last executing test programs:

12.702166358s ago: executing program 4 (id=2772):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000007}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x9}, 0x18)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, 0x0, 0x501200, 0x0)
recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000006900020027bd7000fbdbdf25e37fa591fbbe2de608000100010000000800050002000000080001000200000008000100000000000800010002000000"], 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x4008000)
connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(0xffffffffffffffff, 0x8)
r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendto$inet(r3, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8)

12.639362413s ago: executing program 4 (id=2773):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000004000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r3}, 0x18)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)

12.319758433s ago: executing program 4 (id=2777):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000004000000850000008600000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r3}, 0x18)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000540), 0x4)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303, 0x37}, "475566172f45f011", "bd14060000000000000092f94413582b", "00001000", "4e67cb72f328ac2f"}, 0x28)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', 0xffffffffffffffff, 0x0, 0x9}, 0x18)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f0000000b80)={[{@usrquota}, {@nojournal_checksum}], [{@appraise_type}, {@seclabel}, {@func={'func', 0x3d, 'POLICY_CHECK'}}, {@smackfsroot={'smackfsroot', 0x3d, '*\\&}!\',%*},}T%}\'$}$}/$:'}}, {@fsuuid={'fsuuid', 0x3d, {[0x34, 0x34, 0x38, 0x65, 0x32, 0x39, 0x64, 0x435b26d0a45a3fe5], 0x2d, [0x0, 0x35, 0x65, 0x39], 0x2d, [0x35, 0x61, 0x34, 0x31], 0x2d, [0x30, 0x32, 0x66, 0x62], 0x2d, [0x61, 0x61, 0x39, 0x64, 0x63, 0x62, 0x31, 0x7]}}}, {@fowner_eq}, {@obj_type={'obj_type', 0x3d, '&-'}}, {@appraise}]}, 0x21, 0x4bd, &(0x7f00000006c0)="$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")

11.675229632s ago: executing program 4 (id=2781):
r0 = socket$inet(0x2, 0x1, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000002000010026bd7000ffffffff0a1400000300000700000000140001"], 0x30}, 0x1, 0x0, 0x0, 0x40814}, 0x4000004)
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280)='macvlan0\x00', 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0500000004000000040000000400000000000000", @ANYRES32, @ANYRESDEC=r0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10)
r3 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000240)={0x1, 0x1, 0x5b, 0x7})
r4 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x200000)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000140)={0x8000, 0x110, 0x1, 'queue1\x00', 0x5})
mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0900000004000000040000000c"], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="18040000000000000000000000400000850000000800000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095", @ANYBLOB="b730295d93ca4d09b5206ee3d69c7a700c6c1173725c84cdd9020bfcbd05fa78b003e5fc2f6fc569bf48a0714a09c6284b5eeb08461eda2bd1085e64322e5035a3aa213c7264d4887e16b5d5f1acbb7ca1fe0986", @ANYBLOB="843491b21aad34c987cb61292d15f0c35f77be1c06a22fd9bda870c6e4de041d59fda5ce57c42835d769c20faf595c2f6c30af14c3278c7121200e7a6a797af5fd7907ef3d10f43b0fb7e5c1eac1677767bbdaed89f5d3edc201478482", @ANYRES32=0x0], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000180)='kfree\x00', r6}, 0x10)
socket$netlink(0x10, 0x3, 0x10)
mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
close(0xffffffffffffffff)
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000003c0)={[{@nojournal_checksum}, {@dioread_lock}, {@resgid}, {}, {@resgid}, {@inlinecrypt}, {@debug}, {@usrquota}]}, 0x3, 0x570, &(0x7f0000000680)="$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")
open(&(0x7f0000000680)='./bus\x00', 0x4001410c2, 0x2e)
mount(&(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x2)
r7 = open(&(0x7f0000000300)='./file1\x00', 0x14927e, 0x0)
fallocate(r7, 0x0, 0x0, 0x1001f0)
r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r8, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x40, 0x8005, 0x0, 0x0, 0xa, 0x4, "ef359f413bb93852f7d6a4ae6dddfbd1000000000000ff91031905b9aaaaf755a3f6a004000000000001000200", "036c47c6780820d1cbf733970000cf33768bbd9bffbcc2542ded71038259ca171ce1a310ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204, 0xffffffffffffffff]})

10.631480229s ago: executing program 4 (id=2787):
syz_clone3(&(0x7f0000000080)={0x801400, &(0x7f0000000040)=<r0=>0xffffffffffffffff, 0x0, 0x0, {0x33}, 0x0, 0x0, 0x0, 0x0}, 0x58)
process_madvise(r0, 0x0, 0x0, 0x14, 0x0)

9.587439135s ago: executing program 4 (id=2791):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d00000085000000230000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f0000001200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@ptr, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x2000, [{0x0, 0x1}]}]}}, &(0x7f0000000100)=""/226, 0x3e, 0xe2, 0x1}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94)
prlimit64(0x0, 0xe, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)

9.587296655s ago: executing program 32 (id=2791):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d00000085000000230000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f0000001200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@ptr, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x2000, [{0x0, 0x1}]}]}}, &(0x7f0000000100)=""/226, 0x3e, 0xe2, 0x1}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94)
prlimit64(0x0, 0xe, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)

2.652141255s ago: executing program 3 (id=2856):
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
fchdir(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000001080)={[{@discard}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@bsdgroups}, {@quota}]}, 0x3, 0x43a, &(0x7f0000001100)="$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")
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, 0x0, &(0x7f0000000540)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10)
time(0x0)
faccessat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x5)
fchown(r2, 0x0, 0xee01)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="05000000040000000800"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x81)
vmsplice(r5, &(0x7f0000000040), 0x100000000000000c, 0x6)

2.588655431s ago: executing program 0 (id=2858):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000780)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@nombcache}, {@inlinecrypt}]}, 0x3, 0x440, &(0x7f0000000280)="$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")
symlink(&(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bdfaadbc077f9103fc000008000300", @ANYRES32=r2], 0x2c}}, 0x0)

2.566183144s ago: executing program 5 (id=2859):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000004000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000080000085000000060000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r3}, 0x18)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)

2.349330733s ago: executing program 3 (id=2861):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r2, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3a}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300030e0000002cbd7000fbdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af030006000000000002004e20ac1414bb000000000000000002000100000000000000070c00000000030005000000000002004e20ac1e01010000000000000000010014"], 0x70}, 0x1, 0x7}, 0x0)
listen(r2, 0x2)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r6, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4)
listen(r6, 0x2)
r7 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r7, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r7, 0x2)
r8 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r8, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
accept4(r7, 0x0, 0x0, 0x80800)

2.349012373s ago: executing program 0 (id=2862):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)

2.243299723s ago: executing program 2 (id=2863):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYRES64=r1, @ANYRES32=r0, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0xffffffffffffff05, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062ba7d82000000000000000000f7ffffff00"})
r4 = syz_open_pts(r3, 0x0)
ioctl$TIOCMGET(r4, 0x5415, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
fcntl$lock(r6, 0x6, &(0x7f0000002000)={0x1})
fcntl$lock(r6, 0x26, &(0x7f00000031c0)={0x1})
close_range(r5, 0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r7, 0x0, 0x4804}, 0x18)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6e}}, {@user_xattr}, {@lazytime}, {@quota}]}, 0x3, 0x441, &(0x7f0000000440)="$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")
r8 = creat(&(0x7f0000000040)='./file1\x00', 0x30)
fallocate(r8, 0x0, 0x9, 0x2000403)

2.109345446s ago: executing program 5 (id=2864):
r0 = syz_io_uring_complete(0x0)
fspick(r0, &(0x7f0000000280)='./file1\x00', 0x0)
syz_open_dev$MSR(&(0x7f00000019c0), 0x1, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94)
socket$key(0xf, 0x3, 0x2)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680))
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000000d0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000be000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/676], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000b80)={r3, r2, 0x25, 0x0, @val=@netkit}, 0x1c)
syz_emit_ethernet(0xeff, &(0x7f0000000ec0)={@local, @empty, @val={@void, {0x8100, 0x1, 0x1}}, {@generic={0x8100}}}, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10)
bpf$OBJ_PIN_PROG(0x6, &(0x7f00000005c0)=@generic={&(0x7f0000000540)='./file0\x00'}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000f00)='kfree\x00', 0xffffffffffffffff, 0x0, 0x34}, 0x18)
connect$pppoe(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, {0x0, @empty, 'netpci0\x00'}}, 0x1e)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x200000, &(0x7f0000000000)={[{@errors_remount}]}, 0xfe, 0x596, &(0x7f00000026c0)="$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")
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4)

2.003533846s ago: executing program 0 (id=2866):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
fcntl$setlease(r1, 0x400, 0x2)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe)
setreuid(0xee00, 0x0)
keyctl$join(0x1, 0x0)
keyctl$session_to_parent(0x12)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket$kcm(0x21, 0x2, 0x2)
r5 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0)
sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0)
sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000002100050125bd7000000000000200000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="b7836f1c1b5be19805e133cc73fc5944bcec8171ae276f8474276c3617"], 0x28}}, 0x0)
r6 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x3, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x2, @loopback}}}, 0x108)

1.823290722s ago: executing program 3 (id=2867):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r2, 0x40045304, &(0x7f0000000100)={{}, {0x0, 0x3}, 0x2})
connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10)
r3 = accept4(r0, 0x0, 0x0, 0x0)
sendto(r3, &(0x7f0000000200)='9', 0x1, 0x0, 0x0, 0x0)
r4 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xf9, 0xf5, 0xf, 0x36, 0x0, 0xfffffffffffffffb, 0x43c1, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x80000001, 0x4, @perf_config_ext={0x3, 0x8}, 0x100000, 0x5, 0xffffffff, 0x2, 0x1, 0x2, 0x6, 0x0, 0x5, 0x0, 0x3}, 0xffffffffffffffff, 0xc, r3, 0xe)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0xff, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0xd07, 0x40}, 0x11010, 0xff9, 0xffffffff, 0x7, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, r4, 0x1)
recvfrom(r1, &(0x7f0000000000)=""/44, 0x2c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
connect$vsock_stream(0xffffffffffffffff, &(0x7f00000001c0)={0x28, 0x0, 0x2711, @host}, 0x10)
recvmsg$unix(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000002480)=""/195, 0xc3}], 0x1}, 0x2000)
r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000180)='kfree\x00', r6, 0x0, 0xf1c38fa000000000}, 0x18)
perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000000000a19a, 0x1003}, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2)

1.478397314s ago: executing program 5 (id=2869):
eventfd(0x0)
socket(0x22, 0x80000, 0x4e)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xe7c)
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000001000)='./bus\x00', 0x0, &(0x7f0000000000)={[{@noquota}, {@errors_remount}, {@grpquota}, {@norecovery}]}, 0xfe, 0x275, &(0x7f0000000980)="$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")
prctl$PR_SET_NAME(0xf, &(0x7f0000000980)='\xff\x00\x00\x00\x00\x00\x000`\x14\x99\x06\xc0\x7fs\x00\t\x14\x17\xc3\xf5\xc9\v\x85\xe7\x00\x00\x18\x88\x06\x94\x98\xa9\xe7\x1c\x8a\x89\xdc\xcc\xf7L\xbd%\xc3!\x0e\x91S\xb2~8\"\xe2\xed\xbf\x12\x1a\\6p\'p\xef\x1a\n\x99\x12\xe8\'\x1c\x97M\xa5N\xd9\xbeV&\x1c2K?\x95\xd9\"\xbe\x050+\xca\xea\'\xe9)\xfe\xeb\x9c\xb5\xa0F`\xe4D\x10F\x831\xec\\v\xf0\xab_M\b\x03\xc3\n\x89\x01E`\xd35Q2\xecZz\xdc\x065p\x1c\x8f\x9b\x99IGXO\x00\x00\v\xed\xb0\xc5\xd4\xc7,\x1a\xb3}CMOO\x8a\xa8kh\x7f\x05c\xfc\xebb\xc8\xa2\xa9\xbf\xb3\x9b\xafE\xbd\xc5\xdc\xde\xbe_')
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000a40)='kfree\x00', r0, 0x0, 0x2}, 0x18)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a300000000008000340000000"], 0x64}}, 0x0)

1.324165388s ago: executing program 2 (id=2870):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x18)
openat$nci(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r3, 0x0, 0x1}, 0x18)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000559318110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$pptp(0x18, 0x1, 0x2)
r6 = syz_open_procfs$userns(0x0, &(0x7f0000000580))
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000680)={{0x1, 0x1, 0x18, <r7=>r1}, './file0/file0\x00'})
sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x70, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @local}, @GTPA_I_TEI={0x8}, @GTPA_PEER_ADDR6={0x14, 0xb, @remote}, @GTPA_NET_NS_FD={0x8, 0x7, r7}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010100}]}, 0x70}}, 0x4000000)
r8 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0)
io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6})
ioctl$MON_IOCX_MFETCH(r8, 0xc0109207, &(0x7f0000000c40)={0x0, 0xfe72})
close_range(r5, 0xffffffffffffffff, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r10, 0x0, 0x6}, 0x18)
r11 = syz_open_dev$sg(&(0x7f0000000480), 0x0, 0x8a203)
r12 = fcntl$dupfd(r11, 0x0, r11)
ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000180)={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x19}}, {0x1, @remote}, 0x8, {0x2, 0x4e24, @remote}, 'veth0_to_batadv\x00'})
ioctl$SG_IO(r12, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0})

1.219855488s ago: executing program 5 (id=2871):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x18)
openat$nci(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r3, 0x0, 0x1}, 0x18)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000559318110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$pptp(0x18, 0x1, 0x2)
r6 = syz_open_procfs$userns(0x0, &(0x7f0000000580))
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000680)={{0x1, 0x1, 0x18, <r7=>r1}, './file0/file0\x00'})
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000006000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000850000005000000095"], &(0x7f0000000080)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r8}, 0x10)
setrlimit(0xd, &(0x7f0000000280)={0xc800, 0x10000})
setpriority(0x1, 0x0, 0x80000000)
sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYBLOB="98397000", @ANYRES16=0x0, @ANYBLOB="000428bd7000fbdbdf25000000000800020001000000060006000300000008000700", @ANYRES32=r6, @ANYBLOB="0800080004000000080008000100000008000500ac1414aa080008000000000014000b00088000000000000000000000000000bb08000700", @ANYRES32=r7, @ANYRES16=r2], 0x70}}, 0x4000000)
r9 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0)
io_uring_setup(0x13c5, &(0x7f00000000c0)={0x0, 0x45d6})
ioctl$MON_IOCX_MFETCH(r9, 0xc0109207, &(0x7f0000000c40)={0x0, 0xfe72})
close_range(r5, 0xffffffffffffffff, 0x0)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r11, 0x0, 0x6}, 0x18)
syz_open_dev$sg(&(0x7f0000000480), 0x100000000, 0x82303)

1.166017223s ago: executing program 1 (id=2872):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x18)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000008c0)="d800000018007b29e00212ba0d8105040a601800fe0f040b067c55a1bc000900b80006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ccd40dd601edef3d93452a92307ff0ff0e97031e9f05e9f16e9cb500"/216, 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0)

1.164257472s ago: executing program 1 (id=2873):
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
fchdir(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000001080)={[{@discard}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@bsdgroups}, {@quota}]}, 0x3, 0x43a, &(0x7f0000001100)="$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")
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, 0x0, &(0x7f0000000540)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10)
time(0x0)
faccessat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x5)
fchown(r2, 0x0, 0xee01)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="05000000040000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x81)
vmsplice(r5, &(0x7f0000000040), 0x100000000000000c, 0x6)

1.130869966s ago: executing program 0 (id=2874):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xd, 0x200cc, 0x6, 0xe91b1b167984521c}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)='D', &(0x7f0000000240), 0x4b0, r0}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, &(0x7f0000000540)=""/245, &(0x7f0000000640), &(0x7f0000001740), 0x2, r0}, 0x38)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'ip6gre0\x00', &(0x7f00000001c0)={'syztnl1\x00', <r2=>0x0, 0x4, 0xf8, 0x59, 0x0, 0x8, @loopback, @private2, 0xd0998d4ca2801897, 0x10, 0x9}})
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000050000000000000000ffff00000000", @ANYRES32=r1, @ANYBLOB="0500"/15, @ANYRES32=r2, @ANYRES32, @ANYBLOB="01000000030000000100"/28], 0x50)
unshare(0x42000000)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x18)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000200400001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000004c0)={'bond0\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010025bd7000fadbdf2500000000", @ANYRES32=r6, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES64=r4], 0x44}, 0x1, 0x0, 0x0, 0x2004c8a0}, 0x4000)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
pipe2$9p(&(0x7f00000000c0)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x800)
mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000040), 0x200080, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@version_9p2000}]}})

1.042859784s ago: executing program 2 (id=2875):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x1102})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
close(r1)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x0, 0x0, 0x0, 0x2}, 0x94)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
writev(r0, &(0x7f0000000440)=[{&(0x7f0000000480)="89e7ee2c78dad9b4b473e4c988cafb0c7d1b1403bb91be0e49e20600000000000000074d53031a741e59ce9161166be63370ed0c", 0x34}], 0x1)

995.525579ms ago: executing program 5 (id=2876):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'batadv_slave_0\x00'})
writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)}], 0x1)
syz_read_part_table(0x593, &(0x7f00000005c0)="$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")
close(0xffffffffffffffff)

994.713139ms ago: executing program 1 (id=2877):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'})
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x871ac4b30833d133}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x20008084)

993.742099ms ago: executing program 3 (id=2878):
r0 = socket$inet6(0xa, 0x80002, 0x0)
r1 = socket$kcm(0x21, 0x2, 0x2)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x101, 0x0, 0x0, {0xa}}, @NFT_MSG_NEWCHAIN={0x104, 0x3, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0xfffd}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_USERDATA={0xa7, 0xc, "002292ed6a9e3e925b91a9beaa32ec0f5b840a22fe5c318d9f02ff317cbe7fa38bf1f464c4a21a287bac5166c74618fcebe468b03d312f989e2ae68505d51eb90cb9896cf29820600855d65a5b7fbb78ed9ed072c1df134ba06e120ae9ce4b3a8026299e8eb6dcada55152f8608833a2c4b452957307ef88bf8669a0df6df8db9d1db4d0c57acb2205487c715fecb63322575a4f46507878f306e93a187a539df32ac5"}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x4}}], {0x14}}, 0x154}, 0x1, 0x0, 0x0, 0x4}, 0x4000)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8)
io_setup(0x10000, &(0x7f00000014c0))
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x3, 0x4)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x6}]}, 0x10)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x41, @mcast1, 0x7}, 0x1c)

971.533261ms ago: executing program 2 (id=2879):
unshare(0x6a040000)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000c"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000180)=0x4000000)
ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000200)=0x8)
ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000080)=0x6100204)
pwritev(r2, &(0x7f0000000040)=[{&(0x7f0000000240)="00214717a70700", 0x7}], 0x1, 0x73a, 0x1)

967.396281ms ago: executing program 0 (id=2880):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
fcntl$setlease(r1, 0x400, 0x2)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe)
setreuid(0xee00, 0x0)
keyctl$join(0x1, 0x0)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket$kcm(0x21, 0x2, 0x2)
socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0)
sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000002100050125bd7000000000000200000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="b7836f1c1b5be19805e133cc73fc5944bcec8171ae276f8474276c3617"], 0x28}}, 0x0)

941.967014ms ago: executing program 1 (id=2881):
eventfd(0x0)
socket(0x22, 0x80000, 0x4e)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xe7c)
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000001000)='./bus\x00', 0x0, &(0x7f0000000000)={[{@noquota}, {@errors_remount}, {@grpquota}, {@norecovery}]}, 0xfe, 0x275, &(0x7f0000000980)="$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")
prctl$PR_SET_NAME(0xf, &(0x7f0000000980)='\xff\x00\x00\x00\x00\x00\x000`\x14\x99\x06\xc0\x7fs\x00\t\x14\x17\xc3\xf5\xc9\v\x85\xe7\x00\x00\x18\x88\x06\x94\x98\xa9\xe7\x1c\x8a\x89\xdc\xcc\xf7L\xbd%\xc3!\x0e\x91S\xb2~8\"\xe2\xed\xbf\x12\x1a\\6p\'p\xef\x1a\n\x99\x12\xe8\'\x1c\x97M\xa5N\xd9\xbeV&\x1c2K?\x95\xd9\"\xbe\x050+\xca\xea\'\xe9)\xfe\xeb\x9c\xb5\xa0F`\xe4D\x10F\x831\xec\\v\xf0\xab_M\b\x03\xc3\n\x89\x01E`\xd35Q2\xecZz\xdc\x065p\x1c\x8f\x9b\x99IGXO\x00\x00\v\xed\xb0\xc5\xd4\xc7,\x1a\xb3}CMOO\x8a\xa8kh\x7f\x05c\xfc\xebb\xc8\xa2\xa9\xbf\xb3\x9b\xafE\xbd\xc5\xdc\xde\xbe_')
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000a40)='kfree\x00', r0, 0x0, 0x2}, 0x18)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a300000000008000340000000"], 0x64}}, 0x0)

793.406287ms ago: executing program 3 (id=2882):
modify_ldt$write(0x1, &(0x7f0000000040)={0x4, 0x0, 0x2000}, 0x10)
modify_ldt$write2(0x11, &(0x7f00000003c0)={0x1, 0x20001000, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1}, 0x10)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000940)=@req={0x0, 0x8, 0x3, 0x10}, 0x10)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000440)=@nat={'nat\x00', 0x670, 0x5, 0x3e0, 0x1a0, 0x0, 0xfeffffff, 0x270, 0x270, 0x348, 0x348, 0xffffffff, 0x348, 0x348, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0xffffff00, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@addrtype={{0x30}, {0x50, 0x0, 0x1, 0x1}}, @common=@inet=@tcp={{0x30}, {[0x4e24, 0x4e22], [0x4e23, 0x4e23], 0x8, 0x80, 0x8, 0xe}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id=0x2, @gre_key=0x8}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}, {0x3, 0x6}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@loopback, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {0xff}}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@dev, @port=0xffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x440)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10)
unshare(0x2c020400)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000003f000500000000000000df25047c0000040000000c0001"], 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18)
fstat(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, <r5=>0x0, <r6=>0x0})
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)=@newsa={0x160, 0x10, 0x713, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in=@local, 0x4d5, 0x33}, @in6=@private0, {0x3}, {0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x7fffffff, 0x100004}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x6d, 0x14, {{'cmac(aes)\x00'}, 0x108, 0x80, "c3b492bbc504c3f0977953ad067f30eac04b71504f2d21a23704f3320caf45a30b"}}]}, 0x160}}, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x28007c2, &(0x7f0000000680)={[{@delalloc}, {@resuid={'resuid', 0x3d, r5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nouid32}, {@resgid={'resgid', 0x3d, r6}}, {@acl}, {@dax_always}]}, 0x0, 0x483, &(0x7f0000001040)="$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")
pipe2(&(0x7f0000000340), 0x880)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f0000000200)={'ip6_vti0\x00', 0x0})
timer_create(0x8, &(0x7f0000000240)={0x0, 0x18, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r9=>0x0)
timer_settime(r9, 0x1, &(0x7f0000000300)={{}, {0x0, 0x989680}}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff)
r10 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r10, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004b74ffec850000006d000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000680)='virtio_transport_alloc_pkt\x00', r11}, 0x10)
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040))

612.552474ms ago: executing program 5 (id=2883):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000340), 0x1, 0x52a, &(0x7f00000004c0)="$eJzs3c1vI2cZAPBnvLHjzabNtvQACNqlLSxotc7G266qHqCcEEKVED2CtA2JN1qtHUexU5qwEumZKxKVOMGRP4BzxYE7FwQ3LlyQ+IhADRISg2Y8Tt3U7no3iR3Fv580mo/Xnud54533jZ+sPQHMrGsRsR8RlYh4OyKWIuInEZEUS7zRW7LHfXjwcO3w4OFaEmn61j+SvD071j9XUqyvFOesRsT3vhXxw+STcTu7ew9Wm83GdrG/3G1tLXd2927eb61uNDYam/X6nZU7t167/Wr91Pr6QqtSbH3xL7/f/9qPs7QWiyOD/RhpSD/Ge0r5KE5mLiK+8/inOpcuFf2pTDsRnkgpIp6NiBfz638pLuWvJgBwkaXpUqRLg/sAwEVXymtgSalW1AIWo1Sq1Xo1vOdiodRsd7o37rV3Ntd7tbKrUS7du99s3CpqhVejnGT7K/n2R/v1Y/u3I+KZiPjZ/OV8v7bWbq5P8xcfAJhhV47N//+e783/AMAFV512AgDAxJn/AWD2mP8BYPaY/wFg9vTm/8vTTgMAmCDv/wFg9pj/AWCmfPfNN7MlPSy+/3r9nd2dB+13bq43Og9qrZ212lp7e6u20W5v5N/Z03rU+Zrt9tbKK7Hz7tWvb3W6y53dvbut9s5m927+vd53G+X8UfsT6BkAMMozL3zwpySbkV+/nC8xcC+H8lQzA85a6WRP/+1p5QFM3qVpJwBMjbt9wew6wXt85QG4IB51a9vqwAeEjmoGaZqmZ5sWcIauf079H2bVQP3f/wKGGaP+D7NL/R9mV5om497zP8Z9IABwvqnxAyP+/v9ssf518ceBH6wff8T7Z5kVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnG/9+//WinuBL0apVKtFPBURV6Oc3LvfbNyKiKcj4o/z5flsf2XKOQMAJ1X6a1Lc/+v60suLH2t6/srRZiUifvSLt37+7mq3u/2HiEryz/n+8e77xfH65LMHAB6tP0/n64E38h8ePFzrL5PM52/fjIhqL/7hQSUOj+LPxVy+rkY5Ihb+lRT7PclA7eIk9t+LiM8O638Si3kNpHfn0+Pxs9hPTTR+6WPxS3lbb539LD5zCrnArPkgG3/eGHb9leJavh5+/VfzEerkivEvO9XaYT4GfhS/P/5dGjH+XRs3xiu/+3Zv6/In296L+PxcRD/24cD404+fDMSfG4j/8pjx//yF518c1Zb+MuJ6DI8/2NflbmtrubO7d/N+a3WjsdHYrNfvrNy59drtV+vLeY16efRs8PfXbzw9qi3r/8Jg/Iij+NUh/R/M6ctj9v9X/337+1/6lPhffWmw//9L0zTy1/+5T4mfzYlfGTP+6sJvqqPasvjrI37+w17/vuzYjTHjn8Y8DQCcns7u3oPVZrOxfT42khFNlTgvGdo43Y25eJxnZf9kp5/z8I1vTCpWJYY3/fSl3jV9rClNnyjWqBGj+G1+YUIDFHBmji76iPjPYz97ZFkBAAAAAAAAAAAAAAA4RZP4xNK0+wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDF9f8AAAD//8AdzWI=")
syz_usb_connect(0x2, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x50)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
inotify_add_watch(0xffffffffffffffff, &(0x7f00000000c0)='.\x00', 0xa4000061)
read(0xffffffffffffffff, 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0)
r3 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
write$selinux_validatetrans(r3, 0x0, 0x79)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='pagemap\x00')
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000008c0)={0x0, &(0x7f00000007c0)=""/118, &(0x7f0000000740), 0x0, 0x3, 0xffffffffffffffff, 0x4}, 0x38)
pread64(r4, &(0x7f0000001240)=""/102400, 0x19000, 0x2000000000000000)
socket$nl_generic(0x10, 0x3, 0x10)
keyctl$clear(0x3, 0xfffffffffffffffc)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
io_uring_setup(0xebc, &(0x7f00000002c0)={0x0, 0x2ffa, 0x410, 0x3, 0x16, 0x0, r4})
bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x14, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x7fff, 0x1000, &(0x7f0000000a00)=""/4096, 0x40f00, 0x6c, '\x00', 0x0, @fallback=0x23, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x3, 0x3, 0x7f, 0x5}, 0x10, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94)
write$binfmt_script(r0, &(0x7f0000000240), 0x3af4701e)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0)

524.979802ms ago: executing program 2 (id=2884):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r2, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0)

378.778325ms ago: executing program 2 (id=2885):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{}, 0x0, 0x0}, 0x20)
bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=ANY=[@ANYBLOB="0600000004000000be7000005c00000000090000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\b\x00'/28], 0x48)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000540)={0x1, &(0x7f0000000300)=[{0x200000000006, 0x3, 0x2, 0x7ffc0002}]})
socket$inet6_tcp(0xa, 0x1, 0x0)
io_setup(0x2007, &(0x7f0000000980)=<r0=>0x0)
eventfd2(0x9, 0x0)
io_pgetevents(r0, 0x2, 0x2, &(0x7f0000000080)=[{}, {}], 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r2, 0x40089413, &(0x7f0000000040)=0x4)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000)
setresuid(0x0, 0xee00, 0x0)
setrlimit(0x40000000000008, &(0x7f0000000000))
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000e00), 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001100)={r1, 0xe0, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000e40)=[0x0, 0x0], ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000e80)=[0x0, 0x0, 0x0], &(0x7f0000000ec0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x4f, &(0x7f0000000f00)=[{}], 0x8, 0x10, &(0x7f0000000f40), &(0x7f0000000f80), 0x8, 0xeb, 0x8, 0x8, &(0x7f0000000fc0)}}, 0x10)
setsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000001140)={r4, @dev={0xac, 0x14, 0x14, 0x2a}, @rand_addr=0x64010100}, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001180)={&(0x7f00000000c0)='rpcgss_svc_authenticate\x00', r1, 0x0, 0x2000000000400000}, 0x18)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r5, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10)
r7 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc))

210.873201ms ago: executing program 1 (id=2886):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)

139.346048ms ago: executing program 3 (id=2887):
socket$key(0xf, 0x3, 0x2)
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x14, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
r1 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0xfe, 0x0, 0xff, 0x0, 0x0, 0x5022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
close(r1)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r2}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r4, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0)

83.439353ms ago: executing program 0 (id=2888):
syz_clone(0x41000100, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0)
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40200}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000500)='kfree\x00', r2, 0x0, 0xffff}, 0x18)
pipe2(&(0x7f00000006c0)={<r3=>0xffffffffffffffff}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
r5 = socket(0x29, 0x2, 0x0)
close_range(r5, 0xffffffffffffffff, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001200)=@newae={0x40, 0x1e, 0xff01f7747ae9d38d, 0x70bd2d, 0x25dfdbfc, {{@in6=@private0={0xfc, 0x0, '\x00', 0x3}, 0x4d4, 0x2, 0x33}, @in6=@loopback, 0xffffffff, 0x3504}}, 0x40}, 0x1, 0x0, 0x0, 0x24004850}, 0x40054)
r7 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r7, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4)
close_range(r3, 0xffffffffffffffff, 0x0)
r8 = getpgid(0x0)
pipe(0x0)
r9 = syz_pidfd_open(r8, 0x0)
pidfd_send_signal(r9, 0x11, 0x0, 0x4)

0s ago: executing program 1 (id=2889):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r2, 0x40045304, &(0x7f0000000100)={{}, {0x0, 0x3}, 0x2})
connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10)
r3 = accept4(r0, 0x0, 0x0, 0x0)
sendto(r3, &(0x7f0000000200)='9', 0x1, 0x0, 0x0, 0x0)
r4 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xf9, 0xf5, 0xf, 0x36, 0x0, 0xfffffffffffffffb, 0x43c1, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x80000001, 0x4, @perf_config_ext={0x3, 0x8}, 0x100000, 0x5, 0xffffffff, 0x2, 0x1, 0x2, 0x6, 0x0, 0x5, 0x0, 0x3}, 0xffffffffffffffff, 0xc, r3, 0xe)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0xff, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0xd07, 0x40}, 0x11010, 0xff9, 0xffffffff, 0x7, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, r4, 0x1)
recvfrom(r1, &(0x7f0000000000)=""/44, 0x2c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
connect$vsock_stream(0xffffffffffffffff, &(0x7f00000001c0)={0x28, 0x0, 0x2711, @host}, 0x10)
recvmsg$unix(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000002480)=""/195, 0xc3}], 0x1}, 0x2000)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000180)='kfree\x00', r6, 0x0, 0xf1c38fa000000000}, 0x18)
perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000000000a19a, 0x1003}, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2)

kernel console output (not intermixed with test programs):

dit: type=1326 audit(1767015991.498:3863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9885 comm="syz.4.2252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f74c4f749 code=0x7ffc0000
[  194.575489][   T29] audit: type=1326 audit(1767015991.498:3864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9885 comm="syz.4.2252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f8f74c4f749 code=0x7ffc0000
[  194.598915][   T29] audit: type=1326 audit(1767015991.498:3865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9885 comm="syz.4.2252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f74c4f749 code=0x7ffc0000
[  194.622404][   T29] audit: type=1326 audit(1767015991.498:3866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9885 comm="syz.4.2252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8f74c4f749 code=0x7ffc0000
[  194.736484][ T9890] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  194.771086][ T9890] ext4 filesystem being mounted at /402/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  194.818888][ T9890] netlink: 12 bytes leftover after parsing attributes in process `ÿ'.
[  194.913948][   T29] audit: type=1326 audit(1767015991.748:3867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9885 comm="syz.4.2252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f74c4f749 code=0x7ffc0000
[  194.937428][   T29] audit: type=1326 audit(1767015991.748:3868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9885 comm="syz.4.2252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f74c4f749 code=0x7ffc0000
[  194.968535][ T3319] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  195.281256][ T9916] loop2: detected capacity change from 0 to 2048
[  195.498306][ T9924] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2266'.
[  195.571326][ T9910] loop0: detected capacity change from 0 to 512
[  195.604759][ T9910] ext4: Unknown parameter 'appraise_type'
[  195.643920][ T3488] kernel write not supported for file bpf-prog (pid: 3488 comm: kworker/1:9)
[  195.886231][ T9932] loop1: detected capacity change from 0 to 1024
[  195.923151][ T9932] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  195.979786][ T9932] EXT4-fs error (device loop1): ext4_empty_dir:3107: inode #11: block 623: comm syz.1.2272: Attempting to read directory block (623) that is past i_size (638464)
[  196.034913][ T9932] EXT4-fs (loop1): Remounting filesystem read-only
[  196.073622][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  196.149685][ T9942] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2276'.
[  196.214530][ T9950] loop2: detected capacity change from 0 to 128
[  196.241609][ T9952] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2279'.
[  196.273877][ T9950] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  196.339777][ T9950] ext4 filesystem being mounted at /404/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  196.352937][ T9955] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2280'.
[  196.384534][ T9950] netlink: 12 bytes leftover after parsing attributes in process `ÿ'.
[  196.891566][ T3319] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  196.923652][ T9970] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2281'.
[  197.253708][ T9982] SET target dimension over the limit!
[  197.258392][ T9980] loop4: detected capacity change from 0 to 1024
[  197.303998][ T9980] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  197.357325][ T9980] EXT4-fs error (device loop4): ext4_empty_dir:3107: inode #11: block 623: comm syz.4.2287: Attempting to read directory block (623) that is past i_size (638464)
[  197.381137][ T9994] loop2: detected capacity change from 0 to 512
[  197.403643][ T9994] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  197.408539][ T9980] EXT4-fs (loop4): Remounting filesystem read-only
[  197.444849][ T9994] EXT4-fs (loop2): 1 truncate cleaned up
[  197.468075][ T9994] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  197.504753][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  197.575581][ T9994] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  199.565815][T10021] __nla_validate_parse: 2 callbacks suppressed
[  199.565843][T10021] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2299'.
[  199.605438][T10030] loop1: detected capacity change from 0 to 128
[  199.612120][T10028] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2304'.
[  199.642551][T10030] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  199.656570][T10028] 8021q: adding VLAN 0 to HW filter on device bond0
[  199.662703][T10030] ext4 filesystem being mounted at /418/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  199.732047][ T3318] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  199.770198][T10034] loop0: detected capacity change from 0 to 1024
[  199.902760][T10034] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  199.967184][T10034] EXT4-fs error (device loop0): ext4_empty_dir:3107: inode #11: block 623: comm syz.0.2306: Attempting to read directory block (623) that is past i_size (638464)
[  200.048780][T10034] EXT4-fs (loop0): Remounting filesystem read-only
[  200.130186][ T3323] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  200.145782][T10038] loop1: detected capacity change from 0 to 2048
[  200.209379][T10053] loop4: detected capacity change from 0 to 1024
[  200.229340][T10056] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2315'.
[  200.238589][T10056] bond0: Unable to set down delay as MII monitoring is disabled
[  200.247673][ T3302]  loop1: p2 p3 p7
[  200.262599][T10053] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  200.306119][T10038]  loop1: p2 p3 p7
[  200.313529][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  200.325182][T10067] loop0: detected capacity change from 0 to 1024
[  200.342692][T10068] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2317'.
[  200.359542][T10071] loop4: detected capacity change from 0 to 512
[  200.359740][ T3008]  loop1: p2 p3 p7
[  200.368115][T10071] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  200.400035][T10067] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  200.416960][T10071] EXT4-fs (loop4): 1 truncate cleaned up
[  200.432881][T10071] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  200.482025][ T3323] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  200.497006][T10071] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  200.501818][ T3684] udevd[3684]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[  200.508487][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory
[  200.535330][ T3544] udevd[3544]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory
[  200.819578][T10094] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2328'.
[  200.908572][T10094] bond0: Unable to set down delay as MII monitoring is disabled
[  200.949899][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[  200.951337][ T3684] udevd[3684]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory
[  200.964444][T10079] udevd[10079]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory
[  200.985882][T10096] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2330'.
[  200.995018][T10096] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2330'.
[  201.034388][T10079] udevd[10079]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory
[  201.071219][   T29] kauditd_printk_skb: 5 callbacks suppressed
[  201.071236][   T29] audit: type=1326 audit(1767015998.148:3874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10101 comm="syz.3.2333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f084075f749 code=0x7ffc0000
[  201.112706][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[  201.123923][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory
[  201.209000][T10106] loop2: detected capacity change from 0 to 1024
[  201.281952][T10106] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  201.314757][T10113] loop4: detected capacity change from 0 to 512
[  201.360215][T10113] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  201.421039][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  201.436472][T10113] EXT4-fs (loop4): 1 truncate cleaned up
[  201.465635][T10113] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  201.587927][T10113] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  201.622038][T10121] loop1: detected capacity change from 0 to 1024
[  201.679981][T10121] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  201.814133][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  201.954683][   T29] audit: type=1326 audit(1767015998.228:3875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10101 comm="syz.3.2333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f084075f749 code=0x7ffc0000
[  201.978283][   T29] audit: type=1326 audit(1767015998.228:3876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10101 comm="syz.3.2333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f084075f749 code=0x7ffc0000
[  202.002090][   T29] audit: type=1326 audit(1767015998.228:3877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10101 comm="syz.3.2333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f084075f749 code=0x7ffc0000
[  202.025614][   T29] audit: type=1326 audit(1767015998.228:3878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10101 comm="syz.3.2333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f084075f749 code=0x7ffc0000
[  202.049390][   T29] audit: type=1326 audit(1767015998.228:3879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10101 comm="syz.3.2333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f084075f749 code=0x7ffc0000
[  202.073029][   T29] audit: type=1326 audit(1767015998.468:3880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10101 comm="syz.3.2333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f084075f749 code=0x7ffc0000
[  202.096561][   T29] audit: type=1326 audit(1767015998.468:3881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10101 comm="syz.3.2333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f084075f749 code=0x7ffc0000
[  202.120183][   T29] audit: type=1326 audit(1767015998.988:3882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10101 comm="syz.3.2333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f084075f749 code=0x7ffc0000
[  202.143828][   T29] audit: type=1326 audit(1767015998.988:3883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10101 comm="syz.3.2333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f084075f749 code=0x7ffc0000
[  202.222541][T10129] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2337'.
[  202.250184][T10140] loop4: detected capacity change from 0 to 2048
[  202.278611][T10139] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2344'.
[  202.285805][T10144] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2346'.
[  202.329639][T10079]  loop4: p2 p3 p7
[  202.352966][T10140]  loop4: p2 p3 p7
[  202.503127][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory
[  202.714596][T10172] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9)
[  202.721158][T10172] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  202.728821][T10172] vhci_hcd vhci_hcd.0: Device attached
[  202.736553][T10170] ext4 filesystem being mounted at /503/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  202.784891][T10178] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(12)
[  202.791580][T10178] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  202.799276][T10178] vhci_hcd vhci_hcd.0: Device attached
[  202.930846][T10186] bond0: Unable to set down delay as MII monitoring is disabled
[  202.945928][T10182] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  202.984360][T10172] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(11)
[  202.991003][T10172] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  202.998656][T10172] vhci_hcd vhci_hcd.0: Device attached
[  203.004262][ T3406] usb 5-1: new low-speed USB device number 5 using vhci_hcd
[  203.077621][T10182] EXT4-fs (loop0): 1 truncate cleaned up
[  203.222349][T10178] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(14)
[  203.229083][T10178] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  203.236650][T10178] vhci_hcd vhci_hcd.0: Device attached
[  203.343595][T10204] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(19)
[  203.350391][T10204] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  203.358088][T10204] vhci_hcd vhci_hcd.0: Device attached
[  203.423408][T10172] vhci_hcd vhci_hcd.0: pdev(2) rhport(5) sockfd(16)
[  203.430103][T10172] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  203.437784][T10172] vhci_hcd vhci_hcd.0: Device attached
[  203.447364][T10172] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  203.456225][T10172] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  203.465367][T10172] vhci_hcd vhci_hcd.0: port 0 already used
[  203.484475][T10215] ext4 filesystem being mounted at /505/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  203.527216][T10205] vhci_hcd: connection closed
[  203.527448][ T5839] vhci_hcd vhci_hcd.2: stop threads
[  203.527605][T10196] vhci_hcd: connection closed
[  203.532246][ T5839] vhci_hcd vhci_hcd.2: release socket
[  203.547553][ T5839] vhci_hcd vhci_hcd.2: disconnect device
[  203.553270][T10210] vhci_hcd: connection closed
[  203.553924][T10179] vhci_hcd: connection closed
[  203.558743][T10174] vhci_hcd: connection reset by peer
[  203.569177][T10188] vhci_hcd: connection closed
[  203.569474][ T5839] vhci_hcd vhci_hcd.2: stop threads
[  203.579491][ T5839] vhci_hcd vhci_hcd.2: release socket
[  203.584947][ T5839] vhci_hcd vhci_hcd.2: disconnect device
[  203.591356][ T5839] vhci_hcd vhci_hcd.2: stop threads
[  203.596632][ T5839] vhci_hcd vhci_hcd.2: release socket
[  203.602098][ T5839] vhci_hcd vhci_hcd.2: disconnect device
[  203.608272][ T5839] vhci_hcd vhci_hcd.2: stop threads
[  203.613588][ T5839] vhci_hcd vhci_hcd.2: release socket
[  203.618980][ T5839] vhci_hcd vhci_hcd.2: disconnect device
[  203.624999][ T5839] vhci_hcd vhci_hcd.2: stop threads
[  203.630281][ T5839] vhci_hcd vhci_hcd.2: release socket
[  203.635840][ T5839] vhci_hcd vhci_hcd.2: disconnect device
[  203.642240][ T5839] vhci_hcd vhci_hcd.2: stop threads
[  203.647463][ T5839] vhci_hcd vhci_hcd.2: release socket
[  203.653028][ T5839] vhci_hcd vhci_hcd.2: disconnect device
[  203.802442][ T1106] kernel write not supported for file bpf-prog (pid: 1106 comm: kworker/1:2)
[  203.967274][T10246] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  204.000820][T10246] EXT4-fs (loop1): 1 truncate cleaned up
[  204.905416][T10269] set_capacity_and_notify: 8 callbacks suppressed
[  204.905450][T10269] loop0: detected capacity change from 0 to 1024
[  204.948161][T10271] SET target dimension over the limit!
[  204.959620][T10251]  loop1: p2 p3 p7
[  205.224573][T10286] __nla_validate_parse: 7 callbacks suppressed
[  205.224628][T10286] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2387'.
[  205.357396][T10289] loop0: detected capacity change from 0 to 128
[  205.419967][T10289] ext4 filesystem being mounted at /513/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  205.742067][T10296] loop0: detected capacity change from 0 to 1024
[  205.768510][T10291] loop1: detected capacity change from 0 to 512
[  205.811881][T10291] ext4: Unknown parameter 'appraise_type'
[  205.973257][T10307] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2394'.
[  206.297913][T10320] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2398'.
[  206.871863][T10345] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2405'.
[  207.476151][T10351] loop2: detected capacity change from 0 to 512
[  207.491947][T10351] ext4: Unknown parameter 'appraise_type'
[  207.515390][T10362] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2409'.
[  207.556226][T10360] loop0: detected capacity change from 0 to 1024
[  208.231596][ T3406] usb 5-1: enqueue for inactive port 0
[  208.237114][ T3406] usb 5-1: enqueue for inactive port 0
[  208.294779][T10378] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2415'.
[  208.321824][ T3406] vhci_hcd vhci_hcd.2: vhci_device speed not set
[  208.366254][T10384] loop2: detected capacity change from 0 to 128
[  208.424972][T10384] ext4 filesystem being mounted at /425/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  208.543407][   T29] kauditd_printk_skb: 39 callbacks suppressed
[  208.543426][   T29] audit: type=1326 audit(1767016005.628:3923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10387 comm="syz.0.2418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67ee30f749 code=0x7ffc0000
[  208.677298][T10390] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2419'.
[  208.700480][   T29] audit: type=1326 audit(1767016005.658:3924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10387 comm="syz.0.2418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f67ee30f749 code=0x7ffc0000
[  208.724074][   T29] audit: type=1326 audit(1767016005.658:3925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10387 comm="syz.0.2418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67ee30f749 code=0x7ffc0000
[  208.747668][   T29] audit: type=1326 audit(1767016005.658:3926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10387 comm="syz.0.2418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67ee30f749 code=0x7ffc0000
[  208.771284][   T29] audit: type=1326 audit(1767016005.658:3927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10387 comm="syz.0.2418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f67ee30f749 code=0x7ffc0000
[  208.794838][   T29] audit: type=1326 audit(1767016005.658:3928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10387 comm="syz.0.2418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67ee30f749 code=0x7ffc0000
[  208.818370][   T29] audit: type=1326 audit(1767016005.658:3929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10387 comm="syz.0.2418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67ee30f749 code=0x7ffc0000
[  208.841882][   T29] audit: type=1326 audit(1767016005.658:3930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10387 comm="syz.0.2418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f67ee30f749 code=0x7ffc0000
[  209.270831][T10404] SET target dimension over the limit!
[  209.388709][T10411] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2425'.
[  209.505389][   T29] audit: type=1326 audit(1767016006.058:3931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10387 comm="syz.0.2418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67ee30f749 code=0x7ffc0000
[  209.528994][   T29] audit: type=1326 audit(1767016006.058:3932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10387 comm="syz.0.2418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67ee30f749 code=0x7ffc0000
[  209.559866][T10413] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2426'.
[  209.866348][T10420] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2428'.
[  209.945532][T10423] loop4: detected capacity change from 0 to 512
[  210.018651][T10423] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  210.065575][T10423] EXT4-fs (loop4): 1 truncate cleaned up
[  210.206479][T10439] SET target dimension over the limit!
[  211.602227][T10454] loop0: detected capacity change from 0 to 2048
[  211.781047][T10454]  loop0: p2 p3 p7
[  212.396836][T10460] __nla_validate_parse: 1 callbacks suppressed
[  212.396851][T10460] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2446'.
[  212.514360][T10469] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2448'.
[  212.638186][T10474] loop0: detected capacity change from 0 to 512
[  212.676053][T10474] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  212.879826][T10474] EXT4-fs (loop0): 1 truncate cleaned up
[  212.891617][T10474] EXT4-fs mount: 26 callbacks suppressed
[  212.891655][T10474] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  213.612930][T10489] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2452'.
[  213.686080][T10474] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  213.859959][   T29] kauditd_printk_skb: 29 callbacks suppressed
[  213.859976][   T29] audit: type=1326 audit(1767016010.938:3962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10498 comm="syz.2.2458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc46a38f749 code=0x7ffc0000
[  213.894249][   T29] audit: type=1326 audit(1767016010.968:3963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10498 comm="syz.2.2458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc46a38f749 code=0x7ffc0000
[  213.908801][T10501] 9p: Bad value for 'wfdno'
[  213.917997][   T29] audit: type=1326 audit(1767016010.968:3964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10498 comm="syz.2.2458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc46a38f749 code=0x7ffc0000
[  213.946494][   T29] audit: type=1326 audit(1767016010.968:3965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10498 comm="syz.2.2458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc46a38f749 code=0x7ffc0000
[  213.970101][   T29] audit: type=1326 audit(1767016010.968:3966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10498 comm="syz.2.2458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc46a38f749 code=0x7ffc0000
[  213.993814][   T29] audit: type=1326 audit(1767016010.968:3967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10498 comm="syz.2.2458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fc46a38f749 code=0x7ffc0000
[  214.017883][   T29] audit: type=1326 audit(1767016010.968:3968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10498 comm="syz.2.2458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc46a38f749 code=0x7ffc0000
[  214.041371][   T29] audit: type=1326 audit(1767016010.968:3969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10498 comm="syz.2.2458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc46a38f749 code=0x7ffc0000
[  214.064888][   T29] audit: type=1326 audit(1767016010.968:3970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10498 comm="syz.2.2458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc46a38f749 code=0x7ffc0000
[  214.095729][T10503] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2460'.
[  214.171192][   T29] audit: type=1326 audit(1767016011.208:3971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10498 comm="syz.2.2458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc46a38f749 code=0x7ffc0000
[  214.369199][T10516] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2455'.
[  214.393539][T10514] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2462'.
[  215.172820][T10534] loop0: detected capacity change from 0 to 1024
[  215.185175][T10536] 9p: Bad value for 'wfdno'
[  215.213025][T10534] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  215.226156][T10537] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2468'.
[  215.271543][T10534] EXT4-fs error (device loop0): ext4_empty_dir:3107: inode #11: block 623: comm syz.0.2469: Attempting to read directory block (623) that is past i_size (638464)
[  215.341652][T10534] EXT4-fs (loop0): Remounting filesystem read-only
[  215.379419][T10544] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2472'.
[  215.414650][ T3323] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  215.519550][T10548] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2475'.
[  215.652950][T10560] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2476'.
[  215.767996][T10564] loop1: detected capacity change from 0 to 128
[  215.784856][T10564] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  215.835762][T10567] 9p: Bad value for 'wfdno'
[  215.858926][T10564] ext4 filesystem being mounted at /450/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  215.927891][T10571] loop2: detected capacity change from 0 to 1024
[  215.936447][ T3318] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  215.970926][T10571] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  216.053422][T10571] EXT4-fs error (device loop2): ext4_empty_dir:3107: inode #11: block 623: comm syz.2.2483: Attempting to read directory block (623) that is past i_size (638464)
[  216.073842][T10571] EXT4-fs (loop2): Remounting filesystem read-only
[  216.147718][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  216.406121][T10598] netlink: 'syz.3.2492': attribute type 4 has an invalid length.
[  216.671241][T10597] syzkaller0: entered promiscuous mode
[  216.676868][T10597] syzkaller0: entered allmulticast mode
[  216.800892][T10601] loop4: detected capacity change from 0 to 1024
[  217.184627][T10601] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  217.225125][T10607] loop1: detected capacity change from 0 to 128
[  217.250229][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  217.304887][T10607] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  217.461648][T10607] ext4 filesystem being mounted at /453/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  217.539403][T10622] loop2: detected capacity change from 0 to 1024
[  217.546688][ T3318] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  217.573080][T10622] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  217.604693][T10622] EXT4-fs error (device loop2): ext4_empty_dir:3107: inode #11: block 623: comm syz.2.2501: Attempting to read directory block (623) that is past i_size (638464)
[  217.633890][T10626] loop1: detected capacity change from 0 to 1024
[  217.641719][T10622] EXT4-fs (loop2): Remounting filesystem read-only
[  217.671236][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  217.701649][T10626] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  217.741200][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  218.068852][T10643] loop0: detected capacity change from 0 to 512
[  218.093791][T10645] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10)
[  218.100443][T10645] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  218.108132][T10645] vhci_hcd vhci_hcd.0: Device attached
[  218.116171][T10643] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  218.129560][T10643] EXT4-fs (loop0): 1 truncate cleaned up
[  218.136253][T10643] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  218.149927][T10645] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(12)
[  218.156553][T10645] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  218.164213][T10645] vhci_hcd vhci_hcd.0: Device attached
[  218.179838][T10643] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  218.199772][T10645] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(14)
[  218.206581][T10645] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  218.214262][T10645] vhci_hcd vhci_hcd.0: Device attached
[  218.252138][T10653] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(17)
[  218.258792][T10653] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  218.266476][T10653] vhci_hcd vhci_hcd.0: Device attached
[  218.303559][T10645] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(16)
[  218.310202][T10645] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  218.317794][T10645] vhci_hcd vhci_hcd.0: Device attached
[  218.341466][ T3489] usb 3-1: new low-speed USB device number 3 using vhci_hcd
[  218.407454][T10645] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  218.417328][T10645] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  218.512298][T10653] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(21)
[  218.518959][T10653] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  218.526728][T10653] vhci_hcd vhci_hcd.0: Device attached
[  218.604983][T10645] vhci_hcd vhci_hcd.0: port 0 already used
[  218.614556][T10660] vhci_hcd: connection closed
[  218.614700][   T49] vhci_hcd vhci_hcd.1: stop threads
[  218.624683][   T49] vhci_hcd vhci_hcd.1: release socket
[  218.630145][   T49] vhci_hcd vhci_hcd.1: disconnect device
[  218.636527][T10649] vhci_hcd: connection closed
[  218.641703][T10654] vhci_hcd: connection closed
[  218.651449][T10651] vhci_hcd: connection closed
[  218.656584][T10656] vhci_hcd: connection closed
[  218.694247][T10646] vhci_hcd: connection reset by peer
[  218.704494][   T49] vhci_hcd vhci_hcd.1: stop threads
[  218.709721][   T49] vhci_hcd vhci_hcd.1: release socket
[  218.715239][   T49] vhci_hcd vhci_hcd.1: disconnect device
[  218.785803][   T49] vhci_hcd vhci_hcd.1: stop threads
[  218.791092][   T49] vhci_hcd vhci_hcd.1: release socket
[  218.796639][   T49] vhci_hcd vhci_hcd.1: disconnect device
[  218.845815][T10671] __nla_validate_parse: 4 callbacks suppressed
[  218.845831][T10671] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2510'.
[  218.951005][   T49] vhci_hcd vhci_hcd.1: stop threads
[  218.956331][   T49] vhci_hcd vhci_hcd.1: release socket
[  218.961906][   T49] vhci_hcd vhci_hcd.1: disconnect device
[  218.969211][   T29] kauditd_printk_skb: 76 callbacks suppressed
[  218.969231][   T29] audit: type=1326 audit(1767016016.048:4048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10667 comm="syz.3.2511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f084075f749 code=0x7ffc0000
[  219.181873][   T49] vhci_hcd vhci_hcd.1: stop threads
[  219.187126][   T49] vhci_hcd vhci_hcd.1: release socket
[  219.192604][   T49] vhci_hcd vhci_hcd.1: disconnect device
[  219.195247][   T29] audit: type=1326 audit(1767016016.088:4049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10667 comm="syz.3.2511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f084075f749 code=0x7ffc0000
[  219.223384][   T29] audit: type=1326 audit(1767016016.308:4050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10667 comm="syz.3.2511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f084075f749 code=0x7ffc0000
[  219.247506][   T29] audit: type=1326 audit(1767016016.308:4051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10667 comm="syz.3.2511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f084075f749 code=0x7ffc0000
[  219.255057][   T49] vhci_hcd vhci_hcd.1: stop threads
[  219.271225][   T29] audit: type=1326 audit(1767016016.308:4052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10667 comm="syz.3.2511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f084075f749 code=0x7ffc0000
[  219.276345][   T49] vhci_hcd vhci_hcd.1: release socket
[  219.305293][   T49] vhci_hcd vhci_hcd.1: disconnect device
[  219.335687][T10674] loop1: detected capacity change from 0 to 128
[  219.381687][   T29] audit: type=1326 audit(1767016016.338:4053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10667 comm="syz.3.2511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f084075f749 code=0x7ffc0000
[  219.405336][   T29] audit: type=1326 audit(1767016016.408:4054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10667 comm="syz.3.2511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f084075f749 code=0x7ffc0000
[  219.429229][   T29] audit: type=1326 audit(1767016016.418:4055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10667 comm="syz.3.2511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f084075f749 code=0x7ffc0000
[  219.452813][   T29] audit: type=1326 audit(1767016016.428:4056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10667 comm="syz.3.2511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f084075f749 code=0x7ffc0000
[  219.476307][   T29] audit: type=1326 audit(1767016016.428:4057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10667 comm="syz.3.2511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f084075f749 code=0x7ffc0000
[  219.502052][T10674] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  219.562050][T10674] ext4 filesystem being mounted at /457/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  219.598194][ T3318] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  219.832546][T10687] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2517'.
[  220.156781][T10691] loop0: detected capacity change from 0 to 1024
[  220.184011][T10691] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  220.323214][ T3323] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  220.491569][T10695] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2518'.
[  221.860555][T10742] loop0: detected capacity change from 0 to 128
[  221.891070][T10737] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2533'.
[  222.016017][T10742] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  222.070998][T10742] ext4 filesystem being mounted at /538/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  222.158683][T10742] netlink: 4 bytes leftover after parsing attributes in process `ÿ'.
[  222.275568][ T3323] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  222.494458][T10753] loop1: detected capacity change from 0 to 1024
[  222.550591][T10760] loop4: detected capacity change from 0 to 128
[  222.572903][T10753] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  222.602593][T10760] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  222.626166][T10760] ext4 filesystem being mounted at /518/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  222.726007][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  222.748456][ T3316] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  223.412012][ T3489] usb 3-1: enqueue for inactive port 0
[  223.420160][T10780] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  223.442122][ T3489] usb 3-1: enqueue for inactive port 0
[  223.519284][ T3489] vhci_hcd vhci_hcd.1: vhci_device speed not set
[  223.602769][T10791] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2551'.
[  223.648433][T10789] netlink: 'syz.2.2550': attribute type 4 has an invalid length.
[  223.697916][T10796] loop0: detected capacity change from 0 to 1024
[  223.713658][T10796] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  223.770093][ T3323] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  223.787978][T10801] loop1: detected capacity change from 0 to 128
[  223.822441][T10801] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  223.858835][T10801] ext4 filesystem being mounted at /468/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  223.935486][ T3318] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  223.977563][   T29] kauditd_printk_skb: 77 callbacks suppressed
[  223.977580][   T29] audit: type=1326 audit(1767016021.058:4135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10802 comm="syz.0.2554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67ee30f749 code=0x7ffc0000
[  224.007360][   T29] audit: type=1326 audit(1767016021.098:4136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10802 comm="syz.0.2554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67ee30f749 code=0x7ffc0000
[  224.092448][T10809] loop0: detected capacity change from 0 to 2048
[  224.181901][T10819] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2560'.
[  224.322908][T10809]  loop0: p2 p3 p7
[  224.516407][T10827] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2562'.
[  224.575395][T10832] SET target dimension over the limit!
[  224.643855][T10835] loop0: detected capacity change from 0 to 128
[  224.662281][T10835] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  224.719053][T10835] ext4 filesystem being mounted at /546/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  224.795343][ T3323] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  225.046576][   T29] audit: type=1326 audit(1767016022.078:4137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10845 comm="syz.0.2567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67ee30f749 code=0x7ffc0000
[  225.070437][   T29] audit: type=1326 audit(1767016022.078:4138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10845 comm="syz.0.2567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67ee30f749 code=0x7ffc0000
[  225.094010][   T29] audit: type=1326 audit(1767016022.078:4139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10845 comm="syz.0.2567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f67ee30f749 code=0x7ffc0000
[  225.117476][   T29] audit: type=1326 audit(1767016022.078:4140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10845 comm="syz.0.2567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67ee30f749 code=0x7ffc0000
[  225.141088][   T29] audit: type=1326 audit(1767016022.078:4141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10845 comm="syz.0.2567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f67ee30f749 code=0x7ffc0000
[  225.164533][   T29] audit: type=1326 audit(1767016022.078:4142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10845 comm="syz.0.2567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67ee30f749 code=0x7ffc0000
[  225.188212][   T29] audit: type=1326 audit(1767016022.078:4143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10845 comm="syz.0.2567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f67ee30f749 code=0x7ffc0000
[  225.216102][T10850] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2571'.
[  225.291806][T10852] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2572'.
[  225.660620][T10864] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2574'.
[  226.107885][   T29] audit: type=1326 audit(1767016022.368:4144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10845 comm="syz.0.2567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67ee30f749 code=0x7ffc0000
[  226.385589][T10873] loop2: detected capacity change from 0 to 2048
[  226.419137][T10875] loop1: detected capacity change from 0 to 2048
[  226.429173][T10877] loop0: detected capacity change from 0 to 128
[  226.444354][T10877] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  226.461136][T10079]  loop2: p2 p3 p7
[  226.469607][T10877] ext4 filesystem being mounted at /548/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  226.484423][ T3302]  loop1: p2 p3 p7
[  226.503345][ T3323] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  227.041262][T10875]  loop1: p2 p3 p7
[  227.052466][T10873]  loop2: p2 p3 p7
[  227.250426][T10887] loop0: detected capacity change from 0 to 1024
[  227.399831][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[  227.433664][T10079] udevd[10079]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory
[  227.466462][T10900] loop2: detected capacity change from 0 to 1024
[  227.481571][T10899] udevd[10899]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory
[  227.511133][T10159] udevd[10159]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[  227.527291][ T3684] udevd[3684]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory
[  227.538964][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory
[  227.569965][T10900] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  227.614197][T10899] udevd[10899]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory
[  227.625569][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[  227.642697][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory
[  227.743260][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  227.790962][T10905] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2585'.
[  227.880710][T10907] loop4: detected capacity change from 0 to 1024
[  227.903030][T10907] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  227.938638][T10907] EXT4-fs error (device loop4): ext4_empty_dir:3107: inode #11: block 623: comm syz.4.2586: Attempting to read directory block (623) that is past i_size (638464)
[  227.974089][T10907] EXT4-fs (loop4): Remounting filesystem read-only
[  228.013705][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  228.142133][T10911] loop1: detected capacity change from 0 to 128
[  228.162820][T10911] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  228.198881][T10911] ext4 filesystem being mounted at /475/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  228.236040][T10887] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  228.263136][T10915] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2584'.
[  228.290004][T10917] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2587'.
[  228.327953][T10887] EXT4-fs error (device loop0): ext4_empty_dir:3107: inode #11: block 623: comm syz.0.2578: Attempting to read directory block (623) that is past i_size (638464)
[  228.348260][T10920] loop4: detected capacity change from 0 to 128
[  228.348455][ T3318] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  228.364464][T10887] EXT4-fs (loop0): Remounting filesystem read-only
[  228.412891][ T3323] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  228.447065][T10920] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  228.462053][T10925] loop2: detected capacity change from 0 to 128
[  228.481820][T10920] ext4 filesystem being mounted at /527/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  228.493147][T10925] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  228.516982][T10920] netlink: 4 bytes leftover after parsing attributes in process `ÿ'.
[  228.526399][T10925] ext4 filesystem being mounted at /458/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  228.554376][T10925] netlink: 4 bytes leftover after parsing attributes in process `ÿ'.
[  228.582523][ T3316] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  228.772310][ T3319] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  229.153891][T10940] loop2: detected capacity change from 0 to 1024
[  229.183179][T10940] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  229.247581][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  229.311935][T10947] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2599'.
[  229.578586][T10952] loop2: detected capacity change from 0 to 128
[  229.607043][T10952] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  229.626104][T10952] ext4 filesystem being mounted at /460/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  229.675050][ T3319] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  230.128087][T10967] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2604'.
[  230.522848][T10969] netlink: 'syz.4.2606': attribute type 4 has an invalid length.
[  230.560033][T10972] loop2: detected capacity change from 0 to 1024
[  230.704813][T10972] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  230.735460][T10972] EXT4-fs error (device loop2): ext4_empty_dir:3107: inode #11: block 623: comm syz.2.2601: Attempting to read directory block (623) that is past i_size (638464)
[  230.853392][T10972] EXT4-fs (loop2): Remounting filesystem read-only
[  230.882819][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  230.991022][T10984] loop2: detected capacity change from 0 to 1024
[  231.031115][T10984] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  231.081016][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  234.469881][T11009] loop4: detected capacity change from 0 to 1024
[  234.539621][T11009] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  234.663457][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  234.691591][   T29] kauditd_printk_skb: 11 callbacks suppressed
[  234.691637][   T29] audit: type=1326 audit(1767016031.708:4156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11013 comm="syz.1.2617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f728cabf749 code=0x7ffc0000
[  234.721538][   T29] audit: type=1326 audit(1767016031.708:4157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11013 comm="syz.1.2617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f728cabf749 code=0x7ffc0000
[  234.745107][   T29] audit: type=1326 audit(1767016031.708:4158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11013 comm="syz.1.2617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f728cabf749 code=0x7ffc0000
[  234.768659][   T29] audit: type=1326 audit(1767016031.708:4159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11013 comm="syz.1.2617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f728cabf749 code=0x7ffc0000
[  234.792259][   T29] audit: type=1326 audit(1767016031.708:4160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11013 comm="syz.1.2617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f728cabf749 code=0x7ffc0000
[  234.815894][   T29] audit: type=1326 audit(1767016031.708:4161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11013 comm="syz.1.2617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f728cabf749 code=0x7ffc0000
[  234.839552][   T29] audit: type=1326 audit(1767016031.708:4162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11013 comm="syz.1.2617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f728cabf749 code=0x7ffc0000
[  234.863062][   T29] audit: type=1326 audit(1767016031.708:4163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11013 comm="syz.1.2617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f728cabf749 code=0x7ffc0000
[  234.886636][   T29] audit: type=1326 audit(1767016031.708:4164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11013 comm="syz.1.2617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f728cabf749 code=0x7ffc0000
[  234.910150][   T29] audit: type=1326 audit(1767016031.708:4165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11013 comm="syz.1.2617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7f728cabf749 code=0x7ffc0000
[  235.075444][T11026] SET target dimension over the limit!
[  235.163552][T11029] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2623'.
[  235.653122][T11022] loop0: detected capacity change from 0 to 2048
[  235.760620][T11022]  loop0: p2 p3 p7
[  235.779814][T11039] loop4: detected capacity change from 0 to 1024
[  236.033331][T11039] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  236.119523][T11047] loop2: detected capacity change from 0 to 1024
[  236.779934][T11039] EXT4-fs error (device loop4): ext4_empty_dir:3107: inode #11: block 623: comm syz.4.2619: Attempting to read directory block (623) that is past i_size (638464)
[  236.805711][T11039] EXT4-fs (loop4): Remounting filesystem read-only
[  236.813280][T11047] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  236.835665][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  236.883666][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  236.929580][T11069] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2637'.
[  236.965188][T11071] loop4: detected capacity change from 0 to 128
[  237.016123][T11071] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  237.101625][T11071] ext4 filesystem being mounted at /536/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  237.114879][T11071] netlink: 4 bytes leftover after parsing attributes in process `ÿ'.
[  237.133795][T11081] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2640'.
[  237.136631][T11080] loop0: detected capacity change from 0 to 512
[  237.150185][T11080] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  237.150475][ T3316] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  237.172859][T11080] EXT4-fs (loop0): 1 truncate cleaned up
[  237.367330][T11089] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2641'.
[  237.584961][T11093] SET target dimension over the limit!
[  237.732903][T11089] bond0: Unable to set down delay as MII monitoring is disabled
[  237.760481][T11098] loop0: detected capacity change from 0 to 1024
[  237.786944][T11097] loop2: detected capacity change from 0 to 1024
[  237.934300][T11097] EXT4-fs error (device loop2): ext4_empty_dir:3107: inode #11: block 623: comm syz.2.2645: Attempting to read directory block (623) that is past i_size (638464)
[  238.031886][T11097] EXT4-fs (loop2): Remounting filesystem read-only
[  238.048991][T11104] loop4: detected capacity change from 0 to 2048
[  238.155570][T10079]  loop4: p2 p3 p7
[  238.278685][T11104]  loop4: p2 p3 p7
[  238.366859][T10079] udevd[10079]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  238.382473][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[  238.382746][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory
[  238.404714][ T3489] kernel write not supported for file bpf-prog (pid: 3489 comm: kworker/0:4)
[  238.471315][T11118] loop1: detected capacity change from 0 to 1024
[  238.497000][T11120] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  238.530914][T10899] udevd[10899]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory
[  238.531019][T10079] udevd[10079]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  238.543053][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[  238.563111][T11120] EXT4-fs (loop4): 1 truncate cleaned up
[  238.668607][T11131] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2656'.
[  239.299968][ T3302]  loop2: p2 p3 p7
[  239.413328][T11164] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2670'.
[  239.510004][T11171] set_capacity_and_notify: 4 callbacks suppressed
[  239.510024][T11171] loop0: detected capacity change from 0 to 1024
[  239.811014][   T29] kauditd_printk_skb: 53 callbacks suppressed
[  239.811032][   T29] audit: type=1326 audit(1767016036.888:4219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11185 comm="syz.3.2678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f084075f749 code=0x7ffc0000
[  239.872146][   T29] audit: type=1326 audit(1767016036.928:4220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11185 comm="syz.3.2678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f084075f749 code=0x7ffc0000
[  239.895677][   T29] audit: type=1326 audit(1767016036.928:4221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11185 comm="syz.3.2678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f084075f749 code=0x7ffc0000
[  239.919188][   T29] audit: type=1326 audit(1767016036.928:4222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11185 comm="syz.3.2678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f084075f749 code=0x7ffc0000
[  239.942580][   T29] audit: type=1326 audit(1767016036.928:4223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11185 comm="syz.3.2678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f084075f749 code=0x7ffc0000
[  239.966088][   T29] audit: type=1326 audit(1767016036.928:4224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11185 comm="syz.3.2678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f084075f749 code=0x7ffc0000
[  240.095461][   T29] audit: type=1326 audit(1767016037.098:4225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11185 comm="syz.3.2678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f084075f749 code=0x7ffc0000
[  240.119545][   T29] audit: type=1326 audit(1767016037.098:4226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11185 comm="syz.3.2678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f084075f749 code=0x7ffc0000
[  240.143141][   T29] audit: type=1326 audit(1767016037.158:4227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11185 comm="syz.3.2678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f084075f749 code=0x7ffc0000
[  240.166875][   T29] audit: type=1326 audit(1767016037.158:4228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11185 comm="syz.3.2678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f084075f749 code=0x7ffc0000
[  240.332375][T10899] udevd[10899]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory
[  240.352095][T10079] udevd[10079]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory
[  240.366677][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[  240.391611][T11195] loop2: detected capacity change from 0 to 512
[  240.418912][T11195] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  240.712956][T11197] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2669'.
[  240.845679][T11195] EXT4-fs (loop2): 1 truncate cleaned up
[  240.868282][T11205] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2682'.
[  241.765775][T11225] loop2: detected capacity change from 0 to 1024
[  243.098027][T11244] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2693'.
[  243.189005][T11244] bond0: Unable to set down delay as MII monitoring is disabled
[  243.498118][T11247] loop4: detected capacity change from 0 to 1024
[  243.623140][T11247] EXT4-fs mount: 20 callbacks suppressed
[  243.623158][T11247] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  243.782755][T11254] SET target dimension over the limit!
[  243.807201][T11247] EXT4-fs error (device loop4): ext4_empty_dir:3107: inode #11: block 623: comm syz.4.2694: Attempting to read directory block (623) that is past i_size (638464)
[  244.285208][T11256] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2695'.
[  244.334484][T11247] EXT4-fs (loop4): Remounting filesystem read-only
[  244.386411][T11262] loop2: detected capacity change from 0 to 512
[  244.577858][T11262] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  244.591955][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  244.633251][T11262] EXT4-fs (loop2): 1 truncate cleaned up
[  244.639320][T11262] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  244.653052][T11262] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  244.756607][T11268] loop1: detected capacity change from 0 to 1024
[  244.775681][T11268] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  244.811222][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  244.961108][T11277] loop4: detected capacity change from 0 to 1024
[  244.977349][T11276] SET target dimension over the limit!
[  244.988185][T11277] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  245.075155][T11282] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2703'.
[  245.102024][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  245.135183][T11288] SET target dimension over the limit!
[  245.253705][T11292] loop4: detected capacity change from 0 to 2048
[  245.366493][T11299] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2710'.
[  245.508240][T11292]  loop4: p2 p3 p7
[  245.683902][ T3008]  loop4: p2 p3 p7
[  245.946060][T10079] udevd[10079]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  245.956386][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory
[  245.966996][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[  246.011288][T10079] udevd[10079]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  246.095854][T10159] udevd[10159]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory
[  246.105429][T10079] udevd[10079]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[  246.150246][T11314] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  246.242906][T11312] tipc: Resetting bearer <eth:syzkaller0>
[  246.304295][T11312] tipc: Disabling bearer <eth:syzkaller0>
[  246.348856][T11320] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2714'.
[  246.556585][T11322] loop0: detected capacity change from 0 to 1024
[  246.631056][T11322] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  246.793180][ T3323] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  246.969311][T11333] SET target dimension over the limit!
[  247.185814][T11341] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(12)
[  247.192457][T11341] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  247.200017][T11341] vhci_hcd vhci_hcd.0: Device attached
[  247.224496][T11347] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2724'.
[  247.266163][T11339] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9)
[  247.272736][T11339] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  247.280395][T11339] vhci_hcd vhci_hcd.0: Device attached
[  247.861696][T11341] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(14)
[  247.868443][T11341] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  247.876129][T11341] vhci_hcd vhci_hcd.0: Device attached
[  248.308285][   T10] usb 1-2: new low-speed USB device number 6 using vhci_hcd
[  248.350648][T11366] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2727'.
[  248.375059][T11366] bond0: Unable to set up delay as MII monitoring is disabled
[  248.806655][T11367] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2726'.
[  248.832510][T11339] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(11)
[  248.839140][T11339] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  248.846766][T11339] vhci_hcd vhci_hcd.0: Device attached
[  248.942371][   T29] kauditd_printk_skb: 19 callbacks suppressed
[  248.942388][   T29] audit: type=1400 audit(1767016046.028:4248): avc:  denied  { read } for  pid=3047 comm="dhcpcd" name="n26" dev="tmpfs" ino=14675 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  248.970539][   T29] audit: type=1400 audit(1767016046.028:4249): avc:  denied  { open } for  pid=3047 comm="dhcpcd" path="/run/udev/data/n26" dev="tmpfs" ino=14675 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  249.026711][T11341] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(18)
[  249.033354][T11341] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  249.040891][T11341] vhci_hcd vhci_hcd.0: Device attached
[  249.041188][T11378] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  249.055419][ T5842] bridge_slave_1: left allmulticast mode
[  249.061156][ T5842] bridge_slave_1: left promiscuous mode
[  249.066955][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state
[  249.074890][ T5842] bridge_slave_0: left allmulticast mode
[  249.080582][ T5842] bridge_slave_0: left promiscuous mode
[  249.086335][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state
[  249.103659][T11378] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  249.138149][T11341] vhci_hcd vhci_hcd.0: port 0 already used
[  249.154579][   T29] audit: type=1400 audit(1767016046.108:4250): avc:  denied  { getattr } for  pid=3047 comm="dhcpcd" path="/run/udev/data/n26" dev="tmpfs" ino=14675 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  249.181773][T11339] vhci_hcd vhci_hcd.0: pdev(0) rhport(5) sockfd(17)
[  249.188408][T11339] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  249.196141][T11339] vhci_hcd vhci_hcd.0: Device attached
[  249.255213][ T5842] hsr_slave_0: left promiscuous mode
[  249.279935][ T5842] hsr_slave_1: left promiscuous mode
[  249.292554][T11390] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2729'.
[  249.311947][ T5842] batman_adv: batadv0: Removing interface: batadv_slave_0
[  249.322316][T11375] vhci_hcd: connection closed
[  249.322553][ T2535] vhci_hcd vhci_hcd.0: stop threads
[  249.332751][ T2535] vhci_hcd vhci_hcd.0: release socket
[  249.338157][ T2535] vhci_hcd vhci_hcd.0: disconnect device
[  249.344914][T11362] vhci_hcd: connection closed
[  249.352733][T11342] vhci_hcd: connection closed
[  249.357514][T11374] vhci_hcd: connection closed
[  249.362442][T11343] vhci_hcd: connection reset by peer
[  249.381619][T11370] vhci_hcd: connection closed
[  249.386116][ T5842] batman_adv: batadv0: Removing interface: batadv_slave_1
[  249.438856][ T2535] vhci_hcd vhci_hcd.0: stop threads
[  249.444220][ T2535] vhci_hcd vhci_hcd.0: release socket
[  249.449729][ T2535] vhci_hcd vhci_hcd.0: disconnect device
[  249.541572][ T2535] vhci_hcd vhci_hcd.0: stop threads
[  249.546843][ T2535] vhci_hcd vhci_hcd.0: release socket
[  249.552313][ T2535] vhci_hcd vhci_hcd.0: disconnect device
[  249.606928][ T2535] vhci_hcd vhci_hcd.0: stop threads
[  249.612220][ T2535] vhci_hcd vhci_hcd.0: release socket
[  249.617729][ T2535] vhci_hcd vhci_hcd.0: disconnect device
[  249.675042][ T5842] team0 (unregistering): Port device team_slave_1 removed
[  249.721805][ T2535] vhci_hcd vhci_hcd.0: stop threads
[  249.727110][ T2535] vhci_hcd vhci_hcd.0: release socket
[  249.732626][ T2535] vhci_hcd vhci_hcd.0: disconnect device
[  249.740177][ T5842] team0 (unregistering): Port device team_slave_0 removed
[  249.773108][   T29] audit: type=1400 audit(1767016046.858:4251): avc:  denied  { create } for  pid=11392 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  249.810731][ T2535] vhci_hcd vhci_hcd.0: stop threads
[  249.816126][ T2535] vhci_hcd vhci_hcd.0: release socket
[  249.821655][ T2535] vhci_hcd vhci_hcd.0: disconnect device
[  249.887265][   T29] audit: type=1400 audit(1767016046.868:4252): avc:  denied  { allowed } for  pid=11368 comm="syz.4.2728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  249.906954][   T29] audit: type=1400 audit(1767016046.878:4253): avc:  denied  { write } for  pid=11392 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth2.link" dev="tmpfs" ino=14688 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  249.933737][   T29] audit: type=1400 audit(1767016046.878:4254): avc:  denied  { append } for  pid=11392 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" dev="tmpfs" ino=14688 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  249.958479][   T29] audit: type=1400 audit(1767016046.918:4255): avc:  denied  { unlink } for  pid=11404 comm="rm" name="resolv.conf.eth2.link" dev="tmpfs" ino=14688 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  250.124126][T11346] chnl_net:caif_netlink_parms(): no params data found
[  250.171476][   T29] audit: type=1326 audit(1767016047.088:4256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11407 comm="syz.0.2732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67ee30f749 code=0x7ffc0000
[  250.195130][   T29] audit: type=1326 audit(1767016047.088:4257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11407 comm="syz.0.2732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67ee30f749 code=0x7ffc0000
[  250.316109][T11346] bridge0: port 1(bridge_slave_0) entered blocking state
[  250.323420][T11346] bridge0: port 1(bridge_slave_0) entered disabled state
[  250.375565][T11346] bridge_slave_0: entered allmulticast mode
[  250.394735][T11346] bridge_slave_0: entered promiscuous mode
[  250.432314][T11346] bridge0: port 2(bridge_slave_1) entered blocking state
[  250.439496][T11346] bridge0: port 2(bridge_slave_1) entered disabled state
[  250.465811][T11429] loop0: detected capacity change from 0 to 1024
[  250.481925][T11346] bridge_slave_1: entered allmulticast mode
[  250.498945][T11429] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  250.512679][T11346] bridge_slave_1: entered promiscuous mode
[  250.544039][ T5842] IPVS: stop unused estimator thread 0...
[  250.576938][T11429] EXT4-fs error (device loop0): ext4_empty_dir:3107: inode #11: block 623: comm syz.0.2733: Attempting to read directory block (623) that is past i_size (638464)
[  250.612836][T11346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  250.637792][T11429] EXT4-fs (loop0): Remounting filesystem read-only
[  250.646424][T11438] loop1: detected capacity change from 0 to 128
[  250.664356][T11346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  250.673723][T11438] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  250.710341][T11438] ext4 filesystem being mounted at /502/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  250.726321][ T3323] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  250.737491][T11438] netlink: 8 bytes leftover after parsing attributes in process `ÿ'.
[  250.755492][T11346] team0: Port device team_slave_0 added
[  250.762374][ T3318] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  250.784142][T11346] team0: Port device team_slave_1 added
[  250.826529][T11346] batman_adv: batadv0: Adding interface: batadv_slave_0
[  250.833554][T11346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  250.859646][T11346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  251.325885][T11346] batman_adv: batadv0: Adding interface: batadv_slave_1
[  251.332948][T11346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  251.359095][T11346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  251.381089][T11449] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  251.436331][T11346] hsr_slave_0: entered promiscuous mode
[  251.442554][T11346] hsr_slave_1: entered promiscuous mode
[  251.448432][T11346] debugfs: 'hsr0' already exists in 'hsr'
[  251.454268][T11346] Cannot create hsr debugfs directory
[  251.460305][T11445] tipc: Resetting bearer <eth:syzkaller0>
[  251.475010][T11445] tipc: Disabling bearer <eth:syzkaller0>
[  251.686198][T11498] loop4: detected capacity change from 0 to 128
[  251.695435][T11498] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  251.718401][T11498] ext4 filesystem being mounted at /553/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  251.769347][T11498] netlink: 8 bytes leftover after parsing attributes in process `ÿ'.
[  251.827553][T11511] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2749'.
[  251.853807][ T3316] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  251.891248][T11346] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  251.910568][T11346] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  251.982234][T11346] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  251.990934][T11530] FAULT_INJECTION: forcing a failure.
[  251.990934][T11530] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  252.004184][T11530] CPU: 0 UID: 0 PID: 11530 Comm: syz.4.2754 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  252.004252][T11530] Tainted: [W]=WARN
[  252.004296][T11530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  252.004310][T11530] Call Trace:
[  252.004318][T11530]  <TASK>
[  252.004329][T11530]  __dump_stack+0x1d/0x30
[  252.004353][T11530]  dump_stack_lvl+0x95/0xd0
[  252.004374][T11530]  dump_stack+0x15/0x1b
[  252.004424][T11530]  should_fail_ex+0x265/0x280
[  252.004447][T11530]  should_fail+0xb/0x20
[  252.004466][T11530]  should_fail_usercopy+0x1a/0x20
[  252.004506][T11530]  _copy_from_user+0x1c/0xb0
[  252.004539][T11530]  generic_map_update_batch+0x3b1/0x540
[  252.004578][T11530]  ? __pfx_generic_map_update_batch+0x10/0x10
[  252.004668][T11530]  bpf_map_do_batch+0x25c/0x380
[  252.004725][T11530]  __sys_bpf+0x5f8/0x7c0
[  252.004755][T11530]  __x64_sys_bpf+0x41/0x50
[  252.004797][T11530]  x64_sys_call+0x28e1/0x3000
[  252.004822][T11530]  do_syscall_64+0xca/0x2b0
[  252.004894][T11530]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  252.004918][T11530] RIP: 0033:0x7f8f74c4f749
[  252.004936][T11530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  252.004958][T11530] RSP: 002b:00007f8f736af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  252.005038][T11530] RAX: ffffffffffffffda RBX: 00007f8f74ea5fa0 RCX: 00007f8f74c4f749
[  252.005133][T11530] RDX: 0000000000000038 RSI: 00002000000009c0 RDI: 000000000000001a
[  252.005148][T11530] RBP: 00007f8f736af090 R08: 0000000000000000 R09: 0000000000000000
[  252.005162][T11530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  252.005176][T11530] R13: 00007f8f74ea6038 R14: 00007f8f74ea5fa0 R15: 00007ffd1ca184d8
[  252.005197][T11530]  </TASK>
[  252.009686][T11346] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  252.104151][T11544] FAULT_INJECTION: forcing a failure.
[  252.104151][T11544] name failslab, interval 1, probability 0, space 0, times 0
[  252.209661][T11544] CPU: 1 UID: 0 PID: 11544 Comm: syz.0.2755 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  252.209697][T11544] Tainted: [W]=WARN
[  252.209705][T11544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  252.209718][T11544] Call Trace:
[  252.209726][T11544]  <TASK>
[  252.209735][T11544]  __dump_stack+0x1d/0x30
[  252.209824][T11544]  dump_stack_lvl+0x95/0xd0
[  252.209845][T11544]  dump_stack+0x15/0x1b
[  252.209864][T11544]  should_fail_ex+0x265/0x280
[  252.209889][T11544]  should_failslab+0x8c/0xb0
[  252.209915][T11544]  kmem_cache_alloc_noprof+0x69/0x4b0
[  252.209945][T11544]  ? sctp_get_port_local+0x438/0xae0
[  252.209982][T11544]  sctp_get_port_local+0x438/0xae0
[  252.210028][T11544]  sctp_do_bind+0x398/0x4b0
[  252.210105][T11544]  sctp_connect_new_asoc+0x153/0x3a0
[  252.210140][T11544]  sctp_sendmsg+0xf10/0x18d0
[  252.210168][T11544]  ? selinux_socket_sendmsg+0x151/0x1b0
[  252.210226][T11544]  ? __pfx_sctp_sendmsg+0x10/0x10
[  252.210259][T11544]  inet_sendmsg+0xc5/0xd0
[  252.210289][T11544]  __sock_sendmsg+0x102/0x180
[  252.210339][T11544]  ____sys_sendmsg+0x345/0x4a0
[  252.210435][T11544]  ___sys_sendmsg+0x17b/0x1d0
[  252.210475][T11544]  __sys_sendmmsg+0x178/0x300
[  252.210512][T11544]  __x64_sys_sendmmsg+0x57/0x70
[  252.210557][T11544]  x64_sys_call+0x1e28/0x3000
[  252.210603][T11544]  do_syscall_64+0xca/0x2b0
[  252.210624][T11544]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  252.210639][T11544] RIP: 0033:0x7f67ee30f749
[  252.210650][T11544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  252.210663][T11544] RSP: 002b:00007f67ecd6f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  252.210803][T11544] RAX: ffffffffffffffda RBX: 00007f67ee565fa0 RCX: 00007f67ee30f749
[  252.210812][T11544] RDX: 0000000000000001 RSI: 00002000000003c0 RDI: 0000000000000003
[  252.210821][T11544] RBP: 00007f67ecd6f090 R08: 0000000000000000 R09: 0000000000000000
[  252.210829][T11544] R10: 0000000020008050 R11: 0000000000000246 R12: 0000000000000001
[  252.210837][T11544] R13: 00007f67ee566038 R14: 00007f67ee565fa0 R15: 00007ffffc602268
[  252.210850][T11544]  </TASK>
[  252.470225][T11569] loop0: detected capacity change from 0 to 128
[  252.480163][T11569] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  252.495536][T11569] ext4 filesystem being mounted at /589/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  252.509444][T11569] netlink: 8 bytes leftover after parsing attributes in process `ÿ'.
[  252.533474][T11571] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2758'.
[  252.619585][ T3323] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  252.629643][T11346] 8021q: adding VLAN 0 to HW filter on device bond0
[  252.649005][T11346] 8021q: adding VLAN 0 to HW filter on device team0
[  252.659729][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state
[  252.666847][ T5835] bridge0: port 1(bridge_slave_0) entered forwarding state
[  252.715066][T11594] capability: warning: `syz.4.2761' uses 32-bit capabilities (legacy support in use)
[  252.749026][T11604] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2762'.
[  252.767294][T11605] 9pnet_fd: Insufficient options for proto=fd
[  252.777186][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state
[  252.784307][ T5839] bridge0: port 2(bridge_slave_1) entered forwarding state
[  252.803592][T11606] FAULT_INJECTION: forcing a failure.
[  252.803592][T11606] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  252.816913][T11606] CPU: 1 UID: 0 PID: 11606 Comm: syz.0.2763 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  252.817020][T11606] Tainted: [W]=WARN
[  252.817026][T11606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  252.817038][T11606] Call Trace:
[  252.817045][T11606]  <TASK>
[  252.817054][T11606]  __dump_stack+0x1d/0x30
[  252.817097][T11606]  dump_stack_lvl+0x95/0xd0
[  252.817121][T11606]  dump_stack+0x15/0x1b
[  252.817145][T11606]  should_fail_ex+0x265/0x280
[  252.817172][T11606]  should_fail+0xb/0x20
[  252.817192][T11606]  should_fail_usercopy+0x1a/0x20
[  252.817282][T11606]  _copy_to_user+0x20/0xa0
[  252.817382][T11606]  simple_read_from_buffer+0xb5/0x130
[  252.817421][T11606]  proc_fail_nth_read+0x10e/0x150
[  252.817454][T11606]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  252.817541][T11606]  vfs_read+0x1a8/0x770
[  252.817606][T11606]  ? __rcu_read_unlock+0x4f/0x70
[  252.817625][T11606]  ? __fget_files+0x184/0x1c0
[  252.817646][T11606]  ? mutex_lock+0x58/0x90
[  252.817677][T11606]  ksys_read+0xda/0x1a0
[  252.817700][T11606]  __x64_sys_read+0x40/0x50
[  252.817776][T11606]  x64_sys_call+0x2889/0x3000
[  252.817805][T11606]  do_syscall_64+0xca/0x2b0
[  252.817844][T11606]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  252.817926][T11606] RIP: 0033:0x7f67ee30e15c
[  252.817946][T11606] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  252.817967][T11606] RSP: 002b:00007f67ecd4e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  252.817991][T11606] RAX: ffffffffffffffda RBX: 00007f67ee566090 RCX: 00007f67ee30e15c
[  252.818085][T11606] RDX: 000000000000000f RSI: 00007f67ecd4e0a0 RDI: 0000000000000006
[  252.818101][T11606] RBP: 00007f67ecd4e090 R08: 0000000000000000 R09: 0000000000000000
[  252.818150][T11606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  252.818225][T11606] R13: 00007f67ee566128 R14: 00007f67ee566090 R15: 00007ffffc602268
[  252.818247][T11606]  </TASK>
[  253.040436][T11346] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  253.213465][T11346] 8021q: adding VLAN 0 to HW filter on device batadv0
[  253.314530][T11627] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2768'.
[  253.347844][T11612] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2765'.
[  253.419684][T11612] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2765'.
[  253.428700][T11612] netlink: 'syz.1.2765': attribute type 1 has an invalid length.
[  253.479733][T11630] loop0: detected capacity change from 0 to 512
[  253.544003][T11630] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  253.598268][T11612] loop1: detected capacity change from 0 to 512
[  253.606997][T11635] loop4: detected capacity change from 0 to 512
[  253.613908][T11630] ext4 filesystem being mounted at /594/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  253.635965][T11635] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  253.673632][T11612] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  253.690952][   T10] usb 1-2: enqueue for inactive port 1
[  253.696687][   T10] usb 1-2: enqueue for inactive port 1
[  253.720643][T11612] EXT4-fs (loop1): mount failed
[  253.725654][T11635] EXT4-fs (loop4): 1 truncate cleaned up
[  253.731787][T11635] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  253.747553][T11635] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  253.771452][   T10] vhci_hcd vhci_hcd.0: vhci_device speed not set
[  253.781812][ T3323] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  253.792147][T11346] veth0_vlan: entered promiscuous mode
[  253.800127][T11346] veth1_vlan: entered promiscuous mode
[  253.849425][T11346] veth0_macvtap: entered promiscuous mode
[  253.877277][T11346] veth1_macvtap: entered promiscuous mode
[  253.898685][T11346] batman_adv: batadv0: Interface activated: batadv_slave_0
[  253.915131][T11346] batman_adv: batadv0: Interface activated: batadv_slave_1
[  253.929753][ T5829] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  253.944746][ T5829] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  253.958686][ T5829] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  253.982285][ T5819] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  254.087186][   T29] kauditd_printk_skb: 100 callbacks suppressed
[  254.087268][   T29] audit: type=1326 audit(1767016051.168:4355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11647 comm="syz.4.2773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f74c4f749 code=0x7ffc0000
[  254.157111][T11659] loop0: detected capacity change from 0 to 512
[  254.157281][   T29] audit: type=1326 audit(1767016051.198:4356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11647 comm="syz.4.2773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f74c4f749 code=0x7ffc0000
[  254.187069][   T29] audit: type=1326 audit(1767016051.208:4357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11647 comm="syz.4.2773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8f74c4f749 code=0x7ffc0000
[  254.210564][   T29] audit: type=1326 audit(1767016051.208:4358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11647 comm="syz.4.2773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f74c4f749 code=0x7ffc0000
[  254.234072][   T29] audit: type=1326 audit(1767016051.208:4359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11647 comm="syz.4.2773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8f74c4f749 code=0x7ffc0000
[  254.257600][   T29] audit: type=1326 audit(1767016051.208:4360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11647 comm="syz.4.2773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f74c4f749 code=0x7ffc0000
[  254.281118][   T29] audit: type=1326 audit(1767016051.208:4361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11647 comm="syz.4.2773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8f74c4f749 code=0x7ffc0000
[  254.304740][   T29] audit: type=1326 audit(1767016051.218:4362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11647 comm="syz.4.2773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f74c4f749 code=0x7ffc0000
[  254.328420][   T29] audit: type=1326 audit(1767016051.218:4363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11647 comm="syz.4.2773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f74c4f749 code=0x7ffc0000
[  254.345512][T11666] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2775'.
[  254.381329][T11659] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.2776: bg 0: block 104: invalid block bitmap
[  254.411814][T11659] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6689: Corrupt filesystem
[  254.440440][T11659] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.2776: invalid indirect mapped block 1 (level 1)
[  254.492739][T11659] EXT4-fs (loop0): 1 truncate cleaned up
[  254.507952][T11659] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  254.528008][T11661] loop4: detected capacity change from 0 to 512
[  254.565366][   T29] audit: type=1400 audit(1767016051.648:4364): avc:  denied  { ioctl } for  pid=11658 comm="syz.0.2776" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  254.592671][T11659] 9p: Bad value for 'port'
[  254.608744][T11661] ext4: Unknown parameter 'appraise_type'
[  254.642935][ T3323] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  255.003290][T11682] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2781'.
[  255.144256][T11682] loop4: detected capacity change from 0 to 1024
[  255.215367][T11682] EXT4-fs: inline encryption not supported
[  255.509178][T11690] loop2: detected capacity change from 0 to 1024
[  255.522516][T11682] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a80ec018, mo2=0002]
[  255.551953][T11682] System zones: 0-1, 3-12
[  255.556995][T11682] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  255.593780][T11690] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  255.686278][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  255.771970][T11682] loop4: detected capacity change from 1024 to 64
[  255.835378][ T3316] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 16: comm syz-executor: path /564/file1: bad entry in directory: directory entry overrun - offset=0, inode=17104912, rec_len=158052, size=1024 fake=0
[  256.133424][ T5743] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  256.471499][T11693] bio_check_eod: 20 callbacks suppressed
[  256.471515][T11693] kmmpd-loop4: attempt to access beyond end of device
[  256.471515][T11693] loop4: rw=8402945, sector=128, nr_sectors = 2 limit=64
[  256.491000][T11693] buffer_io_error: 9 callbacks suppressed
[  256.491015][T11693] Buffer I/O error on dev loop4, logical block 64, lost sync page write
[  256.819818][T11718] __nla_validate_parse: 1 callbacks suppressed
[  256.819837][T11718] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2789'.
[  257.183972][T11745] loop3: detected capacity change from 0 to 512
[  257.219329][T11745] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.2794: error while reading EA inode 32 err=-116
[  257.264408][T11745] EXT4-fs (loop3): Remounting filesystem read-only
[  257.350676][T11745] EXT4-fs warning (device loop3): ext4_evict_inode:256: couldn't mark inode dirty (err -30)
[  257.384733][T11745] EXT4-fs (loop3): 1 orphan inode deleted
[  257.386691][T11722] chnl_net:caif_netlink_parms(): no params data found
[  257.397967][T11745] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  257.428226][ T5839] bridge_slave_1: left allmulticast mode
[  257.433971][ T5839] bridge_slave_1: left promiscuous mode
[  257.439867][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state
[  257.488458][ T5839] bridge_slave_0: left allmulticast mode
[  257.494358][ T5839] bridge_slave_0: left promiscuous mode
[  257.500104][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state
[  257.563376][T11346] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  257.653600][ T5839] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  257.712338][ T5839] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  257.742714][ T5839] bond0 (unregistering): Released all slaves
[  257.790123][ T5839] tipc: Left network mode
[  257.821531][ T5839] hsr_slave_0: left promiscuous mode
[  257.841556][ T5839] hsr_slave_1: left promiscuous mode
[  257.853234][ T5839] batman_adv: batadv0: Removing interface: batadv_slave_0
[  257.873565][ T5839] batman_adv: batadv0: Removing interface: batadv_slave_1
[  257.971753][ T5839] team0 (unregistering): Port device team_slave_1 removed
[  257.992310][ T5839] team0 (unregistering): Port device team_slave_0 removed
[  258.180537][T11722] bridge0: port 1(bridge_slave_0) entered blocking state
[  258.187741][T11722] bridge0: port 1(bridge_slave_0) entered disabled state
[  258.216804][T11722] bridge_slave_0: entered allmulticast mode
[  258.223783][T11722] bridge_slave_0: entered promiscuous mode
[  258.230784][T11722] bridge0: port 2(bridge_slave_1) entered blocking state
[  258.237980][T11722] bridge0: port 2(bridge_slave_1) entered disabled state
[  258.245304][T11722] bridge_slave_1: entered allmulticast mode
[  258.252075][T11722] bridge_slave_1: entered promiscuous mode
[  258.433891][T11722] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  258.447451][T11726] chnl_net:caif_netlink_parms(): no params data found
[  258.455677][T11811] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2801'.
[  258.473706][T11722] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  258.619629][T11722] team0: Port device team_slave_0 added
[  258.625519][T11726] bridge0: port 1(bridge_slave_0) entered blocking state
[  258.632634][T11726] bridge0: port 1(bridge_slave_0) entered disabled state
[  258.667647][T11726] bridge_slave_0: entered allmulticast mode
[  258.706711][T11726] bridge_slave_0: entered promiscuous mode
[  258.740456][T11722] team0: Port device team_slave_1 added
[  258.774404][T11726] bridge0: port 2(bridge_slave_1) entered blocking state
[  258.781752][T11726] bridge0: port 2(bridge_slave_1) entered disabled state
[  258.797169][T11726] bridge_slave_1: entered allmulticast mode
[  258.816169][T11726] bridge_slave_1: entered promiscuous mode
[  258.874165][T11722] batman_adv: batadv0: Adding interface: batadv_slave_0
[  258.881310][T11722] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  258.907487][T11722] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  258.928491][T11726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  258.939161][T11722] batman_adv: batadv0: Adding interface: batadv_slave_1
[  258.946274][T11722] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  258.972500][T11722] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  258.984646][T11726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  259.085238][T11835] SET target dimension over the limit!
[  259.124654][ T5839] IPVS: stop unused estimator thread 0...
[  259.138766][T11726] team0: Port device team_slave_0 added
[  259.151900][T11726] team0: Port device team_slave_1 added
[  259.203157][ T5839] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  259.238810][T11726] batman_adv: batadv0: Adding interface: batadv_slave_0
[  259.245826][T11726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  259.272020][T11726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  259.334252][T11722] hsr_slave_0: entered promiscuous mode
[  259.341354][T11722] hsr_slave_1: entered promiscuous mode
[  259.357104][ T5839] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  259.373420][T11726] batman_adv: batadv0: Adding interface: batadv_slave_1
[  259.380578][T11726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  259.406567][T11726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  259.408725][   T29] kauditd_printk_skb: 138 callbacks suppressed
[  259.408736][   T29] audit: type=1326 audit(1767016056.458:4501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11854 comm="syz.3.2805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa38a6f749 code=0x7ffc0000
[  259.446804][   T29] audit: type=1326 audit(1767016056.458:4502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11854 comm="syz.3.2805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faa38a6f749 code=0x7ffc0000
[  259.470699][   T29] audit: type=1326 audit(1767016056.458:4503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11854 comm="syz.3.2805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa38a6f749 code=0x7ffc0000
[  259.494507][   T29] audit: type=1326 audit(1767016056.458:4504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11854 comm="syz.3.2805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faa38a6f749 code=0x7ffc0000
[  259.518383][   T29] audit: type=1326 audit(1767016056.458:4505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11854 comm="syz.3.2805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa38a6f749 code=0x7ffc0000
[  259.542011][   T29] audit: type=1326 audit(1767016056.458:4506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11854 comm="syz.3.2805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7faa38a6f749 code=0x7ffc0000
[  259.565525][   T29] audit: type=1326 audit(1767016056.458:4507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11854 comm="syz.3.2805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa38a6f749 code=0x7ffc0000
[  259.588944][T11858] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2806'.
[  259.589032][   T29] audit: type=1326 audit(1767016056.458:4508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11854 comm="syz.3.2805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faa38a6f749 code=0x7ffc0000
[  259.621315][   T29] audit: type=1400 audit(1767016056.458:4509): avc:  denied  { map_read map_write } for  pid=11854 comm="syz.3.2805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  259.641333][   T29] audit: type=1326 audit(1767016056.458:4510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11854 comm="syz.3.2805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa38a6f749 code=0x7ffc0000
[  259.666798][T11858] bond0: Unable to set up delay as MII monitoring is disabled
[  259.694982][T11726] hsr_slave_0: entered promiscuous mode
[  259.717643][T11726] hsr_slave_1: entered promiscuous mode
[  259.729245][T11726] debugfs: 'hsr0' already exists in 'hsr'
[  259.735194][T11726] Cannot create hsr debugfs directory
[  259.735216][T11861] loop3: detected capacity change from 0 to 128
[  259.749575][ T5839] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  259.762740][T11861] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  259.805063][T11861] ext4 filesystem being mounted at /7/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  259.890138][T11722] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  259.900228][T11722] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  259.919656][T11722] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  259.931637][T11722] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  259.962810][ T5839] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  259.988178][T11869] FAULT_INJECTION: forcing a failure.
[  259.988178][T11869] name failslab, interval 1, probability 0, space 0, times 0
[  260.001041][T11869] CPU: 1 UID: 0 PID: 11869 Comm: syz.1.2808 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  260.001076][T11869] Tainted: [W]=WARN
[  260.001083][T11869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  260.001097][T11869] Call Trace:
[  260.001105][T11869]  <TASK>
[  260.001114][T11869]  __dump_stack+0x1d/0x30
[  260.001194][T11869]  dump_stack_lvl+0x95/0xd0
[  260.001214][T11869]  dump_stack+0x15/0x1b
[  260.001237][T11869]  should_fail_ex+0x265/0x280
[  260.001265][T11869]  should_failslab+0x8c/0xb0
[  260.001306][T11869]  __kmalloc_cache_noprof+0x65/0x4c0
[  260.001329][T11869]  ? alloc_mnt_ns+0x76/0x250
[  260.001355][T11869]  alloc_mnt_ns+0x76/0x250
[  260.001379][T11869]  copy_mnt_ns+0xda/0x6a0
[  260.001491][T11869]  ? kmem_cache_alloc_noprof+0x2c5/0x4b0
[  260.001518][T11869]  ? create_new_namespaces+0x3c/0x400
[  260.001548][T11869]  create_new_namespaces+0x83/0x400
[  260.001572][T11869]  unshare_nsproxy_namespaces+0xe8/0x120
[  260.001617][T11869]  ksys_unshare+0x3d0/0x6d0
[  260.001644][T11869]  ? ksys_write+0x192/0x1a0
[  260.001664][T11869]  __x64_sys_unshare+0x1f/0x30
[  260.001693][T11869]  x64_sys_call+0x2ae6/0x3000
[  260.001781][T11869]  do_syscall_64+0xca/0x2b0
[  260.001821][T11869]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  260.001847][T11869] RIP: 0033:0x7f728cabf749
[  260.001877][T11869] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  260.001899][T11869] RSP: 002b:00007f728b527038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  260.001924][T11869] RAX: ffffffffffffffda RBX: 00007f728cd15fa0 RCX: 00007f728cabf749
[  260.001939][T11869] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002c060000
[  260.001953][T11869] RBP: 00007f728b527090 R08: 0000000000000000 R09: 0000000000000000
[  260.001966][T11869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  260.002017][T11869] R13: 00007f728cd16038 R14: 00007f728cd15fa0 R15: 00007fff01dbc9f8
[  260.002037][T11869]  </TASK>
[  260.206585][T11346] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  260.233316][T11873] loop3: detected capacity change from 0 to 1024
[  260.273141][T11873] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  260.299494][ T5839] bridge_slave_1: left allmulticast mode
[  260.305415][ T5839] bridge_slave_1: left promiscuous mode
[  260.311159][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state
[  260.323554][ T5839] bridge_slave_0: left allmulticast mode
[  260.329313][ T5839] bridge_slave_0: left promiscuous mode
[  260.335050][T11873] EXT4-fs error (device loop3): ext4_empty_dir:3107: inode #11: block 623: comm syz.3.2809: Attempting to read directory block (623) that is past i_size (638464)
[  260.335120][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state
[  260.358818][T11873] EXT4-fs (loop3): Remounting filesystem read-only
[  260.375530][T11346] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  260.478629][T11722] 8021q: adding VLAN 0 to HW filter on device bond0
[  260.513125][T11722] 8021q: adding VLAN 0 to HW filter on device team0
[  260.554801][T11722] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  260.565319][T11722] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  260.593000][ T5839] tipc: Left network mode
[  260.599638][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state
[  260.606873][ T5842] bridge0: port 1(bridge_slave_0) entered forwarding state
[  260.617955][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state
[  260.625071][ T5842] bridge0: port 2(bridge_slave_1) entered forwarding state
[  260.632993][T11897] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2812'.
[  260.682269][ T5839] hsr_slave_0: left promiscuous mode
[  260.690916][ T5839] hsr_slave_1: left promiscuous mode
[  260.700006][ T5839] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  260.707477][ T5839] batman_adv: batadv0: Removing interface: batadv_slave_0
[  260.716396][ T5839] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  260.723834][ T5839] batman_adv: batadv0: Removing interface: batadv_slave_1
[  260.736407][ T5839] veth1_macvtap: left promiscuous mode
[  260.746390][ T5839] veth0_macvtap: left promiscuous mode
[  260.769652][ T5839] veth1_vlan: left promiscuous mode
[  260.786829][ T5839] veth0_vlan: left promiscuous mode
[  260.947830][ T5839] team0 (unregistering): Port device team_slave_1 removed
[  260.955280][T11914] SET target dimension over the limit!
[  260.960922][ T5839] team0 (unregistering): Port device team_slave_0 removed
[  261.138439][T11722] 8021q: adding VLAN 0 to HW filter on device batadv0
[  261.404457][T11943] loop1: detected capacity change from 0 to 128
[  261.714479][T11943] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  261.735603][T11943] ext4 filesystem being mounted at /520/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  261.788461][T11726] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  261.797691][T11972] loop3: detected capacity change from 0 to 512
[  261.808000][T11726] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  261.826292][ T3318] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  261.851353][T11972] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  261.870448][T11972] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters
[  261.889994][T11972] EXT4-fs (loop3): 1 truncate cleaned up
[  261.907168][T11972] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  261.908898][T11726] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  261.937395][T11978] loop1: detected capacity change from 0 to 1024
[  261.944955][T11346] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  261.973631][ T5839] IPVS: stop unused estimator thread 0...
[  261.983050][T11978] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  261.997062][T11726] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  262.022411][T11978] EXT4-fs error (device loop1): ext4_empty_dir:3107: inode #11: block 623: comm syz.1.2820: Attempting to read directory block (623) that is past i_size (638464)
[  262.045860][T11978] EXT4-fs (loop1): Remounting filesystem read-only
[  262.055071][T11997] loop3: detected capacity change from 0 to 512
[  262.062336][T11997] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  262.077379][T11722] veth0_vlan: entered promiscuous mode
[  262.091303][T11997] EXT4-fs (loop3): 1 truncate cleaned up
[  262.103311][T11997] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  262.123973][T11997] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  262.143556][T11722] veth1_vlan: entered promiscuous mode
[  262.147659][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  262.200708][T12003] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9)
[  262.204151][T11722] veth0_macvtap: entered promiscuous mode
[  262.207275][T12003] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  262.220638][T12003] vhci_hcd vhci_hcd.0: Device attached
[  262.243136][T11726] 8021q: adding VLAN 0 to HW filter on device bond0
[  262.250002][T12003] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(11)
[  262.255127][T11726] 8021q: adding VLAN 0 to HW filter on device team0
[  262.256980][T12003] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  262.271230][T12003] vhci_hcd vhci_hcd.0: Device attached
[  262.276380][T11726] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  262.287190][T11726] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  262.321609][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state
[  262.328689][ T5835] bridge0: port 1(bridge_slave_0) entered forwarding state
[  262.349096][T12010] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(14)
[  262.352534][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state
[  262.355797][T12010] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  262.362876][ T5835] bridge0: port 2(bridge_slave_1) entered forwarding state
[  262.370507][T12010] vhci_hcd vhci_hcd.0: Device attached
[  262.491990][T11722] veth1_macvtap: entered promiscuous mode
[  262.508321][T12003] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(13)
[  262.511030][T11722] batman_adv: batadv0: Interface activated: batadv_slave_0
[  262.515281][T12003] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  262.528501][T11722] batman_adv: batadv0: Interface activated: batadv_slave_1
[  262.530056][T12003] vhci_hcd vhci_hcd.0: Device attached
[  262.541460][ T3392] usb 3-1: new low-speed USB device number 4 using vhci_hcd
[  262.547694][   T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  262.564275][   T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  262.567698][T12010] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(16)
[  262.579935][T12010] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  262.587659][T12010] vhci_hcd vhci_hcd.0: Device attached
[  262.594120][   T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  262.604138][T12017] netlink: 'syz.2.2829': attribute type 4 has an invalid length.
[  262.615526][   T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  262.646231][T11726] 8021q: adding VLAN 0 to HW filter on device batadv0
[  262.705114][T12003] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(18)
[  262.711781][T12003] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  262.719465][T12003] vhci_hcd vhci_hcd.0: Device attached
[  262.748573][T12003] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  262.761891][T12003] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  262.770430][T12038] Cannot find add_set index 0 as target
[  262.781354][T12003] vhci_hcd vhci_hcd.0: port 0 already used
[  262.849108][T12050] loop5: detected capacity change from 0 to 1024
[  262.849161][T12022] vhci_hcd: connection closed
[  262.849299][ T5819] vhci_hcd vhci_hcd.1: stop threads
[  262.856402][T12031] vhci_hcd: connection closed
[  262.860368][ T5819] vhci_hcd vhci_hcd.1: release socket
[  262.875674][ T5819] vhci_hcd vhci_hcd.1: disconnect device
[  262.882803][T11726] veth0_vlan: entered promiscuous mode
[  262.891044][T11726] veth1_vlan: entered promiscuous mode
[  262.891797][T12011] vhci_hcd: connection closed
[  262.896736][T12018] vhci_hcd: connection closed
[  262.896946][T12004] vhci_hcd: connection reset by peer
[  262.901502][T12008] vhci_hcd: connection closed
[  262.917311][T12050] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  262.935241][T11726] veth0_macvtap: entered promiscuous mode
[  262.941554][ T5819] vhci_hcd vhci_hcd.1: stop threads
[  262.946892][ T5819] vhci_hcd vhci_hcd.1: release socket
[  262.952438][ T5819] vhci_hcd vhci_hcd.1: disconnect device
[  262.961996][T11726] veth1_macvtap: entered promiscuous mode
[  262.965893][T12050] EXT4-fs error (device loop5): ext4_empty_dir:3107: inode #11: block 623: comm syz.5.2834: Attempting to read directory block (623) that is past i_size (638464)
[  262.972781][ T5819] vhci_hcd vhci_hcd.1: stop threads
[  262.989198][ T5819] vhci_hcd vhci_hcd.1: release socket
[  262.990646][T11726] batman_adv: batadv0: Interface activated: batadv_slave_0
[  262.994695][ T5819] vhci_hcd vhci_hcd.1: disconnect device
[  263.010777][ T5819] vhci_hcd vhci_hcd.1: stop threads
[  263.016144][ T5819] vhci_hcd vhci_hcd.1: release socket
[  263.021888][ T5819] vhci_hcd vhci_hcd.1: disconnect device
[  263.022664][T11726] batman_adv: batadv0: Interface activated: batadv_slave_1
[  263.031906][ T5819] vhci_hcd vhci_hcd.1: stop threads
[  263.039993][ T5819] vhci_hcd vhci_hcd.1: release socket
[  263.045488][ T5819] vhci_hcd vhci_hcd.1: disconnect device
[  263.051351][T12050] EXT4-fs (loop5): Remounting filesystem read-only
[  263.056295][ T5842] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  263.066809][ T5819] vhci_hcd vhci_hcd.1: stop threads
[  263.072084][ T5819] vhci_hcd vhci_hcd.1: release socket
[  263.077510][ T5819] vhci_hcd vhci_hcd.1: disconnect device
[  263.095215][ T5842] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  263.095513][T11722] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  263.113942][ T5842] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  263.123900][ T5842] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  263.335364][T12079] Cannot find add_set index 0 as target
[  263.342189][T12075] netlink: 'syz.0.2842': attribute type 4 has an invalid length.
[  263.484507][T12086] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  263.491866][T12086] IPv6: NLM_F_CREATE should be set when creating new route
[  263.499161][T12086] IPv6: NLM_F_CREATE should be set when creating new route
[  263.499316][T12090] loop5: detected capacity change from 0 to 1024
[  263.524382][T12090] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  263.560165][T12090] EXT4-fs error (device loop5): ext4_empty_dir:3107: inode #11: block 623: comm syz.5.2849: Attempting to read directory block (623) that is past i_size (638464)
[  263.586746][T12090] EXT4-fs (loop5): Remounting filesystem read-only
[  263.609296][T11722] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  263.628209][T12104] FAULT_INJECTION: forcing a failure.
[  263.628209][T12104] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  263.641383][T12104] CPU: 1 UID: 0 PID: 12104 Comm: syz.0.2853 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  263.641429][T12104] Tainted: [W]=WARN
[  263.641437][T12104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  263.641451][T12104] Call Trace:
[  263.641458][T12104]  <TASK>
[  263.641466][T12104]  __dump_stack+0x1d/0x30
[  263.641490][T12104]  dump_stack_lvl+0x95/0xd0
[  263.641545][T12104]  dump_stack+0x15/0x1b
[  263.641647][T12104]  should_fail_ex+0x265/0x280
[  263.641701][T12104]  should_fail+0xb/0x20
[  263.641865][T12104]  should_fail_usercopy+0x1a/0x20
[  263.641888][T12104]  _copy_from_user+0x1c/0xb0
[  263.641914][T12104]  simple_transaction_get+0xe2/0x130
[  263.641939][T12104]  selinux_transaction_write+0x9d/0x110
[  263.641972][T12104]  ? __pfx_selinux_transaction_write+0x10/0x10
[  263.641997][T12104]  vfs_write+0x269/0x960
[  263.642089][T12104]  ? __rcu_read_unlock+0x4f/0x70
[  263.642113][T12104]  ? __fget_files+0x184/0x1c0
[  263.642193][T12104]  ? mutex_lock+0x58/0x90
[  263.642222][T12104]  ksys_write+0xda/0x1a0
[  263.642243][T12104]  __x64_sys_write+0x40/0x50
[  263.642332][T12104]  x64_sys_call+0x2847/0x3000
[  263.642359][T12104]  do_syscall_64+0xca/0x2b0
[  263.642394][T12104]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  263.642419][T12104] RIP: 0033:0x7fc7be88f749
[  263.642502][T12104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  263.642525][T12104] RSP: 002b:00007fc7bd2f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  263.642579][T12104] RAX: ffffffffffffffda RBX: 00007fc7beae5fa0 RCX: 00007fc7be88f749
[  263.642682][T12104] RDX: 0000000000000056 RSI: 0000200000001a80 RDI: 0000000000000003
[  263.642705][T12104] RBP: 00007fc7bd2f7090 R08: 0000000000000000 R09: 0000000000000000
[  263.642735][T12104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  263.642751][T12104] R13: 00007fc7beae6038 R14: 00007fc7beae5fa0 R15: 00007fff76066798
[  263.642771][T12104]  </TASK>
[  263.889838][T12111] loop3: detected capacity change from 0 to 512
[  263.900939][T12109] loop1: detected capacity change from 0 to 512
[  263.912222][T12111] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  263.927573][T12109] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  263.932232][T12114] loop0: detected capacity change from 0 to 512
[  263.947280][T12114] EXT4-fs: inline encryption not supported
[  263.954696][T12109] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters
[  263.975498][T12111] EXT4-fs (loop3): 1 truncate cleaned up
[  263.981926][T12111] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  263.995273][T12114] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  264.010086][T12109] EXT4-fs (loop1): 1 truncate cleaned up
[  264.017000][T12109] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  264.020195][T12114] EXT4-fs (loop0): 1 truncate cleaned up
[  264.030311][T12111] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  264.057716][T12114] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  264.080487][T12114] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2858'.
[  264.134762][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  264.163243][T11726] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  264.233189][T12125] loop1: detected capacity change from 0 to 2048
[  264.348918][ T3302]  loop1: p2 p3 p7
[  264.453018][T12125]  loop1: p2 p3 p7
[  264.473949][   T29] kauditd_printk_skb: 141 callbacks suppressed
[  264.473969][   T29] audit: type=1400 audit(1767016061.518:4652): avc:  denied  { lock } for  pid=12135 comm="syz.2.2863" path="socket:[33792]" dev="sockfs" ino=33792 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1
[  264.533334][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[  264.536450][T10079] udevd[10079]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory
[  264.543292][T10899] udevd[10899]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory
[  264.562882][   T29] audit: type=1326 audit(1767016061.558:4653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12121 comm="syz.3.2861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa38a6f749 code=0x7ffc0000
[  264.586549][   T29] audit: type=1326 audit(1767016061.558:4654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12121 comm="syz.3.2861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa38a6f749 code=0x7ffc0000
[  264.592248][T12137] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  264.610716][   T29] audit: type=1400 audit(1767016061.608:4655): avc:  denied  { audit_read } for  pid=12139 comm="syz.1.2865" capability=37  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  264.651042][T12140] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  264.669529][T12140] ext4 filesystem being mounted at /527/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  264.684132][T12137] EXT4-fs error (device loop5): ext4_empty_dir:3107: inode #11: block 623: comm syz.5.2864: Attempting to read directory block (623) that is past i_size (638464)
[  264.717266][T12137] EXT4-fs (loop5): Remounting filesystem read-only
[  264.734428][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[  264.746179][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory
[  264.758043][   T29] audit: type=1400 audit(1767016061.818:4656): avc:  denied  { ioctl } for  pid=12139 comm="syz.1.2865" path="/527/file1/file1" dev="loop1" ino=15 ioctlcmd=0x9372 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  264.786622][T10079] udevd[10079]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory
[  264.802099][T12150] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2866'.
[  264.838552][   T29] audit: type=1400 audit(1767016061.908:4657): avc:  denied  { create } for  pid=12139 comm="syz.1.2865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  264.858359][   T29] audit: type=1400 audit(1767016061.908:4658): avc:  denied  { connect } for  pid=12139 comm="syz.1.2865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  264.878155][   T29] audit: type=1400 audit(1767016061.908:4659): avc:  denied  { ioctl } for  pid=12139 comm="syz.1.2865" path="socket:[34109]" dev="sockfs" ino=34109 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  264.902970][   T29] audit: type=1400 audit(1767016061.908:4660): avc:  denied  { write } for  pid=12139 comm="syz.1.2865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  264.922521][   T29] audit: type=1400 audit(1767016061.908:4661): avc:  denied  { audit_write } for  pid=12139 comm="syz.1.2865" capability=29  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  264.988481][ T5842] EXT4-fs error (device loop1): ext4_map_blocks:825: inode #15: block 3: comm kworker/u8:28: lblock 3 mapped to illegal pblock 3 (length 1)
[  265.023329][T11722] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  265.069556][ T5842] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117
[  265.081924][ T5842] EXT4-fs (loop1): This should not happen!! Data will be lost
[  265.081924][ T5842] 
[  265.119086][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  265.231179][T12155] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  265.244716][T12155] ext4 filesystem being mounted at /12/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  265.260256][T12157] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma?
[  265.271624][T12157] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2868'.
[  265.281058][T12157] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  265.293702][T11722] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  265.330348][T12165] IPv6: Can't replace route, no match found
[  265.355526][T12167] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  265.402319][T12167] EXT4-fs (loop1): 1 truncate cleaned up
[  265.422427][T12167] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  265.459362][T12167] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  265.490485][T12170] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2874'.
[  265.593663][T12190] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  265.598688][T10079]  loop5: p2 p3 p7
[  265.606763][T12190] ext4 filesystem being mounted at /532/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  265.695383][T12194] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2880'.
[  265.749523][T12197] xt_TCPMSS: Only works on TCP SYN packets
[  265.799181][T12197] netlink: 'syz.3.2882': attribute type 1 has an invalid length.
[  265.828495][T12182]  loop5: p2 p3 p7
[  265.962593][T12199] EXT4-fs: dax option not supported
[  266.052362][T12199] capability: warning: `syz.3.2882' uses deprecated v2 capabilities in a way that may be insecure
[  266.068923][T12205] tipc: New replicast peer: 255.255.255.255
[  266.075099][T12205] tipc: Enabled bearer <udp:syz2>, priority 10
[  266.083912][T12205] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2884'.
[  266.092994][T12205] tipc: Disabling bearer <udp:syz2>
[  266.184664][T12201] EXT4-fs (loop5): can't read group descriptor 0
[  266.202191][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop5p7, 10) failed: No such file or directory
[  266.204704][T10079] udevd[10079]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory
[  266.217707][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory
[  266.255995][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory
[  266.305909][ T3318] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  266.491820][T12224] tipc: Started in network mode
[  266.496773][T12224] tipc: Node identity ac14140f, cluster identity 4711
[  266.505259][T12224] tipc: New replicast peer: 255.255.255.255
[  266.511693][T12224] tipc: Enabled bearer <udp:syz2>, priority 10
[  266.520349][T12221] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2887'.
[  266.529990][T12221] tipc: Disabling bearer <udp:syz2>
[  266.694054][T12227] ==================================================================
[  266.702161][T12227] BUG: KCSAN: data-race in fifo_open / wait_for_partner
[  266.709244][T12227] 
[  266.711560][T12227] read-write to 0xffff88811b93ca2c of 4 bytes by task 12230 on cpu 1:
[  266.719724][T12227]  fifo_open+0x86/0x5d0
[  266.723893][T12227]  do_dentry_open+0x54b/0xa60
[  266.728669][T12227]  vfs_open+0x37/0x1e0
[  266.732733][T12227]  path_openat+0x1ddd/0x23b0
[  266.737350][T12227]  do_filp_open+0x109/0x230
[  266.741840][T12227]  do_sys_openat2+0xa6/0x150
[  266.746419][T12227]  __x64_sys_open+0xe6/0x110
[  266.751020][T12227]  x64_sys_call+0x166f/0x3000
[  266.755689][T12227]  do_syscall_64+0xca/0x2b0
[  266.760194][T12227]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  266.766095][T12227] 
[  266.768434][T12227] read to 0xffff88811b93ca2c of 4 bytes by task 12227 on cpu 0:
[  266.776047][T12227]  wait_for_partner+0xb5/0x1c0
[  266.780795][T12227]  fifo_open+0x462/0x5d0
[  266.785029][T12227]  do_dentry_open+0x54b/0xa60
[  266.789684][T12227]  vfs_open+0x37/0x1e0
[  266.793908][T12227]  path_openat+0x1ddd/0x23b0
[  266.798480][T12227]  do_filp_open+0x109/0x230
[  266.802983][T12227]  do_sys_openat2+0xa6/0x150
[  266.807556][T12227]  __x64_sys_open+0xe6/0x110
[  266.812132][T12227]  x64_sys_call+0x166f/0x3000
[  266.816898][T12227]  do_syscall_64+0xca/0x2b0
[  266.821389][T12227]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  266.827293][T12227] 
[  266.829618][T12227] value changed: 0x00000001 -> 0x00000002
[  266.835310][T12227] 
[  266.837626][T12227] Reported by Kernel Concurrency Sanitizer on:
[  266.843892][T12227] CPU: 0 UID: 0 PID: 12227 Comm: syz.0.2888 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  266.855238][T12227] Tainted: [W]=WARN
[  266.859042][T12227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  266.869088][T12227] ==================================================================
[  267.561497][ T3392] usb 3-1: enqueue for inactive port 0
[  267.567073][ T3392] usb 3-1: enqueue for inactive port 0
[  267.641548][ T3392] vhci_hcd vhci_hcd.1: vhci_device speed not set