last executing test programs:

14.305444629s ago: executing program 0 (id=2571):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x11c, 0x3, 0x0, 0x0)
syz_clone(0x6a000000, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8010}, 0x4000800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
writev(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0)
connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x13}, 0x4}, 0x1c)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0900000004000000040000000c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x50)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)

12.448655105s ago: executing program 0 (id=2585):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000a00)=@newqdisc={0x118, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xe8, 0x2, {{0x0, 0x2, 0x40, 0x7, 0x100, 0xcc36}, [@TCA_NETEM_LOSS={0xa0, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x1, 0xffff, 0x0, 0x6}}, @NETEM_LOSS_GI={0x18, 0x1, {0xcf5d, 0x5, 0x1ff, 0x5f}}, @NETEM_LOSS_GE={0x14, 0x2, {0x1, 0x9, 0xffffffff, 0x8}}, @NETEM_LOSS_GI={0x18, 0x1, {0x3ff, 0xfffffffd, 0x7, 0x53, 0x2}}, @NETEM_LOSS_GE={0x14, 0x2, {0x9, 0x5, 0x1003, 0xb}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x3, 0x5, 0x4}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1, 0x8, 0x10000, 0x2, 0x7fff}}]}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0xbba5, 0x2}}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xff}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x1}]}}}]}, 0x118}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@getchain={0x6c, 0x66, 0x4, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xffe0, 0xffe0}, {0xfff3, 0xffee}, {0xffff, 0x6}}, [{0x8, 0xb, 0xe}, {0x8, 0xb, 0xfffffff9}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x7f}]}, 0x6c}, 0x1, 0x0, 0x0, 0x15}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'team0\x00', <r7=>0x0})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000900)={r0, 0x58, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r8=>0x0}}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000940)={'team0\x00', <r9=>0x0})
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r11=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'team0\x00', <r12=>0x0})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000a80)={'syztnl0\x00', &(0x7f0000000a00)={'syztnl1\x00', <r13=>0x0, 0x29, 0x8, 0x1, 0x4141, 0x10, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x700, 0x20, 0x8, 0x3800}})
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r15, 0x8933, &(0x7f0000004700)={'team0\x00', <r16=>0x0})
sendmsg$nl_route_sched(r14, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r16, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000ac0)={0x11, 0x0, <r17=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000b00)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000b40)={&(0x7f0000000f80)={0x89c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xffff8001}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0xb, 0xf, 0x6, 0x401}]}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xf}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1b4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8, 0x1, r6}, {0xbc, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0xfff, 0x0, 0xa3, 0x800}, {0x1, 0x8, 0x1c, 0x1}, {0x7ff, 0x9, 0x6, 0x1}, {0x85, 0x1, 0x0, 0x15}, {0xedd0, 0x8, 0x0, 0x2}, {0xc000, 0x8, 0xc0, 0xa}, {0x7, 0x7, 0xff, 0x71}]}}}]}}, {{0x8, 0x1, r7}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r9}, {0x1a8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x4, 0x3d, 0x6, 0x732}, {0x9, 0x7, 0x9, 0x1ff}, {0xab, 0xf8, 0x37, 0xe}, {0x7, 0x1, 0x80, 0x9}, {0x3, 0x3, 0x40, 0x8000}, {0x98f8, 0x81, 0xd, 0x7}, {0x4dd, 0xdb, 0x8, 0x8}, {0x2, 0x8, 0x4, 0x1}]}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}]}}, {{0x8, 0x1, r16}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x955}}, {0x8, 0x6, r17}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}]}}]}, 0x89c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000800)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x80000}, 0x100})
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r18=>0xffffffffffffffff, <r19=>0xffffffffffffffff})
recvmsg(r18, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000280), 0x1}, 0xdbcff1f39ef12d3d)
sendmsg$tipc(r19, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x4004005}, 0x0)

12.215526548s ago: executing program 0 (id=2587):
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000200)='asymmetric\x00', 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x726a6ee4c59380f6)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)

12.076275792s ago: executing program 0 (id=2589):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000080), 0x81, 0x451, &(0x7f0000000b00)="$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")
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1804011, &(0x7f0000000a40)={[{@barrier_val={'barrier', 0x3d, 0x85}}, {@journal_dev={'journal_dev', 0x3d, 0xfffffffffffffffc}}, {@sysvgroups}, {@data_journal}, {@max_batch_time={'max_batch_time', 0x3d, 0x8000000}}, {@discard}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@debug}]}, 0xd, 0x615, &(0x7f0000000400)="$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")
r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x20000, 0x42)
quotactl_fd$Q_SYNC(r1, 0xffffffff80000101, 0x0, 0x0)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002800), r2)
sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000002940)={&(0x7f00000027c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002900)={&(0x7f0000002840)=ANY=[@ANYBLOB="94003600", @ANYRES16=r3, @ANYBLOB="000127bd7000ffdbdf25080000001800018008000b00736970000c00070000000000010000001400028006000b000a00000008000600000000002400028006000b0002000000080008000c000000080003000100000006000b000200000020000180080005000000000014000300ff0200000000000000000000000000010800060008920000080006002d040000"], 0x94}, 0x1, 0x0, 0x0, 0x20008050}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x11e)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000002c00)={'syztnl0\x00', &(0x7f0000002b80)={'ip6gre0\x00', <r4=>0x0, 0x2f, 0x7f, 0xff, 0x5, 0x42, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8000, 0x1, 0x4, 0x3}})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002d40)={0x0, 0x11, &(0x7f0000002e80)=ANY=[@ANYBLOB="1800000001000000000000000400000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b703000000000000bd79ddc2c62bbd6d8500000083000000bf090000000000005509c5f9b76b1e09dcfd6749feb0af0100000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f00000029c0)='GPL\x00', 0xa, 0x6b, &(0x7f0000002b00)=""/107, 0x41000, 0x25, '\x00', r4, 0x0, r2, 0x8, &(0x7f0000002c40)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000002c80)={0x0, 0x6, 0x0, 0x3}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000002cc0)=[r2, r2, r2], &(0x7f0000002e00)=[{0x5, 0x5, 0x0, 0x4}, {0x2, 0x2, 0xf}, {0x4, 0x4, 0x3, 0x6}, {0x5, 0x1, 0xb, 0x2}, {0x1, 0x1, 0x3}, {0x3, 0x4, 0x0, 0x7}], 0x10, 0xfff}, 0x94)
renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r5}, 0x10)
mount(0x0, &(0x7f0000002a00)='./file0/../file0\x00', &(0x7f0000002980)='minix\x00', 0x5108007, 0x0)
mount$bind(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000800)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x1a9851, 0x0)
mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f00000003c0), 0x200044, 0x0)
umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0x0)
add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000240)={0x0, "73cc1901785072717cdd6863a0eb2cf426971f12df0cdf3bce409cf345f4d61117d945cc40e90f68fe143587845de05714bb08e42993571fd05a077ce2554379", 0x24}, 0x48, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @c}})
recvmmsg(r1, &(0x7f00000026c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000f80)=""/4096, 0x1000}], 0x1, &(0x7f00000002c0)=""/221, 0xdd}, 0xba2}, {{&(0x7f0000001f80)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000002240)=[{&(0x7f0000002000)=""/250, 0xfa}, {&(0x7f00000003c0)}, {&(0x7f0000002100)=""/55, 0x37}, {&(0x7f0000002140)=""/95, 0x5f}, {&(0x7f00000021c0)=""/74, 0x4a}], 0x5, &(0x7f00000022c0)=""/177, 0xb1}, 0xfffffffa}, {{&(0x7f0000002380)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f00000025c0)=[{&(0x7f0000002400)=""/78, 0x4e}, {&(0x7f0000002480)=""/90, 0x5a}, {&(0x7f0000002500)=""/157, 0x9d}], 0x3, &(0x7f0000002600)=""/189, 0xbd}, 0x2341}], 0x3, 0x102, 0x0)
link(&(0x7f00000003c0)='./bus\x00', &(0x7f0000002780)='./bus/../file0\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)

11.528898337s ago: executing program 0 (id=2593):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000100000000"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x3}, 0x0)
ioctl$PPPIOCGIDLE(0xffffffffffffffff, 0x8010743f, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
madvise(&(0x7f000030a000/0x4000)=nil, 0x4000, 0x65)
ptrace$pokeuser(0x6, 0x0, 0x388, 0x41d9fda7)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r4}, 0x18)
r5 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000024c0), 0x1, 0x0)
pwritev(r5, &(0x7f0000002600), 0x0, 0x800, 0x0)

11.283199811s ago: executing program 0 (id=2595):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3a}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = syz_io_uring_setup(0x10e, &(0x7f0000001cc0)={0x0, 0xf07d, 0x800, 0x40000, 0x101}, &(0x7f0000000400)=<r2=>0x0, &(0x7f0000000380)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x4004, @fd_index=0x1, 0x8, &(0x7f0000002a40)=[{&(0x7f0000000280)=""/221, 0xdd}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000002b00)=""/4099, 0x1000}, {&(0x7f0000000440)=""/107}, {&(0x7f0000000500)=""/193}, {&(0x7f00000003c0)=""/18}, {&(0x7f0000000700)=""/148}, {&(0x7f0000002840)=""/245}, {&(0x7f0000002940)=""/226}], 0x11b, 0x1d})
io_uring_enter(r1, 0x8aa, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000740)='kfree\x00'}, 0x18)
add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff)

11.222084118s ago: executing program 32 (id=2595):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3a}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = syz_io_uring_setup(0x10e, &(0x7f0000001cc0)={0x0, 0xf07d, 0x800, 0x40000, 0x101}, &(0x7f0000000400)=<r2=>0x0, &(0x7f0000000380)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x4004, @fd_index=0x1, 0x8, &(0x7f0000002a40)=[{&(0x7f0000000280)=""/221, 0xdd}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000002b00)=""/4099, 0x1000}, {&(0x7f0000000440)=""/107}, {&(0x7f0000000500)=""/193}, {&(0x7f00000003c0)=""/18}, {&(0x7f0000000700)=""/148}, {&(0x7f0000002840)=""/245}, {&(0x7f0000002940)=""/226}], 0x11b, 0x1d})
io_uring_enter(r1, 0x8aa, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000740)='kfree\x00'}, 0x18)
add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff)

2.39455967s ago: executing program 2 (id=2676):
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)=0x3)
syz_emit_ethernet(0x3b6, &(0x7f00000009c0)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x380, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a741e54006598080a8030000004023493b87aafaff0500ffffffe723732472eefa45ad96579269748e254c1e4a948b580a9bc430d3be27df3e34060000ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000100000000001995319cff"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x3, 0xb, "d47ae6e8805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x2000000000000040, "fcf98a102ec1876d4e6fa3b20519bbaa8a029cee00b8d3485e3b63ed09bdb581c9fe68a356f542b043059ff05932e740e077e1d16212fb"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa76ffff9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4828288e62afbf03269f1f98aea6a58cf45d7c5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c258a6f"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02c226a6bce65f81ed"}]}}}}}}, 0x0)
ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f00000000c0)=0x87)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000180)={[{@dioread_lock}, {@resgid}, {@mblk_io_submit}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resgid}, {@errors_remount}, {@grpid}, {@jqfmt_vfsv0}]}, 0xfc, 0x58f, &(0x7f0000002d00)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000500)='kfree\x00', r2}, 0x18)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{}, &(0x7f0000000000), &(0x7f00000003c0)=r2}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00'}, 0x18)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x0, 0x101002, 0x0, 0x8000007, 0x8001, 0xfffffffe, 0x0, 0x0, 0x7cce8c743ee810da})
fallocate(r1, 0x10, 0x6, 0x10001)

2.385782611s ago: executing program 1 (id=2677):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x67, 0x52b, &(0x7f0000000a00)="$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")
r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x80003, 0xff)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xfd, 0x9, 0x7fff0000}]})
migrate_pages(0x0, 0xfc, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x10)
r4 = socket$netlink(0x10, 0x3, 0x10)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r5, 0x400448cb, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x9, &(0x7f0000000180)=ANY=[@ANYRES32=r2, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r6}, &(0x7f00000003c0), &(0x7f0000000400)=r7}, 0x20)
prctl$PR_SCHED_CORE(0x48, 0x2, 0x0, 0x0, &(0x7f0000000000))
bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x3, 0x4, 0x5}, 0x50)
bind$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, 0x0, 0x0)
r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r8, 0x1, 0xa1ff, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800)
setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000fcb000), 0x4)
setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000000000)=0xfffffffe, 0x4)
r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TCSETAW(r9, 0x5407, &(0x7f0000000040)={0x4, 0x5, 0xff81, 0x4, 0x17, "a500"})

2.185800471s ago: executing program 2 (id=2679):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x4, 0x32, 0x0, 0x0, 0x4, 0x58130, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x4}, 0x81203, 0xfffd, 0xbdf7, 0x5, 0x2000000000004, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0x3, 0x7ffcfffc}]})
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x18)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={0x0}}, 0x0)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
sendmsg$can_bcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000000030800"/16, @ANYRES64=0x0, @ANYRES64=0x2710], 0x80}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10)
lsm_get_self_attr(0x65, &(0x7f0000000440)={0x0, 0x0, 0x104, 0xe4, ""/228}, &(0x7f00000000c0)=0x104, 0x0)
faccessat2(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup\x00', 0x7, 0x1100)
connect(0xffffffffffffffff, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$tipc(0x1e, 0x5, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket(0xa, 0x5, 0x0)
listen(r4, 0x100)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00'}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="05072bbd7000ffdbdf250100000018000180140002006c6f00000000000000000000000000001800028014000180080001803e0000000800010000000000040003"], 0x48}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0)
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00')
writev(r7, &(0x7f0000000240)=[{&(0x7f00000004c0)='\n', 0x1}, {&(0x7f0000000080)='=', 0x1}], 0x2)

1.854136204s ago: executing program 2 (id=2682):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x75}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
nanosleep(&(0x7f00000000c0), 0x0)

1.79619292s ago: executing program 2 (id=2685):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x75}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0xaf)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
r4 = eventfd2(0x800, 0x0)
io_setup(0x81, &(0x7f0000000400)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x20, 0x8, 0xf, r3, 0x0, 0x0, 0x46, 0x0, 0x3, r4}])
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800002, &(0x7f0000000000)={[{@noblock_validity}, {@dioread_nolock}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x22}, 0x84, 0x464, &(0x7f0000000ac0)="$eJzs3EtvG0UcAPD/bpq+S0Ipjz6AQEFEPJImLdADFxBIvSAhwaEcQ5pWpWmDmiDRKqIpQuWI+gmAIxKfgBNcEHACcYU7QqpQLgQOaNHau6lx7GAncZ3g30/aeGZ31jt/7449O2MngJ41lP9JIvZGxM8RMRARffUFhqoPS4vzk38uzk8mkWWv/57ku8Ufi/OTZdGkeNxTZIbTiPTDJA43OO7slasXJqanpy4X+dG5i++Mzl65+sz5ixPnps5NXRo/efLE8bHnnxt/dkPi3JfX9dD7M0cOnnrz5quTp2++9d0XeX33Fttr46gaXPcxh2Jo+TWp9/i6n31z2VeTTrZ1sSK0JW/r+enqr7T/geiL2ydvIF75oKuVAzoqy7Jsx4q1yz2AhQz4H0ui2zUAuqP8oM/vf8vlDnY/uu7Wi9UboDzupWKpbtkWaVGmv+7+diMNRcTphb8+yZdoOA4BALCxvsr7P0836v+lcV9NubuKuaHBiLg7IvZHxD0RcSAi7o2olL0/Ih5o8/hDdfmV/Z8fd60psBbl/b8Xirmtf/f/yt5fDPYVuX2V+PuTs+enp44Vr8lw9O/I82OrHOPrl3/6uNm22v5fviz1x2TZFyzq8du2ugG6MxNzE+uJudat65UxwGsr40+WZwKSiDgYEYfW8Pw7I+L8k58fabZ9RfyL83Xxr2ID5pmyzyKeqJ7/haiLv5SsPj85ujOmp46NllfFSt//cOO1ZsdfV/wbID//uxte/8vxDya187Wz7R/jxi8fNb2n+e/4G1//25M3Kuntxbr3JubmLo9FbE8WVq4fv71vmS/L5/EPH23c/vdH/P1psd/hiMgv4gcj4qGIeLio+yMR8WhEHF0l/m9feuzttcffWXn8Z9o6/+0n+i5882Wz47d2/k9UUsPFmlbe/1qt4HpeOwAAANgq0sp34JN0ZDmdpiMj1e/wH4jd6fTM7NxTZ2fevXSm+l35wehPy5GugZrx0LFibLjMj9flj1fGjbMsy3ZV8iOTM9OdmlMHWrOnSfvP/drX7doBHdfWPFqzX7QBW5Lfa0Lv0v6hd2n/0Lu0f+hdjdr/tYilVXe63rHqAHeQz3/oXdo/9C7tH3qX9g89aT2/618tsf9Ua4XLf0DYoWpsgUTf5qhG24lIN0U11pZIN0c1qokdEdFq4Wt3rKV0+Y0JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/wTAAD//7YA6Ok=")
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='hugetlbfs\x00', 0x800010, 0x0)
r6 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11e167, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r7}, &(0x7f0000000180), &(0x7f00000001c0)=r6}, 0x20)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r8}, 0x10)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0x7, 0x0, 0x1}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xd, 0x5a87, 0x4, 0x3, 0x0, r9}, 0x50)

1.537361926s ago: executing program 2 (id=2691):
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x6000, 0x0)
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xa2)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
r3 = dup2(r0, r0)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa9a, 0x76c4, 0x7, 0x7})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
syz_clone(0xe2840480, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$BLKTRACESTART(r3, 0x1274, 0x0)
r5 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0)
write$binfmt_script(r5, &(0x7f0000000680)={'#! ', './file0', [{}, {0x20, 'sched_switch\x00'}]}, 0x1a)
execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$BTRFS_IOC_SPACE_INFO(r6, 0xc0109414, &(0x7f0000000700)={0xbbc, 0x7, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})
sendmsg$NFT_MSG_GETRULE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="38000000070a010100000006000000000a0040010900010073797a31"], 0x38}, 0x1, 0x0, 0x0, 0x20040854}, 0x4044054)

1.459794084s ago: executing program 1 (id=2694):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000e868495fb58d00b6ad1f50ad32d6ad25dfd73a015e0ca6a0f68a7d007dc6751dfb265a0e3ccae669e173a64bc1cfd514600650a58f145ff1205fc9ddaa275e687d452d64e7cc957d77578f4c25235138d5521f9453559c35da860e8efbc64e57cbb7aee976f2b54421eed73d5661cfeecf9c66c54c3b3ffe1b4ce25d7c983cd44c05bd0a48dfe3e26e7a23129d6606ed28a69989d552af6d9a9df2c3af36e0360070011bbecc2f4a3799af2551ce935b0f327cb3f011a7d06602e2fd5234712596b696418f163d1a1a83109753f54b21cd027edd68149ee99eebc6f7d6dd4aed4af7588c8e1b44ccb19e810879b81a7000000e7ffffff00000000d7900a820b63278f4e9a217b98ef7042ad2a928903000000cbe43a1ed25268816b00000000000009d27d753a30a147b24a48435bd8a568669596e9e0867958e1dd7a0defb6670c06054002238260000000000040587c1ed797aa21a38e1e389f640a0b8b0000000000a835ad0f61ba739cd0c31b05c00fba8a4aee676d7caa2e53b91a68ff2e60da7b01a2e5785a238afa4aba70c08b0d71b6f72d6a8d87fb08533d97ad96d3943c4cc8306dac433a5cdf78b04963d679d5a5d07e618a1ef9057fec00f9e93021f5a8d30e716de8cde9c6000000000c3b64d10f0939b42b33ab2a8717096c58bb3bb1d457d8bb96870f5a7e2ba31fd69bb80235d957eaa9a40b764e5381ffa604aaafb76a980e72b408f686b185736693089213b4e140f8f38e5589663115093889deb646122a5dc5a9e5ba4d37749a36b880110e2bf524b79bc91105f1d3f7d0de694a9417d68694f17ba5e27ea1cec518b93fadcfe0de010ae9be3273ff73c34b5695080a35bfa5c69e3b533e1b939c81b3beda037b7191cb0000000000000000000010e5d683b8938db5c305cf7e6e62a6890ba9e1f4ee64f8202b59de5036569febfaa95f4633db108b2f786333ec7bacc927f4a1785165b5d2444b4c022bb5cff472e6a0c8ee9d6d8df83b704669147b732ac508c9b9f0ca0a1ce45319d43d4643eb285835daf2065b57bebd61ad6671296c27253a5f9688d57c91ccd40ffe2dbc5dd1613a2e6f5b363cc8d205ce6ef3c3c6ded7dd3dfdb39008d8997213f68cdc971c1d6fdacb7729a5560880a77525e9cfb94ef1735dfe74e6b948697f7e3580436b532a82e315d56b17a5dba98436cc24babaae409f0aab0b40af116001bc85492455956e853ead08b5793d4ecf72378a3dfd9cc837b1c66212d9a2be8fd6341c2f837c7fe09924a51ec42912856cce3d3b2d092c80813aad03e1e63a655f4138730f302df339f30a4fbd453c9a0fba381d071ad7cb80a52bec572e29b0b9b55c235806b97e166609f8083ce776075c"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x18)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0)

1.459330884s ago: executing program 3 (id=2695):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a99985000000040000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0xf00)

1.39410022s ago: executing program 3 (id=2697):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f00000010c0)=ANY=[], 0xfc, 0x2c7, &(0x7f0000000740)="$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")
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000100)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x3e, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x4, 0x3, 0x2, 0x5, 0x4470}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x3b}}}}]}]}, 0x68}}, 0x20000084)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
lsetxattr$security_capability(0x0, 0x0, &(0x7f00000002c0)=@v3={0x3000000, [{0x80032a5, 0x81}, {0x1, 0x3}]}, 0x18, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x25dfdbfc, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {0x0, 0x0, 0x0, 0x10000, 0x0, 0xfffffffe}]}, [{}, {}, {}, {}, {}, {0x448eade7}, {0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x0, 0x4, 0x0, 0xffffffff, 0x3}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0xfffffffc, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {0x6}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x9}, {}, {}, {}, {0x536d}, {}, {}, {0xfffffffe}, {}, {0xd5}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x10}, {0x80000000}, {0x8eb9, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x4, 0x0, 0x7ee}, {}, {0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0xbe0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x9}, {0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x2}, {}, {}, {}, {0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {}, {0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x2}, {}, {}, {}, {}, {}, {0x10000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x7}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x2}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0)
ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$int_in(r4, 0x5452, &(0x7f0000b28000)=0x20000000000000ff)
fcntl$setsig(r4, 0xa, 0x12)
poll(&(0x7f0000b2c000)=[{r5}], 0x2c, 0xffffffffffbffff8)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x18)
fcntl$setown(r4, 0x8, 0x0)
tkill(0x0, 0x13)

1.39343052s ago: executing program 1 (id=2699):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
timer_create(0x9, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x18)
r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, &(0x7f00000001c0)=0x10, 0x0)
shutdown(r2, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x80008a, &(0x7f0000000100), 0x1, 0x500, &(0x7f00000004c0)="$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")
pwrite64(0xffffffffffffffff, &(0x7f0000000200)="11c0", 0x2, 0x7ff)

1.218975668s ago: executing program 1 (id=2703):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10)
r2 = syz_io_uring_setup(0x10f, &(0x7f0000000580)={0x0, 0xd736, 0x1000, 0x1, 0x2bf}, &(0x7f00000001c0)=<r3=>0x0, &(0x7f00000003c0)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f00000002c0)=0x9, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x1a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100, 0x6000})
io_uring_enter(r2, 0x1b96, 0x106a, 0x22, 0x0, 0x0)

1.104611069s ago: executing program 1 (id=2705):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000200), &(0x7f0000000280)=r2}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x44800) (fail_nth: 6)

741.438036ms ago: executing program 1 (id=2706):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000100000000"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x3}, 0x0)
ioctl$PPPIOCGIDLE(0xffffffffffffffff, 0x8010743f, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
madvise(&(0x7f000030a000/0x4000)=nil, 0x4000, 0x65)
ptrace$pokeuser(0x6, 0x0, 0x388, 0x41d9fda7)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r4}, 0x18)
r5 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000024c0), 0x1, 0x0)
pwritev(r5, &(0x7f0000002600)=[{&(0x7f0000002500)}], 0x1, 0x800, 0x0)

689.697991ms ago: executing program 5 (id=2708):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000480)='timer_start\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18)
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\x10rust\xe3cusg\x91\xdeex\xe5+\xf0', 0xffffffffffffffff)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940))

646.071055ms ago: executing program 5 (id=2709):
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
semop(0x0, 0x0, 0x0)
semctl$GETZCNT(0x0, 0x1, 0xf, 0x0)
getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, 0x0)
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040))
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x800)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
prctl$PR_SET_NAME(0x4, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001180)={&(0x7f00000011c0)='mm_page_free\x00', r2}, 0x18)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000020000010000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xe, 0x0, &(0x7f0000000000)="259a53f271a76d2608064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x300, 0x8}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
rseq(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f00000001c0)='./file0\x00', 0x800082, &(0x7f0000000680)=ANY=[@ANYBLOB="756d61736b3d30303030303030303030303030303030303030333737372c616c6c6f775f7574696d653d30303030303030332c000000000083ec4c0d6e84de0249d09f31ef580c3d00000000"], 0x1, 0x191, &(0x7f0000000480)="$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")
r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x145)
fsync(r5)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10)
socket$tipc(0x1e, 0x2, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

644.667335ms ago: executing program 4 (id=2710):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x18)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0)

621.089818ms ago: executing program 4 (id=2711):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x482, &(0x7f0000000080)=ANY=[@ANYBLOB='nr_inodes=2'])
chdir(&(0x7f0000000040)='./file0\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x4}, 0x18)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x82)

590.162881ms ago: executing program 2 (id=2712):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f00000010c0)=ANY=[], 0xfc, 0x2c7, &(0x7f0000000740)="$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")
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00"/12], 0x48)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000100)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x3e, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x4, 0x3, 0x2, 0x5, 0x4470}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x3b}}}}]}]}, 0x68}}, 0x20000084)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
lsetxattr$security_capability(0x0, 0x0, &(0x7f00000002c0)=@v3={0x3000000, [{0x80032a5, 0x81}, {0x1, 0x3}]}, 0x18, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x25dfdbfc, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {0x0, 0x0, 0x0, 0x10000, 0x0, 0xfffffffe}]}, [{}, {}, {}, {}, {}, {0x448eade7}, {0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x0, 0x4, 0x0, 0xffffffff, 0x3}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0xfffffffc, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {0x6}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x9}, {}, {}, {}, {0x536d}, {}, {}, {0xfffffffe}, {}, {0xd5}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x10}, {0x80000000}, {0x8eb9, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x4, 0x0, 0x7ee}, {}, {0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0xbe0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x9}, {0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x2}, {}, {}, {}, {0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {}, {0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x2}, {}, {}, {}, {}, {}, {0x10000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x7}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x2}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0)
ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$int_in(r3, 0x5452, &(0x7f0000b28000)=0x20000000000000ff)
fcntl$setsig(r3, 0xa, 0x12)
poll(&(0x7f0000b2c000)=[{r4}], 0x2c, 0xffffffffffbffff8)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
fcntl$setown(r3, 0x8, 0x0)
tkill(0x0, 0x13)

562.216993ms ago: executing program 4 (id=2713):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x2000}, 0x18)
symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
capset(&(0x7f0000000380)={0x19980330}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7})
setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
sendmmsg$inet(r3, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4000804)

535.305706ms ago: executing program 3 (id=2714):
recvmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}, {&(0x7f00000002c0)=""/185, 0xb9}], 0x2}, 0x5}], 0x1, 0x2, 0x0)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c)
recvmmsg(r0, &(0x7f00000002c0), 0x220, 0x100, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000003800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3eb4}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="680000007e0582c8b10e5494df1353c95f132d326ca6f9e1aa6e35c7b3379ee64e9670326fc2274dff7e59b9fbbff543b52bf0c4c24f33d8e7cdf4ebd31f508e417ff0653d740800000000000000af54dc83090769fc", @ANYRES16=0x0, @ANYBLOB="000331bd7000ffdbdf25700000000c009900c7060000490000000a00060008021100000100000a000600ffffffffffff00000a000600ffffffffffff00000a00060008021100000000000a000600ffffffffffff00000a0006000802110000010000"], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x40000)
r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r1)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x77}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0x0, 0x8, 0xfa04, 0x0, 0x6c02, 0x188, 0x194, 0x194, 0x188, 0x194, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0, 0x0, {0x0, 0x74020000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x3, 0xf, {0x2}}}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'vlan0\x00', 'vlan0\x00', {}, {}, 0x11, 0x0, 0x44}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x41}, {{0x3, [0x4, 0x5, 0x3, 0x1, 0x2, 0x4], 0x4, 0x3}}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x5, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$RTC_ALM_READ(r4, 0x80247008, &(0x7f0000000000))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kfree\x00', r3, 0x0, 0xa}, 0x18)
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x22004004, &(0x7f0000000400)={[], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@subj_user={'subj_user', 0x3d, '\xd8.\'&\'\xe1]&'}}, {@permit_directio}, {@subj_type}, {@smackfsfloor={'smackfsfloor', 0x3d, '\xdd'}}, {@flag='nomand'}, {@func={'func', 0x3d, 'PATH_CHECK'}}, {@subj_user={'subj_user', 0x3d, 'ext4\x00'}}]}, 0x81, 0x477, &(0x7f0000000a40)="$eJzs3MtvG0UcAODfrpP0RZOolEcfUENBRBSSJhTogQsIpF6QkOAAx5CGqtRtURMkWlW0IFSOiDsScETiL+AEFwScQFzhjpAq1AuFA1q09m7rxE7qODVO8PdJa8/swzOzs5PMzngdwMCq5i9JRBYRv0TEWCO6dIdq4+36tYtzf127OJdElr38R1Lf789rF+fKXcvjdhSRiTQi/SCJfW3SXTh/4dRsrTZ/rohPLZ5+a2rh/IXHT56ePTF/Yv7MzNGjR56YfvqpmSdvSzl35nnd++7Z/XuOvfbxi3NZvP79l3l+7yi2N5ejYXzdaVajuvRc1o3UXx9e96dvLDubwslQHzPCmlQiIq+u4Xr7H4tK3Ky8sXjh/b5mDuipLMuyLS1rK2Xgcgb8jyXR7xwA/VH+o8/vf8vlP+x+9N3VZxs3QHm5rxdLY8tQpPnb1sYd+84epV+NiFcv//1pvkTbcQgAgNvr67z/81i7/t9ocnfTfqPF3NB4RByKiF0RcWdE7I6IuyIi3/eeiLh3jelXl8Vb+z8/beuqYB3K+3/PFHNbS/t/abnLeKUxTnapHonh5I2TtfnDxTmZiOEteXx6lTS+ef7nj1ba1tz/y5c8/bIvWOTj96FlA3THZxdn11HkJa6+F7F3qF35kxszAUlE7ImIvV18ft5vPvnoF/vz8OiO1u37b1n+VdyGeabs84hHGvV/OZaVv5Q0UlppfnJqa9TmD0+VV0WrH3688lJzfLgpfOv67628/re3vf6L8pfNoJyvXVh7Gld+/XDFe5pur/+R5JV6eKRY987s4uK56YiRYsWS9TM3jy3j5f55+ScOtiv/aLIr4p/PitOwr7hW74uI+yPiQJH3ByLiwYg4uEr5v3vuoTdXP0P9rf/jq9V/xHjSPF/fRaBy6tuvVkq/s/o/Ug9NFGs6+fvXaQbXc+4AAABgs0jr34FP0skb4TSdnGx8h393bE9rZxcWD1Xj7TPHG9+VH4/htBzpGmsaD50uxobL+MyyeDnmlWXb6vHJubO1Xs2pA53ZsUL7z/1W6XfugJ5b0zxa6xNtwCbmeU0YXNo/DC7tHwbX2tp/688FAJtXu/Z/KeJ6U7SnD2EA/aP/D4NL+4fBpf3D4NL+YSC1PhJfjvR186T/zcCuY+s6vB+BT/qTeqVHnxzNP9rRg0CkG6XiugikGyEbB4rAlojo9KhLPa3T5dcPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA5vdvAAAA///5IuKJ")
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff05000300"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010)
r5 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6143, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2)
r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
writev(r6, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1)
syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x10c4, 0x1, 0x0, 0x180000, 0x0, r6}, &(0x7f0000000380)=<r7=>0x0, &(0x7f0000000280)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_setup(0x4a32, &(0x7f00000000c0)={0x0, 0x78a9, 0x8, 0x0, 0x87}, &(0x7f0000000200)=<r9=>0x0, &(0x7f0000000240))
syz_io_uring_submit(r9, r8, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}})
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r10)

417.308918ms ago: executing program 5 (id=2715):
r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402)
dup(r0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000008000000004"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x18)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000017c0)=@newtaction={0x88c, 0x30, 0xfbed, 0x70bd29, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, 0x0, 0x0, 0x4, 0x5, 0x2, 0x4000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x5f41fde7, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x6, 0x0, 0x0, 0x7ff, 0x0, 0x4e16, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffe, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x80000000, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7fe6bd0, 0x6, 0x1ffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaa84911, 0x0, 0x0, 0x98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0xfff, 0x1, 0x0, 0x0, 0x0, 0x2]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x3a4f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x894e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x17a00, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x9, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400400, 0x0, 0x200, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffbffff, 0x0, 0x0, 0xcd9, 0x0, 0x0, 0x7, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x319e, 0x4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0xfffffffc, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0xfffc, 0x5}, {0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x482, &(0x7f0000000080)=ANY=[@ANYBLOB='nr_inodes=2'])
chdir(&(0x7f0000000040)='./file0\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0x4}, 0x18)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x82)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000010000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/14], 0x48)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004"], 0x48)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r7 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004"], 0x48)
io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

408.569969ms ago: executing program 4 (id=2716):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800110000e10e4dfb83ee46190f6fd2e7206e2b93c627dd045acf16b6b356c77cba101cb5f50512ad67e16db4373b5e627b1addb714d5127e2975a1b5673c1e46e42ff75029d79321979e90d267ab4ac2579620948c76d17541ac6e2cd4e749b46f5dd6e608646307663968b8990c78360c28b43a1206529a314643ecfe74b4c395d4ee7ff582724ae8ac01", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x74}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f0000000f40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x18)
r4 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
write$selinux_access(r4, &(0x7f00000004c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000300240248ff050005001200", 0x2e}], 0x1}, 0x0)

321.790097ms ago: executing program 4 (id=2717):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x90, 0x90, 0xa, [@const={0x5, 0x0, 0x0, 0xa, 0x4}, @const={0x8, 0x0, 0x0, 0xa, 0x1}, @restrict={0x2, 0x0, 0x0, 0xb, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3, 0x6}}, @func={0xf, 0x0, 0x0, 0xc, 0x4}, @float={0xb, 0x0, 0x0, 0x10, 0x8}, @struct={0x1, 0x2, 0x0, 0x4, 0x1, 0xffffffff, [{0xd, 0x2, 0x61}, {0xb, 0x3, 0x6}]}, @typedef, @fwd={0x2}]}, {0x0, [0x30, 0x5f, 0x0, 0x2e, 0x61, 0x61, 0x2e, 0x61]}}, &(0x7f00000005c0)=""/180, 0xb2, 0xb4, 0x0, 0x5, 0x10000}, 0x28)
r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000007c0)=@o_path={&(0x7f0000000780)='./file1\x00', 0x0, 0x18, r0}, 0x18)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=@base={0x6, 0x0, 0x9, 0xe, 0x4680, 0x1, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x3}, 0x50)
r4 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="2400000016000d190a762d7f08", 0xd}], 0x1}, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000dc0)={{0xffffffffffffffff, <r5=>0xffffffffffffffff}, &(0x7f0000000800), &(0x7f00000008c0)='%pK    \x00'}, 0x20)
r6 = dup2(r0, r0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x11, 0x1, &(0x7f0000000480)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], &(0x7f00000004c0)='syzkaller\x00', 0x432, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000006c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000740)={0x4, 0x6, 0x5, 0x1}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000e00)=[r2, r3, r5, r6], &(0x7f0000000e40)=[{0x3, 0x2, 0x0, 0x5}, {0x1, 0x5, 0x7, 0x4}, {0x1, 0x1, 0xd, 0x1}, {0x3, 0x1, 0x10, 0x1}], 0x10, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r8 = socket$inet6(0xa, 0x3, 0x5)
connect$inet6(r8, &(0x7f0000000100)={0xa, 0x4e21, 0x2, @loopback, 0x7}, 0x1c)
setsockopt$inet6_int(r8, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4)
sendmmsg(r8, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}], 0x1, 0xc040)
r9 = semget$private(0x0, 0x4, 0x0)
semop(r9, &(0x7f0000000380)=[{0x0, 0xffff}], 0x1)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r10}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000fc0)={{0x1}, &(0x7f0000000f40), &(0x7f0000000f80)=r7}, 0x20)
r11 = socket$netlink(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
r12 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r12, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0xc5)
r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r13}, 0x10)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@sysvgroups}]}, 0x1, 0x437, &(0x7f0000000900)="$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")
unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0)
getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000001000), &(0x7f0000001040)=0x4)
semtimedop(r9, &(0x7f0000000000)=[{0x0, 0x9, 0x800}, {0x2, 0x1, 0x1800}], 0x2, 0x0)

287.708811ms ago: executing program 5 (id=2718):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x8000000000000001}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0)
write$selinux_attr(r3, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d)

249.088625ms ago: executing program 3 (id=2719):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x4, 0x32, 0x0, 0x0, 0x4, 0x58130, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x4}, 0x81203, 0xfffd, 0xbdf7, 0x5, 0x2000000000004, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0x3, 0x7ffcfffc}]})
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000e868495fb58d00b6ad1f50ad32d6ad25dfd73a015e0ca6a0f68a7d007dc6751dfb265a0e3ccae669e173a64bc1cfd514600650a58f145ff1205fc9ddaa275e687d452d64e7cc957d77578f4c25235138d5521f9453559c35da860e8efbc64e57cbb7aee976f2b54421eed73d5661cfeecf9c66c54c3b3ffe1b4ce25d7c983cd44c05bd0a48dfe3e26e7a23129d6606ed28a69989d552af6d9a9df2c3af36e0360070011bbecc2f4a3799af2551ce935b0f327cb3f011a7d06602e2fd5234712596b696418f163d1a1a83109753f54b21cd027edd68149ee99eebc6f7d6dd4aed4af7588c8e1b44ccb19e810879b81a7000000e7ffffff00000000d7900a820b63278f4e9a217b98ef7042ad2a928903000000cbe43a1ed25268816b00000000000009d27d753a30a147b24a48435bd8a568669596e9e0867958e1dd7a0defb6670c06054002238260000000000040587c1ed797aa21a38e1e389f640a0b8b0000000000a835ad0f61ba739cd0c31b05c00fba8a4aee676d7caa2e53b91a68ff2e60da7b01a2e5785a238afa4aba70c08b0d71b6f72d6a8d87fb08533d97ad96d3943c4cc8306dac433a5cdf78b04963d679d5a5d07e618a1ef9057fec00f9e93021f5a8d30e716de8cde9c6000000000c3b64d10f0939b42b33ab2a8717096c58bb3bb1d457d8bb96870f5a7e2ba31fd69bb80235d957eaa9a40b764e5381ffa604aaafb76a980e72b408f686b185736693089213b4e140f8f38e5589663115093889deb646122a5dc5a9e5ba4d37749a36b880110e2bf524b79bc91105f1d3f7d0de694a9417d68694f17ba5e27ea1cec518b93fadcfe0de010ae9be3273ff73c34b5695080a35bfa5c69e3b533e1b939c81b3beda037b7191cb0000000000000000000010e5d683b8938db5c305cf7e6e62a6890ba9e1f4ee64f8202b59de5036569febfaa95f4633db108b2f786333ec7bacc927f4a1785165b5d2444b4c022bb5cff472e6a0c8ee9d6d8df83b704669147b732ac508c9b9f0ca0a1ce45319d43d4643eb285835daf2065b57bebd61ad6671296c27253a5f9688d57c91ccd40ffe2dbc5dd1613a2e6f5b363cc8d205ce6ef3c3c6ded7dd3dfdb39008d8997213f68cdc971c1d6fdacb7729a5560880a77525e9cfb94ef1735dfe74e6b948697f7e3580436b532a82e315d56b17a5dba98436cc24babaae409f0aab0b40af116001bc85492455956e853ead08b5793d4ecf72378a3dfd9cc837b1c66212d9a2be8fd6341c2f837c7fe09924a51ec42912856cce3d3b2d092c80813aad03e1e63a655f4138730f302df339f30a4fbd453c9a0fba381d071ad7cb80a52bec572e29b0b9b55c235806b97e166609f8083ce776075c"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x18)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x14, 0x30, 0x9}, 0x14}}, 0x0)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
sendmsg$can_bcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000000030800"/16, @ANYRES64=0x0, @ANYRES64=0x2710], 0x80}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10)
lsm_get_self_attr(0x65, &(0x7f0000000440)={0x0, 0x0, 0x104, 0xe4, ""/228}, &(0x7f00000000c0)=0x104, 0x0)
faccessat2(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup\x00', 0x7, 0x1100)
connect(0xffffffffffffffff, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$tipc(0x1e, 0x5, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket(0xa, 0x5, 0x0)
listen(r4, 0x100)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00'}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="05072bbd7000ffdbdf250100000018000180140002006c6f00000000000000000000000000001800028014000180080001803e0000000800010000000000040003"], 0x48}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0)
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00')
writev(r7, &(0x7f0000000240)=[{&(0x7f00000004c0)='\n', 0x1}, {&(0x7f0000000080)='=', 0x1}], 0x2)

205.027289ms ago: executing program 5 (id=2720):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff9ce}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x843}, 0x44040)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002100)=ANY=[@ANYBLOB="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"], 0x1128}}, 0x20000000)

132.324416ms ago: executing program 3 (id=2721):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x18)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0)

101.658869ms ago: executing program 5 (id=2722):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYBLOB="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"], 0x25, 0x359, &(0x7f0000000bc0)="$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")
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x51, 0x1, 0x0, 0x0, 0x0, 0x7, 0x98142, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x4190, 0xaea}, 0x4105, 0x1, 0x6, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x40000000000a9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, 0x0, 0x8000)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00!\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={0x0, r0}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r1=>r0}, './file2\x00'})
setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000380)={0x1, &(0x7f00000002c0)=[{0x20, 0x82, 0x0, 0x8}]}, 0x10)
syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x36e, &(0x7f00000007c0)="$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")
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r3}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x300}, 0x1f00)
sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
r6 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000000140)=[{0x0}], 0x1)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r6, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0)

73.927463ms ago: executing program 3 (id=2723):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000240)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000a50000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10)
connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
socketpair(0x1e, 0x80005, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_config_ext={0x400000000000000}, 0x18000, 0x0, 0xfffffffe, 0x0, 0x9, 0xfffffffd}, 0x0, 0x10, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0)
r2 = openat$cgroup_type(r1, &(0x7f0000000300), 0x2, 0x0)
write$cgroup_type(r2, &(0x7f0000000280), 0x9)
r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000c40), 0x12)
mkdir(&(0x7f0000000180)='./file0\x00', 0x8)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000340)={0x3}, 0x8)
r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12)
write$cgroup_int(r5, &(0x7f00000000c0), 0x12)
socketpair$tipc(0x1e, 0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mkdir(0x0, 0x0)
syz_clone(0xd024100, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000007f7ffffff070000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r6}, 0x18)

0s ago: executing program 4 (id=2724):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32=0x0, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a0000000000008500000006000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548}}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0)

kernel console output (not intermixed with test programs):

 after parsing attributes in process `syz.2.2148'.
[  193.311975][T10424] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  193.335248][T10430] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2151'.
[  193.344417][T10428] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  193.376408][T10430] ALSA: seq fatal error: cannot create timer (-19)
[  193.470489][T10441] SELinux: failed to load policy
[  193.600628][T10452] loop1: detected capacity change from 0 to 1024
[  193.607368][T10453] loop2: detected capacity change from 0 to 512
[  193.614183][T10453] EXT4-fs: inline encryption not supported
[  193.621203][T10453] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[  193.629563][T10453] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.2159: invalid indirect mapped block 2683928664 (level 1)
[  193.638644][T10452] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  193.643934][T10453] EXT4-fs (loop2): 1 truncate cleaned up
[  193.661809][T10453] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  193.675349][T10452] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4193: comm syz.1.2158: Allocating blocks 449-513 which overlap fs metadata
[  193.690987][T10450] EXT4-fs (loop1): pa ffff888100563bd0: logic 48, phys. 177, len 21
[  193.699106][T10450] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4
[  193.719565][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  193.722206][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  193.745579][T10458] FAULT_INJECTION: forcing a failure.
[  193.745579][T10458] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  193.758754][T10458] CPU: 0 UID: 0 PID: 10458 Comm: syz.2.2161 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  193.758786][T10458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  193.758810][T10458] Call Trace:
[  193.758819][T10458]  <TASK>
[  193.758828][T10458]  __dump_stack+0x1d/0x30
[  193.758901][T10458]  dump_stack_lvl+0xe8/0x140
[  193.758921][T10458]  dump_stack+0x15/0x1b
[  193.758946][T10458]  should_fail_ex+0x265/0x280
[  193.758968][T10458]  should_fail+0xb/0x20
[  193.758986][T10458]  should_fail_usercopy+0x1a/0x20
[  193.759017][T10458]  _copy_from_user+0x1c/0xb0
[  193.759045][T10458]  ___sys_sendmsg+0xc1/0x1d0
[  193.759152][T10458]  __x64_sys_sendmsg+0xd4/0x160
[  193.759177][T10458]  x64_sys_call+0x191e/0x3000
[  193.759203][T10458]  do_syscall_64+0xd2/0x200
[  193.759227][T10458]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  193.759293][T10458]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  193.759329][T10458]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  193.759351][T10458] RIP: 0033:0x7f40a42af6c9
[  193.759376][T10458] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  193.759395][T10458] RSP: 002b:00007f40a2d0f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  193.759414][T10458] RAX: ffffffffffffffda RBX: 00007f40a4505fa0 RCX: 00007f40a42af6c9
[  193.759427][T10458] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  193.759439][T10458] RBP: 00007f40a2d0f090 R08: 0000000000000000 R09: 0000000000000000
[  193.759452][T10458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  193.759470][T10458] R13: 00007f40a4506038 R14: 00007f40a4505fa0 R15: 00007fffc5f5e598
[  193.759571][T10458]  </TASK>
[  194.010783][T10462] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  194.047968][T10469] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  194.059038][T10468] loop1: detected capacity change from 0 to 512
[  194.080414][T10468] EXT4-fs: inline encryption not supported
[  194.112960][T10468] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2
[  194.137886][T10468] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.2160: invalid indirect mapped block 2683928664 (level 1)
[  194.162162][T10468] EXT4-fs (loop1): 1 truncate cleaned up
[  194.174025][T10468] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  194.276223][T10469] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  194.322961][T10469] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  194.337999][T10492] IPv6: addrconf: prefix option has invalid lifetime
[  194.358942][T10492] loop2: detected capacity change from 0 to 1024
[  194.368886][T10492] EXT4-fs: Ignoring removed mblk_io_submit option
[  194.382841][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  194.395756][T10493] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2173'.
[  194.405534][T10469] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  194.416909][T10493] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2173'.
[  194.439551][T10492] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  194.493249][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  194.525675][   T42] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  194.545515][   T42] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  194.557370][   T42] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  194.562041][T10509] loop2: detected capacity change from 0 to 512
[  194.567383][   T42] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  194.587991][T10508] netlink: 'syz.0.2177': attribute type 5 has an invalid length.
[  194.597094][T10509] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[  194.610954][T10509] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.2178: invalid indirect mapped block 2683928664 (level 1)
[  194.625121][T10514] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  194.627976][T10509] EXT4-fs (loop2): Remounting filesystem read-only
[  194.645395][T10509] EXT4-fs (loop2): 1 truncate cleaned up
[  194.651876][T10509] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  194.665145][T10509] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  194.723039][T10520] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10520 comm=syz.3.2182
[  194.947027][T10539] FAULT_INJECTION: forcing a failure.
[  194.947027][T10539] name failslab, interval 1, probability 0, space 0, times 0
[  194.959775][T10539] CPU: 1 UID: 0 PID: 10539 Comm: syz.0.2188 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  194.959808][T10539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  194.959857][T10539] Call Trace:
[  194.959863][T10539]  <TASK>
[  194.959871][T10539]  __dump_stack+0x1d/0x30
[  194.959898][T10539]  dump_stack_lvl+0xe8/0x140
[  194.959957][T10539]  dump_stack+0x15/0x1b
[  194.960057][T10539]  should_fail_ex+0x265/0x280
[  194.960076][T10539]  should_failslab+0x8c/0xb0
[  194.960111][T10539]  kmem_cache_alloc_noprof+0x50/0x480
[  194.960146][T10539]  ? security_inode_alloc+0x37/0x100
[  194.960175][T10539]  security_inode_alloc+0x37/0x100
[  194.960263][T10539]  inode_init_always_gfp+0x4b7/0x500
[  194.960297][T10539]  ? __pfx_hugetlbfs_alloc_inode+0x10/0x10
[  194.960333][T10539]  alloc_inode+0x58/0x170
[  194.960359][T10539]  new_inode+0x1d/0xe0
[  194.960400][T10539]  hugetlbfs_get_inode+0x7b/0x370
[  194.960430][T10539]  hugetlb_file_setup+0x192/0x3d0
[  194.960462][T10539]  ksys_mmap_pgoff+0x157/0x310
[  194.960559][T10539]  x64_sys_call+0x14a3/0x3000
[  194.960582][T10539]  do_syscall_64+0xd2/0x200
[  194.960660][T10539]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  194.960750][T10539]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  194.960787][T10539]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  194.960901][T10539] RIP: 0033:0x7f924ea2f6c9
[  194.960918][T10539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  194.960940][T10539] RSP: 002b:00007f924d48f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  194.960959][T10539] RAX: ffffffffffffffda RBX: 00007f924ec85fa0 RCX: 00007f924ea2f6c9
[  194.960972][T10539] RDX: 000000000300000c RSI: 0000000000c00000 RDI: 0000200000400000
[  194.960986][T10539] RBP: 00007f924d48f090 R08: ffffffffffffffff R09: 0000000000000000
[  194.961064][T10539] R10: 0000000000050032 R11: 0000000000000246 R12: 0000000000000001
[  194.961079][T10539] R13: 00007f924ec86038 R14: 00007f924ec85fa0 R15: 00007fff721d1598
[  194.961100][T10539]  </TASK>
[  195.193395][T10542] loop4: detected capacity change from 0 to 512
[  195.200016][T10542] SELinux: security_context_str_to_sid (root) failed with errno=-22
[  195.230476][T10543] loop0: detected capacity change from 0 to 512
[  195.234292][T10524] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2183'.
[  195.250993][T10543] journal_path: Non-blockdev passed as './bus'
[  195.257252][T10543] EXT4-fs: error: could not find journal device path
[  195.364913][T10553] loop0: detected capacity change from 0 to 512
[  195.375100][T10553] SELinux: security_context_str_to_sid (root) failed with errno=-22
[  195.422989][T10551] SELinux:  Context @ is not valid (left unmapped).
[  195.451059][T10551] bond0: option all_slaves_active: invalid value (5)
[  195.459970][T10556] loop1: detected capacity change from 0 to 128
[  195.513605][T10551] bond0 (unregistering): Released all slaves
[  195.593489][T10558] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2196'.
[  195.740452][T10596] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10596 comm=syz.0.2208
[  195.794396][T10596] loop0: detected capacity change from 0 to 1024
[  195.808496][T10596] EXT4-fs: Ignoring removed nobh option
[  195.814117][T10596] EXT4-fs: Ignoring removed bh option
[  195.843914][T10596] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  195.896481][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  196.022105][T10628] loop1: detected capacity change from 0 to 128
[  196.035233][T10631] netlink: 212 bytes leftover after parsing attributes in process `syz.3.2220'.
[  196.097739][T10639] syz.1.2219: attempt to access beyond end of device
[  196.097739][T10639] loop1: rw=2049, sector=138, nr_sectors = 8 limit=128
[  196.112611][T10639] syz.1.2219: attempt to access beyond end of device
[  196.112611][T10639] loop1: rw=2049, sector=146, nr_sectors = 6 limit=128
[  196.128302][T10639] syz.1.2219: attempt to access beyond end of device
[  196.128302][T10639] loop1: rw=2049, sector=150, nr_sectors = 2 limit=128
[  196.141798][T10639] Buffer I/O error on dev loop1, logical block 75, lost async page write
[  196.150245][T10639] syz.1.2219: attempt to access beyond end of device
[  196.150245][T10639] loop1: rw=2049, sector=152, nr_sectors = 2 limit=128
[  196.163823][T10639] Buffer I/O error on dev loop1, logical block 76, lost async page write
[  196.189425][T10639] syz.1.2219: attempt to access beyond end of device
[  196.189425][T10639] loop1: rw=2049, sector=170, nr_sectors = 6 limit=128
[  196.212605][T10639] syz.1.2219: attempt to access beyond end of device
[  196.212605][T10639] loop1: rw=2049, sector=174, nr_sectors = 2 limit=128
[  196.226142][T10639] Buffer I/O error on dev loop1, logical block 87, lost async page write
[  196.354602][T10639] syz.1.2219: attempt to access beyond end of device
[  196.354602][T10639] loop1: rw=2049, sector=176, nr_sectors = 2 limit=128
[  196.368122][T10639] Buffer I/O error on dev loop1, logical block 88, lost async page write
[  196.380824][T10657] 0ªX¹¦À: renamed from caif0
[  196.385869][T10639] syz.1.2219: attempt to access beyond end of device
[  196.385869][T10639] loop1: rw=2049, sector=178, nr_sectors = 6 limit=128
[  196.400971][T10657] 0ªX¹¦À: entered allmulticast mode
[  196.402579][T10639] syz.1.2219: attempt to access beyond end of device
[  196.402579][T10639] loop1: rw=2049, sector=182, nr_sectors = 2 limit=128
[  196.406231][T10657] A link change request failed with some changes committed already. Interface 
60ªX¹¦À may have been left with an inconsistent configuration, please check.
[  196.419629][T10639] Buffer I/O error on dev loop1, logical block 91, lost async page write
[  196.444336][T10639] syz.1.2219: attempt to access beyond end of device
[  196.444336][T10639] loop1: rw=2049, sector=184, nr_sectors = 2 limit=128
[  196.457938][T10639] Buffer I/O error on dev loop1, logical block 92, lost async page write
[  196.467501][T10639] Buffer I/O error on dev loop1, logical block 103, lost async page write
[  196.467527][T10639] Buffer I/O error on dev loop1, logical block 104, lost async page write
[  196.468087][T10639] Buffer I/O error on dev loop1, logical block 107, lost async page write
[  196.493826][T10639] Buffer I/O error on dev loop1, logical block 108, lost async page write
[  196.542388][T10667] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096
[  196.543364][T10665] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[  196.644092][T10685] loop2: detected capacity change from 0 to 512
[  196.663983][T10685] EXT4-fs: Ignoring removed mblk_io_submit option
[  196.677656][T10691] loop0: detected capacity change from 0 to 512
[  196.684696][T10691] SELinux: security_context_str_to_sid (root) failed with errno=-22
[  196.695058][T10685] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  196.730770][T10685] EXT4-fs (loop2): 1 truncate cleaned up
[  196.759318][T10685] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  196.796296][T10706] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096
[  196.839722][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  196.873897][T10715] FAULT_INJECTION: forcing a failure.
[  196.873897][T10715] name failslab, interval 1, probability 0, space 0, times 0
[  196.886644][T10715] CPU: 0 UID: 0 PID: 10715 Comm: +“[@ Not tainted syzkaller #0 PREEMPT(voluntary) 
[  196.886673][T10715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  196.886733][T10715] Call Trace:
[  196.886738][T10715]  <TASK>
[  196.886745][T10715]  __dump_stack+0x1d/0x30
[  196.886767][T10715]  dump_stack_lvl+0xe8/0x140
[  196.886827][T10715]  dump_stack+0x15/0x1b
[  196.886848][T10715]  should_fail_ex+0x265/0x280
[  196.886871][T10715]  should_failslab+0x8c/0xb0
[  196.886946][T10715]  __kmalloc_node_noprof+0xaa/0x580
[  196.886981][T10715]  ? qdisc_alloc+0x65/0x440
[  196.887080][T10715]  qdisc_alloc+0x65/0x440
[  196.887112][T10715]  ? nla_strcmp+0xc3/0xe0
[  196.887135][T10715]  qdisc_create+0xf5/0x9e0
[  196.887188][T10715]  tc_modify_qdisc+0xf2e/0x1420
[  196.887221][T10715]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  196.887249][T10715]  rtnetlink_rcv_msg+0x65a/0x6d0
[  196.887277][T10715]  netlink_rcv_skb+0x123/0x220
[  196.887325][T10715]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  196.887355][T10715]  rtnetlink_rcv+0x1c/0x30
[  196.887446][T10715]  netlink_unicast+0x5c0/0x690
[  196.887537][T10715]  netlink_sendmsg+0x58b/0x6b0
[  196.887560][T10715]  ? __pfx_netlink_sendmsg+0x10/0x10
[  196.887581][T10715]  __sock_sendmsg+0x145/0x180
[  196.887661][T10715]  ____sys_sendmsg+0x31e/0x4e0
[  196.887699][T10715]  ___sys_sendmsg+0x17b/0x1d0
[  196.887787][T10715]  __x64_sys_sendmsg+0xd4/0x160
[  196.887812][T10715]  x64_sys_call+0x191e/0x3000
[  196.887843][T10715]  do_syscall_64+0xd2/0x200
[  196.887867][T10715]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  196.887946][T10715]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  196.887993][T10715]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  196.888045][T10715] RIP: 0033:0x7f2a3f6df6c9
[  196.888062][T10715] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  196.888159][T10715] RSP: 002b:00007f2a3e13f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  196.888179][T10715] RAX: ffffffffffffffda RBX: 00007f2a3f935fa0 RCX: 00007f2a3f6df6c9
[  196.888193][T10715] RDX: 0000000000000000 RSI: 00002000000012c0 RDI: 0000000000000003
[  196.888206][T10715] RBP: 00007f2a3e13f090 R08: 0000000000000000 R09: 0000000000000000
[  196.888218][T10715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  196.888230][T10715] R13: 00007f2a3f936038 R14: 00007f2a3f935fa0 R15: 00007fff6828b718
[  196.888247][T10715]  </TASK>
[  197.141367][T10720] loop4: detected capacity change from 0 to 8192
[  197.148332][T10722] loop0: detected capacity change from 0 to 1024
[  197.150011][   T29] kauditd_printk_skb: 868 callbacks suppressed
[  197.150027][   T29] audit: type=1400 audit(1763039782.974:18170): avc:  denied  { create } for  pid=10723 comm="syz.3.2252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  197.180798][   T29] audit: type=1400 audit(1763039782.974:18171): avc:  denied  { getopt } for  pid=10723 comm="syz.3.2252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  197.181271][T10722] EXT4-fs: Ignoring removed mblk_io_submit option
[  197.200803][   T29] audit: type=1400 audit(1763039782.974:18172): avc:  denied  { create } for  pid=10723 comm="syz.3.2252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  197.226964][   T29] audit: type=1400 audit(1763039782.974:18173): avc:  denied  { ioctl } for  pid=10723 comm="syz.3.2252" path="socket:[33413]" dev="sockfs" ino=33413 ioctlcmd=0x9372 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  197.262757][T10726] FAULT_INJECTION: forcing a failure.
[  197.262757][T10726] name failslab, interval 1, probability 0, space 0, times 0
[  197.275432][T10726] CPU: 0 UID: 0 PID: 10726 Comm: syz.2.2250 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  197.275459][T10726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  197.275472][T10726] Call Trace:
[  197.275478][T10726]  <TASK>
[  197.275486][T10726]  __dump_stack+0x1d/0x30
[  197.275566][T10726]  dump_stack_lvl+0xe8/0x140
[  197.275591][T10726]  dump_stack+0x15/0x1b
[  197.275612][T10726]  should_fail_ex+0x265/0x280
[  197.275633][T10726]  should_failslab+0x8c/0xb0
[  197.275730][T10726]  kmem_cache_alloc_node_noprof+0x57/0x4a0
[  197.275762][T10726]  ? __alloc_skb+0x101/0x320
[  197.275797][T10726]  __alloc_skb+0x101/0x320
[  197.275834][T10726]  netlink_alloc_large_skb+0xbf/0xf0
[  197.275933][T10726]  netlink_sendmsg+0x3cf/0x6b0
[  197.275956][T10726]  ? __pfx_netlink_sendmsg+0x10/0x10
[  197.275979][T10726]  __sock_sendmsg+0x145/0x180
[  197.276011][T10726]  ____sys_sendmsg+0x31e/0x4e0
[  197.276098][T10726]  ___sys_sendmsg+0x17b/0x1d0
[  197.276131][T10726]  __x64_sys_sendmsg+0xd4/0x160
[  197.276233][T10726]  x64_sys_call+0x191e/0x3000
[  197.276283][T10726]  do_syscall_64+0xd2/0x200
[  197.276304][T10726]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  197.276406][T10726]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  197.276481][T10726]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  197.276506][T10726] RIP: 0033:0x7f40a42af6c9
[  197.276558][T10726] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  197.276577][T10726] RSP: 002b:00007f40a2d0f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  197.276596][T10726] RAX: ffffffffffffffda RBX: 00007f40a4505fa0 RCX: 00007f40a42af6c9
[  197.276610][T10726] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000005
[  197.276657][T10726] RBP: 00007f40a2d0f090 R08: 0000000000000000 R09: 0000000000000000
[  197.276670][T10726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  197.276683][T10726] R13: 00007f40a4506038 R14: 00007f40a4505fa0 R15: 00007fffc5f5e598
[  197.276702][T10726]  </TASK>
[  197.477309][   T29] audit: type=1400 audit(1763039783.004:18174): avc:  denied  { prog_run } for  pid=10725 comm="syz.2.2250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  197.496612][   T29] audit: type=1400 audit(1763039783.024:18175): avc:  denied  { mounton } for  pid=10719 comm="syz.0.2251" path="/409/file1" dev="tmpfs" ino=2271 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  197.519563][   T29] audit: type=1400 audit(1763039783.104:18176): avc:  denied  { mount } for  pid=10712 comm="syz.4.2248" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[  197.541699][   T29] audit: type=1400 audit(1763039783.104:18177): avc:  denied  { write } for  pid=10712 comm="syz.4.2248" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  197.564737][   T29] audit: type=1400 audit(1763039783.124:18178): avc:  denied  { create } for  pid=10729 comm="syz.3.2254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  197.584524][   T29] audit: type=1400 audit(1763039783.124:18179): avc:  denied  { connect } for  pid=10729 comm="syz.3.2254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  197.605972][T10713] hub 1-0:1.0: USB hub found
[  197.611954][T10713] hub 1-0:1.0: 8 ports detected
[  197.615357][T10728] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10728 comm=syz.1.2253
[  197.618354][T10731] netlink: 'syz.3.2254': attribute type 10 has an invalid length.
[  197.632180][T10728] netlink: 'syz.1.2253': attribute type 3 has an invalid length.
[  197.680011][T10722] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  197.739422][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  197.853282][T10748] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096
[  197.876575][T10749] loop0: detected capacity change from 0 to 512
[  197.885305][T10749] SELinux: security_context_str_to_sid (root) failed with errno=-22
[  197.948418][T10754] loop1: detected capacity change from 0 to 512
[  197.955091][T10754] EXT4-fs: Ignoring removed mblk_io_submit option
[  198.014662][T10754] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  198.033264][T10754] EXT4-fs (loop1): 1 truncate cleaned up
[  198.039465][T10754] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  198.129227][T10763] lo speed is unknown, defaulting to 1000
[  198.135629][T10763] lo speed is unknown, defaulting to 1000
[  198.227697][T10762] loop0: detected capacity change from 0 to 1024
[  198.283739][T10762] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  198.301196][T10762] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4193: comm syz.0.2265: Allocating blocks 497-513 which overlap fs metadata
[  198.326232][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  198.435694][T10769] __nla_validate_parse: 7 callbacks suppressed
[  198.435712][T10769] netlink: 7 bytes leftover after parsing attributes in process `syz.0.2265'.
[  198.467850][T10769] netlink: 7 bytes leftover after parsing attributes in process `syz.0.2265'.
[  198.477614][T10761] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4193: comm syz.0.2265: Allocating blocks 497-513 which overlap fs metadata
[  198.509768][T10761] EXT4-fs (loop0): pa ffff888100563c40: logic 256, phys. 369, len 9
[  198.510020][T10771] hub 5-0:1.0: USB hub found
[  198.517862][T10761] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 1
[  198.532868][T10771] hub 5-0:1.0: 8 ports detected
[  198.597261][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  198.696843][T10791] loop0: detected capacity change from 0 to 512
[  198.723844][T10791] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  198.738058][T10791] ext4 filesystem being mounted at /415/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  198.760073][T10791] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #2: comm syz.0.2275: corrupted inode contents
[  198.772256][T10791] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #2: comm syz.0.2275: mark_inode_dirty error
[  198.799423][T10802] loop1: detected capacity change from 0 to 512
[  198.807672][T10802] EXT4-fs: Ignoring removed mblk_io_submit option
[  198.818690][T10791] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #2: comm syz.0.2275: corrupted inode contents
[  198.830666][T10802] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  198.841478][T10791] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.2275: mark_inode_dirty error
[  198.859035][T10802] EXT4-fs (loop1): 1 truncate cleaned up
[  198.864883][T10793] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  198.865441][T10802] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  198.903623][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  198.926142][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  199.076613][T10815] IPv6: addrconf: prefix option has invalid lifetime
[  199.108781][T10815] loop4: detected capacity change from 0 to 1024
[  199.223711][T10820] lo speed is unknown, defaulting to 1000
[  199.230533][T10820] lo speed is unknown, defaulting to 1000
[  200.072841][T10819] loop1: detected capacity change from 0 to 1024
[  200.079592][T10819] EXT4-fs: Ignoring removed mblk_io_submit option
[  200.086458][T10815] EXT4-fs: Ignoring removed mblk_io_submit option
[  200.103218][T10815] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  200.126176][T10819] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  200.210386][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  200.225136][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  200.297970][T10832] loop1: detected capacity change from 0 to 512
[  200.327858][T10832] EXT4-fs: inline encryption not supported
[  200.372393][T10832] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2
[  200.420258][T10832] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.2286: invalid indirect mapped block 2683928664 (level 1)
[  200.593874][T10832] EXT4-fs (loop1): 1 truncate cleaned up
[  200.631260][T10832] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  200.685788][T10844] loop2: detected capacity change from 0 to 512
[  200.712753][T10844] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[  200.722788][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  200.732033][T10844] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.2292: invalid indirect mapped block 2683928664 (level 1)
[  200.746891][T10844] EXT4-fs (loop2): Remounting filesystem read-only
[  200.770812][T10844] EXT4-fs (loop2): 1 truncate cleaned up
[  200.784268][T10844] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  200.797461][T10844] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  200.898534][T10848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  200.920979][T10857] loop2: detected capacity change from 0 to 1024
[  200.921746][T10848] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  200.928527][T10857] EXT4-fs: Ignoring removed mblk_io_submit option
[  200.953172][T10857] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  200.975758][T10848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  200.985746][T10848] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  200.994901][T10848] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2293'.
[  201.005598][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  201.040648][T10863] hub 5-0:1.0: USB hub found
[  201.046341][T10863] hub 5-0:1.0: 8 ports detected
[  201.068022][T10863] syzkaller1: entered promiscuous mode
[  201.073639][T10863] syzkaller1: entered allmulticast mode
[  201.136811][T10865] loop1: detected capacity change from 0 to 512
[  201.153095][T10865] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  201.165615][T10865] ext4 filesystem being mounted at /463/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  201.177188][T10865] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  201.229932][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  201.592743][T10895] hub 5-0:1.0: USB hub found
[  201.610440][T10895] hub 5-0:1.0: 8 ports detected
[  201.681882][T10895] syzkaller1: entered promiscuous mode
[  201.687429][T10895] syzkaller1: entered allmulticast mode
[  201.709149][T10900] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096
[  201.979702][T10920] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2321'.
[  201.988759][T10920] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2321'.
[  202.015321][T10921] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2320'.
[  202.035343][T10921] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2320'.
[  202.051394][T10923] loop4: detected capacity change from 0 to 512
[  202.070771][T10923] EXT4-fs: inline encryption not supported
[  202.079887][T10923] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[  202.098272][T10923] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.2322: invalid indirect mapped block 2683928664 (level 1)
[  202.114400][T10923] EXT4-fs (loop4): 1 truncate cleaned up
[  202.125178][T10923] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  202.140027][T10926] netlink: 'syz.2.2323': attribute type 3 has an invalid length.
[  202.147830][T10926] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2323'.
[  202.221799][   T29] kauditd_printk_skb: 364 callbacks suppressed
[  202.221816][   T29] audit: type=1400 audit(1763040044.066:18544): avc:  denied  { setopt } for  pid=10933 comm="syz.2.2327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  202.270844][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  202.282637][   T29] audit: type=1400 audit(1763040044.126:18545): avc:  denied  { append } for  pid=10936 comm="syz.1.2329" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  202.339470][T10942] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2331'.
[  202.359480][T10942] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2331'.
[  202.382806][T10944] loop4: detected capacity change from 0 to 512
[  202.390664][   T29] audit: type=1326 audit(1763040044.176:18546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10941 comm="syz.4.2330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d7610f6c9 code=0x7ffc0000
[  202.414400][   T29] audit: type=1326 audit(1763040044.176:18547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10941 comm="syz.4.2330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d7610f6c9 code=0x7ffc0000
[  202.437976][   T29] audit: type=1326 audit(1763040044.176:18548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10941 comm="syz.4.2330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5d7610f6c9 code=0x7ffc0000
[  202.461669][   T29] audit: type=1326 audit(1763040044.176:18549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10941 comm="syz.4.2330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d7610f6c9 code=0x7ffc0000
[  202.485287][   T29] audit: type=1326 audit(1763040044.176:18550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10941 comm="syz.4.2330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d7610f6c9 code=0x7ffc0000
[  202.509031][   T29] audit: type=1326 audit(1763040044.176:18551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10941 comm="syz.4.2330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5d7610f6c9 code=0x7ffc0000
[  202.532633][   T29] audit: type=1326 audit(1763040044.186:18552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10941 comm="syz.4.2330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d7610f6c9 code=0x7ffc0000
[  202.556420][   T29] audit: type=1326 audit(1763040044.186:18553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10941 comm="syz.4.2330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d7610f6c9 code=0x7ffc0000
[  202.584230][T10944] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[  202.605140][T10944] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.2330: invalid indirect mapped block 2683928664 (level 1)
[  202.631970][T10944] EXT4-fs (loop4): Remounting filesystem read-only
[  202.638641][T10944] EXT4-fs (loop4): 1 truncate cleaned up
[  202.663960][T10954] lo speed is unknown, defaulting to 1000
[  202.677915][T10944] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  202.680360][T10955] loop0: detected capacity change from 0 to 512
[  202.691301][T10944] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  202.702191][T10954] lo speed is unknown, defaulting to 1000
[  202.712689][T10954] lo speed is unknown, defaulting to 1000
[  202.726424][T10955] EXT4-fs: inline encryption not supported
[  202.747380][T10955] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2
[  202.755892][T10955] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.2335: invalid indirect mapped block 2683928664 (level 1)
[  202.801735][T10955] EXT4-fs (loop0): 1 truncate cleaned up
[  202.826264][T10955] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  202.845574][T10954] infiniband s
z1: set active
[  202.850360][T10954] infiniband s
z1: added lo
[  202.855041][ T3417] lo speed is unknown, defaulting to 1000
[  202.940988][T10954] RDS/IB: s
z1: added
[  202.955006][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  202.985256][T10954] smc: adding ib device s
z1 with port count 1
[  202.998941][T10966] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  203.029254][T10954] smc:    ib device s
z1 port 1 has no pnetid
[  203.042341][ T3417] lo speed is unknown, defaulting to 1000
[  203.057759][T10971] lo speed is unknown, defaulting to 1000
[  203.064354][T10954] lo speed is unknown, defaulting to 1000
[  203.073877][T10966] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  203.114569][T10971] lo speed is unknown, defaulting to 1000
[  203.133119][T10966] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  203.187934][T10971] lo speed is unknown, defaulting to 1000
[  203.224502][T10966] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  203.274402][T10954] lo speed is unknown, defaulting to 1000
[  203.347390][  T569] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  203.370575][T10982] loop0: detected capacity change from 0 to 1024
[  203.397604][  T569] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  203.406168][T10954] lo speed is unknown, defaulting to 1000
[  203.414543][T10982] EXT4-fs: Ignoring removed mblk_io_submit option
[  203.438102][  T569] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  203.470949][  T569] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  203.480697][T10982] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  203.520890][T10987] __nla_validate_parse: 4 callbacks suppressed
[  203.520912][T10987] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2346'.
[  203.526117][T10954] lo speed is unknown, defaulting to 1000
[  203.548682][T10987] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10987 comm=syz.4.2346
[  203.597838][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  203.647407][T10991] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=10991 comm=syz.4.2346
[  203.668491][T10954] lo speed is unknown, defaulting to 1000
[  203.747787][T10998] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2349'.
[  203.756792][T10998] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2349'.
[  203.867455][T11001] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2351'.
[  203.892883][T11001] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2351'.
[  203.955482][T11009] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2355'.
[  203.978670][T11015] loop4: detected capacity change from 0 to 512
[  203.991693][T11009] ALSA: seq fatal error: cannot create timer (-19)
[  204.002078][T11015] SELinux: security_context_str_to_sid (root) failed with errno=-22
[  204.048025][T11019] sctp: [Deprecated]: syz.2.2358 (pid 11019) Use of int in max_burst socket option deprecated.
[  204.048025][T11019] Use struct sctp_assoc_value instead
[  204.065683][T11019] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2358'.
[  204.140461][T11017] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.2356'.
[  204.205523][T11026] loop0: detected capacity change from 0 to 512
[  204.222774][T11026] EXT4-fs: Ignoring removed orlov option
[  204.228671][T11028] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2362'.
[  204.237679][T11028] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2362'.
[  204.251649][T11026] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  204.266015][T11026] EXT4-fs error (device loop0): ext4_iget_extra_inode:5075: inode #15: comm syz.0.2356: corrupted in-inode xattr: e_value size too large
[  204.269080][T11017] netlink: zone id is out of range
[  204.285259][T11017] netlink: zone id is out of range
[  204.294693][T11031] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096
[  204.311428][T11017] netlink: zone id is out of range
[  204.316710][T11017] netlink: zone id is out of range
[  204.321880][T11017] netlink: zone id is out of range
[  204.327009][T11017] netlink: zone id is out of range
[  204.332380][T11017] netlink: zone id is out of range
[  204.332806][T11026] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.2356: couldn't read orphan inode 15 (err -117)
[  204.337657][T11017] netlink: zone id is out of range
[  204.364893][T11034] loop4: detected capacity change from 0 to 512
[  204.369930][T11017] netlink: set zone limit has 8 unknown bytes
[  204.391117][T11026] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  204.412477][T11034] EXT4-fs: Ignoring removed mblk_io_submit option
[  204.454943][T11034] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  204.479842][T11034] EXT4-fs (loop4): 1 truncate cleaned up
[  204.496160][T11034] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  204.542538][T11041] ALSA: seq fatal error: cannot create timer (-19)
[  204.602182][T11058] IPv6: addrconf: prefix option has invalid lifetime
[  204.609323][   T42] Bluetooth: hci0: Frame reassembly failed (-84)
[  204.634772][T11058] loop2: detected capacity change from 0 to 1024
[  204.645665][T11058] EXT4-fs: Ignoring removed mblk_io_submit option
[  204.832504][T11080] SELinux:  policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c
[  204.851491][T11080] SELinux: failed to load policy
[  204.874858][T11084] loop0: detected capacity change from 0 to 1024
[  204.889667][T11084] EXT4-fs: Ignoring removed bh option
[  204.895474][T11084] EXT4-fs: inline encryption not supported
[  204.902709][T11084] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  204.926580][T11084] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  204.942825][T11084] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 2: comm syz.0.2384: lblock 2 mapped to illegal pblock 2 (length 1)
[  204.961113][T11084] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.2384: lblock 0 mapped to illegal pblock 48 (length 1)
[  204.976662][T11084] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.2384: Failed to acquire dquot type 0
[  204.988300][T11084] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6313: Corrupt filesystem
[  204.997907][T11084] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.2384: mark_inode_dirty error
[  205.009676][T11084] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  205.019982][T11084] EXT4-fs (loop0): 1 orphan inode deleted
[  205.031777][  T569] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1)
[  205.048169][  T569] EXT4-fs error (device loop0): ext4_release_dquot:6981: comm kworker/u8:5: Failed to release dquot type 0
[  205.060989][ T3314] EXT4-fs error (device loop0): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0
[  205.073958][ T3314] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6313: Corrupt filesystem
[  205.083645][ T3314] EXT4-fs error (device loop0): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error
[  205.136841][T11105] loop2: detected capacity change from 0 to 128
[  205.154913][T11105] bio_check_eod: 30 callbacks suppressed
[  205.154931][T11105] syz.2.2393: attempt to access beyond end of device
[  205.154931][T11105] loop2: rw=2049, sector=138, nr_sectors = 8 limit=128
[  205.180223][T11105] syz.2.2393: attempt to access beyond end of device
[  205.180223][T11105] loop2: rw=2049, sector=146, nr_sectors = 6 limit=128
[  205.194367][T11105] syz.2.2393: attempt to access beyond end of device
[  205.194367][T11105] loop2: rw=2049, sector=150, nr_sectors = 2 limit=128
[  205.207837][T11105] buffer_io_error: 16 callbacks suppressed
[  205.207929][T11105] Buffer I/O error on dev loop2, logical block 75, lost async page write
[  205.222783][T11105] syz.2.2393: attempt to access beyond end of device
[  205.222783][T11105] loop2: rw=2049, sector=152, nr_sectors = 2 limit=128
[  205.236259][T11105] Buffer I/O error on dev loop2, logical block 76, lost async page write
[  205.245082][T11105] syz.2.2393: attempt to access beyond end of device
[  205.245082][T11105] loop2: rw=2049, sector=170, nr_sectors = 6 limit=128
[  205.259062][T11105] syz.2.2393: attempt to access beyond end of device
[  205.259062][T11105] loop2: rw=2049, sector=174, nr_sectors = 2 limit=128
[  205.272575][T11105] Buffer I/O error on dev loop2, logical block 87, lost async page write
[  205.283011][T11105] syz.2.2393: attempt to access beyond end of device
[  205.283011][T11105] loop2: rw=2049, sector=176, nr_sectors = 2 limit=128
[  205.296459][T11105] Buffer I/O error on dev loop2, logical block 88, lost async page write
[  205.305209][T11105] syz.2.2393: attempt to access beyond end of device
[  205.305209][T11105] loop2: rw=2049, sector=178, nr_sectors = 6 limit=128
[  205.319028][T11105] syz.2.2393: attempt to access beyond end of device
[  205.319028][T11105] loop2: rw=2049, sector=182, nr_sectors = 2 limit=128
[  205.332486][T11105] Buffer I/O error on dev loop2, logical block 91, lost async page write
[  205.340990][T11105] syz.2.2393: attempt to access beyond end of device
[  205.340990][T11105] loop2: rw=2049, sector=184, nr_sectors = 2 limit=128
[  205.354423][T11105] Buffer I/O error on dev loop2, logical block 92, lost async page write
[  205.364613][T11105] Buffer I/O error on dev loop2, logical block 103, lost async page write
[  205.373547][T11105] Buffer I/O error on dev loop2, logical block 104, lost async page write
[  205.382861][T11105] Buffer I/O error on dev loop2, logical block 107, lost async page write
[  205.391547][T11105] Buffer I/O error on dev loop2, logical block 108, lost async page write
[  205.595242][T11116] IPv6: NLM_F_CREATE should be specified when creating new route
[  205.611735][T11116] IPv6: Can't replace route, no match found
[  205.700286][T11132] loop2: detected capacity change from 0 to 164
[  205.709304][T11132] Unable to read rock-ridge attributes
[  205.727396][T11132] Unable to read rock-ridge attributes
[  205.780944][T11135] loop2: detected capacity change from 0 to 512
[  205.796427][T11135] EXT4-fs: inline encryption not supported
[  205.816546][T11135] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[  205.830964][T11135] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.2405: invalid indirect mapped block 2683928664 (level 1)
[  205.862029][T11135] EXT4-fs (loop2): 1 truncate cleaned up
[  205.998094][T11150] FAULT_INJECTION: forcing a failure.
[  205.998094][T11150] name failslab, interval 1, probability 0, space 0, times 0
[  206.010758][T11150] CPU: 0 UID: 0 PID: 11150 Comm: syz.1.2406 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  206.010788][T11150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  206.010847][T11150] Call Trace:
[  206.010854][T11150]  <TASK>
[  206.010863][T11150]  __dump_stack+0x1d/0x30
[  206.010888][T11150]  dump_stack_lvl+0xe8/0x140
[  206.010911][T11150]  dump_stack+0x15/0x1b
[  206.010929][T11150]  should_fail_ex+0x265/0x280
[  206.010954][T11150]  should_failslab+0x8c/0xb0
[  206.011057][T11149] loop2: detected capacity change from 0 to 1024
[  206.011033][T11150]  __kmalloc_node_noprof+0xaa/0x580
[  206.011197][T11150]  ? __vmalloc_node_range_noprof+0x410/0xed0
[  206.011250][T11150]  __vmalloc_node_range_noprof+0x410/0xed0
[  206.011293][T11150]  ? cred_has_capability+0x210/0x280
[  206.011367][T11150]  ? bpf_prog_alloc_no_stats+0x47/0x3b0
[  206.011405][T11150]  __vmalloc_noprof+0x83/0xc0
[  206.011440][T11150]  ? bpf_prog_alloc_no_stats+0x47/0x3b0
[  206.011481][T11150]  bpf_prog_alloc_no_stats+0x47/0x3b0
[  206.011518][T11150]  ? bpf_prog_alloc+0x2a/0x150
[  206.011635][T11150]  bpf_prog_alloc+0x3c/0x150
[  206.011686][T11150]  bpf_prog_load+0x506/0x1100
[  206.011716][T11150]  ? security_bpf+0x2b/0x90
[  206.011747][T11150]  __sys_bpf+0x469/0x7c0
[  206.011774][T11150]  __x64_sys_bpf+0x41/0x50
[  206.011885][T11150]  x64_sys_call+0x2aee/0x3000
[  206.011912][T11150]  do_syscall_64+0xd2/0x200
[  206.011936][T11150]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  206.011994][T11150]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  206.012037][T11150]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  206.012061][T11150] RIP: 0033:0x7f2a3f6df6c9
[  206.012078][T11150] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  206.012098][T11150] RSP: 002b:00007f2a3e11e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  206.012159][T11150] RAX: ffffffffffffffda RBX: 00007f2a3f936090 RCX: 00007f2a3f6df6c9
[  206.012173][T11150] RDX: 0000000000000094 RSI: 0000200000000680 RDI: 0000000000000005
[  206.012187][T11150] RBP: 00007f2a3e11e090 R08: 0000000000000000 R09: 0000000000000000
[  206.012201][T11150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  206.012268][T11150] R13: 00007f2a3f936128 R14: 00007f2a3f936090 R15: 00007fff6828b718
[  206.012288][T11150]  </TASK>
[  206.012365][T11150] syz.1.2406: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x500dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null)
[  206.031551][T11149] EXT4-fs: Ignoring removed mblk_io_submit option
[  206.034475][T11150] ,cpuset=/,mems_allowed=0
[  206.265509][T11150] CPU: 0 UID: 0 PID: 11150 Comm: syz.1.2406 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  206.265598][T11150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  206.265611][T11150] Call Trace:
[  206.265619][T11150]  <TASK>
[  206.265628][T11150]  __dump_stack+0x1d/0x30
[  206.265655][T11150]  dump_stack_lvl+0xe8/0x140
[  206.265680][T11150]  dump_stack+0x15/0x1b
[  206.265768][T11150]  warn_alloc+0x12b/0x1a0
[  206.265806][T11150]  __vmalloc_node_range_noprof+0x4b9/0xed0
[  206.265848][T11150]  ? cred_has_capability+0x210/0x280
[  206.265935][T11150]  ? bpf_prog_alloc_no_stats+0x47/0x3b0
[  206.266021][T11150]  __vmalloc_noprof+0x83/0xc0
[  206.266130][T11150]  ? bpf_prog_alloc_no_stats+0x47/0x3b0
[  206.266177][T11150]  bpf_prog_alloc_no_stats+0x47/0x3b0
[  206.266212][T11150]  ? bpf_prog_alloc+0x2a/0x150
[  206.266289][T11150]  bpf_prog_alloc+0x3c/0x150
[  206.266325][T11150]  bpf_prog_load+0x506/0x1100
[  206.266357][T11150]  ? security_bpf+0x2b/0x90
[  206.266389][T11150]  __sys_bpf+0x469/0x7c0
[  206.266425][T11150]  __x64_sys_bpf+0x41/0x50
[  206.266457][T11150]  x64_sys_call+0x2aee/0x3000
[  206.266482][T11150]  do_syscall_64+0xd2/0x200
[  206.266503][T11150]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  206.266537][T11150]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  206.266610][T11150]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  206.266633][T11150] RIP: 0033:0x7f2a3f6df6c9
[  206.266650][T11150] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  206.266734][T11150] RSP: 002b:00007f2a3e11e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  206.266753][T11150] RAX: ffffffffffffffda RBX: 00007f2a3f936090 RCX: 00007f2a3f6df6c9
[  206.266767][T11150] RDX: 0000000000000094 RSI: 0000200000000680 RDI: 0000000000000005
[  206.266782][T11150] RBP: 00007f2a3e11e090 R08: 0000000000000000 R09: 0000000000000000
[  206.266796][T11150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  206.266823][T11150] R13: 00007f2a3f936128 R14: 00007f2a3f936090 R15: 00007fff6828b718
[  206.266869][T11150]  </TASK>
[  206.266876][T11150] Mem-Info:
[  206.476314][T11150] active_anon:22537 inactive_anon:2 isolated_anon:0
[  206.476314][T11150]  active_file:11640 inactive_file:11629 isolated_file:0
[  206.476314][T11150]  unevictable:0 dirty:471 writeback:0
[  206.476314][T11150]  slab_reclaimable:3375 slab_unreclaimable:99172
[  206.476314][T11150]  mapped:32880 shmem:15420 pagetables:1146
[  206.476314][T11150]  sec_pagetables:0 bounce:0
[  206.476314][T11150]  kernel_misc_reclaimable:0
[  206.476314][T11150]  free:1759133 free_pcp:35703 free_cma:0
[  206.521543][T11150] Node 0 active_anon:71008kB inactive_anon:8kB active_file:46560kB inactive_file:46516kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:131520kB dirty:1884kB writeback:0kB shmem:42656kB kernel_stack:3280kB pagetables:4584kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  206.549061][T11150] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  206.578782][T11150] lowmem_reserve[]: 0 2881 7859 7859
[  206.584182][T11150] Node 0 DMA32 free:2946728kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2950256kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:3528kB free_cma:0kB
[  206.615521][T11150] lowmem_reserve[]: 0 0 4978 4978
[  206.620570][T11150] Node 0 Normal free:4098556kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:46188kB inactive_anon:8kB active_file:46560kB inactive_file:46604kB unevictable:0kB writepending:1912kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:158960kB local_pcp:6452kB free_cma:0kB
[  206.636388][T11155] loop0: detected capacity change from 0 to 1024
[  206.653799][T11150] lowmem_reserve[]: 0 0 0 0
[  206.660336][   T44] Bluetooth: hci0: command 0x1003 tx timeout
[  206.664648][T11150] Node 0 DMA: 0*4kB 0*8kB 0*16kB 
[  206.670700][ T9340] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  206.681836][T11150] 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  206.689221][T11155] EXT4-fs: Ignoring removed mblk_io_submit option
[  206.691830][T11150] Node 0 DMA32: 2*4kB (M) 2*8kB (M) 5*16kB (M) 2*32kB (M) 4*64kB (M) 2*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2946728kB
[  206.714400][T11150] Node 0 Normal: 872*4kB (M) 1041*8kB (UME) 618*16kB (UM) 231*32kB (UM) 110*64kB (UM) 54*128kB (UME) 32*256kB (UME) 49*512kB (UME) 20*1024kB (UME) 16*2048kB (UM) 969*4096kB (UM) = 4098600kB
[  206.733237][T11150] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB
[  206.742512][T11150] 27827 total pagecache pages
[  206.747159][T11150] 2 pages in swap cache
[  206.751298][T11150] Free swap  = 124988kB
[  206.755456][T11150] Total swap = 124996kB
[  206.759585][T11150] 2097051 pages RAM
[  206.763411][T11150] 0 pages HighMem/MovableOnly
[  206.768115][T11150] 81087 pages reserved
[  206.863935][T11167] loop1: detected capacity change from 0 to 256
[  206.864421][T11163] netlink: 'syz.3.2416': attribute type 3 has an invalid length.
[  206.979617][T11183] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096
[  207.063909][T11192] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=11192 comm=syz.0.2426
[  207.081218][T11192] loop0: detected capacity change from 0 to 512
[  207.094140][T11192] ext4 filesystem being mounted at /451/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  207.240974][   T29] kauditd_printk_skb: 1662 callbacks suppressed
[  207.240997][   T29] audit: type=1400 audit(1763040049.076:20213): avc:  denied  { append } for  pid=11204 comm="syz.0.2430" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  207.293208][   T29] audit: type=1326 audit(1763040049.126:20214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11053 comm="syz.4.2372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f5d7610f6c9 code=0x7ffc0000
[  207.368504][T11209] x_tables: unsorted underflow at hook 1
[  207.389479][   T29] audit: type=1400 audit(1763040049.226:20215): avc:  denied  { unmount } for  pid=3314 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  207.427635][   T29] audit: type=1400 audit(1763040049.266:20216): avc:  denied  { setopt } for  pid=11207 comm="syz.4.2431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  207.477612][   T29] audit: type=1400 audit(1763040049.266:20217): avc:  denied  { shutdown } for  pid=11207 comm="syz.4.2431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  207.516744][ T3424] IPVS: starting estimator thread 0...
[  207.522558][   T29] audit: type=1400 audit(1763040049.356:20218): avc:  denied  { create } for  pid=11218 comm="syz.4.2435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  207.542637][T11220] loop4: detected capacity change from 0 to 512
[  207.591860][T11220] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  207.608168][   T29] audit: type=1326 audit(1763040049.446:20219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11222 comm="syz.3.2437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9848e1f6c9 code=0x7ffc0000
[  207.632041][   T29] audit: type=1326 audit(1763040049.446:20220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11222 comm="syz.3.2437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f9848e1f6c9 code=0x7ffc0000
[  207.656431][   T29] audit: type=1326 audit(1763040049.446:20221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11222 comm="syz.3.2437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9848e1f703 code=0x7ffc0000
[  207.659162][T11221] IPVS: using max 2832 ests per chain, 141600 per kthread
[  207.680046][   T29] audit: type=1326 audit(1763040049.446:20222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11222 comm="syz.3.2437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9848e1e17f code=0x7ffc0000
[  207.722165][T11220] EXT4-fs (loop4): 1 truncate cleaned up
[  207.934734][T11236] loop1: detected capacity change from 0 to 1024
[  207.942260][T11236] EXT4-fs: Ignoring removed mblk_io_submit option
[  208.053037][T11242] loop1: detected capacity change from 0 to 256
[  208.072895][T11242] FAT-fs (loop1): Directory bread(block 64) failed
[  208.089774][T11242] FAT-fs (loop1): Directory bread(block 65) failed
[  208.106332][T11246] IPv6: NLM_F_CREATE should be specified when creating new route
[  208.114875][T11242] FAT-fs (loop1): Directory bread(block 66) failed
[  208.123827][T11246] IPv6: Can't replace route, no match found
[  208.129868][T11242] FAT-fs (loop1): Directory bread(block 67) failed
[  208.136708][T11242] FAT-fs (loop1): Directory bread(block 68) failed
[  208.143650][T11242] FAT-fs (loop1): Directory bread(block 69) failed
[  208.150435][T11242] FAT-fs (loop1): Directory bread(block 70) failed
[  208.157228][T11242] FAT-fs (loop1): Directory bread(block 71) failed
[  208.164030][T11242] FAT-fs (loop1): Directory bread(block 72) failed
[  208.170702][T11242] FAT-fs (loop1): Directory bread(block 73) failed
[  208.227292][T11252] loop2: detected capacity change from 0 to 256
[  208.314236][T11262] loop4: detected capacity change from 0 to 256
[  208.418764][T11266] ALSA: seq fatal error: cannot create timer (-19)
[  208.597671][T11274] vhci_hcd: invalid port number 255
[  208.602937][T11274] vhci_hcd: default hub control req: 000d v0002 i00ff l0
[  208.621535][T11274] lo speed is unknown, defaulting to 1000
[  208.627795][T11274] lo speed is unknown, defaulting to 1000
[  208.634136][T11274] lo speed is unknown, defaulting to 1000
[  209.011211][T11286] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  209.029948][T11282] loop1: detected capacity change from 0 to 512
[  209.044620][T11282] SELinux: security_context_str_to_sid (root) failed with errno=-22
[  209.073048][T11288] netlink: 'syz.3.2458': attribute type 13 has an invalid length.
[  209.218322][T11291] loop2: detected capacity change from 0 to 512
[  209.235106][T11291] SELinux: security_context_str_to_sid (root) failed with errno=-22
[  209.371477][T11306] loop2: detected capacity change from 0 to 128
[  209.924089][T11323] loop0: detected capacity change from 0 to 128
[  210.100980][T11327] loop0: detected capacity change from 0 to 512
[  210.116982][T11327] ext4 filesystem being mounted at /470/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  210.138477][T11327] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #2: comm syz.0.2473: corrupted inode contents
[  210.150584][T11327] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #2: comm syz.0.2473: mark_inode_dirty error
[  210.162599][T11327] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #2: comm syz.0.2473: corrupted inode contents
[  210.187396][T11334] loop1: detected capacity change from 0 to 512
[  210.213173][T11336] loop4: detected capacity change from 0 to 512
[  210.213629][T11334] ext4 filesystem being mounted at /489/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  210.220056][T11336] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  210.246612][T11336] EXT4-fs (loop4): 1 truncate cleaned up
[  210.260845][T11334] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.2475: corrupted inode contents
[  210.273533][T11334] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #2: comm syz.1.2475: mark_inode_dirty error
[  210.285379][T11334] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.2475: corrupted inode contents
[  210.322177][T11343] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.2475: corrupted inode contents
[  210.381307][T11343] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #2: comm syz.1.2475: mark_inode_dirty error
[  210.418001][T11343] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.2475: corrupted inode contents
[  210.447583][T11347] loop2: detected capacity change from 0 to 1024
[  210.471161][T11343] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.2475: mark_inode_dirty error
[  210.496154][T11353] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  210.507202][T11343] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.2475: corrupted inode contents
[  210.522480][T11343] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #2: comm syz.1.2475: mark_inode_dirty error
[  210.611048][T11342] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.2477: Allocating blocks 497-513 which overlap fs metadata
[  210.635042][T11342] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.2477: Allocating blocks 497-513 which overlap fs metadata
[  210.650724][T11363] loop1: detected capacity change from 0 to 512
[  210.658450][T11365] __nla_validate_parse: 19 callbacks suppressed
[  210.658466][T11365] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2484'.
[  210.673783][T11365] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2484'.
[  210.728208][T11366] lo speed is unknown, defaulting to 1000
[  210.734475][T11366] lo speed is unknown, defaulting to 1000
[  210.740928][T11366] lo speed is unknown, defaulting to 1000
[  211.037753][T11347] netlink: 7 bytes leftover after parsing attributes in process `syz.2.2477'.
[  211.086089][T11347] netlink: 7 bytes leftover after parsing attributes in process `syz.2.2477'.
[  211.602936][T11342] EXT4-fs (loop2): pa ffff888106ed7540: logic 256, phys. 369, len 9
[  211.610988][T11342] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 1
[  211.679631][T11363] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2
[  211.688660][T11363] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2
[  211.697469][T11363] EXT4-fs (loop1): 1 truncate cleaned up
[  211.784999][T11391] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2492'.
[  211.794021][T11391] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2492'.
[  211.810924][T11363] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  211.911460][T11394] net_ratelimit: 2 callbacks suppressed
[  211.911473][T11394] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  211.932598][   T23] lo speed is unknown, defaulting to 1000
[  211.976042][T11397] loop2: detected capacity change from 0 to 1024
[  212.004834][T11397] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.2494: Allocating blocks 497-513 which overlap fs metadata
[  212.020181][T11397] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.2494: Allocating blocks 497-513 which overlap fs metadata
[  212.034828][T11397] EXT4-fs (loop2): pa ffff888100563d20: logic 256, phys. 369, len 9
[  212.042982][T11397] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 1
[  212.054429][T11397] netlink: 7 bytes leftover after parsing attributes in process `syz.2.2494'.
[  212.070348][T11397] netlink: 7 bytes leftover after parsing attributes in process `syz.2.2494'.
[  212.090843][T11401] loop0: detected capacity change from 0 to 512
[  212.109186][T11401] EXT4-fs: inline encryption not supported
[  212.136267][T11404] loop4: detected capacity change from 0 to 512
[  212.144211][T11404] EXT4-fs: inline encryption not supported
[  212.152833][T11405] loop1: detected capacity change from 0 to 1024
[  212.163203][T11404] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[  212.171950][T11404] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.2496: invalid indirect mapped block 2683928664 (level 1)
[  212.172264][T11401] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2
[  212.206478][T11404] EXT4-fs (loop4): 1 truncate cleaned up
[  212.206615][T11405] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4193: comm syz.1.2497: Allocating blocks 497-513 which overlap fs metadata
[  212.226528][T11401] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.2495: invalid indirect mapped block 2683928664 (level 1)
[  212.233995][T11405] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4193: comm syz.1.2497: Allocating blocks 497-513 which overlap fs metadata
[  212.256977][T11405] EXT4-fs (loop1): pa ffff888106ed74d0: logic 256, phys. 369, len 9
[  212.259961][T11401] EXT4-fs (loop0): 1 truncate cleaned up
[  212.265034][T11405] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 1
[  212.294485][T11413] IPv6: addrconf: prefix option has invalid lifetime
[  212.306458][T11405] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2497'.
[  212.321969][T11405] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2497'.
[  212.331260][T11413] loop2: detected capacity change from 0 to 1024
[  212.342183][T11413] EXT4-fs: Ignoring removed mblk_io_submit option
[  212.374708][   T29] kauditd_printk_skb: 572 callbacks suppressed
[  212.374724][   T29] audit: type=1400 audit(1763040822.216:20795): avc:  denied  { read write } for  pid=11412 comm="syz.2.2499" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  212.403808][   T29] audit: type=1400 audit(1763040822.216:20796): avc:  denied  { open } for  pid=11412 comm="syz.2.2499" path="/483/file1/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  212.465655][T11419] IPv6: addrconf: prefix option has invalid lifetime
[  212.489512][T11423] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096
[  212.505876][T11425] loop4: detected capacity change from 0 to 256
[  212.517749][T11419] loop1: detected capacity change from 0 to 1024
[  212.522900][   T29] audit: type=1326 audit(1763040822.356:20797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11426 comm="syz.0.2505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f924ea2f6c9 code=0x7ffc0000
[  212.525950][T11419] EXT4-fs: Ignoring removed mblk_io_submit option
[  212.547806][   T29] audit: type=1326 audit(1763040822.356:20798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11426 comm="syz.0.2505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f924ea2f6c9 code=0x7ffc0000
[  212.591716][   T29] audit: type=1326 audit(1763040822.416:20799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11426 comm="syz.0.2505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f924ea2f6c9 code=0x7ffc0000
[  212.615454][   T29] audit: type=1326 audit(1763040822.416:20800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11426 comm="syz.0.2505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f924ea2f6c9 code=0x7ffc0000
[  212.639167][   T29] audit: type=1326 audit(1763040822.416:20801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11426 comm="syz.0.2505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f924ea2f6c9 code=0x7ffc0000
[  212.662736][   T29] audit: type=1326 audit(1763040822.416:20802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11426 comm="syz.0.2505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f924ea2f6c9 code=0x7ffc0000
[  212.686373][   T29] audit: type=1326 audit(1763040822.416:20803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11426 comm="syz.0.2505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f924ea2f6c9 code=0x7ffc0000
[  212.709942][   T29] audit: type=1326 audit(1763040822.416:20804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11426 comm="syz.0.2505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f924ea2f6c9 code=0x7ffc0000
[  212.737897][T11427] loop0: detected capacity change from 0 to 512
[  212.756345][T11437] lo: Caught tx_queue_len zero misconfig
[  212.765553][T11427] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2
[  212.788242][T11427] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.2505: invalid indirect mapped block 2683928664 (level 1)
[  212.835966][T11427] EXT4-fs (loop0): Remounting filesystem read-only
[  212.856730][T11427] EXT4-fs (loop0): 1 truncate cleaned up
[  212.928337][T11444] loop1: detected capacity change from 0 to 512
[  212.964176][T11444] ext4 filesystem being mounted at /493/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  213.209918][T11464] loop1: detected capacity change from 0 to 512
[  213.233969][T11464] ext4 filesystem being mounted at /496/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  213.246584][T11464] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.2518: corrupted inode contents
[  213.258685][T11464] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #2: comm syz.1.2518: mark_inode_dirty error
[  213.270270][T11464] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.2518: corrupted inode contents
[  213.284126][T11464] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.2518: corrupted inode contents
[  213.296552][T11464] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #2: comm syz.1.2518: mark_inode_dirty error
[  213.308301][T11464] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.2518: corrupted inode contents
[  213.320474][T11464] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.2518: mark_inode_dirty error
[  213.337148][T11473] loop0: detected capacity change from 0 to 512
[  213.344651][T11464] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.2518: corrupted inode contents
[  213.358111][T11473] ext4 filesystem being mounted at /476/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  213.370124][T11473] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  213.385170][T11464] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #2: comm syz.1.2518: mark_inode_dirty error
[  213.504105][T11484] pimreg: entered allmulticast mode
[  213.512865][T11484] pimreg: left allmulticast mode
[  213.707593][T11492] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096
[  213.751383][T11495] xt_CT: You must specify a L4 protocol and not use inversions on it
[  213.808766][T11497] IPv6: addrconf: prefix option has invalid lifetime
[  213.828010][T11497] loop4: detected capacity change from 0 to 1024
[  213.848008][T11497] EXT4-fs: Ignoring removed mblk_io_submit option
[  213.966855][T11505] loop2: detected capacity change from 0 to 256
[  214.263835][T11516] loop4: detected capacity change from 0 to 512
[  214.310848][T11518] loop1: detected capacity change from 0 to 512
[  214.327953][T11516] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  214.339584][T11516] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it
[  214.349665][T11516] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.2531: Corrupt directory, running e2fsck is recommended
[  214.391897][T11518] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2
[  214.423523][T11518] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.2524: invalid indirect mapped block 2683928664 (level 1)
[  214.454913][T11518] EXT4-fs (loop1): Remounting filesystem read-only
[  214.463817][T11516] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117
[  214.474770][T11518] EXT4-fs (loop1): 1 truncate cleaned up
[  214.483405][T11516] EXT4-fs error (device loop4): ext4_iget_extra_inode:5075: inode #15: comm syz.4.2531: corrupted in-inode xattr: invalid ea_ino
[  214.499079][T11516] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.2531: couldn't read orphan inode 15 (err -117)
[  214.554584][T11516] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  214.566120][T11516] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it
[  214.576234][T11516] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.2531: Corrupt directory, running e2fsck is recommended
[  214.589287][T11516] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 3: comm syz.4.2531: path /471/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0
[  214.609384][T11516] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 64: comm syz.4.2531: path /471/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  214.734145][T11536] loop1: detected capacity change from 0 to 512
[  214.741886][T11536] EXT4-fs: Ignoring removed mblk_io_submit option
[  214.769136][T11536] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  214.786906][T11536] EXT4-fs (loop1): 1 truncate cleaned up
[  214.814175][T11542] loop0: detected capacity change from 0 to 1024
[  214.849464][T11542] EXT4-fs: Ignoring removed mblk_io_submit option
[  214.911082][T11550] loop2: detected capacity change from 0 to 1024
[  214.965377][T11550] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.2547: Allocating blocks 497-513 which overlap fs metadata
[  214.991219][T11559] loop0: detected capacity change from 0 to 512
[  215.010626][T11550] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.2547: Allocating blocks 497-513 which overlap fs metadata
[  215.025028][T11559] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  215.040513][T11550] EXT4-fs (loop2): pa ffff888100563d20: logic 256, phys. 369, len 9
[  215.048659][T11550] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 1
[  215.052414][T11559] EXT4-fs (loop0): 1 truncate cleaned up
[  215.163316][T11561] lo speed is unknown, defaulting to 1000
[  215.183942][T11561] lo speed is unknown, defaulting to 1000
[  215.194570][T11561] lo speed is unknown, defaulting to 1000
[  215.396163][T11576] SELinux: failed to load policy
[  215.619887][T11593] loop0: detected capacity change from 0 to 1024
[  215.638923][T11593] EXT4-fs: Ignoring removed mblk_io_submit option
[  215.815864][T11610] __nla_validate_parse: 7 callbacks suppressed
[  215.815880][T11610] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2564'.
[  215.831046][T11610] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2564'.
[  215.887166][T11614] loop1: detected capacity change from 0 to 512
[  215.896344][T11614] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  215.907526][T11614] EXT4-fs (loop1): 1 truncate cleaned up
[  215.971389][   T42] bridge_slave_1: left allmulticast mode
[  215.977279][   T42] bridge_slave_1: left promiscuous mode
[  215.983105][   T42] bridge0: port 2(bridge_slave_1) entered disabled state
[  216.006505][   T42] bridge_slave_0: left allmulticast mode
[  216.012349][   T42] bridge_slave_0: left promiscuous mode
[  216.018042][   T42] bridge0: port 1(bridge_slave_0) entered disabled state
[  216.214985][T11621] loop1: detected capacity change from 0 to 512
[  216.228736][T11621] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  216.240290][T11621] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it
[  216.250392][T11621] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.2566: Corrupt directory, running e2fsck is recommended
[  216.265139][T11621] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117
[  216.273478][T11621] EXT4-fs error (device loop1): ext4_iget_extra_inode:5075: inode #15: comm syz.1.2566: corrupted in-inode xattr: invalid ea_ino
[  216.287221][T11621] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.2566: couldn't read orphan inode 15 (err -117)
[  216.302792][T11621] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  216.314390][T11621] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it
[  216.324520][T11621] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.2566: Corrupt directory, running e2fsck is recommended
[  216.337426][T11621] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 3: comm syz.1.2566: path /504/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0
[  216.372970][T11621] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 64: comm syz.1.2566: path /504/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  216.409799][T11627] loop4: detected capacity change from 0 to 256
[  216.424394][   T42] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface
[  216.437329][T11626] hub 5-0:1.0: USB hub found
[  216.442290][T11626] hub 5-0:1.0: 8 ports detected
[  216.442570][   T42] bond_slave_0: left promiscuous mode
[  216.453497][   T42] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface
[  216.464680][   T42] bond_slave_1: left promiscuous mode
[  216.470317][   T42] $Hÿ (unregistering): Released all slaves
[  216.483945][T11602] lo speed is unknown, defaulting to 1000
[  216.490305][T11602] lo speed is unknown, defaulting to 1000
[  216.493479][T11626] syzkaller1: entered promiscuous mode
[  216.501549][T11626] syzkaller1: entered allmulticast mode
[  216.508739][T11602] lo speed is unknown, defaulting to 1000
[  216.519431][   T42] tipc: Disabling bearer <udp:s>
[  216.524458][   T42] tipc: Left network mode
[  216.601749][T11630] loop1: detected capacity change from 0 to 512
[  216.651980][T11630] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2
[  216.660516][T11630] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.2569: invalid indirect mapped block 2683928664 (level 1)
[  216.674727][T11630] EXT4-fs (loop1): Remounting filesystem read-only
[  216.681335][T11630] EXT4-fs (loop1): 1 truncate cleaned up
[  216.688705][   T42] hsr_slave_0: left promiscuous mode
[  216.694544][   T42] hsr_slave_1: left promiscuous mode
[  216.715490][T11635] loop2: detected capacity change from 0 to 512
[  216.725976][T11635] EXT4-fs: Ignoring removed mblk_io_submit option
[  216.744380][T11635] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  216.755902][T11635] EXT4-fs (loop2): 1 truncate cleaned up
[  216.793092][T11640] loop2: detected capacity change from 0 to 512
[  216.799887][T11640] EXT4-fs: inline encryption not supported
[  216.835030][T11640] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[  216.856198][T11640] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.2572: invalid indirect mapped block 2683928664 (level 1)
[  216.907238][T11640] EXT4-fs (loop2): 1 truncate cleaned up
[  216.925226][T11645] lo speed is unknown, defaulting to 1000
[  216.933272][T11648] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2574'.
[  216.942323][T11648] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2574'.
[  216.953990][T11645] lo speed is unknown, defaulting to 1000
[  216.963384][T11602] chnl_net:caif_netlink_parms(): no params data found
[  216.991786][T11645] lo speed is unknown, defaulting to 1000
[  217.102063][T11654] loop1: detected capacity change from 0 to 512
[  217.138130][T11654] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2
[  217.162537][T11602] bridge0: port 1(bridge_slave_0) entered blocking state
[  217.169642][T11602] bridge0: port 1(bridge_slave_0) entered disabled state
[  217.182618][T11654] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.2575: invalid indirect mapped block 2683928664 (level 1)
[  217.196876][T11602] bridge_slave_0: entered allmulticast mode
[  217.198306][T11657] loop2: detected capacity change from 0 to 512
[  217.203776][T11602] bridge_slave_0: entered promiscuous mode
[  217.215195][T11654] EXT4-fs (loop1): Remounting filesystem read-only
[  217.221785][T11654] EXT4-fs (loop1): 1 truncate cleaned up
[  217.228364][T11602] bridge0: port 2(bridge_slave_1) entered blocking state
[  217.235448][T11602] bridge0: port 2(bridge_slave_1) entered disabled state
[  217.243822][T11602] bridge_slave_1: entered allmulticast mode
[  217.257021][T11657] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[  217.274544][T11602] bridge_slave_1: entered promiscuous mode
[  217.280725][T11657] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.2576: invalid indirect mapped block 2683928664 (level 1)
[  217.298953][T11657] EXT4-fs (loop2): Remounting filesystem read-only
[  217.305609][T11657] EXT4-fs (loop2): 1 truncate cleaned up
[  217.330815][T11602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  217.363757][T11602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  217.405172][T11602] team0: Port device team_slave_0 added
[  217.424813][T11602] team0: Port device team_slave_1 added
[  217.462118][   T29] kauditd_printk_skb: 710 callbacks suppressed
[  217.462132][   T29] audit: type=1326 audit(1763041339.309:21515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11667 comm="syz.2.2579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40a42af6c9 code=0x7ffc0000
[  217.493215][T11602] batman_adv: batadv0: Adding interface: batadv_slave_0
[  217.500260][T11602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  217.526243][T11602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  217.590227][T11602] batman_adv: batadv0: Adding interface: batadv_slave_1
[  217.597240][T11602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  217.623235][T11602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  217.638175][   T29] audit: type=1326 audit(1763041339.339:21516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11667 comm="syz.2.2579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f40a42af6c9 code=0x7ffc0000
[  217.661890][   T29] audit: type=1326 audit(1763041339.339:21517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11667 comm="syz.2.2579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40a42af6c9 code=0x7ffc0000
[  217.685524][   T29] audit: type=1326 audit(1763041339.339:21518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11667 comm="syz.2.2579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40a42af6c9 code=0x7ffc0000
[  217.709136][   T29] audit: type=1326 audit(1763041339.389:21519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11667 comm="syz.2.2579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f40a42af6c9 code=0x7ffc0000
[  217.732714][   T29] audit: type=1326 audit(1763041339.389:21520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11667 comm="syz.2.2579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40a42af6c9 code=0x7ffc0000
[  217.756360][   T29] audit: type=1326 audit(1763041339.389:21521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11667 comm="syz.2.2579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40a42af6c9 code=0x7ffc0000
[  217.779943][   T29] audit: type=1326 audit(1763041339.399:21522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11667 comm="syz.2.2579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f40a42af6c9 code=0x7ffc0000
[  217.803422][   T29] audit: type=1326 audit(1763041339.399:21523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11667 comm="syz.2.2579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40a42af6c9 code=0x7ffc0000
[  217.827055][   T29] audit: type=1326 audit(1763041339.399:21524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11667 comm="syz.2.2579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40a42af6c9 code=0x7ffc0000
[  217.851691][T11668] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2579'.
[  217.860647][T11668] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2579'.
[  217.909301][T11602] hsr_slave_0: entered promiscuous mode
[  217.923162][T11602] hsr_slave_1: entered promiscuous mode
[  217.930331][T11602] debugfs: 'hsr0' already exists in 'hsr'
[  217.936100][T11602] Cannot create hsr debugfs directory
[  217.951958][T11664] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2578'.
[  218.386406][T11602] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  218.410304][T11602] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  218.428512][T11602] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  218.466489][T11602] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  218.496270][T11687] IPv6: addrconf: prefix option has invalid lifetime
[  218.538945][T11687] loop4: detected capacity change from 0 to 1024
[  218.565574][T11687] EXT4-fs: Ignoring removed mblk_io_submit option
[  218.589764][T11699] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2585'.
[  218.619849][T11687] EXT4-fs mount: 78 callbacks suppressed
[  218.619866][T11687] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  218.658219][T11602] 8021q: adding VLAN 0 to HW filter on device bond0
[  218.675522][T11693] ALSA: seq fatal error: cannot create timer (-19)
[  218.713087][T11602] 8021q: adding VLAN 0 to HW filter on device team0
[  218.751808][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  218.776521][ T1850] bridge0: port 1(bridge_slave_0) entered blocking state
[  218.783635][ T1850] bridge0: port 1(bridge_slave_0) entered forwarding state
[  218.861265][T11710] loop0: detected capacity change from 0 to 512
[  218.871791][   T42] bridge0: port 2(bridge_slave_1) entered blocking state
[  218.878871][   T42] bridge0: port 2(bridge_slave_1) entered forwarding state
[  218.896923][T11710] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  218.916009][T11712] IPv6: addrconf: prefix option has invalid lifetime
[  218.947304][T11602] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  218.957827][T11602] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  219.005788][T11710] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.2589: inode has both inline data and extents flags
[  219.020869][T11712] loop4: detected capacity change from 0 to 1024
[  219.028545][T11712] EXT4-fs: Ignoring removed mblk_io_submit option
[  219.035462][T11710] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.2589: couldn't read orphan inode 15 (err -117)
[  219.069194][T11712] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  219.072352][T11710] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  219.132887][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  219.150698][T11602] 8021q: adding VLAN 0 to HW filter on device batadv0
[  219.195902][T11710] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000.
[  219.221193][T11724] loop4: detected capacity change from 0 to 164
[  219.222400][T11710] EXT4-fs error (device loop0): ext4_lookup:1787: inode #15: comm syz.0.2589: inode has both inline data and extents flags
[  219.241795][T11724] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  219.258701][T11710] EXT4-fs error (device loop0): ext4_lookup:1787: inode #15: comm syz.0.2589: inode has both inline data and extents flags
[  219.294967][T11724] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  219.295691][T11710] EXT4-fs error (device loop0): ext4_lookup:1787: inode #15: comm syz.0.2589: inode has both inline data and extents flags
[  219.352441][T11724] rock: directory entry would overflow storage
[  219.358633][T11724] rock: sig=0x4f50, size=4, remaining=3
[  219.364300][T11724] iso9660: Corrupted directory entry in block 4 of inode 1792
[  219.387166][T11602] veth0_vlan: entered promiscuous mode
[  219.396088][T11710] EXT4-fs (loop0): shut down requested (2)
[  219.414952][T11602] veth1_vlan: entered promiscuous mode
[  219.428343][ T3314] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop0 ino=11
[  219.438226][ T3314] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop0 ino=11
[  219.451907][ T3314] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop0 ino=11
[  219.460756][ T3314] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop0 ino=11
[  219.477614][T11602] veth0_macvtap: entered promiscuous mode
[  219.484463][ T3314] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop0 ino=11
[  219.494579][T11602] veth1_macvtap: entered promiscuous mode
[  219.503685][ T3314] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop0 ino=11
[  219.513431][ T3314] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop0 ino=11
[  219.524807][T11602] batman_adv: batadv0: Interface activated: batadv_slave_0
[  219.532343][ T3314] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop0 ino=11
[  219.542976][T11602] batman_adv: batadv0: Interface activated: batadv_slave_1
[  219.555416][ T3417] IPVS: starting estimator thread 0...
[  219.565818][  T569] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  219.574685][  T569] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  219.574882][T11736] loop2: detected capacity change from 0 to 512
[  219.594127][   T42] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  219.603318][T11736] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  219.616462][T11736] EXT4-fs (loop2): 1 truncate cleaned up
[  219.624313][T11736] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  219.639350][   T42] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  219.648123][T11737] IPVS: using max 2544 ests per chain, 127200 per kthread
[  219.658656][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  219.764527][T11742] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096
[  219.823640][T11744] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2597'.
[  219.862201][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  219.887869][T11744] ALSA: seq fatal error: cannot create timer (-19)
[  219.896759][T11753] loop3: detected capacity change from 0 to 512
[  219.973995][T11753] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  219.986668][T11753] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  220.156812][T11602] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  220.393634][  T784] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface
[  220.403674][  T784] bond_slave_0: left promiscuous mode
[  220.415988][  T784] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface
[  220.434289][  T784] bond_slave_1: left promiscuous mode
[  220.446676][  T784] $Hÿ (unregistering): Released all slaves
[  220.464430][T11774] loop3: detected capacity change from 0 to 512
[  220.471414][T11763] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2601'.
[  220.499795][T11774] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  220.521353][  T784] tipc: Disabling bearer <udp:syz0>
[  220.526603][  T784] tipc: Left network mode
[  220.529312][T11774] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  220.563457][T11774] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  220.690915][T11787] loop4: detected capacity change from 0 to 1024
[  220.716252][  T784] hsr_slave_0: left promiscuous mode
[  220.733349][T11787] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  220.751477][  T784] hsr_slave_1: left promiscuous mode
[  220.780479][T11787] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4193: comm syz.4.2606: Allocating blocks 497-513 which overlap fs metadata
[  220.833437][T11793] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4193: comm syz.4.2606: Allocating blocks 497-513 which overlap fs metadata
[  220.883714][T11787] __nla_validate_parse: 1 callbacks suppressed
[  220.883730][T11787] netlink: 7 bytes leftover after parsing attributes in process `syz.4.2606'.
[  220.909209][T11793] EXT4-fs (loop4): pa ffff888100563d90: logic 256, phys. 369, len 9
[  220.917285][T11793] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 1
[  220.919562][T11795] loop1: detected capacity change from 0 to 1024
[  220.944336][T11787] netlink: 7 bytes leftover after parsing attributes in process `syz.4.2606'.
[  220.956850][T11751] lo speed is unknown, defaulting to 1000
[  220.987706][T11751] lo speed is unknown, defaulting to 1000
[  221.013725][T11751] lo speed is unknown, defaulting to 1000
[  221.036886][T11795] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  221.120118][T11794] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4193: comm syz.1.2607: Allocating blocks 497-513 which overlap fs metadata
[  221.137064][  T784] IPVS: stop unused estimator thread 0...
[  221.175345][T11795] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4193: comm syz.1.2607: Allocating blocks 497-513 which overlap fs metadata
[  221.230792][T11795] EXT4-fs (loop1): pa ffff888100563d90: logic 256, phys. 369, len 9
[  221.230945][T11792] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2607'.
[  221.238893][T11795] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 1
[  221.301192][T11792] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2607'.
[  221.312290][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  221.369358][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  221.378898][T11800] IPv6: addrconf: prefix option has invalid lifetime
[  221.414104][T11800] loop4: detected capacity change from 0 to 1024
[  221.437003][T11751] chnl_net:caif_netlink_parms(): no params data found
[  221.445005][T11800] EXT4-fs: Ignoring removed mblk_io_submit option
[  221.460350][T11804] loop1: detected capacity change from 0 to 512
[  221.493848][T11800] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  221.512262][T11804] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  221.524242][T11806] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2610'.
[  221.551906][T11804] EXT4-fs (loop1): 1 truncate cleaned up
[  221.559341][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  221.576378][T11804] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  221.589132][T11751] bridge0: port 1(bridge_slave_0) entered blocking state
[  221.596257][T11751] bridge0: port 1(bridge_slave_0) entered disabled state
[  221.604254][T11806] ALSA: seq fatal error: cannot create timer (-19)
[  221.645760][T11751] bridge_slave_0: entered allmulticast mode
[  221.672712][T11751] bridge_slave_0: entered promiscuous mode
[  221.695241][T11818] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2611'.
[  221.704259][T11818] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2611'.
[  221.718249][T11751] bridge0: port 2(bridge_slave_1) entered blocking state
[  221.725407][T11751] bridge0: port 2(bridge_slave_1) entered disabled state
[  221.781874][T11751] bridge_slave_1: entered allmulticast mode
[  221.798626][T11751] bridge_slave_1: entered promiscuous mode
[  221.838758][T11751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  221.863188][T11751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  221.914700][T11751] team0: Port device team_slave_0 added
[  221.923028][T11820] 0ªî{X¹¦: left allmulticast mode
[  221.945594][T11820] $Hÿ: left promiscuous mode
[  221.950412][T11820] bond_slave_0: left promiscuous mode
[  221.955954][T11820] bond_slave_1: left promiscuous mode
[  221.972444][ T2968] lo speed is unknown, defaulting to 1000
[  221.974584][T11751] team0: Port device team_slave_1 added
[  221.978184][ T2968] s
z1: Port: 1 Link DOWN
[  222.000537][T11820] netlink: 'syz.2.2612': attribute type 3 has an invalid length.
[  222.020646][   T36] lo speed is unknown, defaulting to 1000
[  222.032556][T11751] batman_adv: batadv0: Adding interface: batadv_slave_0
[  222.039538][T11751] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  222.065504][T11751] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  222.083634][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  222.083982][T11751] batman_adv: batadv0: Adding interface: batadv_slave_1
[  222.099598][T11751] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  222.125727][T11751] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  222.158518][T11832] loop1: detected capacity change from 0 to 512
[  222.169734][T11832] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2
[  222.185691][T11832] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.2615: invalid indirect mapped block 2683928664 (level 1)
[  222.207875][T11751] hsr_slave_0: entered promiscuous mode
[  222.213990][T11751] hsr_slave_1: entered promiscuous mode
[  222.219974][T11832] EXT4-fs (loop1): Remounting filesystem read-only
[  222.226693][T11832] EXT4-fs (loop1): 1 truncate cleaned up
[  222.237159][T11832] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  222.253390][T11832] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  222.335752][T11751] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  222.345033][T11751] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  222.353964][T11751] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  222.363142][T11751] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  222.420126][T11751] 8021q: adding VLAN 0 to HW filter on device bond0
[  222.439373][T11751] 8021q: adding VLAN 0 to HW filter on device team0
[  222.449647][   T58] bridge0: port 1(bridge_slave_0) entered blocking state
[  222.456802][   T58] bridge0: port 1(bridge_slave_0) entered forwarding state
[  222.480335][   T58] bridge0: port 2(bridge_slave_1) entered blocking state
[  222.487434][   T58] bridge0: port 2(bridge_slave_1) entered forwarding state
[  222.507612][T11751] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  222.567878][T11751] 8021q: adding VLAN 0 to HW filter on device batadv0
[  222.623723][T11852] loop2: detected capacity change from 0 to 512
[  222.664783][T11852] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  222.685400][T11852] ext4 filesystem being mounted at /511/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  222.736390][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  222.744558][T11751] veth0_vlan: entered promiscuous mode
[  222.770646][T11751] veth1_vlan: entered promiscuous mode
[  222.781722][T11865] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2618'.
[  222.812658][T11751] veth0_macvtap: entered promiscuous mode
[  222.837814][T11751] veth1_macvtap: entered promiscuous mode
[  222.849946][T11867] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2619'.
[  222.865937][T11751] batman_adv: batadv0: Interface activated: batadv_slave_0
[  222.876285][T11867] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2619'.
[  222.884127][T11751] batman_adv: batadv0: Interface activated: batadv_slave_1
[  222.923626][   T31] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  222.935006][   T31] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  222.960891][   T31] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  222.963481][   T29] kauditd_printk_skb: 179 callbacks suppressed
[  222.963496][   T29] audit: type=1326 audit(1763041856.801:21704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11868 comm="syz.2.2620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40a42af6c9 code=0x7ffc0000
[  222.971533][   T31] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  223.009619][   T29] audit: type=1326 audit(1763041856.821:21705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11868 comm="syz.2.2620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f40a42af6c9 code=0x7ffc0000
[  223.033399][   T29] audit: type=1326 audit(1763041856.821:21706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11868 comm="syz.2.2620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40a42af6c9 code=0x7ffc0000
[  223.057089][   T29] audit: type=1326 audit(1763041856.821:21707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11868 comm="syz.2.2620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40a42af6c9 code=0x7ffc0000
[  223.090549][   T29] audit: type=1326 audit(1763041856.931:21708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11868 comm="syz.2.2620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f40a42af6c9 code=0x7ffc0000
[  223.114220][   T29] audit: type=1326 audit(1763041856.931:21709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11868 comm="syz.2.2620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40a42af6c9 code=0x7ffc0000
[  223.137819][   T29] audit: type=1326 audit(1763041856.931:21710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11868 comm="syz.2.2620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40a42af6c9 code=0x7ffc0000
[  223.161446][   T29] audit: type=1326 audit(1763041856.931:21711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11868 comm="syz.2.2620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f40a42af6c9 code=0x7ffc0000
[  223.185015][   T29] audit: type=1326 audit(1763041856.931:21712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11868 comm="syz.2.2620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40a42af6c9 code=0x7ffc0000
[  223.208762][   T29] audit: type=1326 audit(1763041856.931:21713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11868 comm="syz.2.2620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40a42af6c9 code=0x7ffc0000
[  223.278262][T11875] $Hÿ: renamed from bond0 (while UP)
[  223.292498][T11875] $Hÿ: entered promiscuous mode
[  223.297555][T11875] bond_slave_0: entered promiscuous mode
[  223.303408][T11875] bond_slave_1: entered promiscuous mode
[  223.630700][T11885] lo speed is unknown, defaulting to 1000
[  223.643486][T11885] lo speed is unknown, defaulting to 1000
[  223.656366][T11885] lo speed is unknown, defaulting to 1000
[  223.845713][T11888] loop1: detected capacity change from 0 to 512
[  223.853074][T11888] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  223.876129][T11888] EXT4-fs (loop1): 1 truncate cleaned up
[  223.890835][T11888] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  224.041874][ T3424] usb usb8-port1: attempt power cycle
[  224.120736][T11602] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  224.157019][T11897] hub 5-0:1.0: USB hub found
[  224.162157][T11897] hub 5-0:1.0: 8 ports detected
[  224.194471][T11897] syzkaller1: entered promiscuous mode
[  224.200033][T11897] syzkaller1: entered allmulticast mode
[  224.250302][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  224.274803][T11902] loop1: detected capacity change from 0 to 128
[  224.281808][T11902] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  224.340065][T11909] loop5: detected capacity change from 0 to 512
[  224.363249][T11909] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  224.378122][T11909] ext4 filesystem being mounted at /4/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  224.389921][T11906] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  224.509366][T11751] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  224.600306][T11918] bond0 (unregistering): Released all slaves
[  225.026808][T11930] loop2: detected capacity change from 0 to 1024
[  225.037148][T11930] EXT4-fs: Ignoring removed mblk_io_submit option
[  225.085182][T11930] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  225.293996][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  225.673549][T11939] ALSA: seq fatal error: cannot create timer (-19)
[  225.769773][T11951] loop2: detected capacity change from 0 to 512
[  225.786367][T11951] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  225.795005][T11948] 8021q: adding VLAN 0 to HW filter on device $Hÿ
[  225.804472][T11948] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  225.846018][T11951] EXT4-fs (loop2): 1 truncate cleaned up
[  225.855775][T11951] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  225.868171][ T3424] usb usb8-port1: unable to enumerate USB device
[  226.275169][T11968] loop4: detected capacity change from 0 to 256
[  226.465144][T11972] 9pnet_fd: Insufficient options for proto=fd
[  226.563240][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  226.612268][T11985] __nla_validate_parse: 9 callbacks suppressed
[  226.612283][T11985] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2652'.
[  226.639048][T11980] 8021q: adding VLAN 0 to HW filter on device $Hÿ
[  226.646678][T11983] loop1: detected capacity change from 0 to 512
[  226.653708][T11980] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  226.662950][T11986] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2652'.
[  226.697649][T11983] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2
[  226.709789][T11983] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.2654: invalid indirect mapped block 2683928664 (level 1)
[  226.724322][T11983] EXT4-fs (loop1): Remounting filesystem read-only
[  226.731069][T11983] EXT4-fs (loop1): 1 truncate cleaned up
[  226.746419][T11983] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  226.761801][T11983] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  226.844424][T11996] loop2: detected capacity change from 0 to 1024
[  226.851522][T11996] EXT4-fs: Ignoring removed mblk_io_submit option
[  226.892931][T11996] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  226.937621][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  226.961316][T11997] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2657'.
[  226.980515][T12010] loop2: detected capacity change from 0 to 256
[  227.002792][T12011] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2660'.
[  227.059223][ T3417] IPVS: starting estimator thread 0...
[  227.064858][T12014] loop3: detected capacity change from 0 to 512
[  227.073176][T12014] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  227.083783][T12014] EXT4-fs (loop3): 1 truncate cleaned up
[  227.089651][T12014] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  227.151811][T12015] IPVS: using max 2544 ests per chain, 127200 per kthread
[  227.167728][T12021] IPv6: addrconf: prefix option has invalid lifetime
[  227.182285][T12021] loop4: detected capacity change from 0 to 1024
[  227.190936][T12021] EXT4-fs: Ignoring removed mblk_io_submit option
[  227.215391][T12021] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  227.247895][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  227.356069][T11602] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  227.385245][T12029] loop3: detected capacity change from 0 to 1024
[  227.392170][T12029] EXT4-fs: Ignoring removed mblk_io_submit option
[  227.451907][T12029] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  227.983539][T11602] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  228.049247][T12039] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2669'.
[  228.093815][T12041] IPv6: addrconf: prefix option has invalid lifetime
[  228.169950][T12042] ALSA: seq fatal error: cannot create timer (-19)
[  228.180185][T12045] loop1: detected capacity change from 0 to 1024
[  228.242079][T12045] EXT4-fs: Ignoring removed mblk_io_submit option
[  228.315615][T12045] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  228.336147][T12050] hub 5-0:1.0: USB hub found
[  228.341440][T12054] syzkaller0: entered promiscuous mode
[  228.346959][T12054] syzkaller0: entered allmulticast mode
[  228.354322][T12050] hub 5-0:1.0: 8 ports detected
[  228.394916][   T29] kauditd_printk_skb: 674 callbacks suppressed
[  228.394931][   T29] audit: type=1400 audit(1763041862.241:22388): avc:  denied  { write } for  pid=12052 comm="syz.5.2674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  228.434758][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  228.450217][T12050] syzkaller1: entered promiscuous mode
[  228.455785][T12050] syzkaller1: entered allmulticast mode
[  228.466585][T12057] loop3: detected capacity change from 0 to 512
[  228.516592][T12057] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  228.539532][T12057] ext4 filesystem being mounted at /14/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  228.587826][T12065] loop1: detected capacity change from 0 to 512
[  228.600242][T12063] loop2: detected capacity change from 0 to 1024
[  228.617106][T11602] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  228.632147][T12065] EXT4-fs (loop1): orphan cleanup on readonly fs
[  228.639575][T12063] EXT4-fs: Ignoring removed mblk_io_submit option
[  228.659118][T12065] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.2677: bad orphan inode 13
[  228.695068][T12063] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  228.713912][T12070] IPv6: addrconf: prefix option has invalid lifetime
[  228.721403][T12065] ext4_test_bit(bit=12, block=18) = 1
[  228.726837][T12065] is_bad_inode(inode)=0
[  228.731107][T12065] NEXT_ORPHAN(inode)=2130706432
[  228.736069][T12065] max_ino=32
[  228.739253][T12065] i_nlink=1
[  228.751440][T12070] loop3: detected capacity change from 0 to 1024
[  228.771938][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  228.781455][T12070] EXT4-fs: Ignoring removed mblk_io_submit option
[  228.810025][   T29] audit: type=1326 audit(1763041862.651:22389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12071 comm="syz.2.2679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40a42af6c9 code=0x7ffc0000
[  228.833761][   T29] audit: type=1326 audit(1763041862.651:22390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12071 comm="syz.2.2679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40a42af6c9 code=0x7ffc0000
[  228.847079][T12065] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  228.874762][   T29] audit: type=1326 audit(1763041862.711:22391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12071 comm="syz.2.2679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f40a42af6c9 code=0x7ffc0000
[  228.898458][   T29] audit: type=1326 audit(1763041862.711:22392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12071 comm="syz.2.2679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40a42af6c9 code=0x7ffc0000
[  228.922168][   T29] audit: type=1326 audit(1763041862.711:22393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12071 comm="syz.2.2679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40a42af6c9 code=0x7ffc0000
[  228.925102][T12070] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  228.945763][   T29] audit: type=1326 audit(1763041862.721:22394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12071 comm="syz.2.2679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f40a42af6c9 code=0x7ffc0000
[  228.981382][   T29] audit: type=1326 audit(1763041862.721:22395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12071 comm="syz.2.2679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40a42af6c9 code=0x7ffc0000
[  228.984864][T12079] EXT4-fs error (device loop1): ext4_lookup:1787: inode #15: comm syz.1.2677: iget: bad i_size value: 360287970189639690
[  229.005059][   T29] audit: type=1326 audit(1763041862.721:22396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12071 comm="syz.2.2679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40a42af6c9 code=0x7ffc0000
[  229.041481][   T29] audit: type=1326 audit(1763041862.721:22397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12071 comm="syz.2.2679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f40a42af6c9 code=0x7ffc0000
[  229.067546][T11602] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  229.068373][T12065] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended
[  229.086632][T12079] EXT4-fs error (device loop1): ext4_lookup:1787: inode #15: comm syz.1.2677: iget: bad i_size value: 360287970189639690
[  229.105177][T12065] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  229.167919][T12087] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2683'.
[  229.188987][T12093] loop2: detected capacity change from 0 to 512
[  229.205019][T12087] ALSA: seq fatal error: cannot create timer (-19)
[  229.221723][T12093] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[  229.230288][T12093] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.2685: invalid indirect mapped block 2683928664 (level 1)
[  229.245575][T12093] EXT4-fs (loop2): Remounting filesystem read-only
[  229.246158][T12096] hub 5-0:1.0: USB hub found
[  229.252669][T12093] EXT4-fs (loop2): 1 truncate cleaned up
[  229.257728][T12096] hub 5-0:1.0: 8 ports detected
[  229.280691][T12093] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  229.297356][T12093] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  229.300362][T12101] loop4: detected capacity change from 0 to 512
[  229.312300][T12096] syzkaller1: entered promiscuous mode
[  229.318115][T12096] syzkaller1: entered allmulticast mode
[  229.336008][T12101] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  229.357544][T12101] ext4 filesystem being mounted at /497/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  229.377441][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  229.486349][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  229.554374][T12123] loop3: detected capacity change from 0 to 256
[  229.605633][T12125] loop1: detected capacity change from 0 to 512
[  229.620337][T12129] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[  229.645650][T12125] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  229.673842][T12125] ext4 filesystem being mounted at /538/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  229.689042][T12135] loop4: detected capacity change from 0 to 512
[  229.710244][T12135] SELinux: security_context_str_to_sid (root) failed with errno=-22
[  229.739112][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  229.746633][T12130] lo speed is unknown, defaulting to 1000
[  229.764338][T12130] lo speed is unknown, defaulting to 1000
[  229.781696][T12130] lo speed is unknown, defaulting to 1000
[  229.855008][T12142] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2691'.
[  229.876624][T12143] hub 5-0:1.0: USB hub found
[  229.892854][T12143] hub 5-0:1.0: 8 ports detected
[  229.906206][T12145] FAULT_INJECTION: forcing a failure.
[  229.906206][T12145] name failslab, interval 1, probability 0, space 0, times 0
[  229.918949][T12145] CPU: 1 UID: 0 PID: 12145 Comm: syz.1.2705 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  229.918977][T12145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  229.919068][T12145] Call Trace:
[  229.919075][T12145]  <TASK>
[  229.919084][T12145]  __dump_stack+0x1d/0x30
[  229.919109][T12145]  dump_stack_lvl+0xe8/0x140
[  229.919131][T12145]  dump_stack+0x15/0x1b
[  229.919253][T12145]  should_fail_ex+0x265/0x280
[  229.919274][T12145]  should_failslab+0x8c/0xb0
[  229.919306][T12145]  kmem_cache_alloc_node_noprof+0x57/0x4a0
[  229.919380][T12145]  ? __alloc_skb+0x101/0x320
[  229.919410][T12145]  ? __rtnl_unlock+0x95/0xb0
[  229.919450][T12145]  __alloc_skb+0x101/0x320
[  229.919481][T12145]  netlink_ack+0xfd/0x500
[  229.919519][T12145]  netlink_rcv_skb+0x192/0x220
[  229.919556][T12145]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  229.919586][T12145]  rtnetlink_rcv+0x1c/0x30
[  229.919675][T12145]  netlink_unicast+0x5c0/0x690
[  229.919710][T12145]  netlink_sendmsg+0x58b/0x6b0
[  229.919732][T12145]  ? __pfx_netlink_sendmsg+0x10/0x10
[  229.919753][T12145]  __sock_sendmsg+0x145/0x180
[  229.919796][T12145]  ____sys_sendmsg+0x31e/0x4e0
[  229.919880][T12145]  ___sys_sendmsg+0x17b/0x1d0
[  229.919915][T12145]  __x64_sys_sendmsg+0xd4/0x160
[  229.919959][T12145]  x64_sys_call+0x191e/0x3000
[  229.919982][T12145]  do_syscall_64+0xd2/0x200
[  229.920062][T12145]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  229.920099][T12145]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  229.920175][T12145]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  229.920205][T12145] RIP: 0033:0x7f2a3f6df6c9
[  229.920222][T12145] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  229.920240][T12145] RSP: 002b:00007f2a3e13f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  229.920259][T12145] RAX: ffffffffffffffda RBX: 00007f2a3f935fa0 RCX: 00007f2a3f6df6c9
[  229.920271][T12145] RDX: 0000000000044800 RSI: 0000200000001200 RDI: 0000000000000003
[  229.920284][T12145] RBP: 00007f2a3e13f090 R08: 0000000000000000 R09: 0000000000000000
[  229.920365][T12145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  229.920378][T12145] R13: 00007f2a3f936038 R14: 00007f2a3f935fa0 R15: 00007fff6828b718
[  229.920397][T12145]  </TASK>
[  230.215423][T12147] syzkaller1: entered promiscuous mode
[  230.220933][T12147] syzkaller1: entered allmulticast mode
[  230.376621][T12167] loop2: detected capacity change from 0 to 256
[  230.527417][T12171] loop3: detected capacity change from 0 to 512
[  230.554364][T12171] SELinux: security_context_str_to_sid (root) failed with errno=-22
[  230.731290][T12183] loop4: detected capacity change from 0 to 512
[  230.757743][T12183] EXT4-fs: Ignoring removed mblk_io_submit option
[  230.787346][T12187] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096
[  230.798455][T12183] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  230.816629][T12183] EXT4-fs (loop4): 1 truncate cleaned up
[  230.837185][T12183] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  230.866390][T12193] loop5: detected capacity change from 0 to 256
[  230.906268][T12193] FAT-fs (loop5): Directory bread(block 64) failed
[  230.925026][T12193] FAT-fs (loop5): Directory bread(block 65) failed
[  230.943977][T12193] FAT-fs (loop5): Directory bread(block 66) failed
[  230.950808][T12193] FAT-fs (loop5): Directory bread(block 67) failed
[  230.958603][T12193] FAT-fs (loop5): Directory bread(block 68) failed
[  230.966089][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  230.980076][T12193] FAT-fs (loop5): Directory bread(block 69) failed
[  230.988425][ T3005] ==================================================================
[  230.996517][ T3005] BUG: KCSAN: data-race in block_uevent / inc_diskseq
[  231.003284][ T3005] 
[  231.005597][ T3005] write to 0xffff888102390a18 of 8 bytes by task 3315 on cpu 0:
[  231.013217][ T3005]  inc_diskseq+0x2d/0x40
[  231.017459][ T3005]  disk_force_media_change+0x9e/0xe0
[  231.022738][ T3005]  lo_release+0x2cb/0x400
[  231.027067][ T3005]  bdev_release+0x373/0x3d0
[  231.031563][ T3005]  blkdev_release+0x15/0x20
[  231.036076][ T3005]  __fput+0x29b/0x650
[  231.040048][ T3005]  fput_close_sync+0x6e/0x120
[  231.044804][ T3005]  __x64_sys_close+0x56/0xf0
[  231.049389][ T3005]  x64_sys_call+0x273c/0x3000
[  231.054065][ T3005]  do_syscall_64+0xd2/0x200
[  231.058563][ T3005]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  231.064451][ T3005] 
[  231.066763][ T3005] read to 0xffff888102390a18 of 8 bytes by task 3005 on cpu 1:
[  231.074293][ T3005]  block_uevent+0x31/0x50
[  231.078618][ T3005]  dev_uevent+0x375/0x400
[  231.082944][ T3005]  uevent_show+0x11a/0x200
[  231.087353][ T3005]  dev_attr_show+0x3f/0xa0
[  231.091764][ T3005]  sysfs_kf_seq_show+0x1a3/0x280
[  231.096696][ T3005]  kernfs_seq_show+0x82/0xa0
[  231.101280][ T3005]  seq_read_iter+0x31e/0x950
[  231.105863][ T3005]  kernfs_fop_read_iter+0xc1/0x330
[  231.110967][ T3005]  vfs_read+0x64c/0x770
[  231.115118][ T3005]  ksys_read+0xda/0x1a0
[  231.119270][ T3005]  __x64_sys_read+0x40/0x50
[  231.123775][ T3005]  x64_sys_call+0x27c0/0x3000
[  231.128447][ T3005]  do_syscall_64+0xd2/0x200
[  231.132949][ T3005]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  231.138838][ T3005] 
[  231.141149][ T3005] value changed: 0x000000000000052b -> 0x000000000000052d
[  231.148243][ T3005] 
[  231.150553][ T3005] Reported by Kernel Concurrency Sanitizer on:
[  231.156690][ T3005] CPU: 1 UID: 0 PID: 3005 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) 
[  231.166574][ T3005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  231.176624][ T3005] ==================================================================
[  231.187848][T12199] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2724'.
[  231.204808][T12199] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2724'.
[  231.281798][T12193] FAT-fs (loop5): Directory bread(block 70) failed
[  231.288519][T12193] FAT-fs (loop5): Directory bread(block 71) failed
[  231.301698][T12193] FAT-fs (loop5): Directory bread(block 72) failed
[  231.308529][T12193] FAT-fs (loop5): Directory bread(block 73) failed