last executing test programs:

4m34.567308504s ago: executing program 32 (id=64):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r4}, 0x10)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000005f80)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x20000001, 0x4, 0x2}, 0x3, r3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x88}}, 0x0)

4m33.608669479s ago: executing program 33 (id=85):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xffffffffffffff18)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10)
r2 = socket(0x1, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r3=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, r3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000000000000bfa30000000000000703000020feffff720af0fff8ffffff71a4f0ff0000000035040000500000001d400200000000006504040000ffffffb4030000000000001d440000000000007a0a00fe000000000f03000000000000b5000000000000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af2542ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b1100886475923906f88b53987ad0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d64364f56e24e6d2128c7e0ec82770c8204a1ddeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee7dfcb59b854e9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d3490dd97adab638cca595e487efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599ddd71063be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d96c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8c83c3d8cbfedc038395342846e1b207974e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfcd7ad0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f9212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0000cf70a91c76e8b14de02b884114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea52acb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae315c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbad8508f7550cad7ec93af7fb1b50c75ba1ee7baa19faf67256b56a355b6a686ba99d0a8950f0937f778af083e055f5138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516466df3e7d1daac43738612e4fee18a22da19fcdb4c2811e32f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96735600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15ecb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a003ebfbdc1f9be78537756ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a419aa095e203c1bafbb9b9a7c2bca311a28ee4952f2d325a56390578f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1e1979e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a508460f2d0455cf79a43746979f99f60037e84fb478199dc1020f4beb98b8074bf7df8b5e783637da7418fd3aa81cff202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035ab63de71a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a274000000000000000000000000000000000000000000000009dd14b38f2f4426d7cf5075047c31f6ce6adde305ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0d0274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1ecbf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cbf5d6b6898335792747588d49df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed4254332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d943622000000000000000000000000000000000000000000000000000000000000000000000000000000000000f112fc8a4942d7453cf29cbbef3a567ea0a2a8a0561dfb6cfe7f1812405e1a092b382adc0698c377b0a1f49afb6ba26f8e28cf68b0065857b36276931c318cb84f748a26c4d81a0322ce21e7d9c002006cf8ac6402e036cf9344a1cb1b8603276000144268a0aa584a92188f55318dde1d1b09319c00d0de3471ab4243ac0f49516a690c514ba6449f0a804fcac3f30bf4a933d32c889283aa092cca9aa349b624c5ed2b66fa0439f54f83c9ff8be083221609c8696433da46c91ac52e5b1d159daed1af0cda0ee05ae770a7ea467d5602b441e748b7f22496f8453fb6b7cc2dd3a8ce15fd76387fc02d4e2b7b4502a80000000000000000000000000000000000000000e046c0756c0955a81165e4212a1a58334fe51269f228ad32fba2bdae0172278d3bb48c370f6b59c0c7ba9b0aaae317d3f8104fd696bc76268923c396b017003ddcd205c05311dcae277e5b0000000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)

4m31.566655992s ago: executing program 34 (id=113):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x50, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r1}, 0x10)
r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x50)
r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x41045508, &(0x7f0000002600)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f6"})

4m24.93409755s ago: executing program 35 (id=225):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xb}, 0x8081, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8f, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x6}, 0x18)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, 0x0, 0x290)

4m16.094075043s ago: executing program 36 (id=458):
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000103c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r3, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)

4m14.067617606s ago: executing program 6 (id=494):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b80)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffc1e, 0x0, 0x0, 0x0, 0x0, 0xac, 0x8, 0x0, 0x0}}, 0x10)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond_slave_0\x00', 0x800})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080))

4m13.943813548s ago: executing program 6 (id=497):
r0 = io_uring_setup(0xaab, &(0x7f0000000340)={0x0, 0x40000001, 0x40, 0x2, 0x2f7})
r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x70)
r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000180)={'#! ', './file0'}, 0xb)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
write$UHID_INPUT(r1, &(0x7f0000001300)={0x8, {"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", 0x1000}}, 0x1006)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r3, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000003c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x40)
syz_clone(0x1004400, 0x0, 0x0, 0x0, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

4m13.560440474s ago: executing program 6 (id=503):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000015c0)='vm_unmapped_area\x00', r0}, 0x18)
r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r3}, 0x10)
io_setup(0x5, &(0x7f0000000600))

4m13.425758127s ago: executing program 6 (id=508):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0)

4m13.389649627s ago: executing program 6 (id=509):
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, 0x0}, 0x0)
r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x300, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10)
recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0)

4m13.115967202s ago: executing program 6 (id=514):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20)
socket$inet(0x2, 0x3, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r3}, 0x10)
r4 = syz_io_uring_setup(0x371d, &(0x7f0000000440)={0x0, 0x0, 0x400, 0xa, 0xffffff}, &(0x7f0000000380), &(0x7f0000000400))
io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0)

4m13.115624201s ago: executing program 37 (id=514):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20)
socket$inet(0x2, 0x3, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r3}, 0x10)
r4 = syz_io_uring_setup(0x371d, &(0x7f0000000440)={0x0, 0x0, 0x400, 0xa, 0xffffff}, &(0x7f0000000380), &(0x7f0000000400))
io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0)

3m57.713336532s ago: executing program 5 (id=848):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x6, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000600)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000140)={0x40, 0x1002}, 0x4)
close_range(r3, 0xffffffffffffffff, 0x0)

3m57.654218493s ago: executing program 5 (id=849):
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x9)
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0)
accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0x14, 0x80000)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'hsr0\x00'})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000005980)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x44}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

3m57.553471624s ago: executing program 5 (id=853):
prlimit64(0x0, 0xe, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10)
quotactl_fd$Q_QUOTAON(0xffffffffffffffff, 0xffffffff80000201, 0x0, 0x0)
fadvise64(0xffffffffffffffff, 0x100e2, 0x100ea, 0x4)

3m57.526670995s ago: executing program 5 (id=854):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000580)='mountinfo\x00')
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000380)={0x90000008})
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0)

3m57.292817138s ago: executing program 5 (id=866):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
close(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f00000002c0)=r0}, 0x20)
sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x118e2}], 0x1}, 0x0)
recvmsg$unix(r1, &(0x7f0000000480)={0x0, 0x44, &(0x7f0000000440)=[{&(0x7f00000006c0)=""/244, 0xf21}], 0x12}, 0x0)

3m56.864523625s ago: executing program 5 (id=858):
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x8, 0x4)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)

3m56.838178766s ago: executing program 38 (id=858):
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x8, 0x4)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)

3m52.022726564s ago: executing program 3 (id=940):
syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaf3aaaaaa4489a2bc242d080045"], 0x0)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000040)={0x0, 0x2000, 0x0, {0x0, 0xa}, {0x1}, @const={0x0, {0x0, 0x8, 0x4, 0x81}}})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0)

3m51.154372968s ago: executing program 3 (id=957):
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
futex(0x0, 0x3, 0x0, &(0x7f0000fd7ff0)={0x77359400}, 0x0, 0xfffffffd)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)

3m50.98440135s ago: executing program 3 (id=969):
bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x50)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x2, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6, 0x1400}}, 0x1c}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @private}})
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x70bd26, 0x0, {0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2900}}, 0x1c}}, 0x8c0)

3m50.960766791s ago: executing program 3 (id=960):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000580)='mountinfo\x00')
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000380)={0x90000008})
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0)

3m50.941893631s ago: executing program 3 (id=961):
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001440)={&(0x7f00000000c0)={0x14, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x48890)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r1 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x4e22, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r1, 0x28)
r2 = accept4(r1, 0x0, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x82, &(0x7f0000000000)=@assoc_value={0x0, 0x6}, &(0x7f0000000040)=0x8)

3m50.755711494s ago: executing program 3 (id=976):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=0x0, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1}, &(0x7f0000000040), &(0x7f0000000180)=r0}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0)

3m50.715416555s ago: executing program 39 (id=976):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=0x0, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1}, &(0x7f0000000040), &(0x7f0000000180)=r0}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0)

2m44.701948906s ago: executing program 4 (id=2421):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x4, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xc00}}}]}, 0x38}}, 0x0)
r4 = socket(0x10, 0x803, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newtfilter={0x44, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {}, {0x1, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x7, 0x6, 0x0, 0x9, 0x401, 0x1000, 0x8a0, 0xd5}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x800)

2m44.590677218s ago: executing program 4 (id=2425):
mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15)
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15)
r2 = dup(r1)
write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
stat(&(0x7f00000000c0)='./file0\x00', 0x0)

2m44.535629739s ago: executing program 4 (id=2428):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r2 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10)
r3 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
close(r2)

2m44.42937291s ago: executing program 4 (id=2432):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
unshare(0x22020400)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)

2m44.254078713s ago: executing program 4 (id=2448):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)

2m43.693850802s ago: executing program 4 (id=2445):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0}, 0x18)
unshare(0x42000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000001d40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x7, r1}, 0x38)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000048000000030a01010000000000000000010000000900030073797a3100000000080007006e6174000900010073797a310000000014000480080002407c40280f080001"], 0xb8}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)

2m43.661303203s ago: executing program 40 (id=2445):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0}, 0x18)
unshare(0x42000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000001d40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x7, r1}, 0x38)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000048000000030a01010000000000000000010000000900030073797a3100000000080007006e6174000900010073797a310000000014000480080002407c40280f080001"], 0xb8}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)

2m40.445803305s ago: executing program 9 (id=2512):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kfree\x00', r1, 0x0, 0x40000}, 0x18)
r2 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r3 = socket$inet_dccp(0x2, 0x6, 0x0)
listen(r2, 0x5)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10)
close_range(r2, 0xffffffffffffffff, 0x0)

2m39.584388789s ago: executing program 9 (id=2529):
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x6, 0x0, 0x1d)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x210000, &(0x7f00000001c0)={[{@jqfmt_vfsv1}, {}, {@nouid32}, {@noauto_da_alloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x5}}, {@orlov}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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")
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)='%ps    \x00'}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0)
open_by_handle_at(r2, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0)

2m39.487180961s ago: executing program 9 (id=2530):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00')
r1 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r1, 0x8)
r2 = accept4(r1, 0x0, 0x0, 0x0)
sendto$inet(r2, &(0x7f00000002c0), 0x20, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x0, 0x6, 0xffffffff}, 0x10)
sendto$inet6(r2, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x2}, 0x8)
close_range(r0, 0xffffffffffffffff, 0x0)

2m39.440131082s ago: executing program 9 (id=2531):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.effective_mems\x00', 0x275a, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1, 0x803, 0x0)
pipe(&(0x7f0000000100))
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0xfffffffc, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4803}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0)

2m39.310687083s ago: executing program 9 (id=2535):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000040)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
r0 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0, <r2=>0x0}, &(0x7f0000cab000)=0xc)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_clone(0x40200, 0x0, 0x49, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
perf_event_open(&(0x7f0000000200)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0xb00, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xc04, 0x1, 0x0, 0x0, 0x0, 0x1fffffff, 0xfffc, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lchown(&(0x7f00000000c0)='./file0/../file0\x00', r1, r2)

2m39.208345475s ago: executing program 9 (id=2540):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r2)
socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000180)={@empty, @empty, @val, {@arp={0x806, @generic={0x0, 0x0, 0x6, 0x0, 0x0, @link_local, "", @remote}}}}, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x14)

2m24.164252859s ago: executing program 41 (id=2540):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r2)
socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000180)={@empty, @empty, @val, {@arp={0x806, @generic={0x0, 0x0, 0x6, 0x0, 0x0, @link_local, "", @remote}}}}, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x14)

3.222318538s ago: executing program 7 (id=5485):
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil)
mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil)
munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000)
munmap(&(0x7f000060f000/0x4000)=nil, 0x4000)
madvise(&(0x7f0000492000/0x2000)=nil, 0x2000, 0x12)
munmap(&(0x7f0000694000/0x3000)=nil, 0x3000)
mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ee0000/0x3000)=nil)
munmap(&(0x7f0000e29000/0x1000)=nil, 0x1000)
mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil)
mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil)
mremap(&(0x7f0000ccc000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000b0e000/0x2000)=nil)

3.170065489s ago: executing program 7 (id=5487):
syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000000)='./file1\x00', 0x21000e, &(0x7f0000000380), 0xde, 0x52d, &(0x7f0000001500)="$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")
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x6, 0x4, 0x7, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
sendmsg$rds(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$kcm(0x29, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r4 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r4, &(0x7f0000000900)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r4, r3})
sendmsg$kcm(r2, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x1a002}], 0x1}, 0x0)

2.236601644s ago: executing program 7 (id=5503):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
syz_clone3(&(0x7f0000000300)={0x100001200, &(0x7f0000000040), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r2, &(0x7f0000000440), 0x10)
listen(r2, 0xf)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000200)='E', 0x1}], 0x1)
r4 = accept4$unix(r2, 0x0, 0x0, 0x0)
recvmsg(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000004c0)=""/60, 0x3c}], 0x1}, 0x4c2103a0)

2.022154047s ago: executing program 8 (id=5507):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4)
r3 = getpid()
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x70bd26, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4)

2.017822827s ago: executing program 7 (id=5509):
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x3, 0x7, @loopback}, 0x1c)
sendmmsg$inet6(r3, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)='4>', 0x2}], 0x1}}], 0x1, 0x10)

1.719604312s ago: executing program 8 (id=5514):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000180)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
clock_nanosleep(0xfffffff2, 0xca9a3b, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe)
r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14)
fcntl$setsig(r2, 0xa, 0x13)
fcntl$setlease(r2, 0x400, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280))
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
truncate(&(0x7f0000000040)='./file0\x00', 0x0)

1.626563564s ago: executing program 2 (id=5515):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket(0x1e, 0x4, 0x0)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10)
sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
r4 = dup3(r3, r2, 0x0)
recvmmsg$unix(r4, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001700)=""/4096, 0x1000}], 0x1, 0x0, 0x1800}}], 0x1, 0x0, 0x0)

1.507076765s ago: executing program 2 (id=5518):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000300), &(0x7f0000000280)}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r4)
getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x1, 0x0, 0x2000000, {0x0, 0x0, 0x0, r5, {0x2}, {0xfff3}, {0xffff}}}, 0x24}}, 0x880)

1.411995817s ago: executing program 2 (id=5520):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000040000"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48)
unshare(0x28020480)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6})
mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0)

1.079204012s ago: executing program 7 (id=5525):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0)
r1 = syz_clone(0x40200, 0x0, 0x49, 0x0, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f00000004c0)={'#! ', './file0'}, 0xb)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x9f, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffe, 0x0, 0x0, 0x0, 0xffff}, r1, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000200)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0xb00, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0xc04, 0x1, 0x0, 0x0, 0x0, 0x1fffffff, 0xfffc, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

1.078678122s ago: executing program 0 (id=5526):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_clone3(&(0x7f0000000300)={0x100001200, &(0x7f0000000040), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pselect6(0x40, &(0x7f0000000100)={0x2, 0x2000000, 0xfffffffffffffff8, 0x0, 0x1, 0x10, 0xffffffffffffffff}, 0x0, &(0x7f0000000240)={0x1f, 0xc, 0x715, 0x8000000000000000, 0x0, 0x80000000000002, 0x800, 0x20000}, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58"}, 0x28)
sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000240)="6e37cf", 0x3}, {0x0}], 0x2}, 0x0)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28)

786.909137ms ago: executing program 7 (id=5527):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x7, 0xfffffffffffffffc}, 0x103200, 0x1, 0x840000, 0x5, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, <r1=>0x0, 0x0, 0x0, 0x0, 0x3, 0x6, &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x29, 0x0, 0x0, 0x10, &(0x7f0000000300), 0x0, 0x0, 0x9d, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10)
bind$xdp(r0, &(0x7f0000000540)={0x2c, 0x6, r1, 0x25, r0}, 0x10)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH")
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0)
write(r3, &(0x7f0000004200)='t', 0x1)
sendfile(r3, r2, 0x0, 0x3ffff)

786.530137ms ago: executing program 8 (id=5528):
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @empty, 0xfffffffc}, 0x1c)
listen(r0, 0x20000005)
r1 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @empty}, 0x1c)
r2 = accept4(r0, 0x0, 0x0, 0x800)
getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000000080)={'icmp6\x00'}, &(0x7f00000000c0)=0x1e)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sendmmsg$inet6(r2, &(0x7f00000001c0)=[{{0x0, 0x7fee, 0x0}}], 0x500, 0x0)
close(r1)

786.223837ms ago: executing program 0 (id=5529):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
listen(r2, 0x101)
r3 = socket$inet_dccp(0x2, 0x6, 0x0)
setsockopt(r3, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1)
connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10)
sendto$inet(r3, &(0x7f0000000480)="8c", 0xffc3, 0x1, 0x0, 0x0)

771.341247ms ago: executing program 1 (id=5530):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
bind$tipc(r1, &(0x7f0000000040)=@name={0x1e, 0x2, 0x3, {{0x42, 0x2}, 0x3}}, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
r3 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r3, &(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x1}}, 0x10)
r4 = socket$tipc(0x1e, 0x4, 0x0)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x83f}, 0x10)
bind$tipc(r2, &(0x7f0000000300)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}}}, 0x10)
bind$tipc(r1, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x3, {{0x42, 0x4}, 0x3}}, 0x10)
close_range(r0, 0xffffffffffffffff, 0x0)

748.673168ms ago: executing program 8 (id=5531):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
keyctl$setperm(0x5, 0x0, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r1}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
fcntl$lock(r2, 0x26, &(0x7f0000000000))

725.656338ms ago: executing program 1 (id=5532):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000e, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r2, 0x0)
connect$unix(r1, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close_range(r1, r1, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r3, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r2, 0x802)

725.002628ms ago: executing program 0 (id=5542):
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r0 = openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$selinux_attr(r0, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x8000)
socket$qrtr(0x2a, 0x2, 0x0)
read$qrtrtun(r2, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18)
socket$nl_generic(0x10, 0x3, 0x10)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@nolazytime}, {@jqfmt_vfsold}, {@journal_path={'journal_path', 0x3d, './file0/../file0'}}, {@noquota}, {@nodioread_nolock}, {@journal_checksum}, {@data_err_abort}], [{@flag='lazytime'}]}, 0x3, 0x473, &(0x7f0000000640)="$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")

662.706569ms ago: executing program 8 (id=5533):
mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15)
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15)
r2 = dup(r1)
write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0xa8}, 0x18)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
stat(&(0x7f00000000c0)='./file0\x00', 0x0)

662.096439ms ago: executing program 0 (id=5534):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
creat(&(0x7f00000000c0)='./file0\x00', 0x198)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r2 = dup(r1)
write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3, 0x0, 0xfffffffff7ffffe9}, 0x18)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0))

633.926209ms ago: executing program 8 (id=5535):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb8af, @void, @value}, 0xa5)
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x248, &(0x7f0000000100), 0xfd, 0x49d, &(0x7f0000000940)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
pwrite64(r1, &(0x7f00000005c0), 0x0, 0x4fed0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000600)='kfree\x00', r0}, 0x18)
socket$kcm(0x10, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$tipc(0x1e, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=@newsa={0x154, 0x10, 0x633, 0x0, 0x0, {{@in6=@private0, @in=@broadcast, 0x0, 0x4000, 0x0, 0x8001, 0x0, 0x20}, {@in=@dev, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, {0x323}, {0x0, 0x6, 0x1}, {0x0, 0x8}, 0x70bd29, 0x0, 0xa, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x2, 0x4e21, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x1}}}]}, 0x154}}, 0x0)

631.084099ms ago: executing program 1 (id=5536):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r0, &(0x7f0000000040)="aa", 0x1, 0x0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
timer_create(0x3, 0x0, &(0x7f0000044000)=<r2=>0x0)
timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_gettime(r2, &(0x7f0000000080))

624.81072ms ago: executing program 0 (id=5537):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = inotify_init1(0x0)
inotify_add_watch(r0, &(0x7f0000000400)='.\x00', 0xa4000021)
read(r0, 0x0, 0x0)
close(r0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10)
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
sysfs$3(0x3)

524.063981ms ago: executing program 1 (id=5538):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8d, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
r3 = socket(0x40000000015, 0x5, 0x0)
bind$inet(r3, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10)
recvmmsg(r3, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x60010020, 0x0)
sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10)

477.789322ms ago: executing program 2 (id=5539):
openat$nvram(0xffffffffffffff9c, 0x0, 0x40, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0}, 0x18)
socket$can_raw(0x1d, 0x3, 0x1)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x18, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
r3 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$VT_DISALLOCATE(r3, 0x5608)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @last={{0x9}, @void}}]}, @NFT_MSG_NEWSETELEM={0x18, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa8}}, 0x0)

333.621234ms ago: executing program 2 (id=5540):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x800040, &(0x7f0000000340), 0x1, 0x597, &(0x7f0000000b80)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r1, &(0x7f0000000140)='Q', 0x1, 0x200980)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
sendfile(r2, r2, 0x0, 0xe0000000)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ftruncate(r1, 0xf09)
syz_emit_ethernet(0x42, &(0x7f0000000200)={@local, @random, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x3, 0xdf}, @timestamp={0x44, 0x8, 0x5, 0x3, 0x0, [0x0]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x474, &(0x7f00000004c0)="$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")

298.013855ms ago: executing program 1 (id=5541):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000600000000"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYRES32=r0], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
syz_io_uring_setup(0x2c0c, &(0x7f0000000400)={0x0, 0xfffffffe, 0x4002, 0x80000000}, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003f80)=ANY=[], 0x1, 0x2f4, &(0x7f0000000900)="$eJzs3M9PE1sUwPHTn7QlUBYv7+W95IUb3ehmAtW10hhIjE0kSI0/EpMBptp0bEmnwdQY0ZVb4x/hgrBkR6L8A2zc6caNOzYmLmRhrOn8oKVMKYVKEb6fhMxhzj3tvZ2SnNt02Lrz+nEhZ2k5vSLBmJKAiMi2yIgExRNwj0E7jkqzF3Jx8NvH/2/dvXcjnclMzig1lZ69lFJKDY++e/Is7g5bH5DNkQdbX1NfNv/e/Hfr5+yjvKXyliqWKkpXc6XPFX3ONNRC3ipoSk2bhm4ZKl+0jLKTLzn5nFlaXKwqvbgwlFgsG5al9GJVFYyqqpRUpVxVoYd6vqg0TVNDCUEn2ZWZGT19yOL5Hk8Gv0m5nNZDIhLfk8mu9GVCAACgr1r7/6CoXvb/q+c2KoO314bd/n896tf/X/7kPNau/j8mIr79v/f8vv2/3l3/v7cjOluO1P/jZBiN7jkVaIT1ZDmtJ9y/X9vL+6tjdkD/DwAAAAAAAAAAAAAAAAAAAADAn2C7VkvWarWkd/R+6rmYiDT/3iIkIlePf8bopXbXf6Dz9ccp0LhxLzwsYr5ayi5lnaM7YENETDFkTJLyw34/uOqxd+eRqhuR9+ayW7+8lA3ZmXRO8nb9uCQj0lpfq01dz0yOK8fu+ogkmutTkpS//OtTvvVRuXC+qV6TpHyYl5KYsmDPo1H/fFypazczLfVxexwAAAAAAKeBpnb47t81rV3eqd/ZX7d+PhBq7K/HfPfnYfkv3N+1AwAAAABwVljVpwXdNI3yPkFcOo9xgsgBxrQG4W4GdxF4Kzxolfddhh5P42CB9+S7UjH3ZM9flkAXL0ubICiHqRqtr0YddRXex0btxsj0xPFfQTv4583b7717wCtrsQ4rPXwQ2v8NEHG//gUAAADgFGk0/d6Zif5OCAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAM+g4/jtav9cIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnBS/AgAA//9p2gTn")
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
fdatasync(r2)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3)

219.650537ms ago: executing program 0 (id=5543):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0xfc, 0x1, 0x7, 0xa, 0x0, 0x5, 0x80, 0xd, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x4, @perf_config_ext={0x6, 0x2}, 0x8002, 0x0, 0x4, 0x8, 0x6, 0xe, 0x5351, 0x0, 0x4, 0x0, 0x1ba82b7d}, 0x0, 0xe, 0xffffffffffffffff, 0x2)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f00000003c0), &(0x7f0000000200)=""/166}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f00000002c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@noblock_validity}, {@user_xattr}, {@max_batch_time={'max_batch_time', 0x3d, 0x8cc}}, {@block_validity}, {@nolazytime}]}, 0x6, 0x5fc, &(0x7f0000000600)="$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")
syz_mount_image$msdos(&(0x7f00000003c0), &(0x7f0000000340)='.\x00', 0x126a4b5, &(0x7f0000001280)=ANY=[], 0x6, 0x0, &(0x7f0000000000))

108.104968ms ago: executing program 2 (id=5544):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10)
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0)
writev(r3, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1)

0s ago: executing program 1 (id=5545):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x25c, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x7}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r0}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x3200, 0x10001, 0x3, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x5}, 0x0, 0x1, 0xffffffffffffffff, 0x0)

kernel console output (not intermixed with test programs):

28): avc:  denied  { cpu } for  pid=15679 comm="syz.7.4529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  261.047288][T15686] loop0: detected capacity change from 0 to 2048
[  261.117169][T15686] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  261.138260][T15693] syzkaller0: entered allmulticast mode
[  261.156719][T15686] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  261.176246][T15693] syzkaller0: entered promiscuous mode
[  261.188081][T15693] syzkaller0 (unregistering): left promiscuous mode
[  261.194907][T15693] syzkaller0 (unregistering): left allmulticast mode
[  261.204934][ T3810] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  261.216075][T15686] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28
[  261.228359][T15686] EXT4-fs (loop0): This should not happen!! Data will be lost
[  261.228359][T15686] 
[  261.238216][T15686] EXT4-fs (loop0): Total free blocks count 0
[  261.244247][T15686] EXT4-fs (loop0): Free/Dirty block details
[  261.250317][T15686] EXT4-fs (loop0): free_blocks=2415919104
[  261.256129][T15686] EXT4-fs (loop0): dirty_blocks=16
[  261.261377][T15686] EXT4-fs (loop0): Block reservation details
[  261.267439][T15686] EXT4-fs (loop0): i_reserved_data_blocks=1
[  261.274609][   T29] audit: type=1400 audit(1744872941.000:7029): avc:  denied  { watch watch_reads } for  pid=15696 comm="syz.7.4536" path="/341" dev="tmpfs" ino=1803 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  261.310265][T15695] tipc: New replicast peer: 255.255.255.83
[  261.316235][T15695] tipc: Enabled bearer <udp:£>, priority 10
[  261.319479][ T4161] tipc: Node number set to 4141508744
[  261.406704][T15701] netlink: 'syz.7.4538': attribute type 10 has an invalid length.
[  261.416029][ T6138] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  261.495761][T15707] lo speed is unknown, defaulting to 1000
[  261.517550][T15710] netlink: 'syz.2.4543': attribute type 1 has an invalid length.
[  261.528488][T15712] veth0_to_batadv: entered promiscuous mode
[  261.534475][T15712] veth0_to_batadv: entered allmulticast mode
[  261.688527][   T29] audit: type=1400 audit(1744872941.384:7030): avc:  denied  { relabelfrom } for  pid=15727 comm="syz.1.4550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  261.752332][   T29] audit: type=1400 audit(1744872941.384:7031): avc:  denied  { relabelto } for  pid=15727 comm="syz.1.4550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  261.772651][T15732] loop0: detected capacity change from 0 to 512
[  261.772858][T15732] EXT4-fs: Ignoring removed mblk_io_submit option
[  261.774063][T15732] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  261.822565][T15732] EXT4-fs (loop0): 1 truncate cleaned up
[  261.838338][T15735] netlink: 'syz.1.4554': attribute type 10 has an invalid length.
[  261.840505][T15732] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  261.880989][T15737] syzkaller0: entered allmulticast mode
[  261.889291][T15732] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  261.897952][T15737] syzkaller0: entered promiscuous mode
[  261.918494][T15737] syzkaller0 (unregistering): left promiscuous mode
[  261.925269][T15737] syzkaller0 (unregistering): left allmulticast mode
[  261.994062][T15739] tipc: New replicast peer: 255.255.255.83
[  261.999964][T15739] tipc: Enabled bearer <udp:£>, priority 10
[  262.148149][T15754] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4562'.
[  262.202704][   T29] audit: type=1400 audit(1744872941.842:7032): avc:  denied  { read } for  pid=15745 comm="syz.7.4558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  262.246562][T15763] loop8: detected capacity change from 0 to 1024
[  262.253870][T15763] EXT4-fs: Ignoring removed nobh option
[  262.275064][T15763] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  262.275102][T15771] loop0: detected capacity change from 0 to 512
[  262.275771][T15771] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  262.310790][T15763] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4113: comm syz.8.4565: Allocating blocks 385-513 which overlap fs metadata
[  262.320269][T15771] EXT4-fs (loop0): 1 truncate cleaned up
[  262.332778][T15771] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  262.347645][T15763] EXT4-fs (loop8): pa ffff88810616c620: logic 16, phys. 129, len 24
[  262.355732][T15763] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8
[  262.370807][T15763] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28
[  262.379743][T15771] bridge0: port 2(batadv0) entered disabled state
[  262.383944][T15763] EXT4-fs (loop8): This should not happen!! Data will be lost
[  262.383944][T15763] 
[  262.399516][T15763] EXT4-fs (loop8): Total free blocks count 0
[  262.405678][T15763] EXT4-fs (loop8): Free/Dirty block details
[  262.412381][T15763] EXT4-fs (loop8): free_blocks=128
[  262.417656][T15763] EXT4-fs (loop8): dirty_blocks=0
[  262.422784][T15763] EXT4-fs (loop8): Block reservation details
[  262.428814][T15763] EXT4-fs (loop8): i_reserved_data_blocks=0
[  262.445627][ T6138] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  262.536796][T15781] tipc: New replicast peer: 255.255.255.83
[  262.542947][T15781] tipc: Enabled bearer <udp:£>, priority 10
[  262.580607][T15786] veth1_to_bond: entered promiscuous mode
[  262.600731][ T9969] batman_adv: batadv0: IGMP Querier appeared
[  262.607129][ T9969] batman_adv: batadv0: MLD Querier appeared
[  262.640501][T15782] veth1_to_bond: left promiscuous mode
[  262.794533][T15779] lo speed is unknown, defaulting to 1000
[  262.831719][T15803] lo speed is unknown, defaulting to 1000
[  262.986164][T15809] loop8: detected capacity change from 0 to 128
[  262.987246][    C0] net_ratelimit: 20 callbacks suppressed
[  262.987263][    C0] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:0c
[  263.013236][T15809] FAT-fs (loop8): Invalid FSINFO signature: 0x41610452, 0x61417272 (sector = 1)
[  263.190293][ T6105] tipc: Node number set to 4083968415
[  263.213078][T15820] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4586'.
[  263.226535][T15820] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  263.235042][T15820] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  263.235130][T15821] loop8: detected capacity change from 0 to 1024
[  263.243244][T15820] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  263.258050][T15820] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  263.265581][T15821] EXT4-fs: Ignoring removed oldalloc option
[  263.272755][T15821] EXT4-fs (loop8): stripe (3) is not aligned with cluster size (16), stripe is disabled
[  263.275927][T15820] vxlan0: entered promiscuous mode
[  263.313014][T15821] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  263.463099][ T4225] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  263.692098][T15836] xt_hashlimit: max too large, truncated to 1048576
[  264.108539][T15848] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4596'.
[  264.280226][ T6105] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  264.295029][ T6105] hid-generic 0000:0000:0000.000B: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  264.389518][T15869] loop0: detected capacity change from 0 to 1024
[  264.396745][T15869] EXT4-fs: Ignoring removed oldalloc option
[  264.406955][T15869] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled
[  264.459180][T15869] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  264.551260][T15863] lo speed is unknown, defaulting to 1000
[  264.614907][T10005] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  264.632923][ T6138] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  264.683583][T15891] xt_hashlimit: max too large, truncated to 1048576
[  264.691211][T15893] dns_resolver: Unsupported server list version (0)
[  264.699409][T15891] Cannot find set identified by id 0 to match
[  265.023889][T15902] syzkaller0: entered allmulticast mode
[  265.031877][T15902] syzkaller0: entered promiscuous mode
[  265.041193][T15902] syzkaller0 (unregistering): left promiscuous mode
[  265.048016][T15902] syzkaller0 (unregistering): left allmulticast mode
[  265.299769][ T9959] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  265.657641][T15925] lo speed is unknown, defaulting to 1000
[  265.699224][T15934] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4629'.
[  265.728744][T15936] tipc: Bearer <udp:syz2>: already 2 bearers with priority 10
[  265.736488][T15936] tipc: Bearer <udp:syz2>: trying with adjusted priority
[  265.744112][T15936] tipc: New replicast peer: 255.255.255.255
[  265.750599][T15936] tipc: Enabled bearer <udp:syz2>, priority 9
[  265.884852][T15944] netlink: 'syz.7.4643': attribute type 7 has an invalid length.
[  265.892716][T15944] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4643'.
[  265.940403][   T29] kauditd_printk_skb: 26 callbacks suppressed
[  265.940418][   T29] audit: type=1400 audit(1744872945.369:7059): avc:  denied  { write } for  pid=15943 comm="syz.7.4643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  265.943569][T15941] lo speed is unknown, defaulting to 1000
[  265.994896][T15942] loop1: detected capacity change from 0 to 8192
[  266.329768][T15960] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4640'.
[  266.382967][T15960] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4640'.
[  266.703494][T15962] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4642'.
[  266.799284][T15973] netlink: 'syz.8.4647': attribute type 7 has an invalid length.
[  266.807878][T15973] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4647'.
[  266.865044][   T29] audit: type=1400 audit(1744872946.229:7060): avc:  denied  { name_bind } for  pid=15979 comm="syz.7.4660" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  266.887828][   T29] audit: type=1400 audit(1744872946.229:7061): avc:  denied  { node_bind } for  pid=15979 comm="syz.7.4660" saddr=fe80::aa src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[  266.904172][T15968] lo speed is unknown, defaulting to 1000
[  267.010529][T15991] loop8: detected capacity change from 0 to 128
[  267.017134][T15991] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[  267.114317][T16000] serio: Serial port ttyS3
[  267.130354][   T29] audit: type=1400 audit(1744872946.295:7062): avc:  denied  { read } for  pid=15981 comm="syz.0.4649" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  267.155075][   T29] audit: type=1400 audit(1744872946.295:7063): avc:  denied  { open } for  pid=15981 comm="syz.0.4649" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  267.179959][   T29] audit: type=1400 audit(1744872946.295:7064): avc:  denied  { ioctl } for  pid=15981 comm="syz.0.4649" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  267.185368][T16004] pim6reg1: entered promiscuous mode
[  267.205781][   T29] audit: type=1400 audit(1744872946.332:7065): avc:  denied  { tracepoint } for  pid=15986 comm="syz.7.4650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  267.211068][T16004] pim6reg1: entered allmulticast mode
[  267.237249][   T29] audit: type=1400 audit(1744872946.332:7066): avc:  denied  { read } for  pid=15986 comm="syz.7.4650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  267.257749][   T29] audit: type=1400 audit(1744872946.398:7067): avc:  denied  { execute } for  pid=15993 comm="syz.7.4655" path="/370/cpu.stat" dev="tmpfs" ino=1959 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  267.342390][T16013] netlink: 'syz.2.4664': attribute type 7 has an invalid length.
[  267.350381][T16013] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4664'.
[  267.381355][ T3810] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  267.417482][   T29] audit: type=1326 audit(1744872946.641:7068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16006 comm="syz.7.4661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67b327e169 code=0x7ffc0000
[  267.448434][T16016] lo speed is unknown, defaulting to 1000
[  267.507347][T16022] ALSA: seq fatal error: cannot create timer (-22)
[  267.548889][T16028] netlink: 'syz.1.4669': attribute type 13 has an invalid length.
[  267.590144][T16028] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  267.599415][T16028] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  267.607988][T16028] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  267.616667][T16028] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  267.654057][T16028] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  267.662616][T16028] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  267.671776][T16028] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  267.680384][T16028] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  267.721970][T16042] SELinux:  Context system_u:object_r:net_conf_t:s0 is not valid (left unmapped).
[  267.757754][T16038] syzkaller0: entered promiscuous mode
[  267.763313][T16038] syzkaller0: entered allmulticast mode
[  267.771334][ T3810] syzkaller0: tun_net_xmit 48
[  267.793781][T16038] syzkaller0: create flow: hash 1709312820 index 1
[  267.802623][T16038] syzkaller0: delete flow: hash 1709312820 index 1
[  267.906459][T16050] lo speed is unknown, defaulting to 1000
[  268.105210][T16060] loop8: detected capacity change from 0 to 128
[  268.129883][T16060] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  268.157243][T16055] syz.2.4678 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[  268.167318][T16055] CPU: 1 UID: 0 PID: 16055 Comm: syz.2.4678 Not tainted 6.15.0-rc2-syzkaller-00087-gcfb2e2c57aef #0 PREEMPT(voluntary) 
[  268.167352][T16055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  268.167405][T16055] Call Trace:
[  268.167412][T16055]  <TASK>
[  268.167420][T16055]  dump_stack_lvl+0xf6/0x150
[  268.167444][T16055]  dump_stack+0x15/0x1a
[  268.167462][T16055]  dump_header+0x83/0x2d0
[  268.167500][T16055]  oom_kill_process+0x341/0x4c0
[  268.167538][T16055]  out_of_memory+0x9d1/0xc20
[  268.167588][T16055]  mem_cgroup_out_of_memory+0x13f/0x190
[  268.167634][T16055]  try_charge_memcg+0x5f1/0x890
[  268.167673][T16055]  charge_memcg+0x50/0xc0
[  268.167777][T16055]  __mem_cgroup_charge+0x29/0xb0
[  268.167801][T16055]  handle_mm_fault+0xdfb/0x2e80
[  268.167874][T16055]  ? __rcu_read_lock+0x36/0x50
[  268.167906][T16055]  ? __pte_offset_map_lock+0x1d3/0x290
[  268.167942][T16055]  __get_user_pages+0xf4e/0x2340
[  268.168009][T16055]  __gup_longterm_locked+0x2ec/0xfb0
[  268.168079][T16055]  gup_fast_fallback+0x1561/0x1f70
[  268.168112][T16055]  pin_user_pages_fast+0x64/0xa0
[  268.168136][T16055]  io_pin_pages+0xb4/0x170
[  268.168157][T16055]  io_sqe_buffer_register+0x18b/0x12a0
[  268.168255][T16055]  ? __memcg_slab_post_alloc_hook+0x473/0x5a0
[  268.168351][T16055]  ? __kvmalloc_node_noprof+0x44a/0x520
[  268.168374][T16055]  ? io_sqe_buffers_register+0xcf/0x550
[  268.168438][T16055]  io_sqe_buffers_register+0x2bd/0x550
[  268.168533][T16055]  __se_sys_io_uring_register+0xb04/0x1f50
[  268.168555][T16055]  ? futex_wait+0x190/0x1d0
[  268.168580][T16055]  ? do_futex+0x279/0x370
[  268.168641][T16055]  ? __se_sys_futex+0x23f/0x370
[  268.168673][T16055]  ? xfd_validate_state+0x46/0xf0
[  268.168738][T16055]  ? restore_fpregs_from_fpstate+0x64/0x120
[  268.168779][T16055]  __x64_sys_io_uring_register+0x55/0x70
[  268.168805][T16055]  x64_sys_call+0xb9d/0x2e10
[  268.168831][T16055]  do_syscall_64+0xc9/0x1c0
[  268.168871][T16055]  ? clear_bhb_loop+0x25/0x80
[  268.168970][T16055]  ? clear_bhb_loop+0x25/0x80
[  268.168996][T16055]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  268.169025][T16055] RIP: 0033:0x7f6cf9d8e169
[  268.169041][T16055] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  268.169105][T16055] RSP: 002b:00007f6cf83d6038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab
[  268.169124][T16055] RAX: ffffffffffffffda RBX: 00007f6cf9fb6080 RCX: 00007f6cf9d8e169
[  268.169137][T16055] RDX: 00002000000002c0 RSI: 0000000000000000 RDI: 0000000000000004
[  268.169149][T16055] RBP: 00007f6cf9e10a68 R08: 0000000000000000 R09: 0000000000000000
[  268.169160][T16055] R10: 100000000000011a R11: 0000000000000246 R12: 0000000000000000
[  268.169172][T16055] R13: 0000000000000000 R14: 00007f6cf9fb6080 R15: 00007fff731e64e8
[  268.169191][T16055]  </TASK>
[  268.169348][T16055] memory: usage 307200kB, limit 307200kB, failcnt 1366
[  268.206883][T16060] ext4 filesystem being mounted at /943/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  268.207985][T16055] memory+swap: usage 361072kB, limit 9007199254740988kB, failcnt 0
[  268.478507][T16055] kmem: usage 207104kB, limit 9007199254740988kB, failcnt 0
[  268.485924][T16055] Memory cgroup stats for /syz2:
[  268.487842][T16055] cache 11812864
[  268.496493][T16055] rss 401408
[  268.499744][T16055] shmem 11812864
[  268.503498][T16055] mapped_file 0
[  268.507797][T16055] dirty 0
[  268.510762][T16055] writeback 0
[  268.514087][T16055] workingset_refault_anon 24
[  268.518761][T16055] workingset_refault_file 3937
[  268.523546][T16055] swap 55164928
[  268.527052][T16055] swapcached 2228224
[  268.531032][T16055] pgpgin 408472
[  268.534555][T16055] pgpgout 404939
[  268.538846][T16055] pgfault 315861
[  268.542425][T16055] pgmajfault 26
[  268.545898][T16055] inactive_anon 14278656
[  268.550371][T16055] active_anon 188416
[  268.554479][T16055] inactive_file 0
[  268.558162][T16055] active_file 4096
[  268.561883][T16055] unevictable 0
[  268.565389][T16055] hierarchical_memory_limit 314572800
[  268.571420][T16055] hierarchical_memsw_limit 9223372036854771712
[  268.577580][T16055] total_cache 11812864
[  268.581803][T16055] total_rss 401408
[  268.585543][T16055] total_shmem 11812864
[  268.589638][T16055] total_mapped_file 0
[  268.593643][T16055] total_dirty 0
[  268.597118][T16055] total_writeback 0
[  268.601650][T16055] total_workingset_refault_anon 24
[  268.606816][T16055] total_workingset_refault_file 3937
[  268.612265][T16055] total_swap 55164928
[  268.616353][T16055] total_swapcached 2228224
[  268.621206][T16055] total_pgpgin 408472
[  268.625236][T16055] total_pgpgout 404939
[  268.629403][T16055] total_pgfault 315861
[  268.634163][T16055] total_pgmajfault 26
[  268.638216][T16055] total_inactive_anon 14278656
[  268.643025][T16055] total_active_anon 188416
[  268.647557][T16055] total_inactive_file 0
[  268.651741][T16055] total_active_file 4096
[  268.656109][T16055] total_unevictable 0
[  268.660106][T16055] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.4678,pid=16049,uid=0
[  268.675631][T16055] Memory cgroup out of memory: Killed process 16049 (syz.2.4678) total-vm:95796kB, anon-rss:1192kB, file-rss:22180kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000
[  268.699142][ T4225] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  268.798216][T16080] dns_resolver: Unsupported server list version (0)
[  269.052215][T16090] syzkaller0: entered promiscuous mode
[  269.057926][T16090] syzkaller0: entered allmulticast mode
[  269.263393][T16074] lo speed is unknown, defaulting to 1000
[  269.336485][T16107] SELinux:  Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped).
[  269.353538][T16100] lo speed is unknown, defaulting to 1000
[  269.433809][T16103] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  269.442317][T16103] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  269.451328][T16103] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  269.459662][T16103] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  269.474517][T16105] lo speed is unknown, defaulting to 1000
[  269.696647][T16111] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  269.718486][T16114] loop0: detected capacity change from 0 to 128
[  269.727590][T16114] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[  269.782666][T16111] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  269.853544][T16111] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  269.871118][T16132] syzkaller0: entered allmulticast mode
[  269.873088][T16134] netlink: 'syz.2.4710': attribute type 4 has an invalid length.
[  269.885727][T16134] netlink: 'syz.2.4710': attribute type 27 has an invalid length.
[  269.908610][T16132] syzkaller0: entered promiscuous mode
[  269.916104][T16111] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  269.938310][T16132] syzkaller0 (unregistering): left promiscuous mode
[  269.945039][T16132] syzkaller0 (unregistering): left allmulticast mode
[  270.022681][T16130] lo speed is unknown, defaulting to 1000
[  270.026018][T16141] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4713'.
[  270.038335][T16141] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4713'.
[  270.068813][T16111] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  270.110090][ T3810] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  270.170631][T16111] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  270.211545][T16111] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  270.224826][T16151] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4717'.
[  270.238585][T16111] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  270.341294][T16163] pim6reg1: entered promiscuous mode
[  270.346954][T16163] pim6reg1: entered allmulticast mode
[  270.467816][T16174] lo speed is unknown, defaulting to 1000
[  270.531939][T16177] lo speed is unknown, defaulting to 1000
[  270.632760][T16189] loop0: detected capacity change from 0 to 128
[  270.647921][T16189] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  270.669963][T16189] ext4 filesystem being mounted at /778/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  270.701525][ T6138] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  270.775741][T16196] lo speed is unknown, defaulting to 1000
[  271.195973][T16217] lo speed is unknown, defaulting to 1000
[  271.301945][   T29] kauditd_printk_skb: 381 callbacks suppressed
[  271.301964][   T29] audit: type=1326 audit(1744872950.373:7450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16178 comm="syz.8.4729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1098485127 code=0x7ffc0000
[  271.347272][   T29] audit: type=1326 audit(1744872950.373:7451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16178 comm="syz.8.4729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f109842a359 code=0x7ffc0000
[  271.370917][   T29] audit: type=1326 audit(1744872950.373:7452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16178 comm="syz.8.4729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f109848e169 code=0x7ffc0000
[  271.394795][   T29] audit: type=1326 audit(1744872950.392:7453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16178 comm="syz.8.4729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1098485127 code=0x7ffc0000
[  271.418310][   T29] audit: type=1326 audit(1744872950.392:7454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16178 comm="syz.8.4729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f109842a359 code=0x7ffc0000
[  271.441953][   T29] audit: type=1326 audit(1744872950.392:7455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16178 comm="syz.8.4729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f109848e169 code=0x7ffc0000
[  271.465780][   T29] audit: type=1326 audit(1744872950.392:7456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16178 comm="syz.8.4729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1098485127 code=0x7ffc0000
[  271.489731][   T29] audit: type=1326 audit(1744872950.392:7457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16178 comm="syz.8.4729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f109842a359 code=0x7ffc0000
[  271.490357][ T9969] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  271.513314][   T29] audit: type=1326 audit(1744872950.392:7458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16178 comm="syz.8.4729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f109848e169 code=0x7ffc0000
[  271.547740][   T29] audit: type=1326 audit(1744872950.411:7459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16178 comm="syz.8.4729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1098485127 code=0x7ffc0000
[  271.666350][T16223] lo speed is unknown, defaulting to 1000
[  271.726007][T16236] loop1: detected capacity change from 0 to 128
[  272.138414][    C0] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:0c
[  272.287054][T16250] loop1: detected capacity change from 0 to 512
[  272.317616][T16250] EXT4-fs error (device loop1): ext4_iget_extra_inode:4693: inode #15: comm syz.1.4755: corrupted in-inode xattr: invalid ea_ino
[  272.790020][T16253] veth0_to_batadv: entered promiscuous mode
[  272.796854][T16253] veth0_to_batadv: entered allmulticast mode
[  272.850472][T16250] EXT4-fs error (device loop1): ext4_orphan_get:1395: comm syz.1.4755: couldn't read orphan inode 15 (err -117)
[  272.864063][T16250] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  273.022807][T16257] loop0: detected capacity change from 0 to 8192
[  273.023552][ T9936] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  273.080258][T16269] program syz.1.4763 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  273.090077][T16257]  loop0: p1 p3 p4
[  273.094049][T16257] loop0: p1 size 3506438656 extends beyond EOD, truncated
[  273.104194][T16257] loop0: p3 start 218103808 is beyond EOD, truncated
[  273.111014][T16257] loop0: p4 size 50331648 extends beyond EOD, truncated
[  273.178542][T16257] ALSA: seq fatal error: cannot create timer (-22)
[  273.201238][T16273] syzkaller0: entered promiscuous mode
[  273.206793][T16273] syzkaller0: entered allmulticast mode
[  273.217390][T16276] __nla_validate_parse: 2 callbacks suppressed
[  273.217411][T16276] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4768'.
[  273.218201][T16257] netlink: 'syz.0.4758': attribute type 4 has an invalid length.
[  273.240644][T16257] netlink: 181456 bytes leftover after parsing attributes in process `syz.0.4758'.
[  273.301145][T16284] netlink: 100 bytes leftover after parsing attributes in process `syz.2.4781'.
[  273.321548][T16286] loop8: detected capacity change from 0 to 1024
[  273.361749][T16286] EXT4-fs: Ignoring removed nobh option
[  273.380859][T16286] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  273.427984][T16286] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4113: comm syz.8.4771: Allocating blocks 385-513 which overlap fs metadata
[  273.490085][T16286] EXT4-fs (loop8): pa ffff8881061aeee0: logic 16, phys. 129, len 24
[  273.498222][T16286] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8
[  273.520904][ T3810] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  273.549122][T16297] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4773'.
[  273.578067][ T4225] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  273.784660][T16304] lo speed is unknown, defaulting to 1000
[  273.815005][T16305] lo speed is unknown, defaulting to 1000
[  273.943536][T16320] loop8: detected capacity change from 0 to 128
[  273.989793][T16318] hub 9-0:1.0: USB hub found
[  273.995498][T16318] hub 9-0:1.0: 8 ports detected
[  274.059292][T16325] bridge: RTM_NEWNEIGH with invalid ether address
[  274.080226][T16323] loop8: detected capacity change from 0 to 8192
[  274.175291][T16334] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=16334 comm=syz.2.4788
[  274.224856][T16334] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4788'.
[  274.266024][T16338] netlink: 34 bytes leftover after parsing attributes in process `syz.0.4791'.
[  274.791816][T16363] ref_ctr_offset mismatch. inode: 0x129d offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8
[  274.877772][T16372] SELinux: security_context_str_to_sid () failed with errno=-22
[  275.053347][T16380] lo speed is unknown, defaulting to 1000
[  275.293358][T16401] loop1: detected capacity change from 0 to 512
[  275.294202][T16400] loop8: detected capacity change from 0 to 164
[  275.321755][T16401] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  275.353261][T16401] ext4 filesystem being mounted at /443/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  275.364385][T16400] 9pnet: p9_errstr2errno: server reported unknown error ÿ
[  275.445501][ T9936] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  275.527531][T16418] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4820'.
[  275.537228][T16418] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4820'.
[  275.654060][T16419] loop8: detected capacity change from 0 to 8192
[  275.743400][T16425] loop0: detected capacity change from 0 to 512
[  276.061316][T16453] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4837'.
[  276.070502][T16453] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4837'.
[  276.110072][T16455] lo speed is unknown, defaulting to 1000
[  276.138933][T16462] bridge: RTM_NEWNEIGH with invalid ether address
[  276.237011][T16466] loop1: detected capacity change from 0 to 256
[  276.244845][   T58] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  276.273031][T16466] syz.1.4841: attempt to access beyond end of device
[  276.273031][T16466] loop1: rw=0, sector=256, nr_sectors = 20 limit=256
[  276.335551][T16472] xt_hashlimit: max too large, truncated to 1048576
[  276.342491][T16472] xt_hashlimit: overflow, rate too high: 0
[  276.396067][T16477] loop0: detected capacity change from 0 to 2048
[  276.459597][T16477] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  276.475511][T16477] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  276.491130][T16477] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  276.503604][T16477] EXT4-fs (loop0): This should not happen!! Data will be lost
[  276.503604][T16477] 
[  276.513379][T16477] EXT4-fs (loop0): Total free blocks count 0
[  276.519500][T16477] EXT4-fs (loop0): Free/Dirty block details
[  276.525464][T16477] EXT4-fs (loop0): free_blocks=2415919504
[  276.531432][T16477] EXT4-fs (loop0): dirty_blocks=16
[  276.536790][T16477] EXT4-fs (loop0): Block reservation details
[  276.542934][T16477] EXT4-fs (loop0): i_reserved_data_blocks=1
[  276.567280][ T6138] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  276.612656][T16490] vlan0: entered promiscuous mode
[  276.617877][T16490] bridge0: entered promiscuous mode
[  276.623271][T16490] vlan0: entered allmulticast mode
[  276.628755][T16490] bridge0: entered allmulticast mode
[  276.644107][T16490] batman_adv: batadv0: Interface deactivated: dummy0
[  276.651130][T16490] batman_adv: batadv0: Removing interface: dummy0
[  276.662242][T16490] bridge0: port 1(batadv0) entered disabled state
[  276.676340][T16490] bond3: (slave gretap1): Releasing active interface
[  276.683206][T16490] bond3: (slave gretap1): the permanent HWaddr of slave - 06:78:6a:87:2c:8f - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  276.708249][T16490] bond3: (slave bridge3): Releasing active interface
[  276.884514][   T29] kauditd_printk_skb: 153 callbacks suppressed
[  276.884529][   T29] audit: type=1326 audit(1744872955.593:7613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16506 comm="syz.0.4855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c4eb4e169 code=0x7ffc0000
[  276.926254][   T29] audit: type=1326 audit(1744872955.640:7614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16506 comm="syz.0.4855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c4eb4e169 code=0x7ffc0000
[  276.950953][   T29] audit: type=1326 audit(1744872955.640:7615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16506 comm="syz.0.4855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f0c4eb4e169 code=0x7ffc0000
[  276.975288][   T29] audit: type=1326 audit(1744872955.640:7616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16506 comm="syz.0.4855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c4eb4e169 code=0x7ffc0000
[  276.999862][   T29] audit: type=1326 audit(1744872955.640:7617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16506 comm="syz.0.4855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c4eb4e169 code=0x7ffc0000
[  277.025023][   T29] audit: type=1326 audit(1744872955.640:7618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16506 comm="syz.0.4855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f0c4eb4e169 code=0x7ffc0000
[  277.067803][   T29] audit: type=1326 audit(1744872955.770:7619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16506 comm="syz.0.4855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0c4eb45127 code=0x7ffc0000
[  277.092043][   T29] audit: type=1326 audit(1744872955.770:7620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16506 comm="syz.0.4855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0c4eaea359 code=0x7ffc0000
[  277.115820][   T29] audit: type=1326 audit(1744872955.770:7621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16506 comm="syz.0.4855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f0c4eb4e169 code=0x7ffc0000
[  277.140153][   T29] audit: type=1326 audit(1744872955.780:7622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16506 comm="syz.0.4855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0c4eb45127 code=0x7ffc0000
[  277.597694][T16520] loop1: detected capacity change from 0 to 128
[  277.612619][   T58] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  277.640013][T16524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  277.640185][T16522] loop8: detected capacity change from 0 to 1024
[  277.652815][T16524] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  277.664829][T16524] netlink: 'syz.1.4860': attribute type 27 has an invalid length.
[  277.668138][T16522] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  277.675416][T16524] team0: left promiscuous mode
[  277.690538][T16524] team_slave_0: left promiscuous mode
[  277.695983][T16524] team_slave_1: left promiscuous mode
[  277.702660][T16524] geneve2: left promiscuous mode
[  277.707612][T16524] geneve2: left allmulticast mode
[  277.713254][T16524] vxlan0: left promiscuous mode
[  277.732128][ T4225] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  277.742722][T16524] 8021q: adding VLAN 0 to HW filter on device 

[  277.751006][T16524] 8021q: adding VLAN 0 to HW filter on device team0
[  277.761476][T16524] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  277.777447][ T6105] lo speed is unknown, defaulting to 1000
[  277.783414][ T6105] syz0: Port: 1 Link ACTIVE
[  277.788173][ T6106] syz1: Port: 1 Link ACTIVE
[  277.826728][ T4168] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  277.863391][T16529] hub 9-0:1.0: USB hub found
[  277.874341][T16529] hub 9-0:1.0: 8 ports detected
[  277.879924][   T58] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  277.993161][T16536] lo speed is unknown, defaulting to 1000
[  278.449276][T16554] hub 2-0:1.0: USB hub found
[  278.476370][T16554] hub 2-0:1.0: 8 ports detected
[  278.779776][ T4168] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  278.812133][T16558] bridge0: port 1(veth0_to_bridge) entered blocking state
[  278.819427][T16558] bridge0: port 1(veth0_to_bridge) entered disabled state
[  278.878857][T16558] veth0_to_bridge: entered allmulticast mode
[  278.912652][T16558] veth0_to_bridge: entered promiscuous mode
[  278.981328][T10005] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  278.989263][T10005] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  279.558790][T16576] loop8: detected capacity change from 0 to 512
[  279.647411][T16579] loop8: detected capacity change from 0 to 128
[  279.670356][T16579] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem
[  279.679323][   T58] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  279.686165][ T4168] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  279.702801][T16579] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  279.745334][T16579] ext2 filesystem being mounted at /976/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  280.286118][T16591] loop1: detected capacity change from 0 to 2048
[  280.333811][T16591]  loop1: p1 < > p4
[  280.340011][T16591] loop1: p4 size 8388608 extends beyond EOD, truncated
[  280.556151][T16593] lo speed is unknown, defaulting to 1000
[  280.567817][ T4225] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  280.711430][T16609] __nla_validate_parse: 1 callbacks suppressed
[  280.711523][T16609] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4889'.
[  281.018369][T16621] loop8: detected capacity change from 0 to 512
[  281.046894][T16618] loop0: detected capacity change from 0 to 1024
[  281.080514][T16618] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  281.080577][T16621] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  281.090348][T16618] EXT4-fs (loop0): group descriptors corrupted!
[  281.110149][T16621] ext4 filesystem being mounted at /979/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  281.219016][ T4225] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  281.300324][T16639] netlink: 'syz.0.4905': attribute type 10 has an invalid length.
[  281.308257][T16639] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4905'.
[  281.326381][T16640] loop1: detected capacity change from 0 to 1024
[  281.343780][T16640] EXT4-fs: Ignoring removed nobh option
[  281.349278][T16642] SELinux:  Context : is not valid (left unmapped).
[  281.349448][T16640] EXT4-fs: Ignoring removed bh option
[  281.410164][T16640] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  281.459115][T16640] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.4903: Allocating blocks 497-513 which overlap fs metadata
[  281.882909][T16676] loop0: detected capacity change from 0 to 512
[  281.890965][T16676] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  281.899928][T16676] EXT4-fs (loop0): orphan cleanup on readonly fs
[  281.907280][T16676] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.4918: invalid indirect mapped block 256 (level 2)
[  281.921603][T16676] EXT4-fs (loop0): 2 truncates cleaned up
[  281.927866][T16676] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  282.188704][ T6138] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  282.242866][ T9936] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  282.264450][   T29] kauditd_printk_skb: 436 callbacks suppressed
[  282.264467][   T29] audit: type=1400 audit(1744872960.635:8059): avc:  denied  { listen } for  pid=16685 comm="syz.0.4920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  282.295907][   T29] audit: type=1400 audit(1744872960.663:8060): avc:  denied  { accept } for  pid=16685 comm="syz.0.4920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  282.396393][   T29] audit: type=1326 audit(1744872960.756:8061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16687 comm="syz.1.4921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f815a0de169 code=0x7ffc0000
[  282.427377][   T58] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  282.643184][   T29] audit: type=1326 audit(1744872960.775:8062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16687 comm="syz.1.4921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f815a0de169 code=0x7ffc0000
[  282.667742][   T29] audit: type=1326 audit(1744872960.775:8063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16687 comm="syz.1.4921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f815a0de169 code=0x7ffc0000
[  282.692041][   T29] audit: type=1326 audit(1744872960.775:8064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16687 comm="syz.1.4921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f815a0de1a3 code=0x7ffc0000
[  282.715549][   T29] audit: type=1326 audit(1744872960.840:8065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16687 comm="syz.1.4921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f815a0dcc1f code=0x7ffc0000
[  282.739048][   T29] audit: type=1400 audit(1744872960.934:8066): avc:  denied  { create } for  pid=16692 comm="syz.8.4932" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  282.739317][T16688] loop1: detected capacity change from 0 to 8192
[  282.760689][   T29] audit: type=1400 audit(1744872960.934:8067): avc:  denied  { mounton } for  pid=16692 comm="syz.8.4932" path="/981/file0" dev="tmpfs" ino=5181 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  282.790520][   T29] audit: type=1400 audit(1744872960.981:8068): avc:  denied  { setattr } for  pid=16692 comm="syz.8.4932" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  282.875013][T16700] loop0: detected capacity change from 0 to 512
[  282.896370][T16700] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  282.909555][T16700] ext4 filesystem being mounted at /825/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  282.970118][T16709] loop8: detected capacity change from 0 to 1024
[  282.978010][T16709] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  282.987957][T16709] EXT4-fs (loop8): group descriptors corrupted!
[  283.002850][T16707] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5)
[  283.009413][T16707] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  283.017168][T16707] vhci_hcd vhci_hcd.0: Device attached
[  283.024757][ T6138] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  283.046851][T16707] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  283.055605][T16707] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  283.067827][T16707] netlink: 'syz.2.4927': attribute type 10 has an invalid length.
[  283.085644][T16711] vhci_hcd: connection closed
[  283.093431][ T9959] vhci_hcd: stop threads
[  283.102542][ T9959] vhci_hcd: release socket
[  283.107061][ T9959] vhci_hcd: disconnect device
[  283.143278][T16717] loop0: detected capacity change from 0 to 512
[  283.150470][T16717] EXT4-fs: Ignoring removed oldalloc option
[  283.219292][T16714] vlan2: entered allmulticast mode
[  283.225854][T16714] bridge0: port 4(vlan2) entered blocking state
[  283.227216][T16717] EXT4-fs error (device loop0): ext4_xattr_inode_iget:433: comm syz.0.4929: Parent and EA inode have the same ino 15
[  283.232206][T16714] bridge0: port 4(vlan2) entered disabled state
[  283.251833][ T4168] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:0c
[  283.269570][T16714] vlan2: entered promiscuous mode
[  283.274706][T16714] bond0: entered promiscuous mode
[  283.278658][T16717] EXT4-fs (loop0): Remounting filesystem read-only
[  283.280537][T16714] bond_slave_0: entered promiscuous mode
[  283.286251][T16717] EXT4-fs warning (device loop0): ext4_evict_inode:262: couldn't mark inode dirty (err -30)
[  283.286287][T16717] EXT4-fs (loop0): 1 orphan inode deleted
[  283.292360][T16714] bond_slave_1: entered promiscuous mode
[  283.315104][T16714] bridge0: port 4(vlan2) entered blocking state
[  283.321506][T16714] bridge0: port 4(vlan2) entered forwarding state
[  283.328618][T16717] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  283.342143][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  283.364273][T16717] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  283.390745][T16724] netlink: 'syz.1.4933': attribute type 13 has an invalid length.
[  283.415555][ T4159] lo speed is unknown, defaulting to 1000
[  283.421426][ T4159] syz0: Port: 1 Link DOWN
[  283.425843][ T3373] syz1: Port: 1 Link DOWN
[  283.458205][T16717] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4929'.
[  283.508578][T16717] bond0 (unregistering): Released all slaves
[  283.578953][T16732] xt_hashlimit: max too large, truncated to 1048576
[  283.639059][T16730] loop1: detected capacity change from 0 to 512
[  283.649089][T16734] siw: device registration error -23
[  283.659577][T16730] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  283.730243][T16730] EXT4-fs (loop1): 1 truncate cleaned up
[  283.743499][T16730] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  283.758436][T16742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  283.773664][T16739] lo speed is unknown, defaulting to 1000
[  283.783717][ T9969] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  283.800696][T16742] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  283.845942][T16742] netlink: 'syz.0.4941': attribute type 27 has an invalid length.
[  283.859877][T16745] netlink: 'syz.7.4940': attribute type 10 has an invalid length.
[  283.867902][T16745] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4940'.
[  283.930454][T16742] batman_adv: batadv0: Interface deactivated: dummy0
[  283.963544][T16742] veth0_to_batadv: left promiscuous mode
[  283.969330][T16742] veth0_to_batadv: left allmulticast mode
[  284.019281][T16745] dummy0: entered promiscuous mode
[  284.037225][T16745] batman_adv: batadv0: Interface deactivated: dummy0
[  284.044138][T16745] batman_adv: batadv0: Removing interface: dummy0
[  284.074707][T16745] bridge0: port 5(dummy0) entered blocking state
[  284.081209][T16745] bridge0: port 5(dummy0) entered disabled state
[  284.102345][T16745] dummy0: entered allmulticast mode
[  284.115788][T16745] bridge0: port 5(dummy0) entered blocking state
[  284.122334][T16745] bridge0: port 5(dummy0) entered forwarding state
[  284.166586][T16747] 8021q: adding VLAN 0 to HW filter on device team0
[  284.196347][T16747] batman_adv: batadv0: Interface activated: dummy0
[  284.203332][T16747] batadv0: mtu less than device minimum
[  284.209536][T16747] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  284.220377][T16747] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  284.231217][T16747] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  284.242165][T16747] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  284.252973][T16747] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  284.263870][T16747] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  284.274703][T16747] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  284.285574][T16747] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  284.331999][T16751] loop8: detected capacity change from 0 to 1024
[  284.367662][T16756] netlink: 165 bytes leftover after parsing attributes in process `syz.7.4944'.
[  284.406037][T16756] netlink: 277 bytes leftover after parsing attributes in process `syz.7.4944'.
[  284.406385][T16751] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  284.460610][T16758] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  284.475516][T16751] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4113: comm syz.8.4942: Allocating blocks 385-513 which overlap fs metadata
[  284.519219][T16750] EXT4-fs (loop8): pa ffff88810616c770: logic 16, phys. 129, len 24
[  284.527287][T16750] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8
[  284.563909][ T9936] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  284.595150][ T4225] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  284.638307][T16762] 8021q: adding VLAN 0 to HW filter on device 

[  284.649315][T16762] 8021q: adding VLAN 0 to HW filter on device team0
[  284.672831][ T4167] lo speed is unknown, defaulting to 1000
[  284.679436][ T4167] syz0: Port: 1 Link ACTIVE
[  284.684049][ T1037] syz1: Port: 1 Link ACTIVE
[  284.700068][ T6106] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  284.913811][ T6105] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  285.067501][T16800] vlan1: entered allmulticast mode
[  285.072698][T16800] bond0: entered allmulticast mode
[  285.078635][T16800] gretap1: entered allmulticast mode
[  285.178391][T16807] loop8: detected capacity change from 0 to 2048
[  285.216781][T16807] EXT4-fs (loop8): failed to initialize system zone (-117)
[  285.235572][T16807] EXT4-fs (loop8): mount failed
[  285.304612][T16796] loop0: detected capacity change from 0 to 1764
[  285.429452][T16796] veth0: entered promiscuous mode
[  285.440418][T16796] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4958'.
[  285.485301][T16796] veth0 (unregistering): left promiscuous mode
[  285.494865][ T3810] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  285.662548][T16828] loop8: detected capacity change from 0 to 8192
[  285.823046][   T58] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  285.942499][T16838] FAT-fs (loop8): error, corrupted directory (invalid entries)
[  285.950159][T16838] FAT-fs (loop8): Filesystem has been set read-only
[  285.991029][T16828] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[  286.084107][T16847] program syz.2.4980 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  286.176502][T16856] xt_hashlimit: size too large, truncated to 1048576
[  286.188609][T16854] vlan0: entered promiscuous mode
[  286.193808][T16854] bridge0: entered promiscuous mode
[  286.199351][T16854] vlan0: entered allmulticast mode
[  286.204482][T16854] bridge0: entered allmulticast mode
[  286.313404][T16854] bond0: (slave bridge_slave_1): Releasing backup interface
[  286.326686][T16854] batman_adv: batadv0: Removing interface: ip6gretap1
[  286.570725][T16856] Cannot find set identified by id 2 to match
[  286.592234][   T58] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  286.600177][   T58] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  286.667404][T16866] xt_hashlimit: size too large, truncated to 1048576
[  286.674168][T16866] xt_hashlimit: Unknown mode mask 80FF, kernel too old?
[  286.685527][T16863] syzkaller0: entered promiscuous mode
[  286.691255][T16863] syzkaller0: entered allmulticast mode
[  286.826475][T16873] loop0: detected capacity change from 0 to 2048
[  286.916308][T16884] sch_tbf: burst 3092 is lower than device lo mtu (65550) !
[  286.941951][T16873]  loop0: p1 < > p4
[  286.971658][T16873] loop0: p4 size 8388608 extends beyond EOD, truncated
[  287.152120][T16904] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  287.196162][T10005] batman_adv: batadv0: MLD Querier disappeared - multicast optimizations disabled
[  287.201476][ T6106] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  287.218245][T16904] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  287.330136][T16904] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  287.391516][T16914] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5)
[  287.398107][T16914] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  287.406413][T16914] vhci_hcd vhci_hcd.0: Device attached
[  287.406443][T16904] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  287.414632][T16914] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  287.433748][T16914] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  287.443311][T16914] netlink: 'syz.0.5006': attribute type 10 has an invalid length.
[  287.459802][T16914] bridge0: port 1(team0) entered disabled state
[  287.466796][T16914] team0: left allmulticast mode
[  287.472469][T16914] team0: left promiscuous mode
[  287.477542][T16914] bridge0: port 1(team0) entered disabled state
[  287.485566][T16914] batman_adv: batadv0: Adding interface: team0
[  287.491883][T16914] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  287.518057][T16914] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  287.538287][T16915] vhci_hcd: connection closed
[  287.538499][ T9969] vhci_hcd: stop threads
[  287.542000][T16904] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  287.543270][ T9969] vhci_hcd: release socket
[  287.552446][T16904] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  287.555845][ T9969] vhci_hcd: disconnect device
[  287.564564][T16904] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  287.585828][T16904] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  287.651078][T16922] bridge0: entered promiscuous mode
[  287.657445][T16922] bridge0: port 6(macsec1) entered blocking state
[  287.664194][T16922] bridge0: port 6(macsec1) entered disabled state
[  287.671052][T16922] macsec1: entered allmulticast mode
[  287.676413][T16922] bridge0: entered allmulticast mode
[  287.701536][T16922] macsec1: left allmulticast mode
[  287.706749][T16922] bridge0: left allmulticast mode
[  287.712796][T16922] bridge0: left promiscuous mode
[  287.723378][T16924] loop1: detected capacity change from 0 to 2048
[  287.779182][T16924]  loop1: p1 < > p4
[  287.783690][T16924] loop1: p4 size 8388608 extends beyond EOD, truncated
[  287.846319][   T29] kauditd_printk_skb: 286 callbacks suppressed
[  287.846337][   T29] audit: type=1400 audit(1744872965.854:8355): avc:  denied  { execmem } for  pid=16926 comm="syz.7.5012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  287.886034][T10005] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  287.941534][   T29] audit: type=1400 audit(1744872965.948:8356): avc:  denied  { create } for  pid=16934 comm="syz.8.5023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  287.967620][   T29] audit: type=1400 audit(1744872965.948:8357): avc:  denied  { bind } for  pid=16934 comm="syz.8.5023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  287.987163][   T29] audit: type=1400 audit(1744872965.948:8358): avc:  denied  { listen } for  pid=16934 comm="syz.8.5023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  288.007629][   T29] audit: type=1400 audit(1744872965.948:8359): avc:  denied  { write } for  pid=16934 comm="syz.8.5023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  288.027203][   T29] audit: type=1400 audit(1744872965.966:8360): avc:  denied  { accept } for  pid=16934 comm="syz.8.5023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  288.166596][   T29] audit: type=1326 audit(1744872966.153:8361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16940 comm="syz.8.5016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f109848e169 code=0x7ffc0000
[  288.191148][   T29] audit: type=1326 audit(1744872966.153:8362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16940 comm="syz.8.5016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f109848e169 code=0x7ffc0000
[  288.214731][   T29] audit: type=1326 audit(1744872966.153:8363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16940 comm="syz.8.5016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f109848e169 code=0x7ffc0000
[  288.236530][T16944] vlan0: entered promiscuous mode
[  288.239077][   T29] audit: type=1326 audit(1744872966.153:8364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16940 comm="syz.8.5016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f109848e169 code=0x7ffc0000
[  288.243472][T16944] bridge0: entered promiscuous mode
[  288.272563][T16944] vlan0: entered allmulticast mode
[  288.277707][T16944] bridge0: entered allmulticast mode
[  288.285512][T16941] netlink: 'syz.8.5016': attribute type 13 has an invalid length.
[  288.304141][ T4159] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x4
[  288.311874][ T4159] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x2
[  288.320610][ T4159] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0
[  288.328536][ T4159] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0
[  288.337136][ T4159] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0
[  288.345124][ T4159] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0
[  288.352993][ T4159] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0
[  288.360868][ T4159] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0
[  288.369450][ T4159] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0
[  288.377503][ T4159] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0
[  288.385179][ T4159] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0
[  288.392917][ T4159] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0
[  288.401441][ T4159] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0
[  288.409411][ T4159] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0
[  288.417119][ T4159] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0
[  288.424845][ T4159] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0
[  288.434562][ T4159] hid-generic 0000:3000000:0000.000C: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[  288.497897][T16943] batman_adv: batadv0: Removing interface: team0
[  288.538655][T16943] batman_adv: batadv0: Interface deactivated: dummy0
[  288.545641][T16943] batman_adv: batadv0: Removing interface: dummy0
[  288.560898][T16943] batadv0: left allmulticast mode
[  288.566023][T16943] batadv0: left promiscuous mode
[  288.571159][T16943] bridge0: port 2(batadv0) entered disabled state
[  288.692414][T16949] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5029'.
[  288.719308][T16951] loop0: detected capacity change from 0 to 2048
[  288.727980][T16949] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5029'.
[  288.766827][T16951] EXT4-fs (loop0): failed to initialize system zone (-117)
[  288.783170][T16951] EXT4-fs (loop0): mount failed
[  288.856317][T16960] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  288.908036][ T9996] tipc: Resetting bearer <eth:syzkaller0>
[  288.923704][T16952] tipc: Resetting bearer <eth:syzkaller0>
[  288.951756][T16952] tipc: Disabling bearer <eth:syzkaller0>
[  289.208419][T16964] loop1: detected capacity change from 0 to 128
[  289.222683][T16970] loop0: detected capacity change from 0 to 512
[  289.233262][T16970] EXT4-fs (loop0): blocks per group (95) and clusters per group (32768) inconsistent
[  289.244478][ T3810] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  289.276414][T16964] syz.1.5024: attempt to access beyond end of device
[  289.276414][T16964] loop1: rw=2049, sector=153, nr_sectors = 8 limit=128
[  289.301758][T16964] syz.1.5024: attempt to access beyond end of device
[  289.301758][T16964] loop1: rw=2049, sector=169, nr_sectors = 8 limit=128
[  289.317538][T16964] syz.1.5024: attempt to access beyond end of device
[  289.317538][T16964] loop1: rw=2049, sector=185, nr_sectors = 8 limit=128
[  289.327678][T16975] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5027'.
[  289.343112][T16964] syz.1.5024: attempt to access beyond end of device
[  289.343112][T16964] loop1: rw=2049, sector=201, nr_sectors = 8 limit=128
[  289.362236][T16964] syz.1.5024: attempt to access beyond end of device
[  289.362236][T16964] loop1: rw=2049, sector=217, nr_sectors = 8 limit=128
[  289.376115][T16964] syz.1.5024: attempt to access beyond end of device
[  289.376115][T16964] loop1: rw=2049, sector=233, nr_sectors = 8 limit=128
[  289.389859][T16964] syz.1.5024: attempt to access beyond end of device
[  289.389859][T16964] loop1: rw=2049, sector=249, nr_sectors = 8 limit=128
[  289.408094][T16964] syz.1.5024: attempt to access beyond end of device
[  289.408094][T16964] loop1: rw=2049, sector=265, nr_sectors = 8 limit=128
[  289.422485][T16964] syz.1.5024: attempt to access beyond end of device
[  289.422485][T16964] loop1: rw=2049, sector=281, nr_sectors = 8 limit=128
[  289.437432][T16964] syz.1.5024: attempt to access beyond end of device
[  289.437432][T16964] loop1: rw=2049, sector=297, nr_sectors = 8 limit=128
[  289.451304][T16964] buffer_io_error: 249 callbacks suppressed
[  289.451321][T16964] Buffer I/O error on dev loop1, logical block 353, lost async page write
[  289.466785][T16964] Buffer I/O error on dev loop1, logical block 354, lost async page write
[  289.475585][T16964] Buffer I/O error on dev loop1, logical block 355, lost async page write
[  289.484469][T16964] Buffer I/O error on dev loop1, logical block 356, lost async page write
[  289.495785][T16964] Buffer I/O error on dev loop1, logical block 357, lost async page write
[  289.509023][T16964] Buffer I/O error on dev loop1, logical block 358, lost async page write
[  289.518031][T16964] Buffer I/O error on dev loop1, logical block 359, lost async page write
[  289.577327][T16984] loop0: detected capacity change from 0 to 8192
[  289.604096][T16988] vlan1: entered promiscuous mode
[  289.609260][T16988] bridge0: entered promiscuous mode
[  289.614706][T16988] vlan1: entered allmulticast mode
[  289.620016][T16988] bridge0: entered allmulticast mode
[  289.666449][T16990] 
: (slave batadv0): Releasing backup interface
[  289.682983][T16990] veth0_to_bridge: left allmulticast mode
[  289.689041][T16990] veth0_to_bridge: left promiscuous mode
[  289.695864][T16990] bridge0: port 1(veth0_to_bridge) entered disabled state
[  289.703414][ T3373] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  289.720878][T16990] 
: (slave bond_slave_0): Releasing backup interface
[  289.762534][T16990] 
: (slave bond_slave_1): Releasing backup interface
[  289.790614][T16990] team0: Port device team_slave_0 removed
[  289.806214][T16990] team0: Port device team_slave_1 removed
[  289.814538][T16990] batman_adv: batadv0: Removing interface: batadv_slave_0
[  289.841394][T16990] batman_adv: batadv0: Removing interface: batadv_slave_1
[  289.857314][T16990] bond0: (slave gretap1): Releasing active interface
[  289.865087][T16990] bond0: (slave gretap1): the permanent HWaddr of slave - ca:b9:44:bc:0c:31 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  289.884979][T16990] gretap1: left allmulticast mode
[  289.898131][T16990] bond0: (slave bridge0): Releasing active interface
[  289.916817][T16991] FAT-fs (loop0): error, corrupted directory (invalid entries)
[  289.924456][T16991] FAT-fs (loop0): Filesystem has been set read-only
[  289.954376][T16984] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[  290.009311][T16997] loop8: detected capacity change from 0 to 1024
[  290.033606][T16997] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  290.045420][T16997] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  290.060128][T16997] JBD2: no valid journal superblock found
[  290.065917][T16997] EXT4-fs (loop8): Could not load journal inode
[  290.457527][T17020] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5048'.
[  290.601272][T16999] lo speed is unknown, defaulting to 1000
[  290.612385][ T3373] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  290.686638][T17016] lo speed is unknown, defaulting to 1000
[  290.784654][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  290.831613][T17043] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5058'.
[  290.856714][T17046] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.5056'.
[  290.912142][T17041] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.5056'.
[  290.989220][T17058] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5063'.
[  291.071010][T17061] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5064'.
[  291.136824][T17065] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5065'.
[  291.461608][T17096] loop1: detected capacity change from 0 to 256
[  291.613450][T17107] loop1: detected capacity change from 0 to 128
[  291.623096][T17107] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  291.635884][T17107] ext4 filesystem being mounted at /495/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  291.692494][T17111] loop8: detected capacity change from 0 to 512
[  291.702870][ T9936] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  291.743963][T17111] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  291.760864][T17111] ext4 filesystem being mounted at /1017/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  291.832043][T17117] EXT4-fs error (device loop8): ext4_do_update_inode:5211: inode #19: comm syz.8.5084: corrupted inode contents
[  291.848305][T17117] EXT4-fs error (device loop8): ext4_dirty_inode:6103: inode #19: comm syz.8.5084: mark_inode_dirty error
[  291.860548][T17117] EXT4-fs error (device loop8): ext4_do_update_inode:5211: inode #19: comm syz.8.5084: corrupted inode contents
[  291.877057][T17117] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2991: inode #19: comm syz.8.5084: mark_inode_dirty error
[  291.892238][T17117] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2994: inode #19: comm syz.8.5084: mark inode dirty (error -117)
[  291.935584][T17117] EXT4-fs warning (device loop8): ext4_evict_inode:279: xattr delete (err -117)
[  291.966818][ T4225] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  291.982203][ T9959] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  292.520648][T17157] gtp0: entered promiscuous mode
[  292.615362][ T6106] hid-generic C990:0003:007F.000D: unknown main item tag 0x1
[  292.622984][ T6106] hid-generic C990:0003:007F.000D: unknown main item tag 0x0
[  292.630509][ T6106] hid-generic C990:0003:007F.000D: unknown main item tag 0x0
[  292.638273][ T6106] hid-generic C990:0003:007F.000D: unknown main item tag 0x0
[  292.645822][ T6106] hid-generic C990:0003:007F.000D: unknown main item tag 0x0
[  292.653328][ T6106] hid-generic C990:0003:007F.000D: unknown main item tag 0x0
[  292.721596][T17162] loop0: detected capacity change from 0 to 512
[  292.739831][ T6106] hid-generic C990:0003:007F.000D: unknown main item tag 0x0
[  292.747297][ T6106] hid-generic C990:0003:007F.000D: unknown main item tag 0x0
[  292.754766][ T6106] hid-generic C990:0003:007F.000D: unknown main item tag 0x0
[  292.762249][ T6106] hid-generic C990:0003:007F.000D: unknown main item tag 0x2
[  292.769933][ T6106] hid-generic C990:0003:007F.000D: unknown main item tag 0x0
[  292.777387][ T6106] hid-generic C990:0003:007F.000D: unknown main item tag 0x0
[  292.784952][ T6106] hid-generic C990:0003:007F.000D: unknown main item tag 0x0
[  292.800050][T17166] tipc: New replicast peer: 10.1.1.2
[  292.805741][T17166] tipc: Enabled bearer <udp:syz0>, priority 10
[  292.820017][T17162] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  292.849551][T17162] ext4 filesystem being mounted at /858/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  292.849621][ T6106] hid-generic C990:0003:007F.000D: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  293.127833][ T6138] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  294.008130][   T29] kauditd_printk_skb: 193 callbacks suppressed
[  294.008148][   T29] audit: type=1400 audit(1744872976.619:8558): avc:  denied  { create } for  pid=17213 comm="syz.2.5118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  294.044104][ T9996] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  294.047708][T17214] Falling back ldisc for ttyS3.
[  294.375491][   T29] audit: type=1400 audit(1744872976.956:8559): avc:  denied  { connect } for  pid=17218 comm="syz.0.5121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  294.491871][   T29] audit: type=1400 audit(1744872977.068:8560): avc:  denied  { connect } for  pid=17229 comm="syz.8.5124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  294.511677][   T29] audit: type=1400 audit(1744872977.068:8561): avc:  denied  { name_connect } for  pid=17229 comm="syz.8.5124" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1
[  294.594767][T17228] lo speed is unknown, defaulting to 1000
[  294.655393][   T29] audit: type=1400 audit(1744872977.171:8562): avc:  denied  { write } for  pid=17229 comm="syz.8.5124" lport=43271 faddr=fe80::bb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  294.677495][   T29] audit: type=1400 audit(1744872977.171:8563): avc:  denied  { name_connect } for  pid=17229 comm="syz.8.5124" dest=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  294.699837][   T29] audit: type=1400 audit(1744872977.171:8564): avc:  denied  { mount } for  pid=17237 comm="syz.7.5128" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  294.725288][ T9999] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  294.768569][T17243] dummy0: left allmulticast mode
[  294.773755][T17243] bridge0: port 5(dummy0) entered disabled state
[  294.886351][T17248] xt_connbytes: Forcing CT accounting to be enabled
[  294.908896][T17248] set match dimension is over the limit!
[  295.060050][   T29] audit: type=1400 audit(1744872977.611:8565): avc:  denied  { create } for  pid=17254 comm="syz.0.5135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  295.133125][   T29] audit: type=1400 audit(1744872977.639:8566): avc:  denied  { connect } for  pid=17254 comm="syz.0.5135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  295.153339][   T29] audit: type=1326 audit(1744872977.648:8567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17257 comm="syz.2.5136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cf9d8e169 code=0x7ffc0000
[  295.293635][T17274] netlink: 'syz.7.5143': attribute type 10 has an invalid length.
[  295.302811][T17274] bridge0: port 3(team0) entered disabled state
[  295.318400][T17274] team0: left allmulticast mode
[  295.323748][T17274] team_slave_0: left allmulticast mode
[  295.329308][T17274] team_slave_1: left allmulticast mode
[  295.334984][T17274] team0: left promiscuous mode
[  295.340547][T17274] team_slave_0: left promiscuous mode
[  295.346036][T17274] team_slave_1: left promiscuous mode
[  295.351656][T17274] bridge0: port 3(team0) entered disabled state
[  295.361828][T17274] batman_adv: batadv0: Adding interface: team0
[  295.368075][T17274] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  295.394051][T17274] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  295.499626][T17282] loop1: detected capacity change from 0 to 512
[  295.520787][T17282] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  295.539748][T17282] ext4 filesystem being mounted at /499/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  295.569009][ T9936] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  295.594472][T17294] xt_hashlimit: max too large, truncated to 1048576
[  295.730905][T17304] loop0: detected capacity change from 0 to 128
[  295.771243][T17314] geneve0: entered allmulticast mode
[  295.865779][T17318] hub 2-0:1.0: USB hub found
[  295.870833][T17318] hub 2-0:1.0: 8 ports detected
[  295.887332][T17325] bio_check_eod: 15 callbacks suppressed
[  295.887348][T17325] syz.0.5155: attempt to access beyond end of device
[  295.887348][T17325] loop0: rw=2049, sector=145, nr_sectors = 8 limit=128
[  295.954739][T17324] __nla_validate_parse: 2 callbacks suppressed
[  295.954759][T17324] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5165'.
[  295.975404][T17325] syz.0.5155: attempt to access beyond end of device
[  295.975404][T17325] loop0: rw=2049, sector=161, nr_sectors = 8 limit=128
[  296.022961][T17325] syz.0.5155: attempt to access beyond end of device
[  296.022961][T17325] loop0: rw=2049, sector=177, nr_sectors = 8 limit=128
[  296.050811][T17325] syz.0.5155: attempt to access beyond end of device
[  296.050811][T17325] loop0: rw=2049, sector=193, nr_sectors = 8 limit=128
[  296.065971][T17349] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.5168'.
[  296.104155][T17325] syz.0.5155: attempt to access beyond end of device
[  296.104155][T17325] loop0: rw=2049, sector=209, nr_sectors = 8 limit=128
[  296.111265][T17341] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.5168'.
[  296.164342][T17325] syz.0.5155: attempt to access beyond end of device
[  296.164342][T17325] loop0: rw=2049, sector=225, nr_sectors = 8 limit=128
[  296.208539][T17325] syz.0.5155: attempt to access beyond end of device
[  296.208539][T17325] loop0: rw=2049, sector=241, nr_sectors = 8 limit=128
[  296.247530][T17360] loop1: detected capacity change from 0 to 512
[  296.252212][T17325] syz.0.5155: attempt to access beyond end of device
[  296.252212][T17325] loop0: rw=2049, sector=257, nr_sectors = 8 limit=128
[  296.270157][T17360] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  296.304135][T17325] syz.0.5155: attempt to access beyond end of device
[  296.304135][T17325] loop0: rw=2049, sector=273, nr_sectors = 8 limit=128
[  296.304585][T17360] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  296.317813][T17325] syz.0.5155: attempt to access beyond end of device
[  296.317813][T17325] loop0: rw=2049, sector=289, nr_sectors = 8 limit=128
[  296.401168][T17360] ext4 filesystem being mounted at /507/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  296.457249][ T9936] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  296.538292][T17367] lo speed is unknown, defaulting to 1000
[  296.609279][T17371] loop1: detected capacity change from 0 to 512
[  296.612410][T17373] loop0: detected capacity change from 0 to 512
[  296.616798][T17371] EXT4-fs (loop1): external journal device major/minor numbers have changed
[  296.626811][T17373] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  296.647068][T17371] EXT4-fs (loop1): failed to open journal device unknown-block(0,3) -6
[  296.658071][T17373] EXT4-fs (loop0): 1 truncate cleaned up
[  296.665135][T17373] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  296.678052][T17373] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  296.960126][T17395] netlink: 'syz.1.5183': attribute type 10 has an invalid length.
[  296.968054][T17395] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5183'.
[  296.994497][T17395] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  297.002884][T17395] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  297.016040][T17395] team0: Failed to send port change of device geneve1 via netlink (err -105)
[  297.035381][T17395] team0: Failed to send options change via netlink (err -105)
[  297.043067][T17395] team0: Port device geneve1 added
[  297.056969][T17394] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  297.074273][T17400] sch_fq: defrate 0 ignored.
[  297.138503][T17394] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  297.244528][T17394] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  297.275999][T17394] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  297.309600][T17394] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  297.323323][T17394] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  297.332587][T17407] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5189'.
[  297.396483][T17421] IPv6: Can't replace route, no match found
[  297.440174][T17427] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.5192'.
[  297.449978][T17419] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.5192'.
[  297.465221][ T9959] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  297.599833][T17441] loop1: detected capacity change from 0 to 128
[  297.610390][T17441] FAT-fs (loop1): bogus number of reserved sectors
[  297.617044][T17441] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[  297.626586][T17441] FAT-fs (loop1): Can't find a valid FAT filesystem
[  297.664700][T17445] loop1: detected capacity change from 0 to 128
[  297.776441][T17451] pim6reg1: entered promiscuous mode
[  297.781816][T17451] pim6reg1: entered allmulticast mode
[  297.922091][T17457] loop8: detected capacity change from 0 to 128
[  298.005121][T17463] net_ratelimit: 13 callbacks suppressed
[  298.005145][T17463] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  298.091230][T17466] loop1: detected capacity change from 0 to 8192
[  298.112148][T17472] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5215'.
[  298.124453][T17461] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1)
[  298.132440][T17461] FAT-fs (loop1): Filesystem has been set read-only
[  298.143851][T17461] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1)
[  298.163176][T17461] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1)
[  298.274825][T17492] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  298.283424][T17492] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  298.292446][T17492] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  298.300872][T17492] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  298.309858][    T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  298.329012][T17500] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5219'.
[  298.331847][T17492] team0: Port device geneve1 removed
[  298.464190][T17509] netlink: 'syz.8.5226': attribute type 4 has an invalid length.
[  298.576295][ T6105] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  298.649965][T17528] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5233'.
[  298.755124][T17532] pim6reg1: entered promiscuous mode
[  298.760671][T17532] pim6reg1: entered allmulticast mode
[  298.823094][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  299.357279][   T29] kauditd_printk_skb: 2168 callbacks suppressed
[  299.357298][   T29] audit: type=1326 audit(1744872981.614:10736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17539 comm="syz.2.5239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6cf9d2a359 code=0x7ffc0000
[  299.419029][   T29] audit: type=1326 audit(1744872981.623:10737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17539 comm="syz.2.5239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6cf9d85127 code=0x7ffc0000
[  299.442742][   T29] audit: type=1326 audit(1744872981.623:10738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17539 comm="syz.2.5239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6cf9d2a359 code=0x7ffc0000
[  299.466645][   T29] audit: type=1326 audit(1744872981.623:10739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17539 comm="syz.2.5239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6cf9d85127 code=0x7ffc0000
[  299.490259][   T29] audit: type=1326 audit(1744872981.623:10740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17539 comm="syz.2.5239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6cf9d2a359 code=0x7ffc0000
[  299.514123][   T29] audit: type=1326 audit(1744872981.623:10741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17539 comm="syz.2.5239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6cf9d85127 code=0x7ffc0000
[  299.537746][   T29] audit: type=1326 audit(1744872981.623:10742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17539 comm="syz.2.5239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6cf9d2a359 code=0x7ffc0000
[  299.561328][   T29] audit: type=1326 audit(1744872981.623:10743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17539 comm="syz.2.5239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6cf9d85127 code=0x7ffc0000
[  299.585320][   T29] audit: type=1326 audit(1744872981.623:10744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17539 comm="syz.2.5239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6cf9d2a359 code=0x7ffc0000
[  299.609193][   T29] audit: type=1326 audit(1744872981.623:10745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17539 comm="syz.2.5239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6cf9d85127 code=0x7ffc0000
[  299.747409][T17548] hub 2-0:1.0: USB hub found
[  299.752285][T17548] hub 2-0:1.0: 8 ports detected
[  300.102003][T17586] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  300.155153][T17588] netlink: 'syz.2.5257': attribute type 10 has an invalid length.
[  300.169318][T17586] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  300.188766][T17588] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  300.204848][ T9999] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  300.244928][T17586] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  300.279904][T17592] loop0: detected capacity change from 0 to 512
[  300.314566][T17592] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  300.329266][T17592] ext4 filesystem being mounted at /887/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  300.354798][T17586] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  300.405795][ T6138] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  300.433658][T17601] loop0: detected capacity change from 0 to 256
[  300.442742][T17586] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  300.456264][T17586] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  300.481450][T17586] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  300.496024][T17586] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  300.875276][ T3810] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  301.247183][T17605] syz.0.5263 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000
[  301.262154][T17605] CPU: 1 UID: 0 PID: 17605 Comm: syz.0.5263 Not tainted 6.15.0-rc2-syzkaller-00087-gcfb2e2c57aef #0 PREEMPT(voluntary) 
[  301.262182][T17605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  301.262196][T17605] Call Trace:
[  301.262204][T17605]  <TASK>
[  301.262212][T17605]  dump_stack_lvl+0xf6/0x150
[  301.262243][T17605]  dump_stack+0x15/0x1a
[  301.262308][T17605]  dump_header+0x83/0x2d0
[  301.262346][T17605]  oom_kill_process+0x341/0x4c0
[  301.262384][T17605]  out_of_memory+0x9d1/0xc20
[  301.262424][T17605]  mem_cgroup_out_of_memory+0x13f/0x190
[  301.262534][T17605]  try_charge_memcg+0x5f1/0x890
[  301.262582][T17605]  obj_cgroup_charge_pages+0xc0/0x1a0
[  301.262607][T17605]  __memcg_kmem_charge_page+0x9d/0x170
[  301.262631][T17605]  __alloc_frozen_pages_noprof+0x1a6/0x360
[  301.262709][T17605]  alloc_pages_mpol+0xb6/0x260
[  301.262739][T17605]  alloc_pages_noprof+0xe8/0x130
[  301.262765][T17605]  __vmalloc_node_range_noprof+0x6ea/0xe80
[  301.262817][T17605]  __kvmalloc_node_noprof+0x311/0x520
[  301.262891][T17605]  ? ip_set_alloc+0x1f/0x30
[  301.262909][T17605]  ? ip_set_alloc+0x1f/0x30
[  301.262929][T17605]  ? __kmalloc_cache_noprof+0x292/0x320
[  301.262960][T17605]  ip_set_alloc+0x1f/0x30
[  301.263031][T17605]  hash_netiface_create+0x273/0x730
[  301.263052][T17605]  ? __nla_parse+0x40/0x60
[  301.263087][T17605]  ? __pfx_hash_netiface_create+0x10/0x10
[  301.263119][T17605]  ip_set_create+0x3b6/0x970
[  301.263183][T17605]  ? __nla_parse+0x40/0x60
[  301.263214][T17605]  nfnetlink_rcv_msg+0x4ba/0x580
[  301.263297][T17605]  netlink_rcv_skb+0x12f/0x230
[  301.263321][T17605]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  301.263362][T17605]  nfnetlink_rcv+0x187/0x1610
[  301.263458][T17605]  ? __kfree_skb+0x102/0x150
[  301.263485][T17605]  ? nlmon_xmit+0x51/0x60
[  301.263523][T17605]  ? __kfree_skb+0x102/0x150
[  301.263603][T17605]  ? consume_skb+0x49/0x160
[  301.263650][T17605]  ? nlmon_xmit+0x51/0x60
[  301.263689][T17605]  ? dev_hard_start_xmit+0x3d1/0x400
[  301.263765][T17605]  ? __dev_queue_xmit+0xb76/0x20b0
[  301.263798][T17605]  ? should_fail_ex+0x31/0x270
[  301.263825][T17605]  ? ref_tracker_free+0x3b8/0x420
[  301.263925][T17605]  ? __netlink_deliver_tap+0x4c6/0x4f0
[  301.263961][T17605]  netlink_unicast+0x605/0x6c0
[  301.263985][T17605]  netlink_sendmsg+0x609/0x720
[  301.264016][T17605]  ? __pfx_netlink_sendmsg+0x10/0x10
[  301.264066][T17605]  __sock_sendmsg+0x140/0x180
[  301.264091][T17605]  ____sys_sendmsg+0x350/0x4e0
[  301.264130][T17605]  __sys_sendmsg+0x1a0/0x240
[  301.264177][T17605]  __x64_sys_sendmsg+0x46/0x50
[  301.264214][T17605]  x64_sys_call+0x26f3/0x2e10
[  301.264240][T17605]  do_syscall_64+0xc9/0x1c0
[  301.264329][T17605]  ? clear_bhb_loop+0x25/0x80
[  301.264353][T17605]  ? clear_bhb_loop+0x25/0x80
[  301.264408][T17605]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  301.264436][T17605] RIP: 0033:0x7f0c4eb4e169
[  301.264455][T17605] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  301.264512][T17605] RSP: 002b:00007f0c4d1b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  301.264536][T17605] RAX: ffffffffffffffda RBX: 00007f0c4ed75fa0 RCX: 00007f0c4eb4e169
[  301.264559][T17605] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000004
[  301.264575][T17605] RBP: 00007f0c4ebd0a68 R08: 0000000000000000 R09: 0000000000000000
[  301.264661][T17605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  301.264673][T17605] R13: 0000000000000000 R14: 00007f0c4ed75fa0 R15: 00007ffcc39ae038
[  301.264693][T17605]  </TASK>
[  301.264700][T17605] memory: usage 307200kB, limit 307200kB, failcnt 584
[  301.587946][T17641] lo speed is unknown, defaulting to 1000
[  301.592523][T17605] memory+swap: usage 307488kB, limit 9007199254740988kB, failcnt 0
[  301.592549][T17605] kmem: usage 239420kB, limit 9007199254740988kB, failcnt 0
[  301.592564][T17605] Memory cgroup stats for /syz0:
[  301.672510][T17605] cache 68497408
[  301.681619][T17605] rss 385024
[  301.684872][T17605] shmem 68497408
[  301.689114][T17605] mapped_file 0
[  301.692617][T17605] dirty 0
[  301.695565][T17605] writeback 0
[  301.696760][T17645] loop8: detected capacity change from 0 to 1
[  301.698885][T17605] workingset_refault_anon 135
[  301.698899][T17605] workingset_refault_file 74
[  301.698909][T17605] swap 294912
[  301.717594][T17605] swapcached 503808
[  301.721917][T17645] Buffer I/O error on dev loop8, logical block 0, async page read
[  301.722036][T17645] Buffer I/O error on dev loop8, logical block 0, async page read
[  301.722054][T17645]  loop8: unable to read partition table
[  301.722077][T17645] loop_reread_partitions: partition scan of loop8 () failed (rc=-5)
[  301.753081][T17605] pgpgin 307542
[  301.756644][T17605] pgpgout 290597
[  301.760314][T17605] pgfault 304995
[  301.763907][T17605] pgmajfault 90
[  301.767380][T17605] inactive_anon 68739072
[  301.771849][T17605] active_anon 663552
[  301.775790][T17605] inactive_file 0
[  301.779789][T17605] active_file 4096
[  301.784234][T17605] unevictable 0
[  301.787707][T17605] hierarchical_memory_limit 314572800
[  301.793093][T17605] hierarchical_memsw_limit 9223372036854771712
[  301.799300][T17605] total_cache 68497408
[  301.803386][T17605] total_rss 385024
[  301.807154][T17605] total_shmem 68497408
[  301.811290][T17605] total_mapped_file 0
[  301.815279][T17605] total_dirty 0
[  301.819604][T17605] total_writeback 0
[  301.823443][T17605] total_workingset_refault_anon 135
[  301.828701][T17605] total_workingset_refault_file 74
[  301.833921][T17605] total_swap 294912
[  301.837847][T17605] total_swapcached 503808
[  301.842182][T17605] total_pgpgin 307542
[  301.846168][T17605] total_pgpgout 290597
[  301.851099][T17605] total_pgfault 304995
[  301.855186][T17605] total_pgmajfault 90
[  301.859257][T17605] total_inactive_anon 68739072
[  301.864039][T17605] total_active_anon 663552
[  301.868787][T17605] total_inactive_file 0
[  301.873004][T17605] total_active_file 4096
[  301.877257][T17605] total_unevictable 0
[  301.882077][T17605] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.5263,pid=17604,uid=0
[  301.896841][T17605] Memory cgroup out of memory: Killed process 17604 (syz.0.5263) total-vm:95796kB, anon-rss:936kB, file-rss:22064kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000
[  302.251159][T17666] xt_hashlimit: max too large, truncated to 1048576
[  302.512296][T17672] lo speed is unknown, defaulting to 1000
[  302.789543][T17697] lo speed is unknown, defaulting to 1000
[  302.849377][T17692] loop1: detected capacity change from 0 to 8192
[  302.896837][T17692]  loop1: p1 p2 < > p3 p4 < p5 >
[  302.901861][T17692] loop1: partition table partially beyond EOD, truncated
[  302.909843][T17692] loop1: p1 size 100663296 extends beyond EOD, truncated
[  302.918550][T17692] loop1: p2 start 591104 is beyond EOD, truncated
[  302.925080][T17692] loop1: p3 start 33572980 is beyond EOD, truncated
[  302.934019][T17692] loop1: p5 size 100663296 extends beyond EOD, truncated
[  302.979146][T17705] __nla_validate_parse: 5 callbacks suppressed
[  302.979166][T17705] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5302'.
[  302.995285][T17705] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5302'.
[  303.039373][T17711] tipc: New replicast peer: 255.255.255.255
[  303.045779][T17711] tipc: Enabled bearer <udp:syz2>, priority 10
[  303.059085][T17713] netlink: 'syz.7.5306': attribute type 4 has an invalid length.
[  303.141302][T17719] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5304'.
[  303.150318][T17719] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5304'.
[  303.160125][T17719] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5304'.
[  303.170139][T17719] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5304'.
[  303.616420][ T3810] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  303.805445][T17740] xt_hashlimit: size too large, truncated to 1048576
[  303.955571][T17740] Cannot find set identified by id 2 to match
[  304.075206][T17750] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  304.129154][T17756] netlink: 'syz.7.5323': attribute type 10 has an invalid length.
[  304.137087][T17756] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5323'.
[  304.201328][T17756] team0: Failed to send port change of device geneve1 via netlink (err -105)
[  304.221471][T17756] team0: Failed to send options change via netlink (err -105)
[  304.228988][T17756] team0: Port device geneve1 added
[  304.250313][T17750] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  304.308079][T17750] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  304.402902][T17750] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  304.458177][T17750] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  304.525812][T17750] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  304.537390][T17774] loop1: detected capacity change from 0 to 164
[  304.568872][T17750] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  304.599660][T17784] loop0: detected capacity change from 0 to 2048
[  304.616452][T17774] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  304.616948][T17750] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  304.643567][T17784]  loop0: p1 < > p4
[  304.658936][T17784] loop0: p4 size 8388608 extends beyond EOD, truncated
[  304.688988][T17774] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  304.721132][T17774] Symlink component flag not implemented
[  304.728867][T17774] Symlink component flag not implemented
[  304.736962][T17774] Symlink component flag not implemented (7)
[  304.745033][T17774] Symlink component flag not implemented (116)
[  304.767081][   T29] kauditd_printk_skb: 400 callbacks suppressed
[  304.767099][   T29] audit: type=1400 audit(1744872986.680:11146): avc:  denied  { create } for  pid=17791 comm="syz.7.5340" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  304.829944][   T29] audit: type=1400 audit(1744872986.708:11147): avc:  denied  { mounton } for  pid=17791 comm="syz.7.5340" path="/517/file0" dev="tmpfs" ino=2739 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  304.853303][   T29] audit: type=1326 audit(1744872986.717:11148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17785 comm="syz.2.5337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cf9d8e169 code=0x7ffc0000
[  304.877005][   T29] audit: type=1326 audit(1744872986.717:11149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17785 comm="syz.2.5337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6cf9d8e169 code=0x7ffc0000
[  304.900559][   T29] audit: type=1326 audit(1744872986.717:11150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17785 comm="syz.2.5337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cf9d8e169 code=0x7ffc0000
[  304.924247][   T29] audit: type=1326 audit(1744872986.717:11151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17785 comm="syz.2.5337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7f6cf9d8e169 code=0x7ffc0000
[  304.947954][   T29] audit: type=1326 audit(1744872986.717:11152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17785 comm="syz.2.5337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cf9d8e169 code=0x7ffc0000
[  304.971655][   T29] audit: type=1400 audit(1744872986.736:11153): avc:  denied  { unmount } for  pid=9936 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1
[  305.006556][   T29] audit: type=1400 audit(1744872986.810:11154): avc:  denied  { read } for  pid=17795 comm="syz.1.5342" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  305.029980][   T29] audit: type=1400 audit(1744872986.810:11155): avc:  denied  { open } for  pid=17795 comm="syz.1.5342" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  305.681889][T10005] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  305.919180][T17824] ip6gretap2: entered allmulticast mode
[  306.017364][T17835] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5357'.
[  306.026460][T17835] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5357'.
[  306.102909][T17837] loop0: detected capacity change from 0 to 1024
[  306.120608][T17837] EXT4-fs: Ignoring removed orlov option
[  306.126517][T17837] EXT4-fs: Ignoring removed nomblk_io_submit option
[  306.160850][T17837] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  306.180426][T17837] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  306.237857][T17837] loop0: detected capacity change from 0 to 1024
[  306.254684][T17837] EXT4-fs: Ignoring removed orlov option
[  306.269742][T17837] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  306.299593][T17846] SELinux:  Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  306.348267][T17846] lo speed is unknown, defaulting to 1000
[  306.456728][T17849] loop1: detected capacity change from 0 to 512
[  306.495117][ T9959] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  306.514480][T17849] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  306.535033][T17849] EXT4-fs (loop1): 1 truncate cleaned up
[  306.541555][T17849] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  306.684866][ T6138] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  306.764158][ T9936] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  307.202090][T17870] all: renamed from lo
[  307.216741][T17871] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5367'.
[  307.387048][T17881] syz.8.5371: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0
[  307.401729][T17881] CPU: 0 UID: 0 PID: 17881 Comm: syz.8.5371 Not tainted 6.15.0-rc2-syzkaller-00087-gcfb2e2c57aef #0 PREEMPT(voluntary) 
[  307.401760][T17881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  307.401773][T17881] Call Trace:
[  307.401780][T17881]  <TASK>
[  307.401789][T17881]  dump_stack_lvl+0xf6/0x150
[  307.401873][T17881]  dump_stack+0x15/0x1a
[  307.401893][T17881]  warn_alloc+0x145/0x1b0
[  307.401926][T17881]  ? __vmalloc_node_range_noprof+0x8a/0xe80
[  307.402009][T17881]  __vmalloc_node_range_noprof+0xac/0xe80
[  307.402043][T17881]  ? __perf_event_task_sched_in+0xa1b/0xa80
[  307.402069][T17881]  ? xfd_validate_state+0x46/0xf0
[  307.402093][T17881]  ? save_fpregs_to_fpstate+0xff/0x160
[  307.402159][T17881]  ? _raw_spin_unlock+0x26/0x50
[  307.402190][T17881]  vmalloc_user_noprof+0x59/0x70
[  307.402221][T17881]  ? xskq_create+0x79/0xd0
[  307.402304][T17881]  xskq_create+0x79/0xd0
[  307.402334][T17881]  xsk_init_queue+0x82/0xd0
[  307.402364][T17881]  xsk_setsockopt+0x3fe/0x550
[  307.402405][T17881]  ? __pfx_xsk_setsockopt+0x10/0x10
[  307.402468][T17881]  __sys_setsockopt+0x187/0x200
[  307.402496][T17881]  __x64_sys_setsockopt+0x66/0x80
[  307.402522][T17881]  x64_sys_call+0x2a09/0x2e10
[  307.402544][T17881]  do_syscall_64+0xc9/0x1c0
[  307.402598][T17881]  ? clear_bhb_loop+0x25/0x80
[  307.402620][T17881]  ? clear_bhb_loop+0x25/0x80
[  307.402646][T17881]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  307.402682][T17881] RIP: 0033:0x7f109848e169
[  307.402700][T17881] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  307.402719][T17881] RSP: 002b:00007f1096af7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  307.402751][T17881] RAX: ffffffffffffffda RBX: 00007f10986b5fa0 RCX: 00007f109848e169
[  307.402834][T17881] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000004
[  307.402846][T17881] RBP: 00007f1098510a68 R08: 0000000000000004 R09: 0000000000000000
[  307.402858][T17881] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  307.402881][T17881] R13: 0000000000000000 R14: 00007f10986b5fa0 R15: 00007fffadc99a78
[  307.402901][T17881]  </TASK>
[  307.618758][T17881] Mem-Info:
[  307.622053][T17881] active_anon:16426 inactive_anon:20669 isolated_anon:0
[  307.622053][T17881]  active_file:17371 inactive_file:6915 isolated_file:0
[  307.622053][T17881]  unevictable:0 dirty:265 writeback:0
[  307.622053][T17881]  slab_reclaimable:5217 slab_unreclaimable:281561
[  307.622053][T17881]  mapped:29447 shmem:21276 pagetables:1102
[  307.622053][T17881]  sec_pagetables:0 bounce:0
[  307.622053][T17881]  kernel_misc_reclaimable:0
[  307.622053][T17881]  free:1580420 free_pcp:7197 free_cma:0
[  307.667941][T17881] Node 0 active_anon:65820kB inactive_anon:82676kB active_file:69484kB inactive_file:27660kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117904kB dirty:1060kB writeback:0kB shmem:85104kB writeback_tmp:0kB kernel_stack:5120kB pagetables:4408kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  307.697791][T17881] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  307.724831][T17881] lowmem_reserve[]: 0 2882 7860 7860
[  307.730315][T17881] Node 0 DMA32 free:2947800kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2951328kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:3528kB free_cma:0kB
[  307.759324][T17881] lowmem_reserve[]: 0 0 4978 4978
[  307.764782][T17881] Node 0 Normal free:3358392kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB active_anon:65588kB inactive_anon:82676kB active_file:69484kB inactive_file:27660kB unevictable:0kB writepending:1060kB present:5242880kB managed:5098244kB mlocked:0kB bounce:0kB free_pcp:25508kB local_pcp:17196kB free_cma:0kB
[  307.796133][T17881] lowmem_reserve[]: 0 0 0 0
[  307.800914][T17881] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  307.813824][T17881] Node 0 DMA32: 4*4kB (M) 3*8kB (M) 3*16kB (M) 4*32kB (M) 4*64kB (M) 4*128kB (M) 3*256kB (M) 4*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2947800kB
[  307.830303][T17881] Node 0 Normal: 206*4kB (UME) 730*8kB (UME) 652*16kB (UM) 472*32kB (UM) 290*64kB (UME) 338*128kB (UME) 363*256kB (UME) 318*512kB (UME) 206*1024kB (UM) 86*2048kB (UME) 640*4096kB (UM) = 3358280kB
[  307.849975][T17881] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB
[  307.859531][T17881] 47090 total pagecache pages
[  307.864313][T17881] 1537 pages in swap cache
[  307.868991][T17881] Free swap  = 0kB
[  307.872734][T17881] Total swap = 124996kB
[  307.877044][T17881] 2097051 pages RAM
[  307.881183][T17881] 0 pages HighMem/MovableOnly
[  307.885863][T17881] 80818 pages reserved
[  308.026157][T17903] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  308.035294][T17903] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  308.043737][T17903] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  308.052048][T17903] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  308.209442][T17911] hub 2-0:1.0: USB hub found
[  308.225762][T17911] hub 2-0:1.0: 8 ports detected
[  308.325378][T17924] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  308.357434][T17926] hub 2-0:1.0: USB hub found
[  308.372471][T17926] hub 2-0:1.0: 8 ports detected
[  308.412148][T17924] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  308.445239][T17935] __nla_validate_parse: 3 callbacks suppressed
[  308.445256][T17935] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5393'.
[  308.445550][T17931] loop1: detected capacity change from 0 to 2048
[  308.490869][T17924] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  308.503702][T17940] ip6gretap0: entered promiscuous mode
[  308.509512][T17940] ip6gretap0: entered allmulticast mode
[  308.516164][T17935] sch_tbf: burst 88 is lower than device veth15 mtu (1514) !
[  308.525857][T17931] EXT4-fs (loop1): failed to initialize system zone (-117)
[  308.541366][T17931] EXT4-fs (loop1): mount failed
[  308.548008][T17924] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  308.618223][T17924] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  308.631138][T17924] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  308.646425][T17924] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  308.662065][T17924] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  308.675504][T17953] ªªªªªª: renamed from vlan0 (while UP)
[  308.699469][T17950] netlink: 'syz.1.5401': attribute type 4 has an invalid length.
[  308.707979][T17950] netlink: 'syz.1.5401': attribute type 4 has an invalid length.
[  308.715941][T17950] netlink: 'syz.1.5401': attribute type 8 has an invalid length.
[  308.723712][T17950] netlink: 'syz.1.5401': attribute type 9 has an invalid length.
[  308.731486][T17950] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5401'.
[  308.809538][T17965] loop0: detected capacity change from 0 to 1024
[  308.817741][T17965] EXT4-fs: Ignoring removed nomblk_io_submit option
[  308.889526][T17965] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  308.930716][T17965] EXT4-fs (loop0): shut down requested (0)
[  308.994025][T17980] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  309.003766][T17980] 
€Â: renamed from syzkaller0
[  309.010804][T17980] tipc: Disabling bearer <eth:syzkaller0>
[  309.026996][T17986] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5414'.
[  309.057505][T17988] loop1: detected capacity change from 0 to 764
[  309.128950][T17997] netlink: 'syz.1.5419': attribute type 7 has an invalid length.
[  309.137645][T17997] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5419'.
[  309.147867][ T9996] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  309.172735][T17998] Process accounting resumed
[  309.256398][T18010] netlink: 'syz.1.5425': attribute type 4 has an invalid length.
[  309.266336][ T3373] lo speed is unknown, defaulting to 1000
[  309.272129][ T3373] syz0: Port: 1 Link DOWN
[  309.274891][T18008] lo speed is unknown, defaulting to 1000
[  309.654241][ T6138] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  309.831242][T18043] netlink: 'syz.0.5437': attribute type 5 has an invalid length.
[  309.901618][T18046] loop8: detected capacity change from 0 to 1024
[  309.911203][T18046] EXT4-fs: Ignoring removed orlov option
[  309.917073][T18046] EXT4-fs: Ignoring removed nomblk_io_submit option
[  309.934072][T18046] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  309.952386][T18046] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  310.012698][T18046] loop8: detected capacity change from 0 to 1024
[  310.026717][T18046] EXT4-fs: Ignoring removed orlov option
[  310.048759][T18046] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  310.258379][T18058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  310.267542][   T29] kauditd_printk_skb: 223 callbacks suppressed
[  310.267558][   T29] audit: type=1400 audit(1744872991.748:11379): avc:  denied  { ioctl } for  pid=18057 comm="syz.2.5442" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  310.306490][T18058] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  310.316354][T18065] loop1: detected capacity change from 0 to 2048
[  310.357939][T18065] Alternate GPT is invalid, using primary GPT.
[  310.364467][T18065]  loop1: p2 p3 p7
[  310.747809][   T29] audit: type=1400 audit(1744872992.200:11380): avc:  denied  { write } for  pid=18080 comm="syz.7.5452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  310.768614][   T29] audit: type=1400 audit(1744872992.200:11381): avc:  denied  { nlmsg_write } for  pid=18080 comm="syz.7.5452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  310.931505][ T4225] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  310.994296][T18092] SELinux: syz.0.5458 (18092) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[  310.995490][   T29] audit: type=1400 audit(1744872992.431:11382): avc:  denied  { setopt } for  pid=18094 comm="syz.7.5459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  311.028096][   T29] audit: type=1400 audit(1744872992.431:11383): avc:  denied  { ioctl } for  pid=18094 comm="syz.7.5459" path="socket:[59378]" dev="sockfs" ino=59378 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  311.061289][T18095] smc: net device bond0 applied user defined pnetid SYZ2
[  311.074078][T18095] smc: net device bond0 erased user defined pnetid SYZ2
[  311.093914][T18101] wg2: entered promiscuous mode
[  311.098917][T18101] wg2: entered allmulticast mode
[  311.133555][T18103] loop1: detected capacity change from 0 to 512
[  311.179774][T18103] loop1: detected capacity change from 0 to 128
[  311.219952][   T29] audit: type=1400 audit(1744872992.634:11384): avc:  denied  { bind } for  pid=18108 comm="syz.2.5465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  311.248752][T18103] FAT-fs (loop1): Directory bread(block 32) failed
[  311.256105][T18103] FAT-fs (loop1): Directory bread(block 33) failed
[  311.258444][ T3810] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  311.262810][T18103] FAT-fs (loop1): Directory bread(block 34) failed
[  311.280901][T18103] FAT-fs (loop1): Directory bread(block 35) failed
[  311.287761][T18103] FAT-fs (loop1): Directory bread(block 36) failed
[  311.295377][T18103] FAT-fs (loop1): Directory bread(block 37) failed
[  311.302655][T18103] FAT-fs (loop1): Directory bread(block 38) failed
[  311.310520][T18103] FAT-fs (loop1): Directory bread(block 39) failed
[  311.321511][T18103] FAT-fs (loop1): Directory bread(block 40) failed
[  311.328431][T18103] FAT-fs (loop1): Directory bread(block 41) failed
[  311.357464][   T29] audit: type=1400 audit(1744872992.763:11385): avc:  denied  { mount } for  pid=18102 comm="syz.1.5460" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[  311.468294][   T29] audit: type=1400 audit(1744872992.864:11386): avc:  denied  { unmount } for  pid=9936 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[  311.539333][   T29] audit: type=1400 audit(1744872992.929:11387): avc:  denied  { read } for  pid=18124 comm="syz.8.5471" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  311.562394][   T29] audit: type=1400 audit(1744872992.929:11388): avc:  denied  { open } for  pid=18124 comm="syz.8.5471" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  311.690176][T18131] loop1: detected capacity change from 0 to 128
[  311.844367][T18137] netlink: 'syz.0.5475': attribute type 4 has an invalid length.
[  311.852344][T18137] netlink: 'syz.0.5475': attribute type 4 has an invalid length.
[  311.860202][T18137] netlink: 'syz.0.5475': attribute type 8 has an invalid length.
[  311.868752][T18137] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5475'.
[  312.027305][T18153] loop0: detected capacity change from 0 to 512
[  312.027770][T18155] loop1: detected capacity change from 0 to 512
[  312.041813][T18153] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  312.052979][T18153] EXT4-fs (loop0): orphan cleanup on readonly fs
[  312.060540][T18153] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.5482: Failed to acquire dquot type 1
[  312.073502][T18155] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  312.074036][T18153] EXT4-fs (loop0): 1 truncate cleaned up
[  312.092721][T18155] ext4 filesystem being mounted at /590/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  312.108645][T18153] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  312.135198][T18153] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  312.224406][ T9936] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  312.414381][T18171] loop0: detected capacity change from 0 to 128
[  312.579155][T18171] bio_check_eod: 117 callbacks suppressed
[  312.579173][T18171] syz.0.5489: attempt to access beyond end of device
[  312.579173][T18171] loop0: rw=2049, sector=145, nr_sectors = 896 limit=128
[  312.629560][ T3810] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  312.688411][T18189] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  312.800371][T18171] syz.0.5489: attempt to access beyond end of device
[  312.800371][T18171] loop0: rw=524288, sector=145, nr_sectors = 224 limit=128
[  312.838223][T18171] syz.0.5489: attempt to access beyond end of device
[  312.838223][T18171] loop0: rw=0, sector=145, nr_sectors = 8 limit=128
[  312.869262][T18177] syz.0.5489: attempt to access beyond end of device
[  312.869262][T18177] loop0: rw=0, sector=145, nr_sectors = 8 limit=128
[  312.883778][T18171] syz.0.5489: attempt to access beyond end of device
[  312.883778][T18171] loop0: rw=0, sector=145, nr_sectors = 8 limit=128
[  312.897789][T18191] loop8: detected capacity change from 0 to 8192
[  312.900705][T18177] syz.0.5489: attempt to access beyond end of device
[  312.900705][T18177] loop0: rw=0, sector=145, nr_sectors = 8 limit=128
[  312.918515][T18171] syz.0.5489: attempt to access beyond end of device
[  312.918515][T18171] loop0: rw=0, sector=145, nr_sectors = 8 limit=128
[  312.931892][T18177] syz.0.5489: attempt to access beyond end of device
[  312.931892][T18177] loop0: rw=0, sector=145, nr_sectors = 8 limit=128
[  313.009685][T18199] loop8: detected capacity change from 0 to 512
[  313.029889][T18199] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  313.042789][T18199] ext4 filesystem being mounted at /1093/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  313.126755][T18210] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5502'.
[  313.156938][T18207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  313.165617][T18207] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  313.184019][ T4225] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  313.280752][T18223] SELinux: syz.8.5506 (18223) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[  313.746739][T18247] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5516'.
[  313.836622][T18253] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5518'.
[  313.921770][T18259] loop0: detected capacity change from 0 to 512
[  313.933865][T18259] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  313.946098][T18259] EXT4-fs (loop0): 1 truncate cleaned up
[  313.956613][T18259] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  314.019918][ T6138] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  314.045088][T18262] loop0: detected capacity change from 0 to 128
[  314.064238][T18262] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  314.077603][T18262] ext4 filesystem being mounted at /931/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  314.149910][ T6138] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  314.627216][T18287] loop0: detected capacity change from 0 to 512
[  314.639842][T18287] journal_path: Lookup failure for './file0/../file0'
[  314.646953][T18287] EXT4-fs: error: could not find journal device path
[  314.754612][T18298] loop8: detected capacity change from 0 to 512
[  314.778837][T18298] EXT4-fs error (device loop8): ext4_expand_extra_isize_ea:2798: inode #11: comm syz.8.5535: corrupted xattr block 95: invalid header
[  314.856581][T18298] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.5535: bg 0: block 7: invalid block bitmap
[  315.060863][T18311] loop1: detected capacity change from 0 to 128
[  315.097011][T18298] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  315.114558][T18298] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2962: inode #11: comm syz.8.5535: corrupted xattr block 95: invalid header
[  315.142223][T18313] loop0: detected capacity change from 0 to 1024
[  315.152751][T18313] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  315.187782][T18313] EXT4-fs error (device loop0): ext4_map_blocks:709: inode #3: block 1: comm syz.0.5543: lblock 1 mapped to illegal pblock 1 (length 1)
[  315.190610][T18298] EXT4-fs warning (device loop8): ext4_evict_inode:279: xattr delete (err -117)
[  315.201917][T18313] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.5543: Failed to acquire dquot type 0
[  315.228144][T18298] EXT4-fs (loop8): 1 orphan inode deleted
[  315.228501][T18313] EXT4-fs error (device loop0): ext4_free_blocks:6587: comm syz.0.5543: Freeing blocks not in datazone - block = 0, count = 4096
[  315.234342][T18298] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  315.265526][T18311] syz.1.5541: attempt to access beyond end of device
[  315.265526][T18311] loop1: rw=2049, sector=153, nr_sectors = 8 limit=128
[  315.279326][T18311] syz.1.5541: attempt to access beyond end of device
[  315.279326][T18311] loop1: rw=2049, sector=169, nr_sectors = 8 limit=128
[  315.302861][T18313] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.5543: Invalid inode bitmap blk 0 in block_group 0
[  315.335899][T18313] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem
[  315.335994][T10005] ==================================================================
[  315.352633][T10005] BUG: KCSAN: data-race in data_alloc / prb_reserve
[  315.359238][T10005] 
[  315.361565][T10005] write to 0xffffffff8686dc88 of 8 bytes by task 18313 on cpu 1:
[  315.369294][T10005]  data_alloc+0x290/0x2c0
[  315.373640][T10005]  prb_reserve+0x86a/0xb80
[  315.378070][T10005]  vprintk_store+0x552/0x860
[  315.382689][T10005]  vprintk_emit+0x1a0/0x6c0
[  315.387218][T10005]  vprintk_default+0x26/0x30
[  315.391836][T10005]  vprintk+0x1d/0x30
[  315.395778][T10005]  _printk+0x7f/0xb0
[  315.399699][T10005]  __ext4_std_error+0x378/0x390
[  315.404578][T10005]  ext4_free_inode+0x759/0x840
[  315.409397][T10005]  ext4_evict_inode+0xb42/0xdf0
[  315.414289][T10005]  evict+0x2de/0x550
[  315.418251][T10005]  iput+0x42a/0x5b0
[  315.422073][T10005]  ext4_process_orphan+0x1a9/0x1c0
[  315.427208][T10005]  ext4_orphan_cleanup+0x69c/0x9f0
[  315.432348][T10005]  ext4_fill_super+0x3215/0x3580
[  315.437301][T10005]  get_tree_bdev_flags+0x2b4/0x330
[  315.442472][T10005]  get_tree_bdev+0x1f/0x30
[  315.443503][ T9996] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  315.446913][T10005]  ext4_get_tree+0x1c/0x30
[  315.446939][T10005]  vfs_get_tree+0x56/0x1e0
[  315.457831][T18313] EXT4-fs (loop0): 1 orphan inode deleted
[  315.461975][T10005]  do_new_mount+0x246/0x6b0
[  315.477072][T10005]  path_mount+0x49b/0xb30
[  315.480913][T18313] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  315.481452][T10005]  __se_sys_mount+0x28f/0x2e0
[  315.498571][T10005]  __x64_sys_mount+0x67/0x80
[  315.503202][T10005]  x64_sys_call+0xd11/0x2e10
[  315.507864][T10005]  do_syscall_64+0xc9/0x1c0
[  315.512457][T10005]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  315.518369][T10005] 
[  315.520783][T10005] read to 0xffffffff8686dc88 of 8 bytes by task 10005 on cpu 0:
[  315.528502][T10005]  prb_reserve+0x239/0xb80
[  315.532932][T10005]  vprintk_store+0x552/0x860
[  315.537627][T10005]  vprintk_emit+0x1a0/0x6c0
[  315.542140][T10005]  vprintk_default+0x26/0x30
[  315.546754][T10005]  vprintk+0x1d/0x30
[  315.550668][T10005]  _printk+0x7f/0xb0
[  315.554575][T10005]  __ext4_error_inode+0x31e/0x410
[  315.559621][T10005]  ext4_map_blocks+0x9ed/0xd00
[  315.564392][T10005]  ext4_getblk+0x121/0x550
[  315.568814][T10005]  ext4_bread+0x2c/0x110
[  315.573066][T10005]  ext4_quota_read+0x108/0x1d0
[  315.577843][T10005]  remove_tree+0x131/0x11d0
[  315.582359][T10005]  qtree_release_dquot+0x17c/0x190
[  315.587495][T10005]  v2_release_dquot+0x99/0xd0
[  315.592204][T10005]  dquot_release+0x11d/0x240
[  315.596809][T10005]  ext4_release_dquot+0x1ed/0x480
[  315.601864][T10005]  quota_release_workfn+0x254/0x540
[  315.607075][T10005]  process_scheduled_works+0x4de/0xa20
[  315.612564][T10005]  worker_thread+0x52c/0x710
[  315.617165][T10005]  kthread+0x4b7/0x540
[  315.621250][T10005]  ret_from_fork+0x4b/0x60
[  315.625674][T10005]  ret_from_fork_asm+0x1a/0x30
[  315.630456][T10005] 
[  315.632870][T10005] value changed: 0xfffffffffffcc0a0 -> 0x000000000007daa0
[  315.639983][T10005] 
[  315.642304][T10005] Reported by Kernel Concurrency Sanitizer on:
[  315.648461][T10005] CPU: 0 UID: 0 PID: 10005 Comm: kworker/u8:64 Not tainted 6.15.0-rc2-syzkaller-00087-gcfb2e2c57aef #0 PREEMPT(voluntary) 
[  315.661226][T10005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  315.671474][T10005] Workqueue: events_unbound quota_release_workfn
[  315.677818][T10005] ==================================================================
[  315.335847][T10005] EXT4-fs error (device loop0): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:64: lblock 1 mapped to illegal pblock 1 (length 1)
[  315.686274][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  315.723597][   T29] kauditd_printk_skb: 333 callbacks suppressed
[  315.723616][   T29] audit: type=1400 audit(1744872996.778:11718): avc:  denied  { mount } for  pid=18312 comm="syz.0.5543" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  315.751774][   T29] audit: type=1400 audit(1744872996.778:11719): avc:  denied  { read write } for  pid=18312 comm="syz.0.5543" name="loop0" dev="devtmpfs" ino=563 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  315.775143][   T29] audit: type=1400 audit(1744872996.778:11720): avc:  denied  { open } for  pid=18312 comm="syz.0.5543" path="/dev/loop0" dev="devtmpfs" ino=563 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  315.839650][   T29] audit: type=1400 audit(1744872996.796:11721): avc:  denied  { remount } for  pid=18312 comm="syz.0.5543" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  315.860285][   T29] audit: type=1400 audit(1744872996.879:11722): avc:  denied  { write } for  pid=18297 comm="syz.8.5535" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  315.882186][   T29] audit: type=1400 audit(1744872996.879:11723): avc:  denied  { add_name } for  pid=18297 comm="syz.8.5535" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  315.903374][   T29] audit: type=1400 audit(1744872996.879:11724): avc:  denied  { create } for  pid=18297 comm="syz.8.5535" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  315.923933][   T29] audit: type=1400 audit(1744872996.879:11725): avc:  denied  { read write } for  pid=18297 comm="syz.8.5535" name="file1" dev="loop8" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  315.947051][   T29] audit: type=1400 audit(1744872996.879:11726): avc:  denied  { open } for  pid=18297 comm="syz.8.5535" path="/1101/file0/file1" dev="loop8" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  315.970431][   T29] audit: type=1400 audit(1744872996.879:11727): avc:  denied  { create } for  pid=18297 comm="syz.8.5535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  315.991415][T10005] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:64: Failed to release dquot type 0
[  316.017219][ T4225] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  316.034198][T18313] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  316.060731][ T6138] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  317.468957][ T9999] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  321.629260][T10005] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  323.015709][ T3810] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  323.709630][ T9999] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration