last executing test programs:

2m2.016837458s ago: executing program 0 (id=475):
r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18)
write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d)

2m2.000008689s ago: executing program 0 (id=476):
r0 = socket$inet(0x2, 0x2, 0x1)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='kfree\x00', r2}, 0x18)
sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @remote}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000004c0)="1ed8b7f9d457", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000)

2m1.983131861s ago: executing program 0 (id=477):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000010c0))
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20)

2m1.949173094s ago: executing program 0 (id=478):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x2151090, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0xab3011, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x80000, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x20000, 0x0)

2m1.948577674s ago: executing program 0 (id=479):
pipe2(&(0x7f0000001cc0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000040), &(0x7f0000000280)='%pS    \x00'}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10)
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',access=', @ANYRESDEC=0x0, @ANYBLOB=',}\x00'])

2m1.742254325s ago: executing program 0 (id=480):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
r3 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r3, &(0x7f0000000340)={0x18, 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'ip6gre0\x00'}}, 0x1e)
close_range(r0, 0xffffffffffffffff, 0x0)

2m1.741910655s ago: executing program 32 (id=480):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
r3 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r3, &(0x7f0000000340)={0x18, 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'ip6gre0\x00'}}, 0x1e)
close_range(r0, 0xffffffffffffffff, 0x0)

1m36.226346781s ago: executing program 1 (id=1416):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0xe0b, 0xfefffffc, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}}, 0x0)
sendto$packet(r0, &(0x7f00000002c0)="44c394f305916c4516999da286dd", 0xe, 0x0, &(0x7f0000000340)={0x11, 0x1a, r3, 0x1, 0x0, 0x6, @random="fb76f11b713b"}, 0x14)

1m36.165604107s ago: executing program 1 (id=1419):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@delchain={0x88, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x50, 0x2, [@TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @loopback}, @TCA_FLOWER_KEY_VLAN_PRIO={0x5, 0x18, 0x5}, @TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @rand_addr=0x64010102}, @TCA_FLOWER_KEY_CT_ZONE_MASK={0x6, 0x5e, 0x1}, @TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @local}, @TCA_FLOWER_KEY_ENC_UDP_SRC_PORT_MASK={0x6}, @TCA_FLOWER_KEY_CT_STATE_MASK={0x6, 0x5c, 0x7ff}, @TCA_FLOWER_KEY_CVLAN_ID={0x6, 0x4d, 0xb4a}]}}, @TCA_RATE={0x6, 0x5, {0x4e, 0x9}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x0)

1m36.063778177s ago: executing program 1 (id=1421):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000400180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10)
r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x2)
r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
flock(r2, 0x2)
r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
flock(r3, 0x2)
close_range(r1, 0xffffffffffffffff, 0x0)

1m36.006337473s ago: executing program 1 (id=1424):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb101e, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)

1m35.965936806s ago: executing program 1 (id=1429):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, 0x0)
write(r0, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xb470, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000003740)={{r1}, &(0x7f0000000400), &(0x7f0000000600)='%-010d \x00'}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
statx(0xffffffffffffff9c, 0x0, 0x2000, 0x100, 0x0)

1m35.746332278s ago: executing program 1 (id=1434):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00')
r3 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
bind$packet(r3, &(0x7f0000000280)={0x11, 0x0, r4, 0x1, 0xf, 0x6, @link_local}, 0x14)
preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000600)=""/212, 0xd4}], 0x1, 0x1b, 0x0)

1m35.738033219s ago: executing program 33 (id=1434):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00')
r3 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
bind$packet(r3, &(0x7f0000000280)={0x11, 0x0, r4, 0x1, 0xf, 0x6, @link_local}, 0x14)
preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000600)=""/212, 0xd4}], 0x1, 0x1b, 0x0)

1m35.134717809s ago: executing program 4 (id=1459):
r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
write$binfmt_script(r0, &(0x7f0000019380)={'#! ', './file0'}, 0xb)
close(r0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x10)
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)

1m35.062203316s ago: executing program 4 (id=1460):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'})
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x926, 0x3333, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x3, 0x3}}}}}]}}]}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000012c0), 0x0, 0x0)
readv(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1)
ioctl$TIOCVHANGUP(r1, 0x5437, 0x0)

1m34.483072153s ago: executing program 4 (id=1465):
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xc, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x840)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c0000000800124000000000050005000a000000050004000000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000306010200000000000000000a0000010500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840)

1m34.422673789s ago: executing program 4 (id=1467):
syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000300)='.\x02\x00', 0x2000800, &(0x7f0000000040)=ANY=[], 0x1, 0x2da, &(0x7f0000000340)="$eJzs3U9r02AYAPCnf9Z1Q9zO4qHgRS9DPXspMkEsDCY9qBcLU5BNhO5SBaFfwYv4ATz5kTz4IXYaeKikydZu7RyMNNmf3w+yPcmzvXkS0rw5vG/69u7H3Z1P++9Hv39Es9mKejQjDiPWoxq1SFWSH82juBHThrUTq7EcAMBlt73da5+VGxZbCrmoz2zp99u9pbnPZt1fBRUFAAAAAAAAAABAzmbH/8dw7vj/iKieHP8/DowRBICr53/j/7ke+v12bzV9fjs1W9P4fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA89RitjUajB7fS1SSeLI1YK7s+ACB/h9P9/fHyd5TR/wPANTS//58sZdcHAORvqv+POKf/r5VXJgCQo5evXr9odzqb261WM+JgOOgOuunvNP/seWfzYWtsPSKq6daDwaBbO84/SvOtSatJfilWs/zjuflG3L+X5pPc063Oqfxy7BRzCgAAAAAAAAAAAAAAAAAAAKB0G0cv9Unn92cm8/s3Nra+//lwPP9/Kp9G2fsBqnFqfv/Xn/W4Uz9v78t5HQYAAAAAAAAAAAAAAAAAAABcafufv+z29vbe9YsJKhGRb8u1iBgH9WxLLfddTAWLazkJmjEOKjGTakTEhVtOTvr8VJK5aM3f0iDiIv/+5E3EuX9c2V2JmdRK8RftYoOV7JN4Weq5nV0tZ90xGsXdnAAAAAAAAAAAAAAAAAAA4IaZzP4tuxIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKM/k+/8XF5R9jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDN8C8AAP//WY11Gg==")
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_pidfd_open(r2, 0x0)
setns(r3, 0x24020000)
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x123c060, 0x0)

1m34.353995575s ago: executing program 4 (id=1471):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r0}, 0x38)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x1809049, 0x0, 0xfe, 0x0, 0x0)
setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0)
lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=@v3, 0x18, 0x0)
lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0)

1m34.170556474s ago: executing program 4 (id=1476):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000001c0)='kfree\x00', r1}, 0x18)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001000010700020100000000000a0000000600010016"], 0x1c}}, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)

1m34.170196174s ago: executing program 34 (id=1476):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000001c0)='kfree\x00', r1}, 0x18)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001000010700020100000000000a0000000600010016"], 0x1c}}, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)

1m16.363158929s ago: executing program 7 (id=1978):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18)
faccessat(0xffffffffffffffff, &(0x7f00000009c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802"], 0x50)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000200)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, &(0x7f0000000240)=[0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r1=>0x0, 0xbb, &(0x7f00000002c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0xad, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000580)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$xdp(0xffffffffffffffff, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002240), 0x0, 0x0, 0x0, 0x10}, 0x40000)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xfffffffffffffffe}}}]}, {0x25}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0)

1m16.299917716s ago: executing program 7 (id=1980):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r2}, 0x10)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x50, 0x2c, 0xd3f, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xffff, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0xd, 0x0, 0x1d}}}]}, @TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0)

1m16.171240989s ago: executing program 7 (id=1984):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdcf, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000000), &(0x7f0000000180)=r1}, 0x20)
r2 = socket(0xa, 0x5, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x22}, 0x48)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r3, &(0x7f0000000240), &(0x7f00000002c0)=@udp=r4}, 0x20)
close_range(r2, 0xffffffffffffffff, 0x0)

1m16.138306642s ago: executing program 7 (id=1985):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb101e, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
umount2(&(0x7f00000001c0)='./file0\x00', 0x3)

1m16.090509857s ago: executing program 7 (id=1987):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f0000000680)={[{@dioread_lock}, {@noblock_validity}, {@abort}, {@user_xattr}, {@user_xattr}, {@grpjquota, 0x2e}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@errors_remount}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x84, 0x4c1, &(0x7f0000001940)="$eJzs3M9vFFUcAPDvTGkpP1uQqPxQVtHYiLa0oHLwoEYTLhoTPeCxlkqQAobWRAiRagwejX+BejQx8eTFkybGqBc1XvVuTIjhAnowa2Z3pt2l2+3ulnbF/XyS3b4382be+76Ztzs7r7sB9KxS9pREbI2IXyNiqJqtL1Cq/rlx7dLUX9cuTSVRLr/0Z1Ipd/3apamiaLHdljwzkkak7yWxt0G9sxcunp6cmZk+n+fH5s68MTZ74eKjp85Mnpw+OX124ujRI4fHn3h84rGW4ri8wvosrut73j63b/exVz58fqocr37/Wdberfn62jiqhluqt5lSlKKcW1w6UHl+cNV7/2/ZVpNONnSxIbSlLyKyw9VfGf9D0ReLB28onnt3IfNNlxoIrJnsvWnHkqV9+d904f0L+D9KjHHoUcU7fvb5t3is5/VHt119OnuersR/I3/8+EK1b9Lss+xw9RN7eZnt72ywbHAxWR5aof6tEXF8/u+Pskc0vA/RRNJySQCABV9l1z+PNLr+S+uubbbncyjDEXEwInZGxB0RsSvShTJ3RcTdbdZfuim/9Prn501t7rIt2fXfk/ncVvGoriniShZy2yrx9yevnZqZPpT3yUj0b8zy403q+PrZXz5Ybl2p5vove2T1F9eCeTv+2LCxfpsTk3OTqwi5ztV3IvZsaBR/sjATkPXA7ojY08H+sz479fCn+7L09i1L168cfxO3YJ6p/EnEQ9XjPx83xV9IqjUtNz85Nhgz04fGirNiqR9+uvJibb6/Jl0X/2BrMQ12GmwD2fHf3PD8z+MvhkExXzvbfh1Xfnt/2c80S49/Esfna0vk5/+mxW7Lzv+B5OVKeiBf9tbk3Nz58YiBfEHd8onFvRX5onwW/8iBxuN/Z8Q/H+fb7Y2I7CS+JyLujYj9edvvi4j7I+JAk/i/e+aB15v3UIfn/y2QxX+i2fGPGE5q5+s7SPSd/vbL5epv7fXvSCU1ki9p5fWv1Qaupu8AAADgdpFW5qCTdLRI19yc2hWb05lzs3MHS/Hm2RPVuerh6E+LO11DNfdDx/N7w0V+4qb84YjYUflPo02V/OjUuZlt3QwcqHxXp278R5qOjlbX/d7X7dYBa66tebTafzr7/Itb3xhgXfm+JvQu4x96l/EPvcv4h97VaPxfjrjRhaYA68z7P/Qu4x96l/EPvcv4h5609Cvxxc+tdPJN/8XEzmOr2nzNE+WhNdnzfPtb9a1RpFH7ox3LJpKI6KyKSJuXGWih9q4l0hXLPLVSt/Sv6jcxssT+PLExIlrd6vK69WrxCpH4lUkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOC29m8AAAD//2cg5YI=")
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc020660b, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0)
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
io_setup(0x2004, 0x0)
getdents(r0, 0x0, 0x0)

1m15.897200485s ago: executing program 7 (id=1994):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xc040002)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000340)=0xe)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000840), 0x1a01, 0x0)
ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246)
pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000640)='hQ', 0x2}], 0x1, 0xffffffff, 0x4)

1m15.878643338s ago: executing program 35 (id=1994):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xc040002)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000340)=0xe)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000840), 0x1a01, 0x0)
ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246)
pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000640)='hQ', 0x2}], 0x1, 0xffffffff, 0x4)

1m14.525641541s ago: executing program 6 (id=2015):
unlinkat(0xffffffffffffffff, 0x0, 0x200)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000980)={'wg2\x00', <r2=>0x0})
sendto$packet(r1, &(0x7f0000000180)="0b031407e0ff640f0200475400f6a13bb1000e00080008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14)

1m14.406615592s ago: executing program 6 (id=2017):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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")
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x7fffffffffffffff}, 0x18)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0xa1000, 0x20)
getdents64(r2, 0x0, 0x0)
lseek(r2, 0x9, 0x1)
getdents64(r2, 0x0, 0x0)

1m14.306586232s ago: executing program 6 (id=2019):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x18)
r1 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r1, 0x402)
r2 = socket$unix(0x1, 0x5, 0x0)
connect$unix(r2, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
accept(r1, 0x0, 0x0)

1m14.218628161s ago: executing program 6 (id=2020):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0x82}, 0x18)
r1 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r1, 0x8)
r2 = accept4(r1, 0x0, 0x0, 0x0)
write(r2, &(0x7f0000000000)="ea", 0x1)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x4}, 0x8)
close(r2)

1m14.211497122s ago: executing program 6 (id=2022):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00'}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000340)='kfree\x00', r1}, 0x18)
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='\x00\x00\x00\x00\x00')
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)

1m14.181547085s ago: executing program 6 (id=2023):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xb, &(0x7f0000005300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
pipe(&(0x7f0000002480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
splice(r4, 0x0, r2, 0x0, 0xf3a, 0x0)
tee(r1, r5, 0xf3a, 0x4)
write$binfmt_elf64(r3, &(0x7f0000000380)=ANY=[], 0x18c6)
socket(0x10, 0x2, 0x0)

59.137069568s ago: executing program 36 (id=2023):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xb, &(0x7f0000005300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
pipe(&(0x7f0000002480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
splice(r4, 0x0, r2, 0x0, 0xf3a, 0x0)
tee(r1, r5, 0xf3a, 0x4)
write$binfmt_elf64(r3, &(0x7f0000000380)=ANY=[], 0x18c6)
socket(0x10, 0x2, 0x0)

4.96386508s ago: executing program 8 (id=3122):
syz_open_dev$tty1(0xc, 0x4, 0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
process_madvise(0xffffffffffffffff, 0x0, 0x0, 0xc, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r2)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x303, 0x2, 0x0, {0x6}}, 0x14}}, 0x0)

4.607044716s ago: executing program 5 (id=3129):
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40012040, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)

4.448812871s ago: executing program 2 (id=3131):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080", @ANYRES32=0x0], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_clone(0x6a000000, 0x0, 0x0, 0x0, 0x0, 0x0)

3.170192738s ago: executing program 2 (id=3133):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x20000}, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d458d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x183, 0x6}, 0x6025, 0x4005, 0x3, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0xfd, 0x7fff0000}]})
syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/config\x00')
close_range(r1, 0xffffffffffffffff, 0x0)
prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd"], 0xfdef)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4)
mkdir(0x0, 0x0)
mount(0x0, 0x0, &(0x7f0000000080)='ramfs\x00', 0x2208c08, 0x0)
umount2(&(0x7f0000000280)='./file0\x00', 0x0)

2.600242064s ago: executing program 2 (id=3136):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0, <r2=>0xffffffffffffffff}, 0x0, &(0x7f00000004c0)=r1}, 0x20)
syz_clone3(0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[], 0x48)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
syz_open_procfs(0x0, 0x0)
ioctl$FICLONE(r0, 0x40049409, r2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000003, 0x13, r3, 0x0)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000300)='westwood', 0x8)
sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r4, 0x0, 0x0, 0x10008095, 0x0, 0x0)

2.599502984s ago: executing program 5 (id=3146):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4)
getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x3c, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r5, {}, {0xfff2, 0xffff}, {0xffff, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010)

2.367694896s ago: executing program 5 (id=3139):
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x4000)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000010c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x4}}}, {0x30, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0x8, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xdc}}, 0x800)
write$P9_RLINK(r0, &(0x7f0000000140)={0x7, 0x47, 0x2}, 0x7)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x3a)
r3 = dup(r2)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18)
recvfrom$inet_nvme(r3, &(0x7f0000000000), 0x0, 0x40000022, 0x0, 0x0)
bind$unix(r3, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000ffffffff0000000004000000850000002200000018010000696c6c2500000000002020207b1af8ff00000000000007010000f8ffffffb702000008000000b703000006000002850000007b0000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000050000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008008000b703000000009c8c850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
lseek(r4, 0x2010, 0x0)

2.348673478s ago: executing program 8 (id=3140):
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x4)
r0 = socket(0x2, 0x3, 0xff)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x7, 0x20004, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
ioctl$USBDEVFS_CONTROL(r1, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x7, 0xffff, 0x0, 0x1, 0x0})
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg$unix(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000600)="18fcae977278aeffab541cc2e2b2e420", 0x10}], 0x1, 0x0, 0x0, 0x40}}], 0x1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280))
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008000000"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r3, 0x0, 0x3}, 0x18)
syz_io_uring_setup(0x499, 0x0, &(0x7f0000000100), &(0x7f0000000140))
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x40000)

2.186538484s ago: executing program 8 (id=3143):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kfree\x00', r1}, 0x18)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]})
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x7c, 0x30, 0x1, 0x0, 0x0, {}, [{0x68, 0x1, [@m_mpls={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x5}}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8847}, @TCA_MPLS_LABEL={0x8, 0x5, 0x199d2}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r5}, 0x10)
rt_sigpending(0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0x2)
readv(r2, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/135, 0xc9}], 0x1)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0xb0, 0x1403, 0x1, 0x70bd2c, 0x25dfdbff, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'team0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'sit0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'hsr0\x00'}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000840}, 0x4000)

1.72625036s ago: executing program 2 (id=3153):
fsopen(0x0, 0x0)
io_setup(0x239f, 0x0)
io_submit(0x0, 0x2, &(0x7f00000000c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x800002}, &(0x7f0000000100)={0x0, 0x0, 0x8000000, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x21, 0x0, 0x0, 0x3}])
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
r2 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0)
flock(r2, 0x2)
r3 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0)
flock(r3, 0x2)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x25, 0xa, @val=@netfilter={0x3, 0x0, 0xfffffffe}}, 0x20)

1.669389685s ago: executing program 9 (id=3156):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f0000000c40), 0x12)

1.646643088s ago: executing program 9 (id=3157):
r0 = socket(0x23, 0x2, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r1, &(0x7f0000000340)={0xa, 0x3, 0x7, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000240), &(0x7f00000001c0)}, 0x1b)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x3}, 0x18)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28)
write$binfmt_script(r1, &(0x7f0000000500)={'#! ', './file0'}, 0xb)
close_range(r0, r1, 0x0)

1.535053948s ago: executing program 9 (id=3158):
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000080000000b"], 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b00)={0xffffffffffffffff, 0xe0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0xa, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x71, &(0x7f0000000800)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000840), &(0x7f0000000cc0), 0x8, 0xd7, 0x8, 0x8, &(0x7f00000008c0)}}, 0x10)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="b022fd84099290ab8ebe39cfc17f80bc2926131e9437a1dea9ca1756900531c14b67f7a9edd0d80c7c73649053153a8d8db6d3c0d3b3fa951f57d14071b61a27d968a0ae7bd580d2d9fd9034451c3ecffae80b234e72fb11e3a60c1208bd5262c5009e3e45582ed4203850292ed682fc5e26f5c2af47718ee5b4f2ed68f0b21b813ec22c4c61d3f22f5a01ebea6c484d8ef4ca90180b4587e0bee2f782fef574aa1e0ebc5d9e42452910d03c12feff7848f72ac5430476b9dc2457a09efdc6f181c408abe7b30cccd2c8fb85389e1cacd4f4b29a3d4a55941bf1bb416203732d6712d5a89470876ae6daec66f3fe1b39982c2781b115e20af7ce0a0c7c77db1073adc6e11597bd9f540f90f60b92dc84a5c764379c0b9426ff4f547182502633aa754dcfc63e46c7cef8e3a0c29bf5184ac150e90d884c59cba3dae7c531fb114534292629d8532c0f67ee37f2c349ea8f28199aff2aa335df5db411287a73adfbfff212cf7b6d277a361c55af160d98b5c3db84da37d80e07269c33f60f111ec3c09d8843e1f5499e71de9b48882b9415d45b20393888ec49f307d535580947b5a5b40b465382aa4a579f317d91792f8ed70e9401863bc0a21d7e15f828ae8f13c673a30cba6f10f89c8a018cc8bbe7072ffe1c5d4ef11f0f82cf967faef8608f8b289245f87607917b0c2578dbbe5186ac78b8cd9a5aff567aebe8a73dd547fdc503885a2df4953f3497688b7b1ede6a2e529b25ecc246a7bcb00077059d7e0100aa20cb4d1dbac6eec0a9f803601c799eddb9b271f0530842291167abffb982fe47a496e884ee3c17850f970cb3ac3342b832b8b984e2eb4836afb7727f7310a347add2a1094cfff7b44516593bbf15f3a9e0e2a788e99bdec6706ae9a39b4f8983ae38d4cdf866d9670de91036ea86646f195ec4b4ce462ea624b8875825262a301f9235496b935506109287bbcf4754e3fa637428a2e39a80cd07ffafd756839abddc721421754fcae705ab432fcdd6f3c004dfad9e6bfa87746dd41649dcd2bf1728a3d6d2ddf27a52957422a27f9e478530873d9f1861b71f2378540648b171bcbd44533723ae1a89e56e2f570c0571eb3c66fac65e3abad003a828f2d21cc990e57b80dd3762fe1204eb320591d6a93f9052b80494b2f52ad89d6374cf33040e2484c3384946450bb65835d65bebb4a91c0f82e598e5aa7ff9ba79f27bbd46240287721d2759fa24cec97658d8f17b3f424293f7253b74dae4b966c8089c546936953d8ce63463c26f1e296f56e17e7f890b6001ed5d9f739036842e989b40c02d3fe5227b1fb08a98f1b1f0c336346698e70171e74e40c5304a356b29c947672f8a0535b7ce3a66b276d09ca3d9fff030e41598649a310875f5b5801c471182c1f617c907f06b5f36a1f9294b0f4a95d0fc98682b1e38f2f94fb08f20c5e5c7afaa9fbbd84734a98dd9b33188f6b79334b09ca8e2de56457242f904b114a2c313b193fe421d7fa97da5ab77f363e83b4698bf903022d13826ded79a905f07f97dc0fc4cc290b969ee37075a4a80a0d86d0696eeea2048ebd1a97f8319b3342e515ae5c9e25ee933d926ae0f31af55aeb07da6508756ac9549ba8bbc0095a17cb647df12f926e595a531d7208ef75cfd6239f65a0584121c75e00f7c77990b90e6350b1a84eba4430979bb726ab02050573af29156bed8e243527593dc0c6de41d0b6775818a96ee97d153826a217e8d7e88c6c44baa781a495afeba3882a06f5b1a87b1e8ee1edf404ac3ade6f5af1f6cd22c01506b5f84befb55c86f79b56e4d5754be8f564f57852f991c2275cbf55937666e022c2b2f0d020156152377859b345f74fe66791421e5571a7900df89c9bef5c3cb19113fae5d524ae2edea5ca91baf096c02e1e860c9b5a97882da598ef1e39fcb61d83f997675a772ac37c0fbe65a9d379b9204a915fdb6a7c7cdbd14c0893cd5e8cfd56f4021756d6c6a25b258a69922a41f3c7bc43b69f46293b381a27ae5a3cfcf2526f8eadcb540ec87d6009d6a2939882140f9a447c5be4328a0681aa3002f6a9dfd836b362fb1d423d7c9571aeb50e2a6acb9ab4e85574baf27b1028db0f6647aa7fe995c1fbf8ab422bb15acf9ae6de73972c9549cb601297bbb1c740e8761af16c4785c4827b5dc5e52f4a82000f6f87670ec19fea4e04e564fc83c0ccf1b7fa2bb9ac3e56addfa7f5f6d1d3d3c92dea5de9fa42f1414a769b0cdc40e306fee0ad66573628b83a07fe087fcb3377848e1a7869e592c83bb594284da28a4f5db381059d56e5d4989042dadbbe6000b66184ca8fe9d293f6c70988f3d7b8ee00546a21aaeca498ae06fa7becc5a55914c7a1ab714d955a8b0bd72e8d6bbf4dd451b525fcbc9fb5c10747dee3c755d39be5c2d52345c56185a8d6cee878b72255acabf7dbefafaed94838532fd01ea6244c4ac929de6846084a07d19de7098e62b613775abe326d402f707c4fbb3968b0aac7f1f27537cbdecee19151b310bcbe2c848ef41eea747e85f87d5a160b2cb6b28d137e30c69770c1651e44a66f8e3394bec03c8256b89fd59bec449c6a2bdb351f53d05e463f75b834624b8c7b557dc38a398d726d0846fc2f062b5b32d10af38ce844c6811aaef73ace1d86813bc37433670f6180f9bd112ae00133077fc7a0bd12d7b4b3a53a3c16a9cb0e8112f18691aa3bd2215afdaa1d00c8ea4f4a302ea9ebc94afaad2549f646a8ae66b953fa9cd649a02c4b152cc6c7b55d99ddc3d0fd1fcd84da355eb02581dba9e4d9dd235d2d4c4e094161440e70926221d76ce70c8762485c8b801550cc208e5d1bfd184e622ff0950a912dd47163c838fd562f09ca1690e76da55a471ec67cb83bbb103975bd4683f0393ec8b843f55ba2c0bdc6c90b50031cfe751792bd5d0cb50c8ee93086794e18c4ed66d6bd09b499f8ff2f63a8920701ab0af5b4b75402b1d65b1eb515dc46e181a1699f21e67349c904f02f8358e28faff2ade65703d14dc2774b02acc731eee0941675502d95e0c32a7304f6e9af85ef220daea0de24cf79e35a59412e62835d3032f88d9ed7befd4f708bfd2d236bd188b6f951bbe13e3add84f111e20324a523426611ec15fb376e7306cbec6867f0b945047a4facf78154e68a66a36972d5a18af1403baa9b4b51fddd072ee1f0087add02485b40323bd708b76406e10a927a913d91c5d771d3aeb3cfafb54b1016785c61ed13060d5f1b550676a656b874fd392ae61c5044218df55cbb72b819990ffdb130fb17a14f7cb5a2a8aafedc6526d83762dbf320f15758030eeecf5652dccf04cdc68827400c768a21daff47212b87357ff0bcb36cae4d113a5d9815b07332cb42329321664d93e43e6dcd6115987007fc623088004f8ac943736eb2a045a25b1bbfbbc97571eabf875d924f6b7b0e524b1afa0ff499473aa7976de83b91928e84f8e445728778fe0e5a356a57f09ed254848cec31b7c5c9c7a2fca21befe15ffc9317e96f7ad582684ce625791b99563781bf64983e77be4f1a5893beec4b560fc15e9c21dd0c29bf2879dfaa257ba5ec97957050d5b2c1f25eb4064488c139dbf88f3b7c70850d6fdbf0603cdd4011bf76e0d9ee5c2b128b50dba5689a8f04d4caf62d777eab31aab4b4195da780901352d284885bf417eb05367ee1b5f2f8c5cfe7f0394fb977f3a3f96084375e22ccf6c3ee4659d68d2b1948a4a1783a4db2282c67d39613fa67be4dd144793b76c09dd563ef3d169f34318acbd62d3b2d64f9173d16e9801132918c3390172c6f64d049b4c894d593419e5f4d5a513fc5a64ddcd05b034e6d16fe88ff89a520c464f842ad5a62a6fc46f0e9d56d05d6f5e625d25f537cca62910981dd463255318d8273db13d27fdc6c17c2c54776ba3a246c413957f297b8ecb1adb5c3f1d4d8e4d7705bdb9268f956d2845b68511edd51cdc5d05de5d6d4b3f573592986fed325f1f3c6a9ef7740f9d843e11981d1ca515c7e722ec4d691c5e4d3a146e39bcf407f66418f754bb2508cb4cc843aa9d8eb63850e5b9103682ecc1fc8f972f394be9d31cb9efd0f693d4ec41fe8d0993b45d2f422f9ab604d3371c1bda1daa3206a027c4de5c8f2cf6d1fc7e6d1423a6c71e84f24e0a4dfbf4a331deff2ae649df9681a08846efc9f0001e7ef106f1bfa25ee2799b13f1f076e30e58078d186afb65301497e982478babf143972cc7072f70829b8faee46e56a1451ff7ddd0dd35816bfa29eee361de60fbc3222e89d70f1495be94d0e82072a0e572e3055c905552e6c45d2af3d4f505a99d947667059c1c92ce2d3549077539c4cec4c07337361eeb9f78813bf9e77b0a79f391ae6eb663deb53317f61ef8ddffdbd0ca2d8095c10c106b0968325bc1e88829d92399b809f1b881e9b9f0aeada5c5ee20fd0866070e3d5d41e62f5b6d2d25441babcdf9d3dc8ae3c140a6f352daf00ed38e248b236acd27f24bdebae0f272a5820ef77fb603fe3cc910a9d842129259e61d25dcf546cd770e4cccab470b20fa5f5972a6dd15853483de6e032f9726c166e81e8e0f9db4df397cc4a10b6e58708a31f48d7d2bae4ef92828c37088068b2ae433110dc7c08e6017d8b26e4e0382ca8fa62dc6f53c4cc2f0f78af72335c494f57f2414afe247e2291c395895bb18f701b6f4331feb759110c543dd94a238e782ad552047677558a50e7683d71a9e222fd19a9343e1d64528640a8099dedd19e4c747dda18ff25b15bddf750a54533b6ecfc75ad4a2909485f7fd759d45c74727b2e7300eae71a8784f5dd7f25b4b000ed3254264131cbbae316fb3a3bfbeb309dd2d18104629db354f447791eb882bf0333a520b8dba745b673d071b07e1de3e02fe751a1cf5908435b1a38edbd60483abdb15452c868844ceb96c449ab72999a55c79f9ce7405797142ef7095b4caf99d7bbe51cd4e963e4ffbbd2648761abd3894b5420a0add261ff9c0eff61aafd1ac5195ff15cadb5b0c7ce34d4d2d68146f3dae677e833b8be0f8a876153bb65398def38e4bf539d3a00047b19c483062fc1c2547b7d4f7d99b7035212ccfffeeb21ed7bbd6165ac7fbafbca3cef86fff655305706dd0baa607c50543bb0d66f0f4dbdd9c365fdb7b875dc5e7ee59afccc321ad1e31cc84687afda71231bb2e4dc3ce79ff3ce4bbafed8821a5b71bbf3844f110e2dd9557b596ac792d97506d22c0410bce435e20fa2e2d435361b5b6ac85f44763769723a7b629258f45e10578f70bef2e9c05af8032e357697dfcd30de9b3e953a36d6cb7a03ce69288b663f692793904dd8fb4ab6dc31ddf7f6942ef84c1e68c78bf9974f830ee2fccca84113cee98b47ed41a87fe610c5348dc38d4ada19862772317a70754870347ad87dbbb4c52349b0261aa8e108fcf387b24d4e2a77ba76e8472fd74ab6fa021277a24ef7a48d395b0fd1f9c0cf83bac56b433ffbfe5984a362e337969febf259988162c2b4842bd2fc0b230fee93a085003e615088abfe41889f7b5e0f380ffe55b66c1f7419993c3dd4aac5891494a183ddca2e415e1749489c925715f3c44d94b90d2d735f2b923bdbbbf1646580ab135356a9ee29bc19e73ded9a33798a69d248574e0c9e9f40a1c1ba52bc66a578d08b75f271a9e9f447efede09d6b3b57e0aa6322c18fd6f5e1c9d2753e0a6513cc04124ab89802eb9c504f0e5550868ab597629d7cc7447ed1b01b2ff4cf511aa098710b208b5aa0f595039a2f0e7294c5fe3b0c3e6c40000000000000000000000000000000002588beb10115f4b22f4ac997c86c49201ee9dceb2142ae61555bbbc4ef8cdd468a8ffbe6cbfc8877dd87292c70e10669bc99d8d5710f7719cc2cffc86cd529b6da2511d07aef4a1d9533ab58a76f80ad7fe91a17397d3c83481", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$eJzs3E1PE10UwPHTF0pbAmXx5DGaGG50o5sJVNdKYyAxNpEgNb4kJgNMtenYkpkGU2NEV26NH8IFYcmORPkCbNzpxo07NiYuZGEc0+kMhTKAlNIi/H8JmcPce6b3zgzk3AnD+r23T4t5W8vrFQnHlYRERDZEBiUsvpC3DbtxTLZ6JZf7fnw+f+f+g1uZbHZsUqnxzNSVtFJqYOjDsxcJr9tKr6wNPlr/nv629v/a2fXfU08KtirYqlSuKF1Nl79W9GnTULMFu6gpNWEaum2oQsk2rHp7ud6eN8tzc1Wll2b7k3OWYdtKL1VV0aiqSllVrKqKPNYLJaVpmupPCvaTW5yc1DMtJs+0eTA4IpaV0SMiktjRklvsyoAAAEBXNdf/YVHtrP+XLqxW+u4uD3j1/0osqP6/+qV+rG31f1xEAut///MD63/9YPX/zorodDlU/Y/jYSi2Y1eoEdYarYye9H5+Xa8fLg27AfU/AAAAAAAAAAAAAAAAAAAAAAD/gg3HSTmOk/K3/leviMRFxP8+IDUiIte7MGS00SGuP06Axot70QER8818bj5X33odVkXEFEOGJSW/3PvBU4v9N49UzaB8NBe8/IX5XMRtyeSl4OaPSKpHmvMdZ/xmdmxE1W3P75Hk1vy0pOS/4Px0YH5MLl3ckq9JSj7NSFlMmXXH0ch/OaLUjdvZpvyE2w8AAAAAgJNAU5sC1++atlt7PX9zfd38fCDSWF8PB67Po3Iu2t25AwAAAABwWtjV50XdNA1rjyAh+/dpPYge0ZH9Gf5tlv+3DEc30z0C/8O3NcW9nW0/LaEDnJZdgrC0kjVUm4067Cz8x0a79ZGJ0c5fQTc48+79z/Yd8NpyfJ+Zth5E9r4Bejr2CwgAAABAxzSKfn/PaHcHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAKdSJ/47W7TkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx8WfAAAA//+SWQVN")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0xffffffffffffffff}, 0x13)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xf0)
pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
fdatasync(r0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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")

1.482448744s ago: executing program 5 (id=3159):
getpgrp(0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getpgrp(0x0)
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x80000, 0x87)
r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000340)='btrfs_transaction_commit\x00', r0, 0x0, 0x1}, 0x18)
write$UHID_CREATE(r1, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120)
write$UHID_DESTROY(r1, &(0x7f0000000080), 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='dots,nocase,dots,dmask=000000000000000003,dots,dots,dots,quiet,dots,nocase,showexec,dots,dots,nodots,nodots,nodots,dos1xfloppy,errors=continue,nodots,check=normal,check=strict,dots,\x00'], 0xfd, 0x1cf, &(0x7f0000000440)="$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")
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000000100)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x61, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x2f, 0x9, @dev={0xac, 0x14, 0x14, 0x10}, @remote}}}}}}, 0x0)

1.258767136s ago: executing program 8 (id=3160):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18)
socket(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10)
r3 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r3, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000380)={0x43, 0x4, 0x3, 0x3}, 0x10)
sendmsg$tipc(r2, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4008030)

1.130267258s ago: executing program 5 (id=3161):
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xf, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc)=0x2, 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc)
mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff)
keyctl$revoke(0x3, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40006)
r1 = syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff)
sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0x300, 0x70bd2c, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000040)
mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil)
mlock2(&(0x7f0000495000/0x2000)=nil, 0x2000, 0x0)
get_mempolicy(0x0, 0x0, 0x203, &(0x7f0000394000/0x3000)=nil, 0x3)

1.050489826s ago: executing program 8 (id=3162):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
utime(0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x47bc, 0x2000, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x7, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000060000850000007700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]})
open(0x0, 0xe180, 0x2)
close_range(r0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01)
writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000800)="390000fa461a668300111200cc0800000000000000001700000000e0da8979d21cd95c7a6ee4ca508c4752fc6ca9e48270faf047145bc7", 0x37}], 0x1)
ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r1])

1.039674338s ago: executing program 9 (id=3163):
syz_open_procfs(0x0, &(0x7f0000001300)='net/kcm\x00')
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000280)=0x14)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r1 = syz_io_uring_setup(0x499, 0x0, &(0x7f0000000100), 0x0)
r2 = socket$kcm(0xa, 0x922000000003, 0x11)
r3 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r3, 0x0, 0x0)
sendmsg$rds(r3, 0x0, 0x0)
sendmsg$rds(r3, 0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(r4, 0x5411, 0x1000000000000)
sendmsg$kcm(r2, 0x0, 0x20000810)
io_uring_enter(r1, 0x3516, 0xddd3, 0x4, 0x0, 0x0)
read(r0, &(0x7f00000019c0)=""/4097, 0x1001)

971.272394ms ago: executing program 9 (id=3164):
r0 = socket(0x10, 0x803, 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0x11)
capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f})
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x2)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/53}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
socketpair(0x18, 0x0, 0x2, &(0x7f0000000000))
futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000048000)=0x2, 0x24ffffff)
ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000140))
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r4=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xe}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0xffffffffffffff1f, 0x2, {0x1, 0x1000}}}]}, 0x38}}, 0x0)

814.82885ms ago: executing program 9 (id=3165):
openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0), 0x8002)
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002)
ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f00000000c0))
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)})
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18)
syz_open_dev$usbfs(&(0x7f00000000c0), 0x70, 0x103301)
write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8)

770.534064ms ago: executing program 2 (id=3166):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x80000, 0x0)
ioctl$RTC_SET_TIME(r0, 0x4024700a, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000240)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_read_part_table(0x1058, &(0x7f0000000000)="$eJzszzGKwkAABdAfMpvNsrvoEWwsBAtb72DrfXIeexstvY+tpUJMxAuICO8xxcz/v5nwZv/fz682l0lyTdrTkJSf4fLbn+yrx7h0s029XiSpSkr+0t3zZZ3Mx9ExTerpV7JK358PbTN2292LPwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH+EWAAD//zEFCkI=")
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = inotify_init()
inotify_add_watch(r2, &(0x7f0000000080)='./file0\x00', 0x84000cdd)
close_range(r1, 0xffffffffffffffff, 0x0)

710.61817ms ago: executing program 2 (id=3168):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
shutdown(r0, 0x2)

507.38129ms ago: executing program 3 (id=3170):
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r0 = socket$kcm(0x2d, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r2}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff"], 0x48)
r4 = syz_open_pts(0xffffffffffffffff, 0x0)
ioctl$KDSKBMODE(r4, 0x4b45, &(0x7f0000000000)=0x3)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r5}, 0x10)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000200))

463.514284ms ago: executing program 3 (id=3171):
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_LINKAT={0x27, 0x20, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x400})
syz_io_uring_setup(0x2241, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x7)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRESOCT, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000000)='btrfs_writepage_end_io_hook\x00'}, 0x18)
add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x00\x00*\x00\x00', 0xc, 0xffffffffffffffff)
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x4b800, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000002400)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x1}}, './file0\x00'})
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240), 0x1091c1, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)

378.555592ms ago: executing program 3 (id=3172):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x7}, [@tail_call, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x94)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', <r2=>0x0})
r3 = syz_io_uring_setup(0xa3d, &(0x7f00000000c0)={0x0, 0x43eb, 0x0, 0x2000003, 0x8002ae}, &(0x7f0000000000)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x109880})
io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf)
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000004c0)={r2, 0x3, 0x6}, 0x10)
r6 = creat(&(0x7f0000000200)='./file0\x00', 0x35)
close(r6)
r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/kexec_crash_size', 0x40002, 0x1)
mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000002c0), 0x200400, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}})
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0x0, 0x7, 0x8}, 0xc)

242.218666ms ago: executing program 3 (id=3173):
socket$inet6_mptcp(0xa, 0x1, 0x106)
fspick(0xffffffffffffff9c, 0x0, 0x0)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={0x0}, 0x1, 0x0, 0x0, 0x40084}, 0x810)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000", @ANYRES32], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x0, 0x80})
quotactl$Q_QUOTAOFF(0xffffffff80000302, &(0x7f0000000140)=@loop={'/dev/loop', 0x0}, 0x0, 0x8cffffff00000000)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000002c0)={'gre0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x7f97, 0x40, 0xffffff6a, 0xffffff7f, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x66, 0x0, 0x4, 0x29, 0x0, @empty, @private=0xa010100}}}})
socket$netlink(0x10, 0x3, 0x0)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010006000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0xc4)

149.526835ms ago: executing program 8 (id=3174):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000007000000890704ac14140f0011000000000000000000000001000000fc000000000000001400000000000000010000000c"], 0x68}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
syncfs(0xffffffffffffffff)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)='%-010d \x00'}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10)
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0)
write(r3, &(0x7f0000004200)='t', 0x1)
sendfile(r3, r2, 0x0, 0x3ffff)
sendfile(r3, r2, 0x0, 0x7ffff000)

70.324803ms ago: executing program 5 (id=3175):
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000740)={r0})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sched_setaffinity(0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@local, @in6=@loopback, 0x4e21, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2f}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x800, 0x0, 0x6}}, {{@in=@multicast1, 0x4d5, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3}}, 0xe8)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="00082dbd7000fcdbdf2514000000080001007063690011000200303030303a30303a31302e3000000000080003000100000008000b0003000000060011000500000008001500040000000e0001006e657464657673696d0000000f0002006e657464657673696d30"], 0x90}, 0x1, 0x0, 0x0, 0x20004801}, 0xc0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r3}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0)

69.647123ms ago: executing program 3 (id=3176):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000004c0)={'macvlan1\x00', 0x400})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
semctl$IPC_RMID(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
syz_open_procfs(0x0, 0x0)

0s ago: executing program 3 (id=3177):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8844)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, 0x0, 0x0)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x0, 0x18c, 0x203, 0x8000000, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520)

kernel console output (not intermixed with test programs):

 bond_slave_0): Releasing backup interface
[  110.930755][ T3444] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  110.941739][ T3444] bond0 (unregistering): Released all slaves
[  110.950503][  T112] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  111.009517][ T3444] hsr_slave_0: left promiscuous mode
[  111.015628][ T3444] hsr_slave_1: left promiscuous mode
[  111.022241][ T3444] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  111.029683][ T3444] batman_adv: batadv0: Removing interface: batadv_slave_0
[  111.037622][ T3444] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  111.045026][ T3444] batman_adv: batadv0: Removing interface: batadv_slave_1
[  111.069718][ T3444] veth1_macvtap: left promiscuous mode
[  111.075386][ T3444] veth0_macvtap: left promiscuous mode
[  111.081057][ T3444] veth1_vlan: left promiscuous mode
[  111.086509][ T3444] veth0_vlan: left promiscuous mode
[  111.124615][ T9176] loop5: detected capacity change from 0 to 512
[  111.132225][ T9176] EXT4-fs: Ignoring removed bh option
[  111.150137][ T9176] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  111.163709][ T9176] ext4 filesystem being mounted at /333/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  111.219175][ T3444] team0 (unregistering): Port device team_slave_1 removed
[  111.228646][ T4631] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  111.244700][ T3444] team0 (unregistering): Port device team_slave_0 removed
[  111.292325][ T9134] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  111.301377][ T9134] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  111.310952][ T9134] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  111.323599][ T9134] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  111.387817][ T9134] 8021q: adding VLAN 0 to HW filter on device bond0
[  111.402341][ T9134] 8021q: adding VLAN 0 to HW filter on device team0
[  111.412639][  T112] bridge0: port 1(bridge_slave_0) entered blocking state
[  111.419822][  T112] bridge0: port 1(bridge_slave_0) entered forwarding state
[  111.440409][ T9134] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  111.450957][ T9134] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  111.473705][  T112] bridge0: port 2(bridge_slave_1) entered blocking state
[  111.480814][  T112] bridge0: port 2(bridge_slave_1) entered forwarding state
[  111.508122][ T9194] netlink: 536 bytes leftover after parsing attributes in process `syz.3.2302'.
[  111.523212][ T9194] netlink: 124 bytes leftover after parsing attributes in process `syz.3.2302'.
[  111.582764][ T9134] 8021q: adding VLAN 0 to HW filter on device batadv0
[  111.653308][ T9205] loop5: detected capacity change from 0 to 512
[  111.669797][ T9205] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  111.690750][ T9205] ext4 filesystem being mounted at /338/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  111.706779][ T9205] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #2: comm syz.5.2303: corrupted inode contents
[  111.719058][ T9205] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #2: comm syz.5.2303: mark_inode_dirty error
[  111.746609][ T9205] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #2: comm syz.5.2303: corrupted inode contents
[  111.766489][ T9205] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #2: comm syz.5.2303: mark_inode_dirty error
[  111.800684][ T9134] veth0_vlan: entered promiscuous mode
[  111.809626][ T4631] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  111.831376][ T9134] veth1_vlan: entered promiscuous mode
[  111.850725][ T9134] veth0_macvtap: entered promiscuous mode
[  111.867828][ T9219] vlan0: entered allmulticast mode
[  111.872956][ T9219] dummy0: entered allmulticast mode
[  111.903175][ T9134] veth1_macvtap: entered promiscuous mode
[  111.911491][ T9223] pim6reg1: entered promiscuous mode
[  111.916860][ T9223] pim6reg1: entered allmulticast mode
[  111.929346][ T9134] batman_adv: batadv0: Interface activated: batadv_slave_0
[  111.939626][ T9134] batman_adv: batadv0: Interface activated: batadv_slave_1
[  111.950455][  T112] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  111.959859][  T112] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  111.973721][ T9228] loop5: detected capacity change from 0 to 512
[  111.989266][   T31] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  112.003737][   T29] kauditd_printk_skb: 193 callbacks suppressed
[  112.003748][   T29] audit: type=1400 audit(1760599226.576:2880): avc:  denied  { mounton } for  pid=9134 comm="syz-executor" path="/root/syzkaller.ItgsfC/syz-tmp" dev="sda1" ino=2057 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[  112.015993][ T9235] syzkaller0: entered allmulticast mode
[  112.035099][   T29] audit: type=1400 audit(1760599226.576:2881): avc:  denied  { mount } for  pid=9134 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  112.058781][ T9228] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  112.063225][   T29] audit: type=1400 audit(1760599226.626:2882): avc:  denied  { mount } for  pid=9134 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  112.097081][   T29] audit: type=1400 audit(1760599226.636:2883): avc:  denied  { mounton } for  pid=9134 comm="syz-executor" path="/root/syzkaller.ItgsfC/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[  112.103225][ T9228] ext4 filesystem being mounted at /341/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  112.123909][   T29] audit: type=1400 audit(1760599226.636:2884): avc:  denied  { mounton } for  pid=9134 comm="syz-executor" path="/root/syzkaller.ItgsfC/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=25515 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[  112.163319][ T9235] syzkaller0 (unregistering): left allmulticast mode
[  112.176160][   T29] audit: type=1400 audit(1760599226.746:2885): avc:  denied  { read } for  pid=9238 comm="syz.3.2313" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  112.200075][   T29] audit: type=1400 audit(1760599226.746:2886): avc:  denied  { open } for  pid=9238 comm="syz.3.2313" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  112.223665][   T29] audit: type=1400 audit(1760599226.756:2887): avc:  denied  { ioctl } for  pid=9238 comm="syz.3.2313" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  112.248744][ T3540] Bluetooth: hci0: command 0x1003 tx timeout
[  112.255240][ T5028] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  112.261560][   T29] audit: type=1400 audit(1760599226.796:2888): avc:  denied  { mounton } for  pid=9134 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[  112.261608][ T9132] Bluetooth: hci0: Opcode 0x0c20 failed: -22
[  112.290669][   T29] audit: type=1400 audit(1760599226.796:2889): avc:  denied  { mount } for  pid=9134 comm="syz-executor" name="/" dev="gadgetfs" ino=4489 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  112.314936][   T31] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  112.420998][ T9255] loop9: detected capacity change from 0 to 764
[  112.429936][ T9255] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  112.440310][ T9255] Symlink component flag not implemented
[  112.446971][ T9255] Symlink component flag not implemented (7)
[  112.447323][ T9258] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2320'.
[  112.483397][ T9261] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2321'.
[  112.497483][ T9262] sd 0:0:1:0: device reset
[  112.546157][ T9268] loop9: detected capacity change from 0 to 128
[  112.547894][ T9270] syzkaller1: entered promiscuous mode
[  112.558047][ T9270] syzkaller1: entered allmulticast mode
[  112.583911][ T9272] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2327'.
[  112.614823][ T9274] loop9: detected capacity change from 0 to 1024
[  112.627781][ T9274] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  112.642319][ T9274] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000.
[  112.656473][ T9274] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4193: comm syz.9.2328: Allocating blocks 497-513 which overlap fs metadata
[  112.675738][ T9274] EXT4-fs (loop9): pa ffff8881071dae70: logic 16, phys. 145, len 23
[  112.683857][ T9274] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 1
[  112.699389][ T9274] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 2 with max blocks 2 with error 28
[  112.711742][ T9274] EXT4-fs (loop9): This should not happen!! Data will be lost
[  112.711742][ T9274] 
[  112.721476][ T9274] EXT4-fs (loop9): Total free blocks count 0
[  112.728031][ T9274] EXT4-fs (loop9): Free/Dirty block details
[  112.733932][ T9274] EXT4-fs (loop9): free_blocks=16
[  112.738988][ T9274] EXT4-fs (loop9): dirty_blocks=0
[  112.744075][ T9274] EXT4-fs (loop9): Block reservation details
[  112.764589][ T4631] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  112.840889][ T9284] loop9: detected capacity change from 0 to 512
[  112.849337][ T9284] EXT4-fs (loop9): orphan cleanup on readonly fs
[  112.856279][ T9284] EXT4-fs error (device loop9): ext4_orphan_get:1418: comm syz.9.2332: bad orphan inode 13
[  112.869708][ T9284] ext4_test_bit(bit=12, block=18) = 1
[  112.875209][ T9284] is_bad_inode(inode)=0
[  112.879389][ T9284] NEXT_ORPHAN(inode)=2130706432
[  112.884363][ T9284] max_ino=32
[  112.887639][ T9284] i_nlink=1
[  112.894483][ T9284] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  112.910910][ T9284] EXT4-fs (loop9): warning: mounting fs with errors, running e2fsck is recommended
[  112.942430][ T9284] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.2332: bg 0: block 248: padding at end of block bitmap is not set
[  112.958846][ T9284] EXT4-fs error (device loop9): ext4_acquire_dquot:6945: comm syz.9.2332: Failed to acquire dquot type 1
[  112.975091][ T9284] EXT4-fs warning (device loop9): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  113.008166][ T9134] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  113.030056][ T9303] loop8: detected capacity change from 0 to 1024
[  113.036730][ T9303] EXT4-fs: inline encryption not supported
[  113.042667][ T9303] EXT4-fs: Ignoring removed nomblk_io_submit option
[  113.050138][ T9303] EXT4-fs: Ignoring removed bh option
[  113.058881][ T9305] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.080844][ T9303] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  113.099804][ T9303] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000.
[  113.109878][ T9303] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4193: comm syz.8.2341: Allocating blocks 497-513 which overlap fs metadata
[  113.129477][ T9305] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.140107][ T9303] EXT4-fs (loop8): pa ffff8881071f6e70: logic 16, phys. 145, len 23
[  113.148235][ T9303] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 1
[  113.160778][ T9303] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 2 with max blocks 2 with error 28
[  113.173071][ T9303] EXT4-fs (loop8): This should not happen!! Data will be lost
[  113.173071][ T9303] 
[  113.182757][ T9303] EXT4-fs (loop8): Total free blocks count 0
[  113.188779][ T9303] EXT4-fs (loop8): Free/Dirty block details
[  113.194895][ T9303] EXT4-fs (loop8): free_blocks=16
[  113.199981][ T9303] EXT4-fs (loop8): dirty_blocks=0
[  113.204999][ T9303] EXT4-fs (loop8): Block reservation details
[  113.272421][ T9322] netlink: 'syz.3.2348': attribute type 12 has an invalid length.
[  113.393741][ T9335] netlink: 'syz.3.2354': attribute type 5 has an invalid length.
[  113.485141][ T9339] syzkaller1: entered promiscuous mode
[  113.490748][ T9339] syzkaller1: entered allmulticast mode
[  113.514633][   T31] Bluetooth: hci0: Frame reassembly failed (-84)
[  114.075482][ T9363] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.120059][ T9363] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.181137][ T9366] bridge_slave_0: left allmulticast mode
[  114.187069][ T9366] bridge_slave_0: left promiscuous mode
[  114.192907][ T9366] bridge0: port 1(bridge_slave_0) entered disabled state
[  114.202605][ T9366] bridge_slave_1: left allmulticast mode
[  114.208908][ T9366] bridge_slave_1: left promiscuous mode
[  114.214593][ T9366] bridge0: port 2(bridge_slave_1) entered disabled state
[  114.223893][ T9366] bond0: (slave bond_slave_0): Releasing backup interface
[  114.234267][ T9366] bond0: (slave bond_slave_1): Releasing backup interface
[  114.247057][ T9366] team0: Port device team_slave_0 removed
[  114.255665][ T9366] team0: Port device team_slave_1 removed
[  114.263312][ T9366] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  114.271326][ T9366] batman_adv: batadv0: Removing interface: batadv_slave_0
[  114.280229][ T9366] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  114.287830][ T9366] batman_adv: batadv0: Removing interface: batadv_slave_1
[  114.297465][ T9366] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  114.316393][ T9363] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.334601][ T9366] netlink: 'syz.8.2367': attribute type 10 has an invalid length.
[  114.342552][ T9366] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2367'.
[  114.352342][ T9366] batman_adv: batadv0: Adding interface: veth1_vlan
[  114.358947][ T9366] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  114.384829][ T9366] batman_adv: batadv0: Interface activated: veth1_vlan
[  114.407700][ T9363] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.427075][ T9370] loop8: detected capacity change from 0 to 2048
[  114.437605][ T9370] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  114.496388][  T163] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  114.509460][  T163] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  114.524812][  T163] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  114.539198][  T163] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  114.586502][ T8393] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  114.757463][ T9305] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.968219][ T9396] loop8: detected capacity change from 0 to 4096
[  114.977009][ T9396] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  114.993448][ T9396] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2379'.
[  115.101617][ T9405] netlink: 'syz.5.2382': attribute type 21 has an invalid length.
[  115.125064][ T8393] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.270266][ T9410] loop5: detected capacity change from 0 to 512
[  115.277136][ T9410] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  115.289693][ T9410] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.2384: inode has both inline data and extents flags
[  115.303147][ T9410] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.2384: couldn't read orphan inode 15 (err -117)
[  115.321044][ T9410] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  115.347266][ T9410] EXT4-fs error (device loop5): ext4_lookup:1787: inode #15: comm syz.5.2384: inode has both inline data and extents flags
[  115.523612][ T4631] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.536267][ T3540] Bluetooth: hci0: command 0x1003 tx timeout
[  115.542401][ T5028] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  115.626190][ T9420] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2387'.
[  115.716786][ T9305] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  115.771780][   T31] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  115.787153][   T37] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  115.795633][   T37] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  115.808963][   T37] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  115.857044][ T9430] netlink: 'syz.9.2393': attribute type 10 has an invalid length.
[  115.880581][ T9430] team0: Port device dummy0 added
[  115.906523][ T9430] netlink: 'syz.9.2393': attribute type 10 has an invalid length.
[  115.930945][ T9430] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  115.943184][ T9430] team0: Failed to send options change via netlink (err -105)
[  115.951110][ T9430] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  115.960430][ T9430] team0: Port device dummy0 removed
[  115.970879][ T9430] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  116.130124][ T9447] loop9: detected capacity change from 0 to 128
[  116.144071][ T9447] syz.9.2399: attempt to access beyond end of device
[  116.144071][ T9447] loop9: rw=2049, sector=154, nr_sectors = 6 limit=128
[  116.158959][ T9447] syz.9.2399: attempt to access beyond end of device
[  116.158959][ T9447] loop9: rw=2049, sector=158, nr_sectors = 2 limit=128
[  116.172546][ T9447] buffer_io_error: 81254 callbacks suppressed
[  116.172596][ T9447] Buffer I/O error on dev loop9, logical block 79, lost async page write
[  116.188045][ T9447] syz.9.2399: attempt to access beyond end of device
[  116.188045][ T9447] loop9: rw=2049, sector=160, nr_sectors = 2 limit=128
[  116.201508][ T9447] Buffer I/O error on dev loop9, logical block 80, lost async page write
[  116.212574][ T9446] syz.9.2399: attempt to access beyond end of device
[  116.212574][ T9446] loop9: rw=524288, sector=154, nr_sectors = 8 limit=128
[  116.227371][ T9446] syz.9.2399: attempt to access beyond end of device
[  116.227371][ T9446] loop9: rw=0, sector=154, nr_sectors = 8 limit=128
[  116.240753][ T9446] syz.9.2399: attempt to access beyond end of device
[  116.240753][ T9446] loop9: rw=0, sector=154, nr_sectors = 8 limit=128
[  116.254522][ T9446] syz.9.2399: attempt to access beyond end of device
[  116.254522][ T9446] loop9: rw=0, sector=154, nr_sectors = 8 limit=128
[  116.268479][ T9446] syz.9.2399: attempt to access beyond end of device
[  116.268479][ T9446] loop9: rw=0, sector=154, nr_sectors = 8 limit=128
[  116.281828][ T9446] syz.9.2399: attempt to access beyond end of device
[  116.281828][ T9446] loop9: rw=0, sector=154, nr_sectors = 8 limit=128
[  116.295135][ T9446] syz.9.2399: attempt to access beyond end of device
[  116.295135][ T9446] loop9: rw=0, sector=154, nr_sectors = 8 limit=128
[  116.379331][ T9452] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  116.389883][ T9452] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.402376][ T9454] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  116.412210][ T9454] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.478853][ T9452] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  116.489331][ T9452] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.524090][ T9454] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  116.534056][ T9454] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.570630][ T9452] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  116.581708][ T9452] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.611754][ T9454] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  116.621614][ T9454] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.682187][ T9452] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  116.693320][ T9452] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.707912][ T9469] loop9: detected capacity change from 0 to 128
[  116.740007][ T9454] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  116.750657][ T9454] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.805694][   T31] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  116.814024][   T31] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  116.838494][   T31] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  116.846909][   T31] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  116.934897][   T31] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  116.943231][   T31] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  117.088780][   T29] kauditd_printk_skb: 554 callbacks suppressed
[  117.088798][   T29] audit: type=1400 audit(1760599231.666:3442): avc:  denied  { read } for  pid=9486 comm="syz.8.2414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  117.125038][ T9484] loop5: detected capacity change from 0 to 2048
[  117.133234][  T163] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  117.141615][  T163] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  117.152566][   T29] audit: type=1400 audit(1760599231.726:3443): avc:  denied  { write } for  pid=9486 comm="syz.8.2414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  117.188168][ T9484] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  117.204943][  T163] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  117.213216][  T163] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  117.270665][   T29] audit: type=1400 audit(1760599231.846:3444): avc:  denied  { create } for  pid=9482 comm="syz.5.2413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  117.301537][  T163] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  117.309760][  T163] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  117.396986][  T163] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  117.405225][  T163] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  117.461198][   T29] audit: type=1326 audit(1760599232.026:3445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9493 comm="syz.3.2415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f955563eec9 code=0x7ffc0000
[  117.484700][   T29] audit: type=1326 audit(1760599232.026:3446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9493 comm="syz.3.2415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f955563eec9 code=0x7ffc0000
[  117.533503][  T163] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  117.541788][  T163] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  117.712289][   T29] audit: type=1326 audit(1760599232.036:3447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9493 comm="syz.3.2415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f955563eec9 code=0x7ffc0000
[  117.735758][   T29] audit: type=1326 audit(1760599232.086:3448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9493 comm="syz.3.2415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f955563eec9 code=0x7ffc0000
[  117.759215][   T29] audit: type=1326 audit(1760599232.086:3449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9493 comm="syz.3.2415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f955563eec9 code=0x7ffc0000
[  117.782675][   T29] audit: type=1326 audit(1760599232.086:3450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9493 comm="syz.3.2415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f955563eec9 code=0x7ffc0000
[  117.806194][   T29] audit: type=1326 audit(1760599232.086:3451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9493 comm="syz.3.2415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f955563eec9 code=0x7ffc0000
[  117.897458][ T4631] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  118.174482][ T9516] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  118.184478][ T9516] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.212478][ T9517] loop8: detected capacity change from 0 to 128
[  118.317995][ T9522] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2418'.
[  118.338340][ T9522] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2418'.
[  118.358121][ T9516] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  118.367984][ T9516] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.423970][ T9526] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.434480][ T9525] loop8: detected capacity change from 0 to 1024
[  118.452384][ T9525] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  118.465609][ T9516] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  118.475550][ T9516] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.491905][ T9526] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.505654][ T9525] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000.
[  118.514542][ T9525] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4193: comm syz.8.2428: Allocating blocks 497-513 which overlap fs metadata
[  118.532509][ T9516] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  118.535019][ T9525] EXT4-fs (loop8): pa ffff8881071f6e00: logic 16, phys. 145, len 23
[  118.542346][ T9516] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.550313][ T9525] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 1
[  118.572201][ T9525] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 2 with max blocks 2 with error 28
[  118.584410][ T9525] EXT4-fs (loop8): This should not happen!! Data will be lost
[  118.584410][ T9525] 
[  118.594864][ T9525] EXT4-fs (loop8): Total free blocks count 0
[  118.600923][ T9525] EXT4-fs (loop8): Free/Dirty block details
[  118.606830][ T9525] EXT4-fs (loop8): free_blocks=16
[  118.611888][ T9525] EXT4-fs (loop8): dirty_blocks=0
[  118.617671][ T9525] EXT4-fs (loop8): Block reservation details
[  118.637530][ T9526] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.717580][ T9526] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.773770][ T9548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  118.782545][ T9548] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  118.794430][  T163] Bluetooth: hci0: Frame reassembly failed (-84)
[  119.405295][ T9566] wg2: entered promiscuous mode
[  119.410828][ T9566] wg2: entered allmulticast mode
[  119.532661][ T9572] loop5: detected capacity change from 0 to 1024
[  119.547366][ T9572] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  119.588659][ T4631] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  119.609255][ T9577] loop5: detected capacity change from 0 to 512
[  119.628460][ T9577] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.2447: bad orphan inode 11862016
[  119.639667][ T9577] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  119.653053][ T9577] ext4 filesystem being mounted at /365/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  119.681416][ T4631] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  120.360813][ T9590] netlink: 'syz.2.2452': attribute type 10 has an invalid length.
[  120.372286][ T9590] team0: Port device dummy0 added
[  120.381751][ T9590] netlink: 'syz.2.2452': attribute type 10 has an invalid length.
[  120.389951][ T9590] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  120.401130][ T9590] team0: Failed to send options change via netlink (err -105)
[  120.408815][ T9590] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  120.417762][ T9590] team0: Port device dummy0 removed
[  120.425222][ T9590] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  120.806371][ T3540] Bluetooth: hci0: command 0x1003 tx timeout
[  120.812506][ T5028] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  120.819550][ T9548] Bluetooth: hci0: Opcode 0x0c20 failed: -22
[  121.010050][ T9633] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2470'.
[  121.081002][ T3444] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  121.089407][ T3444] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  121.101000][  T163] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  121.109318][  T163] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  121.121653][  T163] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  121.129948][  T163] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  121.167444][ T9637] loop5: detected capacity change from 0 to 8192
[  121.168305][  T163] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  121.182744][  T163] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  121.205145][  T163] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  121.217044][  T163] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  121.225426][  T163] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  121.233769][  T163] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  121.432861][ T9666] loop8: detected capacity change from 0 to 512
[  121.458569][ T9666] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  121.471523][ T9666] ext4 filesystem being mounted at /118/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  121.485755][ T9666] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #2: comm syz.8.2486: corrupted inode contents
[  121.497763][ T9666] EXT4-fs error (device loop8): ext4_dirty_inode:6517: inode #2: comm syz.8.2486: mark_inode_dirty error
[  121.510184][ T9666] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #2: comm syz.8.2486: corrupted inode contents
[  121.510410][ T9671] pim6reg1: entered promiscuous mode
[  121.527418][ T9671] pim6reg1: entered allmulticast mode
[  121.548135][   T10] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  121.555591][   T10] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  121.562992][   T10] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  121.570407][   T10] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  121.571402][ T8393] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  121.577912][   T10] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  121.594197][   T10] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  121.601677][   T10] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  121.609190][   T10] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  121.616647][   T10] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  121.624014][   T10] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  121.632033][   T10] hid-generic 0000:0000:0000.0007: hidraw0: <UNKNOWN> HID v8.00 Device [syz0] on syz0
[  121.677285][ T9677] loop5: detected capacity change from 0 to 2048
[  121.690159][ T9676] hub 9-0:1.0: USB hub found
[  121.694935][ T9676] hub 9-0:1.0: 8 ports detected
[  121.701390][ T9677] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  121.790638][ T9683] loop8: detected capacity change from 0 to 512
[  121.806709][ T9683] vfat: Bad value for 'uni_xlate'
[  121.813899][ T9683] sd 0:0:1:0: device reset
[  121.894553][ T4631] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  122.131308][ T9700] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2499'.
[  122.331408][   T10] hid-generic 0000:0000:0000.0008: hidraw0: <UNKNOWN> HID v8.00 Device [syz0] on syz0
[  122.365216][ T9711] netlink: 68 bytes leftover after parsing attributes in process `syz.8.2502'.
[  122.403191][   T29] kauditd_printk_skb: 204 callbacks suppressed
[  122.403204][   T29] audit: type=1326 audit(1760599236.976:3656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9716 comm="syz.2.2505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cf8faeec9 code=0x7ffc0000
[  122.448178][   T29] audit: type=1326 audit(1760599237.006:3657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9716 comm="syz.2.2505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f6cf8faeec9 code=0x7ffc0000
[  122.471538][   T29] audit: type=1326 audit(1760599237.006:3658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9716 comm="syz.2.2505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cf8faeec9 code=0x7ffc0000
[  122.495022][   T29] audit: type=1326 audit(1760599237.006:3659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9716 comm="syz.2.2505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6cf8faeec9 code=0x7ffc0000
[  122.518536][   T29] audit: type=1326 audit(1760599237.006:3660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9716 comm="syz.2.2505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cf8faeec9 code=0x7ffc0000
[  122.519949][    C1] IPv4: Oversized IP packet from 172.20.20.24
[  122.542155][   T29] audit: type=1326 audit(1760599237.006:3661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9716 comm="syz.2.2505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6cf8fad710 code=0x7ffc0000
[  122.571559][   T29] audit: type=1326 audit(1760599237.006:3662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9716 comm="syz.2.2505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cf8faeec9 code=0x7ffc0000
[  122.595208][   T29] audit: type=1326 audit(1760599237.006:3663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9716 comm="syz.2.2505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6cf8faeec9 code=0x7ffc0000
[  122.618596][   T29] audit: type=1326 audit(1760599237.006:3664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9716 comm="syz.2.2505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cf8faeec9 code=0x7ffc0000
[  122.777115][ T9737] loop5: detected capacity change from 0 to 2048
[  122.803927][ T9737] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  122.828136][   T29] audit: type=1400 audit(1760599237.406:3665): avc:  denied  { mounton } for  pid=9736 comm="syz.5.2516" path="/388/file0/bus" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  122.863445][ T4631] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[  122.883442][ T4631] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  122.937277][ T9751] loop5: detected capacity change from 0 to 128
[  122.945626][ T9751] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  122.958275][ T9751] ext4 filesystem being mounted at /389/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  123.021978][ T4631] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  123.185580][ T9739] batman_adv: batadv0: Interface deactivated: veth1_vlan
[  123.235931][  T112] netdevsim netdevsim8 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  123.244449][  T112] netdevsim netdevsim8 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  123.312186][  T112] netdevsim netdevsim8 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  123.321421][  T112] netdevsim netdevsim8 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  123.336566][  T112] netdevsim netdevsim8 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  123.345005][  T112] netdevsim netdevsim8 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  123.392108][  T112] netdevsim netdevsim8 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  123.400556][  T112] netdevsim netdevsim8 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  123.483533][ T9799] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  123.549883][ T9807] loop8: detected capacity change from 0 to 8192
[  123.594068][ T9813] loop5: detected capacity change from 0 to 128
[  123.683177][ T9819] netlink: 10 bytes leftover after parsing attributes in process `syz.5.2536'.
[  123.743563][ T9823] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2538'.
[  123.799957][ T9825] wg2: left promiscuous mode
[  123.804597][ T9825] wg2: left allmulticast mode
[  123.811248][ T9825] wg2: entered promiscuous mode
[  123.816206][ T9825] wg2: entered allmulticast mode
[  124.326555][ T9828] pim6reg1: entered promiscuous mode
[  124.332012][ T9828] pim6reg1: entered allmulticast mode
[  124.452619][ T9839] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2545'.
[  124.461636][ T9839] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2545'.
[  124.590187][ T9852] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  124.786960][ T9862] lo speed is unknown, defaulting to 1000
[  125.532896][ T9881] loop9: detected capacity change from 0 to 512
[  125.543101][ T9881] EXT4-fs error (device loop9): ext4_orphan_get:1392: inode #15: comm syz.9.2562: inode has both inline data and extents flags
[  125.557349][ T9881] EXT4-fs error (device loop9): ext4_orphan_get:1397: comm syz.9.2562: couldn't read orphan inode 15 (err -117)
[  125.574230][ T9881] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  125.605120][ T9134] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  125.657821][ T9892] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.665116][ T9892] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.725791][ T9892] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  125.736711][ T9892] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  125.790568][ T3444] netdevsim netdevsim9 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  125.809837][ T3444] netdevsim netdevsim9 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  125.818633][ T9906] lo speed is unknown, defaulting to 1000
[  125.827458][ T3444] netdevsim netdevsim9 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  125.847809][ T3444] netdevsim netdevsim9 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  125.916067][ T9918] ip6erspan0: entered promiscuous mode
[  125.947269][ T9922] serio: Serial port ptm0
[  126.021691][ T9906] pimreg: entered allmulticast mode
[  126.028267][ T9906] pimreg: left allmulticast mode
[  126.132237][ T9928] pim6reg1: entered promiscuous mode
[  126.137664][ T9928] pim6reg1: entered allmulticast mode
[  126.203746][ T9933] wg2: left promiscuous mode
[  126.208486][ T9933] wg2: left allmulticast mode
[  126.216537][ T9933] wg2: entered promiscuous mode
[  126.221472][ T9933] wg2: entered allmulticast mode
[  126.803791][ T9952] loop8: detected capacity change from 0 to 2048
[  126.844191][ T9959] lo speed is unknown, defaulting to 1000
[  126.856303][ T9952] Alternate GPT is invalid, using primary GPT.
[  126.862720][ T9952]  loop8: p2 p3 p7
[  126.977201][ T9959] pimreg: entered allmulticast mode
[  126.991337][ T9959] pimreg: left allmulticast mode
[  127.019213][ T9972] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  127.114889][ T9978] loop9: detected capacity change from 0 to 1024
[  127.121763][ T9978] EXT4-fs: Ignoring removed orlov option
[  127.127529][ T9978] EXT4-fs: Ignoring removed nomblk_io_submit option
[  127.167088][ T9978] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  127.198200][ T9134] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  127.217917][ T9990] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2605'.
[  127.271724][ T9995] syzkaller0: entered promiscuous mode
[  127.277328][ T9995] syzkaller0: entered allmulticast mode
[  127.371501][ T9997] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2609'.
[  127.411495][   T29] kauditd_printk_skb: 178 callbacks suppressed
[  127.411511][   T29] audit: type=1326 audit(1760599241.986:3844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10000 comm="syz.3.2610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f955563eec9 code=0x7ffc0000
[  127.441890][   T29] audit: type=1326 audit(1760599241.986:3845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10000 comm="syz.3.2610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f955563eec9 code=0x7ffc0000
[  127.465400][   T29] audit: type=1326 audit(1760599241.986:3846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10000 comm="syz.3.2610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f955563eec9 code=0x7ffc0000
[  127.489731][   T29] audit: type=1326 audit(1760599242.026:3847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10000 comm="syz.3.2610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f955563eec9 code=0x7ffc0000
[  127.513283][   T29] audit: type=1326 audit(1760599242.026:3848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10000 comm="syz.3.2610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f955563eec9 code=0x7ffc0000
[  127.734645][T10008] veth2: entered promiscuous mode
[  127.739736][T10008] veth2: entered allmulticast mode
[  127.817785][T10012] lo speed is unknown, defaulting to 1000
[  127.957130][T10012] pimreg: entered allmulticast mode
[  127.963720][T10012] pimreg: left allmulticast mode
[  127.972459][T10016] lo speed is unknown, defaulting to 1000
[  128.052385][   T29] audit: type=1326 audit(1760599242.626:3849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10018 comm="syz.5.2616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37d343eec9 code=0x7ffc0000
[  128.076596][   T29] audit: type=1326 audit(1760599242.626:3850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10018 comm="syz.5.2616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f37d343eec9 code=0x7ffc0000
[  128.100153][   T29] audit: type=1326 audit(1760599242.626:3851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10018 comm="syz.5.2616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37d343eec9 code=0x7ffc0000
[  128.124409][   T29] audit: type=1326 audit(1760599242.626:3852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10018 comm="syz.5.2616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37d343eec9 code=0x7ffc0000
[  128.151551][T10021] macsec0: entered promiscuous mode
[  128.165280][   T29] audit: type=1326 audit(1760599242.626:3853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10018 comm="syz.5.2616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f37d343eec9 code=0x7ffc0000
[  128.467187][T10049] lo speed is unknown, defaulting to 1000
[  128.604383][T10049] pimreg: entered allmulticast mode
[  128.610960][T10049] pimreg: left allmulticast mode
[  128.669693][T10055] loop9: detected capacity change from 0 to 8
[  128.677778][    C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  128.688012][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  128.696752][    C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  128.706977][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  128.715161][T10055]  loop9: unable to read partition table
[  128.721551][T10055] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ �
[  128.721551][T10055] 
) failed (rc=-5)
[  129.274017][T10076] loop9: detected capacity change from 0 to 1024
[  129.283554][T10076] EXT4-fs error (device loop9): ext4_acquire_dquot:6945: comm syz.9.2640: Failed to acquire dquot type 0
[  129.296720][T10076] EXT4-fs error (device loop9): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt.
[  129.311666][T10076] EXT4-fs error (device loop9): ext4_do_update_inode:5632: inode #13: comm syz.9.2640: corrupted inode contents
[  129.324679][T10076] EXT4-fs error (device loop9): ext4_dirty_inode:6517: inode #13: comm syz.9.2640: mark_inode_dirty error
[  129.336584][T10076] EXT4-fs error (device loop9): ext4_do_update_inode:5632: inode #13: comm syz.9.2640: corrupted inode contents
[  129.349595][T10076] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #13: comm syz.9.2640: mark_inode_dirty error
[  129.361456][T10076] EXT4-fs error (device loop9): ext4_do_update_inode:5632: inode #13: comm syz.9.2640: corrupted inode contents
[  129.373882][T10076] EXT4-fs error (device loop9) in ext4_orphan_del:301: Corrupt filesystem
[  129.383784][T10076] EXT4-fs error (device loop9): ext4_do_update_inode:5632: inode #13: comm syz.9.2640: corrupted inode contents
[  129.396320][T10076] EXT4-fs error (device loop9): ext4_truncate:4637: inode #13: comm syz.9.2640: mark_inode_dirty error
[  129.408551][T10076] EXT4-fs error (device loop9) in ext4_process_orphan:343: Corrupt filesystem
[  129.417978][T10076] EXT4-fs (loop9): 1 truncate cleaned up
[  129.424439][T10076] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  129.439777][T10076] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  129.461554][ T9134] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  129.515290][T10080] loop9: detected capacity change from 0 to 128
[  129.593879][T10087] bio_check_eod: 66 callbacks suppressed
[  129.593890][T10087] syz.9.2642: attempt to access beyond end of device
[  129.593890][T10087] loop9: rw=2049, sector=145, nr_sectors = 16 limit=128
[  129.627809][T10087] syz.9.2642: attempt to access beyond end of device
[  129.627809][T10087] loop9: rw=2049, sector=169, nr_sectors = 8 limit=128
[  129.642748][T10087] syz.9.2642: attempt to access beyond end of device
[  129.642748][T10087] loop9: rw=2049, sector=185, nr_sectors = 8 limit=128
[  129.659351][T10087] syz.9.2642: attempt to access beyond end of device
[  129.659351][T10087] loop9: rw=2049, sector=201, nr_sectors = 8 limit=128
[  129.676215][T10087] syz.9.2642: attempt to access beyond end of device
[  129.676215][T10087] loop9: rw=2049, sector=217, nr_sectors = 8 limit=128
[  129.691969][T10087] syz.9.2642: attempt to access beyond end of device
[  129.691969][T10087] loop9: rw=2049, sector=233, nr_sectors = 8 limit=128
[  129.706576][T10087] syz.9.2642: attempt to access beyond end of device
[  129.706576][T10087] loop9: rw=2049, sector=249, nr_sectors = 8 limit=128
[  129.720727][T10087] syz.9.2642: attempt to access beyond end of device
[  129.720727][T10087] loop9: rw=2049, sector=265, nr_sectors = 8 limit=128
[  129.745990][T10087] syz.9.2642: attempt to access beyond end of device
[  129.745990][T10087] loop9: rw=2049, sector=281, nr_sectors = 8 limit=128
[  129.746873][T10093] veth0: entered promiscuous mode
[  129.778813][T10092] veth0: left promiscuous mode
[  129.805981][T10087] syz.9.2642: attempt to access beyond end of device
[  129.805981][T10087] loop9: rw=2049, sector=297, nr_sectors = 8 limit=128
[  130.596319][T10134] loop5: detected capacity change from 0 to 2048
[  130.608948][T10134] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  130.621136][T10134] ext4 filesystem being mounted at /420/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  130.632850][T10134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  130.641357][T10134] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  130.950961][T10161] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) !
[  131.051439][T10167] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2678'.
[  131.177042][T10157] Set syz1 is full, maxelem 65536 reached
[  131.183274][ T4631] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  131.232159][T10177] loop8: detected capacity change from 0 to 128
[  131.364588][   T31] Bluetooth: hci0: Frame reassembly failed (-84)
[  132.091160][T10202] loop9: detected capacity change from 0 to 2048
[  132.106124][T10204] random: crng reseeded on system resumption
[  132.115980][T10204] Restarting kernel threads ...
[  132.117313][T10202] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  132.121206][T10204] Done restarting kernel threads.
[  132.204072][T10202] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  132.218989][T10202] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1682 with error 28
[  132.231499][T10202] EXT4-fs (loop9): This should not happen!! Data will be lost
[  132.231499][T10202] 
[  132.241170][T10202] EXT4-fs (loop9): Total free blocks count 0
[  132.247225][T10202] EXT4-fs (loop9): Free/Dirty block details
[  132.253184][T10202] EXT4-fs (loop9): free_blocks=2415919104
[  132.258914][T10202] EXT4-fs (loop9): dirty_blocks=1696
[  132.264281][T10202] EXT4-fs (loop9): Block reservation details
[  132.270307][T10202] EXT4-fs (loop9): i_reserved_data_blocks=106
[  132.367828][ T9134] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000900.
[  132.431719][T10221] pim6reg1: entered promiscuous mode
[  132.437187][T10221] pim6reg1: entered allmulticast mode
[  132.503311][T10225] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  132.513179][T10225] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.567041][T10225] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  132.576844][T10225] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.588237][T10229] netlink: 'syz.2.2700': attribute type 1 has an invalid length.
[  132.596078][T10229] netlink: 5452 bytes leftover after parsing attributes in process `syz.2.2700'.
[  132.627381][T10225] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  132.637206][T10225] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.687410][T10225] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  132.697288][T10225] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.752044][   T12] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  132.760291][   T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  132.772132][   T12] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  132.780355][   T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  132.791830][   T12] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  132.800734][   T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  132.811372][   T12] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  132.819597][   T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  132.910396][T10236] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2703'.
[  132.919372][T10236] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  132.927412][T10236] batman_adv: batadv0: Removing interface: batadv_slave_0
[  132.935018][T10236] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  132.942442][T10236] batman_adv: batadv0: Removing interface: batadv_slave_1
[  132.949854][T10236] batman_adv: batadv0: Interface deactivated: veth1_vlan
[  132.957591][T10236] batman_adv: batadv0: Removing interface: veth1_vlan
[  133.302180][T10246] pim6reg1: entered promiscuous mode
[  133.307562][T10246] pim6reg1: entered allmulticast mode
[  133.365923][ T3540] Bluetooth: hci0: command 0x1003 tx timeout
[  133.365946][ T5028] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  133.426958][T10256] netlink: 'syz.9.2711': attribute type 10 has an invalid length.
[  133.437214][T10256] bond0: (slave dummy0): Releasing backup interface
[  133.445975][T10256] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  133.454983][T10256] team0: Failed to send options change via netlink (err -105)
[  133.462537][T10256] team0: Port device dummy0 added
[  133.507725][   T29] kauditd_printk_skb: 782 callbacks suppressed
[  133.507740][   T29] audit: type=1400 audit(1760599248.086:4634): avc:  denied  { read write } for  pid=9134 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  133.538234][   T29] audit: type=1400 audit(1760599248.086:4635): avc:  denied  { open } for  pid=9134 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  133.562468][   T29] audit: type=1400 audit(1760599248.086:4636): avc:  denied  { ioctl } for  pid=9134 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=109 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  133.593179][   T29] audit: type=1400 audit(1760599248.116:4637): avc:  denied  { open } for  pid=10265 comm="syz.9.2717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  133.612781][   T29] audit: type=1400 audit(1760599248.116:4638): avc:  denied  { perfmon } for  pid=10265 comm="syz.9.2717" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  133.633807][   T29] audit: type=1400 audit(1760599248.116:4639): avc:  denied  { kernel } for  pid=10265 comm="syz.9.2717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  133.653402][   T29] audit: type=1400 audit(1760599248.146:4640): avc:  denied  { map_create } for  pid=10265 comm="syz.9.2717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  133.672658][   T29] audit: type=1400 audit(1760599248.146:4641): avc:  denied  { map_read map_write } for  pid=10265 comm="syz.9.2717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  133.692548][   T29] audit: type=1400 audit(1760599248.146:4642): avc:  denied  { prog_load } for  pid=10265 comm="syz.9.2717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  133.711693][   T29] audit: type=1400 audit(1760599248.146:4643): avc:  denied  { bpf } for  pid=10265 comm="syz.9.2717" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  133.782783][T10277] syzkaller0: entered promiscuous mode
[  133.788407][T10277] syzkaller0: entered allmulticast mode
[  134.039901][T10290] netlink: 'syz.9.2727': attribute type 12 has an invalid length.
[  134.088333][T10292] loop9: detected capacity change from 0 to 512
[  134.097171][T10292] EXT4-fs error (device loop9): ext4_orphan_get:1392: inode #15: comm syz.9.2728: inode has both inline data and extents flags
[  134.110510][T10292] EXT4-fs error (device loop9): ext4_orphan_get:1397: comm syz.9.2728: couldn't read orphan inode 15 (err -117)
[  134.122947][T10292] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  134.231827][T10176] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  134.438420][T10298] lo speed is unknown, defaulting to 1000
[  134.697544][T10303] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2732'.
[  134.802478][T10312] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2734'.
[  134.822419][T10312] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  134.829873][T10312] batman_adv: batadv0: Removing interface: batadv_slave_0
[  134.867580][T10312] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  134.874979][T10312] batman_adv: batadv0: Removing interface: batadv_slave_1
[  134.932679][ T9134] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  135.072735][T10324] ip6tnl1: entered promiscuous mode
[  135.078012][T10324] ip6tnl1: entered allmulticast mode
[  135.151334][T10321] netlink: 'syz.5.2738': attribute type 13 has an invalid length.
[  135.162022][T10329] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2742'.
[  135.171433][T10321] 8021q: adding VLAN 0 to HW filter on device team0
[  135.181038][T10321] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  135.274468][T10335] netlink: 'syz.5.2745': attribute type 4 has an invalid length.
[  135.284792][T10335] netlink: 'syz.5.2745': attribute type 4 has an invalid length.
[  135.328373][T10337] ALSA: seq fatal error: cannot create timer (-19)
[  135.427975][T10344] loop9: detected capacity change from 0 to 8192
[  135.488491][T10349] loop5: detected capacity change from 0 to 512
[  135.507619][T10349] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.2750: inode has both inline data and extents flags
[  135.528603][T10349] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.2750: couldn't read orphan inode 15 (err -117)
[  135.551195][T10349] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  135.789692][T10352] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2751'.
[  135.798975][T10352] IPVS: Error connecting to the multicast addr
[  135.855072][T10356] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2753'.
[  135.955016][T10365] bridge: RTM_NEWNEIGH with invalid ether address
[  135.964445][T10366] loop8: detected capacity change from 0 to 512
[  135.971937][T10366] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  135.991112][T10366] EXT4-fs (loop8): 1 truncate cleaned up
[  135.997676][T10366] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  136.046508][ T8393] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  136.431444][T10395] syzkaller0: entered promiscuous mode
[  136.436992][T10395] syzkaller0: entered allmulticast mode
[  136.674817][ T4631] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  136.720096][T10385] Set syz1 is full, maxelem 65536 reached
[  136.842295][T10467] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2773'.
[  136.887926][T10475] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2773'.
[  136.903848][T10467] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2773'.
[  136.937554][T10475] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2773'.
[  136.981652][T10467] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2773'.
[  137.026552][T10475] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2773'.
[  137.132345][T10450] Bluetooth: hci0: Frame reassembly failed (-84)
[  137.168390][T10498] netlink: 'syz.5.2781': attribute type 10 has an invalid length.
[  137.384638][T10503] loop5: detected capacity change from 0 to 512
[  137.404329][T10503] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  137.495086][T10414] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  137.551867][T10506] syzkaller0: entered promiscuous mode
[  137.557427][T10506] syzkaller0: entered allmulticast mode
[  137.648826][T10508] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security
[  137.759250][T10515] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2788'.
[  137.818217][T10520] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2790'.
[  137.837621][T10520] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2790'.
[  137.862223][T10520] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2790'.
[  137.966710][T10534] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(4)
[  137.973341][T10534] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  137.981031][T10534] vhci_hcd vhci_hcd.0: Device attached
[  137.996552][T10534] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(6)
[  138.003091][T10534] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  138.010712][T10534] vhci_hcd vhci_hcd.0: Device attached
[  138.017421][T10534] vhci_hcd vhci_hcd.0: pdev(9) rhport(1) sockfd(8)
[  138.023945][T10534] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  138.032151][T10534] vhci_hcd vhci_hcd.0: Device attached
[  138.044536][T10541] vhci_hcd: connection closed
[  138.044665][T10408] vhci_hcd: stop threads
[  138.049362][T10537] vhci_hcd: connection closed
[  138.053262][T10535] vhci_hcd: connection closed
[  138.053625][T10408] vhci_hcd: release socket
[  138.067449][T10408] vhci_hcd: disconnect device
[  138.072471][T10408] vhci_hcd: stop threads
[  138.076768][T10408] vhci_hcd: release socket
[  138.081187][T10408] vhci_hcd: disconnect device
[  138.086292][T10408] vhci_hcd: stop threads
[  138.090675][T10408] vhci_hcd: release socket
[  138.095154][T10408] vhci_hcd: disconnect device
[  138.342881][T10550] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  138.351187][T10550] syzkaller0: MTU too low for tipc bearer
[  138.357537][T10550] tipc: Disabling bearer <eth:syzkaller0>
[  138.418402][T10552] lo speed is unknown, defaulting to 1000
[  138.443793][T10552] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10552 comm=syz.3.2798
[  138.590355][T10560] loop9: detected capacity change from 0 to 512
[  138.607712][   T29] kauditd_printk_skb: 343 callbacks suppressed
[  138.607727][   T29] audit: type=1400 audit(1760599253.186:4987): avc:  denied  { create } for  pid=10561 comm="syz.2.2802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  138.637985][T10560] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  138.686942][T10568] loop5: detected capacity change from 0 to 512
[  138.693703][T10560] ext4 filesystem being mounted at /72/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  138.705112][   T29] audit: type=1400 audit(1760599253.266:4988): avc:  denied  { mount } for  pid=10559 comm="syz.9.2801" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  138.782876][ T9134] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  138.801033][   T29] audit: type=1400 audit(1760599253.306:4989): avc:  denied  { remount } for  pid=10567 comm="syz.5.2804" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  138.821617][   T29] audit: type=1400 audit(1760599253.336:4990): avc:  denied  { create } for  pid=10567 comm="syz.5.2804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  138.841155][   T29] audit: type=1400 audit(1760599253.336:4991): avc:  denied  { write } for  pid=10567 comm="syz.5.2804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  138.861324][   T29] audit: type=1400 audit(1760599253.356:4992): avc:  denied  { unmount } for  pid=9134 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  138.919674][   T29] audit: type=1400 audit(1760599253.486:4993): avc:  denied  { setopt } for  pid=10577 comm="syz.9.2805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  138.947847][   T29] audit: type=1400 audit(1760599253.526:4994): avc:  denied  { create } for  pid=10577 comm="syz.9.2805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  138.968183][   T29] audit: type=1400 audit(1760599253.526:4995): avc:  denied  { write } for  pid=10577 comm="syz.9.2805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  138.993534][   T29] audit: type=1326 audit(1760599253.566:4996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10581 comm="syz.5.2808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37d343eec9 code=0x7ffc0000
[  139.205892][ T5028] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  139.525533][T10623] netlink: 'syz.2.2818': attribute type 10 has an invalid length.
[  139.627910][T10630] veth0_vlan: entered allmulticast mode
[  139.926585][T10635] ÿÿÿÿÿÿ: renamed from vlan1
[  139.962929][T10654] hub 1-0:1.0: USB hub found
[  139.967688][T10654] hub 1-0:1.0: 8 ports detected
[  140.548029][T10674] loop9: detected capacity change from 0 to 512
[  140.608439][ T9501] kernel read not supported for file /mISDNtimer (pid: 9501 comm: kworker/0:5)
[  140.697844][T10688] macsec0: entered allmulticast mode
[  140.737515][T10691] veth0: entered promiscuous mode
[  140.746010][T10691] veth0 (unregistering): left promiscuous mode
[  141.740850][T10723] loop9: detected capacity change from 0 to 1024
[  141.786155][T10723] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  141.803137][T10728] syzkaller0: entered promiscuous mode
[  141.808656][T10728] syzkaller0: entered allmulticast mode
[  142.098426][ T9134] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  142.109734][T10741] tipc: Started in network mode
[  142.114633][T10741] tipc: Node identity 66808c48b84f, cluster identity 4711
[  142.121821][T10741] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  142.150514][T10740] tipc: Resetting bearer <eth:syzkaller0>
[  142.166300][T10740] tipc: Disabling bearer <eth:syzkaller0>
[  142.557566][T10766] loop5: detected capacity change from 0 to 512
[  142.574622][T10766] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  142.588211][T10766] EXT4-fs error (device loop5): xattr_find_entry:337: inode #15: comm syz.5.2873: corrupted xattr entries
[  142.616821][T10766] EXT4-fs (loop5): Remounting filesystem read-only
[  142.626849][T10766] EXT4-fs (loop5): 1 truncate cleaned up
[  142.645223][T10766] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  142.677595][T10766] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  142.768616][T10773] loop5: detected capacity change from 0 to 512
[  142.782788][T10773] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  142.804428][T10775] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  142.811752][T10775] IPv6: NLM_F_CREATE should be set when creating new route
[  142.820580][T10775] lo: entered allmulticast mode
[  142.827350][T10773] EXT4-fs (loop5): 1 truncate cleaned up
[  142.829059][T10775] tunl0: entered allmulticast mode
[  142.841795][T10773] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  142.880545][ T4631] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  142.903563][T10775] gre0: entered allmulticast mode
[  142.966199][T10775] gretap0: entered allmulticast mode
[  143.041960][T10789] loop9: detected capacity change from 0 to 512
[  143.053683][T10789] EXT4-fs (loop9): 1 orphan inode deleted
[  143.076410][T10789] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  143.128434][T10775] erspan0: entered allmulticast mode
[  143.136767][T10789] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  143.149810][T10775] ip_vti0: entered allmulticast mode
[  143.179802][T10775] ip6_vti0: entered allmulticast mode
[  143.211801][T10775] sit0: entered allmulticast mode
[  143.244719][T10775] ip6tnl0: entered allmulticast mode
[  143.296521][T10775] ip6gre0: entered allmulticast mode
[  143.326147][T10775] syz_tun: entered allmulticast mode
[  143.356248][T10775] ip6gretap0: entered allmulticast mode
[  143.385405][T10775] bond0: entered allmulticast mode
[  143.390806][T10775] bond_slave_0: entered allmulticast mode
[  143.396554][T10775] bond_slave_1: entered allmulticast mode
[  143.424848][T10775] team0: entered allmulticast mode
[  143.430127][T10775] team_slave_0: entered allmulticast mode
[  143.435878][T10775] team_slave_1: entered allmulticast mode
[  143.491507][T10775] nlmon0: entered allmulticast mode
[  143.509245][T10775] caif0: entered allmulticast mode
[  143.528875][T10775] vxcan0: entered allmulticast mode
[  143.548579][T10775] vxcan1: entered allmulticast mode
[  143.571194][T10775] wg1: entered allmulticast mode
[  143.601144][T10775] wg2: left promiscuous mode
[  143.622372][T10775] veth0_to_bridge: entered allmulticast mode
[  143.651437][T10775] bridge_slave_0: entered allmulticast mode
[  143.716985][T10775] veth1_to_bridge: entered allmulticast mode
[  143.727998][T10775] bridge_slave_1: entered allmulticast mode
[  143.762859][T10775] veth0_to_bond: entered allmulticast mode
[  143.852451][T10775] veth1_to_bond: entered allmulticast mode
[  143.913232][T10775] veth0_to_team: entered allmulticast mode
[  143.972852][T10775] veth1_to_team: entered allmulticast mode
[  144.001528][T10775] veth0_to_batadv: entered allmulticast mode
[  144.014813][T10775] batadv_slave_0: entered allmulticast mode
[  144.027353][T10775] veth1_to_batadv: entered allmulticast mode
[  144.046074][T10775] batadv_slave_1: entered allmulticast mode
[  144.055931][T10775] xfrm0: entered allmulticast mode
[  144.065045][T10775] veth0_to_hsr: entered allmulticast mode
[  144.075179][T10775] hsr_slave_0: entered allmulticast mode
[  144.078437][T10819] netlink: 'syz.2.2896': attribute type 4 has an invalid length.
[  144.091212][T10775] veth1_to_hsr: entered allmulticast mode
[  144.102537][T10775] hsr_slave_1: entered allmulticast mode
[  144.123379][T10775] hsr0: entered allmulticast mode
[  144.129236][T10821] netlink: 'syz.2.2896': attribute type 4 has an invalid length.
[  144.138049][T10775] veth1_virt_wifi: entered allmulticast mode
[  144.147002][T10775] veth0_virt_wifi: entered allmulticast mode
[  144.159698][   T29] kauditd_printk_skb: 174 callbacks suppressed
[  144.159710][   T29] audit: type=1400 audit(1760599258.736:5171): avc:  denied  { watch } for  pid=10822 comm="syz.9.2888" path="/90" dev="tmpfs" ino=488 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  144.187981][   T29] audit: type=1400 audit(1760599258.736:5172): avc:  denied  { execute_no_trans } for  pid=10822 comm="syz.9.2888" path="/90/file0" dev="tmpfs" ino=493 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  144.190358][T10775] veth1_vlan: entered allmulticast mode
[  144.244356][T10775] ÿÿÿÿÿÿ: entered allmulticast mode
[  144.257917][T10775] macvlan0: entered allmulticast mode
[  144.279470][T10775] macvlan1: entered allmulticast mode
[  144.296273][T10775] ipvlan0: entered allmulticast mode
[  144.301792][T10775] ipvlan1: entered allmulticast mode
[  144.307325][T10775] veth1_macvtap: entered allmulticast mode
[  144.320202][T10775] veth0_macvtap: entered allmulticast mode
[  144.335547][T10775] macvtap0: entered allmulticast mode
[  144.341946][T10775] macsec0: entered allmulticast mode
[  144.348817][T10775] geneve0: entered allmulticast mode
[  144.355065][T10775] geneve1: entered allmulticast mode
[  144.362388][T10775] bond1: entered allmulticast mode
[  144.391501][T10775] veth2: entered allmulticast mode
[  144.399996][T10775] veth3: entered allmulticast mode
[  144.412854][T10775] bond2: entered allmulticast mode
[  144.418103][T10830] loop9: detected capacity change from 0 to 512
[  144.427116][T10775] bridge0: entered allmulticast mode
[  144.432853][T10830] EXT4-fs error (device loop9): ext4_orphan_get:1392: inode #15: comm syz.9.2890: iget: bad i_size value: 38620345925642
[  144.447429][T10830] EXT4-fs error (device loop9): ext4_orphan_get:1397: comm syz.9.2890: couldn't read orphan inode 15 (err -117)
[  144.454273][T10775] bond3: entered allmulticast mode
[  144.466412][T10775] vxlan0: entered allmulticast mode
[  144.474043][T10775] macvlan2: entered allmulticast mode
[  144.480407][T10775] netdevsim netdevsim3 eth0: entered allmulticast mode
[  144.484553][T10830] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  144.501660][T10830] EXT4-fs error (device loop9): ext4_validate_block_bitmap:432: comm syz.9.2890: bg 0: block 5: invalid block bitmap
[  144.504510][T10775] netdevsim netdevsim3 eth1: entered allmulticast mode
[  144.521918][T10775] netdevsim netdevsim3 eth2: entered allmulticast mode
[  144.529040][T10775] netdevsim netdevsim3 eth3: entered allmulticast mode
[  144.536155][T10830] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28
[  144.536186][T10830] EXT4-fs (loop9): This should not happen!! Data will be lost
[  144.536186][T10830] 
[  144.536202][T10830] EXT4-fs (loop9): Total free blocks count 0
[  144.536271][T10830] EXT4-fs (loop9): Free/Dirty block details
[  144.536285][T10830] EXT4-fs (loop9): free_blocks=0
[  144.536298][T10830] EXT4-fs (loop9): dirty_blocks=2
[  144.536310][T10830] EXT4-fs (loop9): Block reservation details
[  144.536324][T10830] EXT4-fs (loop9): i_reserved_data_blocks=2
[  144.593850][ T9134] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  144.596730][ T9767] lo speed is unknown, defaulting to 1000
[  144.608676][ T9767] syz2: Port: 1 Link DOWN
[  144.637951][T10835] __nla_validate_parse: 8 callbacks suppressed
[  144.637967][T10835] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2892'.
[  144.650684][T10795] syzkaller0: entered promiscuous mode
[  144.659144][T10795] syzkaller0: entered allmulticast mode
[  144.717360][T10841] netlink: 'syz.9.2894': attribute type 83 has an invalid length.
[  144.732960][   T37] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  144.741530][   T37] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  144.765926][T10843] lo speed is unknown, defaulting to 1000
[  144.785887][   T37] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  144.794290][   T37] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  144.802789][   T37] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  144.811846][   T37] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  144.830447][   T37] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  144.839538][   T37] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  144.851770][T10815] lo speed is unknown, defaulting to 1000
[  144.869087][   T29] audit: type=1400 audit(1760599259.446:5173): avc:  denied  { cpu } for  pid=10847 comm="syz.8.2898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  144.987437][   T29] audit: type=1400 audit(1760599259.566:5174): avc:  denied  { bind } for  pid=10855 comm="syz.8.2901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  145.007773][   T29] audit: type=1400 audit(1760599259.586:5175): avc:  denied  { read } for  pid=10855 comm="syz.8.2901" name="event3" dev="devtmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  145.031111][   T29] audit: type=1400 audit(1760599259.586:5176): avc:  denied  { open } for  pid=10855 comm="syz.8.2901" path="/dev/input/event3" dev="devtmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  145.055273][   T29] audit: type=1400 audit(1760599259.586:5177): avc:  denied  { ioctl } for  pid=10855 comm="syz.8.2901" path="/dev/input/event3" dev="devtmpfs" ino=249 ioctlcmd=0x4590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  145.109782][   T29] audit: type=1400 audit(1760599259.686:5178): avc:  denied  { read write } for  pid=10858 comm="syz.8.2902" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  145.134028][   T29] audit: type=1400 audit(1760599259.686:5179): avc:  denied  { open } for  pid=10858 comm="syz.8.2902" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  145.165436][   T29] audit: type=1400 audit(1760599259.736:5180): avc:  denied  { ioctl } for  pid=10858 comm="syz.8.2902" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  145.966775][T10898] lo speed is unknown, defaulting to 1000
[  146.206967][T10913] loop5: detected capacity change from 0 to 512
[  146.214281][T10913] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  146.224147][T10913] EXT4-fs (loop5): orphan cleanup on readonly fs
[  146.231199][T10913] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2917: bg 0: block 248: padding at end of block bitmap is not set
[  146.245773][T10913] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.2917: Failed to acquire dquot type 1
[  146.258240][T10913] EXT4-fs (loop5): 1 truncate cleaned up
[  146.295676][T10913] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  146.329767][T10916] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2919'.
[  146.357592][T10920] syz_tun: entered allmulticast mode
[  146.645186][T10951] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2932'.
[  146.783018][T10956] lo speed is unknown, defaulting to 1000
[  147.614210][ T4631] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  147.905629][T10978] lo: entered allmulticast mode
[  147.911239][T10978] tunl0: entered allmulticast mode
[  147.916539][T10978] gre0: entered allmulticast mode
[  147.921635][T10978] gretap0: entered allmulticast mode
[  147.927077][T10978] erspan0: entered allmulticast mode
[  147.932445][T10978] ip_vti0: entered allmulticast mode
[  147.938500][T10978] ip6_vti0: entered allmulticast mode
[  147.943998][T10978] sit0: entered allmulticast mode
[  147.949156][T10978] ip6tnl0: entered allmulticast mode
[  147.954595][T10978] ip6gre0: entered allmulticast mode
[  147.959963][T10978] syz_tun: entered allmulticast mode
[  147.965362][T10978] ip6gretap0: entered allmulticast mode
[  147.971678][T10978] bridge0: entered allmulticast mode
[  147.977148][T10978] bond0: entered allmulticast mode
[  147.982364][T10978] bond_slave_0: entered allmulticast mode
[  147.988112][T10978] bond_slave_1: entered allmulticast mode
[  147.993983][T10978] team0: entered allmulticast mode
[  147.999787][T10978] team_slave_0: entered allmulticast mode
[  148.005550][T10978] team_slave_1: entered allmulticast mode
[  148.011842][T10978] dummy0: entered allmulticast mode
[  148.140148][T10978] nlmon0: entered allmulticast mode
[  148.145456][T10978] caif0: entered allmulticast mode
[  148.151289][T10978] batadv0: entered allmulticast mode
[  148.156690][T10978] vxcan0: entered allmulticast mode
[  148.161954][T10978] vxcan1: entered allmulticast mode
[  148.167327][T10978] veth0: entered allmulticast mode
[  148.172636][T10978] veth1: entered allmulticast mode
[  148.178536][T10978] wg0: entered allmulticast mode
[  148.183602][T10978] wg1: entered allmulticast mode
[  148.188666][T10978] wg2: entered allmulticast mode
[  148.193681][T10978] veth0_to_bridge: entered allmulticast mode
[  148.199854][T10978] veth1_to_bridge: entered allmulticast mode
[  148.206752][T10978] veth0_to_bond: entered allmulticast mode
[  148.212799][T10978] veth1_to_bond: entered allmulticast mode
[  148.218809][T10978] veth0_to_team: entered allmulticast mode
[  148.224775][T10978] veth1_to_team: entered allmulticast mode
[  148.230803][T10978] veth0_to_batadv: entered allmulticast mode
[  148.237634][T10978] batadv_slave_0: entered allmulticast mode
[  148.243611][T10978] veth1_to_batadv: entered allmulticast mode
[  148.249648][T10978] batadv_slave_1: entered allmulticast mode
[  148.255731][T10978] xfrm0: entered allmulticast mode
[  148.260987][T10978] veth0_to_hsr: entered allmulticast mode
[  148.267521][T10978] hsr_slave_0: entered allmulticast mode
[  148.273234][T10978] veth1_to_hsr: entered allmulticast mode
[  148.279018][T10978] hsr_slave_1: entered allmulticast mode
[  148.284798][T10978] hsr0: entered allmulticast mode
[  148.290005][T10978] veth1_virt_wifi: entered allmulticast mode
[  148.296697][T10978] veth0_virt_wifi: entered allmulticast mode
[  148.302851][T10978] veth1_vlan: entered allmulticast mode
[  148.308515][T10978] veth0_vlan: entered allmulticast mode
[  148.314238][T10978] vlan0: entered allmulticast mode
[  148.319444][T10978] vlan1: entered allmulticast mode
[  148.324675][T10978] macvlan0: entered allmulticast mode
[  148.331114][T10978] macvlan1: entered allmulticast mode
[  148.336667][T10978] ipvlan0: entered allmulticast mode
[  148.342046][T10978] ipvlan1: entered allmulticast mode
[  148.347427][T10978] veth1_macvtap: entered allmulticast mode
[  148.353296][T10978] veth0_macvtap: entered allmulticast mode
[  148.359869][T10978] macvtap0: entered allmulticast mode
[  148.365472][T10978] macsec0: entered allmulticast mode
[  148.370956][T10978] geneve0: entered allmulticast mode
[  148.376473][T10978] geneve1: entered allmulticast mode
[  148.381874][T10978] bridge1: entered allmulticast mode
[  148.387941][T10978] macvlan2: entered allmulticast mode
[  148.393750][T10978] netdevsim netdevsim9 eth0: entered allmulticast mode
[  148.400719][T10978] netdevsim netdevsim9 eth1: entered allmulticast mode
[  148.407841][T10978] netdevsim netdevsim9 eth2: entered allmulticast mode
[  148.414908][T10978] netdevsim netdevsim9 eth3: entered allmulticast mode
[  148.474114][T10990] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.547646][T10990] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.608181][T10990] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.673221][T10999] loop8: detected capacity change from 0 to 8192
[  148.689578][T10999] sd 0:0:1:0: device reset
[  148.697719][T10990] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.745010][T11004] loop8: detected capacity change from 0 to 1024
[  148.752319][T11004] EXT4-fs: Ignoring removed orlov option
[  148.760475][   T37] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  148.777096][   T37] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  148.787040][T11004] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  148.789873][   T37] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  148.824023][T10457] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  148.848160][ T8393] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  148.864755][T11014] sctp: [Deprecated]: syz.3.2953 (pid 11014) Use of struct sctp_assoc_value in delayed_ack socket option.
[  148.864755][T11014] Use struct sctp_sack_info instead
[  148.892343][T11020] macsec0: left promiscuous mode
[  148.897395][T11020] macsec0: entered allmulticast mode
[  148.903046][T11014] 9pnet_virtio: no channels available for device 127.0.0.1
[  149.129096][T11032] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2960'.
[  149.156165][T11034] IPVS: set_ctl: invalid protocol: 4 172.20.20.187:20003
[  149.177831][   T29] kauditd_printk_skb: 135 callbacks suppressed
[  149.177849][   T29] audit: type=1400 audit(1760599263.756:5314): avc:  denied  { create } for  pid=11036 comm="syz.5.2962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  149.204861][   T29] audit: type=1400 audit(1760599263.756:5315): avc:  denied  { connect } for  pid=11036 comm="syz.5.2962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  149.320434][T11039] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2963'.
[  149.330466][T11039] 0ªX¹¦À: renamed from caif0
[  149.337318][T11039] A link change request failed with some changes committed already. Interface 
60ªX¹¦À may have been left with an inconsistent configuration, please check.
[  149.481066][T11045] bond1: (slave dummy0): Releasing active interface
[  149.511623][   T29] audit: type=1400 audit(1760599264.086:5316): avc:  denied  { ioctl } for  pid=11044 comm="syz.3.2967" path="socket:[32261]" dev="sockfs" ino=32261 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  149.602667][   T29] audit: type=1400 audit(1760599264.136:5317): avc:  denied  { create } for  pid=11052 comm="syz.3.2969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  149.622357][   T29] audit: type=1400 audit(1760599264.136:5318): avc:  denied  { connect } for  pid=11052 comm="syz.3.2969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  149.674666][T11056] loop9: detected capacity change from 0 to 512
[  149.686186][T11056] EXT4-fs: Ignoring removed bh option
[  149.698943][T11056] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended
[  149.708032][T11056] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem
[  149.745977][T11056] EXT4-fs (loop9): warning: mounting unchecked fs, running e2fsck is recommended
[  149.782945][T11056] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=800ee01c, mo2=0006]
[  149.802998][T11056] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  149.826396][   T29] audit: type=1400 audit(1760599264.406:5319): avc:  denied  { append } for  pid=11055 comm="syz.9.2970" name="file1" dev="loop9" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  149.849028][T11056] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.2970: bg 0: block 353: padding at end of block bitmap is not set
[  149.900318][ T9134] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  149.957755][   T29] audit: type=1400 audit(1760599264.536:5320): avc:  denied  { listen } for  pid=11062 comm="syz.9.2972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  150.148176][T11071] loop5: detected capacity change from 0 to 1024
[  150.155007][T11071] EXT4-fs: Ignoring removed orlov option
[  150.164999][T11071] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  150.185718][T11071] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e018, mo2=0000]
[  150.225725][T11071] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 2: comm syz.5.2975: lblock 2 mapped to illegal pblock 2 (length 1)
[  150.265960][T11076] lo speed is unknown, defaulting to 1000
[  150.373677][   T29] audit: type=1326 audit(1760599264.936:5321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11060 comm="syz.2.2981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cf8faeec9 code=0x7ffc0000
[  150.397309][   T29] audit: type=1326 audit(1760599264.936:5322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11060 comm="syz.2.2981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cf8faeec9 code=0x7ffc0000
[  150.420810][   T29] audit: type=1400 audit(1760599264.936:5323): avc:  denied  { create } for  pid=11064 comm="syz.3.2973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  150.558483][T11071] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 48: comm syz.5.2975: lblock 0 mapped to illegal pblock 48 (length 1)
[  150.600455][T11071] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.2975: Failed to acquire dquot type 0
[  150.618453][T11071] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6313: Corrupt filesystem
[  150.629707][T11071] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.2975: mark_inode_dirty error
[  150.642741][T11071] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  150.653000][T11071] EXT4-fs (loop5): 1 orphan inode deleted
[  150.662290][T11071] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  150.675076][   T12] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1)
[  150.692404][   T12] EXT4-fs error (device loop5): ext4_release_dquot:6981: comm kworker/u8:0: Failed to release dquot type 0
[  150.733005][ T4631] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  150.744845][ T4631] EXT4-fs error (device loop5): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0
[  150.767730][ T4631] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6313: Corrupt filesystem
[  150.777383][ T4631] EXT4-fs error (device loop5): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error
[  150.800059][ T9756] kernel write not supported for file bpf-prog (pid: 9756 comm: kworker/0:7)
[  150.836413][T11088] loop9: detected capacity change from 0 to 1024
[  150.906786][T11088] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  150.933676][ T9134] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  150.945248][T11094] bond0: (slave dummy0): Releasing backup interface
[  150.957794][T11099] loop8: detected capacity change from 0 to 512
[  150.978824][T11099] EXT4-fs: Ignoring removed bh option
[  150.990042][T11099] journal_path: Lookup failure for './file0'
[  150.996189][T11099] EXT4-fs: error: could not find journal device path
[  151.027021][T11103] syzkaller0: entered promiscuous mode
[  151.032504][T11103] syzkaller0: entered allmulticast mode
[  151.217586][T11116] loop9: detected capacity change from 0 to 512
[  151.259901][T11116] EXT4-fs (loop9): revision level too high, forcing read-only mode
[  151.276382][T11116] EXT4-fs (loop9): orphan cleanup on readonly fs
[  151.287308][T11116] EXT4-fs error (device loop9): ext4_do_update_inode:5632: inode #16: comm syz.9.2988: corrupted inode contents
[  151.331507][T11116] EXT4-fs (loop9): Remounting filesystem read-only
[  151.338361][T11116] EXT4-fs (loop9): 1 truncate cleaned up
[  151.344115][   T12] EXT4-fs (loop9): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  151.354667][   T12] EXT4-fs (loop9): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  151.365752][   T12] EXT4-fs (loop9): Quota write (off=8, len=24) cancelled because transaction is not started
[  151.376807][T11116] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  151.467095][ T9134] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  151.623411][T11126] pim6reg1: entered promiscuous mode
[  151.662362][T11128] loop5: detected capacity change from 0 to 1024
[  151.669587][T11128] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  151.681027][T11128] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  151.691682][T11128] JBD2: no valid journal superblock found
[  151.697444][T11128] EXT4-fs (loop5): Could not load journal inode
[  151.879107][T11131] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2994'.
[  151.888291][T11131] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2994'.
[  152.100981][T11139] batman_adv: batadv0: Adding interface: dummy0
[  152.107895][T11139] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  152.133189][T11139] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  152.213655][T11148] loop8: detected capacity change from 0 to 164
[  152.221078][T11148] isofs_fill_super: root inode is not a directory. Corrupted media?
[  152.855729][T11173] loop9: detected capacity change from 0 to 512
[  152.863407][T11173] EXT4-fs (loop9): orphan cleanup on readonly fs
[  152.870133][T11173] EXT4-fs error (device loop9): ext4_orphan_get:1418: comm syz.9.3011: bad orphan inode 13
[  152.880956][T11173] ext4_test_bit(bit=12, block=18) = 1
[  152.886395][T11173] is_bad_inode(inode)=0
[  152.890555][T11173] NEXT_ORPHAN(inode)=2130706432
[  152.895421][T11173] max_ino=32
[  152.898690][T11173] i_nlink=1
[  152.902177][T11173] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  152.966676][T11173] Falling back ldisc for ttyS3.
[  152.982179][ T9134] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  153.359662][T11193] loop5: detected capacity change from 0 to 512
[  153.366758][T11193] EXT4-fs: Ignoring removed bh option
[  153.372363][T11193] journal_path: Lookup failure for './file0'
[  153.378498][T11193] EXT4-fs: error: could not find journal device path
[  153.401204][T11195] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3019'.
[  153.410096][T11195] tc_dump_action: action bad kind
[  153.966866][T11197] syz.5.3020 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000
[  153.981069][T11197] CPU: 0 UID: 0 PID: 11197 Comm: syz.5.3020 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  153.981098][T11197] Tainted: [W]=WARN
[  153.981106][T11197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  153.981124][T11197] Call Trace:
[  153.981132][T11197]  <TASK>
[  153.981140][T11197]  __dump_stack+0x1d/0x30
[  153.981196][T11197]  dump_stack_lvl+0xe8/0x140
[  153.981218][T11197]  dump_stack+0x15/0x1b
[  153.981237][T11197]  dump_header+0x81/0x220
[  153.981328][T11197]  oom_kill_process+0x342/0x400
[  153.981399][T11197]  out_of_memory+0x979/0xb80
[  153.981466][T11197]  try_charge_memcg+0x610/0xa10
[  153.981496][T11197]  obj_cgroup_charge_pages+0xa6/0x150
[  153.981534][T11197]  __memcg_kmem_charge_page+0x9f/0x170
[  153.981598][T11197]  __alloc_frozen_pages_noprof+0x188/0x360
[  153.981701][T11197]  alloc_pages_mpol+0xb3/0x260
[  153.981717][T11197]  ? alloc_pages_noprof+0x61/0x130
[  153.981806][T11197]  alloc_pages_noprof+0x90/0x130
[  153.981824][T11197]  __vmalloc_node_range_noprof+0x7a5/0xed0
[  153.981883][T11197]  ? __qdisc_run+0xc52/0xc60
[  153.981913][T11197]  __kvmalloc_node_noprof+0x483/0x670
[  153.981946][T11197]  ? ip_set_alloc+0x24/0x30
[  153.981991][T11197]  ? ip_set_alloc+0x24/0x30
[  153.982098][T11197]  ? __kmalloc_cache_noprof+0x249/0x4a0
[  153.982135][T11197]  ip_set_alloc+0x24/0x30
[  153.982165][T11197]  hash_netiface_create+0x282/0x740
[  153.982195][T11197]  ? __pfx_hash_netiface_create+0x10/0x10
[  153.982291][T11197]  ip_set_create+0x3cc/0x970
[  153.982334][T11197]  ? __nla_parse+0x40/0x60
[  153.982359][T11197]  nfnetlink_rcv_msg+0x4c6/0x590
[  153.982419][T11197]  netlink_rcv_skb+0x123/0x220
[  153.982445][T11197]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  153.982485][T11197]  nfnetlink_rcv+0x167/0x16c0
[  153.982504][T11197]  ? kmem_cache_free+0xe4/0x3d0
[  153.982612][T11197]  ? __kfree_skb+0x109/0x150
[  153.982721][T11197]  ? nlmon_xmit+0x4f/0x60
[  153.982747][T11197]  ? consume_skb+0x49/0x150
[  153.982777][T11197]  ? nlmon_xmit+0x4f/0x60
[  153.982804][T11197]  ? dev_hard_start_xmit+0x3b0/0x3e0
[  153.982847][T11197]  ? __dev_queue_xmit+0x1200/0x2000
[  153.982877][T11197]  ? __dev_queue_xmit+0x182/0x2000
[  153.982904][T11197]  ? ref_tracker_free+0x37d/0x3e0
[  153.982941][T11197]  ? __netlink_deliver_tap+0x4dc/0x500
[  153.983057][T11197]  netlink_unicast+0x5c0/0x690
[  153.983091][T11197]  netlink_sendmsg+0x58b/0x6b0
[  153.983128][T11197]  ? __pfx_netlink_sendmsg+0x10/0x10
[  153.983152][T11197]  __sock_sendmsg+0x145/0x180
[  153.983169][T11197]  ____sys_sendmsg+0x31e/0x4e0
[  153.983250][T11197]  ___sys_sendmsg+0x17b/0x1d0
[  153.983352][T11197]  __x64_sys_sendmsg+0xd4/0x160
[  153.983379][T11197]  x64_sys_call+0x191e/0x3000
[  153.983448][T11197]  do_syscall_64+0xd2/0x200
[  153.983467][T11197]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  153.983489][T11197]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  153.983507][T11197]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  153.983531][T11197] RIP: 0033:0x7f37d343eec9
[  153.983548][T11197] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  153.983685][T11197] RSP: 002b:00007f37d1ea7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  153.983700][T11197] RAX: ffffffffffffffda RBX: 00007f37d3695fa0 RCX: 00007f37d343eec9
[  153.983710][T11197] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000008
[  153.983719][T11197] RBP: 00007f37d34c1f91 R08: 0000000000000000 R09: 0000000000000000
[  153.983729][T11197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  153.983738][T11197] R13: 00007f37d3696038 R14: 00007f37d3695fa0 R15: 00007ffe073c94e8
[  153.983776][T11197]  </TASK>
[  153.983786][T11197] memory: usage 307200kB, limit 307200kB, failcnt 163
[  154.219698][   T29] kauditd_printk_skb: 24 callbacks suppressed
[  154.219715][   T29] audit: type=1326 audit(1760599268.796:5339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11210 comm="syz.3.3025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f955563eec9 code=0x7ffc0000
[  154.222426][T11197] memory+swap: usage 307496kB, limit 9007199254740988kB, failcnt 0
[  154.227176][   T29] audit: type=1326 audit(1760599268.796:5340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11210 comm="syz.3.3025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f955563eec9 code=0x7ffc0000
[  154.231843][T11197] kmem: usage 307156kB, limit 9007199254740988kB, failcnt 0
[  154.231860][T11197] Memory cgroup stats for 
[  154.261609][T11213] netlink: 152 bytes leftover after parsing attributes in process `syz.8.3026'.
[  154.263564][T11197] /syz5:
[  154.263898][T11197] cache 0
[  154.287874][   T29] audit: type=1326 audit(1760599268.816:5341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11210 comm="syz.3.3025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f955563eec9 code=0x7ffc0000
[  154.296126][T11197] rss 4096
[  154.296137][T11197] shmem 0
[  154.296145][T11197] mapped_file 20480
[  154.296154][T11197] dirty 0
[  154.296203][T11197] writeback 0
[  154.296209][T11197] workingset_refault_anon 3
[  154.296216][T11197] workingset_refault_file 0
[  154.296224][T11197] swap 303104
[  154.296232][T11197] swapcached 28672
[  154.296240][T11197] pgpgin 132708
[  154.296248][T11197] pgpgout 132697
[  154.296256][T11197] pgfault 138717
[  154.296294][T11197] pgmajfault 4
[  154.296302][T11197] inactive_anon 0
[  154.296310][T11197] active_anon 28672
[  154.296318][T11197] inactive_file 0
[  154.296327][T11197] active_file 16384
[  154.296335][T11197] unevictable 0
[  154.296342][T11197] hierarchical_memory_limit 314572800
[  154.296350][T11197] hierarchical_memsw_limit 9223372036854771712
[  154.296358][T11197] total_cache 0
[  154.296364][T11197] total_rss 4096
[  154.296370][T11197] total_shmem 0
[  154.296382][T11197] total_mapped_file 20480
[  154.296411][T11197] total_dirty 0
[  154.296417][T11197] total_writeback 0
[  154.296425][T11197] total_workingset_refault_anon 3
[  154.296434][T11197] total_workingset_refault_file 0
[  154.296442][T11197] total_swap 303104
[  154.296448][T11197] total_swapcached 28672
[  154.296456][T11197] total_pgpgin 132708
[  154.296476][T11197] total_pgpgout 132697
[  154.296484][T11197] total_pgfault 138717
[  154.296493][T11197] total_pgmajfault 4
[  154.296502][T11197] total_inactive_anon 0
[  154.296525][T11197] total_active_anon 28672
[  154.296597][T11197] total_inactive_file 0
[  154.296606][T11197] total_active_file 16384
[  154.296614][T11197] total_unevictable 0
[  154.296631][T11197] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.3020,pid=11196,uid=0
[  154.296793][T11197] Memory cgroup out of memory: Killed process 11196 (syz.5.3020) total-vm:93976kB, anon-rss:1140kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000
[  154.304760][   T29] audit: type=1326 audit(1760599268.816:5342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11210 comm="syz.3.3025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f955563eec9 code=0x7ffc0000
[  154.304785][   T29] audit: type=1326 audit(1760599268.816:5343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11210 comm="syz.3.3025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f955563eec9 code=0x7ffc0000
[  154.304807][   T29] audit: type=1326 audit(1760599268.816:5344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11210 comm="syz.3.3025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f955563eec9 code=0x7ffc0000
[  154.720066][   T29] audit: type=1326 audit(1760599268.816:5345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11210 comm="syz.3.3025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f955563eec9 code=0x7ffc0000
[  154.744282][   T29] audit: type=1326 audit(1760599268.816:5346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11210 comm="syz.3.3025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f955563eec9 code=0x7ffc0000
[  154.768382][   T29] audit: type=1326 audit(1760599268.816:5347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11210 comm="syz.3.3025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f955563eec9 code=0x7ffc0000
[  154.791848][   T29] audit: type=1326 audit(1760599268.816:5348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11210 comm="syz.3.3025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f955563eec9 code=0x7ffc0000
[  154.859972][T11230] netlink: 'syz.3.3032': attribute type 10 has an invalid length.
[  154.873081][T11229] netlink: 3 bytes leftover after parsing attributes in process `syz.9.3033'.
[  154.875336][T11230] team0: Port device dummy0 added
[  154.892817][T11229] 0ªX¹¦À: renamed from caif0
[  154.899898][T11229] A link change request failed with some changes committed already. Interface 
60ªX¹¦À may have been left with an inconsistent configuration, please check.
[  154.957960][T11235] SELinux:  Context system_u:object_r:pam_console_exec_t:s0 is not valid (left unmapped).
[  155.001430][T11237] netlink: 132 bytes leftover after parsing attributes in process `syz.9.3036'.
[  155.189683][T11251] rdma_rxe: rxe_newlink: failed to add lo
[  155.814353][T11265] netlink: 'syz.9.3047': attribute type 10 has an invalid length.
[  155.870310][T11270] loop9: detected capacity change from 0 to 512
[  155.878094][T11270] EXT4-fs (loop9): orphan cleanup on readonly fs
[  155.885247][T11270] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.3049: bg 0: block 248: padding at end of block bitmap is not set
[  155.900062][T11270] EXT4-fs error (device loop9): ext4_acquire_dquot:6945: comm syz.9.3049: Failed to acquire dquot type 1
[  155.911938][T11270] EXT4-fs (loop9): 1 truncate cleaned up
[  155.918276][T11270] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  155.934320][T11270] EXT4-fs error (device loop9): ext4_ext_check_inode:523: inode #16: comm syz.9.3049: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  155.968072][ T9134] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  156.038898][T11278] lo speed is unknown, defaulting to 1000
[  156.044555][T11282] loop9: detected capacity change from 0 to 1024
[  156.051276][T11282] EXT4-fs: Ignoring removed orlov option
[  156.066620][T11282] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  156.216006][T11289] syzkaller0: entered promiscuous mode
[  156.221591][T11289] syzkaller0: entered allmulticast mode
[  156.336886][T11297] netlink: 'syz.8.3060': attribute type 10 has an invalid length.
[  156.345171][T11297] batman_adv: batadv0: Removing interface: dummy0
[  156.354286][T11297] team0: Port device dummy0 added
[  156.392602][T11301] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3062'.
[  156.402259][T11301] netlink: 'syz.2.3062': attribute type 12 has an invalid length.
[  156.421411][T11301] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3062'.
[  156.426015][T10408] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  156.430473][T11301] netlink: 'syz.2.3062': attribute type 12 has an invalid length.
[  156.458561][T10457] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  156.483970][T10457] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  156.495926][T10408] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  156.969305][T11316] lo speed is unknown, defaulting to 1000
[  157.120633][T11315] loop8: detected capacity change from 0 to 512
[  157.353623][T11315] EXT4-fs warning (device loop8): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  157.353921][T11315] EXT4-fs (loop8): mount failed
[  157.421166][ T9134] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  157.654009][T11324] syzkaller0: entered promiscuous mode
[  157.659557][T11324] syzkaller0: entered allmulticast mode
[  158.499293][T11334] syzkaller0: entered promiscuous mode
[  158.504824][T11334] syzkaller0: entered allmulticast mode
[  158.538363][T11329] loop9: detected capacity change from 0 to 2048
[  158.572447][T11329] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  158.578719][T11335] lo speed is unknown, defaulting to 1000
[  158.617491][T11335] lo speed is unknown, defaulting to 1000
[  158.636989][T11335] lo speed is unknown, defaulting to 1000
[  158.694443][T11344] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3073'.
[  158.703396][T11344] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3073'.
[  158.850861][ T9134] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  158.863090][T11335] infiniband s
z1: set active
[  158.868350][T11335] infiniband s
z1: added lo
[  158.872901][ T9765] lo speed is unknown, defaulting to 1000
[  158.894724][T11343] netlink: 'syz.5.3074': attribute type 10 has an invalid length.
[  158.920134][T11335] RDS/IB: s
z1: added
[  158.924753][T11335] lo speed is unknown, defaulting to 1000
[  158.987851][T11335] lo speed is unknown, defaulting to 1000
[  159.075710][T11343] team0: Port device dummy0 added
[  159.085052][T11335] lo speed is unknown, defaulting to 1000
[  159.139468][T11335] lo speed is unknown, defaulting to 1000
[  159.182728][T11335] lo speed is unknown, defaulting to 1000
[  159.220007][T11335] lo speed is unknown, defaulting to 1000
[  160.175339][   T29] kauditd_printk_skb: 111 callbacks suppressed
[  160.175353][   T29] audit: type=1326 audit(1760599274.736:5457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11367 comm="syz.5.3084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37d343eec9 code=0x7ffc0000
[  160.205118][   T29] audit: type=1326 audit(1760599274.736:5458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11367 comm="syz.5.3084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f37d343eec9 code=0x7ffc0000
[  160.228834][   T29] audit: type=1326 audit(1760599274.736:5459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11367 comm="syz.5.3084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37d343eec9 code=0x7ffc0000
[  160.252385][   T29] audit: type=1326 audit(1760599274.746:5460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11367 comm="syz.5.3084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f37d343eec9 code=0x7ffc0000
[  160.276048][   T29] audit: type=1326 audit(1760599274.746:5461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11367 comm="syz.5.3084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37d343eec9 code=0x7ffc0000
[  160.435484][T11376] netlink: 'syz.8.3085': attribute type 4 has an invalid length.
[  160.443891][T11376] netlink: 'syz.8.3085': attribute type 4 has an invalid length.
[  160.476248][T11371] Falling back ldisc for ttyS3.
[  160.593019][T11383] loop8: detected capacity change from 0 to 1024
[  160.652484][T11383] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  160.663421][T11383] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  160.713449][T11385] rdma_rxe: rxe_newlink: failed to add lo
[  160.803611][   T29] audit: type=1326 audit(1760599275.356:5462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11386 comm="syz.3.3089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f955563eec9 code=0x7ffc0000
[  160.827798][   T29] audit: type=1326 audit(1760599275.356:5463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11386 comm="syz.3.3089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f955563eec9 code=0x7ffc0000
[  160.846948][T11383] JBD2: no valid journal superblock found
[  160.851294][   T29] audit: type=1326 audit(1760599275.356:5464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11386 comm="syz.3.3089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7f955563eec9 code=0x7ffc0000
[  160.857011][T11383] EXT4-fs (loop8): Could not load journal inode
[  160.887948][   T29] audit: type=1326 audit(1760599275.356:5465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11386 comm="syz.3.3089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f955563eec9 code=0x7ffc0000
[  160.911476][   T29] audit: type=1326 audit(1760599275.356:5466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11386 comm="syz.3.3089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f955563eec9 code=0x7ffc0000
[  161.344544][T11410] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3096'.
[  161.353825][T11410] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3096'.
[  161.370333][T11410] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3096'.
[  161.389319][T11410] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3096'.
[  161.415926][T11410] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3096'.
[  161.431094][T11410] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3096'.
[  161.450005][T11410] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3096'.
[  161.491769][T11410] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3096'.
[  161.587898][T11418] loop8: detected capacity change from 0 to 512
[  161.634996][T11418] EXT4-fs (loop8): orphan cleanup on readonly fs
[  161.670233][T11418] EXT4-fs error (device loop8): ext4_orphan_get:1418: comm syz.8.3100: bad orphan inode 13
[  161.722431][T11418] ext4_test_bit(bit=12, block=18) = 1
[  161.727892][T11418] is_bad_inode(inode)=0
[  161.732062][T11418] NEXT_ORPHAN(inode)=2130706432
[  161.736931][T11418] max_ino=32
[  161.740125][T11418] i_nlink=1
[  161.787391][T11418] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  161.886153][T11418] Falling back ldisc for ttyS3.
[  161.928770][ T8393] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  162.706521][T11436] loop9: detected capacity change from 0 to 8192
[  162.949303][T11450] syzkaller0: entered promiscuous mode
[  162.954900][T11450] syzkaller0: entered allmulticast mode
[  163.166514][T11453] lo speed is unknown, defaulting to 1000
[  163.172846][T11453] lo speed is unknown, defaulting to 1000
[  163.474765][T11458] loop8: detected capacity change from 0 to 512
[  163.489416][T11458] EXT4-fs: Ignoring removed i_version option
[  163.495477][T11458] EXT4-fs: Ignoring removed nomblk_io_submit option
[  163.502810][T11458] EXT4-fs: Ignoring removed bh option
[  163.526652][T11458] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  163.549232][T11458] ext4 filesystem being mounted at /235/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  163.578015][T11466] lo speed is unknown, defaulting to 1000
[  163.587267][T11466] lo speed is unknown, defaulting to 1000
[  163.694289][T11471] veth0_macvtap: left promiscuous mode
[  164.342639][ T8393] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  164.992806][T11512] lo speed is unknown, defaulting to 1000
[  164.998830][T11512] lo speed is unknown, defaulting to 1000
[  165.449462][T11515] lo speed is unknown, defaulting to 1000
[  165.455602][T11515] lo speed is unknown, defaulting to 1000
[  166.092815][T11518] 9pnet: Could not find request transport: fd<r=
[  166.189909][   T29] kauditd_printk_skb: 77 callbacks suppressed
[  166.189946][   T29] audit: type=1326 audit(1760599280.766:5544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11525 comm="syz.3.3134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f955563eec9 code=0x7ffc0000
[  166.229024][T11526] __nla_validate_parse: 14 callbacks suppressed
[  166.229037][T11526] netlink: 5452 bytes leftover after parsing attributes in process `wÞ£ÿ'.
[  166.294648][   T29] audit: type=1326 audit(1760599280.796:5545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11525 comm="syz.3.3134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f955563eec9 code=0x7ffc0000
[  166.318259][   T29] audit: type=1326 audit(1760599280.796:5546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11525 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f955563eec9 code=0x7ffc0000
[  166.341787][   T29] audit: type=1326 audit(1760599280.796:5547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11525 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f955563eec9 code=0x7ffc0000
[  166.365339][   T29] audit: type=1326 audit(1760599280.796:5548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11525 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f955563eec9 code=0x7ffc0000
[  166.388863][   T29] audit: type=1326 audit(1760599280.796:5549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11525 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f955563eec9 code=0x7ffc0000
[  166.412477][   T29] audit: type=1326 audit(1760599280.796:5550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11525 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f955563eec9 code=0x7ffc0000
[  166.436003][   T29] audit: type=1326 audit(1760599280.796:5551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11525 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f955563eec9 code=0x7ffc0000
[  166.459535][   T29] audit: type=1326 audit(1760599280.796:5552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11525 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=143 compat=0 ip=0x7f955563eec9 code=0x7ffc0000
[  166.483070][   T29] audit: type=1326 audit(1760599280.796:5553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11525 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f955563eec9 code=0x7ffc0000
[  166.593001][T11531] rdma_rxe: rxe_newlink: failed to add lo
[  166.718631][T11536] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3146'.
[  166.764862][T11536] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11536 comm=syz.5.3146
[  166.957836][T11545] netlink: 'syz.8.3140': attribute type 39 has an invalid length.
[  167.028595][T11549] syzkaller0: entered promiscuous mode
[  167.034248][T11549] syzkaller0: entered allmulticast mode
[  167.127887][T11553] serio: Serial port ttyS3
[  167.183310][T11560] hsr0 speed is unknown, defaulting to 1000
[  167.192706][T11559] loop9: detected capacity change from 0 to 1024
[  167.205853][T11560] hsr0 speed is unknown, defaulting to 1000
[  167.206777][T11559] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  167.211939][T11560] hsr0 speed is unknown, defaulting to 1000
[  167.221768][T11559] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  167.238292][T11560] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  167.238976][T11559] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  167.249801][T11560] hsr0 speed is unknown, defaulting to 1000
[  167.262094][T11560] hsr0 speed is unknown, defaulting to 1000
[  167.268483][T11560] hsr0 speed is unknown, defaulting to 1000
[  167.274757][T11559] JBD2: no valid journal superblock found
[  167.275011][T11560] hsr0 speed is unknown, defaulting to 1000
[  167.280550][T11559] EXT4-fs (loop9): Could not load journal inode
[  167.287025][T11560] hsr0 speed is unknown, defaulting to 1000
[  167.287433][T11560] hsr0 speed is unknown, defaulting to 1000
[  167.424024][T11565] rdma_rxe: rxe_newlink: failed to add lo
[  167.477465][T11567] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3150'.
[  167.494871][T11567] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11567 comm=syz.3.3150
[  167.540436][T11572] C: renamed from team_slave_0
[  167.550656][T11572] netlink: 164 bytes leftover after parsing attributes in process `,&#^%'.
[  167.799589][T11585] loop9: detected capacity change from 0 to 128
[  167.811666][ T9760] hid_parser_main: 48 callbacks suppressed
[  167.811685][ T9760] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  167.825172][ T9760] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  167.833308][ T9760] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  167.840710][ T9760] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  167.848143][ T9760] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  167.855605][ T9760] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  167.863740][ T9760] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  167.871206][ T9760] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  167.878694][ T9760] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  167.886887][ T9760] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  167.915634][T11585] bio_check_eod: 50 callbacks suppressed
[  167.915650][T11585] syz.9.3158: attempt to access beyond end of device
[  167.915650][T11585] loop9: rw=2049, sector=145, nr_sectors = 8 limit=128
[  167.940642][T11585] syz.9.3158: attempt to access beyond end of device
[  167.940642][T11585] loop9: rw=2049, sector=161, nr_sectors = 8 limit=128
[  167.973510][ T9760] hid-generic 0000:0000:0000.0009: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  167.993061][T11585] syz.9.3158: attempt to access beyond end of device
[  167.993061][T11585] loop9: rw=2049, sector=177, nr_sectors = 24 limit=128
[  168.052764][T11590] syz.9.3158: attempt to access beyond end of device
[  168.052764][T11590] loop9: rw=2049, sector=305, nr_sectors = 80 limit=128
[  168.068759][T11590] syz.9.3158: attempt to access beyond end of device
[  168.068759][T11590] loop9: rw=2049, sector=393, nr_sectors = 8 limit=128
[  168.087686][T11590] syz.9.3158: attempt to access beyond end of device
[  168.087686][T11590] loop9: rw=2049, sector=409, nr_sectors = 8 limit=128
[  168.101377][T11585] syz.9.3158: attempt to access beyond end of device
[  168.101377][T11585] loop9: rw=2049, sector=209, nr_sectors = 8 limit=128
[  168.114961][T11590] syz.9.3158: attempt to access beyond end of device
[  168.114961][T11590] loop9: rw=2049, sector=425, nr_sectors = 8 limit=128
[  168.130173][T11585] syz.9.3158: attempt to access beyond end of device
[  168.130173][T11585] loop9: rw=2049, sector=225, nr_sectors = 8 limit=128
[  168.181578][T11590] syz.9.3158: attempt to access beyond end of device
[  168.181578][T11590] loop9: rw=2049, sector=441, nr_sectors = 8 limit=128
[  168.361130][T11603] can0: slcan on ttyS3.
[  168.368311][T11604] program syz.8.3162 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  168.436019][T11603] can0 (unregistered): slcan off ttyS3.
[  168.463882][T11605] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3164'.
[  168.472816][T11603] Falling back ldisc for ttyS3.
[  168.624988][T11611] syzkaller0: entered promiscuous mode
[  168.630561][T11611] syzkaller0: entered allmulticast mode
[  168.727276][T11617] syzkaller0: entered promiscuous mode
[  168.732812][T11617] syzkaller0: entered allmulticast mode
[  169.176642][T11631] loop8: detected capacity change from 0 to 1024
[  169.193237][T11631] EXT4-fs: Ignoring removed orlov option
[  169.218302][T11631] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  169.277171][T11638] lo speed is unknown, defaulting to 1000
[  169.283391][T11638] lo speed is unknown, defaulting to 1000
[  169.310054][T11631] ==================================================================
[  169.318159][T11631] BUG: KCSAN: data-race in generic_buffers_fsync_noflush / writeback_single_inode
[  169.327388][T11631] 
[  169.329724][T11631] write to 0xffff88811a299758 of 4 bytes by task 11639 on cpu 0:
[  169.337462][T11631]  writeback_single_inode+0x150/0x3f0
[  169.342855][T11631]  sync_inode_metadata+0x5b/0x90
[  169.347827][T11631]  generic_buffers_fsync_noflush+0xd9/0x120
[  169.353728][T11631]  ext4_sync_file+0x1ab/0x690
[  169.358412][T11631]  vfs_fsync_range+0x10d/0x130
[  169.363187][T11631]  ext4_buffered_write_iter+0x34f/0x3c0
[  169.368732][T11631]  ext4_file_write_iter+0x387/0xf60
[  169.373957][T11631]  iter_file_splice_write+0x666/0xa60
[  169.379358][T11631]  direct_splice_actor+0x156/0x2a0
[  169.381386][T11638] hsr0 speed is unknown, defaulting to 1000
[  169.384477][T11631]  splice_direct_to_actor+0x312/0x680
[  169.384503][T11631]  do_splice_direct+0xda/0x150
[  169.400513][T11631]  do_sendfile+0x380/0x650
[  169.404952][T11631]  __x64_sys_sendfile64+0x105/0x150
[  169.410184][T11631]  x64_sys_call+0x2bb4/0x3000
[  169.414871][T11631]  do_syscall_64+0xd2/0x200
[  169.419396][T11631]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  169.425306][T11631] 
[  169.427640][T11631] read to 0xffff88811a299758 of 4 bytes by task 11631 on cpu 1:
[  169.435283][T11631]  generic_buffers_fsync_noflush+0x80/0x120
[  169.441196][T11631]  ext4_sync_file+0x1ab/0x690
[  169.445890][T11631]  vfs_fsync_range+0x10d/0x130
[  169.450661][T11631]  ext4_buffered_write_iter+0x34f/0x3c0
[  169.456223][T11631]  ext4_file_write_iter+0x387/0xf60
[  169.461460][T11631]  iter_file_splice_write+0x666/0xa60
[  169.466936][T11631]  direct_splice_actor+0x156/0x2a0
[  169.472072][T11631]  splice_direct_to_actor+0x312/0x680
[  169.477466][T11631]  do_splice_direct+0xda/0x150
[  169.482246][T11631]  do_sendfile+0x380/0x650
[  169.486684][T11631]  __x64_sys_sendfile64+0x105/0x150
[  169.491926][T11631]  x64_sys_call+0x2bb4/0x3000
[  169.496620][T11631]  do_syscall_64+0xd2/0x200
[  169.501163][T11631]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  169.507064][T11631] 
[  169.509404][T11631] value changed: 0x00000070 -> 0x00000002
[  169.515122][T11631] 
[  169.517448][T11631] Reported by Kernel Concurrency Sanitizer on:
[  169.523606][T11631] CPU: 1 UID: 0 PID: 11631 Comm: syz.8.3174 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  169.534996][T11631] Tainted: [W]=WARN
[  169.538802][T11631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  169.548863][T11631] ==================================================================
[  169.717177][ T8393] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.