last executing test programs:

4.28026048s ago: executing program 2 (id=1354):
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=")
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f00000007c0), 0x4000)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x42, 0x61)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
write(r1, &(0x7f0000004200)='t', 0x1)
sendfile(r1, r0, 0x0, 0x3ffff)
sendfile(r1, r0, 0x0, 0x7ffff000)
socket$inet_udplite(0x2, 0x2, 0x88)

3.804140678s ago: executing program 0 (id=1367):
unshare(0x68040200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCADDRT(r1, 0x890b, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="5c00000014006b03c84e21008bf32c19021800f80200000044000200ac14140e05251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd77f6f60c1504bb9189d9193e9bd1c1b7800000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
timer_create(0x8, 0x0, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./bus\x00', 0x0, &(0x7f0000002480)=ANY=[], 0x1, 0x11f4, &(0x7f0000001280)="$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")
renameat2(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="48000000200001002dbd7000f9dbdf2502"], 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x44046084)

3.031700515s ago: executing program 0 (id=1370):
openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0xffff, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x12, 0x8, 0x4, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe1d}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001700)={r3, 0x2000002, 0xe, 0x0, &(0x7f0000000080)="df33c9f7b9a600000000e32853c3", 0x0, 0xfffffbff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.973067632s ago: executing program 2 (id=1371):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18020000090000000000000000000000850000004100000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r2}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000240)="bf1ea0e3c19ed614ebadb3161741", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94)

2.227820736s ago: executing program 1 (id=1383):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000c"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r2, &(0x7f00000003c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48)
r4 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000180)={r2, r3})
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000001380)={<r5=>0xffffffffffffffff})
sendmsg$nl_route_sched(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000980)=@newtclass={0x24, 0x28, 0x4, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xa}, {0x5, 0xa}, {0xe, 0xffe0}}}, 0xfdef}, 0x1, 0x0, 0x0, 0x40d1}, 0x40d8)
syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r5)

2.121281607s ago: executing program 4 (id=1384):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0, 0x7ff}, 0x94)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x2, 0x3, 0x84)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]})
r0 = syz_io_uring_setup(0x5a90, 0x0, 0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
io_uring_enter(r0, 0x8aa, 0x0, 0x0, 0x0, 0x0)
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
ptrace$cont(0x21, r1, 0x80000001, 0x4)

1.966253762s ago: executing program 4 (id=1385):
r0 = socket$kcm(0x2, 0x1, 0x84)
sendmsg$inet(r0, &(0x7f0000002700)={&(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000180)="90", 0x1}], 0x1}, 0x8040)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'erspan0\x00'})
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0x20)
r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r2, 0x0)
syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x1f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
semget(0x0, 0x2, 0x41)

1.964976693s ago: executing program 2 (id=1395):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x49}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, &(0x7f0000000b80)='lo\x00)o\xd6Q\xb4Y\xa9\xc87,\x00\xd2\xd1|C\b\x00\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdd\x85\xaac{\x8c\x8ffp`-\xcd\xf6jh\xbf\x9c\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\xdc\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\x8b\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\xff\x0fy\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca^\xf9\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x96\x86\xdb\xa9\xd3\x01\xb2\xc7\xf8G\x069\x90,\xda\xf6\xc5\xcd\xec\xa3B\xc3\"4\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\x7f\xec\xb2\xc5E\x00\xdd\xf2e\xa8\xf1<\xb2\xc82\xbf=o\x00`\xc1A\'\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x92\xbb\xe3Y\x97\xc2')
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8b20, &(0x7f0000000040)={'wlan1\x00', @random="000010000b00"})

1.89346177s ago: executing program 2 (id=1386):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10)
add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff)

1.833601176s ago: executing program 0 (id=1387):
setreuid(0x0, 0xee00)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=<r1=>r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd8, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f00000006c0), 0x1, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="0a0002ad66cb48000080e03bd842c800a4f6c82891c9761539008f364a33d3d3e83b40389b946fe604406e27770d8e821222bd30dcd0ca959d76c141076d774d53365f38b5c65d1cc71b30016e000000000000d99170f6eaa65b1ef61972709a4686dc3f13314d210bc395537367d2e1f91a491e6d6c05f35cbb867944b587eef3b6ea8c37c3199626", @ANYBLOB="c374fcb1d6afdd9a3763f1afded788d6637f0fc223470303f2f65617ee48d289b3116834f1fd73ef558e39e50805868adabe135ba8d7977f4e9098a3b30158378c85b5e8bcfc2c3bfbfdccbb70da0d61550a99d2c40a5aad6bbc3a8ec419c09e1ffd6ffc4db9dfae8da1a127746966e63962f0b34b2e634e2f95", @ANYRESDEC=r2, @ANYRESOCT=r3, @ANYRES16=r1], 0x50)
r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
clock_gettime(0x7ffffffff000, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r6, 0x0, 0xff}, 0x18)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000380)={{0x1, 0x1, 0x18, r6, {0x2, 0x7}}, './file0\x00'})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r2}, 0x10)
getpgrp(0xffffffffffffffff)

1.329222336s ago: executing program 0 (id=1388):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1ae96d0103010000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000000)=ANY=[], 0xffc9)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='qgroup_meta_reserve\x00', r2}, 0x18)
syz_read_part_table(0x60e, &(0x7f00000007c0)="$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")
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x145402, 0x1d2)
writev(r3, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x100000}], 0x1)

1.309348448s ago: executing program 1 (id=1389):
syz_io_uring_setup(0x3798, &(0x7f0000000400)={0x0, 0xc458, 0x80, 0x100003, 0x20000b8}, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$nl_route(0x10, 0x3, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1)
mkdir(0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000001000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="ac0100001700010000000000000000007f0000010000000000000000000000000000000000000000fe8000000000000000000000000000bbac1414bb000000000000000000000000ffffffff0000000000000000000000004e210000000000000000006400000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0200000000000000000000000000000000000000000000000000000000000100000000000000000a00", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000200000000f9ffffff"], 0x1ac}}, 0x0)

1.201604269s ago: executing program 0 (id=1390):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
memfd_secret(0x0)
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa000000d})
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000400)={0xa})
epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0)

1.126118227s ago: executing program 1 (id=1392):
socketpair(0xf, 0x3, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40080)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4d, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)

1.110982598s ago: executing program 4 (id=1393):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0)
syz_open_procfs(0x0, &(0x7f0000000500)='net/ip_vs\x00')
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
creat(0x0, 0x0)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x90)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x48810)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
quotactl$Q_GETINFO(0xffffffff80000500, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)

1.061996123s ago: executing program 1 (id=1394):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f00000001c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8003, 0x1400}, 0xa5, 0x5, 0xffffffd}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x4c, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_NAT={0x8}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0xe}, @TCA_CAKE_TARGET={0x8, 0x8, 0x3}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x55}, 0x4000)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x3, 0x7, @loopback, 0x800000}, 0x1c)

1.061105613s ago: executing program 4 (id=1396):
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
ioperm(0x4, 0x1, 0x6)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000d9"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000007000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000004000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18)
r2 = socket$rds(0x15, 0x5, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r0}, &(0x7f0000000180), &(0x7f0000000200)=r1}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f00000002c0)='kfree\x00', 0xffffffffffffffff, 0x0, 0x40}, 0x18)
bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10)
sendmsg$rds(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c00028008000140"], 0xc4}}, 0x20050890)

980.855951ms ago: executing program 2 (id=1397):
r0 = socket(0x10, 0x3, 0x9)
r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
write$binfmt_elf32(r1, &(0x7f0000000e40)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x7, 0x0, 0x3, 0x4a, 0x2, 0x3, 0x3, 0x309, 0x38, 0xce, 0xe, 0xb, 0x20, 0x1, 0x5, 0x5}, [{0x3, 0x8, 0xf3, 0x7f, 0x204, 0x200004, 0xce1, 0x400}]}, 0x58)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x18)
r4 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f00000000c0)=ANY=[])
close(r1)
execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0)
connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a14"], 0x28}}, 0x0)

947.954714ms ago: executing program 4 (id=1398):
r0 = socket$kcm(0x29, 0x5, 0x0)
sendmmsg$inet(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000080)="da", 0x1}], 0x1, &(0x7f0000000040)=ANY=[], 0xd0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="b8", 0x1}], 0x1}}], 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000001200)={[{@nodiscard}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@nobarrier}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xeb}}, {@abort}, {@user_xattr}, {@bh}, {@errors_remount}]}, 0x1, 0x55f, &(0x7f0000000580)="$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")
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendto$inet(r3, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

882.925511ms ago: executing program 2 (id=1399):
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r1}, 0x10)
r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8)
write$cgroup_int(r3, &(0x7f00000001c0), 0xfffffdef)

505.353669ms ago: executing program 3 (id=1403):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x20000000000001cf, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000800000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x35039c062aff7af0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xc, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x18)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='percpu_create_chunk\x00', r2}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x50)

435.573506ms ago: executing program 3 (id=1404):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff})
close(r0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x5, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x8}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
close(r0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r2, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r3}, 0x18)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='percpu_create_chunk\x00', r4}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x50)

320.265957ms ago: executing program 3 (id=1405):
syz_io_uring_setup(0x3798, &(0x7f0000000400)={0x0, 0xc458, 0x80, 0x100003, 0x20000b8}, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$nl_route(0x10, 0x3, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1)
mkdir(0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000001000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="ac0100001700010000000000000000007f0000010000000000000000000000000000000000000000fe8000000000000000000000000000bbac1414bb000000000000000000000000ffffffff0000000000000000000000004e210000000000000000006400000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0200000000000000000000000000000000000000000000000000000000000100000000000000000a00", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000200000000f9ffffff"], 0x1ac}}, 0x0)

298.559169ms ago: executing program 0 (id=1406):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x1, 0x8)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x10}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
close(r1)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [<r3=>0x0]}, &(0x7f0000000240)=0x8)
sendmsg$inet_sctp(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='F', 0x1}, {0x0, 0xe0}], 0x2, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r3}}], 0x20, 0x2400e044}, 0x0)

277.168122ms ago: executing program 3 (id=1407):
r0 = open(&(0x7f0000000140)='./file0\x00', 0x149442, 0x0)
ftruncate(r0, 0x200002)
r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000010000000800000008"], 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r4}, &(0x7f0000000240), &(0x7f0000000300)=r5}, 0x20)
connect$pppl2tp(r2, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32)
sendfile(r2, r1, 0x0, 0x80001d00c0d0)

234.511336ms ago: executing program 1 (id=1408):
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
open$dir(&(0x7f0000000480)='./file0\x00', 0x103680, 0x20)
r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
ftruncate(r1, 0x2000009)
sendfile(r0, r1, 0x0, 0x6)
mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0)
r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0xa)
open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
r3 = inotify_init()
inotify_add_watch(r3, &(0x7f00000000c0)='./bus\x00', 0x101)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
tee(r2, r4, 0x3, 0x0)

224.431437ms ago: executing program 3 (id=1409):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000280)={'wg2\x00'})
ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000000f80)={0xedd, 0x6, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast})

97.57831ms ago: executing program 1 (id=1410):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r4}, 0x10)
umount2(&(0x7f0000000100)='./file0\x00', 0x9)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r2)
write(r2, &(0x7f00000001c0)="f14a18f6913026", 0x7)
sendfile(r2, r0, 0x0, 0x40001)
sendfile(r2, r1, 0x0, 0x7ffff000)

77.344362ms ago: executing program 4 (id=1411):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e0000"], 0x50)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000001000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x18)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="8b33000000000000000005"], 0x38}}, 0x0)

0s ago: executing program 3 (id=1412):
socketpair(0x1, 0x1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff})
close(r0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
close(r0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r2, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r3}, 0x18)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r4, &(0x7f00000002c0)={0x28, 0x0, 0x2710, @local}, 0x10)

kernel console output (not intermixed with test programs):

0: Interface deactivated: batadv_slave_1
[   61.983082][ T4599] bond1: left promiscuous mode
[   61.988021][ T4599] dummy0: left promiscuous mode
[   61.993035][ T4599] bond1: left allmulticast mode
[   61.997935][ T4599] dummy0: left allmulticast mode
[   62.014529][ T4604] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.022650][ T4604] 8021q: adding VLAN 0 to HW filter on device team0
[   62.033310][ T4604] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   62.048819][ T1433] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   62.062099][ T1433] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   62.075649][ T1433] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   62.101097][ T1433] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   62.136106][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   62.165341][ T4609] netlink: 4 bytes leftover after parsing attributes in process `syz.0.401'.
[   62.175641][ T4611] loop4: detected capacity change from 0 to 512
[   62.186452][ T4609] batman_adv: batadv0: Removing interface: batadv_slave_1
[   62.212996][ T4611] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   62.317950][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   62.439569][ T4628] netlink: 'syz.2.407': attribute type 1 has an invalid length.
[   62.469694][ T4628] netlink: 28 bytes leftover after parsing attributes in process `syz.2.407'.
[   62.494832][ T4628] 8021q: adding VLAN 0 to HW filter on device bond1
[   62.511566][ T4628] 8021q: adding VLAN 0 to HW filter on device bond1
[   62.528567][ T4628] bond1: (slave geneve2): making interface the new active one
[   62.537679][ T4628] bond1: (slave geneve2): Enslaving as an active interface with an up link
[   62.546549][   T31] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20004 - 0
[   62.564929][ T2253] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20004 - 0
[   62.584649][ T2253] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20004 - 0
[   62.593148][ T2253] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20004 - 0
[   62.616931][ T4633] loop2: detected capacity change from 0 to 512
[   62.655479][ T4633] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   62.685064][ T4633] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended
[   62.697449][ T4633] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   62.749659][ T4633] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   62.795126][ T4633] serio: Serial port ptm0
[   62.880106][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   62.980467][ T2253] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20004 - 0
[   62.989300][ T2253] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20004 - 0
[   63.008130][ T2253] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20004 - 0
[   63.034790][ T2253] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20004 - 0
[   63.302315][ T4653] netlink: 'syz.1.414': attribute type 4 has an invalid length.
[   63.321717][ T4653] netlink: 'syz.1.414': attribute type 4 has an invalid length.
[   63.433491][ T4660] loop3: detected capacity change from 0 to 512
[   63.440595][ T4660] EXT4-fs: Ignoring removed nobh option
[   63.446937][ T4662] ��: renamed from team_slave_1 (while UP)
[   63.477780][ T4660] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #3: comm syz.3.417: corrupted inode contents
[   63.495606][ T4670] netlink: 'syz.1.422': attribute type 41 has an invalid length.
[   63.520393][ T4660] EXT4-fs (loop3): Remounting filesystem read-only
[   63.527405][ T4660] EXT4-fs (loop3): 1 truncate cleaned up
[   63.533645][ T4660] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   63.546481][ T4660] ext4 filesystem being mounted at /88/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   63.565774][ T4660] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   64.111203][ T4680] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   64.122838][ T4680] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0'
[   64.553653][ T4692] syz.4.430 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   65.479190][ T4714] netlink: 'syz.0.437': attribute type 30 has an invalid length.
[   65.857441][   T29] kauditd_printk_skb: 404 callbacks suppressed
[   65.857459][   T29] audit: type=1400 audit(1763246271.274:1962): avc:  denied  { connect } for  pid=4731 comm="syz.4.443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[   65.896179][   T29] audit: type=1400 audit(1763246271.304:1963): avc:  denied  { ioctl } for  pid=4731 comm="syz.4.443" path="socket:[10588]" dev="sockfs" ino=10588 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[   65.985680][   T29] audit: type=1400 audit(1763246271.404:1964): avc:  denied  { read } for  pid=4737 comm="syz.1.446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   66.009553][ T4740] netlink: 'syz.4.447': attribute type 11 has an invalid length.
[   66.126741][ T4751] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0'
[   66.157017][ T4754] netlink: 'syz.2.452': attribute type 1 has an invalid length.
[   66.171603][ T4754] 8021q: adding VLAN 0 to HW filter on device bond2
[   66.186313][ T4754] netlink: 4 bytes leftover after parsing attributes in process `syz.2.452'.
[   66.196963][ T4754] bond2 (unregistering): Released all slaves
[   66.293108][ T4758] loop2: detected capacity change from 0 to 1024
[   66.300364][ T4758] EXT4-fs: Ignoring removed orlov option
[   66.309107][ T4758] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   66.820442][ T4767] loop1: detected capacity change from 0 to 164
[   66.866879][ T4767] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   66.933437][   T29] audit: type=1400 audit(1763246272.314:1965): avc:  denied  { connect } for  pid=4766 comm="syz.1.455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   66.961978][   T29] audit: type=1400 audit(1763246272.344:1966): avc:  denied  { getopt } for  pid=4770 comm="syz.3.457" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   66.965728][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   66.982329][   T29] audit: type=1326 audit(1763246272.374:1967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4770 comm="syz.3.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa42d64f6c9 code=0x7ffc0000
[   67.014717][   T29] audit: type=1326 audit(1763246272.374:1968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4770 comm="syz.3.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fa42d64f6c9 code=0x7ffc0000
[   67.038070][   T29] audit: type=1326 audit(1763246272.374:1969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4770 comm="syz.3.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa42d64f6c9 code=0x7ffc0000
[   67.061482][   T29] audit: type=1326 audit(1763246272.374:1970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4770 comm="syz.3.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=443 compat=0 ip=0x7fa42d64f6c9 code=0x7ffc0000
[   67.084934][   T29] audit: type=1326 audit(1763246272.374:1971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4770 comm="syz.3.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa42d64f6c9 code=0x7ffc0000
[   67.455530][ T4781] netlink: 'syz.4.461': attribute type 1 has an invalid length.
[   67.485356][ T4781] netlink: 28 bytes leftover after parsing attributes in process `syz.4.461'.
[   67.494891][ T4781] 8021q: adding VLAN 0 to HW filter on device bond1
[   67.513399][ T4781] 8021q: adding VLAN 0 to HW filter on device bond1
[   67.545278][ T4781] bond1: (slave geneve2): making interface the new active one
[   67.553613][ T4781] bond1: (slave geneve2): Enslaving as an active interface with an up link
[   67.562549][ T1433] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 20004 - 0
[   67.594779][ T1433] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 20004 - 0
[   67.603099][ T1433] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 20004 - 0
[   67.662776][ T1433] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 20004 - 0
[   67.753499][ T4799] loop3: detected capacity change from 0 to 512
[   67.768976][ T4802] loop2: detected capacity change from 0 to 512
[   67.782517][ T4799] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   67.800421][ T4802] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   67.813402][ T4799] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended
[   67.835001][ T4802] ext4 filesystem being mounted at /71/file7 supports timestamps until 2038-01-19 (0x7fffffff)
[   67.850769][ T4799] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   67.867617][ T4799] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   67.883934][ T4799] serio: Serial port ptm0
[   67.898226][ T4801] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[   67.916540][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   67.946854][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   68.006171][ T4801] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[   68.046182][ T4801] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[   68.106735][ T4801] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[   68.194169][   T31] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0
[   68.213777][   T31] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0
[   68.232935][   T31] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0
[   68.249548][   T31] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0
[   68.698582][ T4830] ref_ctr increment failed for inode: 0x255 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88810c36f8c0
[   69.339782][ T4847] xt_hashlimit: size too large, truncated to 1048576
[   70.011806][ T4857] loop0: detected capacity change from 0 to 2048
[   70.427037][ T4857] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[   70.691288][ T4875] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   70.724713][ T4875] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 502 with error 28
[   70.737351][ T4875] EXT4-fs (loop0): This should not happen!! Data will be lost
[   70.737351][ T4875] 
[   70.747028][ T4875] EXT4-fs (loop0): Total free blocks count 0
[   70.753043][ T4875] EXT4-fs (loop0): Free/Dirty block details
[   70.759083][ T4875] EXT4-fs (loop0): free_blocks=2415919104
[   70.764921][ T4875] EXT4-fs (loop0): dirty_blocks=512
[   70.770138][ T4875] EXT4-fs (loop0): Block reservation details
[   70.776203][ T4875] EXT4-fs (loop0): i_reserved_data_blocks=32
[   70.934491][ T2253] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28
[   71.141409][ T4892] netlink: 4 bytes leftover after parsing attributes in process `syz.1.498'.
[   71.184604][ T4892] hsr_slave_0: left promiscuous mode
[   71.190535][ T4892] hsr_slave_1: left promiscuous mode
[   71.539512][   T29] kauditd_printk_skb: 136 callbacks suppressed
[   71.539576][   T29] audit: type=1326 audit(1763246276.954:2108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4898 comm="syz.2.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79527f6c9 code=0x7ffc0000
[   71.644305][   T29] audit: type=1326 audit(1763246276.994:2109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4898 comm="syz.2.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79527f6c9 code=0x7ffc0000
[   71.668016][   T29] audit: type=1326 audit(1763246276.994:2110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4898 comm="syz.2.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79527f6c9 code=0x7ffc0000
[   71.691450][   T29] audit: type=1326 audit(1763246276.994:2111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4898 comm="syz.2.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79527f6c9 code=0x7ffc0000
[   71.714864][   T29] audit: type=1326 audit(1763246276.994:2112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4898 comm="syz.2.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fd79527f6c9 code=0x7ffc0000
[   71.738287][   T29] audit: type=1326 audit(1763246276.994:2113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4898 comm="syz.2.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79527f6c9 code=0x7ffc0000
[   71.761682][   T29] audit: type=1326 audit(1763246276.994:2114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4898 comm="syz.2.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79527f6c9 code=0x7ffc0000
[   71.785099][   T29] audit: type=1326 audit(1763246276.994:2115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4898 comm="syz.2.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79527f6c9 code=0x7ffc0000
[   71.808479][   T29] audit: type=1326 audit(1763246276.994:2116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4898 comm="syz.2.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79527f6c9 code=0x7ffc0000
[   71.831948][   T29] audit: type=1326 audit(1763246276.994:2117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4898 comm="syz.2.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd79527f6c9 code=0x7ffc0000
[   72.087988][ T4922] loop3: detected capacity change from 0 to 128
[   72.177594][ T4926] netlink: 'syz.1.509': attribute type 83 has an invalid length.
[   72.293724][ T4930] rdma_rxe: rxe_newlink: failed to add team_slave_0
[   72.344212][ T4941] loop3: detected capacity change from 0 to 164
[   72.379988][ T4941] iso9660: Unknown parameter '&1��h*Z�iocharset%iso^�\�8
����zJ�K�%|'
[   72.861848][ T4966] netlink: 'syz.1.521': attribute type 30 has an invalid length.
[   72.976194][ T4979] tipc: Started in network mode
[   72.981205][ T4979] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[   72.990939][ T4979] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[   72.999112][ T4979] tipc: Enabled bearer <udp:syz0>, priority 10
[   74.114308][ T1034] tipc: Node number set to 1
[   74.125717][ T5007] netlink: 'syz.0.534': attribute type 1 has an invalid length.
[   74.174760][ T5007] 8021q: adding VLAN 0 to HW filter on device bond1
[   74.193082][ T5007] netlink: 28 bytes leftover after parsing attributes in process `syz.0.534'.
[   74.202239][ T5007] bond1: entered promiscuous mode
[   74.207392][ T5007] bond1: entered allmulticast mode
[   74.345311][ T5007] bond1: (slave dummy0): making interface the new active one
[   74.352741][ T5007] dummy0: entered promiscuous mode
[   74.385130][ T5007] dummy0: entered allmulticast mode
[   74.398142][ T5003] 9pnet_fd: Insufficient options for proto=fd
[   74.405653][ T5007] bond1: (slave dummy0): Enslaving as an active interface with an up link
[   74.502873][ T5018] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   74.535257][ T5021] netlink: 'syz.3.540': attribute type 39 has an invalid length.
[   75.280485][ T5039] netlink: 12 bytes leftover after parsing attributes in process `syz.3.546'.
[   75.316031][ T5042] rdma_rxe: rxe_newlink: failed to add team_slave_0
[   75.361382][ T5044] xt_hashlimit: size too large, truncated to 1048576
[   75.382406][ T5049] netlink: 'syz.1.550': attribute type 1 has an invalid length.
[   75.453205][ T5051] netlink: 28 bytes leftover after parsing attributes in process `syz.1.550'.
[   75.533684][ T5049] 8021q: adding VLAN 0 to HW filter on device bond2
[   75.566453][ T5057] netlink: 8 bytes leftover after parsing attributes in process `syz.3.552'.
[   75.577119][ T5051] bond2: entered promiscuous mode
[   75.582173][ T5051] bond2: entered allmulticast mode
[   75.617231][ T5054] bond2: (slave dummy0): making interface the new active one
[   75.626780][ T5054] dummy0: entered promiscuous mode
[   75.632135][ T5054] dummy0: entered allmulticast mode
[   75.639070][ T5054] bond2: (slave dummy0): Enslaving as an active interface with an up link
[   76.627411][   T31] Bluetooth: hci0: Frame reassembly failed (-84)
[   77.052699][   T29] kauditd_printk_skb: 124 callbacks suppressed
[   77.052717][   T29] audit: type=1400 audit(1763246282.464:2242): avc:  denied  { read } for  pid=5105 comm="syz.1.565" name="qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   77.129134][   T29] audit: type=1400 audit(1763246282.464:2243): avc:  denied  { open } for  pid=5105 comm="syz.1.565" path="/dev/qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   77.495088][   T29] audit: type=1400 audit(1763246282.914:2244): avc:  denied  { setcheckreqprot } for  pid=5115 comm="syz.1.569" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[   77.564439][   T29] audit: type=1326 audit(1763246282.944:2245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5115 comm="syz.1.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43cb5f6c9 code=0x7ffc0000
[   77.587831][   T29] audit: type=1326 audit(1763246282.944:2246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5115 comm="syz.1.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7ff43cb5f6c9 code=0x7ffc0000
[   77.611181][   T29] audit: type=1326 audit(1763246282.944:2247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5115 comm="syz.1.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43cb5f6c9 code=0x7ffc0000
[   77.634514][   T29] audit: type=1326 audit(1763246282.944:2248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5115 comm="syz.1.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7ff43cb5f6c9 code=0x7ffc0000
[   77.657939][   T29] audit: type=1326 audit(1763246282.944:2249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5115 comm="syz.1.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43cb5f6c9 code=0x7ffc0000
[   77.681351][   T29] audit: type=1326 audit(1763246282.944:2250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5115 comm="syz.1.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7ff43cb5f6c9 code=0x7ffc0000
[   77.704747][   T29] audit: type=1326 audit(1763246282.944:2251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5115 comm="syz.1.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43cb5f6c9 code=0x7ffc0000
[   77.809149][ T5121] rdma_rxe: rxe_newlink: failed to add team_slave_0
[   78.120332][ T5133] netlink: 24 bytes leftover after parsing attributes in process `syz.1.578'.
[   78.133096][ T5135] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.142949][ T5135] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[   78.207399][ T5135] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.217296][ T5135] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[   78.266584][ T5135] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.276483][ T5135] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[   78.346782][ T5135] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.356674][ T5135] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[   78.456560][ T2253] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20004 - 0
[   78.464942][ T2253] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[   78.479746][ T2253] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20004 - 0
[   78.488370][ T2253] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[   78.500624][ T2253] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20004 - 0
[   78.509035][ T2253] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[   78.521164][ T2253] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20004 - 0
[   78.529563][ T2253] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[   78.541452][ T5150] bond0: (slave bond_slave_1): Releasing backup interface
[   78.571381][ T5150] netlink: 40 bytes leftover after parsing attributes in process `syz.2.585'.
[   78.664299][   T44] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   78.670487][ T3512] Bluetooth: hci0: command 0x1003 tx timeout
[   78.943960][ T5169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   78.952896][ T5169] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   79.336969][ T5175] netlink: 57 bytes leftover after parsing attributes in process `syz.3.595'.
[   79.641991][ T5190] loop2: detected capacity change from 0 to 512
[   79.648952][ T5190] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   79.661020][ T5190] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.600: inode has both inline data and extents flags
[   79.674888][ T5190] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.600: couldn't read orphan inode 15 (err -117)
[   79.691519][ T5190] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   79.720820][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.785566][ T5201] netlink: 'syz.2.604': attribute type 2 has an invalid length.
[   79.793358][ T5201] netlink: 8 bytes leftover after parsing attributes in process `syz.2.604'.
[   80.730636][ T5232] Set syz0 is full, maxelem 0 reached
[   81.091460][ T5246] loop0: detected capacity change from 0 to 512
[   81.110263][ T5246] EXT4-fs: Ignoring removed i_version option
[   81.116473][ T5246] EXT4-fs: Ignoring removed bh option
[   81.160513][ T5246] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   81.184573][ T5246] ext4 filesystem being mounted at /126/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   81.297549][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   81.401086][ T5258] netlink: 12 bytes leftover after parsing attributes in process `syz.3.624'.
[   81.437025][ T5262] veth4: entered promiscuous mode
[   81.442134][ T5262] veth4: entered allmulticast mode
[   81.452290][ T5256] netlink: 28 bytes leftover after parsing attributes in process `syz.0.625'.
[   81.461314][ T5256] netlink: 28 bytes leftover after parsing attributes in process `syz.0.625'.
[   81.511851][ T5269] sch_tbf: burst 22 is lower than device lo mtu (76) !
[   81.626527][ T5277] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.633'.
[   81.687428][ T5286] netlink: 64 bytes leftover after parsing attributes in process `syz.0.637'.
[   81.899570][ T5299] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=5299 comm=syz.4.640
[   82.343656][ T5313] loop2: detected capacity change from 0 to 2048
[   82.390238][ T3303] Alternate GPT is invalid, using primary GPT.
[   82.396712][ T3303]  loop2: p2 p3 p7
[   82.419319][ T5313] Alternate GPT is invalid, using primary GPT.
[   82.425759][ T5313]  loop2: p2 p3 p7
[   82.607886][   T29] kauditd_printk_skb: 387 callbacks suppressed
[   82.607900][   T29] audit: type=1400 audit(1763246288.024:2639): avc:  denied  { append } for  pid=5318 comm="syz.2.648" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   82.675657][ T5324] loop0: detected capacity change from 0 to 2048
[   82.719225][ T5324] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[   82.779253][   T29] audit: type=1400 audit(1763246288.194:2640): avc:  denied  { create } for  pid=5335 comm="syz.1.654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[   82.826507][ T5336] netlink: 324 bytes leftover after parsing attributes in process `syz.1.654'.
[   82.860458][ T5324] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   82.882664][ T5324] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 790 with error 28
[   82.895204][ T5324] EXT4-fs (loop0): This should not happen!! Data will be lost
[   82.895204][ T5324] 
[   82.904989][ T5324] EXT4-fs (loop0): Total free blocks count 0
[   82.910997][ T5324] EXT4-fs (loop0): Free/Dirty block details
[   82.917013][ T5324] EXT4-fs (loop0): free_blocks=2415919104
[   82.922765][ T5324] EXT4-fs (loop0): dirty_blocks=800
[   82.928043][ T5324] EXT4-fs (loop0): Block reservation details
[   82.934048][ T5324] EXT4-fs (loop0): i_reserved_data_blocks=50
[   83.010752][   T29] audit: type=1400 audit(1763246288.424:2641): avc:  denied  { relabelfrom } for  pid=5342 comm="syz.1.656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[   83.044039][   T29] audit: type=1400 audit(1763246288.424:2642): avc:  denied  { relabelto } for  pid=5342 comm="syz.1.656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[   83.064379][  T299] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28
[   83.138077][ T5345] veth2: entered promiscuous mode
[   83.143219][ T5345] veth2: entered allmulticast mode
[   83.159994][   T29] audit: type=1326 audit(1763246288.574:2643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5344 comm="syz.0.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f821e41f6c9 code=0x7ffc0000
[   83.221647][   T29] audit: type=1326 audit(1763246288.574:2644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5344 comm="syz.0.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f821e41f6c9 code=0x7ffc0000
[   83.245163][   T29] audit: type=1326 audit(1763246288.574:2645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5344 comm="syz.0.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f821e41f6c9 code=0x7ffc0000
[   83.268545][   T29] audit: type=1326 audit(1763246288.574:2646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5344 comm="syz.0.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f821e41f6c9 code=0x7ffc0000
[   83.291900][   T29] audit: type=1326 audit(1763246288.574:2647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5344 comm="syz.0.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f821e41f6c9 code=0x7ffc0000
[   83.315264][   T29] audit: type=1326 audit(1763246288.574:2648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5344 comm="syz.0.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f821e41f6c9 code=0x7ffc0000
[   83.843194][ T5359] tipc: Started in network mode
[   83.848132][ T5359] tipc: Node identity ac14140f, cluster identity 4711
[   83.855435][ T5359] tipc: New replicast peer: 255.255.255.255
[   83.861498][ T5359] tipc: Enabled bearer <udp:s>, priority 10
[   83.968225][ T5369] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: 1
[   83.976959][ T5369] ref_ctr increment failed for inode: 0x2eb offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88810c36c500
[   83.997057][ T5372] netlink: 16 bytes leftover after parsing attributes in process `syz.0.666'.
[   84.009014][ T5369] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: -1
[   84.017229][ T5372] netlink: 28 bytes leftover after parsing attributes in process `syz.0.666'.
[   84.017846][ T5369] ref_ctr decrement failed for inode: 0x2eb offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88810c36c500
[   84.054020][ T5369] uprobe: syz.3.665:5369 failed to unregister, leaking uprobe
[   84.864552][ T3421] tipc: Node number set to 2886997007
[   84.870564][ T5416] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   84.890047][ T5415] tipc: Resetting bearer <eth:syzkaller0>
[   84.915291][ T5415] tipc: Disabling bearer <eth:syzkaller0>
[   85.175940][ T5433] loop0: detected capacity change from 0 to 512
[   85.197544][ T5433] EXT4-fs (loop0): 1 orphan inode deleted
[   85.206248][ T5433] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   85.224849][   T31] EXT4-fs error (device loop0): ext4_release_dquot:6981: comm kworker/u8:1: Failed to release dquot type 1
[   85.237000][ T5433] ext4 filesystem being mounted at /142/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   85.298614][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.424525][ T5443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   85.475450][ T5443] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   85.812848][ T5459] loop7: detected capacity change from 0 to 16384
[   85.818592][   T31] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x60
[   85.910072][ T5466] syzkaller0: entered promiscuous mode
[   85.915708][ T5466] syzkaller0: entered allmulticast mode
[   86.080091][ T5474] loop3: detected capacity change from 0 to 2048
[   86.118508][ T5474] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   86.153363][ T5474] ext4 filesystem being mounted at /148/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   86.290197][ T5489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   86.319243][ T5489] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   86.358582][ T5489] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.706: bg 0: block 345: padding at end of block bitmap is not set
[   86.413558][ T5489] EXT4-fs (loop3): Remounting filesystem read-only
[   86.604319][ T5495] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   86.635309][ T5494] tipc: Resetting bearer <eth:syzkaller0>
[   86.671945][ T5494] tipc: Disabling bearer <eth:syzkaller0>
[   86.699621][ T5497] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[   86.796419][ T5497] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[   86.887474][ T5497] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[   86.949126][ T5497] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[   87.034380][ T5033] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0
[   87.054106][ T5033] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0
[   87.077860][ T5033] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0
[   87.098574][ T5033] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0
[   87.161476][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   87.285023][ T5516] syzkaller0: entered promiscuous mode
[   87.290631][ T5516] syzkaller0: entered allmulticast mode
[   87.516073][ T5531] ip6t_srh: unknown srh match flags  4000
[   87.845441][ T5548] netlink: 24 bytes leftover after parsing attributes in process `syz.1.733'.
[   87.878285][ T5548] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5548 comm=syz.1.733
[   87.891635][ T5548] netlink: 'syz.1.733': attribute type 1 has an invalid length.
[   88.099641][   T29] kauditd_printk_skb: 228 callbacks suppressed
[   88.099656][   T29] audit: type=1400 audit(1763246293.514:2876): avc:  denied  { read } for  pid=5560 comm="syz.4.738" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   88.155292][   T29] audit: type=1400 audit(1763246293.514:2877): avc:  denied  { open } for  pid=5560 comm="syz.4.738" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   88.889803][   T29] audit: type=1326 audit(1763246294.304:2878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5586 comm="syz.1.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43cb5f6c9 code=0x7ffc0000
[   88.913349][   T29] audit: type=1326 audit(1763246294.304:2879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5586 comm="syz.1.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43cb5f6c9 code=0x7ffc0000
[   89.373715][ T5593] netlink: 8 bytes leftover after parsing attributes in process `syz.1.748'.
[   89.845325][ T5602] loop0: detected capacity change from 0 to 4096
[   89.887239][ T5602] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   90.066250][ T5605] SELinux: failed to load policy
[   90.144790][ T5606] netlink: 'syz.1.750': attribute type 1 has an invalid length.
[   90.317252][ T5608] syz.2.754 uses obsolete (PF_INET,SOCK_PACKET)
[   90.327879][   T29] audit: type=1326 audit(1763246294.354:2880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5586 comm="syz.1.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff43cb5f6c9 code=0x7ffc0000
[   90.351321][   T29] audit: type=1326 audit(1763246294.354:2881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5586 comm="syz.1.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43cb5f6c9 code=0x7ffc0000
[   90.374682][   T29] audit: type=1326 audit(1763246294.354:2882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5586 comm="syz.1.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43cb5f6c9 code=0x7ffc0000
[   90.398018][   T29] audit: type=1326 audit(1763246294.524:2883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5586 comm="syz.1.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff43cb5f6c9 code=0x7ffc0000
[   90.421427][   T29] audit: type=1326 audit(1763246294.524:2884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5586 comm="syz.1.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43cb5f6c9 code=0x7ffc0000
[   90.444793][   T29] audit: type=1326 audit(1763246294.524:2885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5586 comm="syz.1.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43cb5f6c9 code=0x7ffc0000
[   90.469578][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   90.621806][ T5625] netlink: 'syz.1.760': attribute type 10 has an invalid length.
[   90.631103][ T5625] bond2: (slave dummy0): Releasing active interface
[   90.638104][ T5625] dummy0: left promiscuous mode
[   90.647742][ T5625] dummy0: left allmulticast mode
[   90.658733][ T5625] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   90.688712][ T5627] netlink: 12 bytes leftover after parsing attributes in process `syz.3.761'.
[   90.762616][ T5634] netlink: 'syz.3.764': attribute type 10 has an invalid length.
[   90.776602][ T5634] team0 (unregistering): Port device team_slave_0 removed
[   90.784336][ T5634] team0 (unregistering): Port device team_slave_1 removed
[   91.453338][ T5646] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[   91.615490][ T5653] syzkaller0: entered promiscuous mode
[   91.621026][ T5653] syzkaller0: entered allmulticast mode
[   91.635035][ T5642] loop0: detected capacity change from 0 to 32768
[   91.808897][ T5669] loop2: detected capacity change from 0 to 512
[   91.846777][ T5669] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   91.869826][ T5669] ext4 filesystem being mounted at /118/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   91.903824][  T299] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.920363][  T299] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   91.928901][  T299] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   91.937361][  T299] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.974621][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   92.045259][ T5693] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5693 comm=syz.0.787
[   92.524059][ T5715] netlink: 8 bytes leftover after parsing attributes in process `syz.0.794'.
[   93.270274][   T29] kauditd_printk_skb: 116 callbacks suppressed
[   93.270291][   T29] audit: type=1400 audit(1763246298.684:3002): avc:  denied  { read } for  pid=5729 comm="syz.3.800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[   93.301833][ T5732] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[   93.372257][   T29] audit: type=1400 audit(1763246298.784:3003): avc:  denied  { ioctl } for  pid=5729 comm="syz.3.800" path="socket:[15991]" dev="sockfs" ino=15991 ioctlcmd=0x891a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[   93.527077][ T5744] netlink: 24 bytes leftover after parsing attributes in process `syz.2.805'.
[   93.536475][   T29] audit: type=1400 audit(1763246298.944:3004): avc:  denied  { ioctl } for  pid=5747 comm="syz.0.807" path="socket:[16016]" dev="sockfs" ino=16016 ioctlcmd=0x4943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[   93.583183][ T5747] delete_channel: no stack
[   93.616478][ T5753] netlink: 4 bytes leftover after parsing attributes in process `syz.0.808'.
[   93.626682][ T5753] netlink: 12 bytes leftover after parsing attributes in process `syz.0.808'.
[   93.699363][ T5755] loop2: detected capacity change from 0 to 512
[   93.725348][ T5759] netlink: 64 bytes leftover after parsing attributes in process `syz.1.811'.
[   93.765225][ T5755] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   93.962203][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   94.160143][   T29] audit: type=1326 audit(1763246299.574:3005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5786 comm="syz.3.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa42d64f6c9 code=0x7ffc0000
[   94.264151][   T29] audit: type=1326 audit(1763246299.574:3006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5786 comm="syz.3.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa42d64f6c9 code=0x7ffc0000
[   94.287663][   T29] audit: type=1326 audit(1763246299.574:3007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5786 comm="syz.3.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fa42d64f6c9 code=0x7ffc0000
[   94.311005][   T29] audit: type=1326 audit(1763246299.574:3008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5786 comm="syz.3.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa42d64f6c9 code=0x7ffc0000
[   94.334340][   T29] audit: type=1326 audit(1763246299.574:3009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5786 comm="syz.3.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa42d64f6c9 code=0x7ffc0000
[   94.357653][   T29] audit: type=1326 audit(1763246299.574:3010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5786 comm="syz.3.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa42d64f6c9 code=0x7ffc0000
[   94.381019][   T29] audit: type=1326 audit(1763246299.574:3011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5786 comm="syz.3.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa42d64f6c9 code=0x7ffc0000
[   94.471864][ T5790] loop3: detected capacity change from 0 to 1024
[   94.488173][ T5790] ext4: Unknown parameter 'uid<00000000000000000000'
[   94.685424][ T5793] delete_channel: no stack
[   94.963557][ T5817] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.016245][ T5817] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.077162][ T5817] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.118765][ T5823] loop3: detected capacity change from 0 to 2048
[   95.125869][ T5823] EXT4-fs (loop3): cluster size (2048) smaller than block size (4096)
[   95.136502][ T5817] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.204112][ T2253] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   95.225417][ T2253] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   95.233918][ T2253] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.254061][ T2253] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.311899][ T5832] loop0: detected capacity change from 0 to 512
[   95.347350][ T5832] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   95.387540][ T5832] ext4 filesystem being mounted at /182/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   95.409611][ T2253] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   95.426500][ T2253] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   95.435027][ T2253] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.443303][ T2253] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.464248][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   95.573260][ T5841] netem: change failed
[   95.666292][ T5847] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.726647][ T5847] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.777229][ T5847] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.815410][ T5845] x_tables: ip_tables: CT.1 target: invalid size 72 (kernel) != (user) 0
[   95.836786][ T5847] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.927757][ T5856] netlink: 24 bytes leftover after parsing attributes in process `syz.1.842'.
[   95.971824][ T5856] netlink: 4 bytes leftover after parsing attributes in process `syz.1.842'.
[   96.028548][ T5866] loop4: detected capacity change from 0 to 512
[   96.048163][ T5866] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   96.061441][ T5866] ext4 filesystem being mounted at /142/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   96.108405][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   97.329611][   T37] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   97.356131][ T2253] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   97.374304][ T5894] syzkaller1: tun_chr_ioctl cmd 1074025677
[   97.396479][ T5894] syzkaller1: linktype set to 780
[   97.422039][ T2253] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   97.426287][ T5906] loop0: detected capacity change from 0 to 1024
[   97.437108][ T2253] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   97.437643][ T5906] ext4: Unknown parameter 'uid<00000000000000000000'
[   98.356053][ T5920] vhci_hcd: invalid port number 96
[   98.361241][ T5920] vhci_hcd: default hub control req: 2000 vfffc i0060 l7
[   98.747565][ T3422] IPVS: starting estimator thread 0...
[   98.756633][ T5929] IPVS: nq: FWM 3 0x00000003 - no destination available
[   98.788590][   T29] kauditd_printk_skb: 107 callbacks suppressed
[   98.788603][   T29] audit: type=1400 audit(1763246304.204:3119): avc:  denied  { watch watch_reads } for  pid=5927 comm="syz.2.865" path="/136/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[   98.818934][ T5928] SELinux:  Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped).
[   98.830851][ T5929] IPVS: nq: FWM 3 0x00000003 - no destination available
[   98.844476][ T5930] IPVS: using max 2496 ests per chain, 124800 per kthread
[   98.854642][   T29] audit: type=1400 audit(1763246304.254:3120): avc:  denied  { relabelto } for  pid=5927 comm="syz.2.865" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0"
[   98.880649][   T29] audit: type=1400 audit(1763246304.254:3121): avc:  denied  { associate } for  pid=5927 comm="syz.2.865" name="/" dev="cgroup2" ino=1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0"
[   98.947607][ T5932] loop9: detected capacity change from 0 to 7
[   98.954431][ T3303] Buffer I/O error on dev loop9, logical block 0, async page read
[   98.962420][ T3303] Buffer I/O error on dev loop9, logical block 0, async page read
[   98.970450][ T3303]  loop9: unable to read partition table
[   98.976963][ T5937] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.127368][ T5937] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.145629][ T5932] Buffer I/O error on dev loop9, logical block 0, async page read
[   99.154109][ T5932] Buffer I/O error on dev loop9, logical block 0, async page read
[   99.162151][ T5932]  loop9: unable to read partition table
[   99.172100][ T5932] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[   99.172100][ T5932] 
) failed (rc=-5)
[   99.188993][ T3303] Buffer I/O error on dev loop9, logical block 0, async page read
[   99.208576][ T3303] Buffer I/O error on dev loop9, logical block 0, async page read
[   99.240040][ T5937] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.257172][ T3303] Buffer I/O error on dev loop9, logical block 0, async page read
[   99.270287][ T3303] Buffer I/O error on dev loop9, logical block 0, async page read
[   99.278490][ T3303] Buffer I/O error on dev loop9, logical block 0, async page read
[   99.291590][ T5937] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.375774][ T5955] loop3: detected capacity change from 0 to 512
[   99.389285][ T2253] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   99.406206][ T2253] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   99.416482][   T29] audit: type=1326 audit(1763246304.824:3122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5956 comm="syz.0.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f821e41f6c9 code=0x7ffc0000
[   99.424627][ T5955] vfat: Bad value for 'allow_utime'
[   99.439890][   T29] audit: type=1326 audit(1763246304.824:3123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5956 comm="syz.0.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7f821e41f6c9 code=0x7ffc0000
[   99.458641][ T2253] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   99.468384][   T29] audit: type=1326 audit(1763246304.824:3124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5956 comm="syz.0.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f821e41f6c9 code=0x7ffc0000
[   99.468427][   T29] audit: type=1326 audit(1763246304.824:3125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5956 comm="syz.0.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f821e41f6c9 code=0x7ffc0000
[   99.510329][ T2253] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   99.523436][   T29] audit: type=1326 audit(1763246304.824:3126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5956 comm="syz.0.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f821e41f6c9 code=0x7ffc0000
[   99.555178][   T29] audit: type=1326 audit(1763246304.824:3127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5956 comm="syz.0.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f821e41f6c9 code=0x7ffc0000
[   99.578794][   T29] audit: type=1400 audit(1763246304.874:3128): avc:  denied  { mount } for  pid=5956 comm="syz.0.878" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[   99.667787][ T5961] sch_fq: defrate 8 ignored.
[   99.706508][ T5965] netlink: 4 bytes leftover after parsing attributes in process `syz.2.880'.
[   99.746701][ T5965] batman_adv: batadv0: Removing interface: batadv_slave_1
[   99.774563][ T5969] loop0: detected capacity change from 0 to 2048
[   99.781091][ T5970] loop2: detected capacity change from 0 to 1024
[   99.789935][ T5970] EXT4-fs: Ignoring removed bh option
[   99.806654][ T5969] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   99.820266][ T5970] EXT4-fs: inline encryption not supported
[   99.828086][ T5969] ext4 filesystem being mounted at /196/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   99.841098][ T5970] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   99.897684][ T5975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   99.906550][ T5970] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[   99.906952][ T5975] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   99.944040][ T5975] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.883: bg 0: block 345: padding at end of block bitmap is not set
[   99.954249][ T5970] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.880: lblock 2 mapped to illegal pblock 2 (length 1)
[   99.976248][ T5975] EXT4-fs (loop0): Remounting filesystem read-only
[   99.991694][ T5970] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.880: lblock 0 mapped to illegal pblock 48 (length 1)
[  100.006157][ T5970] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.880: Failed to acquire dquot type 0
[  100.017781][ T5970] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6313: Corrupt filesystem
[  100.028001][ T5970] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.880: mark_inode_dirty error
[  100.070131][ T5970] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  100.100839][ T5983] netlink: 12 bytes leftover after parsing attributes in process `syz.1.886'.
[  100.104425][ T5970] EXT4-fs (loop2): 1 orphan inode deleted
[  100.120467][ T2253] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1)
[  100.140491][ T2253] EXT4-fs error (device loop2): ext4_release_dquot:6981: comm kworker/u8:7: Failed to release dquot type 0
[  100.152786][ T5970] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  100.166629][ T5970] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  100.176746][ T5970] EXT4-fs error (device loop2): __ext4_get_inode_loc:4832: comm syz.2.880: Invalid inode table block 1 in block_group 0
[  100.191411][ T5986] netlink: 4 bytes leftover after parsing attributes in process `syz.4.887'.
[  100.193106][ T5970] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6313: Corrupt filesystem
[  100.211545][ T5970] EXT4-fs error (device loop2): ext4_quota_off:7229: inode #3: comm syz.2.880: mark_inode_dirty error
[  100.255512][ T5993] netlink: 24 bytes leftover after parsing attributes in process `syz.3.885'.
[  100.313874][ T5995] loop3: detected capacity change from 0 to 512
[  100.335854][ T5995] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.890: error while reading EA inode 32 err=-116
[  100.354762][ T5995] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.890: error while reading EA inode 32 err=-116
[  100.367648][ T5995] EXT4-fs (loop3): 1 orphan inode deleted
[  100.380055][ T5986] netlink: 4 bytes leftover after parsing attributes in process `syz.4.887'.
[  100.397258][ T5995] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  100.461022][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  100.502478][ T6000] netlink: 24 bytes leftover after parsing attributes in process `syz.3.891'.
[  100.565352][ T6000] netlink: 4 bytes leftover after parsing attributes in process `syz.3.891'.
[  100.838665][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  100.913857][ T6026] loop0: detected capacity change from 0 to 256
[  100.921409][ T6026] FAT-fs (loop0): bogus number of FAT sectors
[  100.927576][ T6026] FAT-fs (loop0): Can't find a valid FAT filesystem
[  100.997972][ T6029] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.115884][ T6029] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.181325][ T6029] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.230294][ T6043] loop0: detected capacity change from 0 to 512
[  101.237775][ T6029] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.256969][ T6043] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  101.269674][ T6043] ext4 filesystem being mounted at /201/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  101.287303][ T6043] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.303091][ T5033] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  101.319589][ T5033] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  101.328858][ T5033] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  101.341660][ T6043] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.352704][ T5033] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  101.386447][ T6043] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.481173][ T6043] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.576193][ T5033] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  101.602989][ T5033] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  101.632091][ T5033] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  101.655992][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.668557][ T5033] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  102.223090][ T6062] loop4: detected capacity change from 0 to 256
[  102.237840][ T6062] FAT-fs (loop4): bogus number of FAT sectors
[  102.243962][ T6062] FAT-fs (loop4): Can't find a valid FAT filesystem
[  102.489815][ T6073] loop4: detected capacity change from 0 to 1024
[  102.499090][ T6073] ext4: Unknown parameter 'uid<00000000000000000000'
[  102.507844][ T6075] netlink: 16 bytes leftover after parsing attributes in process `syz.3.920'.
[  102.617234][ T6080] loop3: detected capacity change from 0 to 512
[  102.659600][ T6080] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  102.717618][ T6080] EXT4-fs (loop3): 1 truncate cleaned up
[  102.774696][ T6080] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  102.864567][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.059038][ T6101] loop3: detected capacity change from 0 to 1024
[  103.087522][ T6102] loop0: detected capacity change from 0 to 2048
[  103.135958][ T6102] EXT4-fs (loop0): cluster size (2048) smaller than block size (4096)
[  103.195481][ T6101] EXT4-fs: Ignoring removed orlov option
[  103.218619][ T6101] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  103.285301][ T6101] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  103.535615][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.747383][ T6110] loop2: detected capacity change from 0 to 512
[  103.758557][ T6110] EXT4-fs: Ignoring removed orlov option
[  103.768762][ T6110] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  103.783918][ T6110] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002]
[  103.792543][ T6110] EXT4-fs error (device loop2): ext4_iget_extra_inode:5075: inode #15: comm syz.2.932: corrupted in-inode xattr: e_value size too large
[  103.806953][ T6110] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.932: couldn't read orphan inode 15 (err -117)
[  103.819340][ T6110] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  103.834859][   T29] kauditd_printk_skb: 572 callbacks suppressed
[  103.834873][   T29] audit: type=1326 audit(1763246822.260:3698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6109 comm="syz.2.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79527f6c9 code=0x7ffc0000
[  103.867058][   T29] audit: type=1326 audit(1763246822.290:3699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6109 comm="syz.2.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79527f6c9 code=0x7ffc0000
[  103.890430][   T29] audit: type=1326 audit(1763246822.290:3700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6109 comm="syz.2.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fd79527f6c9 code=0x7ffc0000
[  103.913709][   T29] audit: type=1326 audit(1763246822.290:3701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6109 comm="syz.2.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79527f6c9 code=0x7ffc0000
[  103.937222][   T29] audit: type=1326 audit(1763246822.290:3702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6109 comm="syz.2.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79527f6c9 code=0x7ffc0000
[  103.960567][   T29] audit: type=1326 audit(1763246822.290:3703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6109 comm="syz.2.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7fd79527f6c9 code=0x7ffc0000
[  103.983886][   T29] audit: type=1326 audit(1763246822.290:3704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6109 comm="syz.2.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79527f6c9 code=0x7ffc0000
[  104.007287][   T29] audit: type=1326 audit(1763246822.290:3705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6109 comm="syz.2.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79527f6c9 code=0x7ffc0000
[  104.030746][   T29] audit: type=1326 audit(1763246822.290:3706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6109 comm="syz.2.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd79527f6c9 code=0x7ffc0000
[  104.054108][   T29] audit: type=1326 audit(1763246822.290:3707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6109 comm="syz.2.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79527f6c9 code=0x7ffc0000
[  104.413473][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.489415][ T6118] loop3: detected capacity change from 0 to 256
[  104.514916][ T6118] FAT-fs (loop3): bogus number of FAT sectors
[  104.521032][ T6118] FAT-fs (loop3): Can't find a valid FAT filesystem
[  104.573966][ T6117] loop2: detected capacity change from 0 to 512
[  104.583636][ T6124] syzkaller0: entered promiscuous mode
[  104.589206][ T6124] syzkaller0: entered allmulticast mode
[  104.628060][ T6117] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.933: error while reading EA inode 32 err=-116
[  104.644664][ T6117] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.933: error while reading EA inode 32 err=-116
[  104.703848][ T6117] EXT4-fs (loop2): 1 orphan inode deleted
[  104.764136][ T6117] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  104.858852][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.896241][ T6141] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.916970][ T6143] netlink: 'syz.3.942': attribute type 1 has an invalid length.
[  104.951849][ T6143] 8021q: adding VLAN 0 to HW filter on device bond2
[  104.967609][ T6141] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.010732][ T6143] netlink: 4 bytes leftover after parsing attributes in process `syz.3.942'.
[  105.041519][ T6143] bond2 (unregistering): Released all slaves
[  105.076817][ T6141] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.165608][ T6141] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.269388][ T5033] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  105.299153][ T5033] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  105.323093][ T5033] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  105.334320][ T5033] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  105.478921][ T6176] veth2: entered promiscuous mode
[  105.484074][ T6176] veth2: entered allmulticast mode
[  105.563492][ T6183] netlink: 'syz.2.957': attribute type 1 has an invalid length.
[  105.587893][ T6184] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  105.597808][ T6184] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  105.748407][ T6184] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  105.758423][ T6184] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  105.829623][ T6184] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  105.839534][ T6184] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  105.866656][ T6194] netlink: 'syz.2.958': attribute type 1 has an invalid length.
[  105.914915][ T6194] 8021q: adding VLAN 0 to HW filter on device bond3
[  105.929962][ T6194] netlink: 4 bytes leftover after parsing attributes in process `syz.2.958'.
[  105.953597][ T6194] bond3 (unregistering): Released all slaves
[  105.964245][ T6184] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  105.974187][ T6184] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  106.052357][   T31] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20004 - 0
[  106.060747][   T31] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  106.080157][   T31] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20004 - 0
[  106.088667][   T31] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  106.136824][   T31] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20004 - 0
[  106.145261][   T31] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  106.157691][   T31] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20004 - 0
[  106.166173][   T31] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  106.211807][ T6208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  106.233990][ T6215] syzkaller0: entered promiscuous mode
[  106.235574][ T6208] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  106.239649][ T6215] syzkaller0: entered allmulticast mode
[  106.584949][ T6225] syzkaller1: tun_chr_ioctl cmd 1074025677
[  106.596522][ T6225] syzkaller1: linktype set to 780
[  107.410081][ T6255] syzkaller0: entered promiscuous mode
[  107.410103][ T6255] syzkaller0: entered allmulticast mode
[  108.014131][ T6283] tipc: New replicast peer: 255.255.255.83
[  108.020167][ T6283] tipc: Enabled bearer <udp:�>, priority 10
[  108.251892][ T6299] loop0: detected capacity change from 0 to 1024
[  108.274623][ T6299] EXT4-fs: Ignoring removed bh option
[  108.280936][ T6299] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  108.290151][ T6299] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  108.301491][ T6299] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0100]
[  108.312612][ T6299] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 2: comm syz.0.997: lblock 2 mapped to illegal pblock 2 (length 1)
[  108.327387][ T6299] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.997: lblock 0 mapped to illegal pblock 48 (length 1)
[  108.342166][ T6299] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.997: Failed to acquire dquot type 0
[  108.354169][ T6299] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6313: Corrupt filesystem
[  108.366040][ T6299] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.997: mark_inode_dirty error
[  108.379886][ T6299] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  108.390683][ T6299] EXT4-fs (loop0): 1 orphan inode deleted
[  108.405684][ T6299] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  108.409931][ T2253] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1)
[  108.453514][ T2253] EXT4-fs error (device loop0): ext4_release_dquot:6981: comm kworker/u8:7: Failed to release dquot type 0
[  108.478576][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.491337][ T3312] EXT4-fs error (device loop0): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0
[  108.521488][ T3312] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6313: Corrupt filesystem
[  108.541427][ T3312] EXT4-fs error (device loop0): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error
[  108.560091][ T6304] netlink: 'syz.1.1000': attribute type 10 has an invalid length.
[  108.632418][ T6306] loop0: detected capacity change from 0 to 512
[  108.646828][ T6306] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.999: error while reading EA inode 32 err=-116
[  108.672343][ T6306] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.999: error while reading EA inode 32 err=-116
[  108.705257][ T6306] EXT4-fs (loop0): 1 orphan inode deleted
[  108.730611][ T6306] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  108.765955][ T6320] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1005'.
[  108.787912][ T6320] bond3: (slave bridge2): Enslaving as an active interface with an up link
[  108.808278][ T6320] bond3: entered promiscuous mode
[  108.813362][ T6320] bridge2: entered promiscuous mode
[  108.818844][ T6320] bond3: entered allmulticast mode
[  108.823983][ T6320] bridge2: entered allmulticast mode
[  108.830577][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.880037][ T6325] geneve3: entered promiscuous mode
[  108.949018][ T6327] syzkaller0: entered promiscuous mode
[  108.954685][ T6327] syzkaller0: entered allmulticast mode
[  109.001649][ T6335] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1010'.
[  109.058394][ T6335] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1010'.
[  109.073303][ T6337] netlink: 'syz.2.1012': attribute type 10 has an invalid length.
[  109.083604][ T6337] team0 (unregistering): Port device team_slave_0 removed
[  109.091702][ T6337] team0 (unregistering): Port device team_slave_1 removed
[  109.237162][ T6354] syzkaller1: tun_chr_ioctl cmd 1074025677
[  109.243269][ T6354] syzkaller1: linktype set to 780
[  109.271006][   T29] kauditd_printk_skb: 275 callbacks suppressed
[  109.271023][   T29] audit: type=1400 audit(1763246827.690:3980): avc:  denied  { name_connect } for  pid=6358 comm="syz.2.1017" dest=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1
[  109.343266][ T6363] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1019'.
[  109.659214][   T29] audit: type=1326 audit(1763246828.080:3981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6371 comm="syz.3.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa42d64f6c9 code=0x7ffc0000
[  109.693698][   T29] audit: type=1326 audit(1763246828.100:3982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6371 comm="syz.3.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fa42d64f6c9 code=0x7ffc0000
[  109.717367][   T29] audit: type=1326 audit(1763246828.100:3983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6371 comm="syz.3.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa42d64f703 code=0x7ffc0000
[  109.740808][   T29] audit: type=1326 audit(1763246828.100:3984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6371 comm="syz.3.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa42d64f703 code=0x7ffc0000
[  109.764078][   T29] audit: type=1326 audit(1763246828.100:3985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6371 comm="syz.3.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa42d64f6c9 code=0x7ffc0000
[  109.787545][   T29] audit: type=1326 audit(1763246828.100:3986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6371 comm="syz.3.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa42d64f6c9 code=0x7ffc0000
[  109.811013][   T29] audit: type=1326 audit(1763246828.100:3987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6371 comm="syz.3.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa42d64f6c9 code=0x7ffc0000
[  109.834586][   T29] audit: type=1326 audit(1763246828.100:3988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6371 comm="syz.3.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fa42d64f6c9 code=0x7ffc0000
[  109.858068][   T29] audit: type=1326 audit(1763246828.140:3989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6371 comm="syz.3.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa42d64f6c9 code=0x7ffc0000
[  110.296937][ T6383] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1023'.
[  110.329059][ T6383] bond4: (slave geneve3): Enslaving as an active interface with an up link
[  110.338356][  T299] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  110.346717][  T299] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  110.357430][ T2253] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  110.368452][ T6383] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1023'.
[  110.375114][ T2253] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  110.387133][ T6383] bond4 (unregistering): (slave geneve3): Releasing backup interface
[  110.396572][ T6383] bond4 (unregistering): Released all slaves
[  110.414430][   T31] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 20000 - 0
[  110.423539][   T31] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 20000 - 0
[  110.432847][   T31] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 20000 - 0
[  110.441737][   T31] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 20000 - 0
[  110.460641][ T6393] loop2: detected capacity change from 0 to 512
[  110.468114][ T6393] EXT4-fs: Ignoring removed i_version option
[  110.474255][ T6393] EXT4-fs: Ignoring removed bh option
[  110.500624][ T6393] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  110.514029][ T6393] ext4 filesystem being mounted at /168/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  110.580280][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  111.286794][ T6419] block device autoloading is deprecated and will be removed.
[  111.402909][ T6426] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1040'.
[  111.430251][ T6426] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6426 comm=syz.0.1040
[  111.517883][ T6438] SELinux:  Context ׸��X7��d�Q��YI{C��pU���hٻ��r: is not valid (left unmapped).
[  111.544112][ T6439] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.594087][ T6443] loop3: detected capacity change from 0 to 512
[  111.667811][ T6439] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.679488][ T6451] loop1: detected capacity change from 0 to 1024
[  111.694741][ T6451] EXT4-fs: inline encryption not supported
[  111.700609][ T6451] EXT4-fs: Ignoring removed orlov option
[  111.711517][ T6443] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.1048: Failed to acquire dquot type 1
[  111.730772][ T6443] EXT4-fs (loop3): 1 truncate cleaned up
[  111.744509][ T6443] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  111.758391][ T6439] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.784910][ T6451] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  111.799083][ T6443] ext4 filesystem being mounted at /214/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  111.811194][ T6451] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c019, mo2=0002]
[  111.820759][ T6451] System zones: 0-1, 3-12
[  111.826843][ T6439] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.837887][ T6451] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  111.872651][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  111.883776][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  111.921061][  T299] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  111.954124][  T299] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  111.962969][  T299] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  111.971947][  T299] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  111.996926][ T6468] syzkaller1: tun_chr_ioctl cmd 1074025677
[  112.019016][ T6468] syzkaller1: linktype set to 780
[  112.102772][ T6472] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1056'.
[  112.123518][ T6472] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6472 comm=syz.1.1056
[  112.340326][ T6480] program syz.1.1058 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  112.638685][ T6487] loop1: detected capacity change from 0 to 512
[  112.653950][ T6487] ------------[ cut here ]------------
[  112.659515][ T6487] EA inode 11 i_nlink=2
[  112.659809][ T6487] WARNING: CPU: 1 PID: 6487 at fs/ext4/xattr.c:1058 ext4_xattr_inode_update_ref+0x36a/0x380
[  112.674147][ T6487] Modules linked in:
[  112.678267][ T6487] CPU: 1 UID: 0 PID: 6487 Comm: syz.1.1061 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  112.688045][ T6487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  112.698148][ T6487] RIP: 0010:ext4_xattr_inode_update_ref+0x36a/0x380
[  112.704921][ T6487] Code: 90 49 8d 7e 40 e8 e6 f9 b8 ff 4d 8b 6e 40 4c 89 e7 e8 fa f4 b8 ff 41 8b 56 48 48 c7 c7 66 d4 55 86 4c 89 ee e8 a7 f5 67 ff 90 <0f> 0b 90 90 e9 ff fe ff ff e8 28 f4 b5 03 0f 1f 84 00 00 00 00 00
[  112.724638][ T6487] RSP: 0018:ffffc90002e9f5a0 EFLAGS: 00010246
[  112.730727][ T6487] RAX: db0b07213fdcd300 RBX: ffff8881077e68c0 RCX: 0000000000080000
[  112.738746][ T6487] RDX: ffffc90002639000 RSI: 000000000000386d RDI: 000000000000386e
[  112.746990][ T6487] RBP: 0000000000000002 R08: 0001c90002e9f427 R09: 0000000000000000
[  112.755064][ T6487] R10: 00000000ffffffff R11: 0000000000000002 R12: ffff8881077e6870
[  112.763048][ T6487] R13: 000000000000000b R14: ffff8881077e6828 R15: 0000000000000001
[  112.771144][ T6487] FS:  00007ff43b5c76c0(0000) GS:ffff8882aef11000(0000) knlGS:0000000000000000
[  112.780116][ T6487] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  112.786753][ T6487] CR2: 00007faff1cbf000 CR3: 000000011b26e000 CR4: 00000000003506f0
[  112.794776][ T6487] DR0: 0000000000000002 DR1: 0000000000000000 DR2: 0000000000000000
[  112.802763][ T6487] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  112.810848][ T6487] Call Trace:
[  112.814150][ T6487]  <TASK>
[  112.817340][ T6487]  ext4_xattr_set_entry+0x77f/0x1020
[  112.822650][ T6487]  ext4_xattr_ibody_set+0x184/0x3c0
[  112.827923][ T6487]  ext4_expand_extra_isize_ea+0xcbb/0x11f0
[  112.833782][ T6487]  __ext4_expand_extra_isize+0x246/0x280
[  112.839447][ T6487]  __ext4_mark_inode_dirty+0x29d/0x3f0
[  112.844999][ T6487]  ext4_evict_inode+0x80e/0xd90
[  112.849904][ T6487]  ? __pfx_ext4_evict_inode+0x10/0x10
[  112.855417][ T6487]  evict+0x2e3/0x550
[  112.859317][ T6487]  ? __dquot_initialize+0x146/0x7c0
[  112.864601][ T6487]  iput+0x4ed/0x650
[  112.868425][ T6487]  ext4_process_orphan+0x1a9/0x1c0
[  112.873614][ T6487]  ext4_orphan_cleanup+0x6a8/0xa00
[  112.878835][ T6487]  ext4_fill_super+0x3483/0x3810
[  112.883846][ T6487]  ? snprintf+0x86/0xb0
[  112.888043][ T6487]  ? set_blocksize+0x1a8/0x310
[  112.892816][ T6487]  ? sb_set_blocksize+0xe3/0x100
[  112.897777][ T6487]  ? setup_bdev_super+0x30e/0x370
[  112.902819][ T6487]  ? __pfx_ext4_fill_super+0x10/0x10
[  112.908139][ T6487]  get_tree_bdev_flags+0x291/0x300
[  112.913311][ T6487]  ? __pfx_ext4_fill_super+0x10/0x10
[  112.918705][ T6487]  get_tree_bdev+0x1f/0x30
[  112.923213][ T6487]  ext4_get_tree+0x1c/0x30
[  112.927656][ T6487]  vfs_get_tree+0x57/0x1d0
[  112.932081][ T6487]  do_new_mount+0x24d/0x660
[  112.936636][ T6487]  path_mount+0x4a5/0xb70
[  112.940988][ T6487]  ? user_path_at+0x109/0x130
[  112.945766][ T6487]  __se_sys_mount+0x28c/0x2e0
[  112.950510][ T6487]  __x64_sys_mount+0x67/0x80
[  112.955145][ T6487]  x64_sys_call+0x2b51/0x3000
[  112.959863][ T6487]  do_syscall_64+0xd2/0x200
[  112.964398][ T6487]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  112.970478][ T6487]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  112.976241][ T6487]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  112.982205][ T6487] RIP: 0033:0x7ff43cb60e6a
[  112.986877][ T6487] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  113.006684][ T6487] RSP: 002b:00007ff43b5c6e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  113.015209][ T6487] RAX: ffffffffffffffda RBX: 00007ff43b5c6ef0 RCX: 00007ff43cb60e6a
[  113.023258][ T6487] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007ff43b5c6eb0
[  113.031262][ T6487] RBP: 0000200000000180 R08: 00007ff43b5c6ef0 R09: 0000000001a08700
[  113.039335][ T6487] R10: 0000000001a08700 R11: 0000000000000246 R12: 00002000000001c0
[  113.047395][ T6487] R13: 00007ff43b5c6eb0 R14: 0000000000000470 R15: 0000200000000700
[  113.055390][ T6487]  </TASK>
[  113.058407][ T6487] ---[ end trace 0000000000000000 ]---
[  113.066998][ T6487] EXT4-fs (loop1): 1 orphan inode deleted
[  113.073270][ T6487] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  113.096780][ T6492] loop0: detected capacity change from 0 to 512
[  113.103519][ T6492] EXT4-fs: Ignoring removed nobh option
[  113.125436][ T6492] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.1063: iget: bad i_size value: 38620345925642
[  113.139905][ T6492] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.1063: couldn't read orphan inode 15 (err -117)
[  113.159933][ T6492] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  113.185003][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  113.474857][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  113.494729][ T6522] loop4: detected capacity change from 0 to 512
[  113.548742][ T6522] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.1079: inode has both inline data and extents flags
[  113.619657][ T6522] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.1079: couldn't read orphan inode 15 (err -117)
[  113.637775][ T6532] loop0: detected capacity change from 0 to 512
[  113.682399][ T6522] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  113.715668][ T6532] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.1090: Failed to acquire dquot type 1
[  113.748413][ T6532] EXT4-fs (loop0): 1 truncate cleaned up
[  113.791233][ T6532] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  113.804674][ T6542] bond0: (slave dummy0): Releasing backup interface
[  113.812477][ T6542] bridge_slave_0: left allmulticast mode
[  113.818196][ T6542] bridge_slave_0: left promiscuous mode
[  113.823937][ T6542] bridge0: port 1(bridge_slave_0) entered disabled state
[  113.833916][ T6532] ext4 filesystem being mounted at /229/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  113.848247][ T6542] bridge_slave_1: left allmulticast mode
[  113.853930][ T6542] bridge_slave_1: left promiscuous mode
[  113.859984][ T6542] bridge0: port 2(bridge_slave_1) entered disabled state
[  113.879423][ T6544] loop2: detected capacity change from 0 to 4096
[  113.904385][ T6544] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  113.939332][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  114.005344][ T6542] bond0: (slave bond_slave_0): Releasing backup interface
[  114.049693][ T6542] bond0: (slave bond_slave_1): Releasing backup interface
[  114.057824][ T6542] batman_adv: batadv0: Removing interface: batadv_slave_0
[  114.102239][ T6555] netlink: 'syz.3.1089': attribute type 1 has an invalid length.
[  114.102674][ T6542] batman_adv: batadv0: Removing interface: batadv_slave_1
[  114.176493][ T6542] bond1: (slave geneve2): Releasing active interface
[  114.187050][ T6542] bond3: (slave bridge2): Releasing backup interface
[  114.197812][ T6542] bridge2: left promiscuous mode
[  114.202980][ T6542] bridge2: left allmulticast mode
[  114.230980][ T6555] 8021q: adding VLAN 0 to HW filter on device bond2
[  114.256212][ T6559] erspan0: entered allmulticast mode
[  114.267395][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  114.271375][ T6559] bond2: (slave erspan0): making interface the new active one
[  114.290820][   T29] kauditd_printk_skb: 541 callbacks suppressed
[  114.290838][   T29] audit: type=1326 audit(1763246832.710:4527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6565 comm="syz.0.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f821e41f6c9 code=0x7ffc0000
[  114.322241][ T6559] bond2: (slave erspan0): Enslaving as an active interface with an up link
[  114.331033][   T37] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20004 - 0
[  114.332279][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  114.340473][   T29] audit: type=1326 audit(1763246832.710:4528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6565 comm="syz.0.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f821e41f6c9 code=0x7ffc0000
[  114.372142][   T29] audit: type=1326 audit(1763246832.710:4529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6565 comm="syz.0.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f821e41f6c9 code=0x7ffc0000
[  114.395651][   T29] audit: type=1326 audit(1763246832.710:4530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6565 comm="syz.0.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f821e41f6c9 code=0x7ffc0000
[  114.404549][   T37] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20004 - 0
[  114.419119][   T29] audit: type=1326 audit(1763246832.710:4531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6565 comm="syz.0.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f821e41f6c9 code=0x7ffc0000
[  114.428658][   T37] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20004 - 0
[  114.451004][   T29] audit: type=1326 audit(1763246832.720:4532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6565 comm="syz.0.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f821e41f6c9 code=0x7ffc0000
[  114.483426][   T29] audit: type=1326 audit(1763246832.910:4533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6565 comm="syz.0.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f821e41f6c9 code=0x7ffc0000
[  114.506885][   T29] audit: type=1326 audit(1763246832.910:4534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6565 comm="syz.0.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f821e41f6c9 code=0x7ffc0000
[  114.549496][   T37] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20004 - 0
[  114.661709][   T29] audit: type=1326 audit(1763246832.970:4535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6565 comm="syz.0.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f821e41f6c9 code=0x7ffc0000
[  114.685238][   T29] audit: type=1326 audit(1763246832.970:4536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6565 comm="syz.0.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f821e41f6c9 code=0x7ffc0000
[  114.769927][ T6577] loop0: detected capacity change from 0 to 4096
[  114.785598][ T6579] loop3: detected capacity change from 0 to 1024
[  114.803820][ T6577] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  114.817906][ T6579] EXT4-fs: inline encryption not supported
[  114.823819][ T6579] EXT4-fs: Ignoring removed orlov option
[  114.842702][ T6579] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  114.862570][ T6575] loop4: detected capacity change from 0 to 512
[  114.868874][ T6585] loop2: detected capacity change from 0 to 2048
[  114.895763][ T6575] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.1098: Failed to acquire dquot type 1
[  114.907537][ T6579] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c019, mo2=0002]
[  114.924037][ T6585] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  114.944872][ T6579] System zones: 0-1, 3-12
[  114.949879][ T6579] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  114.962622][ T6575] EXT4-fs (loop4): 1 truncate cleaned up
[  114.994699][ T6575] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  115.024477][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.064401][ T6575] ext4 filesystem being mounted at /179/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  115.197986][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.257285][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.327896][ T6601] loop4: detected capacity change from 0 to 2048
[  115.345357][ T6603] loop0: detected capacity change from 0 to 4096
[  115.371004][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.378376][ T6603] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  115.394421][ T6601]  loop4: p1 < > p4
[  115.409990][ T6601] loop4: p4 size 8388608 extends beyond EOD, truncated
[  115.431292][ T6606] loop2: detected capacity change from 0 to 1024
[  115.475133][ T6606] EXT4-fs: Ignoring removed nomblk_io_submit option
[  115.497637][ T6606] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  115.530764][ T6610] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.1109'.
[  115.541337][ T6610] netlink: zone id is out of range
[  115.546678][ T6610] netlink: zone id is out of range
[  115.572984][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.579020][ T6610] netlink: zone id is out of range
[  115.600520][ T6610] netlink: zone id is out of range
[  115.605864][ T6610] netlink: zone id is out of range
[  115.611066][ T6610] netlink: zone id is out of range
[  115.616213][ T6610] netlink: zone id is out of range
[  115.621405][ T6610] netlink: zone id is out of range
[  115.626581][ T6610] netlink: zone id is out of range
[  115.631705][ T6610] netlink: zone id is out of range
[  115.893112][ T6624] netlink: 19 bytes leftover after parsing attributes in process `syz.0.1112'.
[  116.628836][ T6647] 9pnet: Could not find request transport: fd0x0000000000000008
[  116.692689][ T6652] loop1: detected capacity change from 0 to 764
[  116.813532][ T6661] loop0: detected capacity change from 0 to 512
[  116.847626][ T6661] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #18: comm syz.0.1128: iget: bad extra_isize 90 (inode size 256)
[  116.884896][ T6661] EXT4-fs (loop0): Remounting filesystem read-only
[  116.895856][ T6661] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -30)
[  116.934374][ T6661] EXT4-fs (loop0): 1 orphan inode deleted
[  116.973051][ T6661] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  117.085021][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  117.104032][ T6611] syz.2.1107 (6611) used greatest stack depth: 7304 bytes left
[  117.143532][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  117.379225][ T6690] pim6reg1: entered promiscuous mode
[  117.384595][ T6690] pim6reg1: entered allmulticast mode
[  117.429447][ T6697] bond1: left promiscuous mode
[  117.437353][ T6697] dummy0: left promiscuous mode
[  117.443015][ T6697] veth2: left promiscuous mode
[  117.450825][ T6697] geneve3: left promiscuous mode
[  117.461991][   T12] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  117.472973][   T12] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  117.483722][   T12] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  117.492352][   T12] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  117.592745][ T6703] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  117.601125][ T6700] tipc: Resetting bearer <eth:syzkaller0>
[  117.612736][ T6706] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1146'.
[  117.613659][ T6700] tipc: Disabling bearer <eth:syzkaller0>
[  117.736162][ T6716] loop4: detected capacity change from 0 to 512
[  117.755619][ T6716] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  117.768380][ T6716] ext4 filesystem being mounted at /189/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  117.791696][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  117.959141][ T6728] bridge0: port 2(bridge_slave_1) entered disabled state
[  117.966452][ T6728] bridge0: port 1(bridge_slave_0) entered disabled state
[  118.007269][ T6728] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  118.016988][ T6728] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  118.045049][ T6728] veth4: left promiscuous mode
[  118.053183][ T2253] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 20004 - 0
[  118.061726][ T2253] netdevsim netdevsim4 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  118.070348][ T2253] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 20004 - 0
[  118.079000][ T2253] netdevsim netdevsim4 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  118.088284][ T2253] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 20004 - 0
[  118.096872][ T2253] netdevsim netdevsim4 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  118.105676][ T2253] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 20004 - 0
[  118.114273][ T2253] netdevsim netdevsim4 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  118.153727][ T6738] 9pnet: Could not find request transport: fd0x0000000000000008
[  118.408569][ T6756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  118.435630][ T6756] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  118.605291][ T6770] loop4: detected capacity change from 0 to 1024
[  118.622201][ T6770] EXT4-fs: Ignoring removed orlov option
[  118.639811][ T6770] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  118.771567][ T6778] loop3: detected capacity change from 0 to 512
[  118.862063][ T6778] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  118.911787][ T6778] ext4 filesystem being mounted at /242/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  118.984163][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  119.633810][ T6808] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1183'.
[  119.770515][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  119.827948][ T6821] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.879475][   T29] kauditd_printk_skb: 194 callbacks suppressed
[  119.879494][   T29] audit: type=1326 audit(1763246838.300:4729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6826 comm="syz.4.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3cf5bf6c9 code=0x7ffc0000
[  119.909660][   T29] audit: type=1326 audit(1763246838.300:4730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6826 comm="syz.4.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3cf5bf6c9 code=0x7ffc0000
[  119.933325][   T29] audit: type=1326 audit(1763246838.300:4731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6826 comm="syz.4.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fc3cf5bf6c9 code=0x7ffc0000
[  119.957242][   T29] audit: type=1326 audit(1763246838.310:4732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6826 comm="syz.4.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc3cf5bf703 code=0x7ffc0000
[  119.980700][   T29] audit: type=1326 audit(1763246838.310:4733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6826 comm="syz.4.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc3cf5bf703 code=0x7ffc0000
[  120.004197][   T29] audit: type=1326 audit(1763246838.310:4734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6826 comm="syz.4.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3cf5bf6c9 code=0x7ffc0000
[  120.028356][   T29] audit: type=1326 audit(1763246838.310:4735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6826 comm="syz.4.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3cf5bf6c9 code=0x7ffc0000
[  120.052093][   T29] audit: type=1326 audit(1763246838.310:4736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6826 comm="syz.4.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3cf5bf6c9 code=0x7ffc0000
[  120.075678][   T29] audit: type=1326 audit(1763246838.310:4737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6826 comm="syz.4.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3cf5bf6c9 code=0x7ffc0000
[  120.099287][   T29] audit: type=1326 audit(1763246838.310:4738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6826 comm="syz.4.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3cf5bf6c9 code=0x7ffc0000
[  120.139088][ T6821] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.217037][ T6821] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.262077][ T6839] loop1: detected capacity change from 0 to 512
[  120.271232][ T6839] EXT4-fs: Ignoring removed mblk_io_submit option
[  120.287440][ T6821] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.298524][ T6839] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  120.312036][ T6839] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.1196: inode has both inline data and extents flags
[  120.326007][ T6839] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1196: couldn't read orphan inode 15 (err -117)
[  120.339258][ T6839] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  120.379517][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  120.394293][ T5033] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  120.408591][  T299] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  120.434033][  T299] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  120.442890][ T6844] netlink: 'syz.1.1197': attribute type 3 has an invalid length.
[  120.455654][ T6844] netlink: 'syz.1.1197': attribute type 3 has an invalid length.
[  120.464987][  T299] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  120.507192][ T6848] loop1: detected capacity change from 0 to 512
[  120.530087][ T6848] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  120.543070][ T6848] ext4 filesystem being mounted at /296/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  120.596394][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  120.702117][ T6864] netlink: 'syz.0.1205': attribute type 7 has an invalid length.
[  120.710005][ T6864] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1205'.
[  120.757457][ T6865] loop1: detected capacity change from 0 to 512
[  120.778807][ T6868] loop4: detected capacity change from 0 to 512
[  120.789323][ T6868] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  120.800448][ T6865] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  120.813157][ T6865] ext4 filesystem being mounted at /299/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  120.814988][ T6868] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  120.836403][ T6868] ext4 filesystem being mounted at /199/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  120.915258][ T6865] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  121.145012][ T6893] netlink: 'syz.2.1213': attribute type 8 has an invalid length.
[  121.153146][ T6893] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  121.500698][ T6900] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.1217'.
[  121.510077][ T6900] net_ratelimit: 79 callbacks suppressed
[  121.510094][ T6900] netlink: zone id is out of range
[  121.521226][ T6900] netlink: zone id is out of range
[  121.526429][ T6900] netlink: zone id is out of range
[  121.531572][ T6900] netlink: zone id is out of range
[  121.536729][ T6900] netlink: zone id is out of range
[  121.541866][ T6900] netlink: zone id is out of range
[  121.554890][ T6900] netlink: set zone limit has 8 unknown bytes
[  121.614876][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  121.657485][ T6903] loop4: detected capacity change from 0 to 1024
[  121.665172][ T6903] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  121.676152][ T6903] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  121.687695][ T6903] JBD2: no valid journal superblock found
[  121.693535][ T6903] EXT4-fs (loop4): Could not load journal inode
[  121.738757][ T6903] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  122.062291][ T6925] loop1: detected capacity change from 0 to 1024
[  122.072024][ T6925] EXT4-fs: inline encryption not supported
[  122.078309][ T6925] EXT4-fs: Ignoring removed orlov option
[  122.094870][ T6925] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  122.115390][ T6925] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c019, mo2=0002]
[  122.139190][ T6925] System zones: 0-1, 3-12
[  122.144063][ T6925] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  122.254480][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  122.474419][ T6934] xt_hashlimit: max too large, truncated to 1048576
[  122.656987][ T6943] loop0: detected capacity change from 0 to 1024
[  122.665796][ T6943] EXT4-fs: Ignoring removed orlov option
[  122.676222][ T6943] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  122.684544][ T6946] syzkaller0: entered promiscuous mode
[  122.694323][ T6946] syzkaller0: entered allmulticast mode
[  123.148085][ T6959] netlink: 460 bytes leftover after parsing attributes in process `syz.3.1238'.
[  123.163363][ T6959] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1238'.
[  123.176494][ T6959] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1238'.
[  123.572142][ T6977] bridge0: port 1(gretap0) entered blocking state
[  123.578722][ T6977] bridge0: port 1(gretap0) entered disabled state
[  123.585426][ T6977] gretap0: entered allmulticast mode
[  123.591944][ T6977] gretap0: entered promiscuous mode
[  123.605148][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  123.644311][ T6977] gretap0: left allmulticast mode
[  123.649461][ T6977] gretap0: left promiscuous mode
[  123.654639][ T6977] bridge0: port 1(gretap0) entered disabled state
[  124.201572][ T6996] loop0: detected capacity change from 0 to 512
[  124.239094][ T6996] ext4 filesystem being mounted at /270/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  124.315863][ T7008] loop0: detected capacity change from 0 to 512
[  124.324435][ T7008] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  124.345340][ T7008] EXT4-fs (loop0): 1 truncate cleaned up
[  124.475707][ T7013] bridge: RTM_NEWNEIGH with invalid ether address
[  124.482595][ T7017] loop3: detected capacity change from 0 to 1024
[  124.489653][ T7017] EXT4-fs: Ignoring removed orlov option
[  124.834582][ T7036] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1265'.
[  125.377354][ T7051] netlink: 460 bytes leftover after parsing attributes in process `syz.2.1271'.
[  125.424097][ T7051] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1271'.
[  125.434062][ T7051] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1271'.
[  125.640006][ T7064] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1275'.
[  125.674770][ T7066] team0 (uninitialized): Failed to send options change via netlink (err -105)
[  125.694611][ T7066] team0: entered promiscuous mode
[  125.699699][ T7066] team0: entered allmulticast mode
[  125.847676][   T29] kauditd_printk_skb: 317 callbacks suppressed
[  125.847707][   T29] audit: type=1326 audit(1763247100.219:5056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7070 comm="syz.1.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43cb5f6c9 code=0x7ffc0000
[  125.877471][   T29] audit: type=1326 audit(1763247100.219:5057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7070 comm="syz.1.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7ff43cb5f6c9 code=0x7ffc0000
[  125.900935][   T29] audit: type=1326 audit(1763247100.219:5058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7070 comm="syz.1.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43cb5f6c9 code=0x7ffc0000
[  125.924433][   T29] audit: type=1326 audit(1763247100.219:5059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7070 comm="syz.1.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43cb5f6c9 code=0x7ffc0000
[  125.947922][   T29] audit: type=1326 audit(1763247100.219:5060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7070 comm="syz.1.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7ff43cb5f6c9 code=0x7ffc0000
[  125.971341][   T29] audit: type=1326 audit(1763247100.219:5061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7070 comm="syz.1.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43cb5f6c9 code=0x7ffc0000
[  125.994902][   T29] audit: type=1326 audit(1763247100.219:5062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7070 comm="syz.1.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43cb5f6c9 code=0x7ffc0000
[  126.032956][   T29] audit: type=1326 audit(1763247100.449:5063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7077 comm="syz.2.1281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79527f6c9 code=0x7ffc0000
[  126.056597][   T29] audit: type=1326 audit(1763247100.449:5064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7077 comm="syz.2.1281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79527f6c9 code=0x7ffc0000
[  126.080366][   T29] audit: type=1326 audit(1763247100.449:5065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7077 comm="syz.2.1281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fd79527f6c9 code=0x7ffc0000
[  126.312189][ T7084] lo speed is unknown, defaulting to 1000
[  126.320898][ T7084] lo speed is unknown, defaulting to 1000
[  126.353401][ T7084] lo speed is unknown, defaulting to 1000
[  126.362713][ T7088] smc: removing ib device syz!
[  126.379860][ T7084] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  126.405863][ T7084] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  126.428155][ T7091] netlink: 'syz.2.1295': attribute type 13 has an invalid length.
[  126.434683][ T7093] loop3: detected capacity change from 0 to 1024
[  126.443186][ T7093] EXT4-fs: Ignoring removed nomblk_io_submit option
[  126.455024][ T2253] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  126.463724][ T2253] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  126.484930][ T7084] lo speed is unknown, defaulting to 1000
[  126.491248][ T7084] lo speed is unknown, defaulting to 1000
[  126.500015][ T2253] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  126.510273][   T31] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  126.553225][ T7084] lo speed is unknown, defaulting to 1000
[  126.585639][ T7084] lo speed is unknown, defaulting to 1000
[  126.684528][ T7084] lo speed is unknown, defaulting to 1000
[  126.709479][ T7104] loop2: detected capacity change from 0 to 512
[  126.716163][ T7104] EXT4-fs: Ignoring removed oldalloc option
[  126.724616][ T7104] EXT4-fs (loop2): 1 truncate cleaned up
[  126.740571][ T7104] EXT4-fs (loop2): shut down requested (0)
[  127.269172][ T7120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  127.277932][ T7120] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  127.431321][ T7047] syz.0.1279 (7047) used greatest stack depth: 6376 bytes left
[  127.621842][ T7126] __nla_validate_parse: 2 callbacks suppressed
[  127.621857][ T7126] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1297'.
[  127.626521][ T7124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  127.674314][ T7124] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  127.977533][ T7149] loop0: detected capacity change from 0 to 512
[  127.998033][ T7149] EXT4-fs (loop0): 1 orphan inode deleted
[  128.005326][ T7149] ext4 filesystem being mounted at /279/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  128.024343][ T2253] EXT4-fs error (device loop0): ext4_release_dquot:6981: comm kworker/u8:7: Failed to release dquot type 1
[  128.831548][ T7224] loop3: detected capacity change from 0 to 2048
[  128.897443][ T3303]  loop3: p2 p3 p7
[  128.901455][ T7229] loop0: detected capacity change from 0 to 128
[  128.934162][ T7224]  loop3: p2 p3 p7
[  128.961748][ T3004] udevd[3004]: worker [3303] terminated by signal 33 (Unknown signal 33)
[  128.992022][ T3004] udevd[3004]: worker [3303] failed while handling '/devices/virtual/block/loop3'
[  129.060680][ T3502] udevd[3502]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory
[  129.072603][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[  129.105643][ T7233] udevd[7233]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory
[  129.119749][ T3502] udevd[3502]: failed to send result of seq 12683 to main daemon: Connection refused
[  129.134843][ T3306] udevd[3306]: failed to send result of seq 12684 to main daemon: Transport endpoint is not connected
[  129.154695][ T7233] udevd[7233]: failed to send result of seq 12685 to main daemon: Transport endpoint is not connected
[  129.257275][ T7242] loop3: detected capacity change from 0 to 164
[  129.269672][ T7242] iso9660: Unknown parameter '&1��h*Z�iocharset%iso^�\�8
����zJ�K�%|'
[  129.286119][ T7244] loop0: detected capacity change from 0 to 164
[  129.296011][ T7244] bio_check_eod: 57 callbacks suppressed
[  129.296029][ T7244] syz.0.1320: attempt to access beyond end of device
[  129.296029][ T7244] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164
[  129.380257][ T7244] syz.0.1320: attempt to access beyond end of device
[  129.380257][ T7244] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164
[  129.475763][ T7246] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  129.492982][ T7246] tipc: Disabling bearer <eth:syzkaller0>
[  129.659994][ T7254] lo speed is unknown, defaulting to 1000
[  129.781074][ T7267] loop1: detected capacity change from 0 to 1024
[  129.795164][ T7267] EXT4-fs: Ignoring removed orlov option
[  130.320511][ T7283] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1334'.
[  130.886329][ T3314] EXT4-fs unmount: 13 callbacks suppressed
[  130.886350][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  130.955785][ T7301] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1344'.
[  130.964752][ T7301] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1344'.
[  130.989517][   T29] kauditd_printk_skb: 72 callbacks suppressed
[  130.989534][   T29] audit: type=1400 audit(1763247105.409:5137): avc:  denied  { setattr } for  pid=7299 comm="syz.2.1342" name="TIPC" dev="sockfs" ino=22472 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  131.101485][ T7307] vlan0: entered allmulticast mode
[  131.108266][ T7307] dummy0: entered allmulticast mode
[  131.114385][ T7308] loop0: detected capacity change from 0 to 128
[  131.140469][ T7314] netlink: 'syz.2.1346': attribute type 13 has an invalid length.
[  131.154947][ T7308] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[  131.189952][ T7317] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1345'.
[  131.330723][ T7320] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  131.402361][ T7323] netlink: 'syz.3.1348': attribute type 2 has an invalid length.
[  131.526430][ T7302] syz.0.1340: attempt to access beyond end of device
[  131.526430][ T7302] loop0: rw=2049, sector=161, nr_sectors = 8 limit=128
[  131.554493][ T7302] syz.0.1340: attempt to access beyond end of device
[  131.554493][ T7302] loop0: rw=2049, sector=177, nr_sectors = 16 limit=128
[  131.568961][ T7315] tipc: Resetting bearer <eth:syzkaller0>
[  131.582405][ T7302] syz.0.1340: attempt to access beyond end of device
[  131.582405][ T7302] loop0: rw=2049, sector=201, nr_sectors = 8 limit=128
[  131.596037][ T7315] tipc: Disabling bearer <eth:syzkaller0>
[  131.610236][ T7302] syz.0.1340: attempt to access beyond end of device
[  131.610236][ T7302] loop0: rw=2049, sector=217, nr_sectors = 8 limit=128
[  131.646868][ T7302] syz.0.1340: attempt to access beyond end of device
[  131.646868][ T7302] loop0: rw=2049, sector=233, nr_sectors = 8 limit=128
[  131.689572][ T7302] syz.0.1340: attempt to access beyond end of device
[  131.689572][ T7302] loop0: rw=2049, sector=249, nr_sectors = 8 limit=128
[  131.735401][ T7302] syz.0.1340: attempt to access beyond end of device
[  131.735401][ T7302] loop0: rw=2049, sector=265, nr_sectors = 8 limit=128
[  131.764301][ T7302] syz.0.1340: attempt to access beyond end of device
[  131.764301][ T7302] loop0: rw=2049, sector=281, nr_sectors = 8 limit=128
[  131.831082][   T29] audit: type=1326 audit(1763247106.249:5138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7333 comm="syz.3.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa42d64f6c9 code=0x7ffc0000
[  131.875036][ T7182] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[  131.884188][   T29] audit: type=1326 audit(1763247106.279:5139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7333 comm="syz.3.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa42d64f6c9 code=0x7ffc0000
[  131.907809][   T29] audit: type=1326 audit(1763247106.279:5140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7333 comm="syz.3.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa42d64f6c9 code=0x7ffc0000
[  131.931321][   T29] audit: type=1326 audit(1763247106.279:5141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7333 comm="syz.3.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa42d64f6c9 code=0x7ffc0000
[  131.954811][   T29] audit: type=1326 audit(1763247106.279:5142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7333 comm="syz.3.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa42d64f6c9 code=0x7ffc0000
[  131.978248][   T29] audit: type=1326 audit(1763247106.279:5143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7333 comm="syz.3.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa42d64f6c9 code=0x7ffc0000
[  132.001712][   T29] audit: type=1326 audit(1763247106.289:5144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7333 comm="syz.3.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa42d64f6c9 code=0x7ffc0000
[  132.034767][   T29] audit: type=1326 audit(1763247106.309:5145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7333 comm="syz.3.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fa42d64f6c9 code=0x7ffc0000
[  132.058148][   T29] audit: type=1326 audit(1763247106.309:5146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7333 comm="syz.3.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa42d64f6c9 code=0x7ffc0000
[  132.124861][ T7338] loop4: detected capacity change from 0 to 1024
[  132.131903][ T7338] EXT4-fs: Ignoring removed nomblk_io_submit option
[  132.167696][ T7340] loop1: detected capacity change from 0 to 1024
[  132.176625][ T7344] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1364'.
[  132.187826][ T7338] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  132.204469][ T7340] EXT4-fs: Ignoring removed orlov option
[  132.224431][ T7344] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7344 comm=syz.0.1364
[  132.237470][ T7350] loop2: detected capacity change from 0 to 1024
[  132.244143][ T7350] EXT4-fs: Ignoring removed orlov option
[  132.255741][ T7340] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  132.271522][ T7349] loop3: detected capacity change from 0 to 512
[  132.291078][ T7349] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1358'.
[  132.327234][ T7350] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  132.332486][ T7355] loop0: detected capacity change from 0 to 128
[  132.386016][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  132.475503][ T7365] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1362'.
[  132.484576][ T7365] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1362'.
[  132.494601][ T7365] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1362'.
[  132.549377][ T7370] ip6gre1: entered allmulticast mode
[  132.612165][ T7374] lo speed is unknown, defaulting to 1000
[  132.967748][ T7379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  132.994446][ T7379] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  133.117372][ T7374] netlink: 'syz.0.1367': attribute type 2 has an invalid length.
[  133.237378][ T7374] __nla_validate_parse: 1 callbacks suppressed
[  133.237397][ T7374] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1367'.
[  133.411767][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  133.441569][ T7389] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1372'.
[  133.462655][ T7389] 8021q: adding VLAN 0 to HW filter on device bond3
[  133.476044][ T7389] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1372'.
[  133.488584][ T7389] bond3: entered promiscuous mode
[  133.493970][ T7389] bond3: entered allmulticast mode
[  133.506386][ T7389] bond1: (slave dummy0): Releasing active interface
[  133.515542][ T7389] dummy0: entered promiscuous mode
[  133.520831][ T7389] dummy0: entered allmulticast mode
[  133.545014][ T7389] bond3: (slave dummy0): Enslaving as an active interface with an up link
[  133.617643][ T7392] bond3 (unregistering): (slave dummy0): Releasing backup interface
[  133.631055][ T7392] dummy0: left promiscuous mode
[  133.636334][ T7392] dummy0: left allmulticast mode
[  133.650516][ T7392] bond3 (unregistering): Released all slaves
[  133.683291][ T7396] 8021q: adding VLAN 0 to HW filter on device bond0
[  133.715662][ T7396] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  133.759725][ T7398] lo speed is unknown, defaulting to 1000
[  133.803047][ T7400] loop1: detected capacity change from 0 to 1024
[  133.814731][ T7400] EXT4-fs: inline encryption not supported
[  133.844785][ T7400] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  133.860389][ T7400] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4193: comm syz.1.1376: Allocating blocks 385-513 which overlap fs metadata
[  133.885332][ T7400] EXT4-fs (loop1): pa ffff88810757a380: logic 16, phys. 129, len 24
[  133.893458][ T7400] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 8
[  133.911740][ T7400] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 15: block 337:freeing already freed block (bit 21); block bitmap corrupt.
[  133.944689][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  133.955507][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.021907][ T7411] loop3: detected capacity change from 0 to 2048
[  134.092577][ T7415] lo speed is unknown, defaulting to 1000
[  134.161072][ T7421] loop3: detected capacity change from 0 to 1024
[  134.179865][ T7421] EXT4-fs: Ignoring removed orlov option
[  134.191712][ T7421] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  134.450445][ T7432] lo speed is unknown, defaulting to 1000
[  135.167939][ T7448] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1389'.
[  135.274187][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  135.412714][ T7464] program syz.2.1397 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  135.440381][ T7464] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7464 comm=syz.2.1397
[  135.452885][ T7464] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7464 comm=syz.2.1397
[  135.487476][ T7466] loop4: detected capacity change from 0 to 1024
[  135.507706][ T7466] EXT4-fs: Ignoring removed bh option
[  135.526395][ T7466] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  135.558656][ T7471] lo speed is unknown, defaulting to 1000
[  135.666216][ T7471] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1400'.
[  136.078541][ T7486] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1405'.
[  136.239663][ T7497] wg2: entered promiscuous mode
[  136.244634][ T7497] wg2: entered allmulticast mode
[  136.266499][   T29] kauditd_printk_skb: 116 callbacks suppressed
[  136.266517][   T29] audit: type=1400 audit(1763247110.689:5263): avc:  denied  { watch watch_reads } for  pid=7492 comm="syz.1.1408" path="/340/bus" dev="tmpfs" ino=1808 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1
[  136.307609][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  136.328609][ T7499] loop1: detected capacity change from 0 to 1024
[  136.340818][ T7499] EXT4-fs: Ignoring removed oldalloc option
[  136.346901][ T7499] EXT4-fs: Ignoring removed bh option
[  136.372781][ T7501] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1411'.
[  136.398123][ T7499] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  136.478102][ T7499] ==================================================================
[  136.486226][ T7499] BUG: KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic
[  136.495726][ T7499] 
[  136.498047][ T7499] read to 0xffff88813135a800 of 1024 bytes by task 7221 on cpu 1:
[  136.505869][ T7499]  copy_folio_from_iter_atomic+0x7fc/0x11b0
[  136.511782][ T7499]  generic_perform_write+0x2c2/0x490
[  136.517074][ T7499]  shmem_file_write_iter+0xc5/0xf0
[  136.522214][ T7499]  lo_rw_aio+0x6a0/0x760
[  136.526471][ T7499]  loop_process_work+0x52d/0xa60
[  136.531424][ T7499]  loop_workfn+0x31/0x40
[  136.535673][ T7499]  process_scheduled_works+0x4ce/0x9d0
[  136.541186][ T7499]  worker_thread+0x582/0x770
[  136.545774][ T7499]  kthread+0x489/0x510
[  136.549865][ T7499]  ret_from_fork+0x122/0x1b0
[  136.554469][ T7499]  ret_from_fork_asm+0x1a/0x30
[  136.559235][ T7499] 
[  136.561643][ T7499] write to 0xffff88813135aa56 of 14 bytes by task 7499 on cpu 0:
[  136.569354][ T7499]  copy_folio_from_iter_atomic+0x7fc/0x11b0
[  136.575255][ T7499]  generic_perform_write+0x2c2/0x490
[  136.580541][ T7499]  ext4_buffered_write_iter+0x1ee/0x3c0
[  136.586091][ T7499]  ext4_file_write_iter+0x387/0xf60
[  136.591293][ T7499]  iter_file_splice_write+0x666/0xa60
[  136.596672][ T7499]  direct_splice_actor+0x156/0x2a0
[  136.601799][ T7499]  splice_direct_to_actor+0x312/0x680
[  136.607203][ T7499]  do_splice_direct+0xda/0x150
[  136.611975][ T7499]  do_sendfile+0x380/0x650
[  136.616407][ T7499]  __x64_sys_sendfile64+0x105/0x150
[  136.621737][ T7499]  x64_sys_call+0x2bb4/0x3000
[  136.626444][ T7499]  do_syscall_64+0xd2/0x200
[  136.630949][ T7499]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  136.636842][ T7499] 
[  136.639187][ T7499] Reported by Kernel Concurrency Sanitizer on:
[  136.645381][ T7499] CPU: 0 UID: 0 PID: 7499 Comm: syz.1.1410 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  136.656705][ T7499] Tainted: [W]=WARN
[  136.660555][ T7499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  136.670630][ T7499] ==================================================================
[  136.754689][ T7506] ==================================================================
[  136.762827][ T7506] BUG: KCSAN: data-race in vfs_fsync_range / writeback_single_inode
[  136.770860][ T7506] 
[  136.773196][ T7506] write to 0xffff8881077e7a18 of 4 bytes by task 7499 on cpu 1:
[  136.780894][ T7506]  writeback_single_inode+0x150/0x3f0
[  136.786300][ T7506]  sync_inode_metadata+0x5b/0x90
[  136.791274][ T7506]  generic_buffers_fsync_noflush+0xd9/0x120
[  136.797197][ T7506]  ext4_sync_file+0x1ab/0x690
[  136.801913][ T7506]  vfs_fsync_range+0x10d/0x130
[  136.806699][ T7506]  ext4_buffered_write_iter+0x34f/0x3c0
[  136.812272][ T7506]  ext4_file_write_iter+0x387/0xf60
[  136.817490][ T7506]  iter_file_splice_write+0x666/0xa60
[  136.822906][ T7506]  direct_splice_actor+0x156/0x2a0
[  136.828482][ T7506]  splice_direct_to_actor+0x312/0x680
[  136.833966][ T7506]  do_splice_direct+0xda/0x150
[  136.838769][ T7506]  do_sendfile+0x380/0x650
[  136.843236][ T7506]  __x64_sys_sendfile64+0x105/0x150
[  136.848481][ T7506]  x64_sys_call+0x2bb4/0x3000
[  136.853185][ T7506]  do_syscall_64+0xd2/0x200
[  136.857713][ T7506]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  136.863643][ T7506] 
[  136.865981][ T7506] read to 0xffff8881077e7a18 of 4 bytes by task 7506 on cpu 0:
[  136.873542][ T7506]  vfs_fsync_range+0x9b/0x130
[  136.878252][ T7506]  ext4_buffered_write_iter+0x34f/0x3c0
[  136.883824][ T7506]  ext4_file_write_iter+0x387/0xf60
[  136.889040][ T7506]  iter_file_splice_write+0x666/0xa60
[  136.894430][ T7506]  direct_splice_actor+0x156/0x2a0
[  136.899563][ T7506]  splice_direct_to_actor+0x312/0x680
[  136.904950][ T7506]  do_splice_direct+0xda/0x150
[  136.909766][ T7506]  do_sendfile+0x380/0x650
[  136.914222][ T7506]  __x64_sys_sendfile64+0x105/0x150
[  136.919459][ T7506]  x64_sys_call+0x2bb4/0x3000
[  136.924162][ T7506]  do_syscall_64+0xd2/0x200
[  136.928699][ T7506]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  136.934607][ T7506] 
[  136.936935][ T7506] value changed: 0x00001040 -> 0x00000042
[  136.942659][ T7506] 
[  136.945003][ T7506] Reported by Kernel Concurrency Sanitizer on:
[  136.951176][ T7506] CPU: 0 UID: 0 PID: 7506 Comm: syz.1.1410 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  136.962499][ T7506] Tainted: [W]=WARN
[  136.966316][ T7506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  136.976383][ T7506] ==================================================================
[  136.996798][ T7506] ==================================================================
[  137.005021][ T7506] BUG: KCSAN: data-race in ext4_do_writepages / xas_set_mark
[  137.012424][ T7506] 
[  137.014758][ T7506] write to 0xffff8881077e7b04 of 4 bytes by task 7499 on cpu 1:
[  137.022402][ T7506]  xas_set_mark+0x12b/0x140
[  137.026929][ T7506]  __folio_start_writeback+0x155/0x390
[  137.032419][ T7506]  ext4_bio_write_folio+0x5ad/0x9f0
[  137.037662][ T7506]  mpage_process_page_bufs+0x4a1/0x620
[  137.043150][ T7506]  mpage_prepare_extent_to_map+0x786/0xc00
[  137.048978][ T7506]  ext4_do_writepages+0xa05/0x2750
[  137.054208][ T7506]  ext4_writepages+0x176/0x300
[  137.058999][ T7506]  do_writepages+0x1c6/0x310
[  137.063617][ T7506]  file_write_and_wait_range+0x156/0x2c0
[  137.069286][ T7506]  generic_buffers_fsync_noflush+0x45/0x120
[  137.075211][ T7506]  ext4_sync_file+0x1ab/0x690
[  137.079933][ T7506]  vfs_fsync_range+0x10d/0x130
[  137.084724][ T7506]  ext4_buffered_write_iter+0x34f/0x3c0
[  137.090287][ T7506]  ext4_file_write_iter+0x387/0xf60
[  137.095506][ T7506]  iter_file_splice_write+0x666/0xa60
[  137.100905][ T7506]  direct_splice_actor+0x156/0x2a0
[  137.106044][ T7506]  splice_direct_to_actor+0x312/0x680
[  137.111449][ T7506]  do_splice_direct+0xda/0x150
[  137.116255][ T7506]  do_sendfile+0x380/0x650
[  137.120696][ T7506]  __x64_sys_sendfile64+0x105/0x150
[  137.125917][ T7506]  x64_sys_call+0x2bb4/0x3000
[  137.130608][ T7506]  do_syscall_64+0xd2/0x200
[  137.135134][ T7506]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  137.141052][ T7506] 
[  137.143387][ T7506] read to 0xffff8881077e7b04 of 4 bytes by task 7506 on cpu 0:
[  137.150967][ T7506]  ext4_do_writepages+0xf6/0x2750
[  137.156014][ T7506]  ext4_writepages+0x176/0x300
[  137.160806][ T7506]  do_writepages+0x1c6/0x310
[  137.165432][ T7506]  file_write_and_wait_range+0x156/0x2c0
[  137.171095][ T7506]  generic_buffers_fsync_noflush+0x45/0x120
[  137.177031][ T7506]  ext4_sync_file+0x1ab/0x690
[  137.181741][ T7506]  vfs_fsync_range+0x10d/0x130
[  137.186553][ T7506]  ext4_buffered_write_iter+0x34f/0x3c0
[  137.192218][ T7506]  ext4_file_write_iter+0x387/0xf60
[  137.197442][ T7506]  iter_file_splice_write+0x666/0xa60
[  137.202842][ T7506]  direct_splice_actor+0x156/0x2a0
[  137.207992][ T7506]  splice_direct_to_actor+0x312/0x680
[  137.213397][ T7506]  do_splice_direct+0xda/0x150
[  137.218203][ T7506]  do_sendfile+0x380/0x650
[  137.222705][ T7506]  __x64_sys_sendfile64+0x105/0x150
[  137.227945][ T7506]  x64_sys_call+0x2bb4/0x3000
[  137.232656][ T7506]  do_syscall_64+0xd2/0x200
[  137.237189][ T7506]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  137.243108][ T7506] 
[  137.245442][ T7506] value changed: 0x0a000021 -> 0x04000021
[  137.251166][ T7506] 
[  137.253499][ T7506] Reported by Kernel Concurrency Sanitizer on:
[  137.259662][ T7506] CPU: 0 UID: 0 PID: 7506 Comm: syz.1.1410 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  137.270978][ T7506] Tainted: [W]=WARN
[  137.274786][ T7506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  137.284865][ T7506] ==================================================================
[  137.316288][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.