last executing test programs:
3m52.580207327s ago: executing program 1 (id=13):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000600000001f400000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000203850000a26939d60000000000000f0800010001"], 0x1c}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', <r3=>0x0})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xe, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='mm_page_free\x00', r4, 0x0, 0x2}, 0x18)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000200)={[{@max_batch_time={'max_batch_time', 0x3d, 0x358}}, {@resuid}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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")
r5 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r7)
ftruncate(r5, 0x2007ffc)
sendfile(r5, r5, 0x0, 0x3fffffffc00)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r8, 0x0, 0x6}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
epoll_create1(0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=@getchain={0x6c, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x9}}, [{0x8, 0xb, 0x10001}, {0x8, 0xb, 0xec}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x1}, {0x8}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x2}]}, 0x6c}}, 0x804)
r9 = memfd_create(&(0x7f00000001c0)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xd9\x19\x17\xb0\xed|\xb3\xc2\x017h\xe9kL\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f2\xf7]#\xed,\xc7\x03\x00\x00\x00\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4R$\xaa\x00U\x92\xd2\x99\xb8<X\xfa\xdd\x8a6\xa1\x82\xf7r\xd8z\x85\x8do\xa5\xed\xd4\xbc8\xfb\x16\x8e\x8b-W\xd4\xc9\xbc\x94CR[Du8U^\xf2tl8\xfe\xd0\x94\xfe\xf5\x1c+\x00U\te\xfa6\xca\xb9\xb4Q\xd9\xee\r6\x861h{\xc7z\'F\xc7\x91\x06x\xe1`\xf1:\xbd+\xd5\f\xb2\xce\xa4\x06\x90\x90\x9b\x1d\xcaa\xf7\x8f\x9e\x80\x93\xafT\xdfl\xec\xc6\x8e\x96', 0x5)
fsetxattr$security_selinux(r9, &(0x7f0000000480), &(0x7f00000004c0)='system_u:object_r:hwdata_t:s0\x00', 0x1a, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x31, 0x2e, &(0x7f0000000c40)=ANY=[], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket$inet_sctp(0x2, 0x5, 0x84)
r10 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r10, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'lo\x00', 0x5}, 0x18)
3m50.641027259s ago: executing program 1 (id=24):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000446ae66d3ba0885e41ee3b10a01cfb2c14008a12c5a6983704edd7d8620981ce0ac8af39ce7b456bdee3a756bf2baf6349e44b9357fb13baee4007459cd4b25fbf9b794265d9d535c19187222f4db7ba340f239c4c8327a473bf194f6e051f850f987faceccd3b6f2e87886e2067e1755b3932b05332c2837f61b6f3c049a154a181fa619e5e669b5f32a681a6e098378f6a87cc0e37ab6d647faf6a60e15d9d7576a5a3d89793af68350d8b07c0d682399fb6", @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x1100)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff)
r3 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)={'team0\x00', <r4=>0x0})
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000200)='kfree_skb\x00', r5}, 0x18)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00', r6}, 0x10)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$tipc(r7, &(0x7f0000004440)={0x0, 0x0, 0x0}, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000e40)={0xd0, r3, 0x405, 0x70bd27, 0x25dfdbfc, {}, [{{0x8, 0x1, r4}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8003}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}]}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084)
r8 = socket$netlink(0x10, 0x3, 0x10)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r11 = getpid()
syz_pidfd_open(r11, 0x0)
bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
3m50.388772614s ago: executing program 1 (id=27):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1e000000000000000500000006c8243f0118d82e5a0667dfd98e78b31ec2e77db3644d232cf0afdfe28a2f24b754a92e1d33829c30a9e75a7d19b6bac035af4afa2ae19d2773097e4c35a9f5e49d3a1eef5c9e663a94cd8c86bcafeaa26ef59494fd77f187fd445a6a1dea4f690d89f04408284440ad0000"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000001001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1)
r2 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x3, 0x0, @mcast1}}}, 0x88)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x0, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x4)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000000906010100000000000000000000ffff200007800c00018008000140e000000208000a400000000905000300020000000900020073797a31000000000500010007"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r3, 0x0, 0x20000000}, 0x18)
r4 = timerfd_create(0x2, 0x0)
timerfd_settime(r4, 0x3, &(0x7f0000000380)={{0x0, 0x989680}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00'}, 0x10)
chmod(&(0x7f0000000340)='./file1\x00', 0x0)
epoll_create1(0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0)
r5 = io_uring_setup(0x648d, &(0x7f0000000200)={0x0, 0x40, 0x100, 0x2, 0x328})
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x18, &(0x7f0000000000), 0x1)
r6 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000500)={'team0\x00', <r7=>0x0})
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r7, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x3ff, 0x1ff, 0x7ff, 0x6}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000)
3m50.349427975s ago: executing program 1 (id=28):
r0 = socket$inet6(0xa, 0x3, 0x8)
sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x28}}], 0x1, 0x20000000)
syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbb8, &(0x7f00000017c0)="$eJzs3M1rXFUbAPDn3kymaZv3nfTlRawbIyItiNOkkmKLYCsVNy4E3QoN6aSETD9IIjVpFhP9B0RdC24EtSgu7LobRbdutN0qLoQisVEQ0cidjyQ2mTS1M70x/f3gzD3nnpl5nmcuM/cemJkA7luD2U0asT8iTiURpeb+NCKK9V5fRK1xv6XF+bFfF+fHklhefumnJJKIuLk4P9Z6rqS53dsc9EXE188m8b831sednp2bHK1WK1PN8aGZsxcOTc/OPTFxdvRM5Uzl3PCRp0YOjxwZOjrSsVp/++74lV8eef6H2u8f/nH557ffT+J49Dfn1tbRKYMxuPKarFWIiNFOB8tJT7OetXUmhds8KO1yUgAAtJWuuYZ7IErRE6sXb6X4/JtckwMAAAA6YrknYhkAAADY4RLrfwAAANjhWt8DuLk4P9Zq+X4j4d66cSIiBhr1LzVbY6YQtfq2L3ojYs/NJNb+rDVpPOyuDUbE99ePfpK16NLvkDdTW4iIBzc6/km9/oH6r7jX159GxFAH4g/eMv431X+8A/Hzrh+A+9PVE40T2frzX7py/RMbnP8KG5y7/om8z3+t67+lddd/q/X3tLn+e3GLMS598O7FdnNZ/U9fee7jVsviZ9u7KuoO3FiIeKiwUf3JSv1Jm/pPbTFG6c+LlXZzede//F7Egdi4/pZk8/8nOjQ+Ua0MNW43jLHw1chH7eLnXX92/Pe0qb/1/0/tjv+FLcZ45eTJT9ftvL7a3bz+9Mdi8nK9V2zueW10ZmZqOKKYvLB+/+HNc2ndp/UcWf0HH938/b9R/dlnQq35OmRrgYXmNhu/fkvMZy5f+qxdPq31X57H/3Sb47+2/i8L64//m1uM8dgXbx1sN7d2/Zu1LH5rLQwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALWlE9EeSllf6aVouR+yNiP/HnrR6fnrm8fHzr547nc1FDERvOj5RrQxFRKkxTrLxcL2/Oj58y/jJiNgXEe+UdtfH5bHz1dN5Fw8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCKvRHRH0lajog0IpZKaVou550VAAAA0HEDeScAAAAAdJ31PwAAAOx81v8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB02b6Hr15LIqJ2bHe9ZYrNud5cMwO6Lc07ASA3PXknAOSmkHcCQG7ucI3vcgF2oOQ2831tZ3Z1PBcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtq8D+69eSyKidmx3vWWKzbneXDMDui3NOwEgNz2bTRbuXR7AvectDvcva3wguc183+p9an+f2dW1nAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYfvrrLUnLEVFs7iuXI/4TEQPRm4xPVCtDEfHfiPi21LsrGw/nnDMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACdNz07NzlarVamsk4azc7KHp3VTtJ4xWrbJR+du+wUY1uksU07eX8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQh+nZucnRarUyNZ13JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDepmfnJker1cpUFzt51wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQH7+CgAA//9gfgp0")
r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073000000950a82f353a73ee4572b53b4e43dac8c7138593723e919b0b1384d81ba93a098e98e17b6a5bab6ec54ed4e9e73a422dbe4778ef56dd2a57bacf046aae6a5ae9da86e0f266015dc382f8e1bfa4e00a4d260c0607149a50af021c5193ac79f6a653bb39b152d04ac500d7a8c4468aa0ab38d214e97b13b18"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r3}, 0x9)
r4 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000140)={0x5, 0x1, 0xc, 0x2, @vifc_lcl_addr=@rand_addr=0x64010102, @broadcast}, 0x10)
setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, &(0x7f0000000040)=0x8, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYRES32=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10)
r6 = syz_open_dev$usbfs(&(0x7f0000000340), 0x800000001f7, 0x82)
r7 = dup(r6)
ioctl$USBDEVFS_CONTROL(r7, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x4, 0xf, 0x0, 0x2, 0x0})
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)
write$binfmt_register(r1, &(0x7f0000000140)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x2007, 0x3a, 'M', 0x3a, '\x84\xa3\xea\xd6O\x89|\xeb\x80\xf0\xe96\xf4`&\xd4E\xe7L\x82n;H\xd8\xdf\x9a, \\E\xd4\xab\x1ed', 0x3a, './file2', 0x3a, [0x46]}, 0x4b)
r8 = syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1258438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000))
r9 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRES64=r1, @ANYRESHEX=r9, @ANYRES8=r8], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r10}, &(0x7f0000000580), &(0x7f0000000540)}, 0x20)
r11 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r11, &(0x7f0000000180)={0x7, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020100090a000000007fffffff0000000200100000e9000000e9000000000000030005000000000002000000ac1414000000000000000000030006000000000002"], 0x50}}, 0x0)
sendmmsg(r11, &(0x7f0000000180), 0x40000000000007b, 0x4004)
3m50.150065828s ago: executing program 1 (id=31):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = syz_open_dev$loop(&(0x7f00000005c0), 0x9, 0x12d600)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x275a, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10)
write$binfmt_misc(r3, &(0x7f0000001000), 0xe09)
ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x1000, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0155aaffffffffffff0300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c559265406c09306003d8002000", [0x0, 0x2]}})
r6 = socket$rxrpc(0x21, 0x2, 0x2)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]})
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x10)
r8 = epoll_create1(0x0)
r9 = inotify_init1(0x0)
r10 = inotify_add_watch(r9, &(0x7f0000000200)='.\x00', 0x10000a0)
r11 = dup(r9)
inotify_rm_watch(r11, r10)
epoll_pwait(r8, &(0x7f0000000180)=[{}], 0x1, 0xffffffff, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r11, &(0x7f0000000140)={0x40002013})
recvfrom$rxrpc(r6, &(0x7f0000000580)=""/4096, 0x1000, 0x2141, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8}}, 0x24)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d)
r12 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00')
r13 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r13, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x20008001}, 0x0)
close_range(r12, 0xffffffffffffffff, 0x0)
mount_setattr(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x100, &(0x7f0000000100)={0xf0, 0x1000fa, 0x100000, {r12}}, 0x20)
3m48.078648452s ago: executing program 1 (id=38):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000480)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b708"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94)
creat(&(0x7f00000000c0)='./file0\x00', 0x48)
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000c5b647dadfa91f2791711e229234b7820000000000000000"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, @void, @value}, 0x94)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10)
ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000180)={{r4}, 0x2, 0x8001, 0x6})
r5 = dup(r1)
write$P9_RLERRORu(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
write$binfmt_elf64(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r5])
creat(&(0x7f0000000380)='./file0\x00', 0x80)
socket$netlink(0x10, 0x3, 0x0)
syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbb8, &(0x7f00000017c0)="$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")
r6 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r7 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0)
fallocate(r6, 0x0, 0x0, 0x1000f4)
io_setup(0x7d, &(0x7f0000000600)=<r8=>0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000001118110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x89a3, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf\xc8>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5<J\x1f\xba\xfc\x90(\x985\x93\xa8\xd4\xf0\xbdTy\x18\xc8\xa0\xbb\x99\x8c\xe0Q\xffCl\xbdX~3\xa1\xa2\xf4\xd9\xf7\xc7\xfb\xce\x959x\xfeW\r\xf0{\xcaT\xecp)=\x9d\xdfG8\xa1\xe3=\xa6\x00\x98\xc1\xb3\x91-\xab\'W\x8al?d<JN\xcb\xd4H\xb0_jO\xf3\x90\xe8/l\xdfg)\x8d#\xfdo\xa9L\xdeA*\xec\xa1\x14,\xe8\x8d^\xb9r=\xc0\x18\xd4\x11dU[Ry\xed\xd6\x97\x8a\xe8\xca\x99\x10\x8e\xc8P\xa3\xae/\xdaof\x06\x7f\xf7\x80$f\b\x92\xae\xeb\xdd\"\x89\xb8\xf0\xc3\b\x00\x00\x00\x00\a\xf6\xfc\x1d\xd4\x893\xeb)\xc1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00O!\xd2q\xda}\xe2\xa2\xfe\xfd)\\\xdf\x9aN\\\xaeyc\xe4g\xc0\x8a\n\v{\xa9H\\\xd1\x9d')
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r10}, 0x10)
r12 = socket$nl_route(0x10, 0x3, 0x0)
r13 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000040)={'lo\x00', <r14=>0x0})
sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c}}]}, 0x4c}}, 0x0)
io_submit(r8, 0x1, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r7, &(0x7f00000001c0)="96", 0x1, 0x0, 0x0, 0x0, r7}])
3m48.078064622s ago: executing program 32 (id=38):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000480)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b708"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94)
creat(&(0x7f00000000c0)='./file0\x00', 0x48)
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000c5b647dadfa91f2791711e229234b7820000000000000000"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, @void, @value}, 0x94)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10)
ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000180)={{r4}, 0x2, 0x8001, 0x6})
r5 = dup(r1)
write$P9_RLERRORu(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
write$binfmt_elf64(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r5])
creat(&(0x7f0000000380)='./file0\x00', 0x80)
socket$netlink(0x10, 0x3, 0x0)
syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbb8, &(0x7f00000017c0)="$eJzs3M1rXFUbAPDn3kymaZv3nfTlRawbIyItiNOkkmKLYCsVNy4E3QoN6aSETD9IIjVpFhP9B0RdC24EtSgu7LobRbdutN0qLoQisVEQ0cidjyQ2mTS1M70x/f3gzD3nnpl5nmcuM/cemJkA7luD2U0asT8iTiURpeb+NCKK9V5fRK1xv6XF+bFfF+fHklhefumnJJKIuLk4P9Z6rqS53dsc9EXE188m8b831sednp2bHK1WK1PN8aGZsxcOTc/OPTFxdvRM5Uzl3PCRp0YOjxwZOjrSsVp/++74lV8eef6H2u8f/nH557ffT+J49Dfn1tbRKYMxuPKarFWIiNFOB8tJT7OetXUmhds8KO1yUgAAtJWuuYZ7IErRE6sXb6X4/JtckwMAAAA6YrknYhkAAADY4RLrfwAAANjhWt8DuLk4P9Zq+X4j4d66cSIiBhr1LzVbY6YQtfq2L3ojYs/NJNb+rDVpPOyuDUbE99ePfpK16NLvkDdTW4iIBzc6/km9/oH6r7jX159GxFAH4g/eMv431X+8A/Hzrh+A+9PVE40T2frzX7py/RMbnP8KG5y7/om8z3+t67+lddd/q/X3tLn+e3GLMS598O7FdnNZ/U9fee7jVsviZ9u7KuoO3FiIeKiwUf3JSv1Jm/pPbTFG6c+LlXZzede//F7Egdi4/pZk8/8nOjQ+Ua0MNW43jLHw1chH7eLnXX92/Pe0qb/1/0/tjv+FLcZ45eTJT9ftvL7a3bz+9Mdi8nK9V2zueW10ZmZqOKKYvLB+/+HNc2ndp/UcWf0HH938/b9R/dlnQq35OmRrgYXmNhu/fkvMZy5f+qxdPq31X57H/3Sb47+2/i8L64//m1uM8dgXbx1sN7d2/Zu1LH5rLQwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALWlE9EeSllf6aVouR+yNiP/HnrR6fnrm8fHzr547nc1FDERvOj5RrQxFRKkxTrLxcL2/Oj58y/jJiNgXEe+UdtfH5bHz1dN5Fw8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCKvRHRH0lajog0IpZKaVou550VAAAA0HEDeScAAAAAdJ31PwAAAOx81v8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB02b6Hr15LIqJ2bHe9ZYrNud5cMwO6Lc07ASA3PXknAOSmkHcCQG7ucI3vcgF2oOQ2831tZ3Z1PBcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtq8D+69eSyKidmx3vWWKzbneXDMDui3NOwEgNz2bTRbuXR7AvectDvcva3wguc183+p9an+f2dW1nAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYfvrrLUnLEVFs7iuXI/4TEQPRm4xPVCtDEfHfiPi21LsrGw/nnDMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACdNz07NzlarVamsk4azc7KHp3VTtJ4xWrbJR+du+wUY1uksU07eX8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQh+nZucnRarUyNZ13JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDepmfnJker1cpUFzt51wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQH7+CgAA//9gfgp0")
r6 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r7 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0)
fallocate(r6, 0x0, 0x0, 0x1000f4)
io_setup(0x7d, &(0x7f0000000600)=<r8=>0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000001118110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x89a3, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf\xc8>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5<J\x1f\xba\xfc\x90(\x985\x93\xa8\xd4\xf0\xbdTy\x18\xc8\xa0\xbb\x99\x8c\xe0Q\xffCl\xbdX~3\xa1\xa2\xf4\xd9\xf7\xc7\xfb\xce\x959x\xfeW\r\xf0{\xcaT\xecp)=\x9d\xdfG8\xa1\xe3=\xa6\x00\x98\xc1\xb3\x91-\xab\'W\x8al?d<JN\xcb\xd4H\xb0_jO\xf3\x90\xe8/l\xdfg)\x8d#\xfdo\xa9L\xdeA*\xec\xa1\x14,\xe8\x8d^\xb9r=\xc0\x18\xd4\x11dU[Ry\xed\xd6\x97\x8a\xe8\xca\x99\x10\x8e\xc8P\xa3\xae/\xdaof\x06\x7f\xf7\x80$f\b\x92\xae\xeb\xdd\"\x89\xb8\xf0\xc3\b\x00\x00\x00\x00\a\xf6\xfc\x1d\xd4\x893\xeb)\xc1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00O!\xd2q\xda}\xe2\xa2\xfe\xfd)\\\xdf\x9aN\\\xaeyc\xe4g\xc0\x8a\n\v{\xa9H\\\xd1\x9d')
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r10}, 0x10)
r12 = socket$nl_route(0x10, 0x3, 0x0)
r13 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000040)={'lo\x00', <r14=>0x0})
sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c}}]}, 0x4c}}, 0x0)
io_submit(r8, 0x1, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r7, &(0x7f00000001c0)="96", 0x1, 0x0, 0x0, 0x0, r7}])
3m8.270896463s ago: executing program 0 (id=722):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xa}}})
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}})
3m8.270455903s ago: executing program 0 (id=723):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000030000005800018044000400200001000a00000000000000fe800000000000000000000000000010f8000000200002000a00000000000000ff010000000800000000000000000001000000000d0001007564703a73"], 0x6c}}, 0x0)
3m8.230533854s ago: executing program 0 (id=725):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000780), r0)
sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r1, 0x1, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c044}, 0x4)
3m8.214704305s ago: executing program 0 (id=726):
capset(&(0x7f00000001c0)={0x19980330}, &(0x7f0000000200)={0x1, 0x7, 0x2, 0x1, 0xce5, 0xbc7})
r0 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x0)
ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, 0x0)
3m8.192854755s ago: executing program 0 (id=737):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x802, &(0x7f0000000180)={[{@noblock_validity}, {@lazytime}, {@minixdf}, {@errors_remount}]}, 0x1, 0x7a3, &(0x7f00000001c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20)
3m8.162594025s ago: executing program 0 (id=728):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000a68e00000000000000001811000077835077674a6d755498b684c410912811bf5eb735cda31986c2f8", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pK \x00'}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r1}, 0x10)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x800)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000180)={0x80, 0x2a, 0x3, 0xfffffffc, 0x1})
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file2\x00', 0x14552, &(0x7f0000000080)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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")
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat(0xffffffffffffff9c, 0x0, 0x141042, 0x0)
pwritev2(r3, &(0x7f0000000580)=[{&(0x7f0000000400)="ba", 0x1}], 0x1, 0xe7b, 0x5, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4842, 0x1d7)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000f"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xe, &(0x7f0000000700)={[{@nolazytime}, {@init_itable_val={'init_itable', 0x3d, 0x7fffffff}}, {@debug}, {@lazytime}, {@nombcache}, {@noload}]}, 0x3, 0x440, &(0x7f0000000cc0)="$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")
r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r7, 0x8004587d, &(0x7f0000000140)={0x2, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200)
openat$cgroup_devices(r6, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0x84}, 0x18)
lsetxattr$security_capability(&(0x7f0000000180)='./file1\x00', &(0x7f0000000200), &(0x7f0000000340)=@v2={0x2000000, [{0x3f8, 0x7}, {0x7d3, 0x7fffffff}]}, 0x14, 0x1)
2m53.128363345s ago: executing program 33 (id=728):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000a68e00000000000000001811000077835077674a6d755498b684c410912811bf5eb735cda31986c2f8", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pK \x00'}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r1}, 0x10)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x800)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000180)={0x80, 0x2a, 0x3, 0xfffffffc, 0x1})
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file2\x00', 0x14552, &(0x7f0000000080)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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")
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat(0xffffffffffffff9c, 0x0, 0x141042, 0x0)
pwritev2(r3, &(0x7f0000000580)=[{&(0x7f0000000400)="ba", 0x1}], 0x1, 0xe7b, 0x5, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4842, 0x1d7)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000f"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xe, &(0x7f0000000700)={[{@nolazytime}, {@init_itable_val={'init_itable', 0x3d, 0x7fffffff}}, {@debug}, {@lazytime}, {@nombcache}, {@noload}]}, 0x3, 0x440, &(0x7f0000000cc0)="$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")
r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r7, 0x8004587d, &(0x7f0000000140)={0x2, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200)
openat$cgroup_devices(r6, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0x84}, 0x18)
lsetxattr$security_capability(&(0x7f0000000180)='./file1\x00', &(0x7f0000000200), &(0x7f0000000340)=@v2={0x2000000, [{0x3f8, 0x7}, {0x7d3, 0x7fffffff}]}, 0x14, 0x1)
26.336750112s ago: executing program 5 (id=4644):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x2}, 0x18)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r2 = io_uring_setup(0x931, &(0x7f0000000000)={0x0, 0x0, 0x80, 0x1, 0x328})
io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f00000006c0)={&(0x7f0000001000)={[{0x0, 0x0, 0x10}, {0x0}, {0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x2}]}, 0x4, 0x1}, 0x1)
26.285328883s ago: executing program 5 (id=4645):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x80000000000}, 0x18)
setreuid(0xee01, 0xee01)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x2}, 0x50)
syz_io_uring_setup(0x2c0c, &(0x7f0000000400)={0x0, 0x0, 0x4002}, 0x0, 0x0)
26.285005183s ago: executing program 5 (id=4647):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x33, @loopback}, 0x1c)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}], 0x10)
sendto$inet6(r1, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
25.399101928s ago: executing program 5 (id=4685):
mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x83381a, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb8af, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000600)='kfree\x00', r0}, 0x18)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
25.398692098s ago: executing program 5 (id=4686):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000009c0)=ANY=[@ANYBLOB="e2890357e53eef425f40f9e970ca9a366f3e532924dc629d624c6b39f458d547cf08377e9a705d4ec490328089e90e597890800a5178bed5362265a71d4bfc67667ea905706ffefab1e469de4792ebadf138cb04f926a982f0d59e3bcf9658f24636ab7eb2964c25cafeb044824382bd8306cde0c4da34142d7f98e6d1bee4f6127f3e4b0f20a901dd25ad4b52604c37a6612702537f2932484a", @ANYRESHEX=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000000))
socketpair(0x29, 0x2, 0x0, &(0x7f0000000300))
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)=ANY=[], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x980}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000700)=0x4)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a04, 0x0, @perf_bp={0x0}, 0x1e005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x800}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
pipe(&(0x7f00000002c0)={<r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f0000000400), 0x0, 0xc)
25.199103611s ago: executing program 5 (id=4689):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x448, 0x0, 0x268, 0x300, 0x268, 0x268, 0x378, 0x460, 0x460, 0x378, 0x460, 0x9, 0x0, {[{{@uncond, 0x0, 0x240, 0x268, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x9}}}, @common=@unspec=@limit={{0x48}, {0xfff, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x2}}]}, @common=@unspec=@NFQUEUE2={0x28}}, {{@ipv6={@private2, @remote, [], [], 'ip6gretap0\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8)
25.198525381s ago: executing program 34 (id=4689):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x448, 0x0, 0x268, 0x300, 0x268, 0x268, 0x378, 0x460, 0x460, 0x378, 0x460, 0x9, 0x0, {[{{@uncond, 0x0, 0x240, 0x268, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x9}}}, @common=@unspec=@limit={{0x48}, {0xfff, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x2}}]}, @common=@unspec=@NFQUEUE2={0x28}}, {{@ipv6={@private2, @remote, [], [], 'ip6gretap0\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8)
17.786291934s ago: executing program 6 (id=4883):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000240)='sched_switch\x00', r1}, 0x18)
r2 = syz_open_procfs(0x0, &(0x7f00000023c0)='net/tcp\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f0000000080)=""/167, 0xa7}], 0x1)
17.641161317s ago: executing program 6 (id=4896):
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000440)='rseq_update\x00', r1}, 0x18)
rseq(&(0x7f0000000280)={0x0, 0x0, 0x0, 0x6}, 0x20, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000440)={[], [{@smackfsdef={'smackfsdef', 0x3d, '/dev/bsg\x00'}}, {@func={'func', 0x3d, 'MODULE_CHECK'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@subj_type={'subj_type', 0x3d, '}[-}'}}, {@obj_role={'obj_role', 0x3d, 'sched_switch\x00'}}, {@dont_appraise}, {@hash}, {@fsmagic={'fsmagic', 0x3d, 0x8000}}, {@pcr={'pcr', 0x3d, 0x2a}}]}, 0x81, 0x7a5, &(0x7f0000000f80)="$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")
17.43649383s ago: executing program 6 (id=4891):
r0 = gettid()
timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
readv(r1, &(0x7f0000001140)=[{&(0x7f0000000700)=""/206, 0xce}], 0x1)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
16.575639345s ago: executing program 6 (id=4934):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x83381a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
16.522097325s ago: executing program 6 (id=4936):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000a68e00000000000000001811000077835077674a6d755498b684c410912811bf5eb735cda31986c2f8", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pK \x00'}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r1}, 0x10)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x800)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000180)={0x80, 0x2a, 0x3, 0xfffffffc, 0x1})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file2\x00', 0x14552, &(0x7f0000000080)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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")
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat(0xffffffffffffff9c, 0x0, 0x141042, 0x0)
pwritev2(r3, &(0x7f0000000580)=[{&(0x7f0000000400)="ba", 0x1}], 0x1, 0xe7b, 0x5, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4842, 0x1d7)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000f"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xe, &(0x7f0000000700)={[{@nolazytime}, {@init_itable_val={'init_itable', 0x3d, 0x7fffffff}}, {@debug}, {@lazytime}, {@nombcache}, {@noload}]}, 0x3, 0x440, &(0x7f0000000cc0)="$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")
r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r7, 0x8004587d, &(0x7f0000000140)={0x2, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200)
openat$cgroup_devices(r6, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0x84}, 0x18)
lsetxattr$security_capability(&(0x7f0000000180)='./file1\x00', &(0x7f0000000200), &(0x7f0000000340)=@v2={0x2000000, [{0x3f8, 0x7}, {0x7d3, 0x7fffffff}]}, 0x14, 0x1)
16.25440393s ago: executing program 6 (id=4945):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
prctl$PR_SET_NAME(0xf, &(0x7f0000000680)='+}[@\x00[$oB\xfa=\xee\xc4F\xba\xed\x97')
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x5a, 0x1, 0x0, 0x0, 0x0, 0x210c, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaee}, 0x12345, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
r2 = syz_io_uring_setup(0x1f85, &(0x7f0000000340)={0x0, 0xbaf, 0x13580}, &(0x7f0000000100), &(0x7f0000000300))
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
wait4(r3, 0x0, 0x40000000, 0x0)
ppoll(&(0x7f0000000040)=[{r2, 0x1}], 0x1, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0)
r5 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10)
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x80, 0x0, 0x4, 0x43, @private2, @loopback={0xfec0ffff00000000, 0xffff8881114a4aa8}, 0x40, 0x0, 0x0, 0x6}})
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r4, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x40)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x520, 0x340, 0x25, 0x148, 0x0, 0x60, 0x488, 0x2a8, 0x2a8, 0x488, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x80ffffff, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@set={{0x40}}, @common=@unspec=@statistic={{0x38}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x580)
16.23180055s ago: executing program 35 (id=4945):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
prctl$PR_SET_NAME(0xf, &(0x7f0000000680)='+}[@\x00[$oB\xfa=\xee\xc4F\xba\xed\x97')
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x5a, 0x1, 0x0, 0x0, 0x0, 0x210c, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaee}, 0x12345, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
r2 = syz_io_uring_setup(0x1f85, &(0x7f0000000340)={0x0, 0xbaf, 0x13580}, &(0x7f0000000100), &(0x7f0000000300))
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
wait4(r3, 0x0, 0x40000000, 0x0)
ppoll(&(0x7f0000000040)=[{r2, 0x1}], 0x1, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0)
r5 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10)
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x80, 0x0, 0x4, 0x43, @private2, @loopback={0xfec0ffff00000000, 0xffff8881114a4aa8}, 0x40, 0x0, 0x0, 0x6}})
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r4, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x40)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x520, 0x340, 0x25, 0x148, 0x0, 0x60, 0x488, 0x2a8, 0x2a8, 0x488, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x80ffffff, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@set={{0x40}}, @common=@unspec=@statistic={{0x38}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x580)
1.304414598s ago: executing program 2 (id=5532):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {}, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0x44c, 0x0, 0x4}, "dbf1f48d"}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000800)
1.293898048s ago: executing program 7 (id=5534):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x553, &(0x7f0000001080)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104)
fallocate(r1, 0x10, 0x4000, 0x8000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
fallocate(r2, 0x0, 0x0, 0x8000c62)
1.16403715s ago: executing program 2 (id=5539):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20)
r2 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x2, @broadcast, 'veth1_to_batadv\x00'}}, 0x1e)
connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x0, @random="7c9ab5135269", 'pim6reg0\x00'}}, 0x1e)
1.16326705s ago: executing program 2 (id=5541):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0)
sendfile(r3, r2, 0x0, 0x1)
1.097905832s ago: executing program 2 (id=5546):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0x6}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x10, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff3, 0x10}}, @TCA_MATCHALL_ACT={0x4}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0)
909.046615ms ago: executing program 2 (id=5550):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000700)="acc841985992b79554acfc02163bb0fb2bb293e68702bb40b6b870bde5700d", 0x1f}, {0x0}, {0x0}, {&(0x7f0000001000)="bd2f6aa36cea0e4bccda24dc5bd69ad762e998d923018ec9f30d63c7059c3c786069915581888508ff589f82857ff546b23b88d6bd61f1efc982005bf6c9abc4fe2caf32ef3ff105b69346a4d09afd7b0b8bd5f8c25f0eab84d8ad1b6576552ee2acc2ef0a9b0f9964d5705db134bdd9f261b7349aeede1c42e31b1082eec37b959d16afb967f54c471f2c7922c3c069f6a67c6ffee04bb1106c7e99752f50c7efdfa8afc8bd11acfc7a82e59dc5ffc88775bf6c9794b3ca2f475d25", 0xbc}], 0x4}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)}], 0x1}}], 0x2, 0xc0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425", 0x33, 0x11, 0x0, 0x0)
653.917039ms ago: executing program 8 (id=5555):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r3}, 0x10)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001"], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)={0x14, r1, 0x1, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x24000050}, 0x0)
591.0347ms ago: executing program 8 (id=5556):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', <r1=>0x0})
bind$can_raw(r0, &(0x7f0000000480)={0x1d, r1}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x2}, 0x18)
close(r0)
590.75012ms ago: executing program 7 (id=5557):
unshare(0x400)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x40, 0x170)
fgetxattr(r2, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0)
590.15122ms ago: executing program 8 (id=5566):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x4, @local, 'bridge_slave_0\x00'}}, 0x1e)
close(r2)
418.255253ms ago: executing program 3 (id=5558):
r0 = socket$nl_route(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0)
417.572033ms ago: executing program 8 (id=5569):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffffff, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0)
close_range(r2, 0xffffffffffffffff, 0x200000000000000)
337.271044ms ago: executing program 8 (id=5559):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000a68e00000000000000001811000077835077674a6d755498b684c410912811bf5eb735cda31986c2f8", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pK \x00'}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r1}, 0x10)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x800)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000180)={0x80, 0x2a, 0x3, 0xfffffffc, 0x1})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file2\x00', 0x14552, &(0x7f0000000080)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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")
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat(0xffffffffffffff9c, 0x0, 0x141042, 0x0)
pwritev2(r3, &(0x7f0000000580)=[{&(0x7f0000000400)="ba", 0x1}], 0x1, 0xe7b, 0x5, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4842, 0x1d7)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000f"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xe, &(0x7f0000000700)={[{@nolazytime}, {@init_itable_val={'init_itable', 0x3d, 0x7fffffff}}, {@debug}, {@lazytime}, {@nombcache}, {@noload}]}, 0x3, 0x440, &(0x7f0000000cc0)="$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")
r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r7, 0x8004587d, &(0x7f0000000140)={0x2, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200)
openat$cgroup_devices(r6, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0x84}, 0x18)
lsetxattr$security_capability(&(0x7f0000000180)='./file1\x00', &(0x7f0000000200), &(0x7f0000000340)=@v2={0x2000000, [{0x3f8, 0x7}, {0x7d3, 0x7fffffff}]}, 0x14, 0x1)
273.046105ms ago: executing program 7 (id=5560):
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, 0x0)
chdir(&(0x7f0000000000)='./file0\x00')
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00')
mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
mkdirat(r0, &(0x7f0000000180)='./file0/file0\x00', 0x0)
272.581685ms ago: executing program 4 (id=5561):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000002840), 0x28000, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='kfree\x00', r3}, 0x18)
close_range(r0, r1, 0x0)
237.731366ms ago: executing program 8 (id=5562):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
r2 = syz_open_dev$tty20(0xc, 0x4, 0x1)
write$binfmt_misc(r2, &(0x7f0000000240), 0xfffffecc)
ioctl$TCSETS(r2, 0x5402, &(0x7f0000000000)={0x10, 0x1, 0x8c, 0x3, 0x19, "007de521ec070ef4f834bbeda7f6647bbfdef7"})
225.067166ms ago: executing program 3 (id=5563):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000140), r3}}, 0x18)
213.073526ms ago: executing program 4 (id=5564):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001e880000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffcf9, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce8102030400fef2000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef)
212.379566ms ago: executing program 7 (id=5576):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x25, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0)
rseq(0x0, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2)
readv(r1, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1)
ioctl$TIOCVHANGUP(r1, 0x5437, 0x0)
173.177367ms ago: executing program 3 (id=5565):
r0 = io_uring_setup(0x192, &(0x7f0000000300)={0x0, 0x4178, 0x400, 0x8000002, 0x3d7})
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})
close_range(r0, 0xffffffffffffffff, 0x0)
172.525267ms ago: executing program 3 (id=5567):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10)
sendmmsg$inet6(r0, &(0x7f0000001880)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="82", 0x1}, {&(0x7f0000000140)="845715a6ec", 0x5}], 0x2}}], 0x1, 0x4400c800)
sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd)
163.183547ms ago: executing program 4 (id=5568):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', <r1=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="b4000000800000001c10000000000000a500ffffff1dd6e69500000000000000e33ffe49fb92182c3b5b8c9db21f920abbda78cc57dea9dc8050492b3af1d6a2d083a0e6400dc2a94e32c310e9c0b3956f3cd3cbd5593df617314dcebc690d833f3007e7bac43d7319bfa8f7bbe408d291c5779802b0ffd32b4a9cec00bb8b9cd88cc9977c"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x7, 0x2261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{r2, <r3=>0xffffffffffffffff}, &(0x7f0000000d00), &(0x7f0000000d40)='%+9llu \x00'}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000009c0)={{r3, <r4=>0xffffffffffffffff}, &(0x7f00000008c0), &(0x7f0000000980)='%pB \x00'}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000a40)={r4, &(0x7f0000000dc0), 0x0}, 0x20)
109.205628ms ago: executing program 3 (id=5570):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x3)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
syz_emit_ethernet(0x42, &(0x7f0000000140)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x40, 0x0, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x40000200, 0x9}]}}}}}}}, 0x0)
108.896518ms ago: executing program 3 (id=5571):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2101, 0x0)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x3, 0x0, 0x0, "0062ba7d82000000000000000000f7fffeff00"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TCXONC(r1, 0x540a, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000040)=0xa)
108.562718ms ago: executing program 4 (id=5572):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
signalfd(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
99.893428ms ago: executing program 7 (id=5573):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10)
sendfile(r1, r0, 0x0, 0x7ffff000)
67.987649ms ago: executing program 4 (id=5574):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20)
r2 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x2, @broadcast, 'veth1_to_batadv\x00'}}, 0x1e)
connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x0, @random="7c9ab5135269", 'pim6reg0\x00'}}, 0x1e)
670.72µs ago: executing program 7 (id=5575):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000a68e00000000000000001811000077835077674a6d755498b684c410912811bf5eb735cda31986c2f8", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pK \x00'}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r1}, 0x10)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x800)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000180)={0x80, 0x2a, 0x3, 0xfffffffc, 0x1})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file2\x00', 0x14552, &(0x7f0000000080)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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")
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat(0xffffffffffffff9c, 0x0, 0x141042, 0x0)
pwritev2(r3, &(0x7f0000000580)=[{&(0x7f0000000400)="ba", 0x1}], 0x1, 0xe7b, 0x5, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4842, 0x1d7)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000f"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xe, &(0x7f0000000700)={[{@nolazytime}, {@init_itable_val={'init_itable', 0x3d, 0x7fffffff}}, {@debug}, {@lazytime}, {@nombcache}, {@noload}]}, 0x3, 0x440, &(0x7f0000000cc0)="$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")
r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r7, 0x8004587d, &(0x7f0000000140)={0x2, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200)
openat$cgroup_devices(r6, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0x84}, 0x18)
lsetxattr$security_capability(&(0x7f0000000180)='./file1\x00', &(0x7f0000000200), &(0x7f0000000340)=@v2={0x2000000, [{0x3f8, 0x7}, {0x7d3, 0x7fffffff}]}, 0x14, 0x1)
355.46µs ago: executing program 2 (id=5577):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000002840), 0x28000, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='kfree\x00', r3}, 0x18)
close_range(r0, r1, 0x0)
0s ago: executing program 4 (id=5578):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x87f}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x40020)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000009c0)=@newtfilter={0x7c, 0x2c, 0xd27, 0x70bd25, 0x5, {0x0, 0x0, 0x0, r3, {0x0, 0xfffc}, {}, {0x4, 0x3}}, [@filter_kind_options=@f_route={{0xa}, {0x4c, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0xe4d, 0x2, 0xb580000, 0x1, 0x9, {0x0, 0x1, 0x2, 0x401, 0x9}, {0x4, 0x0, 0x5, 0x7, 0xfff8, 0x5}, 0xffffffff, 0x9, 0xa}}]}, @TCA_ROUTE4_TO={0x8, 0x2, 0xfe}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc004884}, 0x0)
kernel console output (not intermixed with test programs):
acity change from 0 to 512
[ 225.275346][T14144] EXT4-fs: Ignoring removed bh option
[ 225.287898][T14144] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[ 225.310240][T14144] EXT4-fs (loop6): 1 truncate cleaned up
[ 225.310761][T14137] EXT4-fs: Ignoring removed bh option
[ 225.316303][T14144] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 225.335899][T14137] EXT4-fs (loop5): can't disable delalloc during remount
[ 225.343884][T14144] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[ 225.381095][ T29] kauditd_printk_skb: 130 callbacks suppressed
[ 225.381112][ T29] audit: type=1400 audit(1743825485.817:4325): avc: denied { unlink } for pid=12705 comm="syz-executor" name="file1" dev="loop5" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1
[ 225.414101][T12705] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 225.423450][ T7073] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 225.571898][ T29] audit: type=1400 audit(1743825486.007:4326): avc: denied { create } for pid=14179 comm="syz.6.3912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[ 225.624804][ T2968] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[ 225.631653][ T29] audit: type=1400 audit(1743825486.037:4327): avc: denied { write } for pid=14179 comm="syz.6.3912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[ 225.652654][ T29] audit: type=1400 audit(1743825486.057:4328): avc: denied { mount } for pid=14184 comm="syz.6.3914" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 225.656626][ T2968] hid-generic 0000:0000:0000.0009: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 225.685762][T14187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 225.691487][T14188] xt_hashlimit: max too large, truncated to 1048576
[ 225.701447][T14187] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 225.719919][ T29] audit: type=1400 audit(1743825486.157:4329): avc: denied { unmount } for pid=7073 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 225.745762][T14190] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[ 225.755611][T14190] SELinux: failed to load policy
[ 225.804811][T14194] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3918'.
[ 225.840232][T14197] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3919'.
[ 225.873949][T14199] loop6: detected capacity change from 0 to 512
[ 225.889725][T14199] Quota error (device loop6): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5
[ 225.899910][T14199] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota
[ 225.909926][T14199] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm syz.6.3920: Failed to acquire dquot type 1
[ 225.922037][T14199] EXT4-fs (loop6): 1 truncate cleaned up
[ 225.928473][T14199] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 225.943559][T14199] ext4 filesystem being mounted at /598/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 225.969091][ T7073] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 226.381150][T14164] syz.5.3908 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[ 226.392189][T14164] CPU: 0 UID: 0 PID: 14164 Comm: syz.5.3908 Not tainted 6.14.0-syzkaller-13389-ga52a3c18cdf3 #0 PREEMPT(voluntary)
[ 226.392223][T14164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 226.392236][T14164] Call Trace:
[ 226.392242][T14164] <TASK>
[ 226.392301][T14164] dump_stack_lvl+0xf6/0x150
[ 226.392331][T14164] dump_stack+0x15/0x1a
[ 226.392351][T14164] dump_header+0x83/0x2d0
[ 226.392390][T14164] oom_kill_process+0x341/0x4c0
[ 226.392501][T14164] out_of_memory+0x9d1/0xc20
[ 226.392549][T14164] mem_cgroup_out_of_memory+0x13f/0x190
[ 226.392638][T14164] try_charge_memcg+0x59f/0x820
[ 226.392668][T14164] charge_memcg+0x50/0xc0
[ 226.392692][T14164] mem_cgroup_swapin_charge_folio+0xd0/0x150
[ 226.392729][T14164] __read_swap_cache_async+0x207/0x3b0
[ 226.392765][T14164] swap_cluster_readahead+0x38b/0x400
[ 226.392795][T14164] ? __list_add_valid_or_report+0x38/0xe0
[ 226.392865][T14164] swapin_readahead+0xe6/0x6f0
[ 226.392901][T14164] ? swap_cache_get_folio+0x77/0x210
[ 226.392932][T14164] do_swap_page+0x31c/0x2510
[ 226.392999][T14164] ? __rcu_read_lock+0x36/0x50
[ 226.393024][T14164] ? __pfx_default_wake_function+0x10/0x10
[ 226.393053][T14164] handle_mm_fault+0x8ed/0x2e80
[ 226.393125][T14164] ? mas_walk+0x204/0x320
[ 226.393151][T14164] ? __rcu_read_unlock+0x4e/0x70
[ 226.393251][T14164] exc_page_fault+0x3b9/0x6a0
[ 226.393279][T14164] asm_exc_page_fault+0x26/0x30
[ 226.393339][T14164] RIP: 0033:0x7f5d7635c9bf
[ 226.393355][T14164] Code: 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 fb 44 8d 56 04 4c 8d 0d 52 56 34 00 89 f0 4c 8d 05 49 36 34 00 89 c2 81 e2 ff 1f 00 00 <49> 8b 0c d1 48 39 f1 74 28 48 85 c9 74 29 45 38 1c 10 75 23 83 c0
[ 226.393372][T14164] RSP: 002b:00007ffec46925b8 EFLAGS: 00010202
[ 226.393386][T14164] RAX: 000000008443d5e0 RBX: 00007f5d771e5720 RCX: 0000000000000006
[ 226.393440][T14164] RDX: 00000000000015e0 RSI: ffffffff8443d5e0 RDI: 0000000000000001
[ 226.393477][T14164] RBP: ffffffff8443d5e0 R08: 00007f5d766a0000 R09: 00007f5d766a2000
[ 226.393491][T14164] R10: 000000008443d5e4 R11: 0000000000000001 R12: 0000000000000001
[ 226.393505][T14164] R13: 0000000000000000 R14: ffffffff8443d24c R15: 0000000000000006
[ 226.393520][T14164] ? __sys_sendmsg+0x12c/0x240
[ 226.393546][T14164] ? __sys_sendmmsg+0x1b0/0x4b0
[ 226.393578][T14164] ? __sys_sendmmsg+0x1b0/0x4b0
[ 226.393609][T14164] </TASK>
[ 226.393617][T14164] memory: usage 307200kB, limit 307200kB, failcnt 244
[ 226.625672][T14164] memory+swap: usage 307408kB, limit 9007199254740988kB, failcnt 0
[ 226.633636][T14164] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0
[ 226.637931][T14227] loop6: detected capacity change from 0 to 512
[ 226.640975][T14164] Memory cgroup stats for /syz5:
[ 226.652019][T14228] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3930'.
[ 226.666017][T14228] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3930'.
[ 226.673092][T14164] cache 0
[ 226.678034][T14164] rss 0
[ 226.678070][T14228] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[ 226.680786][T14164] shmem 0
[ 226.680796][T14164] mapped_file 0
[ 226.702853][T14164] dirty 0
[ 226.705790][T14164] writeback 0
[ 226.709114][T14164] workingset_refault_anon 30
[ 226.713707][T14164] workingset_refault_file 0
[ 226.713813][T14227] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 226.718285][T14164] swap 212992
[ 226.718294][T14164] swapcached 0
[ 226.718300][T14164] pgpgin 168587
[ 226.718307][T14164] pgpgout 168583
[ 226.718314][T14164] pgfault 223926
[ 226.718322][T14164] pgmajfault 30
[ 226.742609][ T29] audit: type=1400 audit(1743825487.177:4330): avc: denied { setopt } for pid=14229 comm="syz.2.3931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 226.744097][T14164] inactive_anon 0
[ 226.756986][ T29] audit: type=1400 audit(1743825487.187:4331): avc: denied { bind } for pid=14229 comm="syz.2.3931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 226.767147][T14164] active_anon 0
[ 226.767158][T14164] inactive_file 16384
[ 226.767166][T14164] active_file 0
[ 226.767175][T14164] unevictable 0
[ 226.782600][ T29] audit: type=1326 audit(1743825487.207:4332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14231 comm="syz.2.3932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f508ef5d169 code=0x7ffc0000
[ 226.790195][T14164] hierarchical_memory_limit 314572800
[ 226.834209][T14164] hierarchical_memsw_limit 9223372036854771712
[ 226.840439][T14164] total_cache 0
[ 226.843969][T14164] total_rss 0
[ 226.847352][T14164] total_shmem 0
[ 226.850823][T14164] total_mapped_file 0
[ 226.855062][T14164] total_dirty 0
[ 226.858822][T14164] total_writeback 0
[ 226.862720][T14164] total_workingset_refault_anon 30
[ 226.866269][T14227] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 226.867839][T14164] total_workingset_refault_file 0
[ 226.867851][T14164] total_swap 212992
[ 226.867861][T14164] total_swapcached 0
[ 226.882707][T14227] ext4 filesystem being mounted at /604/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 226.885305][T14164] total_pgpgin 168587
[ 226.885315][T14164] total_pgpgout 168583
[ 226.894561][T14227] 9pnet: p9_errstr2errno: server reported unknown error �@00000000000000000000006
[ 226.903464][T14164] total_pgfault 223926
[ 226.903477][T14164] total_pgmajfault 30
[ 226.903486][T14164] total_inactive_anon 0
[ 226.903494][T14164] total_active_anon 0
[ 226.903503][T14164] total_inactive_file 16384
[ 226.903510][T14164] total_active_file 0
[ 226.903517][T14164] total_unevictable 0
[ 226.903524][T14164] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.3908,pid=14164,uid=0
[ 226.964347][T14164] Memory cgroup out of memory: Killed process 14164 (syz.5.3908) total-vm:93720kB, anon-rss:920kB, file-rss:22056kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
[ 226.982049][T14236] random: crng reseeded on system resumption
[ 227.155930][ T7073] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 227.260126][T14243] loop6: detected capacity change from 0 to 512
[ 227.266595][T14243] EXT4-fs: Ignoring removed nobh option
[ 227.275900][T14243] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.3945: invalid indirect mapped block 256 (level 2)
[ 227.290631][T14243] EXT4-fs (loop6): 2 truncates cleaned up
[ 227.296900][T14243] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 227.316827][T14243] EXT4-fs error (device loop6): empty_inline_dir:1785: inode #12: block 7: comm syz.6.3945: bad entry in directory: rec_len % 4 != 0 - offset=4, inode=4278190093, rec_len=255, size=60 fake=0
[ 227.337963][T14243] EXT4-fs warning (device loop6): empty_inline_dir:1792: bad inline directory (dir #12) - inode 4278190093, rec_len 255, name_len 0inline size 60
[ 227.365491][ T7073] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 227.477903][T14258] program syz.6.3940 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 227.478169][T14261] serio: Serial port ptm0
[ 227.508827][T14264] loop5: detected capacity change from 0 to 1024
[ 227.530562][T14264] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 227.550291][T14264] EXT4-fs (loop5): shut down requested (0)
[ 227.600335][T14275] loop6: detected capacity change from 0 to 256
[ 227.612568][T12705] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 227.618862][T14275] vfat: Unknown parameter '01777777777777777777777�(8�jf�F�D�<9� �}Z}/3�BTk�hSYUy��l��bVp�d��n�n@u�ƫj�>���}�i��� W~�;�xP|����$&��O�l���T�� ա�/��cdJ�C�0R\z2�'
[ 227.679133][T14284] xt_hashlimit: max too large, truncated to 1048576
[ 227.686640][T14284] Cannot find set identified by id 0 to match
[ 227.780997][T14301] loop5: detected capacity change from 0 to 8192
[ 227.827397][T14301] loop5: p1 p3 p4
[ 227.831185][T14301] loop5: p1 size 3506438656 extends beyond EOD, truncated
[ 227.839172][T14301] loop5: p3 start 218103808 is beyond EOD, truncated
[ 227.845915][T14301] loop5: p4 size 50331648 extends beyond EOD, truncated
[ 227.856829][T14301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 227.865646][T14301] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 227.925025][T14317] ALSA: seq fatal error: cannot create timer (-19)
[ 228.009682][T14330] xt_hashlimit: max too large, truncated to 1048576
[ 228.155278][T14343] bridge0: port 1(vlan0) entered blocking state
[ 228.161907][T14343] bridge0: port 1(vlan0) entered disabled state
[ 228.170521][T14343] vlan0: entered allmulticast mode
[ 228.176217][T14343] vlan0: left allmulticast mode
[ 228.212392][T14350] xt_hashlimit: max too large, truncated to 1048576
[ 228.220431][T14350] Cannot find set identified by id 0 to match
[ 228.241361][T14354] bond0: entered promiscuous mode
[ 228.246425][T14354] bond0: entered allmulticast mode
[ 228.252099][T14354] 8021q: adding VLAN 0 to HW filter on device bond0
[ 228.262350][T14354] bond0 (unregistering): Released all slaves
[ 228.432506][T14383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 228.434932][T14380] xt_hashlimit: max too large, truncated to 1048576
[ 228.441211][ T1037] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[ 228.448491][T14380] Cannot find set identified by id 0 to match
[ 228.464212][T14383] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 228.472299][ T1037] hid-generic 0000:0000:0000.000A: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 228.489159][T14385] random: crng reseeded on system resumption
[ 228.495614][T14387] SELinux: failed to load policy
[ 228.616476][T14401] program syz.2.4000 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 228.752272][T14411] loop6: detected capacity change from 0 to 2048
[ 228.781622][T14412] xt_hashlimit: max too large, truncated to 1048576
[ 228.790112][T14412] Cannot find set identified by id 0 to match
[ 228.905393][T14426] xt_hashlimit: max too large, truncated to 1048576
[ 228.919832][T14426] Cannot find set identified by id 0 to match
[ 228.934822][T14434] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[ 228.948097][T14433] IPVS: stopping master sync thread 14434 ...
[ 229.223202][T14463] xt_hashlimit: max too large, truncated to 1048576
[ 229.237786][T14463] Cannot find set identified by id 0 to match
[ 229.366315][T14482] syz.6.4033 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[ 229.429797][T14491] loop6: detected capacity change from 0 to 256
[ 229.480621][T14489] loop5: detected capacity change from 0 to 8192
[ 229.494063][T14489] vfat: Unknown parameter './file2'
[ 229.525829][T14489] loop5: detected capacity change from 0 to 512
[ 229.533725][T14489] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[ 229.548371][T14489] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002]
[ 229.559705][T14489] System zones: 1-12
[ 229.564111][T14489] EXT4-fs (loop5): 1 truncate cleaned up
[ 229.571129][T14489] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 229.585535][T14489] EXT4-fs (loop5): shut down requested (2)
[ 229.592936][T14489] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=15
[ 229.603017][T14489] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=15
[ 229.626874][T12705] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 229.703488][T14510] xt_hashlimit: max too large, truncated to 1048576
[ 229.714722][T14510] Cannot find set identified by id 0 to match
[ 229.831322][T14526] xt_hashlimit: max too large, truncated to 1048576
[ 230.029805][T14556] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4066'.
[ 230.038753][T14556] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4066'.
[ 230.049930][T14556] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4066'.
[ 230.256197][T14589] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4081'.
[ 230.265162][T14589] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4081'.
[ 230.274160][T14589] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4081'.
[ 230.337600][T14597] usb usb6: usbfs: process 14597 (syz.4.4085) did not claim interface 0 before use
[ 230.443714][T14610] xt_hashlimit: max too large, truncated to 1048576
[ 230.472299][ T29] kauditd_printk_skb: 76 callbacks suppressed
[ 230.472319][ T29] audit: type=1400 audit(2000000001.400:4409): avc: denied { ioctl } for pid=14604 comm="syz.3.4089" path="socket:[40271]" dev="sockfs" ino=40271 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[ 230.758860][T14641] 9pnet: Could not find request transport: f
[ 230.805150][T14639] Cannot find set identified by id 0 to match
[ 230.805839][T14638] Cannot find set identified by id 0 to match
[ 230.902967][T14660] dccp_invalid_packet: P.type (CLOSE) not Data || [Data]Ack, while P.X == 0
[ 231.010424][T14672] loop5: detected capacity change from 0 to 1024
[ 231.040516][T14672] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 231.065361][T14672] ext4 filesystem being mounted at /160/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 231.079655][ T29] audit: type=1326 audit(2000000002.010:4410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14679 comm="syz.6.4119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbedce2d169 code=0x7ffc0000
[ 231.103257][ T29] audit: type=1326 audit(2000000002.010:4411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14679 comm="syz.6.4119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbedce2d169 code=0x7ffc0000
[ 231.129154][ T29] audit: type=1326 audit(2000000002.010:4412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14681 comm="syz.4.4120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d366cd169 code=0x7ffc0000
[ 231.152835][ T29] audit: type=1326 audit(2000000002.010:4413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14681 comm="syz.4.4120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4d366cd169 code=0x7ffc0000
[ 231.176432][ T29] audit: type=1326 audit(2000000002.010:4414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14681 comm="syz.4.4120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d366cd169 code=0x7ffc0000
[ 231.199989][ T29] audit: type=1326 audit(2000000002.010:4415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14681 comm="syz.4.4120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4d366cd169 code=0x7ffc0000
[ 231.223527][ T29] audit: type=1326 audit(2000000002.010:4416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14681 comm="syz.4.4120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d366cd169 code=0x7ffc0000
[ 231.247088][ T29] audit: type=1326 audit(2000000002.010:4417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14681 comm="syz.4.4120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4d366cd169 code=0x7ffc0000
[ 231.270664][ T29] audit: type=1326 audit(2000000002.060:4418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14679 comm="syz.6.4119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbedce2d169 code=0x7ffc0000
[ 231.275262][T14672] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[ 231.309907][T14672] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[ 231.322217][T14672] EXT4-fs (loop5): This should not happen!! Data will be lost
[ 231.322217][T14672]
[ 231.331969][T14672] EXT4-fs (loop5): Total free blocks count 0
[ 231.338000][T14672] EXT4-fs (loop5): Free/Dirty block details
[ 231.343912][T14672] EXT4-fs (loop5): free_blocks=4293918720
[ 231.349679][T14672] EXT4-fs (loop5): dirty_blocks=16
[ 231.354829][T14672] EXT4-fs (loop5): Block reservation details
[ 231.360945][T14672] EXT4-fs (loop5): i_reserved_data_blocks=1
[ 231.377949][T14687] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4122'.
[ 231.420187][ T3968] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 8 with error 28
[ 231.469488][T14695] usb usb6: usbfs: process 14695 (syz.6.4125) did not claim interface 0 before use
[ 231.508584][T14704] Cannot find set identified by id 0 to match
[ 231.662116][T14719] block device autoloading is deprecated and will be removed.
[ 231.673953][T14719] syz.2.4134: attempt to access beyond end of device
[ 231.673953][T14719] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0
[ 231.684724][T14723] netlink: 72 bytes leftover after parsing attributes in process `syz.5.4135'.
[ 231.746232][T14729] sd 0:0:1:0: device reset
[ 232.004322][T14763] Cannot find set identified by id 0 to match
[ 232.569983][T14817] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[ 232.617382][T14821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 232.637191][T14821] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 232.834922][T14842] hashlimit_mt_check_common: 4 callbacks suppressed
[ 232.834936][T14842] xt_hashlimit: max too large, truncated to 1048576
[ 232.848920][T14842] Cannot find set identified by id 0 to match
[ 232.985766][T14850] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[ 233.074243][T14860] loop5: detected capacity change from 0 to 8192
[ 233.081019][T14860] vfat: Unknown parameter './file2'
[ 233.105693][T14863] xt_hashlimit: max too large, truncated to 1048576
[ 233.113024][T14863] Cannot find set identified by id 0 to match
[ 233.113584][T14860] loop5: detected capacity change from 0 to 512
[ 233.126117][T14860] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[ 233.136903][T14860] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002]
[ 233.144929][T14860] System zones: 1-12
[ 233.149200][T14860] EXT4-fs (loop5): 1 truncate cleaned up
[ 233.155155][T14860] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 233.168799][T14860] EXT4-fs (loop5): shut down requested (2)
[ 233.175702][T14860] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=15
[ 233.190721][T14860] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=15
[ 233.215230][T12705] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 233.244248][T14870] loop5: detected capacity change from 0 to 512
[ 233.268843][T14870] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[ 233.282595][T14870] ext4 filesystem being mounted at /184/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 233.297284][T14870] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[ 233.408998][T14889] xt_hashlimit: max too large, truncated to 1048576
[ 233.416859][T14889] Cannot find set identified by id 0 to match
[ 233.475568][T14900] loop5: detected capacity change from 0 to 8192
[ 233.482255][T14900] vfat: Unknown parameter './file2'
[ 233.503590][T14900] loop5: detected capacity change from 0 to 512
[ 233.510381][T14900] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[ 233.521160][T14900] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002]
[ 233.529368][T14900] System zones: 1-12
[ 233.533839][T14900] EXT4-fs (loop5): 1 truncate cleaned up
[ 233.540139][T14900] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 233.559669][T14900] EXT4-fs (loop5): shut down requested (2)
[ 233.571087][T14900] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=15
[ 233.585285][T14900] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=15
[ 233.612468][T12705] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 233.659569][T14911] xt_hashlimit: max too large, truncated to 1048576
[ 233.673082][T14913] hub 9-0:1.0: USB hub found
[ 233.678122][T14913] hub 9-0:1.0: 8 ports detected
[ 233.836022][T14931] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4228'.
[ 233.900407][T14936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 233.921566][T14936] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 234.108329][T14965] hub 6-0:1.0: USB hub found
[ 234.119260][T14965] hub 6-0:1.0: 8 ports detected
[ 234.543674][ T3315] block device autoloading is deprecated and will be removed.
[ 234.643718][T15003] hub 6-0:1.0: USB hub found
[ 234.648707][T15003] hub 6-0:1.0: 8 ports detected
[ 234.720917][T14963] syz.4.4243 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000
[ 234.735141][T14963] CPU: 0 UID: 0 PID: 14963 Comm: syz.4.4243 Not tainted 6.14.0-syzkaller-13389-ga52a3c18cdf3 #0 PREEMPT(voluntary)
[ 234.735235][T14963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 234.735250][T14963] Call Trace:
[ 234.735257][T14963] <TASK>
[ 234.735264][T14963] dump_stack_lvl+0xf6/0x150
[ 234.735293][T14963] dump_stack+0x15/0x1a
[ 234.735310][T14963] dump_header+0x83/0x2d0
[ 234.735361][T14963] oom_kill_process+0x341/0x4c0
[ 234.735396][T14963] out_of_memory+0x9d1/0xc20
[ 234.735424][T14963] mem_cgroup_out_of_memory+0x13f/0x190
[ 234.735532][T14963] try_charge_memcg+0x59f/0x820
[ 234.735560][T14963] obj_cgroup_charge_pages+0xc0/0x1a0
[ 234.735582][T14963] __memcg_kmem_charge_page+0x9d/0x170
[ 234.735602][T14963] __alloc_frozen_pages_noprof+0x1a6/0x360
[ 234.735634][T14963] alloc_pages_mpol+0xb6/0x260
[ 234.735666][T14963] alloc_pages_noprof+0xe8/0x130
[ 234.735728][T14963] __vmalloc_node_range_noprof+0x6ea/0xe80
[ 234.735795][T14963] __kvmalloc_node_noprof+0x311/0x520
[ 234.735814][T14963] ? ip_set_alloc+0x1f/0x30
[ 234.735827][T14963] ? ip_set_alloc+0x1f/0x30
[ 234.735865][T14963] ip_set_alloc+0x1f/0x30
[ 234.735878][T14963] hash_netiface_create+0x273/0x730
[ 234.735907][T14963] ? __nla_parse+0x40/0x60
[ 234.736007][T14963] ? __pfx_hash_netiface_create+0x10/0x10
[ 234.736034][T14963] ip_set_create+0x3b6/0x970
[ 234.736062][T14963] ? __nla_parse+0x40/0x60
[ 234.736087][T14963] nfnetlink_rcv_msg+0x4ba/0x580
[ 234.736155][T14963] netlink_rcv_skb+0x12f/0x230
[ 234.736173][T14963] ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[ 234.736204][T14963] nfnetlink_rcv+0x187/0x1610
[ 234.736274][T14963] ? search_extable+0x59/0x80
[ 234.736301][T14963] ? rep_movs_alternative+0x11/0x90
[ 234.736401][T14963] ? rep_movs_alternative+0x11/0x90
[ 234.736486][T14963] ? fixup_exception+0x814/0xd30
[ 234.736515][T14963] ? search_extable+0x59/0x80
[ 234.736606][T14963] ? rep_movs_alternative+0x11/0x90
[ 234.736623][T14963] ? rep_movs_alternative+0x11/0x90
[ 234.736642][T14963] ? kernelmode_fixup_or_oops+0x58/0xb0
[ 234.736668][T14963] ? exc_page_fault+0x527/0x6a0
[ 234.736689][T14963] ? cgroup_rstat_updated+0xa4/0x590
[ 234.736722][T14963] ? kernelmode_fixup_or_oops+0x58/0xb0
[ 234.736768][T14963] ? sized_strscpy+0x13e/0x1d0
[ 234.736800][T14963] ? should_fail_ex+0x31/0x270
[ 234.736871][T14963] ? selinux_nlmsg_lookup+0x119/0x8c0
[ 234.736900][T14963] ? __rcu_read_unlock+0x34/0x70
[ 234.736926][T14963] ? __netlink_lookup+0x25d/0x2a0
[ 234.737004][T14963] netlink_unicast+0x605/0x6c0
[ 234.737098][T14963] netlink_sendmsg+0x609/0x720
[ 234.737125][T14963] ? __pfx_netlink_sendmsg+0x10/0x10
[ 234.737147][T14963] __sock_sendmsg+0x140/0x180
[ 234.737187][T14963] ____sys_sendmsg+0x350/0x4e0
[ 234.737265][T14963] __sys_sendmsg+0x1a0/0x240
[ 234.737308][T14963] __x64_sys_sendmsg+0x46/0x50
[ 234.737336][T14963] x64_sys_call+0x26f3/0x2e10
[ 234.737363][T14963] do_syscall_64+0xc9/0x1c0
[ 234.737433][T14963] ? clear_bhb_loop+0x25/0x80
[ 234.737454][T14963] ? clear_bhb_loop+0x25/0x80
[ 234.737539][T14963] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 234.737563][T14963] RIP: 0033:0x7f4d366cd169
[ 234.737580][T14963] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 234.737602][T14963] RSP: 002b:00007f4d34d2f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 234.737618][T14963] RAX: ffffffffffffffda RBX: 00007f4d368e5fa0 RCX: 00007f4d366cd169
[ 234.737630][T14963] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003
[ 234.737694][T14963] RBP: 00007f4d3674e2a0 R08: 0000000000000000 R09: 0000000000000000
[ 234.737706][T14963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 234.737716][T14963] R13: 0000000000000000 R14: 00007f4d368e5fa0 R15: 00007ffd9735e508
[ 234.737737][T14963] </TASK>
[ 235.108233][T14963] memory: usage 307200kB, limit 307200kB, failcnt 383
[ 235.115032][T14963] memory+swap: usage 307508kB, limit 9007199254740988kB, failcnt 0
[ 235.122965][T14963] kmem: usage 306964kB, limit 9007199254740988kB, failcnt 0
[ 235.130380][T14963] Memory cgroup stats for /syz4:
[ 235.130837][T14963] cache 32768
[ 235.139065][T14963] rss 204800
[ 235.142266][T14963] shmem 0
[ 235.145193][T14963] mapped_file 86016
[ 235.149027][T14963] dirty 28672
[ 235.152342][T14963] writeback 0
[ 235.155738][T14963] workingset_refault_anon 51
[ 235.160432][T14963] workingset_refault_file 81
[ 235.165017][T14963] swap 315392
[ 235.168302][T14963] swapcached 0
[ 235.171661][T14963] pgpgin 192154
[ 235.175108][T14963] pgpgout 192095
[ 235.178669][T14963] pgfault 261549
[ 235.182257][T14963] pgmajfault 43
[ 235.185732][T14963] inactive_anon 0
[ 235.189787][T14963] active_anon 0
[ 235.193265][T14963] inactive_file 0
[ 235.196947][T14963] active_file 4096
[ 235.200796][T14963] unevictable 237568
[ 235.204699][T14963] hierarchical_memory_limit 314572800
[ 235.210246][T14963] hierarchical_memsw_limit 9223372036854771712
[ 235.216409][T14963] total_cache 32768
[ 235.220296][T14963] total_rss 204800
[ 235.224013][T14963] total_shmem 0
[ 235.227500][T14963] total_mapped_file 86016
[ 235.231840][T14963] total_dirty 28672
[ 235.235686][T14963] total_writeback 0
[ 235.239585][T14963] total_workingset_refault_anon 51
[ 235.244693][T14963] total_workingset_refault_file 81
[ 235.249822][T14963] total_swap 315392
[ 235.253648][T14963] total_swapcached 0
[ 235.257565][T14963] total_pgpgin 192154
[ 235.261624][T14963] total_pgpgout 192095
[ 235.265754][T14963] total_pgfault 261549
[ 235.269889][T14963] total_pgmajfault 43
[ 235.273864][T14963] total_inactive_anon 0
[ 235.278091][T14963] total_active_anon 0
[ 235.282081][T14963] total_inactive_file 0
[ 235.286292][T14963] total_active_file 4096
[ 235.290620][T14963] total_unevictable 237568
[ 235.295039][T14963] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.4243,pid=14961,uid=0
[ 235.309814][T14963] Memory cgroup out of memory: Killed process 14961 (syz.4.4243) total-vm:95900kB, anon-rss:920kB, file-rss:22056kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
[ 235.577389][T15020] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4269'.
[ 235.577411][T15020] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4269'.
[ 235.577425][T15020] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4269'.
[ 235.623976][T15025] serio: Serial port ptm0
[ 235.644952][ T29] kauditd_printk_skb: 71 callbacks suppressed
[ 235.645040][ T29] audit: type=1400 audit(2000000006.570:4490): avc: denied { write } for pid=3311 comm="syz-executor" name="loop4" dev="devtmpfs" ino=855 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[ 235.646204][ T29] audit: type=1400 audit(2000000006.570:4491): avc: denied { ioctl } for pid=3311 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=855 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[ 235.737518][ T29] audit: type=1400 audit(2000000006.660:4492): avc: denied { connect } for pid=15031 comm="syz.6.4274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[ 235.771519][T15036] SELinux: syz.4.4275 (15036) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[ 235.864738][T15038] loop4: detected capacity change from 0 to 8192
[ 235.865755][T15038] vfat: Unknown parameter './file2'
[ 235.924047][T15046] binfmt_misc: register: failed to install interpreter file ./file2
[ 235.945971][T15038] loop4: detected capacity change from 0 to 512
[ 235.950270][T15038] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[ 235.974719][T15038] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002]
[ 235.974753][T15038] System zones: 1-12
[ 235.994929][T15038] EXT4-fs (loop4): 1 truncate cleaned up
[ 236.002728][T15052] loop6: detected capacity change from 0 to 1024
[ 236.007810][T15038] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 236.009784][T15052] EXT4-fs: Ignoring removed mblk_io_submit option
[ 236.055161][T15038] EXT4-fs (loop4): shut down requested (2)
[ 236.055495][T15038] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=15
[ 236.055506][T15052] EXT4-fs: Ignoring removed nobh option
[ 236.055528][T15038] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=15
[ 236.055535][T15052] EXT4-fs: Ignoring removed bh option
[ 236.064787][T15054] netlink: 100 bytes leftover after parsing attributes in process `syz.2.4284'.
[ 236.075859][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 236.077421][T15052] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 236.118550][ T29] audit: type=1400 audit(2000000007.050:4493): avc: denied { mount } for pid=15057 comm="syz.4.4285" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[ 236.174304][ T7073] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 236.223415][ T29] audit: type=1400 audit(2000000007.150:4494): avc: denied { write } for pid=15063 comm="syz.2.4287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[ 236.264316][ T29] audit: type=1400 audit(2000000007.190:4495): avc: denied { unmount } for pid=3311 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[ 236.469020][ T29] audit: type=1326 audit(2000000007.400:4496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15080 comm="syz.4.4293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d366cd169 code=0x7ffc0000
[ 236.492773][ T29] audit: type=1326 audit(2000000007.400:4497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15080 comm="syz.4.4293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d366cd169 code=0x7ffc0000
[ 236.516497][ T29] audit: type=1326 audit(2000000007.400:4498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15080 comm="syz.4.4293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7f4d366cd169 code=0x7ffc0000
[ 236.540158][ T29] audit: type=1326 audit(2000000007.400:4499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15080 comm="syz.4.4293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d366cd169 code=0x7ffc0000
[ 236.574725][T15084] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4294'.
[ 236.643553][T15087] loop6: detected capacity change from 0 to 8192
[ 236.650570][T15087] vfat: Unknown parameter './file2'
[ 236.688591][T15087] loop6: detected capacity change from 0 to 512
[ 236.704120][T15087] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[ 236.733652][T15087] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002]
[ 236.743684][T15087] System zones: 1-12
[ 236.745557][T15093] SELinux: failed to load policy
[ 236.759124][T15087] EXT4-fs (loop6): 1 truncate cleaned up
[ 236.770701][T15087] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 236.790034][T15087] EXT4-fs (loop6): shut down requested (2)
[ 236.796355][T15087] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=15
[ 236.805804][T15087] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=15
[ 236.833235][ T7073] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 236.863342][T15108] xt_hashlimit: max too large, truncated to 1048576
[ 236.894723][T15114] SELinux: syz.6.4309 (15114) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[ 236.940687][T15121] serio: Serial port ptm0
[ 236.976605][T15126] xt_hashlimit: max too large, truncated to 1048576
[ 236.984492][T15126] set_match_v0_checkentry: 1 callbacks suppressed
[ 236.984510][T15126] Cannot find set identified by id 0 to match
[ 237.016838][T15131] loop6: detected capacity change from 0 to 512
[ 237.026402][T15131] EXT4-fs: Ignoring removed orlov option
[ 237.041996][T15131] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 237.058466][T15131] ext4 filesystem being mounted at /671/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 237.096522][ T7073] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 237.106543][T15144] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4321'.
[ 237.152245][T15147] xt_hashlimit: max too large, truncated to 1048576
[ 237.220341][T15162] serio: Serial port ptm0
[ 237.290536][T15176] loop6: detected capacity change from 0 to 256
[ 237.517949][T15206] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4349'.
[ 237.564991][T15209] loop6: detected capacity change from 0 to 128
[ 237.573912][T15211] loop5: detected capacity change from 0 to 512
[ 237.594374][T15209] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 237.619733][T15211] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[ 237.633195][T15209] ext4 filesystem being mounted at /682/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[ 237.648578][T15211] ext4 filesystem being mounted at /206/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 237.765388][ T7073] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 237.790002][T15211] EXT4-fs error (device loop5): ext4_do_update_inode:5182: inode #19: comm syz.5.4352: corrupted inode contents
[ 237.817002][T15211] EXT4-fs error (device loop5): ext4_dirty_inode:6074: inode #19: comm syz.5.4352: mark_inode_dirty error
[ 237.858945][T15211] EXT4-fs error (device loop5): ext4_do_update_inode:5182: inode #19: comm syz.5.4352: corrupted inode contents
[ 237.877930][T15226] loop6: detected capacity change from 0 to 128
[ 237.888577][T15226] vfat: Unknown parameter 'nnonumtail'
[ 237.894289][T15211] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2991: inode #19: comm syz.5.4352: mark_inode_dirty error
[ 237.916053][T15211] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2994: inode #19: comm syz.5.4352: mark inode dirty (error -117)
[ 237.929761][T15211] EXT4-fs warning (device loop5): ext4_evict_inode:279: xattr delete (err -117)
[ 237.954536][T15234] batadv2: entered promiscuous mode
[ 237.974736][T12705] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[ 238.018964][T15240] xt_hashlimit: max too large, truncated to 1048576
[ 238.039496][T15250] loop5: detected capacity change from 0 to 128
[ 238.048835][T15250] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 238.061277][T15250] ext4 filesystem being mounted at /208/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 238.173694][T12705] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 238.214795][T15271] xt_hashlimit: max too large, truncated to 1048576
[ 238.236912][T15271] Cannot find set identified by id 0 to match
[ 238.239577][T15274] SELinux: failed to load policy
[ 238.249406][T15277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 238.250395][T15278] macsec1: entered allmulticast mode
[ 238.260159][T15277] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 238.397217][T15293] xt_hashlimit: max too large, truncated to 1048576
[ 238.405677][T15293] Cannot find set identified by id 0 to match
[ 238.459537][T15300] loop6: detected capacity change from 0 to 8192
[ 238.466124][T15300] vfat: Unknown parameter './file2'
[ 238.487921][T15300] loop6: detected capacity change from 0 to 512
[ 238.494894][T15300] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[ 238.507281][T15300] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002]
[ 238.515339][T15300] System zones: 1-12
[ 238.519779][T15300] EXT4-fs (loop6): 1 truncate cleaned up
[ 238.525767][T15300] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 238.539206][T15300] EXT4-fs (loop6): shut down requested (2)
[ 238.545583][T15300] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=15
[ 238.555129][T15300] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=15
[ 238.576124][ T7073] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 238.595763][T15306] loop6: detected capacity change from 0 to 128
[ 238.604497][T15306] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 238.627394][T15306] ext4 filesystem being mounted at /691/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 238.702580][ T7073] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 238.740171][T15326] xt_hashlimit: max too large, truncated to 1048576
[ 238.829825][T15333] loop6: detected capacity change from 0 to 8192
[ 238.836755][T15333] vfat: Unknown parameter './file2'
[ 238.863318][T15333] loop6: detected capacity change from 0 to 512
[ 238.870475][T15333] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[ 238.891257][T15333] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002]
[ 238.899319][T15333] System zones: 1-12
[ 238.905572][T15333] EXT4-fs (loop6): 1 truncate cleaned up
[ 238.918155][T15333] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 238.934460][T15344] xt_hashlimit: max too large, truncated to 1048576
[ 238.941902][T15344] Cannot find set identified by id 0 to match
[ 238.959868][T15333] EXT4-fs (loop6): shut down requested (2)
[ 238.966814][T15333] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=15
[ 238.977217][T15333] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=15
[ 239.011826][ T7073] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 239.118183][T15376] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4418'.
[ 239.179468][T15381] xt_hashlimit: max too large, truncated to 1048576
[ 239.462304][T15403] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4429'.
[ 239.938920][T15387] syz.5.4422 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000
[ 239.953191][T15387] CPU: 1 UID: 0 PID: 15387 Comm: syz.5.4422 Not tainted 6.14.0-syzkaller-13389-ga52a3c18cdf3 #0 PREEMPT(voluntary)
[ 239.953221][T15387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 239.953234][T15387] Call Trace:
[ 239.953239][T15387] <TASK>
[ 239.953244][T15387] dump_stack_lvl+0xf6/0x150
[ 239.953262][T15387] dump_stack+0x15/0x1a
[ 239.953286][T15387] dump_header+0x83/0x2d0
[ 239.953310][T15387] oom_kill_process+0x341/0x4c0
[ 239.953333][T15387] out_of_memory+0x9d1/0xc20
[ 239.953357][T15387] mem_cgroup_out_of_memory+0x13f/0x190
[ 239.953412][T15387] try_charge_memcg+0x59f/0x820
[ 239.953437][T15387] obj_cgroup_charge_pages+0xc0/0x1a0
[ 239.953512][T15387] __memcg_kmem_charge_page+0x9d/0x170
[ 239.953603][T15387] __alloc_frozen_pages_noprof+0x1a6/0x360
[ 239.953630][T15387] alloc_pages_mpol+0xb6/0x260
[ 239.953650][T15387] alloc_pages_noprof+0xe8/0x130
[ 239.953689][T15387] __vmalloc_node_range_noprof+0x6ea/0xe80
[ 239.953774][T15387] __kvmalloc_node_noprof+0x311/0x520
[ 239.953794][T15387] ? ip_set_alloc+0x1f/0x30
[ 239.953807][T15387] ? ip_set_alloc+0x1f/0x30
[ 239.953823][T15387] ip_set_alloc+0x1f/0x30
[ 239.953836][T15387] hash_netiface_create+0x273/0x730
[ 239.953945][T15387] ? __nla_parse+0x40/0x60
[ 239.953969][T15387] ? __pfx_hash_netiface_create+0x10/0x10
[ 239.953996][T15387] ip_set_create+0x3b6/0x970
[ 239.954052][T15387] ? __nla_parse+0x40/0x60
[ 239.954076][T15387] nfnetlink_rcv_msg+0x4ba/0x580
[ 239.954208][T15387] netlink_rcv_skb+0x12f/0x230
[ 239.954235][T15387] ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[ 239.954280][T15387] nfnetlink_rcv+0x187/0x1610
[ 239.954337][T15387] ? __kfree_skb+0x102/0x150
[ 239.954399][T15387] ? nlmon_xmit+0x51/0x60
[ 239.954425][T15387] ? __kfree_skb+0x102/0x150
[ 239.954506][T15387] ? consume_skb+0x49/0x160
[ 239.954525][T15387] ? nlmon_xmit+0x51/0x60
[ 239.954603][T15387] ? dev_hard_start_xmit+0x3d1/0x400
[ 239.954627][T15387] ? __dev_queue_xmit+0xb76/0x20b0
[ 239.954650][T15387] ? should_fail_ex+0x31/0x270
[ 239.954672][T15387] ? ref_tracker_free+0x3b8/0x420
[ 239.954779][T15387] ? __netlink_deliver_tap+0x4c6/0x4f0
[ 239.954803][T15387] netlink_unicast+0x605/0x6c0
[ 239.954823][T15387] netlink_sendmsg+0x609/0x720
[ 239.954846][T15387] ? __pfx_netlink_sendmsg+0x10/0x10
[ 239.954866][T15387] __sock_sendmsg+0x140/0x180
[ 239.954938][T15387] ____sys_sendmsg+0x350/0x4e0
[ 239.954963][T15387] __sys_sendmsg+0x1a0/0x240
[ 239.954999][T15387] __x64_sys_sendmsg+0x46/0x50
[ 239.955046][T15387] x64_sys_call+0x26f3/0x2e10
[ 239.955063][T15387] do_syscall_64+0xc9/0x1c0
[ 239.955086][T15387] ? clear_bhb_loop+0x25/0x80
[ 239.955105][T15387] ? clear_bhb_loop+0x25/0x80
[ 239.955198][T15387] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 239.955215][T15387] RIP: 0033:0x7f5d7649d169
[ 239.955227][T15387] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 239.955241][T15387] RSP: 002b:00007f5d74aff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 239.955256][T15387] RAX: ffffffffffffffda RBX: 00007f5d766b5fa0 RCX: 00007f5d7649d169
[ 239.955266][T15387] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003
[ 239.955276][T15387] RBP: 00007f5d7651e2a0 R08: 0000000000000000 R09: 0000000000000000
[ 239.955307][T15387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 239.955317][T15387] R13: 0000000000000000 R14: 00007f5d766b5fa0 R15: 00007ffec4692538
[ 239.955333][T15387] </TASK>
[ 239.955338][T15387] memory: usage 307200kB, limit 307200kB, failcnt 818
[ 240.300175][T15387] memory+swap: usage 307184kB, limit 9007199254740988kB, failcnt 0
[ 240.308247][T15387] kmem: usage 306960kB, limit 9007199254740988kB, failcnt 0
[ 240.315548][T15387] Memory cgroup stats for /syz5:
[ 240.316168][T15387] cache 0
[ 240.324220][T15387] rss 188416
[ 240.327591][T15387] shmem 0
[ 240.330527][T15387] mapped_file 0
[ 240.334046][T15387] dirty 0
[ 240.337007][T15387] writeback 0
[ 240.340407][T15387] workingset_refault_anon 45
[ 240.344981][T15387] workingset_refault_file 0
[ 240.349595][T15387] swap 24576
[ 240.352789][T15387] swapcached 0
[ 240.356224][T15387] pgpgin 176779
[ 240.359688][T15387] pgpgout 176729
[ 240.363223][T15387] pgfault 237406
[ 240.366758][T15387] pgmajfault 46
[ 240.370253][T15387] inactive_anon 0
[ 240.373885][T15387] active_anon 0
[ 240.377387][T15387] inactive_file 16384
[ 240.381369][T15387] active_file 0
[ 240.384827][T15387] unevictable 188416
[ 240.388770][T15387] hierarchical_memory_limit 314572800
[ 240.394152][T15387] hierarchical_memsw_limit 9223372036854771712
[ 240.400312][T15387] total_cache 0
[ 240.403774][T15387] total_rss 188416
[ 240.407526][T15387] total_shmem 0
[ 240.410992][T15387] total_mapped_file 0
[ 240.414956][T15387] total_dirty 0
[ 240.418428][T15387] total_writeback 0
[ 240.422226][T15387] total_workingset_refault_anon 45
[ 240.427381][T15387] total_workingset_refault_file 0
[ 240.432398][T15387] total_swap 24576
[ 240.436108][T15387] total_swapcached 0
[ 240.440014][T15387] total_pgpgin 176779
[ 240.444038][T15387] total_pgpgout 176729
[ 240.448188][T15387] total_pgfault 237406
[ 240.452241][T15387] total_pgmajfault 46
[ 240.456234][T15387] total_inactive_anon 0
[ 240.460413][T15387] total_active_anon 0
[ 240.464379][T15387] total_inactive_file 16384
[ 240.468946][T15387] total_active_file 0
[ 240.472955][T15387] total_unevictable 188416
[ 240.477376][T15387] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.4422,pid=15385,uid=0
[ 240.492093][T15387] Memory cgroup out of memory: Killed process 15387 (syz.5.4422) total-vm:95768kB, anon-rss:916kB, file-rss:22068kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
[ 240.549410][T15430] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4441'.
[ 240.593491][T15434] loop9: detected capacity change from 0 to 7
[ 240.602409][T15434] Buffer I/O error on dev loop9, logical block 0, async page read
[ 240.623890][T15434] Buffer I/O error on dev loop9, logical block 0, async page read
[ 240.631824][T15434] loop9: unable to read partition table
[ 240.639668][T15434] loop_reread_partitions: partition scan of loop9 (�被������ ڬ��dƤ����ݡ� ����
[ 240.639668][T15434] U�������) failed (rc=-5)
[ 240.738901][ T29] kauditd_printk_skb: 142 callbacks suppressed
[ 240.738915][ T29] audit: type=1400 audit(2000000011.670:4642): avc: denied { audit_write } for pid=15444 comm="syz.4.4447" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[ 240.766573][ T29] audit: type=1107 audit(2000000011.670:4643): pid=15444 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg=''
[ 240.807183][ T29] audit: type=1326 audit(2000000011.730:4644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15447 comm="syz.4.4448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d366cd169 code=0x7ffc0000
[ 240.830727][ T29] audit: type=1326 audit(2000000011.730:4645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15447 comm="syz.4.4448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d366cd169 code=0x7ffc0000
[ 240.838731][T15381] Cannot find set identified by id 0 to match
[ 240.854345][ T29] audit: type=1326 audit(2000000011.730:4646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15447 comm="syz.4.4448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f4d366cd169 code=0x7ffc0000
[ 240.883846][ T29] audit: type=1326 audit(2000000011.730:4647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15447 comm="syz.4.4448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d366cd169 code=0x7ffc0000
[ 240.907442][ T29] audit: type=1326 audit(2000000011.730:4648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15447 comm="syz.4.4448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d366cd169 code=0x7ffc0000
[ 240.931007][ T29] audit: type=1326 audit(2000000011.730:4649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15447 comm="syz.4.4448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7f4d366cd169 code=0x7ffc0000
[ 240.954597][ T29] audit: type=1326 audit(2000000011.730:4650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15447 comm="syz.4.4448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d366cd169 code=0x7ffc0000
[ 240.978093][ T29] audit: type=1326 audit(2000000011.730:4651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15447 comm="syz.4.4448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d366cd169 code=0x7ffc0000
[ 241.199765][T15484] loop6: detected capacity change from 0 to 512
[ 241.210678][T15486] loop5: detected capacity change from 0 to 1024
[ 241.218523][T15486] EXT4-fs: Ignoring removed nobh option
[ 241.231171][T15486] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 241.255226][T15484] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[ 241.289373][T15496] xt_hashlimit: max too large, truncated to 1048576
[ 241.311498][T15484] ext4 filesystem being mounted at /702/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 241.316596][T15496] Cannot find set identified by id 0 to match
[ 241.361705][T12705] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 241.440686][T15505] EXT4-fs error (device loop6): ext4_do_update_inode:5182: inode #19: comm syz.6.4464: corrupted inode contents
[ 241.460231][T15505] EXT4-fs error (device loop6): ext4_dirty_inode:6074: inode #19: comm syz.6.4464: mark_inode_dirty error
[ 241.474287][T15506] loop5: detected capacity change from 0 to 8192
[ 241.481291][T15506] vfat: Unknown parameter './file2'
[ 241.484994][T15505] EXT4-fs error (device loop6): ext4_do_update_inode:5182: inode #19: comm syz.6.4464: corrupted inode contents
[ 241.510443][T15505] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2991: inode #19: comm syz.6.4464: mark_inode_dirty error
[ 241.524583][T15505] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2994: inode #19: comm syz.6.4464: mark inode dirty (error -117)
[ 241.535774][T15506] loop5: detected capacity change from 0 to 512
[ 241.556696][T15506] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[ 241.559983][T15505] EXT4-fs warning (device loop6): ext4_evict_inode:279: xattr delete (err -117)
[ 241.617482][T15506] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002]
[ 241.617426][ T7073] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[ 241.656002][T15506] System zones: 1-12
[ 241.665465][T15506] EXT4-fs (loop5): 1 truncate cleaned up
[ 241.671816][T15506] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 241.686441][T15506] EXT4-fs (loop5): shut down requested (2)
[ 241.694515][T15506] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=15
[ 241.708647][T15506] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=15
[ 241.734237][T12705] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 241.744629][T15539] vlan0: entered allmulticast mode
[ 241.770131][T15542] xt_hashlimit: max too large, truncated to 1048576
[ 241.778726][T15542] Cannot find set identified by id 0 to match
[ 241.822414][T15546] loop9: detected capacity change from 0 to 7
[ 241.828648][T15546] Buffer I/O error on dev loop9, logical block 0, async page read
[ 241.836488][T15546] Buffer I/O error on dev loop9, logical block 0, async page read
[ 241.844382][T15546] loop9: unable to read partition table
[ 241.850143][T15546] loop_reread_partitions: partition scan of loop9 (�被������ ڬ��dƤ����ݡ� ����
[ 241.850143][T15546] U�������) failed (rc=-5)
[ 242.028789][T15568] loop5: detected capacity change from 0 to 8192
[ 242.038669][T15571] xt_hashlimit: max too large, truncated to 1048576
[ 242.041903][T15568] vfat: Unknown parameter './file2'
[ 242.046180][T15571] Cannot find set identified by id 0 to match
[ 242.073301][T15575] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6)
[ 242.079863][T15575] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[ 242.087615][T15575] vhci_hcd vhci_hcd.0: Device attached
[ 242.087708][T15568] loop5: detected capacity change from 0 to 512
[ 242.102618][T15568] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[ 242.113549][T15576] vhci_hcd: connection closed
[ 242.118868][ T374] vhci_hcd: stop threads
[ 242.127857][ T374] vhci_hcd: release socket
[ 242.132286][ T374] vhci_hcd: disconnect device
[ 242.141366][T15568] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002]
[ 242.150286][T15568] System zones: 1-12
[ 242.154607][T15568] EXT4-fs (loop5): 1 truncate cleaned up
[ 242.162779][T15568] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 242.181664][T15580] loop6: detected capacity change from 0 to 8192
[ 242.188467][T15568] EXT4-fs (loop5): shut down requested (2)
[ 242.194862][T15580] vfat: Unknown parameter './file2'
[ 242.207202][T15568] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=15
[ 242.221638][T15568] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=15
[ 242.226967][T15580] loop6: detected capacity change from 0 to 512
[ 242.240022][T15580] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[ 242.252369][T15580] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002]
[ 242.263422][T15580] System zones: 1-12
[ 242.268121][T12705] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 242.277362][T15580] EXT4-fs (loop6): 1 truncate cleaned up
[ 242.283452][T15580] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 242.301248][T15580] EXT4-fs (loop6): shut down requested (2)
[ 242.313084][T15580] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=15
[ 242.318004][T15590] serio: Serial port ptm0
[ 242.324779][T15580] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=15
[ 242.349167][ T7073] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 242.424070][T15603] xt_hashlimit: max too large, truncated to 1048576
[ 242.432582][T15603] Cannot find set identified by id 0 to match
[ 242.441620][T15607] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
[ 242.507682][T15614] loop6: detected capacity change from 0 to 1024
[ 242.518486][T15614] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 242.534188][T15614] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4115: comm syz.6.4516: Allocating blocks 385-513 which overlap fs metadata
[ 242.549914][T15613] EXT4-fs (loop6): pa ffff8881064d3380: logic 16, phys. 129, len 24
[ 242.557960][T15613] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 8
[ 242.578223][ T7073] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 242.670640][T15622] loop5: detected capacity change from 0 to 8192
[ 242.677863][T15622] vfat: Unknown parameter './file2'
[ 242.696879][T15622] loop5: detected capacity change from 0 to 512
[ 242.703847][T15622] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[ 242.714831][T15622] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002]
[ 242.715068][T15631] Cannot find set identified by id 0 to match
[ 242.726404][T15622] System zones: 1-12
[ 242.733204][T15622] EXT4-fs (loop5): 1 truncate cleaned up
[ 242.739907][T15622] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 242.753149][T15622] EXT4-fs (loop5): shut down requested (2)
[ 242.761373][T15622] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=15
[ 242.770767][T15622] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=15
[ 242.794131][T12705] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 242.817462][ T36] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[ 242.833393][ T36] hid-generic 0000:0000:0000.000B: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 242.853456][T15640] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4526'.
[ 242.875245][T15640] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4526'.
[ 242.953762][T15650] loop6: detected capacity change from 0 to 512
[ 242.978823][T15650] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm syz.6.4531: Failed to acquire dquot type 1
[ 242.993129][T15650] EXT4-fs (loop6): 1 truncate cleaned up
[ 242.999173][T15650] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 243.011870][T15650] ext4 filesystem being mounted at /719/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 243.057558][ T7073] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 243.166482][T15661] loop6: detected capacity change from 0 to 8192
[ 243.183927][T15661] vfat: Unknown parameter './file2'
[ 243.211269][T15661] loop6: detected capacity change from 0 to 512
[ 243.218923][T15661] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[ 243.235738][T15661] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002]
[ 243.250622][T15661] System zones: 1-12
[ 243.255132][T15661] EXT4-fs (loop6): 1 truncate cleaned up
[ 243.255933][T15674] hashlimit_mt_check_common: 1 callbacks suppressed
[ 243.255948][T15674] xt_hashlimit: max too large, truncated to 1048576
[ 243.263211][T15661] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 243.290567][T15661] EXT4-fs (loop6): shut down requested (2)
[ 243.296882][T15661] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=15
[ 243.306382][T15661] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=15
[ 243.328589][ T7073] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 243.602671][T15695] loop6: detected capacity change from 0 to 8192
[ 243.616346][T15695] vfat: Unknown parameter './file2'
[ 243.622273][T15690] xt_hashlimit: max too large, truncated to 1048576
[ 243.638001][T15690] Cannot find set identified by id 0 to match
[ 243.652599][T15695] loop6: detected capacity change from 0 to 512
[ 243.660996][T15695] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[ 243.671797][T15695] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002]
[ 243.681142][T15695] System zones: 1-12
[ 243.685604][T15695] EXT4-fs (loop6): 1 truncate cleaned up
[ 243.691999][T15695] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 243.707597][T15695] EXT4-fs (loop6): shut down requested (2)
[ 243.713936][T15695] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=15
[ 243.724804][T15695] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=15
[ 243.739951][T15699] loop5: detected capacity change from 0 to 512
[ 243.747911][ T7073] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 243.759094][T15699] EXT4-fs (loop5): orphan cleanup on readonly fs
[ 243.771131][T15699] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.4550: bg 0: block 248: padding at end of block bitmap is not set
[ 243.787148][T15699] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.4550: Failed to acquire dquot type 1
[ 243.799061][T15699] EXT4-fs (loop5): 1 truncate cleaned up
[ 243.805283][T15699] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 243.833172][T12705] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 243.840070][T15708] xt_hashlimit: max too large, truncated to 1048576
[ 243.849620][T15708] Cannot find set identified by id 0 to match
[ 244.317073][T15714] siw: device registration error -23
[ 244.392900][T15720] SELinux: ebitmap: truncated map
[ 244.410714][T15720] SELinux: failed to load policy
[ 244.473820][T15732] netlink: 332 bytes leftover after parsing attributes in process `+}[@'.
[ 244.585473][T15752] xt_hashlimit: max too large, truncated to 1048576
[ 244.596314][T15752] Cannot find set identified by id 0 to match
[ 244.652617][T15760] SELinux: ebitmap: truncated map
[ 244.661514][T15760] SELinux: failed to load policy
[ 244.688164][T15767] netlink: 332 bytes leftover after parsing attributes in process `+}[@'.
[ 244.792562][T15778] xt_hashlimit: max too large, truncated to 1048576
[ 244.800146][T15778] Cannot find set identified by id 0 to match
[ 244.904942][ T3380] kernel write not supported for file /2105/attr/prev (pid: 3380 comm: kworker/0:3)
[ 244.934902][T15790] serio: Serial port ptm0
[ 244.946621][T15792] vlan0: entered allmulticast mode
[ 244.966188][T15794] loop5: detected capacity change from 0 to 1024
[ 244.973437][T15794] EXT4-fs: Ignoring removed oldalloc option
[ 244.979680][T15794] EXT4-fs: Ignoring removed orlov option
[ 244.987803][T15794] EXT4-fs (loop5): stripe (1570) is not aligned with cluster size (16), stripe is disabled
[ 245.014873][T15801] SELinux: Context system_u:object_r:adjtime_t:s0 is not valid (left unmapped).
[ 245.030063][T15794] EXT4-fs error (device loop5): mb_free_blocks:1948: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt.
[ 245.044985][T15794] EXT4-fs (loop5): Remounting filesystem read-only
[ 245.096359][T15809] loop5: detected capacity change from 0 to 8192
[ 245.103372][T15809] vfat: Unknown parameter 'x���O�[U�qjǩ�G��v�ݸ�4�p%H�)���� �:7rMBn��Օ[?��t'�_`6~w�qمx���MM�.:��<�����r�!8� ��ͧ�n�u�I4N���("�J��w��?�^���j����t�u��zJi�� ?���W~��}��� ���·ǿ��rt�����W?�U�W��p��tc8��7�" ��~�һe�WE�b�����h������h\TU�'
[ 245.134080][ T3380] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 245.141545][ T3380] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 245.148978][ T3380] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 245.156362][ T3380] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 245.163811][ T3380] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 245.171279][ T3380] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 245.178734][ T3380] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 245.186132][ T3380] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 245.193604][ T3380] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 245.199623][T15813] SELinux: policydb version 0 does not match my version range 15-34
[ 245.201069][ T3380] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 245.209857][T15813] SELinux: failed to load policy
[ 245.216488][ T3380] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 245.228918][ T3380] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 245.236318][ T3380] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 245.243789][ T3380] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 245.251211][ T3380] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 245.258697][ T3380] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 245.266062][ T3380] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 245.273442][ T3380] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 245.280862][ T3380] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 245.288276][ T3380] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 245.295683][ T3380] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 245.303066][ T3380] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 245.310513][ T3380] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 245.317933][ T3380] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 245.325404][ T3380] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 245.332818][ T3380] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 245.340236][ T3380] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 245.347731][ T3380] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 245.355211][ T3380] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 245.362657][ T3380] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 245.370064][ T3380] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 245.377544][ T3380] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 245.384933][ T3380] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 245.392332][ T3380] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 245.399806][ T3380] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 245.407263][ T3380] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 245.414653][ T3380] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 245.422058][ T3380] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 245.429480][ T3380] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 245.436847][ T3380] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 245.444290][ T3380] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 245.451773][ T3380] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 245.459226][ T3380] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 245.465625][T15821] xt_hashlimit: max too large, truncated to 1048576
[ 245.467105][ T3380] hid-generic 0000:0000:0000.000C: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[ 245.483821][T15821] Cannot find set identified by id 0 to match
[ 245.638533][T15829] loop6: detected capacity change from 0 to 512
[ 245.651603][T15829] EXT4-fs (loop6): orphan cleanup on readonly fs
[ 245.658699][T15829] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.4603: bg 0: block 248: padding at end of block bitmap is not set
[ 245.678466][T15829] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm syz.6.4603: Failed to acquire dquot type 1
[ 245.692061][T15834] siw: device registration error -23
[ 245.699687][T15829] EXT4-fs (loop6): 1 truncate cleaned up
[ 245.733923][T15840] netlink: 96 bytes leftover after parsing attributes in process `syz.6.4610'.
[ 245.784489][T15842] SELinux: ebitmap: truncated map
[ 245.803490][T15842] SELinux: failed to load policy
[ 245.808973][T15848] hub 9-0:1.0: USB hub found
[ 245.814271][T15848] hub 9-0:1.0: 8 ports detected
[ 245.863377][T15854] vhci_hcd: default hub control req: 800f v0000 i0000 l31125
[ 245.934999][T15861] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4622'.
[ 245.953151][T15864] serio: Serial port ptm0
[ 245.977080][ T29] kauditd_printk_skb: 111 callbacks suppressed
[ 245.977094][ T29] audit: type=1326 audit(2000000016.900:4757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15865 comm="syz.2.4623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f508ef5d169 code=0x7ffc0000
[ 246.006774][ T29] audit: type=1326 audit(2000000016.900:4758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15865 comm="syz.2.4623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f508ef5d169 code=0x7ffc0000
[ 246.072517][ C1] IPv4: Oversized IP packet from 172.20.20.24
[ 246.073929][ T29] audit: type=1326 audit(2000000016.940:4759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15867 comm="syz.4.4625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d366cd169 code=0x7ffc0000
[ 246.102235][ T29] audit: type=1326 audit(2000000016.940:4760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15867 comm="syz.4.4625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d366cd169 code=0x7ffc0000
[ 246.125924][ T29] audit: type=1326 audit(2000000016.940:4761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15867 comm="syz.4.4625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f4d366cd169 code=0x7ffc0000
[ 246.149454][ T29] audit: type=1326 audit(2000000016.940:4762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15867 comm="syz.4.4625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d366cd169 code=0x7ffc0000
[ 246.173003][ T29] audit: type=1326 audit(2000000016.940:4763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15867 comm="syz.4.4625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7f4d366cd169 code=0x7ffc0000
[ 246.196576][ T29] audit: type=1326 audit(2000000016.940:4764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15867 comm="syz.4.4625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d366cd169 code=0x7ffc0000
[ 246.220147][ T29] audit: type=1326 audit(2000000016.960:4765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15865 comm="syz.2.4623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f508ef5d169 code=0x7ffc0000
[ 246.243644][ T29] audit: type=1326 audit(2000000016.960:4766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15865 comm="syz.2.4623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f508ef5d169 code=0x7ffc0000
[ 246.268978][T15877] loop5: detected capacity change from 0 to 8192
[ 246.275852][T15877] vfat: Unknown parameter './file2'
[ 246.299835][T15877] loop5: detected capacity change from 0 to 512
[ 246.306734][T15877] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[ 246.319575][T15877] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002]
[ 246.327699][T15877] System zones: 1-12
[ 246.332132][T15877] EXT4-fs (loop5): 1 truncate cleaned up
[ 246.333059][T15888] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4633'.
[ 246.342082][T15877] EXT4-fs (loop5): shut down requested (2)
[ 246.363123][T15877] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=15
[ 246.379371][T15877] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=15
[ 246.462760][T15897] loop5: detected capacity change from 0 to 8192
[ 246.471742][T15897] vfat: Unknown parameter './file2'
[ 246.497883][T15897] loop5: detected capacity change from 0 to 512
[ 246.504740][T15897] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[ 246.515360][T15897] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002]
[ 246.523680][T15897] System zones: 1-12
[ 246.527958][T15897] EXT4-fs (loop5): 1 truncate cleaned up
[ 246.534811][T15897] EXT4-fs (loop5): shut down requested (2)
[ 246.541397][T15897] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=15
[ 246.550285][T15897] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=15
[ 246.559477][T15910] xt_hashlimit: max too large, truncated to 1048576
[ 246.567758][T15910] Cannot find set identified by id 0 to match
[ 246.631450][T15914] SELinux: ebitmap: truncated map
[ 246.638750][T15914] SELinux: failed to load policy
[ 246.801263][T15938] loop6: detected capacity change from 0 to 764
[ 246.973811][T15948] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4660'.
[ 246.997658][T15950] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4661'.
[ 247.034803][T15954] netlink: 432 bytes leftover after parsing attributes in process `syz.6.4663'.
[ 247.182265][T15964] xt_hashlimit: max too large, truncated to 1048576
[ 247.211759][T15966] vhci_hcd: default hub control req: 800f v0000 i0000 l31125
[ 247.269387][T15975] loop6: detected capacity change from 0 to 764
[ 247.314769][T15978] SELinux: failed to load policy
[ 247.382663][T15989] loop6: detected capacity change from 0 to 2048
[ 247.533949][T16010] xt_hashlimit: max too large, truncated to 1048576
[ 247.541829][T16010] Cannot find set identified by id 0 to match
[ 247.836902][T16040] SELinux: failed to load policy
[ 248.022740][T16060] xt_hashlimit: max too large, truncated to 1048576
[ 248.030825][T16060] Cannot find set identified by id 0 to match
[ 248.040314][T16031] chnl_net:caif_netlink_parms(): no params data found
[ 248.052624][T16059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 248.061211][T16059] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 248.084899][T16031] bridge0: port 1(bridge_slave_0) entered blocking state
[ 248.092067][T16031] bridge0: port 1(bridge_slave_0) entered disabled state
[ 248.099295][T16031] bridge_slave_0: entered allmulticast mode
[ 248.105863][T16031] bridge_slave_0: entered promiscuous mode
[ 248.112984][T16031] bridge0: port 2(bridge_slave_1) entered blocking state
[ 248.120119][T16031] bridge0: port 2(bridge_slave_1) entered disabled state
[ 248.127315][T16031] bridge_slave_1: entered allmulticast mode
[ 248.133819][T16031] bridge_slave_1: entered promiscuous mode
[ 248.151150][T16031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 248.162660][T16031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 248.185971][T16031] team0: Port device team_slave_0 added
[ 248.193335][T16031] team0: Port device team_slave_1 added
[ 248.212837][T16031] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 248.219878][T16031] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 248.245931][T16031] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 248.257825][T16031] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 248.264818][T16031] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 248.290742][T16031] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 248.319076][T16031] hsr_slave_0: entered promiscuous mode
[ 248.325481][T16031] hsr_slave_1: entered promiscuous mode
[ 248.331522][T16031] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 248.339130][T16031] Cannot create hsr debugfs directory
[ 248.403337][T16031] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 248.414926][T16031] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 248.425210][T16031] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 248.434766][T16031] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 248.452681][T16031] bridge0: port 2(bridge_slave_1) entered blocking state
[ 248.459798][T16031] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 248.467233][T16031] bridge0: port 1(bridge_slave_0) entered blocking state
[ 248.474290][T16031] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 248.519848][T16031] 8021q: adding VLAN 0 to HW filter on device bond0
[ 248.533573][ T52] bridge0: port 1(bridge_slave_0) entered disabled state
[ 248.541761][ T52] bridge0: port 2(bridge_slave_1) entered disabled state
[ 248.569125][T16031] 8021q: adding VLAN 0 to HW filter on device team0
[ 248.589249][ T37] bridge0: port 1(bridge_slave_0) entered blocking state
[ 248.596357][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 248.630089][ T52] bridge0: port 2(bridge_slave_1) entered blocking state
[ 248.637219][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 248.841735][T16031] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 249.094091][T16123] SELinux: syz.4.4723 (16123) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[ 249.166016][T16031] veth0_vlan: entered promiscuous mode
[ 249.205792][T16031] veth1_vlan: entered promiscuous mode
[ 249.265843][T16031] veth0_macvtap: entered promiscuous mode
[ 249.307773][T16031] veth1_macvtap: entered promiscuous mode
[ 249.347972][T16031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 249.358518][T16031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 249.397674][T16031] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 249.427039][T16031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 249.437565][T16031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 249.490136][T16031] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 249.522524][T16031] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 249.531422][T16031] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 249.540176][T16031] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 249.549011][T16031] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 249.748651][T16152] geneve0: entered allmulticast mode
[ 249.778009][T16154] __nla_validate_parse: 2 callbacks suppressed
[ 249.778023][T16154] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4733'.
[ 249.848252][T16159] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4735'.
[ 250.064969][T16172] tipc: Started in network mode
[ 250.069994][T16172] tipc: Node identity ac14140f, cluster identity 4711
[ 250.089418][T16177] loop7: detected capacity change from 0 to 512
[ 250.117106][T16177] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended
[ 250.126247][T16177] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
[ 250.134872][T16172] tipc: New replicast peer: 255.255.255.255
[ 250.141066][T16172] tipc: Enabled bearer <udp:syz2>, priority 10
[ 250.199372][T16177] EXT4-fs (loop7): warning: checktime reached, running e2fsck is recommended
[ 250.231045][T16177] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[ 250.259610][T16177] System zones: 0-2, 18-18, 34-34
[ 250.287091][T16177] EXT4-fs warning (device loop7): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended
[ 250.324409][T16177] EXT4-fs (loop7): 1 truncate cleaned up
[ 250.405501][T16191] xt_hashlimit: max too large, truncated to 1048576
[ 250.441200][T16195] SELinux: failed to load policy
[ 250.445374][T16191] Cannot find set identified by id 0 to match
[ 250.501782][T16200] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535)
[ 250.567118][T16203] xt_hashlimit: max too large, truncated to 1048576
[ 250.599023][T16205] vhci_hcd: invalid port number 15
[ 250.601364][T16203] Cannot find set identified by id 0 to match
[ 250.604282][T16205] vhci_hcd: invalid port number 15
[ 250.781757][T16217] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4761'.
[ 251.257066][ T10] tipc: Node number set to 2886997007
[ 251.380900][T16244] SELinux: ebitmap: truncated map
[ 251.386863][T16244] SELinux: failed to load policy
[ 251.414986][ T29] kauditd_printk_skb: 79 callbacks suppressed
[ 251.415000][ T29] audit: type=1400 audit(2000000022.340:4846): avc: denied { write } for pid=16246 comm="syz.2.4774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 251.497926][T16245] xt_hashlimit: max too large, truncated to 1048576
[ 251.522597][T16251] netlink: 332 bytes leftover after parsing attributes in process `syz.2.4775'.
[ 251.522924][T16245] Cannot find set identified by id 0 to match
[ 251.563029][T16251] netlink: 'syz.2.4775': attribute type 9 has an invalid length.
[ 251.570881][T16251] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4775'.
[ 251.579976][T16251] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4775'.
[ 251.746567][T16265] xt_hashlimit: max too large, truncated to 1048576
[ 252.803555][T16307] xt_hashlimit: max too large, truncated to 1048576
[ 252.824287][T16307] Cannot find set identified by id 0 to match
[ 252.926678][T16315] loop6: detected capacity change from 0 to 8192
[ 252.933404][T16315] vfat: Unknown parameter './file2'
[ 252.959892][T16315] loop6: detected capacity change from 0 to 512
[ 252.967478][T16315] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[ 252.980459][T16315] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002]
[ 252.988598][T16315] System zones: 1-12
[ 252.993041][T16315] EXT4-fs (loop6): 1 truncate cleaned up
[ 253.002022][T16315] EXT4-fs (loop6): shut down requested (2)
[ 253.008249][T16315] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=15
[ 253.017415][T16315] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=15
[ 253.131763][T16337] loop7: detected capacity change from 0 to 512
[ 253.139709][T16337] EXT4-fs (loop7): orphan cleanup on readonly fs
[ 253.146633][T16337] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.4812: bg 0: block 248: padding at end of block bitmap is not set
[ 253.164016][T16337] Quota error (device loop7): write_blk: dquota write failed
[ 253.171524][T16337] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota
[ 253.181661][T16337] EXT4-fs error (device loop7): ext4_acquire_dquot:6935: comm syz.7.4812: Failed to acquire dquot type 1
[ 253.209663][T16337] EXT4-fs (loop7): 1 truncate cleaned up
[ 253.224012][T16337] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended
[ 253.245912][ T29] audit: type=1400 audit(2000000024.170:4847): avc: denied { mount } for pid=16349 comm="syz.3.4817" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[ 253.269012][ T29] audit: type=1400 audit(2000000024.200:4848): avc: denied { unmount } for pid=16349 comm="syz.3.4817" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[ 253.298220][T16337] Quota error (device loop7): write_blk: dquota write failed
[ 253.305696][T16337] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota
[ 253.315674][T16337] EXT4-fs error (device loop7): ext4_acquire_dquot:6935: comm syz.7.4812: Failed to acquire dquot type 1
[ 253.330032][T16337] EXT4-fs warning (device loop7): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-28, ino=4). Please run e2fsck to fix.
[ 253.338817][T16355] xt_hashlimit: max too large, truncated to 1048576
[ 253.452108][T16367] xt_hashlimit: max too large, truncated to 1048576
[ 253.459755][T16367] Cannot find set identified by id 0 to match
[ 253.488007][T16362] loop7: detected capacity change from 0 to 8192
[ 253.494657][T16362] vfat: Unknown parameter './file2'
[ 253.515432][ T29] audit: type=1326 audit(2000000024.440:4849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16372 comm="syz.4.4824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d366cd169 code=0x7ffc0000
[ 253.539027][ T29] audit: type=1326 audit(2000000024.440:4850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16372 comm="syz.4.4824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d366cd169 code=0x7ffc0000
[ 253.539578][T16362] loop7: detected capacity change from 0 to 512
[ 253.570191][ T29] audit: type=1326 audit(2000000024.440:4851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16372 comm="syz.4.4824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4d366cd169 code=0x7ffc0000
[ 253.595411][T16362] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[ 253.606322][T16362] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002]
[ 253.614493][T16362] System zones: 1-12
[ 253.619095][T16362] EXT4-fs (loop7): 1 truncate cleaned up
[ 253.626112][T16362] EXT4-fs (loop7): shut down requested (2)
[ 253.632432][T16362] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=15
[ 253.641507][T16362] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=15
[ 253.705215][T16385] vhci_hcd: invalid port number 15
[ 253.710496][T16385] vhci_hcd: invalid port number 15
[ 253.758778][T16393] xt_hashlimit: max too large, truncated to 1048576
[ 253.765828][T16395] binfmt_misc: register: failed to install interpreter file ./file2
[ 253.766649][T16393] Cannot find set identified by id 0 to match
[ 254.077757][T16423] bridge0: entered promiscuous mode
[ 254.083938][T16423] bridge0: port 1(macsec1) entered blocking state
[ 254.090789][T16423] bridge0: port 1(macsec1) entered disabled state
[ 254.097770][T16423] macsec1: entered allmulticast mode
[ 254.103087][T16423] bridge0: entered allmulticast mode
[ 254.111345][T16423] macsec1: left allmulticast mode
[ 254.116498][T16423] bridge0: left allmulticast mode
[ 254.122140][T16423] bridge0: left promiscuous mode
[ 254.473456][T16453] xt_hashlimit: max too large, truncated to 1048576
[ 254.485003][T16453] Cannot find set identified by id 0 to match
[ 254.713694][T16482] xt_hashlimit: max too large, truncated to 1048576
[ 254.723806][T16482] Cannot find set identified by id 0 to match
[ 255.099100][T16505] siw: device registration error -23
[ 255.101006][T16508] netlink: 'syz.3.4882': attribute type 1 has an invalid length.
[ 255.132570][T16508] 8021q: adding VLAN 0 to HW filter on device bond2
[ 255.159999][T16508] bond2: (slave gretap1): making interface the new active one
[ 255.168483][T16508] bond2: (slave gretap1): Enslaving as an active interface with an up link
[ 255.189178][T16510] Cannot find set identified by id 0 to match
[ 255.286711][T16516] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4885'.
[ 255.295797][T16516] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4885'.
[ 255.655830][T16542] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4895'.
[ 255.752042][T16559] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4903'.
[ 255.778454][T16559] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4903'.
[ 255.820720][T16567] siw: device registration error -23
[ 255.928886][T16579] hashlimit_mt_check_common: 1 callbacks suppressed
[ 255.928903][T16579] xt_hashlimit: max too large, truncated to 1048576
[ 255.943207][T16579] Cannot find set identified by id 0 to match
[ 256.018838][T16593] netlink: 'syz.2.4918': attribute type 1 has an invalid length.
[ 256.037327][T16593] 8021q: adding VLAN 0 to HW filter on device bond0
[ 256.056849][T16593] bond0: (slave gretap1): making interface the new active one
[ 256.065273][T16593] bond0: (slave gretap1): Enslaving as an active interface with an up link
[ 256.094784][T16596] siw: device registration error -23
[ 256.268719][T16613] xt_hashlimit: max too large, truncated to 1048576
[ 256.276192][T16613] Cannot find set identified by id 0 to match
[ 256.529831][T16648] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4941'.
[ 256.538873][T16648] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4941'.
[ 256.559402][T16650] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 256.592144][ T29] kauditd_printk_skb: 177 callbacks suppressed
[ 256.592161][ T29] audit: type=1400 audit(2000000027.520:5029): avc: denied { name_bind } for pid=16651 comm="syz.4.4943" src=1024 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[ 256.623764][T16652] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 256.646726][ T29] audit: type=1326 audit(2000000027.570:5030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16653 comm="syz.7.4944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f484ebfd169 code=0x7ffc0000
[ 256.670403][ T29] audit: type=1326 audit(2000000027.570:5031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16653 comm="syz.7.4944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f484ebfd169 code=0x7ffc0000
[ 256.763762][ T29] audit: type=1326 audit(2000000027.570:5032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16653 comm="syz.7.4944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7f484ebfd169 code=0x7ffc0000
[ 256.787314][ T29] audit: type=1326 audit(2000000027.570:5033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16653 comm="syz.7.4944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f484ebfd169 code=0x7ffc0000
[ 256.810975][ T29] audit: type=1326 audit(2000000027.570:5034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16653 comm="syz.7.4944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f484ebfd169 code=0x7ffc0000
[ 256.834525][ T29] audit: type=1400 audit(2000000027.650:5035): avc: denied { execmem } for pid=16655 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 256.948792][ T29] audit: type=1400 audit(2000000027.700:5036): avc: denied { read } for pid=16660 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[ 256.970445][ T29] audit: type=1400 audit(2000000027.700:5037): avc: denied { open } for pid=16660 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[ 256.994087][ T29] audit: type=1400 audit(2000000027.710:5038): avc: denied { mounton } for pid=16660 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[ 257.052615][T16676] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4952'.
[ 257.269346][T16699] geneve0: entered allmulticast mode
[ 257.356641][T16660] chnl_net:caif_netlink_parms(): no params data found
[ 257.441251][T16717] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 257.471476][T16660] bridge0: port 1(bridge_slave_0) entered blocking state
[ 257.478624][T16660] bridge0: port 1(bridge_slave_0) entered disabled state
[ 257.488910][T16660] bridge_slave_0: entered allmulticast mode
[ 257.495722][T16660] bridge_slave_0: entered promiscuous mode
[ 257.506379][T16729] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4974'.
[ 257.511239][T16660] bridge0: port 2(bridge_slave_1) entered blocking state
[ 257.522448][T16660] bridge0: port 2(bridge_slave_1) entered disabled state
[ 257.530059][T16660] bridge_slave_1: entered allmulticast mode
[ 257.536756][T16660] bridge_slave_1: entered promiscuous mode
[ 257.537798][T16732] 9pnet_fd: Insufficient options for proto=fd
[ 257.585472][T16717] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 257.609705][T16734] geneve0: entered allmulticast mode
[ 257.621131][T16660] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 257.631627][T16660] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 257.673589][T16717] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 257.713392][T16660] team0: Port device team_slave_0 added
[ 257.720818][T16660] team0: Port device team_slave_1 added
[ 257.764334][T16717] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 257.801591][T16660] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 257.808774][T16660] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 257.834712][T16660] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 257.856631][T16660] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 257.863820][T16660] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 257.889841][T16660] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 257.934699][T16660] hsr_slave_0: entered promiscuous mode
[ 257.941835][T16660] hsr_slave_1: entered promiscuous mode
[ 257.948362][T16660] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 257.956141][T16660] Cannot create hsr debugfs directory
[ 258.057464][T16717] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 258.095992][T16780] xt_hashlimit: max too large, truncated to 1048576
[ 258.103992][T16780] Cannot find set identified by id 0 to match
[ 258.121361][T16717] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 258.137241][T16660] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 258.158400][T16717] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 258.169365][T16660] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 258.189298][T16717] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 258.200191][T16660] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 258.216800][T16784] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4998'.
[ 258.223930][T16660] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 258.311287][T16660] 8021q: adding VLAN 0 to HW filter on device bond0
[ 258.336262][T16660] 8021q: adding VLAN 0 to HW filter on device team0
[ 258.371831][ T31] bridge0: port 1(bridge_slave_0) entered blocking state
[ 258.379047][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 258.395070][ T31] bridge0: port 2(bridge_slave_1) entered blocking state
[ 258.402355][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 258.541138][T16660] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 258.571903][T16822] xt_hashlimit: max too large, truncated to 1048576
[ 258.586562][T16822] Cannot find set identified by id 0 to match
[ 258.670702][T16660] veth0_vlan: entered promiscuous mode
[ 258.687670][T16660] veth1_vlan: entered promiscuous mode
[ 258.713970][T16660] veth0_macvtap: entered promiscuous mode
[ 258.725751][T16660] veth1_macvtap: entered promiscuous mode
[ 258.750131][T16660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 258.760718][T16660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 258.770660][T16660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 258.781180][T16660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 258.799916][T16660] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 258.819426][T16660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 258.830052][T16660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 258.839905][T16660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 258.850357][T16660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 258.864736][T16660] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 258.876685][T16660] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 258.885469][T16660] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 258.894265][T16660] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 258.903074][T16660] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 259.053165][T16861] xt_hashlimit: max too large, truncated to 1048576
[ 259.060519][T16861] Cannot find set identified by id 0 to match
[ 259.188308][T16863] binfmt_misc: register: failed to install interpreter file ./file2
[ 259.212557][T16865] geneve0: left allmulticast mode
[ 259.475377][T16879] xt_hashlimit: max too large, truncated to 1048576
[ 259.495285][T16879] Cannot find set identified by id 0 to match
[ 259.551915][T16892] netlink: 'syz.3.5035': attribute type 10 has an invalid length.
[ 259.611083][T16897] xt_hashlimit: max too large, truncated to 1048576
[ 259.615677][T16899] netlink: 'syz.3.5038': attribute type 3 has an invalid length.
[ 259.626596][T16897] Cannot find set identified by id 0 to match
[ 259.650438][T16903] xt_hashlimit: max too large, truncated to 1048576
[ 259.779425][T16919] netlink: 'syz.2.5047': attribute type 10 has an invalid length.
[ 259.822803][T16922] geneve0: left allmulticast mode
[ 259.883798][T16927] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 259.915969][T16933] netem: change failed
[ 259.970291][T16942] binfmt_misc: register: failed to install interpreter file ./file2
[ 259.997636][T16927] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 260.052374][T16927] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 260.102466][T16927] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 260.218098][T16927] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 260.242375][T16927] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 260.269664][T16927] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 260.293054][T16927] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 260.345470][T16948] hub 9-0:1.0: USB hub found
[ 260.350301][T16948] hub 9-0:1.0: 8 ports detected
[ 260.932733][T17032] binfmt_misc: register: failed to install interpreter file ./file2
[ 260.940823][T17030] bond1: entered promiscuous mode
[ 260.940842][T17030] bond1: entered allmulticast mode
[ 260.941019][T17030] 8021q: adding VLAN 0 to HW filter on device bond1
[ 260.968644][T17030] bond1 (unregistering): Released all slaves
[ 261.247788][T17061] netlink: 'syz.2.5085': attribute type 3 has an invalid length.
[ 261.274699][T17062] xt_hashlimit: max too large, truncated to 1048576
[ 261.393180][T17071] hub 9-0:1.0: USB hub found
[ 261.405704][T17071] hub 9-0:1.0: 8 ports detected
[ 261.709296][ T29] kauditd_printk_skb: 217 callbacks suppressed
[ 261.709313][ T29] audit: type=1326 audit(2000000032.640:5256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17113 comm="syz.2.5109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f508ef5d169 code=0x7ffc0000
[ 261.749884][ T29] audit: type=1326 audit(2000000032.640:5257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17113 comm="syz.2.5109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7f508ef5d169 code=0x7ffc0000
[ 261.773475][ T29] audit: type=1326 audit(2000000032.640:5258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17113 comm="syz.2.5109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f508ef5d169 code=0x7ffc0000
[ 261.797002][ T29] audit: type=1326 audit(2000000032.640:5259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17113 comm="syz.2.5109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f508ef5d169 code=0x7ffc0000
[ 261.872678][T17119] SELinux: Context GPL is not valid (left unmapped).
[ 261.909802][ T29] audit: type=1400 audit(2000000032.840:5260): avc: denied { create } for pid=17125 comm="syz.2.5115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[ 261.963363][ T29] audit: type=1400 audit(2000000032.870:5261): avc: denied { write } for pid=17125 comm="syz.2.5115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[ 262.040450][ T29] audit: type=1400 audit(2000000032.970:5262): avc: denied { create } for pid=17136 comm="syz.4.5120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[ 262.060201][ T29] audit: type=1400 audit(2000000032.970:5263): avc: denied { setopt } for pid=17136 comm="syz.4.5120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[ 262.100990][T17139] netlink: 'syz.2.5121': attribute type 298 has an invalid length.
[ 262.120982][ T29] audit: type=1400 audit(2000000033.010:5264): avc: denied { mounton } for pid=17140 comm="syz.8.5122" path="/19/file0" dev="tmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[ 262.200185][ T29] audit: type=1400 audit(2000000033.120:5265): avc: denied { remount } for pid=17150 comm="syz.7.5127" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[ 262.364050][T17169] xt_hashlimit: max too large, truncated to 1048576
[ 262.396591][T17169] Cannot find set identified by id 0 to match
[ 262.506039][T17184] bond1: entered promiscuous mode
[ 262.511254][T17184] bond1: entered allmulticast mode
[ 262.518219][T17184] 8021q: adding VLAN 0 to HW filter on device bond1
[ 262.538163][T17184] bond1 (unregistering): Released all slaves
[ 262.714219][T17207] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5151'.
[ 262.749604][T17207] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5151'.
[ 262.911485][T17220] xt_hashlimit: max too large, truncated to 1048576
[ 262.929510][T17220] Cannot find set identified by id 0 to match
[ 263.192260][T17245] xt_hashlimit: max too large, truncated to 1048576
[ 263.224252][T17245] Cannot find set identified by id 0 to match
[ 263.288831][ T3373] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[ 263.296377][ T3373] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[ 263.303914][ T3373] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[ 263.311349][ T3373] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[ 263.318779][ T3373] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[ 263.326241][ T3373] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[ 263.333674][ T3373] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[ 263.341105][ T3373] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[ 263.348539][ T3373] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[ 263.355957][ T3373] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[ 263.363457][ T3373] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[ 263.371394][ T3373] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[ 263.379201][ T3373] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[ 263.386650][ T3373] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[ 263.394086][ T3373] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[ 263.401504][ T3373] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[ 263.408950][ T3373] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[ 263.416405][ T3373] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[ 263.423820][ T3373] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[ 263.431217][ T3373] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[ 263.438615][ T3373] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[ 263.446132][ T3373] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[ 263.453702][ T3373] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[ 263.461160][ T3373] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[ 263.468569][ T3373] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[ 263.476022][ T3373] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[ 263.483462][ T3373] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[ 263.490972][ T3373] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[ 263.498487][ T3373] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[ 263.505887][ T3373] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[ 263.513376][ T3373] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[ 263.520801][ T3373] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[ 263.528541][ T3373] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[ 263.535929][ T3373] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[ 263.543432][ T3373] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[ 263.550842][ T3373] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[ 263.558249][ T3373] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[ 263.565830][ T3373] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[ 263.573267][ T3373] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[ 263.580843][ T3373] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[ 263.588322][ T3373] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[ 263.595782][ T3373] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[ 263.603831][ T3373] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[ 263.908553][ T3373] hid-generic 0000:0000:0000.000D: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[ 263.951445][ T2968] kernel write not supported for file /2385/attr/exec (pid: 2968 comm: kworker/0:2)
[ 263.973927][T17266] smc: net device bond0 applied user defined pnetid SYZ0
[ 263.999701][T17266] smc: net device bond0 erased user defined pnetid SYZ0
[ 264.023144][T17270] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5181'.
[ 264.107008][T17270] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5181'.
[ 264.191619][T17300] SELinux: failed to load policy
[ 264.239120][T17305] xt_hashlimit: max too large, truncated to 1048576
[ 264.255992][T17309] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125
[ 264.265483][T17305] Cannot find set identified by id 0 to match
[ 264.341830][T17320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 264.367321][T17320] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 265.075509][T17390] SELinux: failed to load policy
[ 265.291511][ T2968] kernel write not supported for file /2587/attr/exec (pid: 2968 comm: kworker/0:2)
[ 265.828552][T17467] vhci_hcd: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub
[ 265.951973][T17475] xt_hashlimit: max too large, truncated to 1048576
[ 265.971591][T17475] Cannot find set identified by id 0 to match
[ 266.003482][T17487] smc: net device bond0 applied user defined pnetid SYZ0
[ 266.010990][T17487] smc: net device bond0 erased user defined pnetid SYZ0
[ 266.062445][T17495] netlink: 'syz.2.5276': attribute type 39 has an invalid length.
[ 266.111851][T17501] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5279'.
[ 266.139084][T17506] sg_write: data in/out 122/14 bytes for SCSI command 0x0-- guessing data in;
[ 266.139084][T17506] program syz.8.5281 not setting count and/or reply_len properly
[ 266.195995][T17511] xt_hashlimit: max too large, truncated to 1048576
[ 266.206044][T17511] Cannot find set identified by id 0 to match
[ 266.437115][T17524] ------------[ cut here ]------------
[ 266.442635][T17524] WARNING: CPU: 0 PID: 17524 at mm/page_alloc.c:4910 __alloc_frozen_pages_noprof+0x71/0x360
[ 266.452826][T17524] Modules linked in:
[ 266.456731][T17524] CPU: 0 UID: 0 PID: 17524 Comm: syz.2.5289 Not tainted 6.14.0-syzkaller-13389-ga52a3c18cdf3 #0 PREEMPT(voluntary)
[ 266.468969][T17524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 266.479084][T17524] RIP: 0010:__alloc_frozen_pages_noprof+0x71/0x360
[ 266.485624][T17524] Code: 00 20 00 00 75 0f 41 83 fc 0b 72 09 f6 05 9f 30 50 05 01 74 0d 41 83 fc 0a 76 18 31 ed e9 5a 01 00 00 c6 05 89 30 50 05 01 90 <0f> 0b 90 41 83 fc 0a 77 e8 23 1d 10 33 54 05 65 4c 8b 2c 25 08 00
[ 266.505363][T17524] RSP: 0018:ffffc9000508fa10 EFLAGS: 00010246
[ 266.511477][T17524] RAX: 3a8eed6e3d9e2700 RBX: 0000000000040dc0 RCX: ffffffff88df0020
[ 266.519563][T17524] RDX: 0000000000000000 RSI: 0000000000000012 RDI: 0000000000040dc0
[ 266.527586][T17524] RBP: 0000000000040dc0 R08: ffffffff81cf3ebe R09: 0000000000000000
[ 266.535576][T17524] R10: ffff88810b0539e8 R11: 000188810b0539f8 R12: 0000000000000012
[ 266.543591][T17524] R13: ffffc9000508fd18 R14: 0000000000000000 R15: 0000000000000000
[ 266.551584][T17524] FS: 00007f508d5c76c0(0000) GS:ffff8882aee24000(0000) knlGS:0000000000000000
[ 266.560523][T17524] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 266.567198][T17524] CR2: 0000200000005000 CR3: 00000001567fe000 CR4: 00000000003506f0
[ 266.575194][T17524] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 266.583212][T17524] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600
[ 266.591183][T17524] Call Trace:
[ 266.594496][T17524] <TASK>
[ 266.597511][T17524] ? should_fail_ex+0x31/0x270
[ 266.602367][T17524] __alloc_pages_noprof+0x9/0x20
[ 266.607341][T17524] ___kmalloc_large_node+0x83/0x130
[ 266.612593][T17524] __kmalloc_large_node_noprof+0x17/0xa0
[ 266.618316][T17524] __kmalloc_noprof+0x2bb/0x410
[ 266.623231][T17524] ? hashtab_init+0x82/0xf0
[ 266.627793][T17524] hashtab_init+0x82/0xf0
[ 266.632132][T17524] symtab_init+0x2a/0x40
[ 266.636370][T17524] common_read+0x10f/0x2f0
[ 266.640898][T17524] ? __pfx_common_read+0x10/0x10
[ 266.645902][T17524] policydb_read+0x64d/0x1350
[ 266.650654][T17524] ? perf_trace_kmalloc+0xe4/0x120
[ 266.655790][T17524] security_load_policy+0xc1/0x8d0
[ 266.660953][T17524] ? rep_movs_alternative+0x4a/0x90
[ 266.666256][T17524] sel_write_load+0x1f7/0x3c0
[ 266.670945][T17524] ? __pfx_sel_write_load+0x10/0x10
[ 266.676210][T17524] vfs_write+0x295/0x950
[ 266.680499][T17524] ? do_futex+0x279/0x370
[ 266.684920][T17524] ? __fget_files+0x186/0x1c0
[ 266.689737][T17524] ksys_write+0xeb/0x1b0
[ 266.694011][T17524] __x64_sys_write+0x42/0x50
[ 266.698643][T17524] x64_sys_call+0x2a45/0x2e10
[ 266.703346][T17524] do_syscall_64+0xc9/0x1c0
[ 266.708009][T17524] ? clear_bhb_loop+0x25/0x80
[ 266.712781][T17524] ? clear_bhb_loop+0x25/0x80
[ 266.717473][T17524] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 266.723453][T17524] RIP: 0033:0x7f508ef5d169
[ 266.728000][T17524] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 266.747677][T17524] RSP: 002b:00007f508d5c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 266.756164][T17524] RAX: ffffffffffffffda RBX: 00007f508f175fa0 RCX: 00007f508ef5d169
[ 266.764161][T17524] RDX: 0000000000006000 RSI: 0000200000000000 RDI: 0000000000000004
[ 266.772290][T17524] RBP: 00007f508efde2a0 R08: 0000000000000000 R09: 0000000000000000
[ 266.780353][T17524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 266.788371][T17524] R13: 0000000000000000 R14: 00007f508f175fa0 R15: 00007fffb86644a8
[ 266.796345][T17524] </TASK>
[ 266.799394][T17524] ---[ end trace 0000000000000000 ]---
[ 266.805308][T17524] SELinux: failed to load policy
[ 266.852398][ T29] kauditd_printk_skb: 111 callbacks suppressed
[ 266.852415][ T29] audit: type=1400 audit(2000000037.780:5377): avc: denied { create } for pid=17531 comm="syz.7.5292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[ 266.914426][T17539] gtp1: entered promiscuous mode
[ 266.919699][ T29] audit: type=1400 audit(2000000037.810:5378): avc: denied { write } for pid=17531 comm="syz.7.5292" path="socket:[51332]" dev="sockfs" ino=51332 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[ 266.944110][ T29] audit: type=1400 audit(2000000037.810:5379): avc: denied { nlmsg_read } for pid=17531 comm="syz.7.5292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[ 266.969169][T17544] SELinux: policydb table sizes (0,0) do not match mine (6,7)
[ 266.977290][T17544] SELinux: failed to load policy
[ 267.010681][ T29] audit: type=1400 audit(2000000037.940:5380): avc: denied { associate } for pid=17545 comm="syz.8.5299" name="0" dev="devpts" ino=3 scontext=system_u:object_r:mouse_device_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[ 267.142860][T17569] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in;
[ 267.142860][T17569] program syz.3.5310 not setting count and/or reply_len properly
[ 267.292507][T17589] xt_hashlimit: max too large, truncated to 1048576
[ 267.300689][T17589] Cannot find set identified by id 0 to match
[ 267.432260][ T29] audit: type=1326 audit(2000000038.360:5381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17596 comm="syz.4.5324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d366cd169 code=0x7ffc0000
[ 267.455878][ T29] audit: type=1326 audit(2000000038.360:5382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17596 comm="syz.4.5324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f4d366cd169 code=0x7ffc0000
[ 267.479309][ T29] audit: type=1326 audit(2000000038.360:5383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17596 comm="syz.4.5324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d366cd169 code=0x7ffc0000
[ 267.502835][ T29] audit: type=1326 audit(2000000038.360:5384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17596 comm="syz.4.5324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7f4d366cd169 code=0x7ffc0000
[ 267.526406][ T29] audit: type=1326 audit(2000000038.360:5385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17596 comm="syz.4.5324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d366cd169 code=0x7ffc0000
[ 267.550822][ T29] audit: type=1326 audit(2000000038.380:5386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17596 comm="syz.4.5324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d366cd169 code=0x7ffc0000
[ 267.630705][T17598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 267.639389][T17598] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 267.867875][ T3373] kernel write not supported for file /snd/seq (pid: 3373 comm: kworker/1:3)
[ 267.952909][T17645] xt_hashlimit: max too large, truncated to 1048576
[ 267.969920][T17645] Cannot find set identified by id 0 to match
[ 268.197367][T17667] xt_hashlimit: max too large, truncated to 1048576
[ 268.204967][T17667] Cannot find set identified by id 0 to match
[ 268.396433][T17679] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in;
[ 268.396433][T17679] program syz.7.5359 not setting count and/or reply_len properly
[ 268.547533][T17693] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5366'.
[ 268.556442][T17693] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5366'.
[ 268.717419][T17711] xt_hashlimit: max too large, truncated to 1048576
[ 268.728472][T17711] Cannot find set identified by id 0 to match
[ 268.797215][T17714] block device autoloading is deprecated and will be removed.
[ 268.815057][T17714] syz.7.5385: attempt to access beyond end of device
[ 268.815057][T17714] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0
[ 268.855853][T17722] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5378'.
[ 268.874356][T17722] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5378'.
[ 268.897811][T17726] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 268.906068][T17726] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 268.914390][T17726] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 268.922627][T17726] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 268.931643][T17726] geneve2: entered promiscuous mode
[ 268.961008][T17729] SELinux: policydb table sizes (0,0) do not match mine (6,7)
[ 268.961150][T17729] SELinux: failed to load policy
[ 269.108407][T17746] rdma_op ffff88813bd5b180 conn xmit_rdma 0000000000000000
[ 269.223049][T17768] syz.2.5401: attempt to access beyond end of device
[ 269.223049][T17768] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0
[ 269.696270][T17825] xt_hashlimit: max too large, truncated to 1048576
[ 269.709862][T17825] Cannot find set identified by id 0 to match
[ 269.905927][T17857] geneve2: entered promiscuous mode
[ 269.932734][T17860] xt_hashlimit: max too large, truncated to 1048576
[ 269.944838][T17860] Cannot find set identified by id 0 to match
[ 270.072147][T17877] xt_hashlimit: max too large, truncated to 1048576
[ 270.090836][T17877] Cannot find set identified by id 0 to match
[ 270.210922][T17900] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5461'.
[ 270.467300][T17941] xt_hashlimit: max too large, truncated to 1048576
[ 270.488021][T17941] Cannot find set identified by id 0 to match
[ 270.633831][T17954] ALSA: seq fatal error: cannot create timer (-19)
[ 270.788813][T17972] ALSA: seq fatal error: cannot create timer (-19)
[ 270.947091][T17985] bond1: entered promiscuous mode
[ 270.952313][T17985] bond1: entered allmulticast mode
[ 270.958231][T17985] 8021q: adding VLAN 0 to HW filter on device bond1
[ 270.979520][T17985] bond1 (unregistering): Released all slaves
[ 270.993641][T17991] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5498'.
[ 271.153492][T18007] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=18007 comm=syz.2.5507
[ 271.245640][T18021] ALSA: seq fatal error: cannot create timer (-19)
[ 271.520524][T18048] bond1: entered promiscuous mode
[ 271.525660][T18048] bond1: entered allmulticast mode
[ 271.542505][T18048] 8021q: adding VLAN 0 to HW filter on device bond1
[ 271.554148][T18048] bond1 (unregistering): Released all slaves
[ 271.807656][T18087] program syz.8.5543 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 271.869597][T18093] bond1: entered promiscuous mode
[ 271.874682][T18093] bond1: entered allmulticast mode
[ 271.894322][T18093] 8021q: adding VLAN 0 to HW filter on device bond1
[ 271.905213][T18093] bond1 (unregistering): Released all slaves
[ 272.087372][ T29] kauditd_printk_skb: 150 callbacks suppressed
[ 272.087390][ T29] audit: type=1400 audit(2000000043.020:5537): avc: denied { create } for pid=18110 comm="syz.8.5552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 272.130446][ T29] audit: type=1400 audit(2000000043.050:5538): avc: denied { write } for pid=18110 comm="syz.8.5552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 272.154420][ T29] audit: type=1400 audit(2000000043.080:5539): avc: denied { read } for pid=18112 comm="syz.8.5553" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[ 272.186572][ T29] audit: type=1400 audit(2000000043.080:5540): avc: denied { open } for pid=18112 comm="syz.8.5553" path="/dev/ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[ 272.210121][ T29] audit: type=1400 audit(2000000043.080:5541): avc: denied { ioctl } for pid=18112 comm="syz.8.5553" path="/dev/ptp0" dev="devtmpfs" ino=246 ioctlcmd=0x3d05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[ 272.320776][ T29] audit: type=1400 audit(2000000043.250:5542): avc: denied { create } for pid=18119 comm="syz.8.5556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[ 272.360672][ T29] audit: type=1400 audit(2000000043.270:5543): avc: denied { ioctl } for pid=18119 comm="syz.8.5556" path="socket:[53404]" dev="sockfs" ino=53404 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[ 272.385445][ T29] audit: type=1400 audit(2000000043.270:5544): avc: denied { bind } for pid=18119 comm="syz.8.5556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[ 272.584450][T18127] bond3: entered promiscuous mode
[ 272.589631][T18127] bond3: entered allmulticast mode
[ 272.599253][T18127] 8021q: adding VLAN 0 to HW filter on device bond3
[ 272.622125][T18127] bond3 (unregistering): Released all slaves
[ 272.745345][T18148] serio: Serial port ptm0
[ 272.800510][ T29] audit: type=1400 audit(2000000043.730:5545): avc: denied { ioctl } for pid=18156 comm="syz.4.5568" path="socket:[53468]" dev="sockfs" ino=53468 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 272.904852][T17041] ==================================================================
[ 272.904886][T17041] BUG: KCSAN: data-race in __stop_tty / n_tty_receive_char
[ 272.904924][T17041]
[ 272.904930][T17041] write to 0xffff88815b74ddbc of 1 bytes by task 18171 on cpu 1:
[ 272.904946][T17041] __stop_tty+0x42/0x90
[ 272.904964][T17041] n_tty_ioctl_helper+0x223/0x240
[ 272.904982][T17041] n_tty_ioctl+0xfd/0x210
[ 272.905009][T17041] tty_ioctl+0x878/0xbd0
[ 272.905029][T17041] __se_sys_ioctl+0xc9/0x140
[ 272.905055][T17041] __x64_sys_ioctl+0x43/0x50
[ 272.905085][T17041] x64_sys_call+0x168d/0x2e10
[ 272.905108][T17041] do_syscall_64+0xc9/0x1c0
[ 272.905138][T17041] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 272.905159][T17041]
[ 272.905164][T17041] read to 0xffff88815b74ddbc of 1 bytes by task 17041 on cpu 0:
[ 272.905180][T17041] n_tty_receive_char+0x3d/0x6a0
[ 272.905212][T17041] n_tty_receive_buf_standard+0x4c0/0x2f00
[ 272.905246][T17041] n_tty_receive_buf_common+0x837/0xbe0
[ 272.905279][T17041] n_tty_receive_buf2+0x33/0x40
[ 272.905307][T17041] tty_ldisc_receive_buf+0x63/0x100
[ 272.905333][T17041] tty_port_default_receive_buf+0x59/0x90
[ 272.905361][T17041] flush_to_ldisc+0x1d1/0x410
[ 272.905385][T17041] process_scheduled_works+0x4de/0xa20
[ 272.905421][T17041] worker_thread+0x52c/0x710
[ 272.905440][T17041] kthread+0x4b7/0x540
[ 272.905463][T17041] ret_from_fork+0x4b/0x60
[ 272.905483][T17041] ret_from_fork_asm+0x1a/0x30
[ 272.905506][T17041]
[ 272.905510][T17041] value changed: 0x00 -> 0x01
[ 272.905520][T17041]
[ 272.905524][T17041] Reported by Kernel Concurrency Sanitizer on:
[ 272.905538][T17041] CPU: 0 UID: 0 PID: 17041 Comm: kworker/u8:64 Tainted: G W 6.14.0-syzkaller-13389-ga52a3c18cdf3 #0 PREEMPT(voluntary)
[ 272.905573][T17041] Tainted: [W]=WARN
[ 272.905582][T17041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 272.905598][T17041] Workqueue: events_unbound flush_to_ldisc
[ 272.905629][T17041] ==================================================================