ T3302] total_rss 0
[  148.892052][ T3302] total_shmem 0
[  148.895511][ T3302] total_mapped_file 0
[  148.899527][ T3302] total_dirty 0
[  148.903034][ T3302] total_writeback 0
[  148.906871][ T3302] total_workingset_refault_anon 160
[  148.912095][ T3302] total_workingset_refault_file 166
[  148.917297][ T3302] total_swap 368640
[  148.921183][ T3302] total_swapcached 0
[  148.925089][ T3302] total_pgpgin 198704
[  148.929094][ T3302] total_pgpgout 198704
[  148.933168][ T3302] total_pgfault 222896
[  148.937244][ T3302] total_pgmajfault 83
[  148.941257][ T3302] total_inactive_anon 0
[  148.945418][ T3302] total_active_anon 0
[  148.949422][ T3302] total_inactive_file 0
[  148.953576][ T3302] total_active_file 0
[  148.957631][ T3302] total_unevictable 0
[  148.961651][ T3302] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1067,pid=7199,uid=0
[  148.976342][ T3302] Memory cgroup out of memory: Killed process 7199 (syz.1.1067) total-vm:95328kB, anon-rss:748kB, file-rss:22352kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:1000
[  149.140443][ T7211] loop4: detected capacity change from 0 to 512
[  149.163148][ T7211] loop4: detected capacity change from 0 to 512
[  149.177986][ T7211] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  149.191571][ T7208] syz.5.1069: attempt to access beyond end of device
[  149.191571][ T7208] loop5: rw=2049, sector=572, nr_sectors = 8 limit=128
[  149.212580][ T7203] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.1068: couldn't read orphan inode 13 (err -117)
[  149.234806][ T7213] loop3: detected capacity change from 0 to 128
[  149.246873][ T7203] EXT4-fs (loop2): mounted filesystem 00000000-0000-0b00-0000-000000000000 ro without journal. Quota mode: writeback.
[  149.260602][ T7211] EXT4-fs (loop4): 1 truncate cleaned up
[  149.266721][ T7211] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  149.287494][ T7213] loop3: detected capacity change from 0 to 1024
[  149.298907][ T7208] syz.5.1069: attempt to access beyond end of device
[  149.298907][ T7208] loop5: rw=2049, sector=588, nr_sectors = 8 limit=128
[  149.330476][ T7213] EXT4-fs: Ignoring removed i_version option
[  149.366942][ T7203] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present!
[  149.412812][ T7213] EXT4-fs: Mount option(s) incompatible with ext2
[  149.419368][ T3302] ==================================================================
[  149.427484][ T3302] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64
[  149.437345][ T3302] 
[  149.439704][ T3302] read-write to 0xffffffff866089c0 of 8 bytes by interrupt on cpu 0:
[  149.447947][ T3302]  tick_do_update_jiffies64+0x112/0x1b0
[  149.453519][ T3302]  tick_nohz_handler+0x7c/0x2d0
[  149.458388][ T3302]  __hrtimer_run_queues+0x20d/0x5e0
[  149.463660][ T3302]  hrtimer_interrupt+0x235/0x4a0
[  149.468619][ T3302]  __sysvec_apic_timer_interrupt+0x5c/0x1d0
[  149.474617][ T3302]  sysvec_apic_timer_interrupt+0x6e/0x80
[  149.480268][ T3302]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  149.486272][ T3302]  console_flush_all+0x56b/0x770
[  149.491228][ T3302]  console_unlock+0xab/0x330
[  149.495829][ T3302]  vprintk_emit+0x3f4/0x680
[  149.500344][ T3302]  vprintk_default+0x26/0x30
[  149.504944][ T3302]  vprintk+0x75/0x80
[  149.508841][ T3302]  _printk+0x7a/0xa0
[  149.512767][ T3302]  __ext4_msg+0x134/0x1a0
[  149.517120][ T3302]  ext4_check_opt_consistency+0xa20/0xa80
[  149.522865][ T3302]  ext4_fill_super+0x1f3b/0x3a10
[  149.527826][ T3302]  get_tree_bdev_flags+0x29f/0x310
[  149.532963][ T3302]  get_tree_bdev+0x1f/0x30
[  149.537407][ T3302]  ext4_get_tree+0x1c/0x30
[  149.541854][ T3302]  vfs_get_tree+0x56/0x1e0
[  149.546286][ T3302]  do_new_mount+0x227/0x690
[  149.550804][ T3302]  path_mount+0x49b/0xb30
[  149.555146][ T3302]  __se_sys_mount+0x27c/0x2d0
[  149.559871][ T3302]  __x64_sys_mount+0x67/0x80
[  149.564497][ T3302]  x64_sys_call+0x2c84/0x2dc0
[  149.569183][ T3302]  do_syscall_64+0xc9/0x1c0
[  149.573692][ T3302]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  149.579603][ T3302] 
[  149.581923][ T3302] read to 0xffffffff866089c0 of 8 bytes by task 3302 on cpu 1:
[  149.589464][ T3302]  mem_cgroup_flush_stats_ratelimited+0x29/0x70
[  149.595724][ T3302]  count_shadow_nodes+0x6b/0x230
[  149.600669][ T3302]  do_shrink_slab+0x5a/0x680
[  149.605278][ T3302]  shrink_slab+0x4ea/0x850
[  149.609717][ T3302]  shrink_node+0x63f/0x1d80
[  149.614581][ T3302]  do_try_to_free_pages+0x3c6/0xc50
[  149.619789][ T3302]  try_to_free_mem_cgroup_pages+0x1e3/0x490
[  149.625698][ T3302]  try_charge_memcg+0x2bc/0x7f0
[  149.630555][ T3302]  charge_memcg+0x50/0xc0
[  149.634894][ T3302]  mem_cgroup_swapin_charge_folio+0xd0/0x150
[  149.640886][ T3302]  __read_swap_cache_async+0x236/0x480
[  149.646354][ T3302]  swap_cluster_readahead+0x279/0x3f0
[  149.651736][ T3302]  swapin_readahead+0xe4/0x6f0
[  149.656509][ T3302]  do_swap_page+0x31b/0x2550
[  149.661099][ T3302]  handle_mm_fault+0x8e4/0x2ac0
[  149.665952][ T3302]  exc_page_fault+0x3b9/0x650
[  149.670641][ T3302]  asm_exc_page_fault+0x26/0x30
[  149.675507][ T3302] 
[  149.677831][ T3302] value changed: 0x00000000ffffc4fb -> 0x00000000ffffc4fc
[  149.684939][ T3302] 
[  149.687259][ T3302] Reported by Kernel Concurrency Sanitizer on:
[  149.693406][ T3302] CPU: 1 UID: 0 PID: 3302 Comm: syz-executor Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0
[  149.704263][ T3302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  149.714757][ T3302] ==================================================================
[  149.722937][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  149.805255][ T7208] syz.5.1069: attempt to access beyond end of device
[  149.805255][ T7208] loop5: rw=2049, sector=612, nr_sectors = 8 limit=128
[  149.886619][ T7213] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1071'.
[  149.903955][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0b00-0000-000000000000.
[  150.088153][   T35] page_pool_release_retry() stalled pool shutdown: id 43, 1 inflight 60 sec
[  150.119859][ T7208] syz.5.1069: attempt to access beyond end of device
[  150.119859][ T7208] loop5: rw=2049, sector=636, nr_sectors = 8 limit=128
[  150.167297][ T7208] syz.5.1069: attempt to access beyond end of device
[  150.167297][ T7208] loop5: rw=2049, sector=676, nr_sectors = 8 limit=128
[  150.218825][ T7208] syz.5.1069: attempt to access beyond end of device
[  150.218825][ T7208] loop5: rw=2049, sector=700, nr_sectors = 8 limit=128
[  150.274023][ T7208] syz.5.1069: attempt to access beyond end of device
[  150.274023][ T7208] loop5: rw=2049, sector=724, nr_sectors = 8 limit=128
[  150.324538][ T7206] syz.5.1069: attempt to access beyond end of device
[  150.324538][ T7206] loop5: rw=2049, sector=364, nr_sectors = 8 limit=128
[  150.362973][ T7208] syz.5.1069: attempt to access beyond end of device
[  150.362973][ T7208] loop5: rw=2049, sector=748, nr_sectors = 8 limit=128
[  150.738619][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  151.179120][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  151.778606][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  152.818607][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  153.858585][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  154.898589][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  155.938576][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  156.978613][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  158.018617][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  159.058599][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available