last executing test programs:

1m43.888145236s ago: executing program 32 (id=1275):
bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0b00000007000000d7c9000009"], 0x48)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b000000050000000100010009"], 0x48)
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"})
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17)

1m26.334209575s ago: executing program 1 (id=1710):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x40000000003}, 0x18)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)={0x2c, r3, 0xc4fc9e906872338b, 0x10000, 0x0, {{0x15}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

1m26.291093715s ago: executing program 1 (id=1701):
socket(0x2, 0x3, 0x100000001)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000005b80)={{{@in6=@remote, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in, 0x0, 0x6c}, 0x0, @in6=@dev}}, 0xe8)
syz_emit_ethernet(0x3e, &(0x7f0000000500)={@local, @random="f368656e065b", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev}}}}}}, 0x0)

1m26.242492715s ago: executing program 1 (id=1715):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a00)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0xc, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000140), &(0x7f00000002c0)=""/4095}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001a00)={{r0}, &(0x7f0000001980), &(0x7f00000019c0)}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000001800)={{r0}, &(0x7f0000001780)=0x4, 0x0}, 0x20)

1m26.176013704s ago: executing program 1 (id=1717):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000080)='./file0\x00')

1m25.851575993s ago: executing program 1 (id=1707):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000020000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r2, 0x0, 0x8}, 0x18)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x800100, 0x0, 0x0, 0x0, 0x0, 0x0)
wait4(0x0, 0x0, 0x40000000, 0x0)

1m25.716170683s ago: executing program 1 (id=1723):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x88)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff020000000000000000000000000001"], 0x0)
epoll_create1(0x0)

1m25.685723043s ago: executing program 33 (id=1723):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x88)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff020000000000000000000000000001"], 0x0)
epoll_create1(0x0)

1m22.136552438s ago: executing program 5 (id=1764):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000c5000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000fbb7030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
unshare(0x62040200)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_open_dev$sg(0x0, 0x0, 0x401)
r1 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1000000000000000000095d3de7b00001800000000000000100100000d"], 0x28}, 0x0)

1m22.060098378s ago: executing program 5 (id=1768):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = openat$rfkill(0xffffff9c, &(0x7f0000000180), 0xc81, 0x0)
write$rfkill(r2, &(0x7f0000000080)={0x5, 0x8, 0x3, 0x1, 0x1}, 0x8)
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000a40)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0x2, 0x44a, &(0x7f0000000400)="$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")

1m21.947682517s ago: executing program 5 (id=1769):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000b60000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@local, @in=@rand_addr=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x10000, 0x0, 0x671, 0x0, 0x6}, {0x800, 0x0, 0x4}}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}}, 0xe8)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000d40)=ANY=[@ANYBLOB="0212000005020000fcffffff0000000001020900008000006bdae99676f5d98b222c1d175b1bde5f2af814867595cca148f284845d6726daecb906b52bcbe4a0671f0cfe91064a71252070eab7b079faae2437c1c6375c071120ac3c3dfb0e5500269ca1cd7c4713a0369feb90311ab8556d5bac400f5ffbe90545162b4d370163c56d991d223d5da19c52bdbff65404e119035c710bccfff638d731934ecdd791b655adfc821d0887903e07df64c986fa6fb88f4a7d0b3f81044ac984488238d0f3c48cf099ab574e73f1a68d600ab06ec38d634b447f1d4aad0dd4f056494500bab1d7792480ea186568121117e75c05a8bde6476b7304bb2b64f14f54921845a91f868fa925cf0a818b9bba4ea375d10464e94cba1fefd1cf5efc16c2e5c1cf9adb172617d21d333c27c4554adf58cd7508fe0eed1a11186e77fce9e4518b7280db2fc8acac72e4934e0ae31d2132afdb95c105813b90284c0f3bd48d2bae45cd2d03aeb092f6ad45692fc26c26909b57d12e3bf2024de3edce03c2dd8cf1081fbc181cb24fb432907ee893125e386edee1e48b5fb72dc536fd879fc356b5bff8ae29afeda341fbb0fbba2d1a133f05b1cac0479743ca5c562d8a9d0ddb7bee5282f97fea614ca3aab3c10d6d6a81f495737f3787737ade4f9af413bc0298d7364c46dbcacedb88aba3b4add5e20c7927ca485152618468c3d23edc4d9cd368d4791e555fd2b8ec465a838f331950b862e23a9d8291dc879d7ea58209a3372319c8a5f2db16e3ebd1e349eb699a79faa391f8cee02ba5e9d1bc0f71b4e912681dfe4716c490dbf06199553c3bac487a1f2964d2f5fd7f064807dd11c3ca2f12c7a3ec79362c247f63d20d3ca52f0474b47c40a394ddfed196dce0259bf849bcb86f2d4919522d46f87443998f7ed5e40da41a80428d3b6e3845a9b377b3c6577add73ead5d1dc4d3620b53818be04d9f7ba74600cf5b462a7ed38b53b701465a152983c8fabe301fc42bebcb7c631e94afec308dee54b51e9c1df0f446fcd47612e90a275e51516310c59eb67c1e3b2da93bd52a7c9c4135fdc36027aad74c3cfd5c6ca6f5ae914a7cab1a3a5d397422163c49c609f53bd370fdecb126cea447defd3d448dadf5079430c058cba11fbb17c14ea71f96091f9a5d3a034ae9b34ac7a0b1d4eca440a51e4cd265911eeba260345b28ac84c065553e9aace53f1f29aa6b80ef7c4070192e4c12cb4389c3476b1f0a69825fdf4de60e9d02266fe9f50cba35775b2103bf85b312b04f3c6bec4b67e1b642a6b9bbef45d28ea1af055bf3c6cc62cb571cfbc4229c7d5aa62a2ed3ce2f42666fa295c71f44263c703d207fb6925f303a3facbd7afa4dccb0b6c37cf8e8a3fdc8ed1cfff049b48a94e50a5631a75589317dbcfd154f16e7dddac2945baf059a2aa4b14b9ac1d411c81dc600343abf5e9c4750e190a5116bab2258d8f1d5e0d3ab740423267be7e21c2eac41ae2aefead42fd71f91c4c3694617fb7fc265a48c3b82eea6e57c90824914847f857deb94c810b34ad53a9824127c2fef4cc5d7fd23307dd90c01bc32c79c2344459a58442b59260d8e21dc41f0b54d5d5433b9fd44ba4803766cacfec5bb5fd1ca3ccbc7c11cfd7274b526b9b61a231499a83831b9be1f708cde614165ce3bd0ccd42ab401bcd35143199d43395107e240e61c3abbcbad69a53ec9205bc2946dab619214ae55dfc6aad9a72683cb84f489efd02f1d439d6abfc4a9d2588c4db6419a7dd6c2387461298941a1d8d5bf4c0e35d0294014f217985cca434d557899c3090c236efe06bc9f2c5dc46f67896d56450a0aa4b6b6247ce45c12a1f547825cbac09f13bb48200ee1f85b00a0ce88723c19449fe2bbe500861bb03dbc2ae489e9b3f5ddaea3b4459be8aebd66cdc054affa87d60e0e86bb0ce56f604f697c5be3cb868e6dad28e3366ef5b6e9a26f8e1ba44d700eda13fa3f589ae638843a8a98c157f25c5e88c3df285e1e70d32110614c51d0e0a74abc7800006cf0d1d3d66e84ec726edc5c52f26f702d182e702be580bf74670201ebeffecc62630b637320626cbac4e9e98c608252e3932da36804e3e1e3ec3bee53bcf0071088c84f2a014b0122dcd9507d6003e63e34d7b59807dd24907e17ba43b83af0b734d9861870f137464be924a415a7607d7c2936c9156f6bc604c51600c558cdf18fe73fffa575443a4174311ecab11cd96572306b00a8998c20bb3879c37c9d400b06f03fd7b54ab24cefc134176df98af05086839f83eeaa9efa3e7629bdb0bc8377020b040e86cf36ff9f2bcc788091c9285b423cc7670a8290c394db287b24533b508a7df6786d571e6be8cd989ea2d1b846a03f24fcdae10333f55461716292e0589efbf61462943b8c8544ac128c8ce01e99ae5ba81cf037e86e1f35271c405c640a8429bc189a749033b831ef71bfb05fa72d2da716f2d86046296f481e4364f7e033dcb4fed15eb0937a66b62143ad51e76242f4cf425d662eeeb179a46a059489c2bbdee163cf5ac3d0fb6441bf171a7c34bbbcf2e3a59e637d35f32301d9d4a85b2a1db1a5cb6fffa7ebec998674711fdfd49297d7ac33f5c89d0999172bc3dad8e76ac1f081e4c1bb755562ff5715361000f56fb464881dfe6abb4f039a139f8fb2e2dca14b895ad3ee1d2835e0cd47051ea34d855b7c8387ef1a85d94b851602cbdb2242a2afb59d26292be2ebbd8ca3b2866b293c1ef2048dd65addb63230643502ab8e9548dfee031ee8306344f89973dc22712ae6896ab40c61e6093c026524da15ca192b1ecd14ec10cebfea7faed1a9bae2be7edf9c53182805fa4af868751ff3758b9c4f7e877dc8e16475592c85bda5a62c1b38938ac3b7031773c06c5eb5539baeb0588e6ede91d2da317a1a823045e375bb4ac29d6dc75d228a4ade916671eccd320ee5c0298650b541d98c4d1e09ed841f1cffbf0c7551c5ae725ad0f77f612829a409becb4e60ccc3cbb80d77e8d9bac59cfcac2c8a4c857f862747473148d9089dc56ed827784a63390eeb78f791c75c4eb3a1efad0f75e062cc4948e4b1b67a373494b88ff819a695ceac580bdd7b2c63222a663432e31b8531ee74d34afa70266ffe08d6ab6439c1b442df9195bd1b729d9ebfa25f326e48f7104303120046b2f1eb45c59a415b68d9cc3f6ca68dadf64748393f4c1f4a5876173ef0c95ea73c682b05e9e05c9a8a1d65500106a980f0a0effa10b93a03715f40f851d122a15fd4b60740a711b1121c146bb59b740ccf8db57b2eee36e4c5a3c6aadaca73b9637cb21f1d87acd9b76885b8694a5d036b6e3dde6ceb589575b6414bef68ae179973b5e04012a3ad10c55f9049ccd757185583633543f556967796eeebb8348e969860fdeb9166f1a431d44a2ae6e73c75d3b891ea014ce2be631c9d1eb301c7043aa03b66218095c0375ed12090e5bc32c44e3ddfbbcbe48f8d396e489db24cd7d8779d659b48193b96374e2937d3087e911b4d1c70cef3b984a72f80ed2f17ef50aab6f5931c897367aa6dd86e8e93de921c611f112f676e34b4ee720f46434b2c70742c1af99bee1b0c72683cd840bbba4e75e3a0128d0ebf1010dea64f896ef3cfd82a73fe329ce53b63697cb7bc0c03e127fd59d3241646f62a25ceb692d9e469c649dec8b693975d718d89394345b684ea2507d295422c88892de4e69c71e2dbf6bfd160a1c20b63e6e21b73d6bb14377ce3578664196f7ab33be87d3fe5772415361f857f6128b7ecd261638f4133f6384b1e2ba1c045985636e818e622460d4ef2af43267efb71168a92d22ec6b337158d3bcff2f0913ece4258ba89b5e19f8cae9c7f87ac8d051247f3635f398404f1d9fb1ace4082dd6897024070dddd7942b566d3f7f2a4fd9ec148397ddb814057c66b738f45ccb08f2f9ed8c5c8735a9c6938b7c5260a8cb0cbfd2bb9656592b4a70f368ecdcc8fdfcd52ad0ea0b9c3152147e9e441519eb1a69bc1b216fda362376ce23729bd384e8579c37aadf759b6c23ea54bfde28652d0b37cbcea221da9125919212cbad64e4aec3075bb70cc7eca71a25cb2a77c898fd775d74d61dcfcbff9d4d20102f3b5c804ccc3bb711b88140508a8802dcb205ebff54cbd9af252f36cf44b2337c382a7562ad6fc035313bff7f7d30a45fe01a083fb744460147a3a4b34b8dcc047607f38ba6b927c93872830e8d0c84031889b29afc2ef3944c4c0a3f3060f337bf0da8c7209e79a81f09330ecbf0024dcf85f7e4ec644867f5343f259825b1f421c51d30f3da87bbcb67946f133c6a4add120054b1b8a16a12a58352d37425f68d55e8e3a0391ed03085fef286214f51ab917906b2b9fcbf6ef85e04ba368f8811f9ec5a3a112c1b498f553e6659ed41b10ad141d921cca6878c7e1960380a2d0f86226f6b7e95a9639b41be4f73c392d3e7b133cfc2009f6a02edcfeb11bd2c84b3fcf50d4cb0d49f770ae2c71c73c766d327fb0c8d79c9908e1f7292eff8657f0ff0542df3127613c31cc2387d270b9510bd0a9709d80ed781b828d3a0f92df1be687206d572066d44b9afcf6b440b7298bf30f657fd9f986debea4f23032f37d711859854a134e7ad44613643eb7104e624e0bc34dddc2dd0ecee2bd04a87b03e06864710c51d561f28718c88ddc35dcbf23f1c5f0ef8149e24949e1d50572f039da9ef0fd29934fc6c7bcc9c44771b0d8c1dd739796eedd036abd78f4f26da1bb680138f9191eac4669d84e4866974257d8438f3253198b0478d33c325f633aaf85d9e6056766d1a17fa6cc1e1d639cf59dd06c1d8c1f4d48ea9ab2c3cc08fa812821eda5f32f17e808c14002aa846ee6f18177d27e6f715462e5562f0f7afbe6f5fa6ec031536b478733270175d928a46bc23cf14ed073854afd5032a8bef43d4c5664e159ffa7e9cdef4fe17c2c5ef36c6e6ddf342d16ce207cfe09b8067f2e48c6bae69b620d8be76725200b63522d766517203c6641e7d891469bf239c7a48d14f7c690e182c4f6a1fd02f2aa1b97dbecb8e120cc0fbd374ff598c53cb505698f94429466b97acb1a0232169e0e19e9ad7e3a41ee63e3b9ddcc0d40385c3d5acbb51e1987821de029bd9dc1fabd200a2e55bf786c52ae9ffc335d8a82e9156705ebfaff0992c1f5bca9d0d020834fea9163fcb691bf06deb6f92b76e2c21b3fa1625910846f3c715cbfb7de75209aec43c1a9acd2b4f833ac3a3883ba23349aa2a439871764c54ac8842a4a10280ff498072928aa1b4ced9ab3d9d27e4b5fab13bb979788848f7a4239896fe73a176a38766ed7fa1e84e88efb12a9c75c2e4431396b192b9dc4fa92343a702538feef01ae577fa443f4b50666bb87fc62577045963e8168981e1b6063b7454345a84dfdb278a4090d155220a18fd21e90a2c84943d947f5079aaa3e04364ffeb8a804df0f6e3c1b45782fcd5a4535940f26636ee79188ccb2ba071e0c832d9e9a9a391e0992e0f6965100ad2e6608d5db25847b2aa794ea6ee9b7687a1f9357320d073d06db8c38fbdc1be781bf53d05a5deeeb9e8d8ff66876b3a88b309d27bb83f8b3390947fd97c9f9ea41b215803088ac254cdab849291ed081e4a0cfd611fb7819d50753121bdda8770ad38d84bfadd9da9d7e9ffa5b9af3b9b8c13d7f73d920173137a6d4d17f2a2d0605926a68623947ee798dffe22746288195a718ae5dbfcc03b7da8a8ff0aa40c133b56c0c3ee95dd1dfaadafbdb37dc17ec84b0a0ce29ad46d50ef4fde31b6ba31c76498091fea2ef0c785be2daf492121dbc2101fd102000a"], 0x1028}}, 0x20000050)

1m21.884872227s ago: executing program 5 (id=1774):
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x65000, 0x0)
mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', r0, &(0x7f0000000140)='./file0/file0\x00', 0x271)

1m21.857881707s ago: executing program 5 (id=1776):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r2}, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x4c}}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000030601020000000000000000000000000500010007"], 0x1c}}, 0x0)

1m21.680466756s ago: executing program 5 (id=1781):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8)
sendto$inet6(r3, &(0x7f0000000140)="f4", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00'}, 0x1c)
close_range(r2, 0xffffffffffffffff, 0x0)

1m21.645846986s ago: executing program 34 (id=1781):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8)
sendto$inet6(r3, &(0x7f0000000140)="f4", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00'}, 0x1c)
close_range(r2, 0xffffffffffffffff, 0x0)

42.599764978s ago: executing program 7 (id=2603):
syz_emit_ethernet(0x3e, &(0x7f0000000640)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x1, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @dev, @loopback}}}}}}, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r0}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r1}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
fcntl$lock(r2, 0x26, &(0x7f0000000000))

42.258185916s ago: executing program 7 (id=2610):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18)
r2 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)

42.168828696s ago: executing program 7 (id=2615):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10)
r2 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r3 = add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x0}, &(0x7f00000001c0)="a6", 0x1, r2)
keyctl$setperm(0x5, r3, 0x20000000)

42.069577395s ago: executing program 7 (id=2617):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x21adc51, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x89901)
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x484, &(0x7f0000000480), 0x1, 0xb95, &(0x7f00000017c0)="$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")

41.907978515s ago: executing program 7 (id=2620):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$rds(r2, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0)
sendmsg$rds(r2, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0)
setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)

41.677073244s ago: executing program 7 (id=2625):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10)
bind$tipc(r0, 0x0, 0x0)
bind$tipc(r0, 0x0, 0x0)

41.646339524s ago: executing program 35 (id=2625):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10)
bind$tipc(r0, 0x0, 0x0)
bind$tipc(r0, 0x0, 0x0)

41.271665412s ago: executing program 6 (id=2639):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0)
syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0)

39.976518107s ago: executing program 6 (id=2657):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x9}, 0x18)
r1 = gettid()
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
read(r2, &(0x7f0000000200)=""/209, 0xd1)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000080)={0x335, @time})
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r2, 0xc0a85352, &(0x7f0000000140)={{0x0, 0x7f}, 'port0\x00'})
tkill(r1, 0x7)

39.761953126s ago: executing program 6 (id=2652):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = socket$inet6(0x10, 0x3, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r3}, 0x10)
sendto$inet6(r1, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0)

39.658661396s ago: executing program 6 (id=2655):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x21adc51, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x89901)
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x484, &(0x7f0000000480), 0x1, 0xb95, &(0x7f00000017c0)="$eJzs3M1vVFUbAPDn3n7TvrS8efO+L8TEJgYxGodCiSbEGHBt0EQXLKntlDQdPmxrYiuLgnt1YYwLEsOfYOJeXLgycYELhb+AGIkhugEXNXc+yqSdKaWd9iD8fsmZe849wzzPw4Xec5K5DeCpNVq85BH7I+JMFjFcP59HRG+11x+xXHvf/buXJouWxcrKO79nkUXEvbuXJhufldWPg/VBf0TceCOLf3+8Pu784tLsRKVSnquPDy+cu3h4fnHp5ZlzE2fLZ8vnj42/emz8lfHxDtZ6++J7Xz7z06nnr1z7ZOytL/b+kMWJGKrPNdfRKaMxuvp30qw7IiY6HSyRrno9zXVm3QkTAgBgQ3nTGu6/MRxd8WDxNhzf/5w0OQAAAKAjVroiVgAAAIAnXGb/DwAAAE+4xvcA7t29NNloab+RsLvunIyIkVr9jeebazPdsVw99kdPROz5I4vmx1qz2h/bttEi0jc/losWj/Ac8kd7b73WgfCxfDki/t/q+mfV+keqT3Gvrz+PiLEOxB9dM97tf3/bqf9EB+Knrh+Ap9P1k7Ub2fr7X766/okW97/uFveurUh9/2us/+6vW/89qL+rzfrv7U3GOPDXizfazTWv/05/emuqiF8ct1XUI7hzOeJAd6v6s9X6szb1n9lkjMHJ21fbzRX1F/U22m7Xv3It4vVTretvyDb6/USHp2cq5bHaa5sYB787fahd/ObrX7QifmMvsMbytottobj+e2Jr1//iJmOM/O+3/e3mHl5//mtv9m6111s/8+HEwsLckYje7M31549unEvjPY3PKOp/4bmN//+3qr+rdkH6or4XuFw/Fu+9sibm4MGjX2+9/p1V1D+1xev/2SZjfPXt1ffbzaWuHwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB/hjwihiLLS6v9PC+VIgYj4j+xJ69cmF94afrCB+enirmIkejJp2cq5bGIGK6Ns2J8pNp/MD66ZjweEfsi4vPhgeq4NHmhMpW6eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFYNRsRQZHkpIvKI+HM4z0ul1FkBAAAAHTeSOgEAAABgx9n/AwAAwJPP/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAdtu/Z6zeziFg+PlBthd76XE/SzICdlqdOAEimK3UCQDLdqRMAkrHHB7KHzPe3nenreC4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPL4O7b9+M4uI5eMD1Vborc/1JM0M2Gl56gSAZLpSJwAk093m/MAu5wHsPnt8IHvIfH/bmb6O5wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA42uo2rK8FBF5tZ/npVLEvyJiJHqy6ZlKeSwi9kbEL8M9fcX4SOqkAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6Lj5xaXZiUqlPKejo6Oz2kn9kwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgBTmF5dmJyqV8tx86kwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA1OYXl2YnKpXy3A52UtcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEA6fwcAAP//184Irg==")

39.468584295s ago: executing program 6 (id=2663):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xffc, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000), 0xf)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x89f1, &(0x7f0000000040)={'ip6_vti0\x00', @random='\a\x00\x00 \x00'})

39.123895703s ago: executing program 6 (id=2673):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
close_range(r2, 0xffffffffffffffff, 0x0)

39.123627703s ago: executing program 36 (id=2673):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
close_range(r2, 0xffffffffffffffff, 0x0)

29.612504825s ago: executing program 4 (id=2933):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008bd6000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r2}, 0x10)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="640000000206050000000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a30000000000500040000400000050005000a000000050001000600000014000780080006400000000008001340"], 0x64}}, 0x24002800)
sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000030601020000000000000000000000000500010007"], 0x1c}}, 0x0)

29.529017234s ago: executing program 4 (id=2935):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x0, 0x2, 0xffffffff})
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
openat$tun(0xffffffffffffff9c, 0x0, 0xc0541, 0x0)
close(0xffffffffffffffff)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x0, 0x1}, 0x20)

29.443148264s ago: executing program 4 (id=2938):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xf, &(0x7f00000000c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1f00, 0x40, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r2 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='dE\x00', 0x0, r2)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000001800)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1<e\a\xa5\x8f\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\xd3K\xfa\xc8\x8d#\xce)\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^\x97\b\x14\xc5\xad\t\f\xdeg\x8d\x16wW\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fBy\x15\x83\xec(B4/#W\xc5\x05\x9d\xd6\x02\fU!a\xdc|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sa\xad\xa6\xb6P\xa3\xf7\xc3\x93\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^\v\xfbO\xf3\xff\x1bf\xedC\xbd\xd1\xf1#\xb3\xe5\t\x9a\xddk\x95\xd5N\xf3\x98\x1a\xa3\xca%N\xf8\xc6\xbcJw\xd8\x99f\xf1\xb5\x93^x|\x05\x00\x00\x00o*\xd3\xab\x05$<\xa3KQm\x00\xd3M\xb2\xd0,\xeeP\x1a\xd0 yI!\x17\x9b\xe7\xef\t\xba\xa0]\xf4\xb7\x00_g/\r\xd2\x06\xc5\x15\x1d\xcc\x0eB\x87\xe9 \x81P\"\xea\xd5#\xa4\xe5\xa1\x19Wp\x83\xf8tC\x10\xbe\xe3\xa9H\xc7\x89\x0eN\xd3\xc1\xd7\x99\xd8\x88\x1dZ\x91\r\xd1\x1c\xac\xe26b\x04\xecB[\xf3Lp\xfcQ\xf8\xec\xa0\x87\xd3\xde\x8bo\xd2\xbb~;\x8d\xc2\xf1\tP\xdfB\"VD\v\x90\xfb`\x8b\xfbr\x87B\xc3\x1c\x99\xe1ft\xd1\xdb\x0e\x86\xa3\xfc;y\x9d\xe6\xe25\x9f9\nj\x8a\xba\xb5\xc7\x92`\xed\x89\xf4\xbd\xc3\xe7l\xa9\xda\xde\xe0\xcf\xeaM\xb2~\x159\x92\xf60\x0e\xa0\xc2\x17\x8aC\xa5\xcf\xcd\x16\xdb\x83v\xe8\xf1\x82\xe2\xa5\xf0\xc7K\xe4?|\xc9\xdfx\xf0\xb1', &(0x7f0000001600)='\xb8\x8b\xadTd\xdcJ\x03\xf7\n\x11x\xf5\x93Q#\xfe\xb4\xeb\xd9/\x90\xad\xc5\xd0\a\xef\x06$*\xf0\v7>\xa8`\xf1)\xec\xba\xb7\x85\a\x92I\xbb\xfe2\xa0\xc1\xb3\x13p\xa2l', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='}.&,[\'.\x00', &(0x7f0000000200)='\xb8\x8b\xadTd\xdcJ\x03\xf7\n\x11x\xf5\x93Q#\xfe\xb4\xeb\xd9/\x90\xad\xc5\xd0\a\xef\x06$*\xf0\v7>\xa8`\xf1)\xec\xba\xb7\x85\a\x92I\xbb\xfe2\xa0\xc1\xb3\x13p\xa2l', 0x0)
close(r2)

29.380886854s ago: executing program 4 (id=2941):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0)
mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x80700a, 0x0)
umount2(&(0x7f0000000100)='./file0/file0\x00', 0xb)

29.380333274s ago: executing program 4 (id=2943):
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd_index=0x8, 0x7, 0x20000000, 0x20004, 0x0, 0x0, {0x1}})
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r1 = fcntl$dupfd(r0, 0x0, r0)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3}, 0x10)
ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5393, &(0x7f0000000000))

29.035796583s ago: executing program 4 (id=2949):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}}, 0x0)

29.022363203s ago: executing program 37 (id=2949):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000d40000000000000000000000000a20000000000a03000000000000000000010000000900010073797a3000000000bc000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000009000038008000240000000007c00038014000100626f6e64300000000000000000000000140001006970766c616e31000000000000000000140001006970766c616e300000000000000000001400010073697430000000000000fbffffffffffffff0100776c616e300000000000000000000000140001006772653000000000000000000000040008000140000000005c000000180a01010000000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014000100626f6e6430"], 0x4b0}}, 0x0)

2.265147781s ago: executing program 8 (id=3760):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000001e0000850000008200000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe16, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r3, &(0x7f000000a2c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

1.592128528s ago: executing program 3 (id=3769):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000a00)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="0500"], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20)
sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000001440)='U', 0xfdef}], 0x1}, 0x3)

1.591825258s ago: executing program 3 (id=3770):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r3, 0x0, r2, 0x0, 0x10000008ebc, 0x0)
splice(r1, 0x0, r4, 0x0, 0x25a5, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

1.591567938s ago: executing program 9 (id=3771):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
openat(0xffffffffffffff9c, 0x0, 0x40, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r2}, 0x10)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940))

1.572160768s ago: executing program 9 (id=3772):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f00000001c0)={0x200000000000001}, 0x8)
sendto$inet6(r2, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @local}, 0x1c)

1.552701218s ago: executing program 9 (id=3773):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r0)
sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)={0x14, r1, 0x72b}, 0x14}}, 0x0)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1)
r2 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f88)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x9, 0x487, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffdfd, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r3 = dup2(r2, r2)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1})
ioctl$BLKTRACESETUP(r3, 0x1276, 0x0)

1.521883808s ago: executing program 3 (id=3774):
socket$vsock_stream(0x28, 0x1, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000d40)={'filter\x00', 0x7, 0x4, 0x3f8, 0xf0, 0xe0, 0x200, 0x310, 0x310, 0x310, 0x4, 0x0, {[{{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_macvtap\x00', 'wg1\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @empty, @multicast2}}}, {{@arp={@multicast1, @multicast2, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'gre0\x00', 'bridge0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x448)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
sched_setscheduler(0x0, 0x6, &(0x7f0000000000))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffffffffffc, 0x1}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0)

1.502029007s ago: executing program 3 (id=3776):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, 0x0, &(0x7f0000000040)}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r4=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x4c, 0x10, 0x403, 0x70b528, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}, 0x1, 0xba01, 0x0, 0x4004}, 0x810)

1.411526737s ago: executing program 9 (id=3777):
setgid(0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x80000000000}, 0x18)
r2 = io_uring_setup(0x60f7, &(0x7f0000000a40)={0x0, 0x0, 0x2, 0xfffffffe, 0x3bd})
r3 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r3, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24)
listen(r3, 0x4)
close_range(r2, r3, 0x0)

1.389923057s ago: executing program 3 (id=3778):
r0 = gettid()
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x20000023896)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0xb29, 0x0, 0xfffffffe, 0x0, 0x0, "7a58beca39ed2d5a99bbc4bff0ebd3e9bd5a8e"})
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=<r4=>0x0)
timer_settime(r4, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

1.372635327s ago: executing program 9 (id=3779):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a20802"], 0x10}}, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in=@multicast2, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x32}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0xb7, 0xae, 0xffffffff}}, 0xe8)
sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x408d5)
sendmmsg(r0, &(0x7f0000000180), 0x400000000000077, 0x0)

1.372140457s ago: executing program 8 (id=3780):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
close(r0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0xd, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1e, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000010000e1850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4)
sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)

1.342683357s ago: executing program 8 (id=3781):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffffffffffd8e, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x80)

982.003105ms ago: executing program 0 (id=3796):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000640)={[{@jqfmt_vfsv1}, {@resgid}, {@barrier_val}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@orlov}, {@orlov}]}, 0xfc, 0x575, &(0x7f0000001180)="$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")
chdir(&(0x7f0000000240)='./file0\x00')
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8000, 0x1)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000000), &(0x7f0000000200)}, 0x20)
creat(&(0x7f0000000000)='./file0\x00', 0x261)

924.522105ms ago: executing program 0 (id=3786):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x10000}, 0x1c)
setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000000)='wg1\x00', 0x4)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r1, 0x0)
listen(r0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0xfffe, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)

861.797564ms ago: executing program 0 (id=3787):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file1\x00', 0x18000, &(0x7f0000002a00)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRESOCT, @ANYBLOB="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", @ANYRES32, @ANYRES32], 0xc, 0x302, &(0x7f0000000c00)="$eJzs3M9PE1sUwPHTH5S2BNrFy3t5L3nhRje6mUB1jTQGEmMTCVLij8RkgKk2HVvSaTAlRnTl1vgXuHJBWLIjUbYu2LjTjRt3bExcyMJY0+kMLWWgWGqL8P0kZA5zz2nv7bTk3IZ2+9aLh7mMpWX0kvjDSnwiIjsicfGLy+cc/XYckkZP5eLA1w//37x953oylZqYVmoyOXMpoZQaGn7z6HHESd/ol634ve0vic9bf2/9u/1j5kHWUllL5Qslpau5wqeSPmcaaiFr5TSlpkxDtwyVzVtGsTZeqI1nzMLiYlnp+YXB6GLRsCyl58sqZ5RVqaBKxbIK3NezeaVpmhqMClpJr05P68k2i+c7PBm04dW7sXirnGIxqQdEJLJvJL36u+YFAABOrub+3y+qk/3/2rnN0sDs+pDT/2+EvPr/yx9rt7Wn/w+LiGf/796/Z/+v/1r/v78jOluO1f/jZBgO7Tvlq4fVwWJSjzqvX9uzu2sjdkD/DwAAAAAAAAAAAAAAAAAAAADAn2CnUolVKpWYe3R/+kUkLCLu7x6lARG50oMpo4OOcf1xCtQ/uBccEjGfL6WX0rWjk7ApIqYYMiIx+W4/HxzV2P3kkaqKy1tzxalfWUoH7JFkRrJ2/ajE+qS5vlKZvJaaGFU1e+v7JNpYn5CY/OVdn/CsD8mF8w31msTk/bwUxJQFex71+iejSl29kWqqj9h5AAAAAACcBpra5bl/17SDxmv1u/vr5vcHAvX99Yjn/jwo/wV7u3YAAAAAAM4Kq7yc003TKB4SRKR1juU/Qo5nEGyrqnXgrvCwnNmGHPd/GTo8jaMF7p3vGQo7Jzv+sPh2H5bwkZ4AXpdb2qkarq5GHXcV7ttGB+XI1Hj3r6Ad/PPy9bfO3eDYerjFStsPAoe+Lpb7uvLHBwAAAEBX1Zt+98x4bycEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAZ1I1vR+v1GgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICT4mcAAAD//0oBArI=")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x141042, 0x2)
pwritev2(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1, 0x5406, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff)
sendfile(r3, r3, 0x0, 0xfffe80)

860.856334ms ago: executing program 0 (id=3789):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="0000000000000000b70800000035665c9d62e80000007b8af8ff00000000bfa200001000000007020000f8ffffffb70300000800c1f0b704000000000000850000000300000095005510b0d03864ddec84142634c7a855c396a08db4536d4bbc23399f77c86be120f70fb37f2f3a8584ec4e448b8c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0)
ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x49de, 0x0, 0x0, 0xbfff, 0x0, "ec28a144f13d7607"})
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"})
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x44)

676.296023ms ago: executing program 3 (id=3790):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1e000000000000000400000001"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7816, 0x2, 0x0, 0x81, 0x801ff, 0x1, 0x1}, 0x1c)
recvmmsg$unix(r2, &(0x7f0000004100)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0)
sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000024000001)

646.665533ms ago: executing program 2 (id=3791):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x800, 0xa4018, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0xffff, 0x0, 0x0, 0xfffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$xdp(0x2c, 0x3, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)

551.359633ms ago: executing program 2 (id=3792):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000030000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000080)=0x8, 0x4)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'ip6tnl0\x00', <r4=>0x0})
sendto$packet(r2, &(0x7f0000000180)='7', 0x1, 0x0, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @random="bf73a9e561c5"}, 0x14)

550.955903ms ago: executing program 2 (id=3793):
signalfd(0xffffffffffffffff, &(0x7f0000000c80)={[0xfffffffffffffffe]}, 0x8)
r0 = syz_io_uring_setup(0x4169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000480), &(0x7f0000000040)=<r1=>0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x16, 0x3, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_io_uring_setup(0xa94, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000000340)=<r2=>0x0, &(0x7f00000005c0))
ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000080)={0xffffffff, 0x200009, 0x1, 0x6, 0x0, "ada957589145432df700edfdff0500"})
syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
io_uring_enter(r0, 0x48e9, 0x0, 0x0, 0x0, 0x0)
rseq(&(0x7f0000000300)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0)

387.879062ms ago: executing program 9 (id=3794):
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0)
write(r1, &(0x7f0000004200)='t', 0x1)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xb, &(0x7f0000000940)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
sendfile(r1, r0, 0x0, 0x3ffff)
sendfile(r1, r0, 0x0, 0x7ffff000)

387.739572ms ago: executing program 2 (id=3795):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
flock(r2, 0x5)
r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
flock(r3, 0x2)
dup3(r3, r2, 0x0)

341.076582ms ago: executing program 0 (id=3797):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r1}, &(0x7f0000000080), &(0x7f00000001c0)}, 0x20)
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000280)={'wg2\x00'})
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast})

252.867612ms ago: executing program 8 (id=3798):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000640)={[{@jqfmt_vfsv1}, {@resgid}, {@barrier_val}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@orlov}, {@orlov}]}, 0xfc, 0x575, &(0x7f0000001180)="$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")
chdir(&(0x7f0000000240)='./file0\x00')
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8000, 0x1)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000000), &(0x7f0000000200)}, 0x20)
creat(&(0x7f0000000000)='./file0\x00', 0x261)

252.260972ms ago: executing program 0 (id=3808):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
syz_usb_connect$cdc_ecm(0x1, 0x0, 0x0, 0x0)
listen(r0, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x1400, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x0, 0x0, 0xa}}}}}}, 0x0)

187.760962ms ago: executing program 2 (id=3799):
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'})
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
bind$llc(r2, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10)
connect$llc(r2, &(0x7f0000000040)={0x1a, 0x331, 0x0, 0x0, 0xe, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x10)

175.766351ms ago: executing program 2 (id=3800):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r0}, 0x10)
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc), 0x1, 0x800001, 0x0, 0x0, 0x0)
mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0)
mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil)
mlock2(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0)
mincore(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x0)

60.674321ms ago: executing program 8 (id=3801):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0100000007000000ff0f000009"], 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
open(&(0x7f0000000080)='./bus\x00', 0x143862, 0x0)
mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,')

0s ago: executing program 8 (id=3802):
timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)=<r0=>0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x80c406, &(0x7f0000000d40)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRES32=0x0], 0xff, 0x2c1, &(0x7f0000000a40)="$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")
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$P9_RGETLOCK(r1, &(0x7f00000002c0)=ANY=[], 0x200002e6)
fcntl$setpipe(r1, 0x407, 0x7000000)
fcntl$setpipe(r1, 0x407, 0x100000)
timer_gettime(r0, &(0x7f0000000000))

kernel console output (not intermixed with test programs):

=0 ip=0x7fc6e5aa5d29 code=0x7ffc0000
[  149.296663][   T29] audit: type=1326 audit(1736413919.617:4930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10771 comm="syz.0.2602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc6e5aa5d29 code=0x7ffc0000
[  149.323462][   T29] audit: type=1326 audit(1736413919.627:4931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10771 comm="syz.0.2602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6e5aa5d29 code=0x7ffc0000
[  149.351271][   T29] audit: type=1326 audit(1736413919.627:4932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10771 comm="syz.0.2602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc6e5aa5d29 code=0x7ffc0000
[  149.376671][   T29] audit: type=1326 audit(1736413919.627:4933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10771 comm="syz.0.2602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6e5aa5d29 code=0x7ffc0000
[  149.405872][   T29] audit: type=1326 audit(1736413919.627:4934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10771 comm="syz.0.2602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6e5aa5d29 code=0x7ffc0000
[  149.434835][   T29] audit: type=1326 audit(1736413919.627:4935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10771 comm="syz.0.2602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc6e5aa5d29 code=0x7ffc0000
[  149.462258][   T29] audit: type=1326 audit(1736413919.627:4936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10771 comm="syz.0.2602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6e5aa5d29 code=0x7ffc0000
[  149.488920][   T29] audit: type=1326 audit(1736413919.627:4937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10771 comm="syz.0.2602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6e5aa5d29 code=0x7ffc0000
[  149.515557][   T29] audit: type=1326 audit(1736413919.627:4938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10771 comm="syz.0.2602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7fc6e5aa5d29 code=0x7ffc0000
[  149.704480][T10790] bridge_slave_0: left allmulticast mode
[  149.710617][T10790] bridge_slave_0: left promiscuous mode
[  149.718813][T10790] bridge0: port 1(bridge_slave_0) entered disabled state
[  149.734054][T10790] bridge_slave_1: left allmulticast mode
[  149.740984][T10790] bridge_slave_1: left promiscuous mode
[  149.746763][T10790] bridge0: port 2(bridge_slave_1) entered disabled state
[  149.785234][T10790] bond0: (slave bond_slave_0): Releasing backup interface
[  149.795980][T10790] bond0: (slave bond_slave_1): Releasing backup interface
[  149.808374][T10790] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  149.815873][T10790] batman_adv: batadv0: Removing interface: batadv_slave_0
[  149.838630][T10800] loop7: detected capacity change from 0 to 4096
[  149.850655][T10802] loop4: detected capacity change from 0 to 1024
[  149.938652][T10807] EXT4-fs (loop4): shut down requested (0)
[  149.993646][ T5900] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  150.013496][ T5900] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  150.026551][ T5900] EXT4-fs (loop4): This should not happen!! Data will be lost
[  150.026551][ T5900] 
[  150.040006][ T5900] EXT4-fs (loop4): Total free blocks count 0
[  150.048103][ T5900] EXT4-fs (loop4): Free/Dirty block details
[  150.054379][ T5900] EXT4-fs (loop4): free_blocks=68451041280
[  150.061158][ T5900] EXT4-fs (loop4): dirty_blocks=6320
[  150.066932][ T5900] EXT4-fs (loop4): Block reservation details
[  150.073415][ T5900] EXT4-fs (loop4): i_reserved_data_blocks=395
[  150.100340][ T5898] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28
[  150.311202][T10834] loop0: detected capacity change from 0 to 512
[  150.329748][T10834] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  150.341515][T10834] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002]
[  150.362804][T10834] System zones: 1-12
[  150.367199][T10834] EXT4-fs (loop0): orphan cleanup on readonly fs
[  150.375480][T10834] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2631: bg 0: block 361: padding at end of block bitmap is not set
[  150.401527][T10843] __nla_validate_parse: 7 callbacks suppressed
[  150.401549][T10843] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2635'.
[  150.420718][T10846] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2634'.
[  150.423198][T10834] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem
[  150.443952][T10834] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #11: comm syz.0.2631: attempt to clear invalid blocks 33619980 len 1
[  150.465755][T10834] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.2631: invalid indirect mapped block 1811939328 (level 0)
[  150.481584][T10834] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.2631: invalid indirect mapped block 2 (level 2)
[  150.502780][T10834] EXT4-fs (loop0): 1 truncate cleaned up
[  150.569325][T10834] EXT4-fs (loop0): ext4_remount: Checksum for group 0 failed (17031!=33349)
[  150.591137][T10853] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2638'.
[  150.604965][T10827] chnl_net:caif_netlink_parms(): no params data found
[  150.735854][T10873] netlink: 'syz.2.2646': attribute type 13 has an invalid length.
[  150.751936][T10868] netlink: 'syz.0.2644': attribute type 15 has an invalid length.
[  150.760279][T10868] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2644'.
[  150.789224][T10873] gretap0: refused to change device tx_queue_len
[  150.795713][T10873] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  150.840678][T10827] bridge0: port 1(bridge_slave_0) entered blocking state
[  150.849085][T10827] bridge0: port 1(bridge_slave_0) entered disabled state
[  150.857280][T10827] bridge_slave_0: entered allmulticast mode
[  150.864452][T10827] bridge_slave_0: entered promiscuous mode
[  150.872467][T10827] bridge0: port 2(bridge_slave_1) entered blocking state
[  150.879920][T10827] bridge0: port 2(bridge_slave_1) entered disabled state
[  150.887421][T10827] bridge_slave_1: entered allmulticast mode
[  150.896331][T10827] bridge_slave_1: entered promiscuous mode
[  150.932901][T10827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  150.944330][T10827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  150.965278][T10827] team0: Port device team_slave_0 added
[  150.972837][T10827] team0: Port device team_slave_1 added
[  150.992772][T10827] batman_adv: batadv0: Adding interface: batadv_slave_0
[  151.001588][T10827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  151.028148][T10827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  151.039557][T10827] batman_adv: batadv0: Adding interface: batadv_slave_1
[  151.046897][T10827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  151.073641][T10827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  151.103524][T10827] hsr_slave_0: entered promiscuous mode
[  151.110257][T10827] hsr_slave_1: entered promiscuous mode
[  151.117181][T10827] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  151.125612][T10827] Cannot create hsr debugfs directory
[  151.193550][T10827] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  151.203650][T10827] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  151.212795][T10827] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  151.221933][T10827] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  151.236324][T10827] bridge0: port 2(bridge_slave_1) entered blocking state
[  151.243932][T10827] bridge0: port 2(bridge_slave_1) entered forwarding state
[  151.251340][T10827] bridge0: port 1(bridge_slave_0) entered blocking state
[  151.258505][T10827] bridge0: port 1(bridge_slave_0) entered forwarding state
[  151.289894][T10827] 8021q: adding VLAN 0 to HW filter on device bond0
[  151.302852][ T5867] bridge0: port 1(bridge_slave_0) entered disabled state
[  151.312676][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state
[  151.326773][T10827] 8021q: adding VLAN 0 to HW filter on device team0
[  151.340440][ T5867] bridge0: port 1(bridge_slave_0) entered blocking state
[  151.351002][ T5867] bridge0: port 1(bridge_slave_0) entered forwarding state
[  151.362328][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state
[  151.369815][ T5858] bridge0: port 2(bridge_slave_1) entered forwarding state
[  151.436611][T10827] 8021q: adding VLAN 0 to HW filter on device batadv0
[  151.555080][T10827] veth0_vlan: entered promiscuous mode
[  151.564492][T10827] veth1_vlan: entered promiscuous mode
[  151.584637][T10827] veth0_macvtap: entered promiscuous mode
[  151.593865][T10827] veth1_macvtap: entered promiscuous mode
[  151.604723][T10827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  151.616593][T10827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.627467][T10827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  151.638677][T10827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.648913][T10827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  151.662321][T10827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.673501][T10827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  151.684370][T10827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.696000][T10827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  151.707926][T10827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.718984][T10827] batman_adv: batadv0: Interface activated: batadv_slave_0
[  151.730692][T10827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  151.743229][T10827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.753269][T10827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  151.764397][T10827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.777170][T10827] batman_adv: batadv0: Interface activated: batadv_slave_1
[  151.787823][T10827] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  151.797824][T10827] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  151.807339][T10827] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  151.817570][T10827] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  151.882271][T10896] geneve0: entered allmulticast mode
[  151.953805][T10911] loop0: detected capacity change from 0 to 1024
[  151.955947][T10909] loop8: detected capacity change from 0 to 2048
[  151.967280][T10911] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869)
[  151.982080][T10911] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  152.034864][T10911] EXT4-fs (loop0): invalid journal inode
[  152.041693][T10911] EXT4-fs (loop0): can't get journal size
[  152.100870][T10933] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2652'.
[  152.140563][T10938] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2667'.
[  152.152073][T10938] netlink: 'syz.2.2667': attribute type 18 has an invalid length.
[  152.192171][T10938] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  152.200843][T10938] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  152.209945][T10938] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  152.218204][T10938] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  152.230827][T10938] vxlan0: entered promiscuous mode
[  152.243774][T10942] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2670'.
[  152.301386][T10940] loop6: detected capacity change from 0 to 4096
[  152.352755][T10909] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  152.373086][T10909] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  152.386261][T10909] EXT4-fs (loop8): This should not happen!! Data will be lost
[  152.386261][T10909] 
[  152.396913][T10909] EXT4-fs (loop8): Total free blocks count 0
[  152.404130][T10909] EXT4-fs (loop8): Free/Dirty block details
[  152.410479][T10909] EXT4-fs (loop8): free_blocks=2415919104
[  152.416213][T10909] EXT4-fs (loop8): dirty_blocks=8192
[  152.421915][T10909] EXT4-fs (loop8): Block reservation details
[  152.428339][T10909] EXT4-fs (loop8): i_reserved_data_blocks=512
[  152.453202][T10927] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28
[  152.469635][T10927] EXT4-fs (loop8): This should not happen!! Data will be lost
[  152.469635][T10927] 
[  152.540270][T10961] syz.4.2669[10961] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  152.540383][T10961] syz.4.2669[10961] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  152.552702][T10961] syz.4.2669[10961] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  152.600353][T10964] netlink: 'syz.4.2672': attribute type 4 has an invalid length.
[  152.670866][ T5858] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.688949][T10969] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2675'.
[  152.810554][T10977] loop0: detected capacity change from 0 to 2048
[  152.908325][ T5900] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  152.912483][ T5858] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.947045][T10975] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.2671'.
[  152.968677][ T5858] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.990469][T10967] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.2671'.
[  153.006486][T10988] loop4: detected capacity change from 0 to 1024
[  153.017256][ T5858] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.046000][T10991] loop0: detected capacity change from 0 to 128
[  153.123184][T10991] ext4 filesystem being mounted at /509/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  153.210867][ T5858] bridge_slave_1: left allmulticast mode
[  153.217241][ T5858] bridge_slave_1: left promiscuous mode
[  153.223456][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state
[  153.236654][ T5858] bridge_slave_0: left allmulticast mode
[  153.243092][ T5858] bridge_slave_0: left promiscuous mode
[  153.250883][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state
[  153.369399][ T5858] . (unregistering): (slave bond_slave_0): Releasing backup interface
[  153.380444][ T5858] . (unregistering): (slave bond_slave_1): Releasing backup interface
[  153.390614][ T5858] . (unregistering): Released all slaves
[  153.471443][ T5858] hsr_slave_0: left promiscuous mode
[  153.478254][ T5858] hsr_slave_1: left promiscuous mode
[  153.485966][ T5858] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  153.494861][ T5858] batman_adv: batadv0: Removing interface: batadv_slave_0
[  153.504929][ T5858] veth1_macvtap: left promiscuous mode
[  153.510942][ T5858] veth0_macvtap: left promiscuous mode
[  153.517493][ T5858] veth1_vlan: left promiscuous mode
[  153.523127][ T5858] veth0_vlan: left promiscuous mode
[  153.653386][T10972] chnl_net:caif_netlink_parms(): no params data found
[  153.694796][T10972] bridge0: port 1(bridge_slave_0) entered blocking state
[  153.702782][T10972] bridge0: port 1(bridge_slave_0) entered disabled state
[  153.710467][T10972] bridge_slave_0: entered allmulticast mode
[  153.717796][T10972] bridge_slave_0: entered promiscuous mode
[  153.724895][T10972] bridge0: port 2(bridge_slave_1) entered blocking state
[  153.733553][T10972] bridge0: port 2(bridge_slave_1) entered disabled state
[  153.742530][T10972] bridge_slave_1: entered allmulticast mode
[  153.749870][T10972] bridge_slave_1: entered promiscuous mode
[  153.771186][T10972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  153.784526][T10972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  153.809719][T10972] team0: Port device team_slave_0 added
[  153.817373][T10972] team0: Port device team_slave_1 added
[  153.833787][T10972] batman_adv: batadv0: Adding interface: batadv_slave_0
[  153.841122][T10972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  153.868144][T10972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  153.882688][T10972] batman_adv: batadv0: Adding interface: batadv_slave_1
[  153.889897][T10972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  153.916911][T10972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  153.945576][T10972] hsr_slave_0: entered promiscuous mode
[  153.952302][T10972] hsr_slave_1: entered promiscuous mode
[  153.958473][T10972] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  153.967062][T10972] Cannot create hsr debugfs directory
[  154.035979][T10972] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  154.046170][T10972] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  154.055490][T10972] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  154.065514][T10972] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  154.080452][T10972] bridge0: port 2(bridge_slave_1) entered blocking state
[  154.087742][T10972] bridge0: port 2(bridge_slave_1) entered forwarding state
[  154.095075][T10972] bridge0: port 1(bridge_slave_0) entered blocking state
[  154.102377][T10972] bridge0: port 1(bridge_slave_0) entered forwarding state
[  154.133156][T10972] 8021q: adding VLAN 0 to HW filter on device bond0
[  154.146720][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state
[  154.155666][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state
[  154.169040][T10972] 8021q: adding VLAN 0 to HW filter on device team0
[  154.184379][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state
[  154.192723][ T5858] bridge0: port 1(bridge_slave_0) entered forwarding state
[  154.204818][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state
[  154.212106][ T5858] bridge0: port 2(bridge_slave_1) entered forwarding state
[  154.280541][T10972] 8021q: adding VLAN 0 to HW filter on device batadv0
[  154.401718][T10972] veth0_vlan: entered promiscuous mode
[  154.410220][T10972] veth1_vlan: entered promiscuous mode
[  154.427631][T10972] veth0_macvtap: entered promiscuous mode
[  154.435772][T10972] veth1_macvtap: entered promiscuous mode
[  154.448893][T10972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  154.459531][T10972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  154.471144][T10972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  154.483405][T10972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  154.495332][T10972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  154.506224][T10972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  154.517144][T10972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  154.529073][T10972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  154.539011][T10972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  154.550172][T10972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  154.562012][T10972] batman_adv: batadv0: Interface activated: batadv_slave_0
[  154.573549][T10972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  154.584416][T10972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  154.594303][T10972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  154.605174][T10972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  154.615870][T10972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  154.626717][T10972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  154.638374][T10972] batman_adv: batadv0: Interface activated: batadv_slave_1
[  154.648872][T10972] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  154.658148][T10972] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  154.666961][T10972] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  154.676168][T10972] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  154.734550][T11035] netem: incorrect gi model size
[  154.736508][T11030] netlink: 'syz.9.2676': attribute type 13 has an invalid length.
[  154.739595][T11035] netem: change failed
[  154.769675][   T29] kauditd_printk_skb: 65 callbacks suppressed
[  154.769694][   T29] audit: type=1400 audit(1736413925.137:5004): avc:  denied  { mount } for  pid=11036 comm="syz.4.2695" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[  154.799435][T11030] gretap0: refused to change device tx_queue_len
[  154.805846][T11030] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  154.865288][T11045] syz.8.2685[11045] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  154.865362][T11045] syz.8.2685[11045] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  154.877011][   T29] audit: type=1400 audit(1736413925.227:5005): avc:  denied  { unmount } for  pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[  154.908564][T11045] syz.8.2685[11045] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  154.925092][T11048] loop9: detected capacity change from 0 to 2048
[  154.980576][   T29] audit: type=1326 audit(1736413925.347:5006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11055 comm="syz.4.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3f58d5d29 code=0x7ffc0000
[  155.005517][   T29] audit: type=1326 audit(1736413925.347:5007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11055 comm="syz.4.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3f58d5d29 code=0x7ffc0000
[  155.040544][   T29] audit: type=1326 audit(1736413925.347:5008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11055 comm="syz.4.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb3f58d5d29 code=0x7ffc0000
[  155.067013][   T29] audit: type=1326 audit(1736413925.347:5009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11055 comm="syz.4.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3f58d5d29 code=0x7ffc0000
[  155.092060][   T29] audit: type=1326 audit(1736413925.347:5010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11055 comm="syz.4.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3f58d5d29 code=0x7ffc0000
[  155.118507][   T29] audit: type=1326 audit(1736413925.347:5011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11055 comm="syz.4.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb3f58d5d29 code=0x7ffc0000
[  155.144427][   T29] audit: type=1326 audit(1736413925.347:5012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11055 comm="syz.4.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3f58d5d29 code=0x7ffc0000
[  155.169226][   T29] audit: type=1326 audit(1736413925.347:5013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11055 comm="syz.4.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3f58d5d29 code=0x7ffc0000
[  155.200354][T11062] loop4: detected capacity change from 0 to 512
[  155.225922][T11062] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  155.257663][T11062] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002]
[  155.318758][T11062] System zones: 1-12
[  155.338893][T11062] EXT4-fs (loop4): orphan cleanup on readonly fs
[  155.371806][T11076] syz.8.2700[11076] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  155.371926][T11076] syz.8.2700[11076] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  155.402894][T11078] netlink: 'syz.0.2701': attribute type 13 has an invalid length.
[  155.414747][T11048] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  155.415059][T11062] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2690: bg 0: block 361: padding at end of block bitmap is not set
[  155.436556][T11048] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  155.453945][T11062] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem
[  155.464254][T11048] EXT4-fs (loop9): This should not happen!! Data will be lost
[  155.464254][T11048] 
[  155.464282][T11048] EXT4-fs (loop9): Total free blocks count 0
[  155.464299][T11048] EXT4-fs (loop9): Free/Dirty block details
[  155.464313][T11048] EXT4-fs (loop9): free_blocks=2415919104
[  155.464371][T11048] EXT4-fs (loop9): dirty_blocks=8192
[  155.477201][T11062] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #11: comm syz.4.2690: attempt to clear invalid blocks 33619980 len 1
[  155.483307][T11048] EXT4-fs (loop9): Block reservation details
[  155.492095][T11062] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.2690: invalid indirect mapped block 1811939328 (level 0)
[  155.496334][T11048] EXT4-fs (loop9): i_reserved_data_blocks=512
[  155.497606][T11076] syz.8.2700[11076] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  155.510233][T11062] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.2690: invalid indirect mapped block 2 (level 2)
[  155.556300][T11071] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28
[  155.597379][T11062] EXT4-fs (loop4): 1 truncate cleaned up
[  155.598840][T11071] EXT4-fs (loop9): This should not happen!! Data will be lost
[  155.598840][T11071] 
[  155.661368][T11062] EXT4-fs (loop4): ext4_remount: Checksum for group 0 failed (17031!=33349)
[  155.664475][T11078] gretap0: refused to change device tx_queue_len
[  155.679650][T11078] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  155.744691][T11085] netem: incorrect gi model size
[  155.749857][T11085] netem: change failed
[  155.794818][T11090] __nla_validate_parse: 2 callbacks suppressed
[  155.794918][T11090] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2706'.
[  155.796601][T11091] loop0: detected capacity change from 0 to 256
[  155.924703][T11105] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2708'.
[  155.940792][T11093] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2708'.
[  155.958454][T11108] syz.0.2712[11108] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  156.034111][T11114] loop2: detected capacity change from 0 to 512
[  156.069354][T11114] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  156.073428][T11118] loop8: detected capacity change from 0 to 2048
[  156.102276][T11114] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002]
[  156.141070][T11114] System zones: 1-12
[  156.152471][T11114] EXT4-fs (loop2): orphan cleanup on readonly fs
[  156.167578][T11114] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2715: bg 0: block 361: padding at end of block bitmap is not set
[  156.199424][T11114] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem
[  156.217525][T11114] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #11: comm syz.2.2715: attempt to clear invalid blocks 33619980 len 1
[  156.260172][T11114] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.2715: invalid indirect mapped block 1811939328 (level 0)
[  156.305316][T11114] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.2715: invalid indirect mapped block 2 (level 2)
[  156.351002][T11114] EXT4-fs (loop2): 1 truncate cleaned up
[  156.366961][T11114] EXT4-fs (loop2): ext4_remount: Checksum for group 0 failed (17031!=33349)
[  156.534259][T11123] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  156.567291][T11123] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  156.580309][T11123] EXT4-fs (loop8): This should not happen!! Data will be lost
[  156.580309][T11123] 
[  156.591466][T11123] EXT4-fs (loop8): Total free blocks count 0
[  156.597703][T11123] EXT4-fs (loop8): Free/Dirty block details
[  156.604020][T11123] EXT4-fs (loop8): free_blocks=2415919104
[  156.610462][T11123] EXT4-fs (loop8): dirty_blocks=8192
[  156.616242][T11123] EXT4-fs (loop8): Block reservation details
[  156.623514][T11123] EXT4-fs (loop8): i_reserved_data_blocks=512
[  156.649792][T11118] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28
[  156.663422][T11118] EXT4-fs (loop8): This should not happen!! Data will be lost
[  156.663422][T11118] 
[  156.706051][T11134] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2720'.
[  156.724365][T11136] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2723'.
[  157.063937][T11169] loop8: detected capacity change from 0 to 164
[  157.107320][T11169] Unable to read rock-ridge attributes
[  157.130039][T11169] Unable to read rock-ridge attributes
[  157.318135][T11200] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2752'.
[  157.399155][ T2963] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  157.504587][T11215] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2760'.
[  157.519788][T11219] tipc: Started in network mode
[  157.524856][T11219] tipc: Node identity 7f000001, cluster identity 4711
[  157.532089][T11219] tipc: Enabled bearer <udp:syz2>, priority 10
[  157.541504][T11219] tipc: Enabled bearer <eth:team0>, priority 0
[  157.665485][T11228] bpf_get_probe_write_proto: 8 callbacks suppressed
[  157.665503][T11228] syz.2.2765[11228] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  157.680561][T11228] syz.2.2765[11228] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  157.692783][T11228] syz.2.2765[11228] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  157.711190][T11232] loop9: detected capacity change from 0 to 512
[  157.714079][T11230] loop8: detected capacity change from 0 to 1024
[  157.731558][T11228] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2765'.
[  157.738475][T11230] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  157.756947][T11230] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:483: comm syz.8.2766: Invalid block bitmap block 0 in block_group 0
[  157.771238][T11230] EXT4-fs error (device loop8): ext4_acquire_dquot:6938: comm syz.8.2766: Failed to acquire dquot type 0
[  157.785855][T11230] EXT4-fs error (device loop8): ext4_free_blocks:6589: comm syz.8.2766: Freeing blocks not in datazone - block = 0, count = 4096
[  157.803994][T11230] EXT4-fs error (device loop8): ext4_read_inode_bitmap:139: comm syz.8.2766: Invalid inode bitmap blk 0 in block_group 0
[  157.817849][T11230] EXT4-fs error (device loop8) in ext4_free_inode:361: Corrupt filesystem
[  157.820636][T11232] EXT4-fs warning (device loop9): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  157.826546][ T5898] EXT4-fs error (device loop8): ext4_release_dquot:6961: comm kworker/u8:39: Failed to release dquot type 0
[  157.841320][T11232] EXT4-fs (loop9): mount failed
[  157.854705][T11230] EXT4-fs (loop8): 1 orphan inode deleted
[  157.925397][T11247] netlink: 133492 bytes leftover after parsing attributes in process `syz.8.2773'.
[  157.947966][ T5853] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  158.054736][T11265] pim6reg: entered allmulticast mode
[  158.062725][T11265] pim6reg: left allmulticast mode
[  158.297806][T11287] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2789'.
[  158.487797][ T1034] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  158.495316][ T1034] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  158.502824][ T1034] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  158.510373][ T1034] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  158.517966][ T1034] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  158.525412][ T1034] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  158.532850][ T1034] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  158.540376][ T1034] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  158.547881][ T1034] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  158.555335][ T1034] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  158.562786][ T1034] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  158.570268][ T1034] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  158.577780][ T1034] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  158.585205][ T1034] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  158.592730][ T1034] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  158.600363][ T1034] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  158.608053][ T1034] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  158.615482][ T1034] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  158.623033][ T1034] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  158.630536][ T1034] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  158.638944][ T1034] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  158.646451][ T1034] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  158.654427][ T1034] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  158.661978][ T1034] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  158.670170][ T1034] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  158.677663][ T1034] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  158.685071][ T1034] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  158.692504][ T1034] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  158.700359][ T1034] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  158.707815][ T1034] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  158.715372][ T1034] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  158.722961][ T1034] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  158.730748][ T3377] tipc: Node number set to 2130706433
[  158.736764][ T1034] hid-generic 0000:0000:0000.000F: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[  158.813137][T11325] xt_hashlimit: size too large, truncated to 1048576
[  158.959048][T11333] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  159.000344][T11331] loop8: detected capacity change from 0 to 8192
[  159.016377][T11331] syz.8.2811: attempt to access beyond end of device
[  159.016377][T11331] loop8: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  159.033748][T11331] FAT-fs (loop8): error, invalid access to FAT (entry 0x0000e1b1)
[  159.041662][T11331] FAT-fs (loop8): Filesystem has been set read-only
[  159.051918][T11331] FAT-fs (loop8): error, invalid access to FAT (entry 0x0000e1b1)
[  159.060151][T11331] FAT-fs (loop8): error, invalid access to FAT (entry 0x0000e1b1)
[  159.154558][T11347] loop9: detected capacity change from 0 to 1024
[  159.190334][T11347] EXT4-fs: Ignoring removed nobh option
[  159.195969][T11347] EXT4-fs: Ignoring removed bh option
[  159.288997][T11361] program syz.4.2823 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  159.311978][T11361] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  159.383085][T11381] SELinux: security_context_str_to_sid (@) failed with errno=-22
[  159.699529][T11407] loop9: detected capacity change from 0 to 8192
[  159.716593][T11414] loop2: detected capacity change from 0 to 1024
[  159.723682][T11414] EXT4-fs: Ignoring removed nobh option
[  159.729957][T11414] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  159.791696][T11418] loop9: detected capacity change from 0 to 764
[  159.800406][T11414] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback.
[  159.825139][T11420] ALSA: seq fatal error: cannot create timer (-19)
[  159.846602][T11418] Symlink component flag not implemented
[  159.852973][T11418] Symlink component flag not implemented (129)
[  159.868366][T11418] rock: directory entry would overflow storage
[  159.874581][T11418] rock: sig=0x4f50, size=4, remaining=3
[  159.880420][T11418] iso9660: Corrupted directory entry in block 6 of inode 1792
[  159.976461][T11441] syzkaller0: entered allmulticast mode
[  160.014462][T11441] syzkaller0 (unregistering): left allmulticast mode
[  160.080407][T11454] loop8: detected capacity change from 0 to 1024
[  160.100352][T11454] EXT4-fs: Ignoring removed i_version option
[  160.111609][ T2963] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x4
[  160.114574][T11454] EXT4-fs: Ignoring removed bh option
[  160.119559][ T2963] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x2
[  160.119831][ T2963] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x3
[  160.149992][ T2963] hid-generic 0000:3000000:0000.0010: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[  160.190484][   T29] kauditd_printk_skb: 78 callbacks suppressed
[  160.190505][   T29] audit: type=1400 audit(1736413930.547:5088): avc:  denied  { create } for  pid=11452 comm="syz.8.2865" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1
[  160.239074][   T29] audit: type=1400 audit(1736413930.547:5089): avc:  denied  { read } for  pid=11452 comm="syz.8.2865" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop8" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1
[  160.313393][T11464] loop9: detected capacity change from 0 to 8192
[  160.317293][   T29] audit: type=1326 audit(1736413930.677:5090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11467 comm="syz.2.2871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0c3fe5d29 code=0x7ffc0000
[  160.343611][   T29] audit: type=1326 audit(1736413930.677:5091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11467 comm="syz.2.2871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0c3fe5d29 code=0x7ffc0000
[  160.348870][T11466] loop0: detected capacity change from 0 to 4096
[  160.367457][   T29] audit: type=1326 audit(1736413930.677:5092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11467 comm="syz.2.2871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7ff0c3fe5d29 code=0x7ffc0000
[  160.443688][T11466] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback.
[  160.455538][T11466] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback.
[  160.697385][T11491] loop0: detected capacity change from 0 to 512
[  160.707881][T11491] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  160.729521][T11491] EXT4-fs (loop0): 1 truncate cleaned up
[  161.160136][T11510] ref_ctr increment failed for inode: 0xba3 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff888108a90000
[  161.197909][T11509] uprobe: syz.0.2889:11509 failed to unregister, leaking uprobe
[  161.214948][   T29] audit: type=1400 audit(1736413931.577:5093): avc:  denied  { ioctl } for  pid=11519 comm="syz.9.2893" path="socket:[31625]" dev="sockfs" ino=31625 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  161.357197][   T29] audit: type=1326 audit(1736413931.717:5094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11532 comm="syz.9.2898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff60d705d29 code=0x7ffc0000
[  161.383701][   T29] audit: type=1326 audit(1736413931.757:5095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11532 comm="syz.9.2898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff60d705d29 code=0x7ffc0000
[  161.407485][   T29] audit: type=1326 audit(1736413931.757:5096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11532 comm="syz.9.2898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff60d705d29 code=0x7ffc0000
[  161.431739][   T29] audit: type=1326 audit(1736413931.757:5097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11532 comm="syz.9.2898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff60d705d29 code=0x7ffc0000
[  161.736781][T11564] loop4: detected capacity change from 0 to 512
[  161.789242][T11564] ext4 filesystem being mounted at /540/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  161.865950][T11582] syz.2.2920[11582] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  161.866058][T11582] syz.2.2920[11582] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  161.890967][T11582] syz.2.2920[11582] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  162.021518][T11600] loop9: detected capacity change from 0 to 256
[  162.045772][T11592] loop0: detected capacity change from 0 to 512
[  162.078590][T11592] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  162.086703][T11592] EXT4-fs (loop0): orphan cleanup on readonly fs
[  162.115215][T11608] __nla_validate_parse: 1 callbacks suppressed
[  162.115276][T11608] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2929'.
[  162.117628][T11592] EXT4-fs warning (device loop0): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  162.147307][T11592] EXT4-fs (loop0): Cannot turn on quotas: error -117
[  162.170203][T11592] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2924: bg 0: block 40: padding at end of block bitmap is not set
[  162.234675][T11592] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem
[  162.273642][T11592] EXT4-fs (loop0): 1 truncate cleaned up
[  162.283147][T11592] EXT4-fs mount: 48 callbacks suppressed
[  162.283164][T11592] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  162.324588][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  162.509836][T11638] loop2: detected capacity change from 0 to 8192
[  162.521766][    T8] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  162.575644][T11644] random: crng reseeded on system resumption
[  162.658497][T11645] FAT-fs (loop2): error, clusters badly computed (735 != 1)
[  162.658526][T11638] FAT-fs (loop2): error, clusters badly computed (737 != 736)
[  162.665850][T11645] FAT-fs (loop2): Filesystem has been set read-only
[  162.674816][T11638] FAT-fs (loop2): error, clusters badly computed (738 != 737)
[  162.684328][T11645] FAT-fs (loop2): error, clusters badly computed (738 != 2)
[  162.688928][T11638] FAT-fs (loop2): error, clusters badly computed (740 != 738)
[  162.696270][T11645] FAT-fs (loop2): error, clusters badly computed (740 != 3)
[  162.703939][T11638] FAT-fs (loop2): error, clusters badly computed (742 != 739)
[  162.718622][T11638] FAT-fs (loop2): error, clusters badly computed (743 != 740)
[  162.727556][T11638] FAT-fs (loop2): error, clusters badly computed (744 != 741)
[  162.736734][T11638] FAT-fs (loop2): error, clusters badly computed (745 != 742)
[  162.746227][T11638] FAT-fs (loop2): error, clusters badly computed (746 != 743)
[  162.755352][T11638] FAT-fs (loop2): error, clusters badly computed (747 != 744)
[  162.764341][T11638] FAT-fs (loop2): error, clusters badly computed (748 != 745)
[  162.773339][T11638] FAT-fs (loop2): error, clusters badly computed (749 != 746)
[  162.782088][T11638] FAT-fs (loop2): error, clusters badly computed (750 != 747)
[  162.791154][T11638] FAT-fs (loop2): error, clusters badly computed (751 != 748)
[  162.800465][T11638] FAT-fs (loop2): error, clusters badly computed (752 != 749)
[  162.809398][T11638] FAT-fs (loop2): error, clusters badly computed (753 != 750)
[  162.818791][T11638] FAT-fs (loop2): error, clusters badly computed (754 != 751)
[  162.828557][T11638] FAT-fs (loop2): error, clusters badly computed (755 != 752)
[  162.832509][T11645] FAT-fs (loop2): error, clusters badly computed (755 != 4)
[  162.837558][T11638] FAT-fs (loop2): error, clusters badly computed (757 != 753)
[  162.852635][T11638] FAT-fs (loop2): error, clusters badly computed (758 != 754)
[  162.854750][T11645] FAT-fs (loop2): error, clusters badly computed (758 != 5)
[  162.861590][T11638] FAT-fs (loop2): error, clusters badly computed (760 != 755)
[  162.876193][T11638] FAT-fs (loop2): error, clusters badly computed (761 != 756)
[  162.885244][T11638] FAT-fs (loop2): error, clusters badly computed (762 != 757)
[  162.894095][T11638] FAT-fs (loop2): error, clusters badly computed (763 != 758)
[  162.899488][T11655] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2951'.
[  162.903081][T11638] FAT-fs (loop2): error, clusters badly computed (764 != 759)
[  162.919606][T11638] FAT-fs (loop2): error, clusters badly computed (765 != 760)
[  162.928428][T11638] FAT-fs (loop2): error, clusters badly computed (766 != 761)
[  162.937348][T11638] FAT-fs (loop2): error, clusters badly computed (767 != 762)
[  162.946623][T11638] FAT-fs (loop2): error, clusters badly computed (768 != 763)
[  162.947347][T11645] FAT-fs (loop2): error, clusters badly computed (768 != 6)
[  162.955664][T11638] FAT-fs (loop2): error, clusters badly computed (770 != 764)
[  162.970259][T11638] FAT-fs (loop2): error, clusters badly computed (771 != 765)
[  162.979221][T11638] FAT-fs (loop2): error, clusters badly computed (772 != 766)
[  162.988348][T11638] FAT-fs (loop2): error, clusters badly computed (773 != 767)
[  162.997357][T11638] FAT-fs (loop2): error, clusters badly computed (774 != 768)
[  163.003150][T11645] FAT-fs (loop2): error, clusters badly computed (774 != 7)
[  163.006461][T11638] FAT-fs (loop2): error, clusters badly computed (776 != 769)
[  163.021226][T11638] FAT-fs (loop2): error, clusters badly computed (777 != 770)
[  163.030163][T11638] FAT-fs (loop2): error, clusters badly computed (778 != 771)
[  163.044748][T11645] FAT-fs (loop2): error, clusters badly computed (767 != 8)
[  163.058540][T11645] FAT-fs (loop2): error, clusters badly computed (768 != 9)
[  163.071528][T11645] FAT-fs (loop2): error, clusters badly computed (769 != 10)
[  163.088448][T11645] FAT-fs (loop2): error, clusters badly computed (770 != 11)
[  163.098380][T11645] FAT-fs (loop2): error, clusters badly computed (771 != 12)
[  163.111591][T11645] FAT-fs (loop2): error, clusters badly computed (772 != 13)
[  163.129975][T11645] FAT-fs (loop2): error, clusters badly computed (773 != 14)
[  163.168676][T11645] FAT-fs (loop2): error, clusters badly computed (774 != 15)
[  163.178052][T11645] FAT-fs (loop2): error, clusters badly computed (775 != 16)
[  163.187795][T11645] FAT-fs (loop2): error, clusters badly computed (776 != 17)
[  163.197452][T11645] FAT-fs (loop2): error, clusters badly computed (777 != 18)
[  163.244900][T11671] loop8: detected capacity change from 0 to 512
[  163.271953][T11671] EXT4-fs: Ignoring removed mblk_io_submit option
[  163.291953][T11671] EXT4-fs: quotafile must be on filesystem root
[  163.384602][T11656] chnl_net:caif_netlink_parms(): no params data found
[  163.477242][T11656] bridge0: port 1(bridge_slave_0) entered blocking state
[  163.484547][T11656] bridge0: port 1(bridge_slave_0) entered disabled state
[  163.492345][T11656] bridge_slave_0: entered allmulticast mode
[  163.492613][T11692] kernel profiling enabled (shift: 17)
[  163.501184][T11656] bridge_slave_0: entered promiscuous mode
[  163.510901][T11656] bridge0: port 2(bridge_slave_1) entered blocking state
[  163.518101][T11656] bridge0: port 2(bridge_slave_1) entered disabled state
[  163.525289][T11656] bridge_slave_1: entered allmulticast mode
[  163.531988][T11656] bridge_slave_1: entered promiscuous mode
[  163.552199][T11656] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  163.565443][T11656] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  163.586780][T11656] team0: Port device team_slave_0 added
[  163.594040][T11656] team0: Port device team_slave_1 added
[  163.598218][T11695] loop2: detected capacity change from 0 to 4096
[  163.610291][T11695] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  163.624214][T11656] batman_adv: batadv0: Adding interface: batadv_slave_0
[  163.631323][T11656] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  163.657439][T11656] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  163.671367][T11656] batman_adv: batadv0: Adding interface: batadv_slave_1
[  163.678485][T11656] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  163.704807][T11656] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  163.720445][ T5692] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  163.752102][T11656] hsr_slave_0: entered promiscuous mode
[  163.753592][T11701] xt_hashlimit: size too large, truncated to 1048576
[  163.765517][T11656] hsr_slave_1: entered promiscuous mode
[  163.794376][T11656] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  163.803197][T11656] Cannot create hsr debugfs directory
[  163.814462][ T5900] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  164.124469][T11717] loop2: detected capacity change from 0 to 512
[  164.152124][T11717] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  164.165019][T11717] ext4 filesystem being mounted at /457/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  164.203790][ T5692] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  164.205906][T11656] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  164.222658][T11656] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  164.231728][T11656] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  164.240669][T11656] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  164.256688][T11656] bridge0: port 2(bridge_slave_1) entered blocking state
[  164.263927][T11656] bridge0: port 2(bridge_slave_1) entered forwarding state
[  164.271362][T11656] bridge0: port 1(bridge_slave_0) entered blocking state
[  164.278469][T11656] bridge0: port 1(bridge_slave_0) entered forwarding state
[  164.335475][T11656] 8021q: adding VLAN 0 to HW filter on device bond0
[  164.367618][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state
[  164.380235][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state
[  164.405497][T11656] 8021q: adding VLAN 0 to HW filter on device team0
[  164.419845][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state
[  164.426984][ T5853] bridge0: port 1(bridge_slave_0) entered forwarding state
[  164.454912][ T5900] bridge0: port 2(bridge_slave_1) entered blocking state
[  164.462122][ T5900] bridge0: port 2(bridge_slave_1) entered forwarding state
[  164.533252][T11656] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  164.543833][T11656] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  164.583687][T11749] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2985'.
[  164.595568][T11751] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2986'.
[  164.692843][T11656] 8021q: adding VLAN 0 to HW filter on device batadv0
[  164.720056][T11762] team0 (unregistering): Port device team_slave_0 removed
[  164.732784][T11762] team0 (unregistering): Port device team_slave_1 removed
[  164.762447][T11766] loop8: detected capacity change from 0 to 256
[  164.937237][T11783] loop2: detected capacity change from 0 to 2048
[  164.977699][T11656] veth0_vlan: entered promiscuous mode
[  164.986295][T11656] veth1_vlan: entered promiscuous mode
[  164.998737][T11656] veth0_macvtap: entered promiscuous mode
[  165.005955][T11656] veth1_macvtap: entered promiscuous mode
[  165.018619][T11656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  165.029255][T11656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.039248][T11656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  165.049738][T11656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.059728][T11656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  165.070776][T11656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.080897][T11656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  165.091369][T11656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.101360][T11656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  165.112114][T11656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.122171][T11656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  165.132676][T11656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.143317][T11656] batman_adv: batadv0: Interface activated: batadv_slave_0
[  165.151848][T11656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  165.162367][T11656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.172252][T11656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  165.182736][T11656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.192671][T11656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  165.203164][T11656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.213050][T11656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  165.223622][T11656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.259629][T11656] batman_adv: batadv0: Interface activated: batadv_slave_1
[  165.274537][T11656] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  165.283444][T11656] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  165.292298][T11656] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  165.301055][T11656] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  165.312415][T11783] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  165.326355][T11789] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  165.363635][ T5692] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  165.376770][T11799] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  165.477409][T11806] Falling back ldisc for ttyS3.
[  165.489913][T11815] bridge0: port 3(gretap0) entered blocking state
[  165.496471][T11815] bridge0: port 3(gretap0) entered disabled state
[  165.503348][T11815] gretap0: entered allmulticast mode
[  165.509334][T11815] gretap0: entered promiscuous mode
[  165.516859][T11815] bridge0: port 3(gretap0) entered blocking state
[  165.523443][T11815] bridge0: port 3(gretap0) entered forwarding state
[  165.561221][T11818] vxcan1: entered promiscuous mode
[  165.575547][T11818] vlan2: entered promiscuous mode
[  165.582114][T11823] syz.0.3013[11823] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  165.582258][T11823] syz.0.3013[11823] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  165.594367][T11818] vxcan1: left promiscuous mode
[  165.601724][T11823] syz.0.3013[11823] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  165.652586][T11823] tipc: New replicast peer: 10.1.1.2
[  165.669586][T11823] tipc: Enabled bearer <udp:syz0>, priority 10
[  165.715287][T11833] netlink: 168 bytes leftover after parsing attributes in process `syz.8.3016'.
[  166.072239][T11866] netlink: 96 bytes leftover after parsing attributes in process `syz.8.3031'.
[  166.115047][T11874] loop8: detected capacity change from 0 to 512
[  166.141876][T11874] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.3033: bg 0: block 248: padding at end of block bitmap is not set
[  166.144515][T11878] loop2: detected capacity change from 0 to 512
[  166.176852][T11878] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  166.187031][T11874] __quota_error: 148 callbacks suppressed
[  166.187050][T11874] Quota error (device loop8): write_blk: dquota write failed
[  166.200323][T11874] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota
[  166.210512][T11874] EXT4-fs error (device loop8): ext4_acquire_dquot:6938: comm syz.8.3033: Failed to acquire dquot type 1
[  166.223328][T11878] EXT4-fs (loop2): 1 truncate cleaned up
[  166.234180][   T29] audit: type=1400 audit(1736413936.597:5245): avc:  denied  { write } for  pid=11885 comm="syz.9.3036" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  166.247213][T11878] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  166.273030][T11878] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  166.287177][T11874] EXT4-fs (loop8): 1 truncate cleaned up
[  166.294128][T11874] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  166.307678][T11874] ext4 filesystem being mounted at /79/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  166.371851][T10827] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  166.394653][   T29] audit: type=1326 audit(1736413936.757:5246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11899 comm="syz.8.3039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde75915d29 code=0x7ffc0000
[  166.418446][   T29] audit: type=1326 audit(1736413936.757:5247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11899 comm="syz.8.3039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde75915d29 code=0x7ffc0000
[  166.470083][   T29] audit: type=1326 audit(1736413936.817:5248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11899 comm="syz.8.3039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fde75915d29 code=0x7ffc0000
[  166.473669][T11896] ebtables: ebtables: counters copy to user failed while replacing table
[  166.493686][   T29] audit: type=1326 audit(1736413936.817:5249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11899 comm="syz.8.3039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde75915d29 code=0x7ffc0000
[  166.525822][   T29] audit: type=1326 audit(1736413936.817:5250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11899 comm="syz.8.3039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde75915d29 code=0x7ffc0000
[  166.550200][   T29] audit: type=1326 audit(1736413936.817:5251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11899 comm="syz.8.3039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fde75915d29 code=0x7ffc0000
[  166.573736][   T29] audit: type=1326 audit(1736413936.817:5252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11899 comm="syz.8.3039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde75915d29 code=0x7ffc0000
[  166.811140][T11933] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3064'.
[  166.820261][T11933] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3064'.
[  166.910282][T11947] loop8: detected capacity change from 0 to 512
[  166.920626][T11947] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  166.944608][T11947] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002]
[  166.974872][T11947] System zones: 1-12
[  166.979343][T11947] EXT4-fs (loop8): orphan cleanup on readonly fs
[  166.997492][T11947] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.3057: bg 0: block 361: padding at end of block bitmap is not set
[  167.012866][T11947] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6550: Corrupt filesystem
[  167.024171][T11947] EXT4-fs error (device loop8): ext4_clear_blocks:876: inode #11: comm syz.8.3057: attempt to clear invalid blocks 33619980 len 1
[  167.039318][T11947] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.3057: invalid indirect mapped block 1811939328 (level 0)
[  167.055505][T11947] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.3057: invalid indirect mapped block 2 (level 2)
[  167.071288][T11947] EXT4-fs (loop8): 1 truncate cleaned up
[  167.079682][T11947] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  167.099600][T11947] EXT4-fs (loop8): ext4_remount: Checksum for group 0 failed (17031!=33349)
[  167.125428][T10827] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  167.136063][T11963] bond_slave_1: mtu less than device minimum
[  167.393512][T11992] syz.9.3081[11992] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  167.393648][T11992] syz.9.3081[11992] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  167.413134][T11994] tipc: Bearer <udp:syz2>: already 2 bearers with priority 10
[  167.432211][T11994] tipc: Bearer <udp:syz2>: trying with adjusted priority
[  167.440502][T11994] tipc: Enabled bearer <udp:syz2>, priority 9
[  167.449175][T11994] tipc: Enabling of bearer <eth:team0> rejected, max 3 bearers permitted
[  167.450329][T11992] syz.9.3081[11992] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  167.589135][T12008] netlink: 133492 bytes leftover after parsing attributes in process `syz.2.3085'.
[  167.699743][T12018] loop9: detected capacity change from 0 to 2048
[  167.720886][T12018] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  167.736969][T12018] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  167.809173][T10972] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  167.811109][T12036] loop3: detected capacity change from 0 to 164
[  167.836301][T12036] Unable to read rock-ridge attributes
[  167.862180][T12036] Unable to read rock-ridge attributes
[  167.913491][T12046] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3101'.
[  167.962447][T12051] syz.0.3103[12051] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  167.962620][T12051] syz.0.3103[12051] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  167.974940][T12051] syz.0.3103[12051] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  168.011378][T12051] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3103'.
[  168.056251][T12053] pim6reg: entered allmulticast mode
[  168.068093][T12053] pim6reg: left allmulticast mode
[  168.105489][T12059] bond_slave_1: entered promiscuous mode
[  168.115485][T12059] bond_slave_1: left promiscuous mode
[  168.130302][T12061] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3108'.
[  168.301830][T12082] random: crng reseeded on system resumption
[  168.398271][T12082] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3119'.
[  168.604033][T12111] program syz.3.3133 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  169.305400][T12173] syz.3.3160[12173] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  169.306529][T12173] rdma_op ffff888132f71980 conn xmit_rdma 0000000000000000
[  169.378575][T12176] netlink: 133492 bytes leftover after parsing attributes in process `syz.2.3162'.
[  169.401602][T12181] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  169.411641][T12181] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.454024][T12183] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3165'.
[  169.464165][T12188] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 65540, id = 0
[  169.464272][T12185] IPVS: stopping master sync thread 12188 ...
[  169.482281][T12181] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  169.492314][T12181] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.548366][ T5853] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  169.560242][T12181] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  169.570126][T12181] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.606869][T12194] loop9: detected capacity change from 0 to 2048
[  169.642149][T12194] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  169.664414][T12181] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  169.674274][T12181] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.791228][T12208] loop2: detected capacity change from 0 to 1024
[  169.794357][T12181] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  169.805951][T12181] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  169.807494][T12208] EXT4-fs: Ignoring removed orlov option
[  169.822974][T12181] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  169.831265][T12181] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  169.852741][T12208] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  169.871566][T12181] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  169.879903][T12181] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  169.891435][T12181] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  169.899794][T12181] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  169.981344][T10972] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  170.204679][T12232] SELinux:  policydb table sizes (0,-1) do not match mine (8,7)
[  170.215118][T12232] SELinux: failed to load policy
[  170.266066][T12240] loop9: detected capacity change from 0 to 512
[  170.298240][T12240] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  170.312774][T12240] ext4 filesystem being mounted at /94/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  170.328995][T12248] pim6reg1: entered promiscuous mode
[  170.334365][T12248] pim6reg1: entered allmulticast mode
[  170.362794][T12250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  170.373404][T12250] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  170.387978][T12255] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3194'.
[  170.430674][T10972] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  170.445462][T12260] loop8: detected capacity change from 0 to 128
[  170.457410][T12260] syz.8.3197: attempt to access beyond end of device
[  170.457410][T12260] loop8: rw=2049, sector=145, nr_sectors = 3 limit=128
[  170.483881][T12262] netlink: 'syz.9.3196': attribute type 1 has an invalid length.
[  170.491909][T12260] syz.8.3197: attempt to access beyond end of device
[  170.491909][T12260] loop8: rw=0, sector=97, nr_sectors = 32 limit=128
[  170.504901][T12264] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3198'.
[  170.514768][T12260] syz.8.3197: attempt to access beyond end of device
[  170.514768][T12260] loop8: rw=0, sector=145, nr_sectors = 3 limit=128
[  170.591771][T12272] netlink: 100 bytes leftover after parsing attributes in process `syz.8.3201'.
[  170.661639][ T5692] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  170.712591][T12280] bridge0: port 3(vlan2) entered blocking state
[  170.719212][T12280] bridge0: port 3(vlan2) entered disabled state
[  170.726182][T12280] vlan2: entered allmulticast mode
[  170.727724][T12282] bpf_get_probe_write_proto: 11 callbacks suppressed
[  170.727794][T12282] syz.8.3206[12282] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  170.738299][T12282] syz.8.3206[12282] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  170.750496][T12280] vlan2: left allmulticast mode
[  170.766967][T12282] syz.8.3206[12282] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  170.790264][T12286] loop9: detected capacity change from 0 to 256
[  170.809525][T12286] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  170.833290][T12286] FAT-fs (loop9): Directory bread(block 64) failed
[  170.840564][T12286] FAT-fs (loop9): Directory bread(block 65) failed
[  170.847163][T12286] FAT-fs (loop9): Directory bread(block 66) failed
[  170.859834][T12286] FAT-fs (loop9): Directory bread(block 67) failed
[  170.866837][T12286] FAT-fs (loop9): Directory bread(block 68) failed
[  170.873916][T12286] FAT-fs (loop9): Directory bread(block 69) failed
[  170.882438][T12286] FAT-fs (loop9): Directory bread(block 70) failed
[  170.889861][T12286] FAT-fs (loop9): Directory bread(block 71) failed
[  170.896418][T12286] FAT-fs (loop9): Directory bread(block 72) failed
[  170.905576][T12286] FAT-fs (loop9): Directory bread(block 73) failed
[  170.958164][T12299] loop8: detected capacity change from 0 to 2048
[  170.990706][T12299] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  171.139976][T12313] loop3: detected capacity change from 0 to 512
[  171.155683][T12313] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  171.192727][T12313] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c028, mo2=0002]
[  171.206900][T12313] System zones: 0-2, 18-18, 34-35
[  171.229768][T10827] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  171.241413][T12313] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  171.257572][   T29] kauditd_printk_skb: 76 callbacks suppressed
[  171.257591][   T29] audit: type=1326 audit(1736413941.627:5329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12309 comm="syz.3.3219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f082e024690 code=0x7ffc0000
[  171.287256][   T29] audit: type=1326 audit(1736413941.627:5330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12309 comm="syz.3.3219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f082e024a77 code=0x7ffc0000
[  171.310797][   T29] audit: type=1326 audit(1736413941.627:5331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12309 comm="syz.3.3219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f082e024690 code=0x7ffc0000
[  171.313401][T12313] EXT4-fs error (device loop3): ext4_readdir:261: inode #2: block 3: comm syz.3.3219: path /48/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0
[  171.334345][   T29] audit: type=1326 audit(1736413941.627:5332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12309 comm="syz.3.3219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082e025d29 code=0x7ffc0000
[  171.334432][   T29] audit: type=1326 audit(1736413941.627:5333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12309 comm="syz.3.3219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082e025d29 code=0x7ffc0000
[  171.370019][T12313] EXT4-fs (loop3): Remounting filesystem read-only
[  171.378295][   T29] audit: type=1326 audit(1736413941.627:5334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12309 comm="syz.3.3219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f082e025d29 code=0x7ffc0000
[  171.431891][   T29] audit: type=1326 audit(1736413941.627:5335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12309 comm="syz.3.3219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082e025d29 code=0x7ffc0000
[  171.455468][   T29] audit: type=1326 audit(1736413941.627:5336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12309 comm="syz.3.3219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f082e025d29 code=0x7ffc0000
[  171.492693][T12320] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.550032][T12320] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.600484][T12320] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.660014][T12320] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.714314][T12320] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  171.730277][T12320] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  171.760979][T12320] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  171.782126][T12320] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  171.860497][ T2963] kernel write not supported for file /257/attr/keycreate (pid: 2963 comm: kworker/0:2)
[  171.887755][T12342] loop2: detected capacity change from 0 to 1024
[  171.904554][T12342] EXT4-fs: Ignoring removed nobh option
[  171.910243][T12342] EXT4-fs: Ignoring removed bh option
[  171.920998][T12342] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  171.954048][ T5692] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  172.032118][T12353] random: crng reseeded on system resumption
[  172.127601][T11656] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  172.225620][   T29] audit: type=1400 audit(1736413942.587:5337): avc:  denied  { create } for  pid=12370 comm="syz.2.3241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1
[  172.265105][T12372] loop2: detected capacity change from 0 to 1024
[  172.272734][T12372] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  172.276263][T12379] random: crng reseeded on system resumption
[  172.283802][T12372] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  172.303447][T12372] JBD2: no valid journal superblock found
[  172.309384][T12372] EXT4-fs (loop2): Could not load journal inode
[  172.427561][T12392] syz.2.3248[12392] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  172.427667][T12392] syz.2.3248[12392] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  172.442191][   T29] audit: type=1326 audit(1736413942.807:5338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12393 comm="syz.9.3249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff60d705d29 code=0x7ffc0000
[  172.465011][T12392] syz.2.3248[12392] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  172.484137][T12396] syz.0.3250[12396] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  172.485309][T12394] loop9: detected capacity change from 0 to 512
[  172.495790][T12396] syz.0.3250[12396] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  172.516523][T12396] syz.0.3250[12396] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  172.525725][T12394] EXT4-fs: Ignoring removed bh option
[  172.567498][T12394] journal_path: Non-blockdev passed as './bus'
[  172.573803][T12394] EXT4-fs: error: could not find journal device path
[  172.751789][ T5853] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  172.765823][T12423] __nla_validate_parse: 3 callbacks suppressed
[  172.765842][T12423] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3262'.
[  172.834468][T12429] netlink: 'syz.2.3265': attribute type 3 has an invalid length.
[  172.951849][T12441] sd 0:0:1:0: device reset
[  173.010083][ T2963] IPVS: starting estimator thread 0...
[  173.044600][T12446] ebtables: ebtables: counters copy to user failed while replacing table
[  173.063673][T12453] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3275'.
[  173.074144][T12456] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3276'.
[  173.075554][T12453] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3275'.
[  173.103172][T12448] IPVS: using max 2448 ests per chain, 122400 per kthread
[  173.467998][T12480] loop3: detected capacity change from 0 to 128
[  173.502658][T12482] loop2: detected capacity change from 0 to 2048
[  173.504513][T12480] syz.3.3286: attempt to access beyond end of device
[  173.504513][T12480] loop3: rw=2049, sector=145, nr_sectors = 3 limit=128
[  173.545480][T12480] syz.3.3286: attempt to access beyond end of device
[  173.545480][T12480] loop3: rw=0, sector=97, nr_sectors = 32 limit=128
[  173.548523][T12482] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  173.571093][T12480] syz.3.3286: attempt to access beyond end of device
[  173.571093][T12480] loop3: rw=0, sector=145, nr_sectors = 3 limit=128
[  173.780570][T12492] syz.8.3289[12492] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  173.901952][T12500] loop9: detected capacity change from 0 to 512
[  173.929286][T12500] EXT4-fs: Ignoring removed oldalloc option
[  173.939839][T12500] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  173.954643][T12500] EXT4-fs (loop9): 1 truncate cleaned up
[  173.964099][T12500] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  174.007212][T12500] loop9: detected capacity change from 512 to 64
[  174.030184][T12500] EXT4-fs error (device loop9): mb_free_blocks:1948: group 0, inode 15: block 128:freeing already freed block (bit 127); block bitmap corrupt.
[  174.045526][T12500] EXT4-fs (loop9): pa ffff8881060b6e00: logic 0, phys. 65, len 64
[  174.053419][T12500] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:5366: group 0, free 64, pa_free 63
[  174.119901][T12506] ebtables: ebtables: counters copy to user failed while replacing table
[  174.140711][T10972] EXT4-fs warning (device loop9): ext4_evict_inode:276: xattr delete (err -12)
[  174.192115][T10972] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  174.292663][T12519] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.390723][T12519] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.481411][T12519] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.601189][ T5853] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  174.629359][T12519] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.667841][ T5853] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  174.694050][T12519] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  174.705919][T12519] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  174.717511][T12519] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  174.737528][T12519] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  174.770784][ T5692] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  174.830515][T12535] sd 0:0:1:0: device reset
[  174.835720][T12536] loop2: detected capacity change from 0 to 1024
[  174.865986][T12536] EXT4-fs: Ignoring removed i_version option
[  174.867551][T12539] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3308'.
[  174.885952][T12536] EXT4-fs: Ignoring removed bh option
[  174.891133][T12542] random: crng reseeded on system resumption
[  174.960068][T12539] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  174.968455][T12539] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  174.976679][T12539] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  174.984899][T12539] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  174.995837][T12536] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  174.998331][T12539] vxlan0: entered promiscuous mode
[  175.043847][ T5692] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  175.112797][T12542] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3310'.
[  175.173333][T12557] loop3: detected capacity change from 0 to 256
[  175.187630][T12557] FAT-fs (loop3): Directory bread(block 64) failed
[  175.194393][T12557] FAT-fs (loop3): Directory bread(block 65) failed
[  175.201476][T12557] FAT-fs (loop3): Directory bread(block 66) failed
[  175.208202][T12557] FAT-fs (loop3): Directory bread(block 67) failed
[  175.214742][T12557] FAT-fs (loop3): Directory bread(block 68) failed
[  175.221339][T12557] FAT-fs (loop3): Directory bread(block 69) failed
[  175.228478][T12557] FAT-fs (loop3): Directory bread(block 70) failed
[  175.235035][T12557] FAT-fs (loop3): Directory bread(block 71) failed
[  175.241725][T12557] FAT-fs (loop3): Directory bread(block 72) failed
[  175.248378][T12557] FAT-fs (loop3): Directory bread(block 73) failed
[  175.307730][ T5858] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  175.453242][T12574] loop3: detected capacity change from 0 to 128
[  175.462392][T12574] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  175.504174][T12574] ext4 filesystem being mounted at /70/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  175.564881][T12577] loop2: detected capacity change from 0 to 512
[  175.583554][T11656] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  175.585168][T12577] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  175.595505][T12579] af_packet: tpacket_rcv: packet too big, clamped from 64 to 4294967272. macoff=96
[  175.605295][T12577] ext4 filesystem being mounted at /529/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  175.659367][T12583] loop3: detected capacity change from 0 to 512
[  175.666571][T12583] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  175.680643][ T5692] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  175.716936][T12583] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  175.730708][T12583] ext4 filesystem being mounted at /71/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  175.779964][T12599] bpf_get_probe_write_proto: 5 callbacks suppressed
[  175.779985][T12599] syz.2.3328[12599] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  175.786773][T12599] syz.2.3328[12599] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  175.802076][T12599] syz.2.3328[12599] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  175.863784][T11656] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  175.875477][T12610] netlink: 240 bytes leftover after parsing attributes in process `syz.9.3332'.
[  175.950834][T12618] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3337'.
[  175.967479][T12612] Falling back ldisc for ttyS3.
[  176.097289][T12631] netlink: 55631 bytes leftover after parsing attributes in process `syz.8.3346'.
[  176.253715][T12645] loop2: detected capacity change from 0 to 256
[  176.317594][T12655] syz.8.3359[12655] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  176.317658][T12655] syz.8.3359[12655] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  176.334947][T12655] syz.8.3359[12655] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  176.348551][T12655] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280
[  176.357633][T12658] loop9: detected capacity change from 0 to 512
[  176.360254][T12645] FAT-fs (loop2): Directory bread(block 64) failed
[  176.382910][T12645] FAT-fs (loop2): Directory bread(block 65) failed
[  176.389689][T12645] FAT-fs (loop2): Directory bread(block 66) failed
[  176.396498][T12645] FAT-fs (loop2): Directory bread(block 67) failed
[  176.405167][T12645] FAT-fs (loop2): Directory bread(block 68) failed
[  176.414232][T12645] FAT-fs (loop2): Directory bread(block 69) failed
[  176.425832][T12663] syz.3.3363[12663] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  176.425900][T12663] syz.3.3363[12663] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  176.427947][T12658] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  176.437699][T12663] syz.3.3363[12663] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  176.461827][T12645] FAT-fs (loop2): Directory bread(block 70) failed
[  176.480047][T12645] FAT-fs (loop2): Directory bread(block 71) failed
[  176.486624][T12645] FAT-fs (loop2): Directory bread(block 72) failed
[  176.486694][T12658] ext4 filesystem being mounted at /122/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  176.493179][T12645] FAT-fs (loop2): Directory bread(block 73) failed
[  176.619970][T12658] EXT4-fs error (device loop9): ext4_do_update_inode:5153: inode #19: comm syz.9.3360: corrupted inode contents
[  176.642307][T12658] EXT4-fs error (device loop9): ext4_dirty_inode:6041: inode #19: comm syz.9.3360: mark_inode_dirty error
[  176.673657][T12670] loop8: detected capacity change from 0 to 8192
[  176.684056][T12658] EXT4-fs error (device loop9): ext4_do_update_inode:5153: inode #19: comm syz.9.3360: corrupted inode contents
[  176.740499][T12658] EXT4-fs error (device loop9): ext4_xattr_delete_inode:3006: inode #19: comm syz.9.3360: mark_inode_dirty error
[  176.772061][T12658] EXT4-fs error (device loop9): ext4_xattr_delete_inode:3009: inode #19: comm syz.9.3360: mark inode dirty (error -117)
[  176.786663][T12658] EXT4-fs warning (device loop9): ext4_evict_inode:276: xattr delete (err -117)
[  176.836047][T12690] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3374'.
[  176.849000][T10972] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  177.054127][   T29] kauditd_printk_skb: 86 callbacks suppressed
[  177.054144][   T29] audit: type=1326 audit(1736413947.417:5425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12709 comm="syz.0.3382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6e5aa5d29 code=0x7ffc0000
[  177.108813][   T29] audit: type=1326 audit(1736413947.457:5426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12709 comm="syz.0.3382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc6e5aa5d29 code=0x7ffc0000
[  177.132474][   T29] audit: type=1326 audit(1736413947.457:5427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12709 comm="syz.0.3382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6e5aa5d29 code=0x7ffc0000
[  177.156153][   T29] audit: type=1326 audit(1736413947.457:5428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12709 comm="syz.0.3382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6e5aa5d29 code=0x7ffc0000
[  177.179740][   T29] audit: type=1326 audit(1736413947.457:5429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12709 comm="syz.0.3382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc6e5aa5d29 code=0x7ffc0000
[  177.203383][   T29] audit: type=1326 audit(1736413947.457:5430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12709 comm="syz.0.3382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6e5aa5d29 code=0x7ffc0000
[  177.226994][   T29] audit: type=1326 audit(1736413947.457:5431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12709 comm="syz.0.3382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc6e5aa5d29 code=0x7ffc0000
[  177.250790][   T29] audit: type=1326 audit(1736413947.457:5432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12709 comm="syz.0.3382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6e5aa5d29 code=0x7ffc0000
[  177.274379][   T29] audit: type=1326 audit(1736413947.457:5433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12709 comm="syz.0.3382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc6e5aa5d29 code=0x7ffc0000
[  177.297792][   T29] audit: type=1326 audit(1736413947.457:5434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12709 comm="syz.0.3382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6e5aa5d29 code=0x7ffc0000
[  177.798325][T12747] SELinux:  policydb version 0 does not match my version range 15-33
[  177.813835][T12747] SELinux: failed to load policy
[  177.869020][ T5853] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  177.923321][T12751] syzkaller1: entered promiscuous mode
[  177.928930][T12751] syzkaller1: entered allmulticast mode
[  178.046164][T12757] __nla_validate_parse: 1 callbacks suppressed
[  178.046184][T12757] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3402'.
[  178.157531][T12759] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3405'.
[  178.198584][T12767] devtmpfs: Unknown parameter 'udp:syz2'
[  178.207030][T12759] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3405'.
[  178.474902][T12788] netem: change failed
[  178.883825][T12834] loop9: detected capacity change from 0 to 512
[  178.892777][T12834] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  178.907984][T12834] EXT4-fs (loop9): 1 truncate cleaned up
[  178.924315][T12834] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  179.063129][T12856] syz.2.3430[12856] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  179.064688][T10972] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  179.211192][T12879] loop8: detected capacity change from 0 to 512
[  179.234872][T12879] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  179.271825][T12879] EXT4-fs (loop8): 1 truncate cleaned up
[  179.284570][T12879] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  179.291317][T12880] Cannot find del_set index 0 as target
[  179.572695][T12935] IPVS: Error joining to the multicast group
[  179.657821][T10827] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  179.789694][ T5904] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  180.095969][T12980] loop9: detected capacity change from 0 to 1024
[  180.125211][T12980] EXT4-fs: Ignoring removed orlov option
[  180.131027][T12980] EXT4-fs: Ignoring removed orlov option
[  180.175448][T12980] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  180.212422][T12980] EXT4-fs error (device loop9): ext4_expand_extra_isize_ea:2793: inode #12: comm syz.9.3460: corrupted in-inode xattr: bad magic number in in-inode xattr
[  180.238933][T12980] EXT4-fs (loop9): Remounting filesystem read-only
[  180.269889][T12980] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop9 ino=13
[  180.337369][T12980] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop9 ino=13
[  180.346232][T12980] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop9 ino=13
[  180.361192][T12993] loop2: detected capacity change from 0 to 128
[  180.428108][ T5881] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  180.442239][T12993] syz.2.3465: attempt to access beyond end of device
[  180.442239][T12993] loop2: rw=0, sector=97, nr_sectors = 944 limit=128
[  180.460509][T10972] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  180.520906][T13006] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3470'.
[  180.532089][    T8] IPVS: starting estimator thread 0...
[  180.550014][T13008] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3473'.
[  180.577287][T13008] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3473'.
[  180.637283][T13009] IPVS: using max 2304 ests per chain, 115200 per kthread
[  180.779132][T13032] netlink: 96 bytes leftover after parsing attributes in process `syz.9.3483'.
[  180.978237][T13045] loop8: detected capacity change from 0 to 8192
[  181.011647][T13053] pim6reg1: entered promiscuous mode
[  181.017055][T13053] pim6reg1: entered allmulticast mode
[  181.080092][ T5898] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  181.245937][T13070] loop8: detected capacity change from 0 to 512
[  181.285519][T13070] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  181.300443][T13070] ext4 filesystem being mounted at /173/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  181.343244][T13070] EXT4-fs error (device loop8): ext4_do_update_inode:5153: inode #19: comm syz.8.3501: corrupted inode contents
[  181.356475][T13070] EXT4-fs error (device loop8): ext4_dirty_inode:6041: inode #19: comm syz.8.3501: mark_inode_dirty error
[  181.374110][T13070] EXT4-fs error (device loop8): ext4_do_update_inode:5153: inode #19: comm syz.8.3501: corrupted inode contents
[  181.393667][T13085] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  181.400964][T13085] IPv6: NLM_F_CREATE should be set when creating new route
[  181.411129][T13070] EXT4-fs error (device loop8): ext4_xattr_delete_inode:3006: inode #19: comm syz.8.3501: mark_inode_dirty error
[  181.429303][T13070] EXT4-fs error (device loop8): ext4_xattr_delete_inode:3009: inode #19: comm syz.8.3501: mark inode dirty (error -117)
[  181.444324][T13070] EXT4-fs warning (device loop8): ext4_evict_inode:276: xattr delete (err -117)
[  181.470727][T10827] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  181.493919][T13093] SELinux:  policydb version 0 does not match my version range 15-33
[  181.502336][T13093] SELinux: failed to load policy
[  181.581865][T13102] loop3: detected capacity change from 0 to 1024
[  181.589233][T13102] EXT4-fs: Ignoring removed nobh option
[  181.594873][T13102] EXT4-fs: Ignoring removed nomblk_io_submit option
[  181.603739][T13102] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  181.627373][T13102] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  181.652875][T13102] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback.
[  181.704271][T11656] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  181.834887][T13130] bpf_get_probe_write_proto: 11 callbacks suppressed
[  181.834905][T13130] syz.0.3523[13130] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  181.847214][T13130] syz.0.3523[13130] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  181.858954][T13130] syz.0.3523[13130] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  181.958821][T13139] loop3: detected capacity change from 0 to 128
[  182.008588][T13139] syz.3.3528: attempt to access beyond end of device
[  182.008588][T13139] loop3: rw=2049, sector=153, nr_sectors = 888 limit=128
[  182.039869][T13141] syz.0.3529[13141] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  182.039946][T13141] syz.0.3529[13141] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  182.065132][T13143] IPVS: stopping master sync thread 13144 ...
[  182.065945][T13144] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 262145, id = 0
[  182.087185][T13141] syz.0.3529[13141] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  182.180291][T13150] syzkaller0: entered promiscuous mode
[  182.197829][T13150] syzkaller0: entered allmulticast mode
[  182.232926][T13152] loop9: detected capacity change from 0 to 512
[  182.242600][T13152] EXT4-fs error (device loop9): ext4_orphan_get:1389: inode #15: comm syz.9.3534: casefold flag without casefold feature
[  182.273709][T13155] ALSA: seq fatal error: cannot create timer (-19)
[  182.275871][T13152] EXT4-fs error (device loop9): ext4_orphan_get:1394: comm syz.9.3534: couldn't read orphan inode 15 (err -117)
[  182.295043][T13152] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  182.371885][T10972] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  182.405135][T13163] syz.0.3539[13163] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  182.405307][T13163] syz.0.3539[13163] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  182.423815][T13165] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3540'.
[  182.424709][T13163] syz.0.3539[13163] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  182.454803][T13165] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3540'.
[  182.485162][   T29] kauditd_printk_skb: 334 callbacks suppressed
[  182.485178][   T29] audit: type=1326 audit(1736413952.847:5769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13166 comm="syz.9.3538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff60d705d29 code=0x7ffc0000
[  182.515367][   T29] audit: type=1326 audit(1736413952.847:5770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13166 comm="syz.9.3538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7ff60d705d29 code=0x7ffc0000
[  182.539089][   T29] audit: type=1326 audit(1736413952.847:5771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13166 comm="syz.9.3538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff60d705d29 code=0x7ffc0000
[  182.671351][T13179] vcan0: tx drop: invalid sa for name 0x0000000000000004
[  182.947990][T13190] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3551'.
[  182.971457][T13195] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0
[  182.989840][T13194] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  183.145797][   T29] audit: type=1400 audit(1736413953.507:5772): avc:  denied  { ioctl } for  pid=13218 comm="syz.0.3564" path="socket:[37644]" dev="sockfs" ino=37644 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  183.226999][T13229] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  183.345856][   T29] audit: type=1326 audit(1736413953.707:5773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13246 comm="syz.8.3576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde75915d29 code=0x7ffc0000
[  183.369608][   T29] audit: type=1326 audit(1736413953.707:5774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13246 comm="syz.8.3576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde75915d29 code=0x7ffc0000
[  183.395588][   T29] audit: type=1326 audit(1736413953.767:5775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13246 comm="syz.8.3576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fde75915d29 code=0x7ffc0000
[  183.419452][   T29] audit: type=1326 audit(1736413953.767:5776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13246 comm="syz.8.3576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde75915d29 code=0x7ffc0000
[  183.443277][   T29] audit: type=1326 audit(1736413953.767:5777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13246 comm="syz.8.3576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fde75915d29 code=0x7ffc0000
[  183.467009][   T29] audit: type=1326 audit(1736413953.767:5778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13246 comm="syz.8.3576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde75915d29 code=0x7ffc0000
[  183.540643][T13260] serio: Serial port ptm0
[  183.627824][ T5904] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  183.677009][T13270] netdevsim netdevsim8 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  183.687349][T13270] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.779479][T13270] netdevsim netdevsim8 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  183.789453][T13270] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.849457][T13270] netdevsim netdevsim8 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  183.859554][T13270] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.884850][T13290] loop9: detected capacity change from 0 to 128
[  183.927756][T13290] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  183.943552][T13290] ext4 filesystem being mounted at /169/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  183.979666][T13270] netdevsim netdevsim8 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  183.989703][T13270] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.002937][T10972] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  184.089373][T13270] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  184.097672][T13270] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  184.133086][T13270] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  184.142322][T13270] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  184.186549][T13270] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  184.194899][T13270] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  184.206448][T13270] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  184.214813][T13270] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  184.239255][T13310] ref_ctr_offset mismatch. inode: 0x27b offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x82
[  184.317825][T13312] syzkaller0: entered allmulticast mode
[  184.336052][T13312] syzkaller0 (unregistering): left allmulticast mode
[  184.517885][T13339] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3617'.
[  184.793421][T13369] SELinux: security_context_str_to_sid (u) failed with errno=-22
[  184.827480][ T5908] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  184.861285][T13374] bond_slave_1: entered promiscuous mode
[  184.868737][T13374] bond_slave_1: left promiscuous mode
[  184.940110][T13384] hub 9-0:1.0: USB hub found
[  184.947155][T13384] hub 9-0:1.0: 8 ports detected
[  185.023345][T13390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  185.053041][T13390] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  185.063618][T13395] random: crng reseeded on system resumption
[  185.239918][T13402] syz.3.3644[13402] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  185.242468][T13402] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3644'.
[  185.359283][T13415] loop9: detected capacity change from 0 to 8192
[  185.477651][T13406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  185.486314][T13406] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  185.557558][ T5875] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  185.576132][T13432] bond_slave_1: entered promiscuous mode
[  185.582636][T13432] bond_slave_1: left promiscuous mode
[  185.780303][T13447] hub 6-0:1.0: USB hub found
[  185.785082][T13447] hub 6-0:1.0: 8 ports detected
[  185.860812][T13459] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3679'.
[  186.126982][   T24] IPVS: starting estimator thread 0...
[  186.128150][T13484] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  186.146590][T13490] loop8: detected capacity change from 0 to 1024
[  186.162357][T13490] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  186.185039][T13490] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  186.201943][T13490] EXT4-fs (loop8): Delayed block allocation failed for inode 16 at logical offset 51 with max blocks 1 with error 28
[  186.214280][T13490] EXT4-fs (loop8): This should not happen!! Data will be lost
[  186.214280][T13490] 
[  186.224139][T13490] EXT4-fs (loop8): Total free blocks count 0
[  186.230309][T13490] EXT4-fs (loop8): Free/Dirty block details
[  186.236252][T13490] EXT4-fs (loop8): free_blocks=68451041280
[  186.242233][T13490] EXT4-fs (loop8): dirty_blocks=16
[  186.247426][T13490] EXT4-fs (loop8): Block reservation details
[  186.253460][T13490] EXT4-fs (loop8): i_reserved_data_blocks=1
[  186.259566][T13489] IPVS: using max 2448 ests per chain, 122400 per kthread
[  186.316126][T10827] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  186.332865][T13506] syzkaller0: entered allmulticast mode
[  186.343296][T13506] syzkaller0 (unregistering): left allmulticast mode
[  186.355052][T13512] serio: Serial port ptm0
[  186.423394][T13517] hub 9-0:1.0: USB hub found
[  186.428307][T13517] hub 9-0:1.0: 8 ports detected
[  186.472127][T13520] loop9: detected capacity change from 0 to 2048
[  186.490104][T13520] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  186.619455][T13529] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 144: padding at end of block bitmap is not set
[  186.667642][T13529] EXT4-fs (loop9): Remounting filesystem read-only
[  186.762595][T10972] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  186.787877][T13548] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3708'.
[  186.841004][ T5898] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  186.867522][T13548] hsr_slave_1 (unregistering): left promiscuous mode
[  186.911924][T13559] loop3: detected capacity change from 0 to 1764
[  187.017196][T13569] SELinux: security_context_str_to_sid (u) failed with errno=-22
[  187.260493][T13581] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3721'.
[  187.281758][T13582] hub 9-0:1.0: USB hub found
[  187.286816][T13582] hub 9-0:1.0: 8 ports detected
[  187.339409][T13589] smc: net device bond0 applied user defined pnetid SYZ0
[  187.347134][T13589] smc: net device bond0 erased user defined pnetid SYZ0
[  187.501458][   T29] kauditd_printk_skb: 105 callbacks suppressed
[  187.501476][   T29] audit: type=1326 audit(1736413957.867:5884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13600 comm="syz.9.3728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff60d705d29 code=0x7ffc0000
[  187.531393][   T29] audit: type=1326 audit(1736413957.867:5885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13600 comm="syz.9.3728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff60d705d29 code=0x7ffc0000
[  187.555607][   T29] audit: type=1326 audit(1736413957.867:5886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13600 comm="syz.9.3728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff60d705d29 code=0x7ffc0000
[  187.579197][   T29] audit: type=1326 audit(1736413957.867:5887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13600 comm="syz.9.3728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff60d705d29 code=0x7ffc0000
[  187.602799][   T29] audit: type=1326 audit(1736413957.867:5888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13600 comm="syz.9.3728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff60d705d29 code=0x7ffc0000
[  187.626533][   T29] audit: type=1326 audit(1736413957.867:5889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13600 comm="syz.9.3728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff60d705d29 code=0x7ffc0000
[  187.650134][   T29] audit: type=1326 audit(1736413957.877:5890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13600 comm="syz.9.3728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff60d705d29 code=0x7ffc0000
[  187.697106][   T29] audit: type=1326 audit(1736413958.047:5891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13600 comm="syz.9.3728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff60d705d29 code=0x7ffc0000
[  187.720966][   T29] audit: type=1326 audit(1736413958.047:5892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13600 comm="syz.9.3728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff60d705d29 code=0x7ffc0000
[  187.752355][   T29] audit: type=1326 audit(1736413958.117:5893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13600 comm="syz.9.3728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff60d705d29 code=0x7ffc0000
[  187.808814][T13608] loop3: detected capacity change from 0 to 1024
[  187.815528][T13608] EXT4-fs: Ignoring removed orlov option
[  187.823820][T13608] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  188.618947][T13620] bridge0: port 3(vlan2) entered blocking state
[  188.625284][T13620] bridge0: port 3(vlan2) entered disabled state
[  188.665992][T13620] vlan2: entered allmulticast mode
[  188.672826][T13620] vlan2: left allmulticast mode
[  188.829415][T11656] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  188.922946][T13631] hub 9-0:1.0: USB hub found
[  188.928283][T13631] hub 9-0:1.0: 8 ports detected
[  188.944001][T13627] hub 6-0:1.0: USB hub found
[  188.951387][T13627] hub 6-0:1.0: 8 ports detected
[  189.032673][T13645] loop9: detected capacity change from 0 to 512
[  189.045800][T13645] /dev/loop9: Can't open blockdev
[  189.093057][    C1] operation not supported error, dev loop9, sector 0 op 0x9:(WRITE_ZEROES) flags 0x10000800 phys_seg 0 prio class 0
[  189.247284][   T24] hid-generic 0000:0003:0000.0011: unknown main item tag 0x0
[  189.254883][   T24] hid-generic 0000:0003:0000.0011: unknown main item tag 0x0
[  189.262387][   T24] hid-generic 0000:0003:0000.0011: unknown main item tag 0x0
[  189.295058][   T24] hid-generic 0000:0003:0000.0011: unknown main item tag 0x0
[  189.302605][   T24] hid-generic 0000:0003:0000.0011: unknown main item tag 0x0
[  189.310102][   T24] hid-generic 0000:0003:0000.0011: unknown main item tag 0x0
[  189.317572][   T24] hid-generic 0000:0003:0000.0011: unknown main item tag 0x0
[  189.325190][   T24] hid-generic 0000:0003:0000.0011: unknown main item tag 0x0
[  189.332814][   T24] hid-generic 0000:0003:0000.0011: unknown main item tag 0x0
[  189.340288][   T24] hid-generic 0000:0003:0000.0011: unknown main item tag 0x0
[  189.347792][   T24] hid-generic 0000:0003:0000.0011: unknown main item tag 0x0
[  189.355290][   T24] hid-generic 0000:0003:0000.0011: unknown main item tag 0x0
[  189.362939][   T24] hid-generic 0000:0003:0000.0011: unknown main item tag 0x0
[  189.370477][   T24] hid-generic 0000:0003:0000.0011: unknown main item tag 0x0
[  189.377958][   T24] hid-generic 0000:0003:0000.0011: unknown main item tag 0x0
[  189.385433][   T24] hid-generic 0000:0003:0000.0011: unknown main item tag 0x0
[  189.392948][   T24] hid-generic 0000:0003:0000.0011: unknown main item tag 0x0
[  189.399478][ T5904] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  189.400509][   T24] hid-generic 0000:0003:0000.0011: unknown main item tag 0x0
[  189.418634][   T24] hid-generic 0000:0003:0000.0011: unknown main item tag 0x0
[  189.426048][   T24] hid-generic 0000:0003:0000.0011: unknown main item tag 0x0
[  189.433533][   T24] hid-generic 0000:0003:0000.0011: unknown main item tag 0x0
[  189.441120][   T24] hid-generic 0000:0003:0000.0011: unknown main item tag 0x0
[  189.448590][   T24] hid-generic 0000:0003:0000.0011: unknown main item tag 0x0
[  189.456011][   T24] hid-generic 0000:0003:0000.0011: unknown main item tag 0x0
[  189.463466][   T24] hid-generic 0000:0003:0000.0011: unknown main item tag 0x0
[  189.471028][   T24] hid-generic 0000:0003:0000.0011: unknown main item tag 0x0
[  189.478524][   T24] hid-generic 0000:0003:0000.0011: unknown main item tag 0x0
[  189.485980][   T24] hid-generic 0000:0003:0000.0011: unknown main item tag 0x0
[  189.493446][   T24] hid-generic 0000:0003:0000.0011: unknown main item tag 0x0
[  189.500922][   T24] hid-generic 0000:0003:0000.0011: unknown main item tag 0x0
[  189.508390][   T24] hid-generic 0000:0003:0000.0011: unknown main item tag 0x0
[  189.515875][   T24] hid-generic 0000:0003:0000.0011: unknown main item tag 0x0
[  189.523322][   T24] hid-generic 0000:0003:0000.0011: unknown main item tag 0x0
[  189.530756][   T24] hid-generic 0000:0003:0000.0011: unknown main item tag 0x0
[  189.544420][   T24] hid-generic 0000:0003:0000.0011: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  190.027546][ T5908] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  190.071981][T13694] netlink: 108 bytes leftover after parsing attributes in process `syz.9.3766'.
[  190.081429][T13694] netlink: 108 bytes leftover after parsing attributes in process `syz.9.3766'.
[  190.090587][T13694] netlink: 84 bytes leftover after parsing attributes in process `syz.9.3766'.
[  190.342047][T13715] bridge0: port 4(vlan2) entered blocking state
[  190.348496][T13715] bridge0: port 4(vlan2) entered disabled state
[  190.355328][T13715] vlan2: entered allmulticast mode
[  190.362544][T13715] vlan2: left allmulticast mode
[  190.885531][ T8083] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0
[  190.893146][ T8083] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0
[  190.900882][ T8083] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0
[  190.910606][ T8083] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0
[  190.918222][ T8083] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0
[  190.926071][ T8083] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0
[  190.933757][ T8083] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0
[  190.941471][ T8083] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0
[  190.949155][ T8083] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0
[  190.956768][ T8083] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0
[  190.964377][ T8083] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0
[  190.972137][ T8083] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0
[  190.979787][ T8083] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0
[  190.987530][ T8083] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0
[  190.995124][ T8083] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0
[  191.002796][ T8083] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0
[  191.010369][ T8083] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0
[  191.018174][ T8083] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0
[  191.035520][ T8083] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0
[  191.043044][ T8083] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0
[  191.050562][ T8083] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0
[  191.058049][ T8083] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0
[  191.065472][ T8083] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0
[  191.073031][ T8083] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0
[  191.080512][ T8083] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0
[  191.087937][ T8083] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0
[  191.095358][ T8083] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0
[  191.102903][ T8083] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0
[  191.111164][ T8083] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0
[  191.118674][ T8083] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0
[  191.126204][ T8083] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0
[  191.133744][ T8083] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0
[  191.141245][ T8083] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0
[  191.148747][ T8083] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0
[  191.157448][ T8083] hid-generic 0000:0003:0000.0012: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  191.326345][ T5906] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  191.485167][T13848] loop9: detected capacity change from 0 to 1024
[  191.494213][T13848] EXT4-fs: Ignoring removed orlov option
[  191.508671][T13848] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  191.528340][T13854] wg2: entered promiscuous mode
[  191.531468][ T5867] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  191.533283][T13854] wg2: entered allmulticast mode
[  191.599816][T13859] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies.
[  191.626698][T13862] loop8: detected capacity change from 0 to 1024
[  191.633626][T13862] EXT4-fs: Ignoring removed orlov option
[  191.639499][T13862] EXT4-fs: Ignoring removed orlov option
[  191.678504][T13862] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  191.706577][T13862] EXT4-fs error (device loop8): ext4_expand_extra_isize_ea:2793: inode #12: comm syz.8.3798: corrupted in-inode xattr: bad magic number in in-inode xattr
[  191.723011][T13862] EXT4-fs (loop8): Remounting filesystem read-only
[  191.732434][T13862] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop8 ino=13
[  191.741610][T13862] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop8 ino=13
[  191.750803][T13862] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop8 ino=13
[  191.783556][T13876] bpf_get_probe_write_proto: 8 callbacks suppressed
[  191.783589][T13876] syz.8.3801[13876] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  191.790560][T13876] syz.8.3801[13876] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  191.802244][T13876] syz.8.3801[13876] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  191.846612][T13879] loop8: detected capacity change from 0 to 128
[  191.900331][T13865] ==================================================================
[  191.908464][T13865] BUG: KCSAN: data-race in __xa_set_mark / xas_find_marked
[  191.915691][T13865] 
[  191.918028][T13865] write to 0xffff888106327424 of 4 bytes by task 13848 on cpu 1:
[  191.925789][T13865]  __xa_set_mark+0x182/0x1b0
[  191.930412][T13865]  __folio_mark_dirty+0x3b5/0x4e0
[  191.935518][T13865]  mark_buffer_dirty+0x134/0x230
[  191.940495][T13865]  block_write_end+0x123/0x210
[  191.945295][T13865]  ext4_write_end+0x148/0x770
[  191.950001][T13865]  generic_perform_write+0x33c/0x4a0
[  191.955312][T13865]  ext4_buffered_write_iter+0x1ea/0x370
[  191.960900][T13865]  ext4_file_write_iter+0x383/0xf20
[  191.966276][T13865]  iter_file_splice_write+0x5f1/0x980
[  191.971681][T13865]  direct_splice_actor+0x160/0x2c0
[  191.976821][T13865]  splice_direct_to_actor+0x302/0x670
[  191.982260][T13865]  do_splice_direct+0xd7/0x150
[  191.987073][T13865]  do_sendfile+0x398/0x660
[  191.991507][T13865]  __x64_sys_sendfile64+0x110/0x150
[  191.996726][T13865]  x64_sys_call+0xfbd/0x2dc0
[  192.001335][T13865]  do_syscall_64+0xc9/0x1c0
[  192.005865][T13865]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  192.011802][T13865] 
[  192.014128][T13865] read to 0xffff888106327424 of 4 bytes by task 13865 on cpu 0:
[  192.021769][T13865]  xas_find_marked+0x60a/0x660
[  192.026551][T13865]  find_get_entry+0x54/0x390
[  192.031161][T13865]  filemap_get_folios_tag+0x9e/0x210
[  192.036483][T13865]  file_write_and_wait_range+0x204/0x2f0
[  192.042136][T13865]  generic_buffers_fsync_noflush+0x46/0x120
[  192.048108][T13865]  ext4_sync_file+0x1ff/0x6c0
[  192.052834][T13865]  vfs_fsync_range+0x116/0x130
[  192.058468][T13865]  ext4_buffered_write_iter+0x326/0x370
[  192.064046][T13865]  ext4_file_write_iter+0x383/0xf20
[  192.069294][T13865]  iter_file_splice_write+0x5f1/0x980
[  192.074705][T13865]  direct_splice_actor+0x160/0x2c0
[  192.079857][T13865]  splice_direct_to_actor+0x302/0x670
[  192.085270][T13865]  do_splice_direct+0xd7/0x150
[  192.090079][T13865]  do_sendfile+0x398/0x660
[  192.094521][T13865]  __x64_sys_sendfile64+0x110/0x150
[  192.099825][T13865]  x64_sys_call+0xfbd/0x2dc0
[  192.104436][T13865]  do_syscall_64+0xc9/0x1c0
[  192.108988][T13865]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  192.114933][T13865] 
[  192.117268][T13865] value changed: 0x04000021 -> 0x0e000021
[  192.123013][T13865] 
[  192.125345][T13865] Reported by Kernel Concurrency Sanitizer on:
[  192.131542][T13865] CPU: 0 UID: 0 PID: 13865 Comm: syz.9.3794 Not tainted 6.13.0-rc6-syzkaller-00051-geea6e4b4dfb8 #0
[  192.142331][T13865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  192.152446][T13865] ==================================================================
[  192.161910][   T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  192.462793][T10972] EXT4-fs unmount: 1 callbacks suppressed
[  192.462809][T10972] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  195.788071][ T5911] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  197.068306][ T5911] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  197.069191][ T5867] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  197.707590][ T5911] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  201.557453][ T5867] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration