last executing test programs:

23.089135243s ago: executing program 4 (id=10):
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000019240)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x478}, 0x0, 0xe3d08660d3cd4684})
io_uring_enter(0xffffffffffffffff, 0x92, 0x0, 0x0, 0x0, 0x0)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0))
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[], 0x7c}}, 0x4004944)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000019480)={&(0x7f0000019200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000019440)={&(0x7f00000192c0)={0x144, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}]}, 0x144}, 0x1, 0x0, 0x0, 0x880}, 0x20000800)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
r1 = gettid()
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
read$ptp(r2, 0x0, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000008c0), r3)
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=<r4=>0x0)
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_procfs(r5, &(0x7f0000000000)='map_files\x00')
mq_notify(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x16, 0x0, @tid=r5})
timer_settime(r4, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00')
pread64(r6, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000)
dup(0xffffffffffffffff)

22.182327235s ago: executing program 4 (id=23):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r2}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_WOL_GET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, r5, 0x1, 0x70bd2d, 0x0, {0x1b}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}}, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=<r8=>r6, @ANYRESOCT=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10)
r9 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r9, &(0x7f0000000000)={0x2a, 0x0, 0x2}, 0xc)
bind$qrtr(r9, &(0x7f00000000c0)={0x2a, 0x1}, 0xc)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r10}, 0x38)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r8, @ANYRES32=r3], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000180)='kfree\x00', r11}, 0x18)
r12 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341)
ioctl$USBDEVFS_IOCTL(r12, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect)
r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=<r14=>r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r15 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r13}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r13}, 0x20)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="e8000000190001002dbd7000fbdbdf2502202000ff02ff020018000008000100ac1414", @ANYRES64=r15, @ANYRES64=0x0, @ANYRES16=0x0, @ANYRES16=r14], 0xe8}, 0x1, 0x0, 0x0, 0x44050}, 0x1000)
r16 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ppoll(&(0x7f0000000700)=[{r16}], 0x1, 0x0, 0x0, 0x0)
ioctl$TIOCPKT(r16, 0x5420, &(0x7f0000000100)=0xcf5)
ioctl$TCSETS(r16, 0x5402, &(0x7f0000000280)={0x9, 0x6, 0x31, 0x10007, 0xc, "b21b516a79760675521d52964e421437d4e1c0"})
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r17 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r17, &(0x7f0000000200)={0x0, 0x4000, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20040040)

21.096393723s ago: executing program 4 (id=33):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94)
prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='}\\)\\\x00')
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000340)='kmem_cache_free\x00', r0}, 0x18)
r1 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x10e, &(0x7f0000000340)={[{@init_itable_val={'init_itable', 0x3d, 0x957}}, {@noinit_itable}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x52}}, {@stripe={'stripe', 0x3d, 0x8}}, {@orlov}, {@grpid}]}, 0x4, 0x46b, &(0x7f00000009c0)="$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")
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
close_range(r1, 0xffffffffffffffff, 0x0)

21.000176691s ago: executing program 4 (id=34):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3800480, &(0x7f0000002200), 0x45, 0x786, &(0x7f00000007c0)="$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")
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000005c40), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000005e40)={0x0, 0x0, &(0x7f0000005e00)={&(0x7f0000000580)=ANY=[@ANYBLOB="bcffa2bc34aeaf3375916cc84fd1976cd1546100"/34, @ANYRES16=r1, @ANYBLOB="21008d000000fbdbdf25030000000c0001800600010002000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x8004)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x6c, r1, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x800}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x10}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4048010}, 0x8000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
symlink(0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r3, 0x0, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x7, @empty, 0x3aa7}, @ib={0x1b, 0xffff, 0x0, {}, 0x0, 0xfffffffffffffffc, 0x6}}}, 0x118)
write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000480), r3}}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000400007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
modify_ldt$write(0x1, &(0x7f0000000080)={0x1000, 0x1000, 0xfffffffffffffffe}, 0x10)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
ptrace$setregs(0xd, r4, 0x930, &(0x7f0000000800))
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x88, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x0, [0xb, 0x4, 0xb, 0x6, 0x3, 0x6, 0xf, 0xa, 0xd, 0x4, 0xb, 0xb, 0xe, 0xe, 0xf, 0xc], 0x1, [0xff, 0x3ac0, 0x2439, 0x5, 0x8a90, 0x74, 0xcc12, 0x5, 0x8, 0x1, 0x4, 0x1, 0x5, 0x9, 0x3, 0x4], [0x7, 0xfff, 0x9e, 0x0, 0xf7a2, 0x5, 0x5, 0x67, 0x1ff, 0x800, 0x10, 0xa199, 0x3ff, 0x3, 0xeb18, 0x2]}}}}]}, 0x88}}, 0x0)
ptrace$poke(0x21, r4, 0x0, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@cgroup, 0xffffffffffffffff, 0x17, 0x2010}, 0x20)
open(&(0x7f0000000540)='./bus\x00', 0x24700, 0x100)

20.754597371s ago: executing program 4 (id=38):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x7}, 0x18)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/5, 0x204000, 0x1000}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', <r4=>0x0})
setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000040)=0x4000, 0x4)
bind$xdp(r2, &(0x7f00000002c0)={0x2c, 0x4, r4, 0x2000}, 0x10)

20.327322105s ago: executing program 4 (id=45):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000008000000020000000400000005000000", @ANYRES32, @ANYBLOB="000000000000001c00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
close(r1)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10)
prlimit64(0x0, 0xa, &(0x7f00000004c0)={0x6, 0x2}, &(0x7f0000000500))
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x1, 0xa}, 0x1184c, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
ppoll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x50}, {0xffffffffffffffff, 0x4000}], 0x2, &(0x7f0000000340), &(0x7f00000003c0)={[0x9]}, 0x8)

20.248015031s ago: executing program 32 (id=45):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000008000000020000000400000005000000", @ANYRES32, @ANYBLOB="000000000000001c00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
close(r1)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10)
prlimit64(0x0, 0xa, &(0x7f00000004c0)={0x6, 0x2}, &(0x7f0000000500))
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x1, 0xa}, 0x1184c, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
ppoll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x50}, {0xffffffffffffffff, 0x4000}], 0x2, &(0x7f0000000340), &(0x7f00000003c0)={[0x9]}, 0x8)

4.827575632s ago: executing program 1 (id=212):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xfcfa, &(0x7f0000000280)={&(0x7f0000000140)=@deltfilter={0x0, 0x2d, 0x200, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0x4, 0xe}, {0x4}}}, 0x24}}, 0x50)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'dummy0\x00'})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[], 0xb4}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x800000001fe, 0x2102)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000300))
r4 = inotify_init()
readv(r4, &(0x7f0000000140)=[{&(0x7f0000000340)=""/263, 0x107}], 0x1)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = dup(r2)
ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x1c, 0x2, 0x0, 0x1, 0x0})
socket$netlink(0x10, 0x3, 0x0)
socket$kcm(0x11, 0x200000000000002, 0x300)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
close(0x3)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r6, r7, 0x0, 0x20000023896)
close(r7)
gettid()
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50)

2.943898783s ago: executing program 0 (id=231):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r2}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_WOL_GET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, r5, 0x1, 0x70bd2d, 0x0, {0x1b}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}}, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=<r8=>r6, @ANYRESOCT=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10)
r9 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r9, &(0x7f0000000000)={0x2a, 0x0, 0x2}, 0xc)
bind$qrtr(r9, &(0x7f00000000c0)={0x2a, 0x1}, 0xc)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r10}, 0x38)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r8, @ANYRES32=r3], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000180)='kfree\x00', r11}, 0x18)
r12 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341)
ioctl$USBDEVFS_IOCTL(r12, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect)
r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=<r14=>r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r15 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r13}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r13}, 0x20)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="e8000000190001002dbd7000fbdbdf2502202000ff02ff020018000008000100ac1414", @ANYRES64=r15, @ANYRES64=0x0, @ANYRES16=0x0, @ANYRES16=r14], 0xe8}, 0x1, 0x0, 0x0, 0x44050}, 0x1000)
r16 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ppoll(&(0x7f0000000700)=[{r16}], 0x1, 0x0, 0x0, 0x0)
ioctl$TIOCPKT(r16, 0x5420, &(0x7f0000000100)=0xcf5)
ioctl$TCSETS(r16, 0x5402, &(0x7f0000000280)={0x9, 0x6, 0x31, 0x10007, 0xc, "b21b516a79760675521d52964e421437d4e1c0"})
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r17 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r17, &(0x7f0000000200)={0x0, 0x4000, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20040040)

2.666010796s ago: executing program 5 (id=235):
capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)={0x0, 0xfffffbfe, 0x0, 0x0, 0x0, 0x6})
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10)
mount$9p_tcp(0x0, &(0x7f0000000440)='.\x00', &(0x7f00000006c0), 0x0, &(0x7f0000000500)=ANY=[@ANYRES64])

2.650565767s ago: executing program 5 (id=236):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newqdisc={0x3a, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0xffffffffffffffd8}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x6c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="54a9518a0d7ba0d930a12a00000010000005000000000100000000000000f0a8fdc24270f60000000000d91943e2", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010067656e65766500001c0002800500040008000000050003000100000005000d000100000008000a00", @ANYRES32=r2, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

2.539656396s ago: executing program 5 (id=238):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1e, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000032500000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000000f000000bf91000000000000b7020000002000008500000084000000b70000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, &(0x7f0000000600))
r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$tun(r4, &(0x7f0000000600)=ANY=[@ANYBLOB="000401040900006201"], 0x32)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)=[0x7], 0x0, 0x0, 0x1}}, 0x40)
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="640000001900010000000000fbdbdf251d0109005000128049"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r3}, 0x10)
utimensat(0xffffffffffffffff, 0x0, 0x0, 0x100)
r8 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
syz_usb_disconnect(r8)
syz_usb_connect$cdc_ncm(0x2, 0xf3, &(0x7f0000000540)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe1, 0x2, 0x1, 0x11, 0x20, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "4812987e"}, {0x5, 0x24, 0x0, 0xdf}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x0, 0x3, 0x5}, {0x6, 0x24, 0x1a, 0x401, 0x14}, [@mdlm_detail={0x6e, 0x24, 0x13, 0xee, "518feaf0692c135da9476dc0a5eef1567e69a81e949fcd31f4f7d3c3b4a03d43334ecee80f3f7f40ef9a41d4cc2b43f7aa3d305c6fc23775f803abf2a9fa26b1f5b65555ccd23da8bb42fee32af87080a01fb92dc3d08a95ee561798b7881364c756175786ab8d696ff5"}, @network_terminal={0x7, 0x24, 0xa, 0x5, 0x7, 0x2, 0x80}, @mbim={0xc, 0x24, 0x1b, 0x401, 0x3, 0x5, 0x6, 0x1, 0x2}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6, 0x4, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf1, 0x2, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x26, 0xd, 0x7}}}}}}}]}}, 0x0)
chdir(&(0x7f0000000400)='./file0\x00')
creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10)

2.043562846s ago: executing program 0 (id=241):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1e, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000032500000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000000f000000bf91000000000000b7020000002000008500000084000000b70000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, &(0x7f0000000600))
r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$tun(r4, &(0x7f0000000600)=ANY=[@ANYBLOB="000401040900006201"], 0x32)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)=[0x7], 0x0, 0x0, 0x1}}, 0x40)
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="640000001900010000000000fbdbdf251d0109005000128049"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r3}, 0x10)
utimensat(0xffffffffffffffff, 0x0, 0x0, 0x100)
r8 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
syz_usb_disconnect(r8)
syz_usb_connect$cdc_ncm(0x2, 0xf3, &(0x7f0000000540)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe1, 0x2, 0x1, 0x11, 0x20, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "4812987e"}, {0x5, 0x24, 0x0, 0xdf}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x0, 0x3, 0x5}, {0x6, 0x24, 0x1a, 0x401, 0x14}, [@mdlm_detail={0x6e, 0x24, 0x13, 0xee, "518feaf0692c135da9476dc0a5eef1567e69a81e949fcd31f4f7d3c3b4a03d43334ecee80f3f7f40ef9a41d4cc2b43f7aa3d305c6fc23775f803abf2a9fa26b1f5b65555ccd23da8bb42fee32af87080a01fb92dc3d08a95ee561798b7881364c756175786ab8d696ff5"}, @network_terminal={0x7, 0x24, 0xa, 0x5, 0x7, 0x2, 0x80}, @mbim={0xc, 0x24, 0x1b, 0x401, 0x3, 0x5, 0x6, 0x1, 0x2}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6, 0x4, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf1, 0x2, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x26, 0xd, 0x7}}}}}}}]}}, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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")
ioctl$EVIOCRMFF(r8, 0x41015500, &(0x7f0000000500))

1.774001478s ago: executing program 5 (id=242):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0, 0x0, 0x9}, 0x18)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000007000000faffffff95"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x94)
r2 = socket$netlink(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000400000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'bond0\x00', <r4=>0x0})
r5 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x50)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0))
pipe(&(0x7f0000000080)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$sock_inet6_SIOCDIFADDR(r8, 0x8936, &(0x7f0000000140)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x54, r4})
splice(r1, 0x0, r3, 0x0, 0x5, 0xc)
vmsplice(r7, &(0x7f00000005c0)=[{&(0x7f0000000180)="04", 0x1}], 0x1, 0x6)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x7, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff9}, 0x94)
ioctl$sock_inet_udp_SIOCINQ(r8, 0x541b, 0x0)
ioctl$EVIOCGABS0(r8, 0x80184540, &(0x7f0000019540)=""/146)
socket(0x10, 0x3, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000019440)={0x6, 0x1b, &(0x7f0000000700)=ANY=[@ANYBLOB="18110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000820000009b3400010400000018130000", @ANYRES32=r5, @ANYBLOB="000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018630000100000000000000002000000181a0000", @ANYRES32, @ANYRES8=r5, @ANYRES32, @ANYBLOB="0000001e0700800018800000010400000000aac75b6ada67f6804faac0425d4e6d73158029cf05bc307e4c8fa3fc0c6f8e038d907b83dbfde5b6cd8c92210bdc03c877af"], &(0x7f0000000000)='GPL\x00', 0x0, 0x70, &(0x7f0000019300)=""/112, 0x40f00, 0x2, '\x00', 0x0, 0x25, r8, 0x8, &(0x7f0000019380)={0x0, 0x1}, 0x8, 0x10, &(0x7f00000193c0)={0x1, 0xe, 0x893, 0xfffffff7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000019400)=[r7], 0x0, 0x10, 0x10000}, 0x94)
futex(&(0x7f0000000000)=0x2, 0xb, 0x2, 0x0, &(0x7f00000000c0)=0x2, 0x2)
futex(&(0x7f000000cffc)=0x4, 0x9, 0x4, 0x0, 0x0, 0x400000)
futex(&(0x7f000000cffc)=0x1, 0x5, 0x4, 0x0, &(0x7f0000000000), 0x0)
getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c}, 0x94)
sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="010027bd7000fbdbdf250f00000005002f000100000005002ae800000000050029000100000008000300", @ANYRES32], 0x54}, 0x1, 0x0, 0x0, 0x24004040}, 0x24008824)

1.385593959s ago: executing program 3 (id=247):
r0 = socket$qrtr(0x2a, 0x2, 0x0) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) (async)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) (async)
recvmmsg$unix(r2, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000003100)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000800)=[{0x0}], 0x1}}], 0x2, 0x400122a0, 0x0) (async)
setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec010000000040"], 0x310) (async)
sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000400)={[{@errors_continue}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x9}}, {@errors_remount}, {@init_itable}]}, 0x0, 0x492, &(0x7f0000000940)="$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")
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newsa={0xf0, 0x10, 0x413, 0x70bd2c, 0x25dfdbf9, {{@in6=@dev, @in=@remote, 0x0, 0x1}, {@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x32}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1ebf5fdf}, {0x0, 0x0, 0x0, 0x90}, {}, 0x4, 0x0, 0xa, 0x2, 0x0, 0xa0}}, 0xf0}}, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffed7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10)
connect$qrtr(r0, &(0x7f0000000000)={0x2a, 0x1}, 0xc) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000203010100000700000000000400000a0800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x2000c010) (async)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84) (async)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x4e24, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7177}]}, &(0x7f0000000380)=0x10) (async)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) (async)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r8=>0x0}, &(0x7f0000000300)=0x8) (async)
r9 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_CONTEXT(r9, 0x84, 0x11, &(0x7f00000008c0)={r8, 0x3}, &(0x7f0000000900)=0x8) (async)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
close(r10) (async)
bind$qrtr(r0, &(0x7f00000000c0)={0x2a, 0x1, 0x7fff}, 0xc) (async)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff}) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond0\x00', 0x20})
ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x89fc, &(0x7f0000000080))

1.331847183s ago: executing program 3 (id=248):
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet(0x2, 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$l2tp6(0xa, 0x2, 0x73)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_sctp(0xa, 0x801, 0x84)
socket$igmp(0x2, 0x3, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0xb)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$pppoe(0x18, 0x1, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (fail_nth: 5)

1.110526711s ago: executing program 3 (id=249):
r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x88182, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000002500)='\f7', 0x2}, {&(0x7f0000000080)='0', 0x1}], 0x2) (fail_nth: 5)

1.099639182s ago: executing program 0 (id=250):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="008000000000000080800017000000006df3905f1cfe3b4ea9effde765772c7ce86242df27a840d737e3ad5023e23cbfbcb380db05aad530c576baae12a1dccd9c1c279f6340b5ac59af1195569b2c848c0278961aa2161c65dc739f4ac04f28c755b6ed438c740db5d554f26b0c646eec700a8f840c7288", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r1 = socket(0x10, 0x803, 0x2)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f00000000c0)=@ethtool_stats})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000000000006111500008000000060000000000000095"], 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94)
syz_io_uring_setup(0x24fa, 0x0, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000400)='kmem_cache_free\x00', r5}, 0x10)
open_tree(0xffffffffffffffff, &(0x7f0000000180)='./file0/file0/file0\x00', 0x8101)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r7, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x1, 0x803, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES8=r4, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRESOCT=r4], 0x54}}, 0x0)
socket$packet(0x11, 0x3, 0x300)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@dellink={0x20, 0x11, 0x1, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, 0x48010, 0x602a1}}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r11}, 0x10)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r12}, 0x10)
bpf$MAP_CREATE(0x2000000000000000, &(0x7f00000005c0)=ANY=[@ANYBLOB="0600000004000000be7000005c00000000000000", @ANYRES32, @ANYBLOB="0000e3ff0000c2ecc133d02c030700"/27, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x50)

1.023750618s ago: executing program 3 (id=251):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r2}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_WOL_GET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, r5, 0x1, 0x70bd2d, 0x0, {0x1b}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}}, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=<r8=>r6, @ANYRESOCT=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10)
r9 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r9, &(0x7f0000000000)={0x2a, 0x0, 0x2}, 0xc)
bind$qrtr(r9, &(0x7f00000000c0)={0x2a, 0x1}, 0xc)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r10}, 0x38)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r8, @ANYRES32=r3], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000180)='kfree\x00', r11}, 0x18)
r12 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341)
ioctl$USBDEVFS_IOCTL(r12, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect)
r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=<r14=>r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r15 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r13}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r13}, 0x20)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="e8000000190001002dbd7000fbdbdf2502202000ff02ff020018000008000100ac1414", @ANYRES64=r15, @ANYRES64=0x0, @ANYRES16=0x0, @ANYRES16=r14], 0xe8}, 0x1, 0x0, 0x0, 0x44050}, 0x1000)
r16 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ppoll(&(0x7f0000000700)=[{r16}], 0x1, 0x0, 0x0, 0x0)
ioctl$TIOCPKT(r16, 0x5420, &(0x7f0000000100)=0xcf5)
ioctl$TCSETS(r16, 0x5402, &(0x7f0000000280)={0x9, 0x6, 0x31, 0x10007, 0xc, "b21b516a79760675521d52964e421437d4e1c0"})
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r17 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r17, &(0x7f0000000200)={0x0, 0x4000, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20040040)

955.288663ms ago: executing program 0 (id=252):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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")
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffefe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
getdents(r2, 0x0, 0x0)

926.677616ms ago: executing program 5 (id=253):
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f00000004c0), 0x1, 0x57b, &(0x7f0000000640)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x6e)
write$binfmt_elf64(r1, &(0x7f0000000ac0)=ANY=[], 0x5b0)
open(&(0x7f0000000180)='./file1\x00', 0x109042, 0x88)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[], 0x0}, 0x94)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c)
connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32)
writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1)

855.751442ms ago: executing program 0 (id=254):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1e, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000032500000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000000f000000bf91000000000000b7020000002000008500000084000000b70000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, &(0x7f0000000600))
r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$tun(r4, &(0x7f0000000600)=ANY=[@ANYBLOB="000401040900006201"], 0x32)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)=[0x7], 0x0, 0x0, 0x1}}, 0x40)
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="640000001900010000000000fbdbdf251d0109005000128049"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r3}, 0x10)
utimensat(0xffffffffffffffff, 0x0, 0x0, 0x100)
r8 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
syz_usb_disconnect(r8)
syz_usb_connect$cdc_ncm(0x2, 0xf3, &(0x7f0000000540)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe1, 0x2, 0x1, 0x11, 0x20, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "4812987e"}, {0x5, 0x24, 0x0, 0xdf}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x0, 0x3, 0x5}, {0x6, 0x24, 0x1a, 0x401, 0x14}, [@mdlm_detail={0x6e, 0x24, 0x13, 0xee, "518feaf0692c135da9476dc0a5eef1567e69a81e949fcd31f4f7d3c3b4a03d43334ecee80f3f7f40ef9a41d4cc2b43f7aa3d305c6fc23775f803abf2a9fa26b1f5b65555ccd23da8bb42fee32af87080a01fb92dc3d08a95ee561798b7881364c756175786ab8d696ff5"}, @network_terminal={0x7, 0x24, 0xa, 0x5, 0x7, 0x2, 0x80}, @mbim={0xc, 0x24, 0x1b, 0x401, 0x3, 0x5, 0x6, 0x1, 0x2}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6, 0x4, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf1, 0x2, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x26, 0xd, 0x7}}}}}}}]}}, 0x0)
ioctl$EVIOCRMFF(r8, 0x41015500, &(0x7f0000000500))

849.512552ms ago: executing program 5 (id=255):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8f70000000000ff000044850000000e000000650000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000140)=0xffffffffffffffff, 0x12)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kfree\x00', r0}, 0x18)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x58, 0x0, 0x9, 0x5, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xfffffff7}}, @NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000800}, 0x4040040)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="611528000000000061138c0000000000bfa00000000000001503000008004e002d3501000000000095004100000000006916000000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffbd4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076ebae3f55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932c9a6aa57f1ad2e99e0e67ab93716d20000009fbb0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000f4000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b30410856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff010404faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202ee1192b81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9b5a8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18487b6feb89752cd600000000abc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d5454d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18533d4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684e62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961cf4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fd0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1978a04bbff4bbe0000000000000000000000000044585397feaadda3fcc64e7b0c08f7ac5c64cb190f1712a3b10fc34eb758705f1751d8c8b712eb39d2b8ad44f129c2c9aedb15"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]})

622.13381ms ago: executing program 1 (id=257):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000100)={'team0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x4, r3}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x2000a804)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20000000110001010000", @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0)

606.710412ms ago: executing program 2 (id=258):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0)
getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
timer_create(0x2, 0x0, &(0x7f0000000000)=<r4=>0x0)
timer_settime(r4, 0x1, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_gettime(r4, &(0x7f0000000040))
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14)
sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r5}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xdc, 0xdc, 0x5, [@volatile={0x3, 0x0, 0x0, 0x9, 0x3}, @var={0x6, 0x0, 0x0, 0xe, 0x1, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xfffff000}}, @union={0x4, 0x2, 0x0, 0x5, 0x0, 0x6, [{0x6, 0x4, 0x10c99f7}, {0x0, 0x1, 0x1000}]}, @enum64={0xe, 0x9, 0x0, 0x13, 0x0, 0x1, [{0x1, 0xfffffff8, 0x3}, {0xd, 0xf, 0x10}, {0x7, 0x5, 0x9}, {0xd, 0x9, 0x1}, {0xd, 0x7, 0x5}, {0xb, 0x3, 0xfffffffe}, {0xe, 0x0, 0x6}, {0x1, 0x8, 0x68b5}, {0xc, 0x2, 0x7}]}, @volatile={0x8, 0x0, 0x0, 0x9, 0x4}]}, {0x0, [0x5f, 0x30, 0x5f]}}, &(0x7f0000000400)=""/152, 0xf9, 0x98, 0x0, 0xfffeffff, 0x10000}, 0x28)
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb01001800000000000000b4000000b4000000060000000500000006000085050000000c00000005000000010000001000000001000000ffffffff050000000800000008000000030080000f00001007000000040000000104000004000000030000000b00000010000000000000020000000006000000000000100400000004000000000009010000000400000004000004010000000e00000005000000ee9e230a0e00000004000000001000000900000004000000030000000e000000040000001000000000006f2e610000"], &(0x7f0000000040)=""/41, 0xd2, 0x29, 0x1, 0xfffffff8}, 0x28)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r10}, 0x10)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000680)={'syztnl2\x00', &(0x7f0000000600)={'gretap0\x00', <r11=>0x0, 0x10, 0x8, 0xd, 0x3, {{0x15, 0x4, 0x1, 0x5, 0x54, 0x64, 0x0, 0xa6, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, {[@timestamp_addr={0x44, 0x2c, 0xd6, 0x1, 0x6, [{@rand_addr=0x64010100}, {@loopback, 0x1}, {@loopback}, {@multicast2, 0x100}, {@remote, 0x7f}]}, @end, @cipso={0x86, 0x10, 0x3, [{0x1, 0xa, "5b09fbc87fb9072a"}]}]}}}}})
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000740)={0x2, <r12=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="0800000000000000300800f0ffffff950000000000000000000000000000000082f652a55fb3709e0b0afcfe408cf0795783382047946f8d253a7e0a7e7ed8bee7c370b9822dffd401174ad93831892d4adeb23c63003eec774b8313d43f1ee29b522d5171e2ffd962260b3d9d32e511f67d1dcdd8e22f6c6282dd898250f2dab052bb303135ea03691a966273d9254a56c441"], &(0x7f0000000300)='syzkaller\x00', 0x101, 0xd, &(0x7f00000003c0)=""/13, 0x41100, 0x44, '\x00', r11, @fallback=0x22, r7, 0x8, &(0x7f00000006c0)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000700)={0x0, 0x9, 0xcf, 0x2}, 0x10, r12, r10, 0x7, &(0x7f0000000780)=[r8, r8, r8], &(0x7f00000007c0)=[{0x0, 0x4, 0x3, 0x4}, {0x0, 0x1, 0xb, 0xb}, {0x2, 0x1, 0x9}, {0x2, 0x3, 0x1, 0x5}, {0x0, 0x5, 0xb, 0x7}, {0x2, 0x4, 0x4}, {0x1, 0x1, 0x9, 0x4}], 0x10, 0x3}, 0x94)
r13 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)=@generic={&(0x7f0000000680)='./file0\x00', 0x0, 0x10}, 0x18)
r14 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x9, '\x00', r3, 0xffffffffffffffff, 0x2, 0x0, 0x3}, 0x50)
r15 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@bloom_filter={0x1e, 0x6, 0x9, 0xfffff979, 0x0, 0xffffffffffffffff, 0x7, '\x00', r3, r0, 0x1, 0x3, 0x2, 0x9}, 0x50)
r16 = open_tree(0xffffffffffffff9c, &(0x7f0000000980)='./file0\x00', 0x1000)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_lsm={0x1d, 0x22, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000600000000000000cd00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000008500000088000000950000000000000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70200000000000085000000860000001df30400fcffffffbd000000ffffffff731110000400000095000000000000001801000020696c2500000000002020207b1af8ff00000000bf9800000000000007010000f8ffffffb702000008000000b7030000080000008500000006000000c355c0ffffffffffbf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0xfffffe00, 0x3, &(0x7f0000000100)=""/3, 0x41000, 0x20, '\x00', r3, 0x1b, r6, 0x8, &(0x7f0000000340)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000640)={0x3, 0xb, 0x6, 0x4}, 0x10, r12, 0x0, 0x1, &(0x7f00000009c0)=[r13, r14, 0x1, r15, r16], &(0x7f0000000a00)=[{0x1, 0x1, 0xb, 0x1}], 0x10, 0x1ff}, 0x94)

582.178164ms ago: executing program 1 (id=259):
capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)={0x0, 0xfffffbfe, 0x0, 0x0, 0x0, 0x6})
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10)
mount$9p_tcp(0x0, &(0x7f0000000440)='.\x00', &(0x7f00000006c0), 0x0, &(0x7f0000000500)=ANY=[@ANYRES64])

528.363118ms ago: executing program 2 (id=260):
socket$packet(0x11, 0x3, 0x300)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38a"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'netdevsim0\x00'})
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000010)
pwritev(r0, 0x0, 0x0, 0x5, 0x3)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
socket(0x1, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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")
r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
ftruncate(r1, 0x2007ffc)
sendfile(r1, r1, 0x0, 0x800000009)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910300000000000730a00ff000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x1a, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f0000000680)='+}[@\x00[$oB\xfa=\xee\xc4F\xba\xed\x97')
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18)
r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00')
preadv(r4, &(0x7f0000000240)=[{&(0x7f0000002140)=""/4088, 0xff8}], 0x4, 0x4, 0x0)
fsetxattr(r2, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000080)='@\x00', 0x7c8, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='kmem_cache_free\x00', r5, 0x0, 0x6}, 0x18)
statfs(&(0x7f0000000440)='./file0\x00', 0x0)

524.321918ms ago: executing program 1 (id=261):
r0 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0)
writev(r0, 0x0, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r2}, 0x10)
copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10)
recvmsg(0xffffffffffffffff, 0x0, 0x41fd)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3014850, &(0x7f0000000140)={[{@acl}, {@barrier_val={'barrier', 0x3d, 0x1003}}, {@errors_remount}, {@noauto_da_alloc}, {@dioread_lock}]}, 0x1, 0x4e4, &(0x7f0000002d40)="$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")
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0)

435.464836ms ago: executing program 1 (id=262):
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f00000004c0), 0x1, 0x57b, &(0x7f0000000640)="$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")
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000ac0)=ANY=[], 0x5b0)
r1 = open(&(0x7f0000000180)='./file1\x00', 0x109042, 0x88)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdff2f129500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r2}, 0x10)
fallocate(r1, 0x0, 0x8, 0x7000000)

349.400152ms ago: executing program 1 (id=263):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0, 0x0, 0x9}, 0x18)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000007000000faffffff95"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x94)
r2 = socket$netlink(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000400000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'bond0\x00', <r4=>0x0})
r5 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x50)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0))
pipe(&(0x7f0000000080)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$sock_inet6_SIOCDIFADDR(r8, 0x8936, &(0x7f0000000140)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x54, r4})
splice(r1, 0x0, r3, 0x0, 0x5, 0xc)
vmsplice(r7, &(0x7f00000005c0)=[{&(0x7f0000000180)="04", 0x1}], 0x1, 0x6)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x7, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff9}, 0x94)
ioctl$sock_inet_udp_SIOCINQ(r8, 0x541b, 0x0)
ioctl$EVIOCGABS0(r8, 0x80184540, &(0x7f0000019540)=""/146)
socket(0x10, 0x3, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000019440)={0x6, 0x1b, &(0x7f0000000700)=ANY=[@ANYBLOB="18110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000820000009b3400010400000018130000", @ANYRES32=r5, @ANYBLOB="000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018630000100000000000000002000000181a0000", @ANYRES32, @ANYRES8=r5, @ANYRES32, @ANYBLOB="0000001e0700800018800000010400000000aac75b6ada67f6804faac0425d4e6d73158029cf05bc307e4c8fa3fc0c6f8e038d907b83dbfde5b6cd8c92210bdc03c877af"], &(0x7f0000000000)='GPL\x00', 0x0, 0x70, &(0x7f0000019300)=""/112, 0x40f00, 0x2, '\x00', 0x0, 0x25, r8, 0x8, &(0x7f0000019380)={0x0, 0x1}, 0x8, 0x10, &(0x7f00000193c0)={0x1, 0xe, 0x893, 0xfffffff7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000019400)=[r7], 0x0, 0x10, 0x10000}, 0x94)
futex(&(0x7f0000000000)=0x2, 0xb, 0x2, 0x0, &(0x7f00000000c0)=0x2, 0x2)
futex(&(0x7f000000cffc)=0x4, 0x9, 0x4, 0x0, 0x0, 0x400000)
futex(&(0x7f000000cffc)=0x1, 0x5, 0x4, 0x0, &(0x7f0000000000), 0x0)
getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c}, 0x94)
sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB='T\x00', @ANYRES16, @ANYBLOB="010027bd7000fbdbdf250f00000005002f000100000005002ae800000000050029000100000008000300", @ANYRES32], 0x54}, 0x1, 0x0, 0x0, 0x24004040}, 0x24008824)

256.59965ms ago: executing program 2 (id=264):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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")
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffefe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
getdents(r2, 0x0, 0x0)

192.615055ms ago: executing program 3 (id=265):
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet(0x2, 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$l2tp6(0xa, 0x2, 0x73)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_sctp(0xa, 0x801, 0x84)
socket$igmp(0x2, 0x3, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0xb)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$pppoe(0x18, 0x1, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x30000, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0)

192.057215ms ago: executing program 2 (id=266):
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f00000004c0), 0x1, 0x57b, &(0x7f0000000640)="$eJzs3T9sG9UfAPDvXeJf/+VHigQSVB0qQCpSVScpLRSmdkUUVeqAxAKR40ZVnDiKHWiiDOleITogQF3KBgMjiIEBsTCysoCYkSoagdR0AKPznzRN7OC0TYziz0e6+L17Z3/f+fx99p3ucgH0rWPZnzTi2Yi4mEQMr2sbjGbjscZyqytLhXsrS4UkarVLvyeRRMTdlaVCa/mk+XgoIpYj4pmI+D4XcSLdHLeysDg1XioV55r1ker07EhlYfHklenxyeJkcealV149c/b0mbFTY+ufdq+2vpbb3rpe/+XGB9d/fP3WjS++PLpc+Gg8iXMx1Gxbvx6PU+M9ycW5DfNP70SwHkp63QEeykAzz7NUejqGY6CZ9e3Uhne1a8AOq+2LqAF9KpH/0KdavwOy/d/WtJu/P26fb+yAZHFXm1OjZbBxbCL21/dNDv6RPLBnku1vHt7NjrInLV+LiNHBwc2f/6T5+Xt4o4+jg+yo7843NtTm7Z+ujT/RZvwZah07fUSt8W910/h3P/5Ah/HvYpcx/nr71087xr8WcaRt/GQtftImfhoR73YZ/+Zb35zt1Fb7LOJ4tI/fkmx9fHjk8pVScbTxt22Mb48ffW2r9T/YIX7jmO3++tdMu/d/tsv1//qHr55b3iL+i89vvf3bvf8HIuLDLuM/effzNzq13b6W3Ml+BWx3+2fzbnUZ/+Vzx37uclEAAAAAAAAAAGAb0vq5bEmaXyunaT7fuIb3qTiYlsqV6onL5fmZicY5b4cjl7bOtBpu1JOsPtY8H7dVP7Whvnbu0MCBej1fKJcmervqAAAAAAAAAAAAAAAAAAAA8J9xaMP1/38O1K//33i7amCv6nzLb2Cvk//Qvx7M/6Rn/QB2n+9/6Fs1+Q/9S/5D/5L/0L/kP/SvDvmf2+1+ALvP9z/0L/kPAAAAAAAAAAAAAAAAAAAAAAAAAAA74uKFC9lUu7eyVMjqE4ML81Pl905OFCtT+en5Qr5QnpvNT5bLk6VivlCe/rfXS8rl2dGYmb86Ui1WqiOVhcV3psvzM617ihb9T3EAAAAAAAAAAAAAAAAAAADYbKg+JWk+ItJ6OU3z+Yj/R8ThyCWXr5SKoxHxRET8NJDbl9XHet1pAAAAAAAAAAAAAAAAAAAA2GMqC4tT46VSca5PCoPbWTgilh9vN7JX3Pazcs1t1abpzSMdmxQUHqXQy1EJAAAAAAAAAAAAAAAAAAD60/2Lfrt9xt872yEAAAAAAAAAAAAAAAAAAADoS+lvSURk0/HhF4Y2tv4vWR2oP0bE+zcvfXx1vFqdG8vm31mbX/2kOf9UL/oPdKuVp608BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO6rLCxOjZdKxbkdLPR6HQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAexj8BAAD//+q51EI=")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x6e)
write$binfmt_elf64(r1, &(0x7f0000000ac0)=ANY=[], 0x5b0)
open(&(0x7f0000000180)='./file1\x00', 0x109042, 0x88)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[], 0x0}, 0x94)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c)
connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32)
writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1)

123.35778ms ago: executing program 3 (id=267):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00"/12], 0x50)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000bc0)={'syztnl2\x00', &(0x7f0000000e80)={'syztnl1\x00', 0x0, 0x7800, 0x8000, 0x7af780df, 0x9, {{0x25, 0x4, 0x2, 0x2, 0x94, 0x65, 0x3, 0x9, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, {[@timestamp_prespec={0x44, 0xc, 0x88, 0x3, 0xe, [{@remote, 0x9}]}, @ssrr={0x89, 0x1b, 0x38, [@multicast2, @rand_addr=0x64010101, @empty, @broadcast, @multicast1, @multicast2]}, @generic={0x82, 0xf, "869a1a7efc6561551cdbe6e17a"}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x1c, 0x1e, 0x1, 0x6, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9e}, {@multicast2}, {@multicast2, 0x6}]}, @lsrr={0x83, 0x7, 0x8d, [@dev={0xac, 0x14, 0x14, 0x32}]}, @timestamp={0x44, 0x8, 0x26, 0x0, 0x0, [0x4]}, @timestamp={0x44, 0x18, 0x9c, 0x0, 0x2, [0x7a2b, 0x48, 0x1, 0xb, 0x1]}]}}}}})
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x109a88, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioperm(0x3c, 0x1, 0x8)
syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0)
syz_clone(0x3002500, 0x0, 0x0, 0x0, 0x0, 0x0)
symlink(&(0x7f0000002100)='./file0\x00', &(0x7f0000002140)='./file0\x00')
lremovexattr(&(0x7f00000043c0)='./file0\x00', &(0x7f0000004400)=@known='system.posix_acl_default\x00')
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$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")
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=<r3=>0x0)
timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x86, 0xfffffffe, 0x0, 0x0, 0xfffffffc)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)
ftruncate(r1, 0x2000009)
pwritev2(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000400)="ba", 0xfdef}], 0x1, 0xe7b, 0x0, 0x1)

83.293714ms ago: executing program 0 (id=268):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xfcfa, &(0x7f0000000280)={&(0x7f0000000140)=@deltfilter={0x0, 0x2d, 0x200, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0x4, 0xe}, {0x4}}}, 0x24}}, 0x50)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'dummy0\x00'})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[], 0xb4}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x800000001fe, 0x2102)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000300))
r4 = inotify_init()
readv(r4, &(0x7f0000000140)=[{&(0x7f0000000340)=""/263, 0x107}], 0x1)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = dup(r2)
ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x1c, 0x2, 0x0, 0x1, 0x0})
socket$netlink(0x10, 0x3, 0x0)
socket$kcm(0x11, 0x200000000000002, 0x300)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
close(0x3)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r6, r7, 0x0, 0x20000023896)
close(r7)
gettid()
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50)

46.863986ms ago: executing program 2 (id=269):
r0 = socket(0x2, 0x80805, 0x0)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000900)=[{{&(0x7f0000000080)={0x2, 0x8, @rand_addr=0xac1414bb}, 0x10, &(0x7f00000003c0)=[{&(0x7f00000000c0)='Q', 0x1}, {&(0x7f0000000280)="3e2523221a3447c6381ea87b0160030be31ed44b8f10b24d9d2e68f54a4e7119aeb96081803430076836da401251ff93d5f9fd550b5f6069c4e7069a98cb93fc525a543fcb8ce23d6d80624bfacf20b7bf684902506133613e8a93c089a8226d4759a12a9be6875e795aefa7a2dabde8037916afff3dae11b3fa2d2e70c1f1f98767f17d2e854a2a0288543f6bb3dabd", 0x90}, {&(0x7f0000000340)="bc595fb6728cf1621455165e973245f193dad6aeaf53fe6bfd9eadfb18199f042df7707f90f331ff0b4957f4cc606c571543069584cd02f6d42cfa3c0d6a5340d17bbeb2", 0x44}], 0x3}, 0x20000000}, {{&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000ac0)="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", 0x53f}], 0x1}}], 0x2, 0x40)

0s ago: executing program 2 (id=270):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x14, r3, 0x1, 0x70bd2a, 0x0, {0x1b}}, 0x14}}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10)
r5 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read$msr(r5, 0x0, 0x0)
r6 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r7 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r7, 0x0)
write$selinux_load(r6, &(0x7f0000000000)=ANY=[], 0x2000)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x18)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="44517a8a06f5ffffff00000000f040c6f00e60", @ANYRES32=0x0, @ANYBLOB], 0x44}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b\x00\x00\x00\b'], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r9}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r10}, 0x18)
r11 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd29, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x20000010)
lsetxattr$trusted_overlay_nlink(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)={'L+', 0x81}, 0x16, 0x0)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c0000003e000701fcfffffffedbdf25017c00000600"], 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.76' (ED25519) to the list of known hosts.
[   27.116176][   T29] audit: type=1400 audit(1756059448.645:62): avc:  denied  { mounton } for  pid=3290 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   27.117437][ T3290] cgroup: Unknown subsys name 'net'
[   27.138963][   T29] audit: type=1400 audit(1756059448.645:63): avc:  denied  { mount } for  pid=3290 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   27.166319][   T29] audit: type=1400 audit(1756059448.685:64): avc:  denied  { unmount } for  pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   27.367520][ T3290] cgroup: Unknown subsys name 'cpuset'
[   27.373989][ T3290] cgroup: Unknown subsys name 'rlimit'
[   27.524496][   T29] audit: type=1400 audit(1756059449.065:65): avc:  denied  { setattr } for  pid=3290 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   27.547789][   T29] audit: type=1400 audit(1756059449.065:66): avc:  denied  { create } for  pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   27.568323][   T29] audit: type=1400 audit(1756059449.065:67): avc:  denied  { write } for  pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   27.588709][   T29] audit: type=1400 audit(1756059449.065:68): avc:  denied  { read } for  pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   27.609122][   T29] audit: type=1400 audit(1756059449.095:69): avc:  denied  { mounton } for  pid=3290 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   27.618210][ T3295] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   27.634023][   T29] audit: type=1400 audit(1756059449.095:70): avc:  denied  { mount } for  pid=3290 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[   27.665800][   T29] audit: type=1400 audit(1756059449.185:71): avc:  denied  { relabelto } for  pid=3295 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   27.723469][ T3290] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   29.851650][ T3303] chnl_net:caif_netlink_parms(): no params data found
[   29.862844][ T3302] chnl_net:caif_netlink_parms(): no params data found
[   29.955876][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.963023][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.970731][ T3302] bridge_slave_0: entered allmulticast mode
[   29.977309][ T3302] bridge_slave_0: entered promiscuous mode
[   29.992963][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.000174][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.007355][ T3303] bridge_slave_0: entered allmulticast mode
[   30.013753][ T3303] bridge_slave_0: entered promiscuous mode
[   30.025114][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.032245][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.039447][ T3302] bridge_slave_1: entered allmulticast mode
[   30.045909][ T3302] bridge_slave_1: entered promiscuous mode
[   30.065979][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.073204][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.080482][ T3303] bridge_slave_1: entered allmulticast mode
[   30.087005][ T3303] bridge_slave_1: entered promiscuous mode
[   30.119299][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   30.128893][ T3309] chnl_net:caif_netlink_parms(): no params data found
[   30.145951][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   30.156229][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.166501][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.186939][ T3310] chnl_net:caif_netlink_parms(): no params data found
[   30.203036][ T3312] chnl_net:caif_netlink_parms(): no params data found
[   30.229637][ T3303] team0: Port device team_slave_0 added
[   30.236183][ T3302] team0: Port device team_slave_0 added
[   30.245635][ T3302] team0: Port device team_slave_1 added
[   30.256897][ T3303] team0: Port device team_slave_1 added
[   30.297810][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.304825][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.330957][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.357842][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.364802][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.390752][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.401464][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.408679][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.415895][ T3309] bridge_slave_0: entered allmulticast mode
[   30.422526][ T3309] bridge_slave_0: entered promiscuous mode
[   30.429132][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.436095][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.462036][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.473133][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.480128][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.506092][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.530118][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.537299][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.544515][ T3309] bridge_slave_1: entered allmulticast mode
[   30.550914][ T3309] bridge_slave_1: entered promiscuous mode
[   30.580564][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.587879][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.595061][ T3310] bridge_slave_0: entered allmulticast mode
[   30.601593][ T3310] bridge_slave_0: entered promiscuous mode
[   30.609957][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   30.624248][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.631396][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.638604][ T3312] bridge_slave_0: entered allmulticast mode
[   30.645074][ T3312] bridge_slave_0: entered promiscuous mode
[   30.662126][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.669242][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.676429][ T3310] bridge_slave_1: entered allmulticast mode
[   30.682948][ T3310] bridge_slave_1: entered promiscuous mode
[   30.690282][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.704474][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.711671][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.718995][ T3312] bridge_slave_1: entered allmulticast mode
[   30.725406][ T3312] bridge_slave_1: entered promiscuous mode
[   30.743086][ T3302] hsr_slave_0: entered promiscuous mode
[   30.749154][ T3302] hsr_slave_1: entered promiscuous mode
[   30.765498][ T3309] team0: Port device team_slave_0 added
[   30.777501][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   30.793754][ T3303] hsr_slave_0: entered promiscuous mode
[   30.799916][ T3303] hsr_slave_1: entered promiscuous mode
[   30.805729][ T3303] debugfs: 'hsr0' already exists in 'hsr'
[   30.811552][ T3303] Cannot create hsr debugfs directory
[   30.823210][ T3309] team0: Port device team_slave_1 added
[   30.836248][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.859056][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   30.886354][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.905863][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.912878][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.939185][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.950471][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.957502][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.983414][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   31.000624][ T3312] team0: Port device team_slave_0 added
[   31.014699][ T3310] team0: Port device team_slave_0 added
[   31.029345][ T3312] team0: Port device team_slave_1 added
[   31.038865][ T3310] team0: Port device team_slave_1 added
[   31.062804][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0
[   31.069805][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   31.095738][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   31.121743][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1
[   31.128737][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   31.154863][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   31.183215][ T3309] hsr_slave_0: entered promiscuous mode
[   31.189388][ T3309] hsr_slave_1: entered promiscuous mode
[   31.195190][ T3309] debugfs: 'hsr0' already exists in 'hsr'
[   31.200992][ T3309] Cannot create hsr debugfs directory
[   31.210889][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0
[   31.217885][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   31.243816][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   31.280646][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1
[   31.287662][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   31.313591][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   31.370897][ T3312] hsr_slave_0: entered promiscuous mode
[   31.376939][ T3312] hsr_slave_1: entered promiscuous mode
[   31.382802][ T3312] debugfs: 'hsr0' already exists in 'hsr'
[   31.388599][ T3312] Cannot create hsr debugfs directory
[   31.422624][ T3310] hsr_slave_0: entered promiscuous mode
[   31.429677][ T3310] hsr_slave_1: entered promiscuous mode
[   31.435579][ T3310] debugfs: 'hsr0' already exists in 'hsr'
[   31.441361][ T3310] Cannot create hsr debugfs directory
[   31.485106][ T3303] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   31.501562][ T3303] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   31.517323][ T3303] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   31.533303][ T3303] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   31.591927][ T3302] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   31.609194][ T3302] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   31.622755][ T3302] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   31.631715][ T3302] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   31.652436][ T3309] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   31.663945][ T3309] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   31.676698][ T3309] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   31.690904][ T3309] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   31.719284][ T3312] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   31.729828][ T3312] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   31.750066][ T3312] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   31.766967][ T3312] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   31.802641][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0
[   31.813253][ T3310] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   31.822563][ T3310] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   31.831632][ T3310] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   31.841941][ T3310] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   31.867206][ T3302] 8021q: adding VLAN 0 to HW filter on device team0
[   31.876044][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0
[   31.895412][ T3303] 8021q: adding VLAN 0 to HW filter on device team0
[   31.909136][  T401] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.916272][  T401] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.925652][  T401] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.932725][  T401] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.946892][   T56] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.954012][   T56] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.978506][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0
[   31.987943][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.995010][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.034121][ T3309] 8021q: adding VLAN 0 to HW filter on device team0
[   32.047471][  T290] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.054557][  T290] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.063171][  T290] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.070264][  T290] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.103044][ T3302] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   32.113501][ T3302] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   32.126900][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0
[   32.139733][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0
[   32.160525][ T3309] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   32.176632][ T3312] 8021q: adding VLAN 0 to HW filter on device team0
[   32.196193][ T3310] 8021q: adding VLAN 0 to HW filter on device team0
[   32.204955][   T56] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.212055][   T56] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.220712][   T56] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.227827][   T56] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.243802][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0
[   32.258947][   T56] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.266094][   T56] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.274710][   T56] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.281849][   T56] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.319350][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0
[   32.367116][ T3312] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   32.403035][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0
[   32.466231][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0
[   32.506516][ T3303] veth0_vlan: entered promiscuous mode
[   32.517631][ T3303] veth1_vlan: entered promiscuous mode
[   32.543895][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0
[   32.583901][ T3309] veth0_vlan: entered promiscuous mode
[   32.592249][ T3309] veth1_vlan: entered promiscuous mode
[   32.602351][ T3303] veth0_macvtap: entered promiscuous mode
[   32.610591][ T3303] veth1_macvtap: entered promiscuous mode
[   32.644177][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0
[   32.675481][ T3310] veth0_vlan: entered promiscuous mode
[   32.683308][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1
[   32.696077][ T3309] veth0_macvtap: entered promiscuous mode
[   32.706430][ T3309] veth1_macvtap: entered promiscuous mode
[   32.719409][   T51] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   32.728877][ T3310] veth1_vlan: entered promiscuous mode
[   32.746078][   T51] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   32.763850][ T3312] veth0_vlan: entered promiscuous mode
[   32.771995][  T290] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   32.787113][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0
[   32.794462][  T290] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   32.810936][ T3302] veth0_vlan: entered promiscuous mode
[   32.817197][   T29] kauditd_printk_skb: 9 callbacks suppressed
[   32.817210][   T29] audit: type=1400 audit(1756059454.355:81): avc:  denied  { mounton } for  pid=3303 comm="syz-executor" path="/root/syzkaller.9SiZrI/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[   32.828144][ T3312] veth1_vlan: entered promiscuous mode
[   32.853480][   T29] audit: type=1400 audit(1756059454.395:82): avc:  denied  { mount } for  pid=3303 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   32.864492][ T3310] veth0_macvtap: entered promiscuous mode
[   32.875503][   T29] audit: type=1400 audit(1756059454.395:83): avc:  denied  { mounton } for  pid=3303 comm="syz-executor" path="/root/syzkaller.9SiZrI/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   32.885468][ T3310] veth1_macvtap: entered promiscuous mode
[   32.906369][   T29] audit: type=1400 audit(1756059454.395:84): avc:  denied  { mount } for  pid=3303 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   32.927114][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1
[   32.933882][   T29] audit: type=1400 audit(1756059454.395:85): avc:  denied  { mounton } for  pid=3303 comm="syz-executor" path="/root/syzkaller.9SiZrI/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   32.953300][ T3302] veth1_vlan: entered promiscuous mode
[   32.967872][   T29] audit: type=1400 audit(1756059454.395:86): avc:  denied  { mounton } for  pid=3303 comm="syz-executor" path="/root/syzkaller.9SiZrI/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4052 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[   32.986137][ T3312] veth0_macvtap: entered promiscuous mode
[   33.000562][   T29] audit: type=1400 audit(1756059454.395:87): avc:  denied  { unmount } for  pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   33.027926][   T29] audit: type=1400 audit(1756059454.395:88): avc:  denied  { mounton } for  pid=3303 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[   33.050745][   T29] audit: type=1400 audit(1756059454.395:89): avc:  denied  { mount } for  pid=3303 comm="syz-executor" name="/" dev="gadgetfs" ino=4412 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[   33.074626][ T3303] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   33.086636][  T290] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   33.099241][   T29] audit: type=1400 audit(1756059454.645:90): avc:  denied  { read write } for  pid=3303 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   33.109769][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0
[   33.134002][  T290] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   33.151326][ T3302] veth0_macvtap: entered promiscuous mode
[   33.166605][  T290] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   33.177142][ T3312] veth1_macvtap: entered promiscuous mode
[   33.184868][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   33.195938][ T3302] veth1_macvtap: entered promiscuous mode
[   33.205343][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1
[   33.217318][ T3470] team0 (unregistering): Port device team_slave_0 removed
[   33.225823][ T3470] team0 (unregistering): Port device team_slave_1 removed
[   33.245010][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0
[   33.254252][  T290] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   33.271161][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1
[   33.279659][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0
[   33.293522][  T290] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   33.310096][  T290] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   33.320614][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1
[   33.330361][ T3473] loop1: detected capacity change from 0 to 1024
[   33.340109][ T3473] =======================================================
[   33.340109][ T3473] WARNING: The mand mount option has been deprecated and
[   33.340109][ T3473]          and is ignored by this kernel. Remove the mand
[   33.340109][ T3473]          option from the mount to silence this warning.
[   33.340109][ T3473] =======================================================
[   33.377557][  T290] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   33.405215][  T290] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   33.430407][ T3473] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   33.458395][  T290] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   33.474140][  T290] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   33.499347][  T290] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   33.527116][  T290] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   33.536031][  T290] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   33.549875][  T290] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   33.590614][ T3485] loop4: detected capacity change from 0 to 512
[   33.590999][ T3485] EXT4-fs: Ignoring removed orlov option
[   33.596552][ T3485] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   33.619060][ T3485] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   33.625943][  T290] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   33.671932][ T3485] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[   33.691701][ T3485] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2848: Unable to expand inode 17. Delete some EAs or run e2fsck.
[   33.709952][ T3485] EXT4-fs (loop4): 1 orphan inode deleted
[   33.746120][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   33.755422][ T3482] loop3: detected capacity change from 0 to 1024
[   33.777207][ T3485] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   33.780801][ T3482] EXT4-fs: Ignoring removed nomblk_io_submit option
[   33.834783][ T3482] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   33.850914][ T3485] }\)\ (3485) used greatest stack depth: 10760 bytes left
[   33.866371][ T3498] loop2: detected capacity change from 0 to 512
[   33.873893][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   33.886222][ T3498] EXT4-fs: Ignoring removed orlov option
[   33.892361][ T3496] loop1: detected capacity change from 0 to 1024
[   33.905178][ T3498] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   33.927684][ T3498] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[   33.946254][ T3498] EXT4-fs (loop2): 1 orphan inode deleted
[   33.965952][ T3498] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   33.981168][ T3496] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   34.009247][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   34.044433][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   34.134594][    C0] hrtimer: interrupt took 46221 ns
[   34.171288][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   34.194614][ T3524] loop2: detected capacity change from 0 to 1024
[   34.209552][ T3524] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   34.230216][ T3528] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14'.
[   34.375497][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   34.436265][ T3534] loop2: detected capacity change from 0 to 1024
[   34.449968][ T3532] process 'syz.3.16' launched '/dev/fd/6' with NULL argv: empty string added
[   34.461654][ T3534] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   34.531380][ T3532] loop3: detected capacity change from 0 to 1024
[   34.566002][ T3532] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   34.600342][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   34.659003][ T3540] SELinux: ebitmap: truncated map
[   34.665265][ T3540] SELinux: failed to load policy
[   34.677304][ T3540] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   34.686656][ T3540] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   34.738160][ T3543] netlink: 140 bytes leftover after parsing attributes in process `syz.0.19'.
[   34.757493][ T3540] syz.2.18 (3540) used greatest stack depth: 10712 bytes left
[   34.798958][ T3546] loop2: detected capacity change from 0 to 512
[   34.806034][ T3546] EXT4-fs: Ignoring removed orlov option
[   34.813536][ T3546] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   34.825346][ T3546] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[   34.843751][ T3546] EXT4-fs (loop2): 1 orphan inode deleted
[   34.850151][ T3546] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   34.914253][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   34.942582][ T3552] FAULT_INJECTION: forcing a failure.
[   34.942582][ T3552] name failslab, interval 1, probability 0, space 0, times 1
[   34.955453][ T3552] CPU: 1 UID: 0 PID: 3552 Comm: syz.2.22 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   34.955488][ T3552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   34.955505][ T3552] Call Trace:
[   34.955514][ T3552]  <TASK>
[   34.955524][ T3552]  __dump_stack+0x1d/0x30
[   34.955554][ T3552]  dump_stack_lvl+0xe8/0x140
[   34.955658][ T3552]  dump_stack+0x15/0x1b
[   34.955677][ T3552]  should_fail_ex+0x265/0x280
[   34.955705][ T3552]  should_failslab+0x8c/0xb0
[   34.955738][ T3552]  __kmalloc_noprof+0xa5/0x3e0
[   34.955820][ T3552]  ? io_cache_alloc_new+0x2a/0xb0
[   34.955859][ T3552]  io_cache_alloc_new+0x2a/0xb0
[   34.955902][ T3552]  __io_prep_rw+0xcf/0x6d0
[   34.956005][ T3552]  ? __rcu_read_unlock+0x4f/0x70
[   34.956046][ T3552]  io_prep_rwv+0x33/0x230
[   34.956073][ T3552]  io_prep_writev+0x22/0x30
[   34.956149][ T3552]  io_submit_sqes+0x5ec/0x1060
[   34.956184][ T3552]  __se_sys_io_uring_enter+0x1c1/0x1b70
[   34.956213][ T3552]  ? 0xffffffff81000000
[   34.956230][ T3552]  ? __rcu_read_unlock+0x4f/0x70
[   34.956257][ T3552]  ? get_pid_task+0x96/0xd0
[   34.956339][ T3552]  ? proc_fail_nth_write+0x13b/0x160
[   34.956375][ T3552]  ? __pfx_proc_fail_nth_write+0x10/0x10
[   34.956478][ T3552]  ? vfs_write+0x7e8/0x960
[   34.956507][ T3552]  ? __rcu_read_unlock+0x4f/0x70
[   34.956584][ T3552]  ? __fget_files+0x184/0x1c0
[   34.956613][ T3552]  ? fput+0x8f/0xc0
[   34.956653][ T3552]  __x64_sys_io_uring_enter+0x78/0x90
[   34.956682][ T3552]  x64_sys_call+0x2de1/0x2ff0
[   34.956703][ T3552]  do_syscall_64+0xd2/0x200
[   34.956769][ T3552]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   34.956848][ T3552]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   34.956882][ T3552]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   34.956994][ T3552] RIP: 0033:0x7fe9a9f9ebe9
[   34.957015][ T3552] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   34.957036][ T3552] RSP: 002b:00007fe9a89ff038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[   34.957061][ T3552] RAX: ffffffffffffffda RBX: 00007fe9aa1c5fa0 RCX: 00007fe9a9f9ebe9
[   34.957104][ T3552] RDX: 0000000000000000 RSI: 00000000000047f8 RDI: 0000000000000003
[   34.957121][ T3552] RBP: 00007fe9a89ff090 R08: 0000000000000000 R09: 0000000000000000
[   34.957136][ T3552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   34.957152][ T3552] R13: 00007fe9aa1c6038 R14: 00007fe9aa1c5fa0 R15: 00007ffe28799628
[   34.957170][ T3552]  </TASK>
[   35.342928][ T3560] netlink: 12 bytes leftover after parsing attributes in process `syz.0.25'.
[   35.390680][ T3562] loop0: detected capacity change from 0 to 1024
[   35.410004][ T3562] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   35.437321][ T3562] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.26: Allocating blocks 449-513 which overlap fs metadata
[   35.462385][ T3562] SELinux:  Context @ is not valid (left unmapped).
[   35.469536][ T3562] EXT4-fs (loop0): pa ffff88810073e000: logic 48, phys. 177, len 21
[   35.471979][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.477641][ T3562] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4
[   35.514468][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.530472][ T3567] loop3: detected capacity change from 0 to 1024
[   35.549755][ T3567] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   35.562182][ T3567] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   35.575351][ T3567] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[   35.587185][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.621145][ T3573] netlink: 12 bytes leftover after parsing attributes in process `syz.3.29'.
[   35.716183][ T3579] loop0: detected capacity change from 0 to 8192
[   35.856898][ T3582] loop3: detected capacity change from 0 to 32768
[   35.866382][ T3585] loop1: detected capacity change from 0 to 512
[   35.893361][ T3585] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   35.906540][ T3585] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   36.013067][ T3591] loop4: detected capacity change from 0 to 512
[   36.020478][ T3591] EXT4-fs: Ignoring removed orlov option
[   36.028523][ T3591] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   36.042033][ T3591] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[   36.058550][ T3591] EXT4-fs (loop4): 1 orphan inode deleted
[   36.065013][ T3591] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   36.103615][ T3585] syz.1.32 (3585) used greatest stack depth: 10448 bytes left
[   36.105965][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.154277][ T3594] loop4: detected capacity change from 0 to 2048
[   36.198872][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.203979][ T3596] SELinux: ebitmap: truncated map
[   36.213901][ T3596] SELinux: failed to load policy
[   36.221994][ T3594] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   36.343813][ T3302] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set
[   36.379656][ T3302] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem
[   36.431645][ T3599] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 3 with error 28
[   36.444063][ T3599] EXT4-fs (loop4): This should not happen!! Data will be lost
[   36.444063][ T3599] 
[   36.453781][ T3599] EXT4-fs (loop4): Total free blocks count 0
[   36.459884][ T3599] EXT4-fs (loop4): Free/Dirty block details
[   36.465794][ T3599] EXT4-fs (loop4): free_blocks=0
[   36.470845][ T3599] EXT4-fs (loop4): dirty_blocks=400
[   36.476144][ T3599] EXT4-fs (loop4): Block reservation details
[   36.482220][ T3599] EXT4-fs (loop4): i_reserved_data_blocks=25
[   36.603225][ T3610] netlink: 12 bytes leftover after parsing attributes in process `syz.3.40'.
[   36.607293][ T3599] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.663718][ T3612] loop3: detected capacity change from 0 to 1024
[   36.685794][ T3612] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   36.788646][   T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   36.822026][ T3612] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   36.837221][ T3621] loop2: detected capacity change from 0 to 512
[   36.850875][ T3621] EXT4-fs: Ignoring removed orlov option
[   36.879675][ T3621] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   36.909810][   T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   36.925635][ T3612] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[   36.959232][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.971496][ T3621] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[   37.030801][   T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   37.069446][ T3630] loop3: detected capacity change from 0 to 512
[   37.078380][ T3621] EXT4-fs (loop2): 1 orphan inode deleted
[   37.115379][ T3621] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   37.142563][   T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   37.177943][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.180577][ T3630] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   37.209542][ T3630] ext4 filesystem being mounted at /8/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   37.303661][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.355810][   T12] bridge_slave_1: left allmulticast mode
[   37.361553][   T12] bridge_slave_1: left promiscuous mode
[   37.367376][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   37.397723][   T12] bridge_slave_0: left allmulticast mode
[   37.403421][   T12] bridge_slave_0: left promiscuous mode
[   37.409270][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   37.447701][ T3648] loop3: detected capacity change from 0 to 512
[   37.500993][ T3648] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   37.528868][ T3648] ext4 filesystem being mounted at /9/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   37.571499][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   37.586109][ T3661] loop1: detected capacity change from 0 to 1024
[   37.599318][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   37.614340][   T12] bond0 (unregistering): Released all slaves
[   37.625508][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.646224][ T3661] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   37.733489][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.743598][ T3669] SELinux: ebitmap: truncated map
[   37.752169][ T3669] SELinux: failed to load policy
[   37.757409][   T12] hsr_slave_0: left promiscuous mode
[   37.764684][   T12] hsr_slave_1: left promiscuous mode
[   37.790584][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   37.798168][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   37.806173][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   37.813649][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   37.827649][ T3669] siw: device registration error -23
[   37.845647][   T12] veth1_macvtap: left promiscuous mode
[   37.871699][ T3684] loop1: detected capacity change from 0 to 512
[   37.886524][   T12] veth0_macvtap: left promiscuous mode
[   37.894281][   T12] veth1_vlan: left promiscuous mode
[   37.908925][   T12] veth0_vlan: left promiscuous mode
[   37.913841][ T3684] EXT4-fs: Ignoring removed orlov option
[   37.939232][ T3684] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   37.970686][   T29] kauditd_printk_skb: 203 callbacks suppressed
[   37.970701][   T29] audit: type=1400 audit(1756059459.505:294): avc:  denied  { create } for  pid=3677 comm="syz.2.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   37.973306][ T3684] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, 
[   37.976969][   T29] audit: type=1400 audit(1756059459.505:295): avc:  denied  { setopt } for  pid=3677 comm="syz.2.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   37.996321][ T3684] block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[   38.033944][ T3684] EXT4-fs (loop1): 1 orphan inode deleted
[   38.040228][ T3684] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   38.060070][ T3705] netlink: 4 bytes leftover after parsing attributes in process `syz.3.58'.
[   38.084113][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.123437][   T12] team0 (unregistering): Port device team_slave_1 removed
[   38.133590][   T12] team0 (unregistering): Port device team_slave_0 removed
[   38.172405][ T3694] !
: renamed from dummy0 (while UP)
[   38.198639][ T3626] chnl_net:caif_netlink_parms(): no params data found
[   38.284944][ T3723] loop3: detected capacity change from 0 to 512
[   38.314167][ T3730] netlink: 36 bytes leftover after parsing attributes in process `syz.1.65'.
[   38.343591][ T3626] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.350791][ T3626] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.372241][ T3626] bridge_slave_0: entered allmulticast mode
[   38.379242][ T3723] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   38.397119][ T3723] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   38.397415][ T3626] bridge_slave_0: entered promiscuous mode
[   38.414237][   T29] audit: type=1400 audit(1756059459.955:296): avc:  denied  { execmem } for  pid=3728 comm="syz.1.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   38.433615][ T3626] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.440793][ T3626] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.448296][ T3626] bridge_slave_1: entered allmulticast mode
[   38.454723][ T3626] bridge_slave_1: entered promiscuous mode
[   38.474446][ T3713] loop0: detected capacity change from 0 to 8192
[   38.485132][ T3626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   38.511377][ T3626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   38.529513][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.558240][ T3626] team0: Port device team_slave_0 added
[   38.564931][ T3626] team0: Port device team_slave_1 added
[   38.615737][ T3626] batman_adv: batadv0: Adding interface: batadv_slave_0
[   38.622797][ T3626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   38.648777][ T3626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   38.663112][   T29] audit: type=1400 audit(1756059460.205:297): avc:  denied  { create } for  pid=3744 comm="syz.3.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   38.686777][ T3626] batman_adv: batadv0: Adding interface: batadv_slave_1
[   38.693790][ T3626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   38.719932][ T3626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   38.755737][ T3626] hsr_slave_0: entered promiscuous mode
[   38.762329][ T3626] hsr_slave_1: entered promiscuous mode
[   38.913497][ T3756] loop3: detected capacity change from 0 to 512
[   39.122776][ T3756] EXT4-fs (loop3): revision level too high, forcing read-only mode
[   39.130880][ T3756] EXT4-fs (loop3): orphan cleanup on readonly fs
[   39.222792][ T3756] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.66: corrupted inode contents
[   39.248773][ T3756] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #16: comm syz.3.66: mark_inode_dirty error
[   39.260657][ T3756] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.66: corrupted inode contents
[   39.280445][ T3761] loop1: detected capacity change from 0 to 512
[   39.301062][ T3756] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.66: mark_inode_dirty error
[   39.314765][ T3761] EXT4-fs (loop1): revision level too high, forcing read-only mode
[   39.323010][ T3761] EXT4-fs (loop1): orphan cleanup on readonly fs
[   39.335897][ T3761] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.67: corrupted inode contents
[   39.350287][ T3761] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #16: comm syz.1.67: mark_inode_dirty error
[   39.362732][ T3761] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.67: corrupted inode contents
[   39.375943][ T3761] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.67: mark_inode_dirty error
[   39.389110][ T3761] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.67: corrupted inode contents
[   39.401152][ T3761] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem
[   39.411096][ T3761] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.67: corrupted inode contents
[   39.423577][ T3761] EXT4-fs error (device loop1): ext4_truncate:4666: inode #16: comm syz.1.67: mark_inode_dirty error
[   39.435066][ T3761] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem
[   39.447646][ T3761] EXT4-fs (loop1): 1 truncate cleaned up
[   39.454722][ T3756] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.66: corrupted inode contents
[   39.468068][ T3756] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem
[   39.477492][ T3756] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.66: corrupted inode contents
[   39.490628][ T3756] EXT4-fs error (device loop3): ext4_truncate:4666: inode #16: comm syz.3.66: mark_inode_dirty error
[   39.502459][ T3756] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem
[   39.513767][ T3756] EXT4-fs (loop3): 1 truncate cleaned up
[   39.613829][  T290] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14
[   39.623798][  T290] EXT4-fs error (device loop1): ext4_release_dquot:6973: comm kworker/u8:5: Failed to release dquot type 1
[   39.649468][ T3626] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   39.678653][  T290] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14
[   39.686058][ T3626] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   39.688518][  T290] EXT4-fs error (device loop3): ext4_release_dquot:6973: comm kworker/u8:5: Failed to release dquot type 1
[   39.711850][ T3626] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   39.747565][ T3626] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   39.755066][ T3761] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   39.775514][ T3756] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   39.839307][ T3787] loop2: detected capacity change from 0 to 1024
[   39.851798][ T3774] loop0: detected capacity change from 0 to 8192
[   39.870484][ T3787] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   39.886341][ T3626] 8021q: adding VLAN 0 to HW filter on device bond0
[   39.939511][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.951300][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.952579][ T3626] 8021q: adding VLAN 0 to HW filter on device team0
[   39.983056][ T3626] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   39.993542][ T3626] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   40.006608][ T3787] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   40.040318][  T290] bridge0: port 1(bridge_slave_0) entered blocking state
[   40.047446][  T290] bridge0: port 1(bridge_slave_0) entered forwarding state
[   40.058841][ T3787] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[   40.079640][  T290] bridge0: port 2(bridge_slave_1) entered blocking state
[   40.086766][  T290] bridge0: port 2(bridge_slave_1) entered forwarding state
[   40.098677][   T29] audit: type=1400 audit(1756059461.635:298): avc:  denied  { read } for  pid=3795 comm="syz.1.71" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[   40.122664][   T29] audit: type=1400 audit(1756059461.635:299): avc:  denied  { open } for  pid=3795 comm="syz.1.71" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[   40.155950][   T29] audit: type=1326 audit(1756059461.695:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3797 comm="syz.3.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8fd9febe9 code=0x50000
[   40.179041][   T29] audit: type=1326 audit(1756059461.695:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3797 comm="syz.3.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8fd9febe9 code=0x50000
[   40.234759][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.888243][ T3810] netlink: 4 bytes leftover after parsing attributes in process `syz.0.74'.
[   40.976329][ T3817] loop1: detected capacity change from 0 to 1024
[   40.977868][ T3626] 8021q: adding VLAN 0 to HW filter on device batadv0
[   41.021515][ T3817] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   41.052340][ T3817] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   41.126033][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.149422][ T3626] veth0_vlan: entered promiscuous mode
[   41.169702][ T3626] veth1_vlan: entered promiscuous mode
[   41.186717][ T3833] loop1: detected capacity change from 0 to 2048
[   41.197823][ T3626] veth0_macvtap: entered promiscuous mode
[   41.200945][ T3814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   41.206377][ T3626] veth1_macvtap: entered promiscuous mode
[   41.227001][ T3626] batman_adv: batadv0: Interface activated: batadv_slave_0
[   41.227985][ T3814] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   41.243967][ T3626] batman_adv: batadv0: Interface activated: batadv_slave_1
[   41.260702][ T3833] EXT4-fs (loop1): can't mount with journal_async_commit, fs mounted w/o journal
[   41.270288][ T2007] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   41.292477][ T2007] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   41.303223][ T3814] loop2: detected capacity change from 0 to 1024
[   41.316375][ T2007] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   41.332129][ T3814] EXT4-fs: Ignoring removed bh option
[   41.341503][ T2007] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   41.356967][ T3814] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled
[   41.400645][ T3814] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   41.417985][ T3814] EXT4-fs error (device loop2): ext4_check_all_de:659: inode #12: block 7: comm syz.2.76: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0
[   41.481098][ T3814] EXT4-fs (loop2): Remounting filesystem read-only
[   41.502492][ T3837] loop5: detected capacity change from 0 to 8192
[   41.513982][ T3843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   41.559867][ T3843] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   41.639037][ T3849] netlink: 12 bytes leftover after parsing attributes in process `syz.5.80'.
[   41.670736][ T3851] loop1: detected capacity change from 0 to 512
[   41.691916][ T3851] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   41.706561][ T3851] ext4 filesystem being mounted at /15/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   41.784846][ T3858] loop5: detected capacity change from 0 to 512
[   41.841260][ T3858] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   41.874253][ T3858] ext4 filesystem being mounted at /4/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   41.911373][ T3626] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.933457][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.960263][ T3863] loop5: detected capacity change from 0 to 1024
[   42.011959][ T3863] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   42.128720][ T3873] loop0: detected capacity change from 0 to 512
[   42.137386][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.150487][ T3626] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.192651][ T3877] loop2: detected capacity change from 0 to 512
[   42.201940][ T3873] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   42.234284][ T3873] ext4 filesystem being mounted at /15/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   42.236570][ T3880] netlink: 8 bytes leftover after parsing attributes in process `syz.5.89'.
[   42.291506][ T3877] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   42.322186][ T3865] loop1: detected capacity change from 0 to 8192
[   42.336911][ T3880] netlink: 'syz.5.89': attribute type 21 has an invalid length.
[   42.344768][ T3877] ext4 filesystem being mounted at /24/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   42.389399][ T3880] loop5: detected capacity change from 0 to 1024
[   42.396071][ T3880] EXT4-fs: Ignoring removed bh option
[   42.434196][ T3880] EXT4-fs: inline encryption not supported
[   42.463494][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.477108][ T3880] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   42.510898][ T3880] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 2: comm syz.5.89: lblock 2 mapped to illegal pblock 2 (length 1)
[   42.537922][ T3880] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 48: comm syz.5.89: lblock 0 mapped to illegal pblock 48 (length 1)
[   42.561157][ T3891] team0 (unregistering): Port device team_slave_0 removed
[   42.571391][ T3891] team0 (unregistering): Port device team_slave_1 removed
[   42.578878][ T3880] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.89: Failed to acquire dquot type 0
[   42.598651][ T3880] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6334: Corrupt filesystem
[   42.610272][ T3880] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.89: mark_inode_dirty error
[   42.636997][ T3880] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[   42.671552][ T3880] EXT4-fs (loop5): 1 orphan inode deleted
[   42.685792][ T3880] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   42.699800][ T2007] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1)
[   42.735757][ T2007] EXT4-fs error (device loop5): ext4_release_dquot:6973: comm kworker/u8:8: Failed to release dquot type 0
[   42.776755][ T3880] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.803698][ T3880] EXT4-fs error (device loop5): __ext4_get_inode_loc:4861: comm syz.5.89: Invalid inode table block 1 in block_group 0
[   42.819264][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.840491][ T3880] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6334: Corrupt filesystem
[   42.906261][ T3897] loop2: detected capacity change from 0 to 8192
[   42.910638][ T3880] EXT4-fs error (device loop5): ext4_quota_off:7221: inode #3: comm syz.5.89: mark_inode_dirty error
[   42.982001][   T29] kauditd_printk_skb: 9712 callbacks suppressed
[   42.982064][   T29] audit: type=1400 audit(1756059464.515:10012): avc:  denied  { remount } for  pid=3879 comm="syz.5.89" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   43.065504][   T29] audit: type=1400 audit(1756059464.525:10013): avc:  denied  { wake_alarm } for  pid=3879 comm="syz.5.89" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   43.086749][   T29] audit: type=1326 audit(1756059464.485:10011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3797 comm="syz.3.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8fd9febe9 code=0x50000
[   43.109888][   T29] audit: type=1326 audit(1756059464.535:10014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3797 comm="syz.3.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8fd9febe9 code=0x50000
[   43.111151][ T3904] loop5: detected capacity change from 0 to 512
[   43.133056][   T29] audit: type=1326 audit(1756059464.535:10015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3797 comm="syz.3.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8fd9febe9 code=0x50000
[   43.133091][   T29] audit: type=1326 audit(1756059464.535:10016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3797 comm="syz.3.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8fd9febe9 code=0x50000
[   43.185481][   T29] audit: type=1326 audit(1756059464.535:10017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3797 comm="syz.3.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8fd9febe9 code=0x50000
[   43.186269][ T3904] EXT4-fs: Ignoring removed orlov option
[   43.208603][   T29] audit: type=1326 audit(1756059464.535:10018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3797 comm="syz.3.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8fd9febe9 code=0x50000
[   43.237314][   T29] audit: type=1326 audit(1756059464.535:10019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3797 comm="syz.3.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8fd9febe9 code=0x50000
[   43.260480][   T29] audit: type=1326 audit(1756059464.535:10020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3797 comm="syz.3.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8fd9febe9 code=0x50000
[   43.280525][ T3906] capability: warning: `syz.2.95' uses 32-bit capabilities (legacy support in use)
[   43.317162][ T3904] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   43.357915][ T3904] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[   43.373823][ T3914] loop3: detected capacity change from 0 to 4096
[   43.384547][ T3904] EXT4-fs (loop5): 1 orphan inode deleted
[   43.404974][ T3914] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   43.411202][ T3904] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   43.439797][ T3918] loop2: detected capacity change from 0 to 1024
[   43.468005][ T3918] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   43.508991][ T3626] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.548726][ T3918] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   43.561484][ T3924] netlink: 4 bytes leftover after parsing attributes in process `syz.1.101'.
[   43.665546][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.782594][ T3941] netlink: 12 bytes leftover after parsing attributes in process `syz.1.106'.
[   43.804477][ T3931] loop5: detected capacity change from 0 to 8192
[   43.891405][ T3944] loop1: detected capacity change from 0 to 1024
[   43.898619][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.935171][ T3944] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   44.097941][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.638580][ T3964] loop5: detected capacity change from 0 to 1024
[   44.671131][ T3964] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   44.733334][ T3964] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4183: comm syz.5.113: Allocating blocks 449-513 which overlap fs metadata
[   44.777282][ T3962] EXT4-fs (loop5): pa ffff88810073e150: logic 48, phys. 177, len 21
[   44.785334][ T3962] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4
[   44.834608][ T3626] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.884664][ T3974] loop5: detected capacity change from 0 to 128
[   44.953319][ T3974] FAT-fs (loop5): Directory bread(block 32) failed
[   44.962449][ T3976] loop0: detected capacity change from 0 to 4096
[   44.976495][ T3974] FAT-fs (loop5): Directory bread(block 33) failed
[   44.984278][ T3974] FAT-fs (loop5): Directory bread(block 34) failed
[   45.003849][ T3974] FAT-fs (loop5): Directory bread(block 35) failed
[   45.011044][ T3976] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   45.042510][ T3974] FAT-fs (loop5): Directory bread(block 36) failed
[   45.049362][ T3974] FAT-fs (loop5): Directory bread(block 37) failed
[   45.055991][ T3974] FAT-fs (loop5): Directory bread(block 38) failed
[   45.062620][ T3974] FAT-fs (loop5): Directory bread(block 39) failed
[   45.076621][ T3974] FAT-fs (loop5): Directory bread(block 40) failed
[   45.099932][ T3974] FAT-fs (loop5): Directory bread(block 41) failed
[   45.175115][ T3982] loop1: detected capacity change from 0 to 1024
[   45.181711][ T3974] syz.5.116: attempt to access beyond end of device
[   45.181711][ T3974] loop5: rw=0, sector=4112, nr_sectors = 4 limit=128
[   45.195047][ T3974] Buffer I/O error on dev loop5, logical block 1028, async page read
[   45.217103][ T3974] syz.5.116: attempt to access beyond end of device
[   45.217103][ T3974] loop5: rw=0, sector=167964, nr_sectors = 4 limit=128
[   45.230629][ T3974] Buffer I/O error on dev loop5, logical block 41991, async page read
[   45.238905][ T3974] FAT-fs (loop5): Filesystem has been set read-only
[   45.250117][ T3982] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   45.273929][ T3974] syz.5.116: attempt to access beyond end of device
[   45.273929][ T3974] loop5: rw=0, sector=4112, nr_sectors = 4 limit=128
[   45.287342][ T3974] Buffer I/O error on dev loop5, logical block 1028, async page read
[   45.295492][ T3982] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   45.308167][ T3974] syz.5.116: attempt to access beyond end of device
[   45.308167][ T3974] loop5: rw=0, sector=167964, nr_sectors = 4 limit=128
[   45.321519][ T3974] Buffer I/O error on dev loop5, logical block 41991, async page read
[   45.358140][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.395380][ T3989] FAULT_INJECTION: forcing a failure.
[   45.395380][ T3989] name failslab, interval 1, probability 0, space 0, times 0
[   45.408114][ T3989] CPU: 0 UID: 0 PID: 3989 Comm: syz.1.122 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   45.408147][ T3989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   45.408162][ T3989] Call Trace:
[   45.408170][ T3989]  <TASK>
[   45.408178][ T3989]  __dump_stack+0x1d/0x30
[   45.408252][ T3989]  dump_stack_lvl+0xe8/0x140
[   45.408276][ T3989]  dump_stack+0x15/0x1b
[   45.408294][ T3989]  should_fail_ex+0x265/0x280
[   45.408314][ T3989]  should_failslab+0x8c/0xb0
[   45.408388][ T3989]  kmem_cache_alloc_node_noprof+0x57/0x320
[   45.408421][ T3989]  ? __alloc_skb+0x101/0x320
[   45.408444][ T3989]  __alloc_skb+0x101/0x320
[   45.408467][ T3989]  netlink_alloc_large_skb+0xba/0xf0
[   45.408509][ T3989]  netlink_sendmsg+0x3cf/0x6b0
[   45.408549][ T3989]  ? __pfx_netlink_sendmsg+0x10/0x10
[   45.408570][ T3989]  __sock_sendmsg+0x145/0x180
[   45.408654][ T3989]  ____sys_sendmsg+0x31e/0x4e0
[   45.408685][ T3989]  ___sys_sendmsg+0x17b/0x1d0
[   45.408725][ T3989]  __x64_sys_sendmsg+0xd4/0x160
[   45.408758][ T3989]  x64_sys_call+0x191e/0x2ff0
[   45.408809][ T3989]  do_syscall_64+0xd2/0x200
[   45.408838][ T3989]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   45.408865][ T3989]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   45.408955][ T3989]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   45.408983][ T3989] RIP: 0033:0x7f1228dfebe9
[   45.409001][ T3989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   45.409022][ T3989] RSP: 002b:00007f1227867038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   45.409080][ T3989] RAX: ffffffffffffffda RBX: 00007f1229025fa0 RCX: 00007f1228dfebe9
[   45.409095][ T3989] RDX: 0000000004000894 RSI: 0000200000000300 RDI: 0000000000000003
[   45.409111][ T3989] RBP: 00007f1227867090 R08: 0000000000000000 R09: 0000000000000000
[   45.409179][ T3989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   45.409241][ T3989] R13: 00007f1229026038 R14: 00007f1229025fa0 R15: 00007fff4985a408
[   45.409263][ T3989]  </TASK>
[   45.674004][ T3999] loop3: detected capacity change from 0 to 1024
[   45.711766][ T3999] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   45.740052][ T4004] loop5: detected capacity change from 0 to 1024
[   45.752234][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.820483][ T4004] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   45.883011][ T4004] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   45.899388][ T4011] loop0: detected capacity change from 0 to 512
[   45.924518][ T3999] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.127: Allocating blocks 449-513 which overlap fs metadata
[   45.970226][ T4011] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   45.996527][ T4011] ext4 filesystem being mounted at /21/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   46.007821][ T3626] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.025792][ T3998] EXT4-fs (loop3): pa ffff88810073e1c0: logic 48, phys. 177, len 21
[   46.033876][ T3998] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4
[   46.125708][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.250589][ T4023] SELinux: ebitmap: truncated map
[   46.260867][ T4023] SELinux: failed to load policy
[   46.261074][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.279276][ T4023] siw: device registration error -23
[   46.328156][ T4027] loop0: detected capacity change from 0 to 1764
[   46.345787][ T4028] team0 (unregistering): Port device team_slave_0 removed
[   46.362678][ T4028] team0 (unregistering): Port device team_slave_1 removed
[   46.445262][ T4036] loop3: detected capacity change from 0 to 128
[   46.459918][ T4036] FAT-fs (loop3): Directory bread(block 32) failed
[   46.483801][ T4036] FAT-fs (loop3): Directory bread(block 33) failed
[   46.524667][ T4036] FAT-fs (loop3): Directory bread(block 34) failed
[   46.542900][ T4040] netlink: 12 bytes leftover after parsing attributes in process `syz.0.137'.
[   46.559240][ T4036] FAT-fs (loop3): Directory bread(block 35) failed
[   46.609482][ T4036] FAT-fs (loop3): Directory bread(block 36) failed
[   46.614473][ T4043] loop5: detected capacity change from 0 to 4096
[   46.634995][ T4036] FAT-fs (loop3): Directory bread(block 37) failed
[   46.656566][ T4036] FAT-fs (loop3): Directory bread(block 38) failed
[   46.656694][ T4043] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   46.704632][ T4047] loop1: detected capacity change from 0 to 1024
[   46.716687][ T4036] FAT-fs (loop3): Directory bread(block 39) failed
[   46.760834][ T4049] loop0: detected capacity change from 0 to 512
[   46.784393][ T4047] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   46.798306][ T4049] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   46.813801][ T4056] loop2: detected capacity change from 0 to 512
[   46.827067][ T4036] FAT-fs (loop3): Directory bread(block 40) failed
[   46.836585][ T4047] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   46.847051][ T4036] FAT-fs (loop3): Directory bread(block 41) failed
[   46.867587][ T4049] ext4 filesystem being mounted at /24/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   46.889273][ T4056] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   46.908112][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.914515][ T4056] ext4 filesystem being mounted at /31/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   46.931353][ T4036] syz.3.136: attempt to access beyond end of device
[   46.931353][ T4036] loop3: rw=0, sector=4112, nr_sectors = 4 limit=128
[   46.944645][ T4036] Buffer I/O error on dev loop3, logical block 1028, async page read
[   46.952983][ T4036] syz.3.136: attempt to access beyond end of device
[   46.952983][ T4036] loop3: rw=0, sector=167964, nr_sectors = 4 limit=128
[   46.966348][ T4036] Buffer I/O error on dev loop3, logical block 41991, async page read
[   46.974593][ T4036] FAT-fs (loop3): Filesystem has been set read-only
[   46.981443][ T4036] syz.3.136: attempt to access beyond end of device
[   46.981443][ T4036] loop3: rw=0, sector=4112, nr_sectors = 4 limit=128
[   46.994709][ T4036] Buffer I/O error on dev loop3, logical block 1028, async page read
[   47.002924][ T4036] syz.3.136: attempt to access beyond end of device
[   47.002924][ T4036] loop3: rw=0, sector=167964, nr_sectors = 4 limit=128
[   47.016288][ T4036] Buffer I/O error on dev loop3, logical block 41991, async page read
[   47.037396][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.053750][ T4062] loop1: detected capacity change from 0 to 1024
[   47.140049][ T4062] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   47.183102][ T3626] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.198559][ T4070] netlink: 'syz.2.146': attribute type 5 has an invalid length.
[   47.206311][ T4070] netlink: 28 bytes leftover after parsing attributes in process `syz.2.146'.
[   47.223799][ T4062] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.143: Allocating blocks 449-513 which overlap fs metadata
[   47.252705][ T4077] netlink: 4 bytes leftover after parsing attributes in process `syz.5.148'.
[   47.282958][ T4061] EXT4-fs (loop1): pa ffff888106e9b9a0: logic 48, phys. 177, len 21
[   47.291131][ T4061] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4
[   47.303640][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.351430][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.398725][ T4088] loop0: detected capacity change from 0 to 512
[   47.418714][ T4088] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   47.434096][ T4088] ext4 filesystem being mounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   47.459981][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.483902][ T4096] loop0: detected capacity change from 0 to 1024
[   47.497742][ T4096] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   47.510042][ T4096] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   47.534130][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.645847][ T4090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   47.654492][ T4090] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   47.670973][ T4090] loop1: detected capacity change from 0 to 1024
[   47.678523][ T4090] EXT4-fs: Ignoring removed bh option
[   47.695895][ T4090] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled
[   47.741844][ T4090] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   47.761025][ T4090] EXT4-fs error (device loop1): ext4_check_all_de:659: inode #12: block 7: comm syz.1.152: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0
[   47.784002][ T4090] EXT4-fs (loop1): Remounting filesystem read-only
[   48.284284][ T4113] Zero length message leads to an empty skb
[   48.292777][   T29] kauditd_printk_skb: 12184 callbacks suppressed
[   48.292798][   T29] audit: type=1400 audit(1756059469.835:22202): avc:  denied  { create } for  pid=4112 comm="syz.0.158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   48.321288][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.332838][   T29] audit: type=1400 audit(1756059469.845:22203): avc:  denied  { ioctl } for  pid=4112 comm="syz.0.158" path="socket:[6632]" dev="sockfs" ino=6632 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   48.434543][ T4126] loop5: detected capacity change from 0 to 1024
[   48.455889][ T4126] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   48.480445][ T4132] loop1: detected capacity change from 0 to 1024
[   48.491522][ T4126] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4183: comm syz.5.163: Allocating blocks 449-513 which overlap fs metadata
[   48.508459][ T4132] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   48.523406][ T4132] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   48.543621][ T4125] EXT4-fs (loop5): pa ffff888106e9b8c0: logic 48, phys. 177, len 21
[   48.551865][ T4125] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4
[   48.567593][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.578672][   T29] audit: type=1326 audit(1756059470.115:22204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4104 comm="syz.3.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8fd9febe9 code=0x7ffc0000
[   48.602120][   T29] audit: type=1326 audit(1756059470.115:22205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4104 comm="syz.3.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8fd9febe9 code=0x7ffc0000
[   48.629721][ T3626] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.727060][ T4138] netlink: 4 bytes leftover after parsing attributes in process `syz.1.166'.
[   48.747079][ T4145] loop3: detected capacity change from 0 to 512
[   48.763587][ T4145] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   48.782434][ T4145] ext4 filesystem being mounted at /33/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   48.795704][ T4145] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.168: corrupted inode contents
[   48.800000][ T4149] loop1: detected capacity change from 0 to 4096
[   48.809751][   T29] audit: type=1400 audit(1756059470.325:22206): avc:  denied  { setattr } for  pid=4144 comm="syz.3.168" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   48.837593][ T4145] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #2: comm syz.3.168: mark_inode_dirty error
[   48.850189][ T4145] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.168: corrupted inode contents
[   48.854293][ T4149] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   49.140804][ T4160] netlink: 'syz.1.173': attribute type 10 has an invalid length.
[   49.149626][ T4153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   49.155258][ T4160] team0: Device hsr_slave_0 failed to register rx_handler
[   49.158582][ T4153] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   49.180407][ T4153] loop3: detected capacity change from 0 to 1024
[   49.189367][ T4153] EXT4-fs: Ignoring removed bh option
[   49.195451][ T4153] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled
[   49.228569][ T4155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   49.243748][ T4155] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   49.251694][   T29] audit: type=1400 audit(1756059470.795:22207): avc:  denied  { ioctl } for  pid=4163 comm="syz.1.174" path="socket:[6690]" dev="sockfs" ino=6690 ioctlcmd=0x48c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   49.276899][ T4155] loop5: detected capacity change from 0 to 1024
[   49.285537][ T4155] EXT4-fs: Ignoring removed bh option
[   49.299528][ T4155] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled
[   49.335984][ T4169] loop1: detected capacity change from 0 to 1024
[   49.360017][ T4169] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   49.360388][ T4174] netlink: 12 bytes leftover after parsing attributes in process `syz.0.178'.
[   49.435819][ T4181] loop0: detected capacity change from 0 to 1024
[   49.448929][ T4181] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   49.465934][ T4184] netlink: 'syz.1.179': attribute type 21 has an invalid length.
[   49.474050][ T4184] netlink: 4 bytes leftover after parsing attributes in process `syz.1.179'.
[   49.496941][ T3390] usb usb8-port2: attempt power cycle
[   49.809301][ T4191] loop3: detected capacity change from 0 to 8192
[   49.911054][ T4195] loop0: detected capacity change from 0 to 8192
[   49.956052][ T4201] loop5: detected capacity change from 0 to 1024
[   49.970792][ T4201] EXT4-fs: Ignoring removed orlov option
[   50.399754][ T4214] loop1: detected capacity change from 0 to 1024
[   50.412040][ T4212] loop5: detected capacity change from 0 to 512
[   50.445785][ T4212] EXT4-fs: Ignoring removed orlov option
[   50.455161][ T4212] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   50.469103][ T4212] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[   50.486376][ T4212] EXT4-fs (loop5): 1 orphan inode deleted
[   50.516794][ T4214] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.189: Allocating blocks 449-513 which overlap fs metadata
[   50.578764][ T4220] loop5: detected capacity change from 0 to 1024
[   50.588317][ T4220] EXT4-fs: Ignoring removed orlov option
[   50.599517][ T4214] EXT4-fs (loop1): pa ffff88810073e310: logic 48, phys. 177, len 21
[   50.599864][   T29] audit: type=1400 audit(1756059472.135:22208): avc:  denied  { relabelto } for  pid=4213 comm="syz.1.189" name="cgroup.controllers" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="@"
[   50.607695][ T4214] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4
[   50.705939][ T4223] loop1: detected capacity change from 0 to 512
[   50.752030][ T4225] loop3: detected capacity change from 0 to 512
[   50.759006][ T4223] EXT4-fs: Ignoring removed orlov option
[   50.766833][ T4223] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   50.790995][ T4223] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[   50.804455][ T4225] ext4 filesystem being mounted at /37/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   50.818947][ T4223] EXT4-fs (loop1): 1 orphan inode deleted
[   50.872934][ T4229] EXT4-fs (loop5): shut down requested (0)
[   50.879066][   T29] audit: type=1400 audit(1756059472.405:22209): avc:  denied  { ioctl } for  pid=4219 comm="syz.5.190" path="/24/bus/blkio.bfq.io_queued" dev="loop5" ino=20 ioctlcmd=0x587d scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   50.915141][   T29] audit: type=1400 audit(1756059472.445:22210): avc:  denied  { read } for  pid=2977 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[   50.937407][   T29] audit: type=1400 audit(1756059472.445:22211): avc:  denied  { search } for  pid=2977 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   50.978206][ T4236] loop1: detected capacity change from 0 to 512
[   50.993139][ T4236] ext4 filesystem being mounted at /49/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   51.004707][ T4236] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.194: corrupted inode contents
[   51.021421][ T4236] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm syz.1.194: mark_inode_dirty error
[   51.052098][ T4236] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.194: corrupted inode contents
[   51.158752][ T4248] loop3: detected capacity change from 0 to 1024
[   51.172504][ T4231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   51.193060][ T4248] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   51.194940][ T4231] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   51.218014][ T4248] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: comm syz.3.198: lblock 0 mapped to illegal pblock 0 (length 1)
[   51.241512][ T4248] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[   51.253936][ T4248] EXT4-fs (loop3): This should not happen!! Data will be lost
[   51.253936][ T4248] 
[   51.264115][ T4231] loop0: detected capacity change from 0 to 1024
[   51.271063][ T4231] EXT4-fs: Ignoring removed bh option
[   51.292199][ T4231] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled
[   51.376970][ T3390] usb usb8-port2: unable to enumerate USB device
[   51.465827][ T4246] loop5: detected capacity change from 0 to 32768
[   51.520366][ T4285] netlink: 12 bytes leftover after parsing attributes in process `syz.3.203'.
[   51.591716][ T4275] loop2: detected capacity change from 0 to 8192
[   51.654501][ T4294] SELinux: ebitmap: truncated map
[   51.660634][ T4294] SELinux: failed to load policy
[   51.669187][ T4294] siw: device registration error -23
[   51.700527][ T4274] loop1: detected capacity change from 0 to 32768
[   51.864148][ T4320] loop3: detected capacity change from 0 to 128
[   51.885499][ T4320] FAT-fs (loop3): Directory bread(block 32) failed
[   51.893908][ T4320] FAT-fs (loop3): Directory bread(block 33) failed
[   51.901555][ T4320] FAT-fs (loop3): Directory bread(block 34) failed
[   51.937129][ T4320] FAT-fs (loop3): Directory bread(block 35) failed
[   51.956118][ T4320] FAT-fs (loop3): Directory bread(block 36) failed
[   51.963056][ T4320] FAT-fs (loop3): Directory bread(block 37) failed
[   51.970663][ T4320] FAT-fs (loop3): Directory bread(block 38) failed
[   51.977471][ T4320] FAT-fs (loop3): Directory bread(block 39) failed
[   51.984075][ T4320] FAT-fs (loop3): Directory bread(block 40) failed
[   51.991021][ T4320] FAT-fs (loop3): Directory bread(block 41) failed
[   52.017609][ T4326] loop0: detected capacity change from 0 to 1024
[   52.026321][ T4320] syz.3.207: attempt to access beyond end of device
[   52.026321][ T4320] loop3: rw=0, sector=4112, nr_sectors = 4 limit=128
[   52.039678][ T4320] Buffer I/O error on dev loop3, logical block 1028, async page read
[   52.050356][ T4328] FAULT_INJECTION: forcing a failure.
[   52.050356][ T4328] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   52.054188][ T4320] syz.3.207: attempt to access beyond end of device
[   52.054188][ T4320] loop3: rw=0, sector=167964, nr_sectors = 4 limit=128
[   52.063481][ T4328] CPU: 0 UID: 0 PID: 4328 Comm: syz.5.209 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   52.063512][ T4328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   52.063565][ T4328] Call Trace:
[   52.063575][ T4328]  <TASK>
[   52.063585][ T4328]  __dump_stack+0x1d/0x30
[   52.063616][ T4328]  dump_stack_lvl+0xe8/0x140
[   52.063643][ T4328]  dump_stack+0x15/0x1b
[   52.063667][ T4328]  should_fail_ex+0x265/0x280
[   52.063695][ T4328]  should_fail+0xb/0x20
[   52.063792][ T4328]  should_fail_usercopy+0x1a/0x20
[   52.063885][ T4328]  _copy_from_user+0x1c/0xb0
[   52.063925][ T4328]  __sys_bpf+0x178/0x7b0
[   52.063970][ T4328]  __x64_sys_bpf+0x41/0x50
[   52.064002][ T4328]  x64_sys_call+0x2aea/0x2ff0
[   52.064069][ T4328]  do_syscall_64+0xd2/0x200
[   52.064119][ T4328]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   52.064159][ T4328]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   52.064194][ T4328]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   52.064226][ T4328] RIP: 0033:0x7fb83b62ebe9
[   52.064246][ T4328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   52.064270][ T4328] RSP: 002b:00007fb83a08f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   52.064413][ T4328] RAX: ffffffffffffffda RBX: 00007fb83b855fa0 RCX: 00007fb83b62ebe9
[   52.064430][ T4328] RDX: 0000000000000020 RSI: 00002000000002c0 RDI: 0000000000000009
[   52.064447][ T4328] RBP: 00007fb83a08f090 R08: 0000000000000000 R09: 0000000000000000
[   52.064462][ T4328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   52.064479][ T4328] R13: 00007fb83b856038 R14: 00007fb83b855fa0 R15: 00007ffd62925688
[   52.064503][ T4328]  </TASK>
[   52.245977][ T4320] Buffer I/O error on dev loop3, logical block 41991, async page read
[   52.254268][ T4320] FAT-fs (loop3): Filesystem has been set read-only
[   52.262264][ T4320] syz.3.207: attempt to access beyond end of device
[   52.262264][ T4320] loop3: rw=0, sector=4112, nr_sectors = 4 limit=128
[   52.275468][ T4320] Buffer I/O error on dev loop3, logical block 1028, async page read
[   52.284215][ T4320] syz.3.207: attempt to access beyond end of device
[   52.284215][ T4320] loop3: rw=0, sector=167964, nr_sectors = 4 limit=128
[   52.297646][ T4320] Buffer I/O error on dev loop3, logical block 41991, async page read
[   52.450807][ T4326] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.210: Allocating blocks 497-513 which overlap fs metadata
[   52.466183][ T4326] EXT4-fs (loop0): pa ffff88810073e3f0: logic 256, phys. 385, len 8
[   52.474317][ T4326] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1
[   52.614293][ T4337] loop5: detected capacity change from 0 to 8192
[   53.452097][ T4385] netlink: 'syz.5.221': attribute type 21 has an invalid length.
[   53.527821][   T29] kauditd_printk_skb: 103 callbacks suppressed
[   53.527837][   T29] audit: type=1400 audit(1756059475.065:22315): avc:  denied  { append } for  pid=4381 comm="syz.5.221" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   53.562801][ T4389] loop2: detected capacity change from 0 to 128
[   53.578230][ T4389] FAT-fs (loop2): Directory bread(block 32) failed
[   53.584961][ T4389] FAT-fs (loop2): Directory bread(block 33) failed
[   53.595644][   T29] audit: type=1326 audit(1756059475.135:22316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4395 comm="syz.3.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8fd9febe9 code=0x7ffc0000
[   53.619421][   T29] audit: type=1326 audit(1756059475.135:22317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4395 comm="syz.3.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8fd9febe9 code=0x7ffc0000
[   53.643187][   T29] audit: type=1326 audit(1756059475.135:22318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4395 comm="syz.3.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd8fd9febe9 code=0x7ffc0000
[   53.658271][ T4389] FAT-fs (loop2): Directory bread(block 34) failed
[   53.666752][   T29] audit: type=1326 audit(1756059475.135:22319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4395 comm="syz.3.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8fd9febe9 code=0x7ffc0000
[   53.696610][   T29] audit: type=1326 audit(1756059475.135:22320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4395 comm="syz.3.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8fd9febe9 code=0x7ffc0000
[   53.707112][ T4389] FAT-fs (loop2): Directory bread(block 35) failed
[   53.720113][   T29] audit: type=1326 audit(1756059475.135:22321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4395 comm="syz.3.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7fd8fd9febe9 code=0x7ffc0000
[   53.750051][   T29] audit: type=1326 audit(1756059475.135:22322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4395 comm="syz.3.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8fd9febe9 code=0x7ffc0000
[   53.763089][ T4389] FAT-fs (loop2): Directory bread(block 36) failed
[   53.773562][   T29] audit: type=1326 audit(1756059475.135:22323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4395 comm="syz.3.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8fd9febe9 code=0x7ffc0000
[   53.792735][ T4389] FAT-fs (loop2): Directory bread(block 37) failed
[   53.803527][   T29] audit: type=1326 audit(1756059475.135:22324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4395 comm="syz.3.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd8fd9febe9 code=0x7ffc0000
[   53.834194][ T4385] loop5: detected capacity change from 0 to 512
[   53.843162][ T4398] netlink: 'syz.3.228': attribute type 21 has an invalid length.
[   53.892743][ T4389] FAT-fs (loop2): Directory bread(block 38) failed
[   53.902704][ T4389] FAT-fs (loop2): Directory bread(block 39) failed
[   53.915037][ T4389] FAT-fs (loop2): Directory bread(block 40) failed
[   53.955484][ T4400] loop3: detected capacity change from 0 to 512
[   53.962402][ T4389] FAT-fs (loop2): Directory bread(block 41) failed
[   54.035828][ T4403] SELinux: ebitmap: truncated map
[   54.042002][ T4403] SELinux: failed to load policy
[   54.055474][ T4400] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[   54.058785][ T4403] siw: device registration error -23
[   54.065715][ T4389] syz.2.225: attempt to access beyond end of device
[   54.065715][ T4389] loop2: rw=0, sector=4112, nr_sectors = 4 limit=128
[   54.081881][ T4405] loop5: detected capacity change from 0 to 1024
[   54.083114][ T4389] Buffer I/O error on dev loop2, logical block 1028, async page read
[   54.097892][ T4389] syz.2.225: attempt to access beyond end of device
[   54.097892][ T4389] loop2: rw=0, sector=167964, nr_sectors = 4 limit=128
[   54.111292][ T4389] Buffer I/O error on dev loop2, logical block 41991, async page read
[   54.119533][ T4389] FAT-fs (loop2): Filesystem has been set read-only
[   54.127825][ T4389] syz.2.225: attempt to access beyond end of device
[   54.127825][ T4389] loop2: rw=0, sector=4112, nr_sectors = 4 limit=128
[   54.141031][ T4389] Buffer I/O error on dev loop2, logical block 1028, async page read
[   54.162608][ T4389] syz.2.225: attempt to access beyond end of device
[   54.162608][ T4389] loop2: rw=0, sector=167964, nr_sectors = 4 limit=128
[   54.165207][ T4400] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #17: comm syz.3.228: iget: bad i_size value: -6917529027641081756
[   54.176083][ T4389] Buffer I/O error on dev loop2, logical block 41991, async page read
[   54.212204][ T4405] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4183: comm syz.5.230: Allocating blocks 449-513 which overlap fs metadata
[   54.222997][ T4400] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.228: couldn't read orphan inode 17 (err -117)
[   54.275039][ T4398] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.228: bg 0: block 65: padding at end of block bitmap is not set
[   54.292047][ T4398] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.228: Failed to acquire dquot type 0
[   54.306199][ T4405] EXT4-fs (loop5): pa ffff888106e9baf0: logic 48, phys. 177, len 21
[   54.314329][ T4405] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4
[   54.405656][ T4420] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4420 comm=syz.5.234
[   54.451576][ T4424] netlink: 'syz.5.236': attribute type 1 has an invalid length.
[   54.465385][ T4424] 8021q: adding VLAN 0 to HW filter on device bond1
[   54.477047][ T4424] netlink: 14 bytes leftover after parsing attributes in process `syz.5.236'.
[   54.483767][ T4398] syz.3.228 (4398) used greatest stack depth: 9392 bytes left
[   54.511000][ T4427] netlink: 'syz.3.237': attribute type 1 has an invalid length.
[   54.518726][ T4427] netlink: 228 bytes leftover after parsing attributes in process `syz.3.237'.
[   54.527995][ T3390] usb usb8-port2: attempt power cycle
[   54.546409][ T4427] ip6gre1: entered allmulticast mode
[   54.774335][ T4429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   54.783752][ T4429] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   54.818835][ T4431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   54.830651][ T4431] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   54.849920][ T4431] loop3: detected capacity change from 0 to 1024
[   54.859079][ T4431] EXT4-fs: Ignoring removed bh option
[   54.866639][ T4431] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled
[   55.300661][ T4439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   55.310052][ T4439] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   55.323985][ T4439] loop0: detected capacity change from 0 to 1024
[   55.333198][ T4439] EXT4-fs: Ignoring removed bh option
[   55.344160][ T4439] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled
[   55.435958][ T4447] SELinux: ebitmap: truncated map
[   55.442039][ T4447] SELinux: failed to load policy
[   55.451682][ T4447] siw: device registration error -23
[   55.475992][ T4450] loop3: detected capacity change from 0 to 128
[   55.491693][ T4450] FAT-fs (loop3): Directory bread(block 32) failed
[   55.498514][ T4450] FAT-fs (loop3): Directory bread(block 33) failed
[   55.505194][ T4450] FAT-fs (loop3): Directory bread(block 34) failed
[   55.512646][ T4450] FAT-fs (loop3): Directory bread(block 35) failed
[   55.519229][ T4450] FAT-fs (loop3): Directory bread(block 36) failed
[   55.525918][ T4450] FAT-fs (loop3): Directory bread(block 37) failed
[   55.532504][ T4450] FAT-fs (loop3): Directory bread(block 38) failed
[   55.539148][ T4450] FAT-fs (loop3): Directory bread(block 39) failed
[   55.545698][ T4450] FAT-fs (loop3): Directory bread(block 40) failed
[   55.552307][ T4450] FAT-fs (loop3): Directory bread(block 41) failed
[   55.583503][ T4450] syz.3.244: attempt to access beyond end of device
[   55.583503][ T4450] loop3: rw=0, sector=4112, nr_sectors = 4 limit=128
[   55.596757][ T4450] Buffer I/O error on dev loop3, logical block 1028, async page read
[   55.604982][ T4450] syz.3.244: attempt to access beyond end of device
[   55.604982][ T4450] loop3: rw=0, sector=167964, nr_sectors = 4 limit=128
[   55.618401][ T4450] Buffer I/O error on dev loop3, logical block 41991, async page read
[   55.626634][ T4450] FAT-fs (loop3): Filesystem has been set read-only
[   55.639620][ T4453] loop2: detected capacity change from 0 to 512
[   55.658733][ T4453] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   55.730392][ T4466] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   55.742905][ T4466] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   55.756161][ T4466] FAULT_INJECTION: forcing a failure.
[   55.756161][ T4466] name failslab, interval 1, probability 0, space 0, times 0
[   55.768846][ T4466] CPU: 1 UID: 0 PID: 4466 Comm: syz.3.248 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   55.768869][ T4466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   55.768880][ T4466] Call Trace:
[   55.768886][ T4466]  <TASK>
[   55.768893][ T4466]  __dump_stack+0x1d/0x30
[   55.768911][ T4466]  dump_stack_lvl+0xe8/0x140
[   55.768990][ T4466]  dump_stack+0x15/0x1b
[   55.769004][ T4466]  should_fail_ex+0x265/0x280
[   55.769024][ T4466]  should_failslab+0x8c/0xb0
[   55.769115][ T4466]  kmem_cache_alloc_noprof+0x50/0x310
[   55.769139][ T4466]  ? skb_clone+0x151/0x1f0
[   55.769159][ T4466]  skb_clone+0x151/0x1f0
[   55.769177][ T4466]  __netlink_deliver_tap+0x2c9/0x500
[   55.769200][ T4466]  netlink_unicast+0x66b/0x690
[   55.769272][ T4466]  netlink_sendmsg+0x58b/0x6b0
[   55.769294][ T4466]  ? __pfx_netlink_sendmsg+0x10/0x10
[   55.769313][ T4466]  __sock_sendmsg+0x145/0x180
[   55.769338][ T4466]  ____sys_sendmsg+0x31e/0x4e0
[   55.769431][ T4466]  ___sys_sendmsg+0x17b/0x1d0
[   55.769462][ T4466]  __x64_sys_sendmsg+0xd4/0x160
[   55.769562][ T4466]  x64_sys_call+0x191e/0x2ff0
[   55.769580][ T4466]  do_syscall_64+0xd2/0x200
[   55.769604][ T4466]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   55.769624][ T4466]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   55.769649][ T4466]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   55.769667][ T4466] RIP: 0033:0x7fd8fd9febe9
[   55.769679][ T4466] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   55.769702][ T4466] RSP: 002b:00007fd8fc467038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   55.769718][ T4466] RAX: ffffffffffffffda RBX: 00007fd8fdc25fa0 RCX: 00007fd8fd9febe9
[   55.769729][ T4466] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000013
[   55.769739][ T4466] RBP: 00007fd8fc467090 R08: 0000000000000000 R09: 0000000000000000
[   55.769748][ T4466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   55.769758][ T4466] R13: 00007fd8fdc26038 R14: 00007fd8fdc25fa0 R15: 00007ffc381443d8
[   55.769782][ T4466]  </TASK>
[   55.996163][ T3303] EXT4-fs error (device loop0): ext4_read_inline_dir:1476: inode #12: block 7: comm syz-executor: path /43/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[   56.026700][ T3303] EXT4-fs (loop0): Remounting filesystem read-only
[   56.053749][ T4472] netlink: 'syz.0.250': attribute type 1 has an invalid length.
[   56.071067][ T4472] netlink: 52 bytes leftover after parsing attributes in process `syz.0.250'.
[   56.082241][ T4472] bond1 (unregistering): Released all slaves
[   56.149911][ T4476] loop0: detected capacity change from 0 to 1024
[   56.188607][ T4480] loop5: detected capacity change from 0 to 1024
[   56.220293][ T4480] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   56.256274][ T4486] netlink: 'syz.5.255': attribute type 1 has an invalid length.
[   56.264112][ T4486] netlink: 'syz.5.255': attribute type 2 has an invalid length.
[   56.406792][ T3390] usb usb8-port2: unable to enumerate USB device
[   56.453937][ T4484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   56.463048][ T4484] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   56.520599][ T4493] netlink: 12 bytes leftover after parsing attributes in process `syz.2.258'.
[   56.592601][ T4498] loop2: detected capacity change from 0 to 1024
[   56.611775][ T4497] loop1: detected capacity change from 0 to 512
[   56.631336][ T4497] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   56.668686][ T4498] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.260: Allocating blocks 449-513 which overlap fs metadata
[   56.687558][ T4504] loop1: detected capacity change from 0 to 1024
[   56.699778][ T4504] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   56.718527][ T4504] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[   56.799520][ T4498] EXT4-fs (loop2): pa ffff888106e9bb60: logic 48, phys. 177, len 21
[   56.807609][ T4498] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4
[   56.863502][ T4511] loop2: detected capacity change from 0 to 1024
[   56.945359][ T4518] loop2: detected capacity change from 0 to 1024
[   56.968780][ T4518] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   57.064776][ T4520] loop3: detected capacity change from 0 to 8192
[   57.201436][ T4531] SELinux: ebitmap: truncated map
[   57.227491][ T4531] SELinux: failed to load policy
[   57.268789][ T4533] ==================================================================
[   57.276906][ T4533] BUG: KCSAN: data-race in fat16_ent_put / fat_mirror_bhs
[   57.284065][ T4533] 
[   57.286394][ T4533] write to 0xffff888107f4d360 of 2 bytes by task 4534 on cpu 1:
[   57.294025][ T4533]  fat16_ent_put+0x28/0x60
[   57.298467][ T4533]  fat_ent_write+0x69/0xe0
[   57.302905][ T4533]  fat_chain_add+0x15d/0x440
[   57.307518][ T4533]  fat_get_block+0x46c/0x5e0
[   57.312205][ T4533]  __block_write_begin_int+0x3fd/0xf90
[   57.317691][ T4533]  cont_write_begin+0x5fc/0x970
[   57.322557][ T4533]  fat_write_begin+0x4f/0xe0
[   57.327158][ T4533]  cont_write_begin+0x1ad/0x970
[   57.332031][ T4533]  fat_write_begin+0x4f/0xe0
[   57.336643][ T4533]  generic_cont_expand_simple+0xb0/0x150
[   57.342294][ T4533]  fat_cont_expand+0x3e/0x170
[   57.346991][ T4533]  fat_setattr+0x2a5/0x8a0
[   57.351415][ T4533]  notify_change+0x809/0x890
[   57.356024][ T4533]  do_ftruncate+0x34b/0x450
[   57.360557][ T4533]  __x64_sys_ftruncate+0x68/0xc0
[   57.365513][ T4533]  x64_sys_call+0x2d52/0x2ff0
[   57.370205][ T4533]  do_syscall_64+0xd2/0x200
[   57.374727][ T4533]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   57.380631][ T4533] 
[   57.382968][ T4533] read to 0xffff888107f4d200 of 512 bytes by task 4533 on cpu 0:
[   57.390701][ T4533]  fat_mirror_bhs+0x1df/0x320
[   57.395403][ T4533]  fat_ent_write+0xd0/0xe0
[   57.399847][ T4533]  fat_chain_add+0x15d/0x440
[   57.404465][ T4533]  fat_get_block+0x46c/0x5e0
[   57.409073][ T4533]  __block_write_begin_int+0x3fd/0xf90
[   57.414562][ T4533]  cont_write_begin+0x5fc/0x970
[   57.419444][ T4533]  fat_write_begin+0x4f/0xe0
[   57.424057][ T4533]  generic_perform_write+0x184/0x490
[   57.429360][ T4533]  __generic_file_write_iter+0x9e/0x120
[   57.434942][ T4533]  generic_file_write_iter+0x8d/0x2f0
[   57.440342][ T4533]  vfs_write+0x52a/0x960
[   57.444594][ T4533]  ksys_write+0xda/0x1a0
[   57.448842][ T4533]  __x64_sys_write+0x40/0x50
[   57.453442][ T4533]  x64_sys_call+0x27fe/0x2ff0
[   57.458128][ T4533]  do_syscall_64+0xd2/0x200
[   57.462650][ T4533]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   57.468551][ T4533] 
[   57.470875][ T4533] Reported by Kernel Concurrency Sanitizer on:
[   57.477027][ T4533] CPU: 0 UID: 0 PID: 4533 Comm: syz.3.267 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   57.486666][ T4533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   57.496727][ T4533] ==================================================================
[   58.536526][   T29] kauditd_printk_skb: 14730 callbacks suppressed
[   58.536541][   T29] audit: type=1326 audit(1756059480.065:37050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4485 comm="syz.5.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb83b62ebe9 code=0x50000
[   58.571373][   T29] audit: type=1326 audit(1756059480.105:37051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4485 comm="syz.5.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb83b62ebe9 code=0x50000
[   58.594690][   T29] audit: type=1326 audit(1756059480.105:37052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4485 comm="syz.5.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb83b62ebe9 code=0x50000
[   58.617967][   T29] audit: type=1326 audit(1756059480.105:37053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4485 comm="syz.5.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb83b62ebe9 code=0x50000
[   58.641111][   T29] audit: type=1326 audit(1756059480.105:37054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4485 comm="syz.5.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb83b62ebe9 code=0x50000
[   58.664350][   T29] audit: type=1326 audit(1756059480.105:37055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4485 comm="syz.5.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb83b62ebe9 code=0x50000
[   58.687578][   T29] audit: type=1326 audit(1756059480.105:37056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4485 comm="syz.5.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb83b62ebe9 code=0x50000
[   58.710810][   T29] audit: type=1326 audit(1756059480.105:37057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4485 comm="syz.5.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb83b62ebe9 code=0x50000
[   58.734019][   T29] audit: type=1326 audit(1756059480.105:37058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4485 comm="syz.5.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb83b62ebe9 code=0x50000
[   58.757181][   T29] audit: type=1326 audit(1756059480.105:37059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4485 comm="syz.5.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb83b62ebe9 code=0x50000
[   59.217215][ T1043] usb usb8-port2: attempt power cycle
[   61.057168][ T1043] usb usb8-port2: unable to enumerate USB device