last executing test programs:

4m21.751562885s ago: executing program 32 (id=3932):
prctl$PR_SET_NAME(0xf, &(0x7f0000000180)='wg1\x00')
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x80004}, 0x18)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x1, 0x803, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001900)=@newlink={0x58, 0x10, 0x403, 0x300, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40220}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1e, 0x1d}}, @IFLA_VLAN_ID={0x6, 0x1, 0xffe}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x8000)

3m4.140070442s ago: executing program 0 (id=6617):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20002, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4f, 0x0, &(0x7f0000000000)='GPL\x00', 0x200, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r0 = syz_io_uring_setup(0x121d, &(0x7f0000000500)={0x0, 0x7d10, 0x80, 0x3, 0x1000034e}, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000580)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
r3 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x23457})
io_uring_enter(r0, 0x46bc, 0x3, 0x20, 0x0, 0x0)

3m4.03147506s ago: executing program 0 (id=6621):
bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000008850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = gettid()
timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000380))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
fcntl$setlease(r2, 0x400, 0x0)
truncate(&(0x7f0000000040)='./file0\x00', 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10)

3m3.143861141s ago: executing program 0 (id=6635):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000080000000000000000000850000007d00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r3}, 0x10)
fchdir(r2)
open(&(0x7f0000000280)='.\x00', 0x0, 0x8)
close_range(r0, 0xffffffffffffffff, 0x0)

3m3.143516282s ago: executing program 0 (id=6636):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x20081e, &(0x7f00000001c0)={[{@grpquota}, {@jqfmt_vfsv1}, {@minixdf}]}, 0x1, 0x518, &(0x7f0000000ac0)="$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")
open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.numa_stat\x00', 0x275a, 0x0)
fallocate(r0, 0x10, 0x17e, 0x1000f)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]})
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000080), 0x80, 0x7a5, &(0x7f0000000f80)="$eJzs3c9rXNUeAPDvnfxq0r6XPHjwXl0FBA2UTkyNrYKLigsRLBR0bRsm01AzyZTMpDQh0BYR3AgqLgTddO2PunPrj63+Fy6kpWparLiQkTuZSSbNTJq0mZlgPh+4uefcc2/O+c65P87MvcwEcGCNpn8yEUcj4v0kYri2PImIvmqqN+L02nr3V1dy6ZREpfL6r0l1nXurK7lo2CZ1uJb5f0R8907EsczWektLy7NThUJ+oZYfL89dGi8tLR+/ODc1k5/Jz5+cmJw8ceq5Uyf3Ltbff1w+cvuDV57+8vSfb//v5nvfJ3E6jtTKGuPYK6MxWntN+tKXcJOX97qyLku63QAeSXpo9qwd5XE0hqOnmmphsJMtAwDa5WpEVACAAyZx/QeAA6b+OcC91ZVcferuJxKddeeliDi0Fn/9/uZaSW/tnt2h6n3QoXvJpjsjSUSM7EH9oxHx6ddvfp5O0ab7kADNXLseEedHRree/5Mtzyzs1jPbFVYGqrPRBxY7/0HnfJOOf55vNv7LrI9/osn4Z6DJsfsoHn78Z27tQTUtpeO/FxuebbvfEH/NSE8t96/qmK8vuXCxkE/Pbf+OiLHoG0jzE9VVmz8FNXb3r7ut6m8c//324VufpfWn8401Mrd6BzZvMz1VnnrcuOvuXI94ordZ/Ml6/yctxr9nd1jHqy+8+0mrsjT+NN76tDX+9qrciHiqaf9v9GWy7fOJ49XdYby+UzTx1U8fD7Wqf6P/B6rztP76e4FOSPt/aPv4R5LG5zVLu6/jhxvD37Yqa9z/m8fffP/vT96opvtry65MlcsLExH9yWtbl5/Y2Laer6+fxj/2ZPPjv9X+n6k9G3t+Pbe93tu/fFH7V03jr7rWKv72SuOf3lX/b5Oo1LZ5oOjm/dmeVvXvrP8nq6mx2pKdnP8e0tLH2JsBAAAAAAAAAAAAAAAAAAAAAAAAYPcyEXEkkkx2PZ3JZLNrv+H93xjKFIql8rELxcX56aj+VvZI9GXqX3U53PB9qBO178Ov5088kH82Iv4TER8NDFbz2VyxMN3t4AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg5vDm3/+/ms6y2bWynwe63ToAoG0OdbsBAEDHuf4DwMGzu+v/YNvaAQB0zq7f/1eS9jQEAOiYHV//z7e3HQBA57j/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQJudPXMmnSp/rK7k0vz05aXF2eLl49P50mx2bjGXzRUXLmVnisWZQj6bK861/EfX1maFYvHSZMwvXhkv50vl8dLS8rm54uJ8+dzFuamZ/Ll8X8ciAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICdKy0tz04VCvkFiW0Tg/ujGfsm0Rv7ohn/+ER/12pvPEsMdu8EBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDP/R0AAP//aHclQg==")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0)

3m2.804449008s ago: executing program 0 (id=6639):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000540)='fib6_table_lookup\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002e00)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000008009500f10100000000487591731cba12c07d57d995b61e89a4530f92344f242b416ae9eeefc0e9c6f203cb1276bfdbb4ddffffff7f82dc2b938189a7ca02f732e4c2eab72bf40c0682fd0a0c4ac106b29e220dc2880072599456d4c4e6f3fe684ab8373bb4df9d72876ef3834293812e927c01c7da1322da44c7f2ed1084a12f56d1cb39df9858037458a4ca037604007600b6be484e4c9517af216bd8ed42f7dd01008e49f4a94608c9a20819e02fc22e6be45574d4ed88b37ab8d7674c644dca2f1b4d745fd95c41f9dfc1adafd1e5a3e7f2e898961cb43e438c4e41ae43ea118e14ffffffffe4b8a80366ce5401ec61921a1b529cc8b99bffffb1ac006c67767b03b95151aeb89e6d4a43c625aa228504e4afd8c1cc3eb215ba22f43115f4d39dc7beedb130d9f2be90133a4500000058b8c9370634060105baa664953514605fba3973aa021945b985a8a66e0200000057033815717b4fdbe55b37cb8d7f41aacfbd4089ea1bd22440f64909a09b5a759a703e71f358e11ac8e13db15d792e604a4f279b3bd6621bdf2c17bc0400001000000000ff8d81006200607a9a76e5d9656a7154c75773902a1bdf399df3925130312d095e9c1f973d091c198c1a11edb6b3cc425fe203d2f2655a76865c2c34e2470fcfb1248c0add5431a7fbcb0ef4f66a09af93a09fab1daae4b518d7a5d95a017864010067d6bab101446ebfe3fdeed7ee7bb0749cacf56cf27409c60fca2e0004000000000000a9cb6f4a78444986f9b1ab61f9dab53038010000004abbfc59d6d1b18fe380df4bf024f120bd755d82033f2fb7d8fc9e0de834f7646c8dd27da1297d0c77b294e097e293db7f002c0024ab2fb4d32972cba6f49051cec1ff5d16231bbb90a2d201a500000000000000007700b06fa191ebd3a0c2ef0058ffebd7cc4cf80f74a7cdac01d998c24f34a5ba9a4a2039d0416e3f8107671141ffffffe0c7d8e94a27a06a4e3d9acee835fd0571e5bbb3e6d2b5eba505000000968983811f832dc5390f83e817c602c4f1f0d0504255c22ee8674053d0e160e5255366139bbe5863e23c3dd42d21f542816edf56a93d0a7e6f08f9ffffff64875fea6ff57ba6ae25c5e8ca4f78d5a01308243b08f1caa46be5244d64f8e875857f083144c642f71cdc8e5634c1360c056430fe77ee7ed7ac1f9743786b2fb8e0fcfcc3d36c93230b7b1da97c971c8c84a427edc3492b97e73d2060acfd8145e4a5851bc4d6fdc5ad939d7795f3879baa88bd194d48e50c84892c97c800d156b059a718f6b10274b077a710f27ab8ee953de70ea860b74a0f3c3dc11177b11cc2e62a95f1ecf607a8dc38e525f415a1bd46b38845ebca04061bacbf627f7975fe599678fee48f83b5989543729e3600000000bc86cd51704f309130f534741377ea7b7bea3c46c0c4c4b7c27c5d057d95ac85a41cdcee8e6fa31f7d2137ed1fb4b21c13b9a2c5e3f7c9ef9e45a35adbf0b9312be929863f000000000000004a82bc080de1f87808d0711dd76f2977ca7f2684bfa5c14a0cd6f1f561e34e4e8e51e81d4a355a7d00d917c16a2bb0cfb2b5f59dfead7ac6e7fa84746e2e425769b9ee2c8ff10e934847604d930f62924d0562ce17f6dadf5053ed8f33092a41bb46e1878c5295fecc27f9c6d1f62da58c0002ea00000000009aa38a05e70591d5cdab1c488ef3c1984c7c0a566cfc2a080000009ec206a54fb49056a555414178ef00d8b8f3c59f01eb5d83415994efcc6ec4b3c275cd6b1b5ff82ef7d7abb1d218e7a1d0afa285706841aac9ccc89df41c39dd58dd70569dde45f8adeaad7d3328fbb6e279f745d2872f0208635e465ca443c3a64c7803760880af23fb3f430a0311fffc96dd13b951642f1433f65b4e170a62a5f7b7d0f9d5cef0d17289c43d4aee0001f7a343899434594cc23e1c864164e130754b337e560f285dc670a31241bf657babf0615b85dc200a10294b7d5885b43ac62fc7f97a85586168483427072a535f2c7481ec261c00f725de74e48d9a86f7d4a5d28da3f099ca3e6472b9d7c86d961f525f799b4517141f018af0673b8296f867eca1ec07be11bc497a6f7d2b752bcf77c2908b64630e7fa0c2261bc2d5de32ab6bbcf296d36807544aa7c3d3301fe227b713a371414c98695e559f9cbf6b046184064a5f24a4cc6f41f21fc24a3ad7d20a89e00a9dc99a40f890869d35fba3ce6f297661d3f8ba21c65badf55d1859581f9e7ef3e2693b46a8fc85be061ce79a08002c04dc04de8b6536123b24be2ef80eb06b2db900fb30596c1574b2a31f81d61ccfd58080d2330b9c7b87b5d17d48c32daffead3414b91603e250eeedc7d601000000037426f643797be3e93da96b5643d3feed0b7c885d06006b830d7cbf3152f27522f5142dcc84a9e48a07518f0142167abf5d6685d09945cbc778bcc3e7dcfaee5d9c1689a3bafc0d3b51b5a3bfd6007954c36d532960964183842601e5364ecb6ad9168040388c7640bfa2f88643de7eebf4da8d1c3e76daace5217761d933d06bbe9609fcf5971aa1e77c3123910e63daaadd8878ad468eabaf78a96012a4ada1a9cd217fb2a0da2d521454ea9e8fcd3b5badfd6f00003a73345b841d04a02bf441955b932c59608a555bc44873272812e0fb874618a0b56b4cf44990f60000000000000000000000b20000da0ca6797590ed13b0bccf71a39e05e877893646d185a77882f866785af6b0149e336c31fb177e3e85f4c60cd4de4ce6ea73a95f434328620fa493937386ad2e2a0d60eb815aa05c33e02c32276dab36d14c63af66a31409ab2a403ec3c7a4e07bd745efa2835a8c932f22aa6da40af9bcdf808b916bc8deb37d5b8c422b65c42d17e61751c561ce775a31b52703d398d52694cfbb7d2b3791b030093b321d9f16b2f06676cf94d75cbba6491ae0b5a16ce92320321314d8d2e88d1cd7e7b1216bdaecba309a38e107103e649d46958cc6ba2d660dd41b78d832beb7206ae01508377273ea96e40760410aeed1866971e04f578e9d856d01000000045aea928f5f669be0636dc3f34f90c34531735f271527412d1ae755a9243da523d713071f9370b509a34eeb46415b2f0d271a7072cbd17e293f20132e6c15756e92776c6a0d7c3a9f512ce17edf3f1ea190853bbf93e220a6ce968b79d504c057000e7d8f8249a8158e68a90bbea8bfab2bd3c067c28e185fe62ce7020f5282cf045b9c790984c6fb65fd3187bd8bfcbe663df6b7770000f58fbad41e6eee5c9595950c4172b9c925403b2f99bbf3cb1981bb0d14bded8eae35e08278020a1ec7f508628056fd3d408a02a1cf8594bcbb21a88f477673442804f714212d000045b9f563b5352fe460a30489b1b6a6d37daead86151492f7fd4b5c64007b68a1b04027eac124478a2ef7f59fe472795785de83578cb96334e0f7c1370dc397d3aa42d937b5718b7610cdcdfe104db7801ec74980b8b111a2748321f81512e4204eb2b024b9fc9e0f257f8c6037b93b2caa236d4354b32434d5a6b01e00000000ee2ea723ea2e1accb97a200609c77e0000000000000000d3a54ccd6e13a966801e9341260d6cbce5fe03999214462cbaa297448677ab659102d0f430fbeae119a7ef2e962d2829d4dd2201c4b30d491269594c88252fbd09aced90609851bd9e5c307e7e0d39e73579c1f3563eff1a6237d3699d61acdc8e36010d76093ddd237df1c4181b0a0c4543b4249e9ff2f5e8b5e0ba2048d542de40f643fda4036124b8feb2dd45d0fa52300518c8052cc09ad73f89734fce82cc627356aa2c651ed2644f34cfbc32e8b29cf29e895e43b473ddb9a43421b4b25f8bbce8e2d7cb8547d156d5972021ae4c9e30f85413276ddebde55999d2ec3c524632b74d703147ba09e0dcb26c4b89636d28428b67e955f53bfd0c9eeb7a9d17000000000096cd8ecf1c511eea07aefa1c5cae1841efa9329d80eafefe00000000000000009111274a44c722ff9f5151aa7cb99ea3e8b2c51eadbd2d0ba1a25b08cc3e67cd186c12ea62a55ff905388bb30d1a63d42593c9aea3a84f5a6fc470d8aaaafeccb373ca26c3685679e6a048af19fca3fc5315a33687"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe28, 0xfffffffffffffff5, &(0x7f0000000980)="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", 0x0, 0x2f, 0xe8034000, 0xf000, 0xfffffffffffffe2a, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559", 0x5dc}, 0x28)

3m2.379749872s ago: executing program 0 (id=6651):
r0 = syz_io_uring_setup(0x24ff, &(0x7f0000000300)={0x0, 0xf36b, 0x10100, 0x0, 0x155}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$kcm(0x2d, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e3, &(0x7f0000000180)={r3, r4})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x1b, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}})
io_uring_enter(r0, 0x2d3e, 0x2936, 0x0, 0x0, 0x0)

3m2.363373954s ago: executing program 33 (id=6651):
r0 = syz_io_uring_setup(0x24ff, &(0x7f0000000300)={0x0, 0xf36b, 0x10100, 0x0, 0x155}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$kcm(0x2d, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e3, &(0x7f0000000180)={r3, r4})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x1b, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}})
io_uring_enter(r0, 0x2d3e, 0x2936, 0x0, 0x0, 0x0)

3m0.886679892s ago: executing program 6 (id=6653):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x18)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x20, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x440, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000001c0)='cpu&00\t&&')

3m0.815661208s ago: executing program 6 (id=6682):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x18)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x28}, 0x1c)
connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x32)
writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1)

3m0.785983101s ago: executing program 6 (id=6684):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x20081e, &(0x7f00000001c0)={[{@grpquota}, {@jqfmt_vfsv1}, {@minixdf}]}, 0x1, 0x518, &(0x7f0000000ac0)="$eJzs3c9vI1cdAPCvZ+PEyaZNWnoARNulLSxotU7ibaOqBygnhFAlRI9FSkPiRFHsOIqd0oQ9pGeuSFTiBEf+AM49IXHkguDGpRyQ+BGBGiQORjOeZL1Zu4k2iR3Fn480mvfmeef7fZud99YviV8AI+tORBxExHhEvB8RM/n1Qn7E250jfd1nhw9Xjg4frhSi3X73n4WsPb0WXX8mdTu/ZykifvjdiB8Xnozb3NvfXK7Vqjt5fa5V355r7u3f36gvr1fXq1uVyuLC4vybD96oXFpfX66P56UXP/3DwTd/mqY1nV/p7sdl6nS9eBInNRYR37+KYENwK+/P+LAT4akkEfF8RLySPf8zcSv7agIAN1m7PRPtme46AHDTJdkaWCEp52sB05Ek5XJnDe+FmEpqjWbr3lpjd2u1s1Y2G8VkbaNWnc/XCmejWEjrC1n5Ub1yqv4gIp6LiJ9PTGb18kqjtjrM//gAwAi7fWr+/89EZ/4/04tLA8gOALgypWEnAAAMnPkfAEaP+R8ARo/5HwBGT2f+nxx2GgDAAHn/DwCjx/wPACPlB++8kx7to/zzr1c/2NvdbHxwf7Xa3CzXd1fKK42d7fJ6o7GefWZP/az71RqN7YXXY/fD2W9tN1tzzb39pXpjd6u1lH2u91K1mL3qYAA9AwD6ee7lT/5cSGfktyazI7r2cigONTPgqiXDTgAYmlvDTgAYGrt9wei6wHt8ywNwQ/TYovcxpV6/INRut9tXlxJwxe5+yfo/jKqu9X8/BQwjxvo/jC7r/zC62u3Ceff8j/O+EAC43qzxA32+//98fv5N/s2BH62efsXHV5kVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXG/H+/+W873ApyNJyuWIZyJiNoqFtY1adT4ino2IP00UJ9L6wpBzBgAuKvlbId//6+7Ma9OPNb10+6Q4HhE/+eW7v/hwudXa+WPEeOFfE8fXWx/n1yuDzx4AONvxPJ2du97If3b4cOX4GGQ+f/9ORJQ68Y8Ox+PoJP5YjGXnUhQjYurfhbzeUehau7iIg48i4ou9+l+I6WwNpLPz6en4aexnBho/eSx+krV1zunfxRcuIRcYNZ+k48/bvZ6/JO5k597PfykboS4uH//SW60cZWPgo/jH49+tPuPfnfPGeP133+uUJp9s+yjiy2MRx7GPusaf4/iFPvFfO2f8v3zlpVf6tbV/FXE3esfvjjXXqm/PNff272/Ul9er69WtSmVxYXH+zQdvVObWNn5fnZ/rPxv84617z/ZrS/s/1Sd+6Yz+f+2c/f/1/95/76s9ro/l8b/xaq/4SbzwOfHTOfHr54y/PPXbUr+2NP5qn/6f9fW/d874n/51/4ltwwGA4Wnu7W8u12rVnYsX3stvmV2J5BLv/LSFUgwzusLlF9J/X9cgjZ6Fbw8q1nj0bvrZq50H8FRTu/1UsfqNGJex6gZcBycPfUT8d9jJAAAAAAAAAAAAAAAAPQ3iN5aG3UcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABurv8HAAD//5B9y08=")
open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.numa_stat\x00', 0x275a, 0x0)
fallocate(r0, 0x10, 0x17e, 0x1000f)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]})
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000080), 0x80, 0x7a5, &(0x7f0000000f80)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0)

3m0.516962422s ago: executing program 6 (id=6693):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff00000000000000001801000020646c4200000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000002300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r0}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="4000aa000a0002"], 0x28}}, 0x0)

2m58.936162079s ago: executing program 6 (id=6729):
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xe7fd}, 0x100002, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10)
ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000040))

2m58.935883689s ago: executing program 34 (id=6729):
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xe7fd}, 0x100002, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10)
ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000040))

1m8.523220966s ago: executing program 5 (id=9280):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
syz_clone(0x410e6080, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680))

1m7.435579763s ago: executing program 5 (id=9312):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
syz_clone(0x410e6080, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680))

1m5.498814958s ago: executing program 5 (id=9332):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x8040, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x0, 0x0, "ff00f7000000000000000000af88008300"})
r1 = syz_open_pts(r0, 0x141601)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
write(r1, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)={0x8, 0x20000000, 0xfffffffc, 0x7fffffd, 0x5, "682341f2fd71a6a76177920ea7e60c0ac7a4a5"})

1m4.507308208s ago: executing program 5 (id=9349):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x0)
syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000040)='./file2\x00', 0x800810, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x1f, 0x249, &(0x7f0000000a00)="$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")
open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x7, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c675bd9bffbcc2542ded71238259ca171ce1a311ef543dc137661d34f7c700", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204, 0x5]})
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0)

1m4.1168843s ago: executing program 5 (id=9356):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket(0x1e, 0x80004, 0x0)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x7, 0x0, 0x1000004}, 0x10)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10)
sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000)
r4 = dup3(r3, r2, 0x0)
recvmmsg(r4, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000600)=""/179, 0x3514}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0)

1m4.002315998s ago: executing program 5 (id=9358):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000040)='kfree\x00', r0}, 0x18)
mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil)
link(0x0, 0x0)
r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0x20)
r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0)
syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

1m4.001571709s ago: executing program 35 (id=9358):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000040)='kfree\x00', r0}, 0x18)
mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil)
link(0x0, 0x0)
r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0x20)
r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0)
syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

58.876270641s ago: executing program 8 (id=9497):
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa000000d})
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000400)={0xa})
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0)

57.927873098s ago: executing program 8 (id=9523):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r2}, 0x9)
ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0x100000001)
setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e20, @dev}, 0x10)
close(r0)

57.90084284s ago: executing program 8 (id=9525):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000001"], 0x48)
r1 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
r3 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r3, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000000c0)='kfree\x00', r4}, 0x18)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10)

57.857420084s ago: executing program 8 (id=9529):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x0)
syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000040)='./file2\x00', 0x800810, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x1f, 0x249, &(0x7f0000000a00)="$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")
open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x7, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c675bd9bffbcc2542ded71238259ca171ce1a311ef543dc137661d34f7c700", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204, 0x5]})
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0)

57.52445284s ago: executing program 8 (id=9542):
r0 = socket$netlink(0x10, 0x3, 0xf)
bind$netlink(r0, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800900010076657468"], 0x48}}, 0x0)

57.244097843s ago: executing program 8 (id=9546):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4)
setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x69801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0)
sendto$packet(r0, &(0x7f0000000000)='1', 0x1, 0x40081, &(0x7f0000000200)={0x11, 0x88a8, r4, 0x1, 0x4, 0x6, @local}, 0x14)

57.192030297s ago: executing program 36 (id=9546):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4)
setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x69801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0)
sendto$packet(r0, &(0x7f0000000000)='1', 0x1, 0x40081, &(0x7f0000000200)={0x11, 0x88a8, r4, 0x1, 0x4, 0x6, @local}, 0x14)

41.907748513s ago: executing program 9 (id=9857):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f0000000100), 0x1, 0x4c4, &(0x7f0000000f40)="$eJzs3ctrW1caAPBPku3YjmfymGFIMjAJZCDzIJYfDLFnZjOrmVkEhgl000Lq2oqbWraMJaexCdRpd1l0UVpaKF1037+gm2bVUChdt/vSRUlpUxfaQkHlXkmJrViuKI7V+P5+cJNzH9J3jsV3OPfoXt0AMutM8k8uYiQiPoqII43V7Qecafy3ee/GbLLkol6/9GUuPS5Zbx3aet3hiNiIiMGI+P+/I57JPRy3ura+MFMul1aa68Xa4nKxurZ+/urizHxpvrQ0PnVhenpqbHJies/aeuvl525dfPe/A+98+9LdO6+8/15SrZHmvq3t2EuNpvfHsS3b+iLin48iWA8Umu0Z6nVF+FmSz+83EXE2zf8jUUg/TSAL6vV6/Yf6oU67N+rAgZVPx8C5/GhENMr5/OhoYwz/2xjOlyvV2l+vVFaX5hpj5aPRn79ytVwaa54rHI3+XLI+npYfrE+0rU9GpGPgVwtD6frobKU8t79dHdDmcFv+f1No5D+QEU75IbvkP2SX/Ifskv+QXfIfskv+Q3bJf8gu+Q/ZJf8hu+Q/ZJf8h0z638WLyVJv3f8+d21tdaFy7fxcqbowurg6OzpbWVkena9U5tN7dhZ/6v3Klcry+N9i9XqxVqrWitW19cuLldWl2uX0vv7Lpf59aRXQjWOnb3+Si4iNvw+lS2KguU+uwsFWr+ei1/cgA71R6HUHBPSMqT/ILuf4QPtP9LaPCwY7vXD5wXwh8HjJ97oCQM+cO+n7P8gq8/+QXeb/IbuM8YEdHtG3zW7z/8Djyfw/ZNtOz//61ZZnd41FxK8j4uNC/6HWs76AgyD/ea45/j935I8j7XsHct+lXxEMRMTzb156/fpMrbYynmz/6v722hvN7RNbXtjxhAHolVaetvIYAMiuzXs3ZlvLfsb94l+NixAejt/XnJscTL+jHN7MbbtWIbdH1y5s3IyIEzvFzzWfd944kRneLDyI90Ij/vFmPXKNt0jr25c+N/0Rx2/GPLkl/h+2xD+1B38XyILbSf8ztlP+5dOcjvv5t73/Gdmjayc693/5+/1foUP/d7rLGM++9eJnHePfjDi1Y/xWvME0Vnv8pG7nuox/96knftdpX/3txvvsFL8lKRVri8vF6tr6+fR35OZLS+NTF6anp8YmJ6aL6Rx1sTVT/bB/nPjwzm7tH+4Qf7f2J9v+3GX7v//9B0+e2SX+n87u/Pkf3yX+UET8pcv4X098+nSnfUn8uQ7tz+8SP9k22WX86mv/OdTloQDAPqiurS/M9EVpJS2UywoKCvtbuPnLqEZbodc9E/CoVdeSU/Mk6XtdEwAAAAAAAAAAAKBb+3E5ca/bCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwEPwYAAD//yvJ1G8=")
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]})
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$tipc(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="fb", 0x1}], 0x1}, 0x0)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)={0x43, 0x3, 0x3, 0x3}, 0x10)
recvmsg(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x40fd)

41.640386264s ago: executing program 9 (id=9862):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r1}, 0x18)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r3}, 0x18)
r4 = socket$kcm(0x21, 0x2, 0x2)
recvmsg$kcm(r4, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)

41.602848767s ago: executing program 9 (id=9865):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b7030000000000008500000070"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'pim6reg1\x00', 0x1})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local})
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r3}, 0x10)
close(r0)

41.404107024s ago: executing program 9 (id=9876):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000580)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@noauto_da_alloc}, {@dioread_nolock}, {@dax_inode}, {@nobarrier}, {@nodelalloc}, {@minixdf}, {@lazytime}]}, 0x1, 0xba6, &(0x7f0000000c00)="$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")
mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f0000000680)='./file0/../file0/../file0/../file0\x00', 0x0, 0x1b73404, 0x0)
chroot(&(0x7f0000000000)='./file0\x00')
sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0)
sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000032500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000000f000000bf91000000000000b7020000002000008500000084000000b70000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00')

41.256592345s ago: executing program 9 (id=9878):
rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001380)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
flock(r1, 0x5)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
flock(r3, 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='rseq_update\x00', r0}, 0x10)

41.172162202s ago: executing program 9 (id=9880):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r2, &(0x7f0000000440), 0x10)
listen(r2, 0x0)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
writev(r3, &(0x7f0000000580)=[{&(0x7f0000001180)="15a2", 0x2}], 0x1)
r4 = accept4$unix(r2, 0x0, 0x0, 0x0)
recvmsg(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000740)=""/70, 0x46}], 0x1}, 0x4c2103a0)

41.115695937s ago: executing program 37 (id=9880):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r2, &(0x7f0000000440), 0x10)
listen(r2, 0x0)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
writev(r3, &(0x7f0000000580)=[{&(0x7f0000001180)="15a2", 0x2}], 0x1)
r4 = accept4$unix(r2, 0x0, 0x0, 0x0)
recvmsg(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000740)=""/70, 0x46}], 0x1}, 0x4c2103a0)

3.278032335s ago: executing program 2 (id=10510):
r0 = gettid()
ppoll(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r2}, 0x10)
tkill(r0, 0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
prctl$PR_SET_THP_DISABLE(0x29, 0x0)

2.96776169s ago: executing program 2 (id=10515):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080efff00000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
syz_emit_ethernet(0x6e, &(0x7f0000001840)={@random="b931b2d41475", @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2e5cea", 0x38, 0x3c, 0x0, @private0, @mcast2, {[@dstopts={0xc, 0x3, '\x00', [@hao={0xc9, 0x10, @remote}, @jumbo={0xc2, 0x4, 0x101}]}], {0x0, 0x0, 0x18, 0x0, @wg=@data={0x4, 0xffff, 0x2}}}}}}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r3}, 0x10)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)

2.924609964s ago: executing program 2 (id=10516):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18)
recvmsg$unix(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x40000102)
sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
open(0x0, 0x64842, 0x389b0d52417bb201)
prctl$PR_SET_THP_DISABLE(0x29, 0x1)

2.698605052s ago: executing program 7 (id=10517):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94)
r2 = socket(0x10, 0x803, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r4}, 0x10)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r5}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0)

2.639779597s ago: executing program 7 (id=10518):
creat(&(0x7f0000000080)='./file0\x00', 0xa)
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r2 = dup(r1)
write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r3}, 0x10)
mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x0, 0x0)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe935"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])

2.575552802s ago: executing program 2 (id=10520):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r1 = epoll_create1(0x80000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0xa0000004})
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000140)={0xa0000001})
epoll_wait(r3, &(0x7f0000000280)=[{}], 0x1, 0x4000005)
close_range(r0, 0xffffffffffffffff, 0x0)
ptrace(0x10, 0x0)

2.560991813s ago: executing program 7 (id=10521):
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
syz_clone(0x40089000, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r3}, 0x10)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)

2.392526467s ago: executing program 7 (id=10522):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000440))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
listen(r1, 0x3)
accept(r1, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000f"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10)

2.319929183s ago: executing program 3 (id=10524):
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0xfffffffffffff001}, 0x18)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, '\x00', "07f217bd74511e465bbbd5de01000000f9044677d4d588363d63af84db44be59", "00f8ff00", "8ce63ecbc640735f"}, 0x38)
sendto$inet6(r0, &(0x7f0000000280)='S', 0x1, 0x8000, 0x0, 0x0)
close(r0)

2.297218395s ago: executing program 3 (id=10526):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r0}, 0x10)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r3, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r3, 0x0)
connect$unix(r2, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
connect$unix(r3, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

2.285224686s ago: executing program 1 (id=10527):
r0 = gettid()
ppoll(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r2}, 0x10)
tkill(r0, 0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
prctl$PR_SET_THP_DISABLE(0x29, 0x0)

2.090348361s ago: executing program 1 (id=10528):
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000000040)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r1, 0x0)
connect$unix(r0, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18)
connect$unix(r0, &(0x7f00000005c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
dup3(r0, r1, 0x0)
syz_io_uring_setup(0x4f9e, &(0x7f0000000080)={0x0, 0x477f, 0x20, 0x1, 0x1f2}, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000340))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x25, 0x1, 0xffffffffffffffff, 0x0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)=[{0x0, 0x49}, {0x0}], 0x2}, 0x0, 0x42, 0x0, {0x2}})

2.036453876s ago: executing program 4 (id=10530):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000840000"], 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10)
syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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")
r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
ftruncate(r2, 0x2007ffc)
sendfile(r2, r2, 0x0, 0x800000009)

2.012544768s ago: executing program 1 (id=10531):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000080000000100000000000007000000000100000002000084d6000000040000000200000075000000070000000900000003000000006130"], 0x0, 0x50, 0x0, 0x1, 0x9}, 0x28)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000000000009500060000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18)
r1 = memfd_create(&(0x7f0000000cc0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'\b\x00\xd5\xfd\xa9\r\xac7V\xf2\x93A\x94k\xcd\t\x00\x90\xbe\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\agB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\x9f#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xd8\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x96!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xe2_\x16\x05\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\xbd\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7\x8en\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xef\x03Ga\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcaf2\x02F1\xc6\x82\x00E\xae\x9d\x17\x871N:\xb4\xea \x8e\xdelP\x83\x1f\'\xe2\xd6\xc0\xc3\xfc\xc9677u\xf3RUP@o>\xee\xb8\xa3\t\x02\xb7\\,\xebK\xed\x1b\xc9e\xb3\x16\xce\x9bI\xdb\xfa\x82\x85\t\x9bg\xd0s\xe2\f{\x8cp~;\xf8\x96\xf2\x91\x06\xd7\x80t\xfc\xf8\xd2\x12N\x1cB7^\xfd4\xae\xb0V\\w\b!\xae\x1baTv\xc0z\x19\xc5\xc8w\xba\x97N\x9a`\x8f\xfc\x9ee\xf9\x00\x1cQA\x14]\r\xd4\"\xc2\x12GD\xdb{\x17fNo\xb3\x1d\xbb\xcaI\x05\xff\x8d\xf4_\x1a\vqA\xb7\x0ed<\x98\xee\xb8\x19\xec\x9f\xee\xe1_\xacG\x8b\xa3\xc3\x13\x80\x0f\xf4I\xdeAwG\xbdkno\xa2\b\x126\x97\x9b\xf9|P\xd94\v\x15\xcb\xc0\x9d\x11\xf3\x18\xae!2\x1b\x12\xa9\xc8~\xb7S\x94\xb5\xc7;\xa90D>s\xe9\xa4N\xf8\xdb\xab\xa0\x94~\xa1]b\xa4\xe5\xe2e\x1c\x8b\xd2\xc7Md\x93\x02\xd8\xb0,\xeb\x03\xaa\v\xed\x9bR\x8a\x80\xc2\x1f\x17ej\x973wv\x83a\xe06\x96\xde\xbc%UH\xf8S\xf1\xa1g\x02\xc4\xc3\xa4\xa8\x96\t\xfex\x02Y\x8e\xae\xf5m\xca\xa0i\x80O\x11\xac\xb7$\xdb\xbc\xb0\xcb\xacqU\xb5*\x00\x00\x00\x00\x00\x00\x00\f\xda\xf8oV\x89\xd3\x1f\x99+\xe5\x04\x00\x00\x00\x00\x00\x00\x00\xf2\xcc\xd3\x94\xca\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00~A9\xf6IBu2L\x9e\xa2\xbb\xa9s\xab\x90\x06\xc6!p\x9e?~\xf9\xe6\xae*\v\xa3\xd9\xcfJ\t}\xd4:\xe4\xbe\x1c\x10\n\xc6hPO\xeagxKN\'z]*\x93\xf7\b\x91\xd0\xff\xd9\xc6a\xb5q\x9c\xa1Go\xd58\x93\xe0,\x9f\xe4\xa9\xd9A\x9e\x95e\x98\xd0V\x9d\xed\x97\xf1\xc5\xce\xf5\x90!D\x9a\xd8\x10\xbbx\r8\xff\x8bNUK\xebA\xe5\x92f\xc4\xd1\xa8\x15\xbf\xb5iW\xdb.kbf*\x89\xf0\xecq m-~\xbbf?\xec=\xd2\xe2\x1e\xca\xc5kz\x8e9\xd6\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa3d5V\x80\x1a\x90\x10\xe3\xdf%\xfdz\xf7\x9aE\xe6\x9b\x00'/993, 0x3)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0x6, 0x1000000})
fcntl$addseals(r1, 0x409, 0xb)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000100)={'team0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x4, r3}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x2000a804)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0)

1.774769637s ago: executing program 1 (id=10532):
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
prlimit64(0x0, 0xe, 0x0, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0)
syz_pidfd_open(0x0, 0x0)
r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r1, 0x1000)
r2 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042)
close(0x3)
dup(r2)
writev(r0, &(0x7f0000000340)=[{&(0x7f0000000080)="5800000014001923f8834b80040d8c560a067f020000000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809003700fff5dd001a0009000100080c10000000000000", 0x55}], 0x1)

1.767864237s ago: executing program 4 (id=10533):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
unshare(0x40000000)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x2004d95, &(0x7f00000000c0)={[{@barrier}]}, 0x1, 0x523, &(0x7f0000000a80)="$eJzs3c1vHGcZAPBnNrtJnDi1+ThAJUKhRU4F2bVr2locSpEQnCohyj0Ye21ZXnst77qNVxV1/gIkhACJE1y4IPEHIKFIXDgipEpwBqkIhCCFAwfooJ2d9Vd27W262XXs30+azPvO1/O8m8zszOybmQAurGci4tWIeD9N0+cjYiqSbHohH2KvM7SXe+/BW0vtIYk0ff0fSbZku97dVpKPr+erXY2Ib3494jvJw3Ebu631xVqtup3XK82NrUpjt3V7bWNxtbpa3Zyfn3tp4eWFFxdmh9LOGxHxylf/8sPv/fxrr/z6C2/++c7fbn23ndZkPv9wOz6g4kkzO00vZZ/F4RW2HzHYWVTMWpibGGyde48xHwAA+muf4380Ij4bEc/HVFw6+XQWAAAAeAKlX56M/yYRaW+X+0wHAAAAniCFrA9sUijnfQEmo1Aolzt9eD8e1wq1eqP5+ZX6zuZyp6/sdJQKK2u16mzWVzirJ+36XFY+qL9wrD5/pXO/4QdTE1m9vFSvLY/75gcAAABcENePXf//e6pz/Q8AAACcM9PjTgAAAAB47Fz/AwAAwPnn+h8AAADOtW+89tpERKTd918vv7G7s15/4/ZytbFe3thZKi/Vt7fKq/X6avbMvo3Ttler17e+GJs7dyvNaqNZaey27mzUdzabd9aOvAIbAAAAGKGPfPr+H5OI2PvSRDa0XR53UsBIFPdLST7usff/6anO+N0RJQWMxKUBlnn3yggSAUauOO4EgLEpjTsBYOySU+b37bzzu3z8meHmAwAADN/MJ/v//l84cc29k2cDZ56dGC6uY/t/2jauXIDRyn7/H7TDr5MFOFdKA/UABM6zD/37/6lcVwAAwLhNZkNSKOe39yajUCiXI25krwUoJStrtepsRDwVEX+YKl1p1+diwP84CAAAAAAAAAAAAAAAAAAAAAAAAABk0jTpvPQHAAAAOLciCn9NfpNk7/+amXpu8vj9gcvJf6Yif0Xomz95/Ud3F5vN7bn29H/uT2/+OJ/+wjjuYAAAAADHda/Tu9fxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADBM7z14a6k7jDLu378SEdO94hfjaja+GqWIuPavJIqH1ksi4tIQ4u/di4hP9IqftNPaD9kr/sTjjx/T+afQK/71IcSHi+x++/jzaq/9rxDPZOPe+18x4kj9UR05/rVuHjn+do9/l/rs/zcGjPH0O7+s9I1/L+LpYu/jTzd+0if+swPG//a3Wq1+89KfRsz0/P5JjsSqNDe2Ko3d1u21jcXV6mp1c35+7qWFlxdeXJitrKzVqvmfPWN8/1O/ev+k9l/rE3/6lPY/N2D7//fO3Qcf6xRLB1Mn9uPferZH/N/+LF/u4fiF/Lvvc3m5PX+mW97rlA+7+Yvf3zyp/csH7S99kL//WwO2fyg7CgAwNI3d1vpirVbdfsIKb+f5n75w+zzrbOT8CIXkbKRxXgtvD3WDaZqm7X+TPWbdj4hBtpPEWfhYssJ4j0sAAMDwHZz0jzsTAAAAAAAAAAAAAAAAAAAAuLgefvpXmsaQH0J2PObefinxZGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Mz4fwAAAP//j6PX8g==")

1.653223337s ago: executing program 2 (id=10534):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
set_mempolicy(0x4005, &(0x7f0000000040)=0x10000000005, 0x4)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000600)={0x0, 0x7f390004, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="60000000020605020000200000000000000000001400078008001340040000000800124000060000050001000700000013000300686173683a6e65742c6966616365000005000440000000000900020073797a3100000000050005000a"], 0x60}}, 0x0)

1.499259409s ago: executing program 1 (id=10535):
syz_open_procfs(0x0, &(0x7f0000000280)='net/rt_acct\x00')
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="2000000011140100000000000000000008004a00d2417b218f749c24c6eacd8bc23ab579c634bb23680fefbb9e737eb763f232db91cda2e91fbb8ed63f0800b33dd5ecffc2758b1ec8f2a772487516b89af9be94a9b16d62cd05c938b21d44365cb408cdab6801e54601004dd8accceba633cc09169a99ae62eee6ff91f430d9dc8ca1e90a8b76fa0a8d177e6ccb2868579797f238ec272b463af1ba46f2e7d9ae17eec8209c9bfa409bff9ce452eda16f525ef27504ff3777f29f755b2c3b8de4f1ccae58c335704e2c"], 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001cc0)=ANY=[], &(0x7f0000000580)='syzkaller\x00'}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='fsi_master_acf_poll_response_busy\x00', r1, 0x0, 0xfffffffff7ffffe9}, 0x18)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
ppoll(&(0x7f0000000000)=[{r2, 0x2078}], 0x1, 0x0, 0x0, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='oom_adj\x00')
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
lseek(r3, 0x4, 0x1)

1.338476252s ago: executing program 7 (id=10536):
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001340), 0x2800, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
pipe(&(0x7f00000001c0)={<r1=>0xffffffffffffffff})
read(r1, &(0x7f0000032440)=""/102364, 0x18fdc)

676.886875ms ago: executing program 2 (id=10537):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000140)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@quota}, {@resuid}, {@lazytime}]}, 0x1, 0x445, &(0x7f0000000200)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000faff0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000010240), 0x5a)
write(r2, &(0x7f00000009c0)="3bf58d7d45d32cfe1da7c797b82f16713d1cb80b3fa1bda74e3977b40e7af46b4c60b70d7a79ed5d8c48f52a50185980", 0x30)
sendfile(r2, r0, 0x0, 0x3ffff)
sendfile(r2, r0, 0x0, 0x7fffeffd)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)

676.424876ms ago: executing program 3 (id=10538):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0)
r3 = socket(0x10, 0x3, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x5, 0x7, 0x9, 0x200, 0x6, 0x500, 0x7, 0x398, 0x620b}}}}]}, 0x58}}, 0x800)
r5 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=@newtfilter={0x24, 0x29, 0xd27, 0x1004001, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {}, {0x2, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x48c0)

675.474875ms ago: executing program 3 (id=10539):
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18)
r1 = gettid()
ppoll(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
tkill(r1, 0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
prctl$PR_SET_THP_DISABLE(0x29, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ff9}]})
memfd_secret(0x80000)

675.178236ms ago: executing program 4 (id=10547):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0xc, 0x9}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r4}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10)
sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x1c}, 0x1c}}, 0x0)

444.149774ms ago: executing program 1 (id=10540):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0)
close(r1)
socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast})
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x939e02dc105d5baa, 0x2}, {0xe}, {0x8, 0xfff1}}}, 0x24}}, 0x40004)
recvmmsg(r4, &(0x7f0000005140)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000640)=""/211, 0xd3}, {&(0x7f00000052c0)=""/232, 0xe8}, {&(0x7f0000003080)=""/4093, 0xffd}, {&(0x7f0000000540)=""/212, 0xd4}, {&(0x7f0000000180)=""/192, 0xc0}], 0x5}, 0x8}], 0x2000, 0x0, 0x0)

443.548404ms ago: executing program 4 (id=10541):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {}, {0xd, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x18, 0x2, [@TCA_CGROUP_EMATCHES={0x14, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}}}]}]}]}}]}, 0x48}}, 0x1)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000100000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@ipv6_newroute={0x1c, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x0, 0x14, 0x0, 0xfe, 0x4, 0xff, 0x6}}, 0x1c}}, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

401.856268ms ago: executing program 7 (id=10542):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=<r1=>0x0)
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_NET_GET(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040004)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r4, &(0x7f0000000600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000140)=ANY=[], 0x14}}, 0x0)
mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c23c000, 0x3, 0x2})
timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

356.584251ms ago: executing program 3 (id=10543):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000080000000100000000000007000000000100000002000084d6000000040000000200000075000000070000000900000003000000006130"], 0x0, 0x50, 0x0, 0x1, 0x9}, 0x28)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000000000009500060000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18)
r1 = memfd_create(&(0x7f0000000cc0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'\b\x00\xd5\xfd\xa9\r\xac7V\xf2\x93A\x94k\xcd\t\x00\x90\xbe\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\agB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\x9f#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xd8\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x96!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xe2_\x16\x05\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\xbd\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7\x8en\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xef\x03Ga\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcaf2\x02F1\xc6\x82\x00E\xae\x9d\x17\x871N:\xb4\xea \x8e\xdelP\x83\x1f\'\xe2\xd6\xc0\xc3\xfc\xc9677u\xf3RUP@o>\xee\xb8\xa3\t\x02\xb7\\,\xebK\xed\x1b\xc9e\xb3\x16\xce\x9bI\xdb\xfa\x82\x85\t\x9bg\xd0s\xe2\f{\x8cp~;\xf8\x96\xf2\x91\x06\xd7\x80t\xfc\xf8\xd2\x12N\x1cB7^\xfd4\xae\xb0V\\w\b!\xae\x1baTv\xc0z\x19\xc5\xc8w\xba\x97N\x9a`\x8f\xfc\x9ee\xf9\x00\x1cQA\x14]\r\xd4\"\xc2\x12GD\xdb{\x17fNo\xb3\x1d\xbb\xcaI\x05\xff\x8d\xf4_\x1a\vqA\xb7\x0ed<\x98\xee\xb8\x19\xec\x9f\xee\xe1_\xacG\x8b\xa3\xc3\x13\x80\x0f\xf4I\xdeAwG\xbdkno\xa2\b\x126\x97\x9b\xf9|P\xd94\v\x15\xcb\xc0\x9d\x11\xf3\x18\xae!2\x1b\x12\xa9\xc8~\xb7S\x94\xb5\xc7;\xa90D>s\xe9\xa4N\xf8\xdb\xab\xa0\x94~\xa1]b\xa4\xe5\xe2e\x1c\x8b\xd2\xc7Md\x93\x02\xd8\xb0,\xeb\x03\xaa\v\xed\x9bR\x8a\x80\xc2\x1f\x17ej\x973wv\x83a\xe06\x96\xde\xbc%UH\xf8S\xf1\xa1g\x02\xc4\xc3\xa4\xa8\x96\t\xfex\x02Y\x8e\xae\xf5m\xca\xa0i\x80O\x11\xac\xb7$\xdb\xbc\xb0\xcb\xacqU\xb5*\x00\x00\x00\x00\x00\x00\x00\f\xda\xf8oV\x89\xd3\x1f\x99+\xe5\x04\x00\x00\x00\x00\x00\x00\x00\xf2\xcc\xd3\x94\xca\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00~A9\xf6IBu2L\x9e\xa2\xbb\xa9s\xab\x90\x06\xc6!p\x9e?~\xf9\xe6\xae*\v\xa3\xd9\xcfJ\t}\xd4:\xe4\xbe\x1c\x10\n\xc6hPO\xeagxKN\'z]*\x93\xf7\b\x91\xd0\xff\xd9\xc6a\xb5q\x9c\xa1Go\xd58\x93\xe0,\x9f\xe4\xa9\xd9A\x9e\x95e\x98\xd0V\x9d\xed\x97\xf1\xc5\xce\xf5\x90!D\x9a\xd8\x10\xbbx\r8\xff\x8bNUK\xebA\xe5\x92f\xc4\xd1\xa8\x15\xbf\xb5iW\xdb.kbf*\x89\xf0\xecq m-~\xbbf?\xec=\xd2\xe2\x1e\xca\xc5kz\x8e9\xd6\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa3d5V\x80\x1a\x90\x10\xe3\xdf%\xfdz\xf7\x9aE\xe6\x9b\x00'/993, 0x3)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0x6, 0x1000000})
fcntl$addseals(r1, 0x409, 0xb)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000100)={'team0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x4, r3}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x2000a804)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0)

181.715205ms ago: executing program 4 (id=10544):
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80720, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x12}, 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20)
sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x4000000, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0)
close(r1)

37.377987ms ago: executing program 4 (id=10545):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x8)
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x1, 0x800001, 0x0, 0x0, 0x0)
mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0)
mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil)
mlock2(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)

0s ago: executing program 3 (id=10546):
mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15)
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15)
r2 = dup(r1)
write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
truncate(&(0x7f0000000640)='./file0\x00', 0x2)

kernel console output (not intermixed with test programs):

lid length.
[  326.673864][T27266] bond13: entered promiscuous mode
[  326.679123][T27266] bond13: entered allmulticast mode
[  326.684984][ T3549] bond1: (slave bridge4): failed to get link speed/duplex
[  326.713612][T27268] geneve2: entered allmulticast mode
[  326.721596][T27268] bond13: (slave geneve2): making interface the new active one
[  326.729240][T27268] geneve2: entered promiscuous mode
[  326.735051][T27268] bond13: (slave geneve2): Enslaving as an active interface with an up link
[  326.749795][ T3536] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  326.758123][ T3536] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  326.766930][T27266] bond13: left promiscuous mode
[  326.771982][T27266] geneve2: left promiscuous mode
[  326.777076][T27266] bond13: left allmulticast mode
[  326.782601][T27266] 8021q: adding VLAN 0 to HW filter on device bond13
[  326.802817][ T3536] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  326.811355][ T3561] bond1: (slave bridge4): failed to get link speed/duplex
[  326.838043][ T3536] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  326.869578][T27271] bond0: (slave syz_tun): Releasing backup interface
[  326.886043][T27271] bond0: (slave team0): Releasing backup interface
[  326.901642][T27271] team0: left allmulticast mode
[  326.906558][T27271] C: left allmulticast mode
[  326.911063][T27271] team_slave_1: left allmulticast mode
[  326.927464][T27271] bond0: (slave dummy0): Releasing backup interface
[  326.935071][T27271] dummy0: left allmulticast mode
[  326.942281][T27271] bond0: (slave bond_slave_0): Releasing backup interface
[  326.953189][T27271] bond_slave_0: left allmulticast mode
[  326.959699][T27271] team0: Port device C removed
[  326.965505][T27271] team0: Port device team_slave_1 removed
[  326.972328][T27271] bond4: (slave veth21): Releasing active interface
[  326.980159][T27271] bond6: (slave batadv2): Releasing active interface
[  326.993481][T27271] bond9: (slave ip6erspan0): Releasing active interface
[  327.009899][T27271] bond11: (slave bridge14): Removing an active aggregator
[  327.017140][ T3517] bond11: Warning: Found an uninitialized port
[  327.023339][T27271] bond11: (slave bridge14): Releasing backup interface
[  327.034617][T27271] bridge14: left promiscuous mode
[  327.039712][T27271] bridge14: left allmulticast mode
[  327.048476][T27271] bond13: (slave geneve2): Releasing active interface
[  327.083931][T27272] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check.
[  327.110929][ T3561] bond1: (slave bridge4): failed to get link speed/duplex
[  327.118168][ T3536] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  327.130891][ T3536] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  327.150177][ T3536] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  327.176329][ T3536] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  327.227614][ T3536] bond1: (slave bridge4): failed to get link speed/duplex
[  327.359453][ T3536] bond1: (slave bridge4): failed to get link speed/duplex
[  327.475797][ T3517] bond1: (slave bridge4): failed to get link speed/duplex
[  327.736279][ T3524] bond1: (slave bridge4): failed to get link speed/duplex
[  327.748655][T27310] netlink: 'syz.7.9330': attribute type 1 has an invalid length.
[  327.767835][T27310] 8021q: adding VLAN 0 to HW filter on device bond4
[  327.796493][T27310] bond4 (unregistering): Released all slaves
[  327.820878][T27315] netlink: 'syz.3.9321': attribute type 1 has an invalid length.
[  327.863768][T27315] 8021q: adding VLAN 0 to HW filter on device bond7
[  327.918225][T27315] 8021q: adding VLAN 0 to HW filter on device batadv0
[  327.940859][T27321] loop7: detected capacity change from 0 to 128
[  327.947806][T27315] bond7: (slave batadv0): making interface the new active one
[  327.956967][T27315] bond7: (slave batadv0): Enslaving as an active interface with an up link
[  327.971470][   T29] kauditd_printk_skb: 211 callbacks suppressed
[  327.971484][   T29] audit: type=1400 audit(324.243:13343): avc:  denied  { mounton } for  pid=27320 comm="syz.7.9323" path="/500/file2/bus" dev="loop7" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1
[  328.026028][T20556] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100)
[  328.033912][T20556] FAT-fs (loop7): Filesystem has been set read-only
[  328.071005][   T29] audit: type=1326 audit(324.335:13344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27329 comm="syz.3.9327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f629aabebe9 code=0x7ffc0000
[  328.101925][   T29] audit: type=1326 audit(324.363:13345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27329 comm="syz.3.9327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f629aabebe9 code=0x7ffc0000
[  328.124880][   T29] audit: type=1326 audit(324.363:13346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27329 comm="syz.3.9327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f629aabebe9 code=0x7ffc0000
[  328.147878][   T29] audit: type=1326 audit(324.363:13347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27329 comm="syz.3.9327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f629aabebe9 code=0x7ffc0000
[  328.170882][   T29] audit: type=1326 audit(324.363:13348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27329 comm="syz.3.9327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f629aabebe9 code=0x7ffc0000
[  328.193909][   T29] audit: type=1326 audit(324.363:13349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27329 comm="syz.3.9327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f629aabebe9 code=0x7ffc0000
[  328.217022][   T29] audit: type=1326 audit(324.363:13350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27329 comm="syz.3.9327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f629aabebe9 code=0x7ffc0000
[  328.240007][   T29] audit: type=1326 audit(324.363:13351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27329 comm="syz.3.9327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f629aabebe9 code=0x7ffc0000
[  328.263150][   T29] audit: type=1326 audit(324.363:13352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27329 comm="syz.3.9327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f629aabebe9 code=0x7ffc0000
[  328.302927][T27328] pim6reg1: entered promiscuous mode
[  328.308271][T27328] pim6reg1: entered allmulticast mode
[  328.318686][T27332] bridge_slave_0: entered promiscuous mode
[  328.325504][T27332] ipvlan0: entered promiscuous mode
[  328.331321][T27332] ipvlan0: left promiscuous mode
[  328.336699][T27332] bridge_slave_0: left promiscuous mode
[  328.534660][T27346] sch_tbf: burst 3298 is lower than device lo mtu (11337746) !
[  328.578124][T27349] 8021q: adding VLAN 0 to HW filter on device bond8
[  328.605238][T27349] bond8 (unregistering): Released all slaves
[  329.526863][T27384] loop5: detected capacity change from 0 to 512
[  329.577720][T27384] loop5: detected capacity change from 512 to 64
[  329.598197][T27384] FAT-fs (loop5): Directory bread(block 34) failed
[  329.609738][T27387] 8021q: adding VLAN 0 to HW filter on device bond10
[  329.629852][T27384] FAT-fs (loop5): Directory bread(block 35) failed
[  329.638757][T27384] FAT-fs (loop5): Directory bread(block 36) failed
[  329.661686][T27384] FAT-fs (loop5): Directory bread(block 37) failed
[  329.673103][T27387] bond10 (unregistering): Released all slaves
[  329.688116][T27384] FAT-fs (loop5): Directory bread(block 38) failed
[  329.707371][T27384] FAT-fs (loop5): Directory bread(block 39) failed
[  329.728054][T27384] FAT-fs (loop5): Directory bread(block 40) failed
[  329.755700][T27384] FAT-fs (loop5): Directory bread(block 41) failed
[  329.902996][T13137] FAT-fs (loop5): Directory bread(block 34) failed
[  329.912462][T13137] FAT-fs (loop5): Directory bread(block 35) failed
[  329.987385][T27405] 9pnet: p9_errstr2errno: server reported unknown error 
[  330.007294][ T3524] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  330.099496][ T3524] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  330.175132][ T3524] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  330.239938][ T3524] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  330.289567][T27425] loop7: detected capacity change from 0 to 2048
[  330.318226][T27425] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  330.419926][ T3524] bond8 (unregistering): (slave geneve2): Releasing active interface
[  330.468962][T20556] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  330.585556][T27440] loop7: detected capacity change from 0 to 512
[  330.597213][T27440] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.9370: Failed to acquire dquot type 1
[  330.609939][T27440] EXT4-fs (loop7): 1 truncate cleaned up
[  330.615800][T27440] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  330.629749][T27440] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.9370: Failed to acquire dquot type 1
[  330.692449][T20556] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  330.901127][T27454] __nla_validate_parse: 19 callbacks suppressed
[  330.901143][T27454] netlink: 72 bytes leftover after parsing attributes in process `syz.4.9375'.
[  330.918372][T27454] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9375'.
[  330.927338][T27454] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9375'.
[  331.052083][ T3524] bond7 (unregistering): (slave bridge12): Removing an active aggregator
[  331.060761][ T3524] bond7 (unregistering): (slave bridge12): Releasing backup interface
[  331.069179][ T3524] bridge12 (unregistering): left promiscuous mode
[  331.075616][ T3524] bridge12 (unregistering): left allmulticast mode
[  331.118242][ T3524] $Hÿ (unregistering): (slave dummy0): Releasing backup interface
[  331.128920][ T3524] $Hÿ (unregistering): Released all slaves
[  331.137389][ T3524] bond1 (unregistering): Released all slaves
[  331.145911][ T3524] 
 (unregistering): Released all slaves
[  331.154274][ T3524] bond2 (unregistering): Released all slaves
[  331.162508][ T3524] bond3 (unregistering): Released all slaves
[  331.171571][ T3524] bond4 (unregistering): Released all slaves
[  331.179599][ T3524] bond0 (unregistering): Released all slaves
[  331.190621][ T3524] bond5 (unregistering): Released all slaves
[  331.199283][ T3524] bond6 (unregistering): Released all slaves
[  331.207992][ T3524] bond7 (unregistering): Released all slaves
[  331.216516][ T3524] bond8 (unregistering): Released all slaves
[  331.309113][ T3524] tipc: Disabling bearer <udp:ree>
[  331.314342][ T3524] tipc: Disabling bearer <udp:syz2>
[  331.319609][ T3524] tipc: Disabling bearer <udp:£>
[  331.324771][ T3524] tipc: Left network mode
[  331.324770][T27464] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9379'.
[  331.404149][T27409] chnl_net:caif_netlink_parms(): no params data found
[  331.497266][T27409] bridge0: port 1(bridge_slave_0) entered blocking state
[  331.504379][T27409] bridge0: port 1(bridge_slave_0) entered disabled state
[  331.511932][T27409] bridge_slave_0: entered allmulticast mode
[  331.518641][T27409] bridge_slave_0: entered promiscuous mode
[  331.525468][T27409] bridge0: port 2(bridge_slave_1) entered blocking state
[  331.532688][T27409] bridge0: port 2(bridge_slave_1) entered disabled state
[  331.540049][T27409] bridge_slave_1: entered allmulticast mode
[  331.546329][T27409] bridge_slave_1: entered promiscuous mode
[  331.563263][T27409] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  331.573691][T27409] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  331.600354][T27409] team0: Port device team_slave_0 added
[  331.607409][T27409] team0: Port device team_slave_1 added
[  331.626018][T27409] batman_adv: batadv0: Adding interface: batadv_slave_0
[  331.632972][T27409] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  331.659003][T27409] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  331.670789][T27409] batman_adv: batadv0: Adding interface: batadv_slave_1
[  331.677740][T27409] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  331.703689][T27409] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  331.730886][ T3524] IPVS: stop unused estimator thread 0...
[  331.733518][T27409] hsr_slave_0: entered promiscuous mode
[  331.742966][T27409] hsr_slave_1: entered promiscuous mode
[  331.748995][T27409] debugfs: 'hsr0' already exists in 'hsr'
[  331.754727][T27409] Cannot create hsr debugfs directory
[  331.878220][T27409] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  331.887085][T27409] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  331.896078][T27409] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  331.905412][T27409] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  331.928838][T27409] bridge0: port 2(bridge_slave_1) entered blocking state
[  331.935908][T27409] bridge0: port 2(bridge_slave_1) entered forwarding state
[  331.943302][T27409] bridge0: port 1(bridge_slave_0) entered blocking state
[  331.950362][T27409] bridge0: port 1(bridge_slave_0) entered forwarding state
[  331.985099][T27409] 8021q: adding VLAN 0 to HW filter on device bond0
[  331.999424][ T3524] bridge0: port 1(bridge_slave_0) entered disabled state
[  332.008941][ T3524] bridge0: port 2(bridge_slave_1) entered disabled state
[  332.028787][T27409] 8021q: adding VLAN 0 to HW filter on device team0
[  332.042358][ T3549] bridge0: port 1(bridge_slave_0) entered blocking state
[  332.049527][ T3549] bridge0: port 1(bridge_slave_0) entered forwarding state
[  332.060945][ T3524] bridge0: port 2(bridge_slave_1) entered blocking state
[  332.068065][ T3524] bridge0: port 2(bridge_slave_1) entered forwarding state
[  332.112867][ T3549] net_ratelimit: 16 callbacks suppressed
[  332.112885][ T3549] bond1: (slave bridge4): failed to get link speed/duplex
[  332.155613][T27409] 8021q: adding VLAN 0 to HW filter on device batadv0
[  332.185478][T27522] netlink: 48 bytes leftover after parsing attributes in process `syz.3.9393'.
[  332.275862][ T3513] bond1: (slave bridge4): failed to get link speed/duplex
[  332.373721][T27409] veth0_vlan: entered promiscuous mode
[  332.383179][T27553] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9404'.
[  332.394728][ T3536] bond1: (slave bridge4): failed to get link speed/duplex
[  332.436467][T27409] veth1_vlan: entered promiscuous mode
[  332.460506][T27562] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9406'.
[  332.473802][T27558] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27558 comm=syz.1.9405
[  332.507892][T27562] 8021q: adding VLAN 0 to HW filter on device bond4
[  332.522257][T27562] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9406'.
[  332.528891][T27567] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9408'.
[  332.541244][ T3513] bond1: (slave bridge4): failed to get link speed/duplex
[  332.571916][T27562] bond4 (unregistering): Released all slaves
[  332.586548][T27409] veth0_macvtap: entered promiscuous mode
[  332.594453][T27409] veth1_macvtap: entered promiscuous mode
[  332.605704][T27409] batman_adv: batadv0: Interface activated: batadv_slave_0
[  332.628596][T27409] batman_adv: batadv0: Interface activated: batadv_slave_1
[  332.637578][T27575] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  332.657343][ T3524] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  332.666218][ T3536] bond1: (slave bridge4): failed to get link speed/duplex
[  332.675768][ T3524] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  332.718802][ T3524] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  332.753237][ T3524] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  332.787258][ T3561] bond1: (slave bridge4): failed to get link speed/duplex
[  332.840430][T27581] netlink: 4 bytes leftover after parsing attributes in process `+}[@'.
[  332.904060][ T3549] bond1: (slave bridge4): failed to get link speed/duplex
[  332.941665][T27603] pimreg: entered allmulticast mode
[  333.023366][ T3549] bond1: (slave bridge4): failed to get link speed/duplex
[  333.116681][T27620] loop8: detected capacity change from 0 to 1024
[  333.134491][T27620] EXT4-fs: inline encryption not supported
[  333.152977][ T3549] bond1: (slave bridge4): failed to get link speed/duplex
[  333.164713][T27620] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  333.254805][T27409] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  333.283255][ T3536] bond1: (slave bridge4): failed to get link speed/duplex
[  333.395676][   T29] kauditd_printk_skb: 117 callbacks suppressed
[  333.395689][   T29] audit: type=1326 audit(329.255:13466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27590 comm="syz.7.9417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f066428ebe9 code=0x7ffc0000
[  333.461098][   T29] audit: type=1326 audit(329.292:13467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27590 comm="syz.7.9417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f066428ebe9 code=0x7ffc0000
[  333.484307][   T29] audit: type=1326 audit(329.301:13468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27590 comm="syz.7.9417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f066428ebe9 code=0x7ffc0000
[  333.507311][   T29] audit: type=1326 audit(329.310:13469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27590 comm="syz.7.9417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f066428ebe9 code=0x7ffc0000
[  333.548152][   T29] audit: type=1326 audit(329.384:13470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27590 comm="syz.7.9417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f066428ebe9 code=0x7ffc0000
[  333.571234][   T29] audit: type=1326 audit(329.393:13471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27590 comm="syz.7.9417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f066428ebe9 code=0x7ffc0000
[  333.600517][   T29] audit: type=1326 audit(329.449:13472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27590 comm="syz.7.9417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f066428ebe9 code=0x7ffc0000
[  333.627705][   T29] audit: type=1326 audit(329.467:13473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27590 comm="syz.7.9417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f066428ebe9 code=0x7ffc0000
[  333.681993][   T29] audit: type=1326 audit(329.495:13474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27590 comm="syz.7.9417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f066428ebe9 code=0x7ffc0000
[  333.705135][   T29] audit: type=1326 audit(329.495:13475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27590 comm="syz.7.9417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f066428ebe9 code=0x7ffc0000
[  333.750884][T27648] wg2: entered promiscuous mode
[  333.755773][T27648] wg2: entered allmulticast mode
[  333.891396][T27660] veth7: left promiscuous mode
[  333.911283][T27660] geneve2: left allmulticast mode
[  333.920405][T27664] bridge: RTM_NEWNEIGH with invalid ether address
[  333.930082][ T3549] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  333.943644][ T3549] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  333.963419][ T3549] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  333.997435][ T3549] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  334.129929][T27695] wireguard0: entered promiscuous mode
[  334.135421][T27695] wireguard0: entered allmulticast mode
[  334.321322][T27710] validate_nla: 3 callbacks suppressed
[  334.321338][T27710] netlink: 'syz.1.9469': attribute type 9 has an invalid length.
[  334.362013][T27710] netlink: 'syz.1.9469': attribute type 9 has an invalid length.
[  334.408875][T27729] netlink: 'syz.1.9477': attribute type 10 has an invalid length.
[  334.646300][ T3561] nci: nci_rsp_packet: unknown rsp opcode 0x73a
[  335.217141][T27780] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27780 comm=syz.3.9498
[  335.822241][T27821] netlink: 'syz.4.9516': attribute type 9 has an invalid length.
[  336.152081][T27845] netlink: 'syz.4.9527': attribute type 10 has an invalid length.
[  336.171429][T27849] netlink: 'syz.3.9530': attribute type 9 has an invalid length.
[  336.180714][T27851] loop8: detected capacity change from 0 to 512
[  336.184503][T27849] netlink: 'syz.3.9530': attribute type 9 has an invalid length.
[  336.284222][T27851] loop8: detected capacity change from 512 to 64
[  336.291542][T27851] FAT-fs (loop8): Directory bread(block 34) failed
[  336.298889][T27851] FAT-fs (loop8): Directory bread(block 35) failed
[  336.306072][T27851] FAT-fs (loop8): Directory bread(block 36) failed
[  336.312748][T27851] FAT-fs (loop8): Directory bread(block 37) failed
[  336.319444][T27851] FAT-fs (loop8): Directory bread(block 38) failed
[  336.326079][T27851] FAT-fs (loop8): Directory bread(block 39) failed
[  336.333310][T27851] FAT-fs (loop8): Directory bread(block 40) failed
[  336.339908][T27851] FAT-fs (loop8): Directory bread(block 41) failed
[  336.371762][T27871] uprobe: syz.4.9539:27871 failed to unregister, leaking uprobe
[  336.379470][T27871] uprobe: syz.4.9539:27871 failed to unregister, leaking uprobe
[  336.494072][T27409] FAT-fs (loop8): Directory bread(block 34) failed
[  336.520946][T27409] FAT-fs (loop8): Directory bread(block 35) failed
[  336.538207][T27878] ip6gre3: entered allmulticast mode
[  336.748433][ T3536] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  336.841488][ T3536] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  336.926800][ T3536] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  337.033751][ T3536] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  337.277320][ T3536] bridge_slave_1: left allmulticast mode
[  337.283059][ T3536] bridge_slave_1: left promiscuous mode
[  337.288736][ T3536] bridge0: port 2(bridge_slave_1) entered disabled state
[  337.381411][ T3536] bridge_slave_0: left allmulticast mode
[  337.387187][ T3536] bridge_slave_0: left promiscuous mode
[  337.392985][ T3536] bridge0: port 1(bridge_slave_0) entered disabled state
[  337.587344][ T3536] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  337.597232][ T3536] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  337.607174][ T3536] bond0 (unregistering): Released all slaves
[  337.638452][ T3507] net_ratelimit: 30 callbacks suppressed
[  337.638469][ T3507] bond1: (slave bridge4): failed to get link speed/duplex
[  337.709248][ T3536] hsr_slave_0: left promiscuous mode
[  337.715107][ T3536] hsr_slave_1: left promiscuous mode
[  337.720679][ T3536] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  337.728078][ T3536] batman_adv: batadv0: Removing interface: batadv_slave_0
[  337.735618][ T3536] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  337.743008][ T3536] batman_adv: batadv0: Removing interface: batadv_slave_1
[  337.753494][ T3536] veth1_macvtap: left promiscuous mode
[  337.759067][ T3536] veth0_macvtap: left promiscuous mode
[  337.764608][ T3536] veth1_vlan: left promiscuous mode
[  337.770118][ T3536] veth0_vlan: left promiscuous mode
[  337.808972][ T3536] pimreg (unregistering): left allmulticast mode
[  337.839313][ T3536] team0 (unregistering): Port device team_slave_1 removed
[  337.849351][ T3536] team0 (unregistering): Port device team_slave_0 removed
[  337.904525][T27886] chnl_net:caif_netlink_parms(): no params data found
[  337.939000][T27886] bridge0: port 1(bridge_slave_0) entered blocking state
[  337.946198][T27886] bridge0: port 1(bridge_slave_0) entered disabled state
[  337.955453][T27886] bridge_slave_0: entered allmulticast mode
[  337.961851][T27886] bridge_slave_0: entered promiscuous mode
[  337.968793][T27886] bridge0: port 2(bridge_slave_1) entered blocking state
[  337.975914][T27886] bridge0: port 2(bridge_slave_1) entered disabled state
[  337.983138][T27886] bridge_slave_1: entered allmulticast mode
[  337.989777][T27886] bridge_slave_1: entered promiscuous mode
[  338.006939][T27886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  338.017196][T27886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  338.036608][T27886] team0: Port device team_slave_0 added
[  338.043616][T27886] team0: Port device team_slave_1 added
[  338.058238][T27886] batman_adv: batadv0: Adding interface: batadv_slave_0
[  338.065203][T27886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  338.091145][T27886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  338.102640][T27886] batman_adv: batadv0: Adding interface: batadv_slave_1
[  338.109600][T27886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  338.135518][T27886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  338.161232][T27886] hsr_slave_0: entered promiscuous mode
[  338.167032][T27886] hsr_slave_1: entered promiscuous mode
[  338.172900][T27886] debugfs: 'hsr0' already exists in 'hsr'
[  338.178601][T27886] Cannot create hsr debugfs directory
[  338.241174][T27886] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  338.249852][T27886] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  338.258252][T27886] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  338.266943][T27886] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  338.281633][T27886] bridge0: port 2(bridge_slave_1) entered blocking state
[  338.288741][T27886] bridge0: port 2(bridge_slave_1) entered forwarding state
[  338.296083][T27886] bridge0: port 1(bridge_slave_0) entered blocking state
[  338.303156][T27886] bridge0: port 1(bridge_slave_0) entered forwarding state
[  338.329480][T27886] 8021q: adding VLAN 0 to HW filter on device bond0
[  338.340654][ T3549] bridge0: port 1(bridge_slave_0) entered disabled state
[  338.348816][ T3549] bridge0: port 2(bridge_slave_1) entered disabled state
[  338.360387][T27886] 8021q: adding VLAN 0 to HW filter on device team0
[  338.371150][ T3536] bridge0: port 1(bridge_slave_0) entered blocking state
[  338.378230][ T3536] bridge0: port 1(bridge_slave_0) entered forwarding state
[  338.386031][ T3536] bond1: (slave bridge4): failed to get link speed/duplex
[  338.395934][ T3513] bridge0: port 2(bridge_slave_1) entered blocking state
[  338.403038][ T3513] bridge0: port 2(bridge_slave_1) entered forwarding state
[  338.463201][T27886] 8021q: adding VLAN 0 to HW filter on device batadv0
[  338.516620][ T3536] bond1: (slave bridge4): failed to get link speed/duplex
[  338.555796][T27886] veth0_vlan: entered promiscuous mode
[  338.563804][T27886] veth1_vlan: entered promiscuous mode
[  338.579221][T27886] veth0_macvtap: entered promiscuous mode
[  338.587244][T27886] veth1_macvtap: entered promiscuous mode
[  338.598848][T27886] batman_adv: batadv0: Interface activated: batadv_slave_0
[  338.607955][T27886] batman_adv: batadv0: Interface activated: batadv_slave_1
[  338.620534][ T3536] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  338.633595][ T3536] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  338.642556][ T3549] bond1: (slave bridge4): failed to get link speed/duplex
[  338.650258][ T3536] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  338.660442][ T3536] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  338.707173][T27954] __nla_validate_parse: 5 callbacks suppressed
[  338.707189][T27954] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9570'.
[  338.735347][T27950] 9pnet: p9_errstr2errno: server reported unknown error 
[  338.765138][ T3524] bond1: (slave bridge4): failed to get link speed/duplex
[  338.836850][   T29] kauditd_printk_skb: 103 callbacks suppressed
[  338.836936][   T29] audit: type=1326 audit(334.276:13579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27959 comm="syz.7.9572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f066428ebe9 code=0x7ffc0000
[  338.880960][   T29] audit: type=1326 audit(334.304:13580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27959 comm="syz.7.9572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f066428ebe9 code=0x7ffc0000
[  338.904091][   T29] audit: type=1326 audit(334.304:13581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27959 comm="syz.7.9572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f066428ebe9 code=0x7ffc0000
[  338.927099][   T29] audit: type=1326 audit(334.304:13582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27959 comm="syz.7.9572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f066428ebe9 code=0x7ffc0000
[  338.933681][ T3536] bond1: (slave bridge4): failed to get link speed/duplex
[  338.950226][   T29] audit: type=1326 audit(334.304:13583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27959 comm="syz.7.9572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=70 compat=0 ip=0x7f066428ebe9 code=0x7ffc0000
[  339.063155][   T29] audit: type=1326 audit(334.488:13584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27971 comm="syz.4.9576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d857debe9 code=0x7ffc0000
[  339.086382][   T29] audit: type=1326 audit(334.488:13585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27971 comm="syz.4.9576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d857debe9 code=0x7ffc0000
[  339.109748][ T3524] bond1: (slave bridge4): failed to get link speed/duplex
[  339.165373][   T29] audit: type=1326 audit(334.488:13586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27971 comm="syz.4.9576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f6d857debe9 code=0x7ffc0000
[  339.188307][   T29] audit: type=1326 audit(334.488:13587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27971 comm="syz.4.9576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d857debe9 code=0x7ffc0000
[  339.211381][   T29] audit: type=1326 audit(334.488:13588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27971 comm="syz.4.9576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d857debe9 code=0x7ffc0000
[  339.263789][ T3524] bond1: (slave bridge4): failed to get link speed/duplex
[  339.382954][ T3549] bond1: (slave bridge4): failed to get link speed/duplex
[  339.502311][ T3536] bond1: (slave bridge4): failed to get link speed/duplex
[  339.776079][T27991] netlink: 'syz.7.9565': attribute type 9 has an invalid length.
[  339.822072][T27995] wireguard0: entered promiscuous mode
[  339.827669][T27995] wireguard0: entered allmulticast mode
[  340.081449][T28027] tipc: Started in network mode
[  340.086485][T28027] tipc: Node identity c2e0ac27fafa, cluster identity 4711
[  340.093781][T28027] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  340.104464][ T3513] tipc: Resetting bearer <eth:syzkaller0>
[  340.120731][T28026] tipc: Resetting bearer <eth:syzkaller0>
[  340.138382][T28026] tipc: Disabling bearer <eth:syzkaller0>
[  340.236618][T28035] netlink: 'syz.9.9588': attribute type 9 has an invalid length.
[  340.936849][T28074] bridge0: port 2(bridge_slave_1) entered disabled state
[  340.944057][T28074] bridge0: port 1(bridge_slave_0) entered disabled state
[  341.017894][T28084] loop7: detected capacity change from 0 to 1024
[  341.074010][T28086] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9609'.
[  341.091293][T28084] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  341.104573][T28074] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  341.127013][T28074] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  341.179565][T28084] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4183: comm syz.7.9618: Allocating blocks 449-513 which overlap fs metadata
[  341.220352][T28082] EXT4-fs (loop7): pa ffff888106f055b0: logic 48, phys. 177, len 21
[  341.228461][T28082] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4
[  341.245869][T28097] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  341.265471][ T3561] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  341.290546][T20556] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  341.335176][T28104] netlink: 'syz.9.9616': attribute type 1 has an invalid length.
[  341.354598][ T3561] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  341.363819][ T3536] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  341.391792][ T3536] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  341.439016][T28114] bond_slave_1: entered promiscuous mode
[  341.444759][T28114] bond_slave_1: entered allmulticast mode
[  341.579319][T28119] loop7: detected capacity change from 0 to 2048
[  341.644277][T28119]  loop7: p1 < > p4
[  341.660511][T28119] loop7: p4 size 8388608 extends beyond EOD, truncated
[  342.077846][T28158] macvlan1: entered promiscuous mode
[  342.086499][T28158] ipvlan0: entered promiscuous mode
[  342.094163][T28158] ipvlan0: left promiscuous mode
[  342.099488][T28158] macvlan1: left promiscuous mode
[  342.131839][T28162] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9642'.
[  342.144301][T28162] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9642'.
[  343.170808][ T3507] net_ratelimit: 25 callbacks suppressed
[  343.170825][ T3507] bond1: (slave bridge4): failed to get link speed/duplex
[  343.293951][ T3513] bond1: (slave bridge4): failed to get link speed/duplex
[  343.413018][ T3536] bond1: (slave bridge4): failed to get link speed/duplex
[  343.532503][ T3507] bond1: (slave bridge4): failed to get link speed/duplex
[  343.626013][T28228] SELinux:  policydb version -957581230 does not match my version range 15-35
[  343.651280][ T3536] bond1: (slave bridge4): failed to get link speed/duplex
[  343.671080][T28230] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  343.770647][ T3536] bond1: (slave bridge4): failed to get link speed/duplex
[  343.835788][T28228] SELinux: failed to load policy
[  343.892407][ T3513] bond1: (slave bridge4): failed to get link speed/duplex
[  344.008977][ T3561] bond1: (slave bridge4): failed to get link speed/duplex
[  344.089121][T28251] netlink: 4 bytes leftover after parsing attributes in process `+}[@'.
[  344.149697][ T3561] bond1: (slave bridge4): failed to get link speed/duplex
[  344.281288][ T3561] bond1: (slave bridge4): failed to get link speed/duplex
[  344.316007][   T29] kauditd_printk_skb: 556 callbacks suppressed
[  344.316022][   T29] audit: type=1326 audit(339.325:14145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28260 comm="syz.4.9671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d857debe9 code=0x7ffc0000
[  344.345384][   T29] audit: type=1326 audit(339.325:14146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28260 comm="syz.4.9671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d857debe9 code=0x7ffc0000
[  344.368596][   T29] audit: type=1326 audit(339.334:14147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28260 comm="syz.4.9671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6d857debe9 code=0x7ffc0000
[  344.391667][   T29] audit: type=1326 audit(339.334:14148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28260 comm="syz.4.9671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d857debe9 code=0x7ffc0000
[  344.414893][   T29] audit: type=1326 audit(339.334:14149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28260 comm="syz.4.9671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6d857debe9 code=0x7ffc0000
[  344.437996][   T29] audit: type=1326 audit(339.334:14150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28260 comm="syz.4.9671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d857debe9 code=0x7ffc0000
[  344.461112][   T29] audit: type=1326 audit(339.334:14151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28260 comm="syz.4.9671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6d857debe9 code=0x7ffc0000
[  344.484292][   T29] audit: type=1326 audit(339.334:14152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28260 comm="syz.4.9671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d857debe9 code=0x7ffc0000
[  344.507312][   T29] audit: type=1326 audit(339.334:14153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28260 comm="syz.4.9671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6d857debe9 code=0x7ffc0000
[  344.530341][   T29] audit: type=1326 audit(339.334:14154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28260 comm="syz.4.9671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d857debe9 code=0x7ffc0000
[  344.569669][T28269] bridge: RTM_NEWNEIGH with invalid ether address
[  344.607847][T28271] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=28271 comm=syz.4.9681
[  344.620604][T28271] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=28271 comm=syz.4.9681
[  344.694034][T28273] bond5: left promiscuous mode
[  344.698837][T28273] bond5: left allmulticast mode
[  344.725299][T28279] team0: Port device team_slave_0 removed
[  344.889719][T28292] bond8: entered promiscuous mode
[  344.894797][T28292] bond8: entered allmulticast mode
[  344.900182][T28292] 8021q: adding VLAN 0 to HW filter on device bond8
[  344.915872][T28292] bond8 (unregistering): Released all slaves
[  345.167198][T28306] gtp0: left promiscuous mode
[  345.172016][T28306] gtp0: left allmulticast mode
[  345.182468][T28306] bond11: left promiscuous mode
[  345.187355][T28306] bond11: left allmulticast mode
[  345.195599][T28306] geneve2: left allmulticast mode
[  345.216468][T28306] ip6gre3: left allmulticast mode
[  345.452521][T28333] loop9: detected capacity change from 0 to 1024
[  345.459468][T28333] EXT4-fs: Ignoring removed bh option
[  345.465147][T28333] EXT4-fs: Ignoring removed nobh option
[  345.470746][T28333] EXT4-fs: inline encryption not supported
[  345.501087][T28333] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  345.523242][T28333] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4183: comm syz.9.9706: Allocating blocks 385-513 which overlap fs metadata
[  345.541222][T28333] EXT4-fs (loop9): pa ffff888106f054d0: logic 16, phys. 129, len 24
[  345.549423][T28333] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8
[  345.565192][T28333] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28
[  345.577505][T28333] EXT4-fs (loop9): This should not happen!! Data will be lost
[  345.577505][T28333] 
[  345.587404][T28333] EXT4-fs (loop9): Total free blocks count 0
[  345.593514][T28333] EXT4-fs (loop9): Free/Dirty block details
[  345.599493][T28333] EXT4-fs (loop9): free_blocks=128
[  345.604641][T28333] EXT4-fs (loop9): dirty_blocks=0
[  345.609653][T28333] EXT4-fs (loop9): Block reservation details
[  345.615664][T28333] EXT4-fs (loop9): i_reserved_data_blocks=0
[  345.623921][T28345] bond4: entered promiscuous mode
[  345.629004][T28345] bond4: entered allmulticast mode
[  345.636592][T28345] 8021q: adding VLAN 0 to HW filter on device bond4
[  345.651164][T28345] bond4 (unregistering): Released all slaves
[  345.755923][T28364] team0 (unregistering): Port device team_slave_1 removed
[  346.874947][T28399] loop7: detected capacity change from 0 to 136
[  346.886171][T28399] rock: directory entry would overflow storage
[  346.892426][T28399] rock: sig=0x4f50, size=4, remaining=3
[  346.897989][T28399] iso9660: Corrupted directory entry in block 2 of inode 1472
[  346.950228][T28405] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=28405 comm=syz.7.9733
[  346.962862][T28405] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=28405 comm=syz.7.9733
[  347.097749][T28422] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9739'.
[  347.871800][ T3513] netdevsim netdevsim7 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  347.891451][ T3513] netdevsim netdevsim7 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  347.912037][ T3513] netdevsim netdevsim7 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  347.947007][ T3513] netdevsim netdevsim7 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  348.130692][T28460] ref_ctr increment failed for inode: 0xec offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88810005b3c0
[  348.356855][T28479] bridge: RTM_NEWNEIGH with invalid ether address
[  348.374835][T28481] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9766'.
[  348.625927][T28508] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.9778'.
[  348.641524][T28510] loop7: detected capacity change from 0 to 512
[  348.649017][T28510] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
[  348.672688][T28510] EXT4-fs (loop7): orphan cleanup on readonly fs
[  348.685937][T28510] EXT4-fs error (device loop7): ext4_orphan_get:1418: comm syz.7.9780: bad orphan inode 15
[  348.717303][T28515] loop9: detected capacity change from 0 to 2048
[  348.724824][T28510] ext4_test_bit(bit=14, block=18) = 1
[  348.730244][T28510] is_bad_inode(inode)=0
[  348.737156][T28510] NEXT_ORPHAN(inode)=1023
[  348.741518][T28510] max_ino=32
[  348.748743][T28510] i_nlink=0
[  348.778729][T28510] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2962: inode #15: comm syz.7.9780: corrupted xattr block 19: e_value size too large
[  348.780645][T28520] tipc: Failed to remove unknown binding: 66,1,1/2886997007:3098512633/3098512635
[  348.814050][T28515] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  348.816163][T28520] tipc: Failed to remove unknown binding: 66,1,1/2886997007:3098512633/3098512635
[  348.828722][T28510] EXT4-fs warning (device loop7): ext4_evict_inode:274: xattr delete (err -117)
[  348.835759][T28520] tipc: Failed to remove unknown binding: 66,1,1/2886997007:3098512633/3098512635
[  348.847312][T28510] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  348.892432][T20556] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  348.930931][T28528] netem: change failed
[  349.006343][T28530] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  349.024892][T28530] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 32 with error 28
[  349.037279][T28530] EXT4-fs (loop9): This should not happen!! Data will be lost
[  349.037279][T28530] 
[  349.046939][T28530] EXT4-fs (loop9): Total free blocks count 0
[  349.052957][T28530] EXT4-fs (loop9): Free/Dirty block details
[  349.058906][T28530] EXT4-fs (loop9): free_blocks=2415919104
[  349.064623][T28530] EXT4-fs (loop9): dirty_blocks=4032
[  349.069963][T28530] EXT4-fs (loop9): Block reservation details
[  349.075933][T28530] EXT4-fs (loop9): i_reserved_data_blocks=252
[  349.085471][T28515] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 2048 with error 28
[  349.112796][T28537] loop7: detected capacity change from 0 to 128
[  349.136029][T28537] bio_check_eod: 55 callbacks suppressed
[  349.136045][T28537] syz.7.9798: attempt to access beyond end of device
[  349.136045][T28537] loop7: rw=2049, sector=169, nr_sectors = 7 limit=128
[  349.179624][ T3507] kworker/u8:11: attempt to access beyond end of device
[  349.179624][ T3507] loop7: rw=1, sector=145, nr_sectors = 24 limit=128
[  349.430840][T28552] loop9: detected capacity change from 0 to 1024
[  349.438281][T28552] EXT4-fs (loop9): couldn't mount as ext3 due to feature incompatibilities
[  349.594825][T28565] netlink: 14593 bytes leftover after parsing attributes in process `syz.9.9800'.
[  349.641190][T28571] loop9: detected capacity change from 0 to 164
[  349.672814][T28571] Unsupported NM flag settings (8)
[  349.723123][T28579] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9808'.
[  350.102590][   T29] kauditd_printk_skb: 252 callbacks suppressed
[  350.102619][   T29] audit: type=1326 audit(344.678:14407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28539 comm="syz.7.9790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f066428ebe9 code=0x7fc00000
[  350.218951][   T29] audit: type=1326 audit(344.770:14408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28592 comm="syz.3.9813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f629aabebe9 code=0x7ffc0000
[  350.242030][   T29] audit: type=1326 audit(344.770:14409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28592 comm="syz.3.9813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f629aabebe9 code=0x7ffc0000
[  350.264941][   T29] audit: type=1326 audit(344.770:14410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28592 comm="syz.3.9813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f629aabebe9 code=0x7ffc0000
[  350.287941][   T29] audit: type=1326 audit(344.770:14411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28592 comm="syz.3.9813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f629aabebe9 code=0x7ffc0000
[  350.311386][   T29] audit: type=1326 audit(344.770:14412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28592 comm="syz.3.9813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f629aabebe9 code=0x7ffc0000
[  350.334353][   T29] audit: type=1326 audit(344.770:14413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28592 comm="syz.3.9813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7f629aabebe9 code=0x7ffc0000
[  350.357447][   T29] audit: type=1326 audit(344.770:14414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28592 comm="syz.3.9813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f629aabebe9 code=0x7ffc0000
[  350.380443][   T29] audit: type=1326 audit(344.770:14415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28592 comm="syz.3.9813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f629aabebe9 code=0x7ffc0000
[  350.403336][   T29] audit: type=1326 audit(344.770:14416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28592 comm="syz.3.9813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f629aabebe9 code=0x7ffc0000
[  350.464461][T28598] tipc: Failed to remove unknown binding: 66,1,1/2886997007:3619478711/3619478713
[  350.485969][T28598] tipc: Failed to remove unknown binding: 66,1,1/2886997007:3619478711/3619478713
[  350.495354][T28598] tipc: Failed to remove unknown binding: 66,1,1/2886997007:3619478711/3619478713
[  351.124295][T28622] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9824'.
[  351.415085][T28645] tipc: Bearer <udp:syz2>: already 2 bearers with priority 10
[  351.422663][T28645] tipc: Bearer <udp:syz2>: trying with adjusted priority
[  351.480269][T28645] tipc: New replicast peer: 255.255.255.255
[  351.486391][T28645] tipc: Enabled bearer <udp:syz2>, priority 9
[  351.756243][T28666] loop9: detected capacity change from 0 to 512
[  351.773417][T28666] vfat: Unknown parameter '01777777777777777777777'
[  351.797673][T28666] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9845'.
[  352.125942][T28699] loop9: detected capacity change from 0 to 512
[  352.170082][T28699] EXT4-fs error (device loop9): ext4_ext_check_inode:523: inode #3: comm syz.9.9857: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0)
[  352.192057][T28699] EXT4-fs error (device loop9): ext4_quota_enable:7127: comm syz.9.9857: Bad quota inode: 3, type: 0
[  352.239656][T28699] EXT4-fs warning (device loop9): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  352.307368][T28699] EXT4-fs (loop9): mount failed
[  352.619526][T28738] loop7: detected capacity change from 0 to 512
[  352.633142][T28741] SELinux:  Context @ is not valid (left unmapped).
[  352.650965][T28742] loop9: detected capacity change from 0 to 4096
[  352.658197][T28742] EXT4-fs: dax option not supported
[  352.668963][T28738] EXT4-fs error (device loop7): ext4_ext_check_inode:523: inode #3: comm syz.7.9874: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0)
[  352.709670][T28738] EXT4-fs error (device loop7): ext4_quota_enable:7127: comm syz.7.9874: Bad quota inode: 3, type: 0
[  352.772740][T28738] EXT4-fs warning (device loop7): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  352.813215][T28738] EXT4-fs (loop7): mount failed
[  352.852564][T28752] loop7: detected capacity change from 0 to 764
[  352.939097][T28756] netlink: 16 bytes leftover after parsing attributes in process `syz.7.9883'.
[  353.012716][T28767] netlink: 'syz.4.9885': attribute type 1 has an invalid length.
[  353.038648][T28767] 8021q: adding VLAN 0 to HW filter on device bond14
[  353.074040][T28767] bond14: (slave geneve3): making interface the new active one
[  353.085547][T28767] bond14: (slave geneve3): Enslaving as an active interface with an up link
[  353.097388][ T3561] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  353.108585][ T3561] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  353.119250][ T3561] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  353.170805][ T3561] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  353.356766][T28792] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28792 comm=syz.7.9891
[  353.542825][T28757] chnl_net:caif_netlink_parms(): no params data found
[  353.683220][T28757] bridge0: port 1(bridge_slave_0) entered blocking state
[  353.690350][T28757] bridge0: port 1(bridge_slave_0) entered disabled state
[  353.706699][T28757] bridge_slave_0: entered allmulticast mode
[  353.713480][T28757] bridge_slave_0: entered promiscuous mode
[  353.727819][T28757] bridge0: port 2(bridge_slave_1) entered blocking state
[  353.734952][T28757] bridge0: port 2(bridge_slave_1) entered disabled state
[  353.742294][T28757] bridge_slave_1: entered allmulticast mode
[  353.748817][T28757] bridge_slave_1: entered promiscuous mode
[  353.850877][T28757] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  353.872656][T28757] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  353.949701][T28817] netlink: 'syz.7.9901': attribute type 11 has an invalid length.
[  353.993140][T28757] team0: Port device team_slave_0 added
[  354.000129][T28757] team0: Port device team_slave_1 added
[  354.059985][T28757] batman_adv: batadv0: Adding interface: batadv_slave_0
[  354.066979][T28757] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  354.093241][T28757] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  354.124478][T28819] loop7: detected capacity change from 0 to 512
[  354.131187][T28819] EXT4-fs: Ignoring removed bh option
[  354.137571][T28757] batman_adv: batadv0: Adding interface: batadv_slave_1
[  354.144550][T28757] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  354.170466][T28757] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  354.181226][T28819] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended
[  354.190290][T28819] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
[  354.208528][T28819] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended
[  354.226784][T28819] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006]
[  354.239001][T28819] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  354.262845][T28757] hsr_slave_0: entered promiscuous mode
[  354.283523][T28757] hsr_slave_1: entered promiscuous mode
[  354.289645][T28757] debugfs: 'hsr0' already exists in 'hsr'
[  354.295411][T28757] Cannot create hsr debugfs directory
[  354.311282][T20556] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  354.748397][T28757] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  354.811108][T28757] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  354.830729][T28757] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  354.854644][T28757] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  354.914226][T28881] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9923'.
[  354.951529][T28757] 8021q: adding VLAN 0 to HW filter on device bond0
[  354.968185][T28757] 8021q: adding VLAN 0 to HW filter on device team0
[  354.977525][ T3561] bridge0: port 1(bridge_slave_0) entered blocking state
[  354.984647][ T3561] bridge0: port 1(bridge_slave_0) entered forwarding state
[  354.999551][ T3561] bridge0: port 2(bridge_slave_1) entered blocking state
[  355.006695][ T3561] bridge0: port 2(bridge_slave_1) entered forwarding state
[  355.018764][T28886] sch_fq: defrate 4294967295 ignored.
[  355.066945][T28890] tipc: Bearer <udp:syz0>: already 2 bearers with priority 10
[  355.074539][T28890] tipc: Bearer <udp:syz0>: trying with adjusted priority
[  355.081706][T28890] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  355.124163][T28757] 8021q: adding VLAN 0 to HW filter on device batadv0
[  355.212683][T28757] veth0_vlan: entered promiscuous mode
[  355.220998][T28757] veth1_vlan: entered promiscuous mode
[  355.243370][T28757] veth0_macvtap: entered promiscuous mode
[  355.254203][T28757] veth1_macvtap: entered promiscuous mode
[  355.267947][T28757] batman_adv: batadv0: Interface activated: batadv_slave_0
[  355.281997][T28757] batman_adv: batadv0: Interface activated: batadv_slave_1
[  355.293589][ T3549] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  355.310053][ T3549] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  355.329942][ T3549] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  355.341007][ T3549] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  356.130051][   T29] kauditd_printk_skb: 127 callbacks suppressed
[  356.130068][   T29] audit: type=1326 audit(350.235:14544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28921 comm="syz.4.9935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6d857d5ba7 code=0x7ffc0000
[  356.159345][   T29] audit: type=1326 audit(350.235:14545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28921 comm="syz.4.9935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6d8577add9 code=0x7ffc0000
[  356.182242][   T29] audit: type=1326 audit(350.235:14546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28921 comm="syz.4.9935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6d857d5ba7 code=0x7ffc0000
[  356.205204][   T29] audit: type=1326 audit(350.235:14547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28921 comm="syz.4.9935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6d8577add9 code=0x7ffc0000
[  356.228157][   T29] audit: type=1326 audit(350.235:14548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28921 comm="syz.4.9935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d857debe9 code=0x7ffc0000
[  356.251207][   T29] audit: type=1326 audit(350.235:14549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28921 comm="syz.4.9935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d857debe9 code=0x7ffc0000
[  356.274337][   T29] audit: type=1326 audit(350.235:14550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28921 comm="syz.4.9935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f6d857debe9 code=0x7ffc0000
[  356.297344][   T29] audit: type=1326 audit(350.235:14551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28921 comm="syz.4.9935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d857debe9 code=0x7ffc0000
[  356.320390][   T29] audit: type=1326 audit(350.235:14552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28921 comm="syz.4.9935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d857debe9 code=0x7ffc0000
[  356.393079][   T29] audit: type=1326 audit(350.447:14553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28921 comm="syz.4.9935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6d857debe9 code=0x7ffc0000
[  356.522211][T28932] netlink: 'syz.3.9940': attribute type 10 has an invalid length.
[  356.541491][T28934] netlink: 100 bytes leftover after parsing attributes in process `syz.1.9939'.
[  356.638853][T28940] uprobe: syz.3.9951:28940 failed to unregister, leaking uprobe
[  356.833779][T28950] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9945'.
[  356.910514][T28954] netlink: 21 bytes leftover after parsing attributes in process `syz.7.9937'.
[  357.107325][T28963] netlink: 96 bytes leftover after parsing attributes in process `syz.1.9949'.
[  357.476232][T28970] macvtap0: entered allmulticast mode
[  357.487642][T28970] 8021q: adding VLAN 0 to HW filter on device macvtap0
[  357.586158][T28974] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9955'.
[  357.604947][T28974] vlan0: entered allmulticast mode
[  357.733546][T28985] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9959'.
[  357.755556][T28985] vlan2: entered promiscuous mode
[  357.760637][T28985] syz_tun: entered promiscuous mode
[  357.811777][T28990] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9961'.
[  357.834857][T28990] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9961'.
[  358.110656][T29003] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  358.624098][T29018] bridge0: port 1(syz_tun) entered blocking state
[  358.630792][T29018] bridge0: port 1(syz_tun) entered disabled state
[  358.637750][T29018] syz_tun: entered allmulticast mode
[  358.643633][T29018] syz_tun: entered promiscuous mode
[  358.733753][T29029] __nla_validate_parse: 4 callbacks suppressed
[  358.733770][T29029] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9978'.
[  358.751382][T29029] vlan0: entered promiscuous mode
[  358.756475][T29029] syz_tun: entered promiscuous mode
[  358.850698][T29036] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9981'.
[  358.863112][T29036] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9981'.
[  358.872830][T29036] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9981'.
[  358.882544][T29036] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9981'.
[  358.892426][T29036] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9981'.
[  358.901655][T29036] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9981'.
[  358.920586][T29040] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9983'.
[  358.938709][T29042] netlink: 96 bytes leftover after parsing attributes in process `syz.3.9984'.
[  359.019436][T29054] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9999'.
[  359.041998][T29056] vlan0: entered allmulticast mode
[  359.047755][T29056] bridge0: port 1(vlan0) entered blocking state
[  359.054088][T29056] bridge0: port 1(vlan0) entered disabled state
[  359.061183][T29056] vlan0: entered promiscuous mode
[  359.066209][T29056] bridge_slave_0: entered promiscuous mode
[  359.280622][T29003] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  359.365061][T29003] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  359.486562][T29003] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  359.500986][T29095] veth0_to_team: entered promiscuous mode
[  359.587375][ T3570] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  359.608773][ T3570] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  359.618936][ T3570] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  359.649890][ T3570] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  359.814683][T29119] uprobe: syz.7.10017:29119 failed to unregister, leaking uprobe
[  360.634274][T29156] loop2: detected capacity change from 0 to 128
[  360.650701][T29156] FAT-fs (loop2): Directory bread(block 32) failed
[  360.657934][T29156] FAT-fs (loop2): Directory bread(block 33) failed
[  360.675188][T29156] FAT-fs (loop2): Directory bread(block 34) failed
[  360.687756][T29156] FAT-fs (loop2): Directory bread(block 35) failed
[  360.694585][T29156] FAT-fs (loop2): Directory bread(block 36) failed
[  360.701172][T29156] FAT-fs (loop2): Directory bread(block 37) failed
[  360.711796][T29156] FAT-fs (loop2): Directory bread(block 38) failed
[  360.719265][T29156] FAT-fs (loop2): Directory bread(block 39) failed
[  360.725953][T29156] FAT-fs (loop2): Directory bread(block 40) failed
[  360.735601][T29156] FAT-fs (loop2): Directory bread(block 41) failed
[  360.783438][T29160] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  360.995197][T29173] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  361.066059][T29173] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  361.118091][T29173] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  361.183260][T29173] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  361.322962][T29190] netlink: 'syz.4.10044': attribute type 3 has an invalid length.
[  362.436584][   T29] kauditd_printk_skb: 356 callbacks suppressed
[  362.436600][   T29] audit: type=1326 audit(356.059:14910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29206 comm="syz.4.10051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d857debe9 code=0x7ffc0000
[  362.471372][   T29] audit: type=1326 audit(356.059:14911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29206 comm="syz.4.10051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d857debe9 code=0x7ffc0000
[  362.494488][   T29] audit: type=1326 audit(356.059:14912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29206 comm="syz.4.10051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6d857debe9 code=0x7ffc0000
[  362.517636][   T29] audit: type=1326 audit(356.059:14913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29206 comm="syz.4.10051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d857debe9 code=0x7ffc0000
[  362.540797][   T29] audit: type=1326 audit(356.059:14914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29206 comm="syz.4.10051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d857debe9 code=0x7ffc0000
[  362.564281][   T29] audit: type=1326 audit(356.059:14915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29206 comm="syz.4.10051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6d857debe9 code=0x7ffc0000
[  362.587340][   T29] audit: type=1326 audit(356.059:14916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29206 comm="syz.4.10051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d857debe9 code=0x7ffc0000
[  362.610459][   T29] audit: type=1326 audit(356.059:14917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29206 comm="syz.4.10051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d857debe9 code=0x7ffc0000
[  362.633509][   T29] audit: type=1326 audit(356.059:14918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29206 comm="syz.4.10051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f6d857debe9 code=0x7ffc0000
[  362.656634][   T29] audit: type=1326 audit(356.059:14919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29206 comm="syz.4.10051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6d857dec23 code=0x7ffc0000
[  362.711822][T29220] uprobe: syz.1.10053:29220 failed to unregister, leaking uprobe
[  363.510957][T29279] bridge0: port 2(batadv3) entered blocking state
[  363.517469][T29279] bridge0: port 2(batadv3) entered disabled state
[  363.524431][T29279] batadv3: entered allmulticast mode
[  363.530994][T29279] batadv3: entered promiscuous mode
[  363.709594][T29290] loop7: detected capacity change from 0 to 512
[  363.768018][T29290] loop7: detected capacity change from 0 to 8192
[  363.775123][T29290] vfat: Unknown parameter '0177777777777777777777700000000000000000000000'
[  363.969630][ T4657] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  363.989097][ T4657] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  364.020217][ T3524] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  364.034362][ T3524] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  364.047881][T29309] netlink: 'syz.2.10091': attribute type 3 has an invalid length.
[  364.052165][ T4657] batman_adv: batadv3: No IGMP Querier present - multicast optimizations disabled
[  364.065142][ T4657] batman_adv: batadv3: No MLD Querier present - multicast optimizations disabled
[  364.189905][T29320] __nla_validate_parse: 15 callbacks suppressed
[  364.189920][T29320] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10096'.
[  364.244119][T29322] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10097'.
[  364.263593][T29322] vlan2: entered allmulticast mode
[  364.332008][T29326] bridge0: entered allmulticast mode
[  364.516054][T29348] netlink: 'syz.4.10108': attribute type 39 has an invalid length.
[  364.745399][T29355] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  364.764646][T29357] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10121'.
[  364.812438][T29355] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  364.877468][T29355] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  364.963708][T29355] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  365.013337][ T3570] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  365.035540][ T3570] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  365.062155][ T3570] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  365.077222][ T3570] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  365.088408][T29361] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10123'.
[  365.176999][T29366] loop7: detected capacity change from 0 to 512
[  365.195096][T29366] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended
[  365.221616][T29366] EXT4-fs (loop7): orphan cleanup on readonly fs
[  365.243450][T29366] EXT4-fs error (device loop7): ext4_ext_check_inode:523: inode #3: comm syz.7.10114: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0)
[  365.298391][T29366] EXT4-fs error (device loop7): ext4_quota_enable:7127: comm syz.7.10114: Bad quota inode: 3, type: 0
[  365.334507][T29366] EXT4-fs warning (device loop7): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  365.349317][T29366] EXT4-fs (loop7): Cannot turn on quotas: error -117
[  365.374415][T29366] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  365.418821][T29366] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended
[  365.428724][T29366] EXT4-fs warning (device loop7): ext4_multi_mount_protect:292: Invalid MMP block in superblock
[  365.472201][T20556] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  365.665231][T29402] net_ratelimit: 26 callbacks suppressed
[  365.665248][T29402] bond_slave_1: mtu less than device minimum
[  366.780178][T29433] loop7: detected capacity change from 0 to 1024
[  366.790852][T29433] EXT4-fs: Ignoring removed orlov option
[  366.802149][T29433] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  366.880459][T29446] netlink: 5 bytes leftover after parsing attributes in process `syz.1.10147'.
[  366.890165][T29446] 0ªX¹¦D: renamed from 
30ªî{X¹¦
[  366.898681][T29446] 0ªX¹¦D: entered allmulticast mode
[  366.905729][T29446] A link change request failed with some changes committed already. Interface 
30ªX¹¦D may have been left with an inconsistent configuration, please check.
[  367.111994][T20556] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  367.240104][T29465] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10156'.
[  367.262084][T29465] 8021q: adding VLAN 0 to HW filter on device bond15
[  367.279026][T29465] vlan0: entered allmulticast mode
[  367.284235][T29465] bond15: entered allmulticast mode
[  367.371443][T29475] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  367.393254][T29477] loop7: detected capacity change from 0 to 2048
[  367.412573][T29477] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  367.426645][T29475] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  367.463749][T20556] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  367.505963][T29485] netlink: 'syz.7.10162': attribute type 10 has an invalid length.
[  367.520634][T29475] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  367.618714][T29475] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  367.692474][   T41] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  367.723472][   T41] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  367.732252][   T41] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  367.750599][   T41] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  368.057552][T29517] netlink: 5 bytes leftover after parsing attributes in process `syz.2.10176'.
[  368.116064][T29517] 0ªX¹¦D: renamed from gretap0 (while UP)
[  368.127312][T29517] 0ªX¹¦D: entered allmulticast mode
[  368.132989][T29517] A link change request failed with some changes committed already. Interface 
30ªX¹¦D may have been left with an inconsistent configuration, please check.
[  368.304659][T29528] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10179'.
[  368.320086][T29529] loop2: detected capacity change from 0 to 2048
[  368.335532][T29513] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10175'.
[  368.355641][T29529] Alternate GPT is invalid, using primary GPT.
[  368.361980][T29529]  loop2: p2 p3 p7
[  368.414797][   T29] kauditd_printk_skb: 1288 callbacks suppressed
[  368.414811][   T29] audit: type=1400 audit(361.578:16208): avc:  denied  { listen } for  pid=29534 comm="syz.2.10181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  368.444663][T29539] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10183'.
[  368.455332][T29539] x_tables: ip_tables: udp match: only valid for protocol 17
[  368.499492][T29535] bond1: entered promiscuous mode
[  368.504557][T29535] bond1: entered allmulticast mode
[  368.520895][T29535] 8021q: adding VLAN 0 to HW filter on device bond1
[  368.536048][T29535] bond1 (unregistering): Released all slaves
[  368.667461][T29551] vlan2: entered allmulticast mode
[  368.672744][T29551] geneve1: entered allmulticast mode
[  368.760231][T29554] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  368.829465][T29554] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  368.949445][T29554] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  368.976532][   T29] audit: type=1400 audit(362.095:16209): avc:  denied  { read } for  pid=29560 comm="syz.1.10192" laddr=::ffff:0.0.0.0 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  368.993238][T29559] loop7: detected capacity change from 0 to 1024
[  369.096681][T29559] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  369.218002][T29554] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  369.230193][T20556] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  369.291058][ T3571] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  369.309647][ T3571] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  369.497431][T29556] Set syz1 is full, maxelem 65536 reached
[  369.531250][ T1681] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  369.544564][ T1681] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  369.642357][   T29] audit: type=1400 audit(362.704:16210): avc:  denied  { create } for  pid=29572 comm="syz.4.10196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  369.697263][T28314] IPVS: starting estimator thread 0...
[  369.703395][T29578] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  369.714334][T29571] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  369.786453][T29578] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  369.805703][T29580] IPVS: using max 2736 ests per chain, 136800 per kthread
[  369.824434][T29593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  369.834323][T29578] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  369.836005][T29593] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  369.881341][   T29] audit: type=1326 audit(362.926:16211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29598 comm="syz.3.10206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f629aabebe9 code=0x7ffc0000
[  369.904551][   T29] audit: type=1326 audit(362.926:16212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29598 comm="syz.3.10206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f629aabebe9 code=0x7ffc0000
[  369.931746][   T29] audit: type=1326 audit(362.935:16213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29598 comm="syz.3.10206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f629aabebe9 code=0x7ffc0000
[  369.954902][   T29] audit: type=1326 audit(362.935:16214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29598 comm="syz.3.10206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f629aabebe9 code=0x7ffc0000
[  369.977986][   T29] audit: type=1326 audit(362.935:16215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29598 comm="syz.3.10206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f629aabebe9 code=0x7ffc0000
[  370.001193][   T29] audit: type=1326 audit(362.935:16216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29598 comm="syz.3.10206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f629aabebe9 code=0x7ffc0000
[  370.024280][   T29] audit: type=1326 audit(362.935:16217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29598 comm="syz.3.10206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f629aabebe9 code=0x7ffc0000
[  370.048889][T29578] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  370.255836][ T3512] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  370.277521][ T3512] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  370.286744][ T3512] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  370.298653][ T3512] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  370.479738][T29605] __nla_validate_parse: 4 callbacks suppressed
[  370.479752][T29605] netlink: 29 bytes leftover after parsing attributes in process `syz.4.10208'.
[  370.654022][T29617] netlink: 'syz.7.10212': attribute type 11 has an invalid length.
[  370.680956][T21634] IPVS: starting estimator thread 0...
[  370.681050][T29615] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  370.801649][T29620] IPVS: using max 2784 ests per chain, 139200 per kthread
[  370.815918][T29628] loop7: detected capacity change from 0 to 128
[  370.843858][T29631] bond16: entered promiscuous mode
[  370.849148][T29631] bond16: entered allmulticast mode
[  370.854732][T29631] 8021q: adding VLAN 0 to HW filter on device bond16
[  370.871778][T29631] bond16 (unregistering): Released all slaves
[  370.915420][T29633] 0ªX¹¦D: left allmulticast mode
[  370.971655][T29633] bridge0: port 2(bridge_slave_1) entered disabled state
[  370.978914][T29633] bridge0: port 1(bridge_slave_0) entered disabled state
[  371.102884][T29633] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  371.118608][T29633] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  371.180999][ T3523] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  371.189882][ T3523] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  371.204249][ T3523] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  371.215103][ T3523] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  371.653801][T29596] syz.1.10205 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[  371.664688][T29596] CPU: 1 UID: 0 PID: 29596 Comm: syz.1.10205 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(voluntary) 
[  371.664785][T29596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  371.664799][T29596] Call Trace:
[  371.664804][T29596]  <TASK>
[  371.664811][T29596]  __dump_stack+0x1d/0x30
[  371.664831][T29596]  dump_stack_lvl+0xe8/0x140
[  371.664850][T29596]  dump_stack+0x15/0x1b
[  371.664865][T29596]  dump_header+0x81/0x220
[  371.664971][T29596]  oom_kill_process+0x342/0x400
[  371.665003][T29596]  out_of_memory+0x979/0xb80
[  371.665035][T29596]  try_charge_memcg+0x5e6/0x9e0
[  371.665103][T29596]  charge_memcg+0x51/0xc0
[  371.665120][T29596]  mem_cgroup_swapin_charge_folio+0xcc/0x150
[  371.665141][T29596]  __read_swap_cache_async+0x1df/0x350
[  371.665174][T29596]  swap_cluster_readahead+0x277/0x3e0
[  371.665223][T29596]  swapin_readahead+0xde/0x6f0
[  371.665253][T29596]  ? __filemap_get_folio+0x4f7/0x6b0
[  371.665336][T29596]  ? __rcu_read_unlock+0x34/0x70
[  371.665357][T29596]  ? swap_cache_get_folio+0x77/0x200
[  371.665413][T29596]  do_swap_page+0x301/0x2430
[  371.665515][T29596]  ? css_rstat_updated+0xb7/0x240
[  371.665565][T29596]  ? __pfx_default_wake_function+0x10/0x10
[  371.665588][T29596]  handle_mm_fault+0x9a5/0x2c20
[  371.665629][T29596]  do_user_addr_fault+0x636/0x1090
[  371.665664][T29596]  exc_page_fault+0x62/0xa0
[  371.665683][T29596]  asm_exc_page_fault+0x26/0x30
[  371.665720][T29596] RIP: 0033:0x7f92b9c3d9fd
[  371.665735][T29596] Code: 44 8d 56 04 4c 8d 0d 22 46 35 00 89 f0 4c 8d 05 19 26 35 00 89 c2 81 e2 ff 1f 00 00 49 8b 0c d1 48 39 f1 74 28 48 85 c9 74 29 <45> 38 1c 10 75 23 83 c0 01 44 39 d0 75 dc 48 89 f0 25 ff 1f 00 00
[  371.665751][T29596] RSP: 002b:00007ffd66c8c298 EFLAGS: 00010286
[  371.665791][T29596] RAX: 00000000817d04ca RBX: 00007f92baad5720 RCX: ffffffff847104ca
[  371.665803][T29596] RDX: 00000000000004ca RSI: ffffffff817d04ca RDI: 0000000000000001
[  371.665816][T29596] RBP: ffffffff817d04ca R08: 00007f92b9f90000 R09: 00007f92b9f92000
[  371.665829][T29596] R10: 00000000817d04ce R11: 0000000000000001 R12: 0000000000000001
[  371.665912][T29596] R13: 00000000000001f9 R14: ffffffff817d022c R15: 0000000000006f25
[  371.665925][T29596]  ? try_to_shrink_lruvec+0x35c/0x950
[  371.665952][T29596]  ? try_to_shrink_lruvec+0x5fa/0x950
[  371.666041][T29596]  ? netlink_sendskb+0x12a/0x150
[  371.666068][T29596]  ? try_to_shrink_lruvec+0x5fa/0x950
[  371.666096][T29596]  </TASK>
[  371.666104][T29596] memory: usage 307200kB, limit 307200kB, failcnt 2232
[  371.903979][T29596] memory+swap: usage 375228kB, limit 9007199254740988kB, failcnt 0
[  371.911921][T29596] kmem: usage 299872kB, limit 9007199254740988kB, failcnt 0
[  371.919339][T29596] Memory cgroup stats for /syz1:
[  371.922361][T29596] cache 0
[  371.930252][T29596] rss 7503872
[  371.933521][T29596] shmem 0
[  371.936439][T29596] mapped_file 1183744
[  371.940588][T29596] dirty 0
[  371.943531][T29596] writeback 0
[  371.947183][T29596] workingset_refault_anon 6651
[  371.951951][T29596] workingset_refault_file 5292
[  371.956694][T29596] swap 69660672
[  371.960173][T29596] swapcached 0
[  371.963582][T29596] pgpgin 597206
[  371.967027][T29596] pgpgout 595374
[  371.970558][T29596] pgfault 576517
[  371.974108][T29596] pgmajfault 862
[  371.977635][T29596] inactive_anon 0
[  371.981245][T29596] active_anon 0
[  371.984729][T29596] inactive_file 7503872
[  371.988876][T29596] active_file 0
[  371.992315][T29596] unevictable 0
[  371.995833][T29596] hierarchical_memory_limit 314572800
[  372.001220][T29596] hierarchical_memsw_limit 9223372036854771712
[  372.007382][T29596] total_cache 0
[  372.010894][T29596] total_rss 7503872
[  372.014677][T29596] total_shmem 0
[  372.018123][T29596] total_mapped_file 1183744
[  372.022678][T29596] total_dirty 0
[  372.026131][T29596] total_writeback 0
[  372.029992][T29596] total_workingset_refault_anon 6651
[  372.035254][T29596] total_workingset_refault_file 5292
[  372.040553][T29596] total_swap 69660672
[  372.044511][T29596] total_swapcached 0
[  372.048741][T29596] total_pgpgin 597206
[  372.052705][T29596] total_pgpgout 595374
[  372.056753][T29596] total_pgfault 576517
[  372.060811][T29596] total_pgmajfault 862
[  372.064856][T29596] total_inactive_anon 0
[  372.068991][T29596] total_active_anon 0
[  372.072974][T29596] total_inactive_file 7503872
[  372.077627][T29596] total_active_file 0
[  372.081595][T29596] total_unevictable 0
[  372.085547][T29596] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.256,pid=4184,uid=0
[  372.100091][T29596] Memory cgroup out of memory: Killed process 4184 (syz.1.256) total-vm:95680kB, anon-rss:952kB, file-rss:20736kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000
[  372.225162][T29685] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  372.344393][T29685] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  372.397793][T29685] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  372.462246][T29685] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  372.536913][ T1681] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  372.559134][ T1681] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  372.569638][ T1681] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  372.583443][ T1681] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  372.804516][T29701] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  372.862814][T29703] vlan0: entered allmulticast mode
[  373.220967][T29729] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -32018, delta: 1
[  373.229713][T29729] ref_ctr increment failed for inode: 0x2aae offset: 0x4 ref_ctr_offset: 0x2 of mm: 0xffff88810005bf40
[  373.244342][ T3300] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[  373.255269][ T3300] CPU: 1 UID: 0 PID: 3300 Comm: syz-executor Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(voluntary) 
[  373.255300][ T3300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  373.255315][ T3300] Call Trace:
[  373.255322][ T3300]  <TASK>
[  373.255330][ T3300]  __dump_stack+0x1d/0x30
[  373.255349][ T3300]  dump_stack_lvl+0xe8/0x140
[  373.255367][ T3300]  dump_stack+0x15/0x1b
[  373.255414][ T3300]  dump_header+0x81/0x220
[  373.255444][ T3300]  oom_kill_process+0x342/0x400
[  373.255564][ T3300]  out_of_memory+0x979/0xb80
[  373.255595][ T3300]  try_charge_memcg+0x5e6/0x9e0
[  373.255635][ T3300]  charge_memcg+0x51/0xc0
[  373.255656][ T3300]  mem_cgroup_swapin_charge_folio+0xcc/0x150
[  373.255723][ T3300]  __read_swap_cache_async+0x1df/0x350
[  373.255762][ T3300]  swap_cluster_readahead+0x376/0x3e0
[  373.255825][ T3300]  swapin_readahead+0xde/0x6f0
[  373.255857][ T3300]  ? __filemap_get_folio+0x4f7/0x6b0
[  373.255946][ T3300]  ? swap_cache_get_folio+0x77/0x200
[  373.255977][ T3300]  do_swap_page+0x301/0x2430
[  373.256000][ T3300]  ? css_rstat_updated+0xb7/0x240
[  373.256083][ T3300]  ? __pfx_default_wake_function+0x10/0x10
[  373.256124][ T3300]  handle_mm_fault+0x9a5/0x2c20
[  373.256157][ T3300]  do_user_addr_fault+0x636/0x1090
[  373.256192][ T3300]  exc_page_fault+0x62/0xa0
[  373.256213][ T3300]  asm_exc_page_fault+0x26/0x30
[  373.256235][ T3300] RIP: 0033:0x7f92b9c55c27
[  373.256295][ T3300] Code: 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 78 fb e7 00 48 69 8c 24 90 00 00 00 e8 03 00 00 8b 78 08 <48> 8b 44 24 18 48 c1 ea 12 4c 8b 0d 89 fa e7 00 48 01 d1 39 7c 24
[  373.256312][ T3300] RSP: 002b:00007ffd66c8c5a0 EFLAGS: 00010202
[  373.256330][ T3300] RAX: 0000001b32c24000 RBX: 0000000000001306 RCX: 00000000000591c8
[  373.256345][ T3300] RDX: 000000000301a736 RSI: 00007ffd66c8c630 RDI: 000000000000000a
[  373.256357][ T3300] RBP: 00007ffd66c8c5dc R08: 000000000b77fe6f R09: 7fffffffffffffff
[  373.256414][ T3300] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388
[  373.256428][ T3300] R13: 00000000000927c0 R14: 0000000000058a6d R15: 00007ffd66c8c630
[  373.256450][ T3300]  </TASK>
[  373.256456][ T3300] memory: usage 307200kB, limit 307200kB, failcnt 2388
[  373.468229][ T3300] memory+swap: usage 375156kB, limit 9007199254740988kB, failcnt 0
[  373.476821][ T3300] kmem: usage 299868kB, limit 9007199254740988kB, failcnt 0
[  373.484201][ T3300] Memory cgroup stats for /syz1:
[  373.497459][ T3300] cache 4096
[  373.505666][ T3300] rss 7503872
[  373.508966][ T3300] shmem 0
[  373.511961][ T3300] mapped_file 1183744
[  373.515925][ T3300] dirty 0
[  373.518849][ T3300] writeback 0
[  373.522138][ T3300] workingset_refault_anon 6669
[  373.526887][ T3300] workingset_refault_file 5342
[  373.531639][ T3300] swap 69586944
[  373.535142][ T3300] swapcached 0
[  373.538512][ T3300] pgpgin 597274
[  373.541957][ T3300] pgpgout 595441
[  373.545499][ T3300] pgfault 576533
[  373.549028][ T3300] pgmajfault 879
[  373.552737][ T3300] inactive_anon 0
[  373.556375][ T3300] active_anon 0
[  373.559827][ T3300] inactive_file 7503872
[  373.564047][ T3300] active_file 4096
[  373.567830][ T3300] unevictable 0
[  373.571279][ T3300] hierarchical_memory_limit 314572800
[  373.576641][ T3300] hierarchical_memsw_limit 9223372036854771712
[  373.582782][ T3300] total_cache 4096
[  373.586518][ T3300] total_rss 7503872
[  373.590301][ T3300] total_shmem 0
[  373.593736][ T3300] total_mapped_file 1183744
[  373.598228][ T3300] total_dirty 0
[  373.601713][ T3300] total_writeback 0
[  373.605545][ T3300] total_workingset_refault_anon 6669
[  373.610836][ T3300] total_workingset_refault_file 5342
[  373.616101][ T3300] total_swap 69586944
[  373.620069][ T3300] total_swapcached 0
[  373.623940][ T3300] total_pgpgin 597274
[  373.627892][ T3300] total_pgpgout 595441
[  373.631945][ T3300] total_pgfault 576533
[  373.635983][ T3300] total_pgmajfault 879
[  373.640087][ T3300] total_inactive_anon 0
[  373.644226][ T3300] total_active_anon 0
[  373.648252][ T3300] total_inactive_file 7503872
[  373.653001][ T3300] total_active_file 4096
[  373.657228][ T3300] total_unevictable 0
[  373.661189][ T3300] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.10205,pid=29596,uid=0
[  373.675992][ T3300] Memory cgroup out of memory: Killed process 29596 (syz.1.10205) total-vm:95944kB, anon-rss:8248kB, file-rss:22180kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:0
[  374.318044][T29743] netlink: 'syz.4.10260': attribute type 1 has an invalid length.
[  374.339729][T29743] bond16: entered promiscuous mode
[  374.345303][T29743] 8021q: adding VLAN 0 to HW filter on device bond16
[  374.374082][T29743] 8021q: adding VLAN 0 to HW filter on device bond16
[  374.397949][T29743] bond16: (slave wireguard0): The slave device specified does not support setting the MAC address
[  374.408802][T29743] bond16: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  374.450014][T29743] bond16: (slave wireguard0): making interface the new active one
[  374.457932][T29743] wireguard0: entered promiscuous mode
[  374.467393][T29743] bond16: (slave wireguard0): Enslaving as an active interface with an up link
[  374.479073][T29746] bond14: (slave geneve3): Releasing active interface
[  374.502399][T29746] bond16: (slave wireguard0): Releasing backup interface
[  374.526359][T29746] wireguard0: left promiscuous mode
[  374.573031][ T3523] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  374.581498][ T3523] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  374.607754][ T3523] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  374.632418][ T3523] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  374.783792][T29759] wireguard0: entered promiscuous mode
[  374.789430][T29759] wireguard0: entered allmulticast mode
[  374.827386][T29764] bond1: entered promiscuous mode
[  374.832813][T29764] bond1: entered allmulticast mode
[  374.868641][T29764] 8021q: adding VLAN 0 to HW filter on device bond1
[  374.894396][T29764] bond1 (unregistering): Released all slaves
[  375.047526][   T29] kauditd_printk_skb: 315 callbacks suppressed
[  375.047539][   T29] audit: type=1400 audit(367.698:16533): avc:  denied  { relabelto } for  pid=29781 comm="syz.2.10273" name="file0" dev="tmpfs" ino=228 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0"
[  375.079933][   T29] audit: type=1400 audit(367.698:16534): avc:  denied  { associate } for  pid=29781 comm="syz.2.10273" name="file0" dev="tmpfs" ino=228 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0"
[  375.113132][T29784] netlink: 60 bytes leftover after parsing attributes in process `syz.3.10271'.
[  375.115687][   T29] audit: type=1400 audit(367.762:16535): avc:  denied  { setattr } for  pid=29781 comm="syz.2.10273" name="file0" dev="tmpfs" ino=228 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0"
[  375.148173][   T29] audit: type=1400 audit(367.762:16536): avc:  denied  { append } for  pid=29781 comm="syz.2.10273" path="/40/file0" dev="tmpfs" ino=228 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0"
[  375.269439][   T29] audit: type=1326 audit(367.864:16537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29789 comm="syz.7.10275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0664285ba7 code=0x7ffc0000
[  375.292734][   T29] audit: type=1326 audit(367.864:16538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29789 comm="syz.7.10275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f066422add9 code=0x7ffc0000
[  375.316040][   T29] audit: type=1326 audit(367.864:16539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29789 comm="syz.7.10275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0664285ba7 code=0x7ffc0000
[  375.339100][   T29] audit: type=1326 audit(367.864:16540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29789 comm="syz.7.10275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f066422add9 code=0x7ffc0000
[  375.362323][   T29] audit: type=1326 audit(367.864:16541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29789 comm="syz.7.10275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f066428ebe9 code=0x7ffc0000
[  375.385459][   T29] audit: type=1326 audit(367.864:16542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29789 comm="syz.7.10275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f066428ebe9 code=0x7ffc0000
[  375.679570][T29813] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10286'.
[  375.703218][T29810] loop2: detected capacity change from 0 to 8192
[  375.757766][T29818] vlan1: entered allmulticast mode
[  375.762967][T29818] dummy0: entered allmulticast mode
[  375.915127][T29835] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10297'.
[  376.027848][T29850] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10304'.
[  376.044118][T29850] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10304'.
[  376.139200][T29861] netlink: 'syz.3.10308': attribute type 1 has an invalid length.
[  376.156619][T29861] 8021q: adding VLAN 0 to HW filter on device bond8
[  376.186071][T29861] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10308'.
[  376.197090][T29861] bond8 (unregistering): Released all slaves
[  376.377274][T29883] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10315'.
[  377.289454][T29952] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10345'.
[  377.718068][T29966] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10350'.
[  377.731268][T29966] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10350'.
[  378.146517][T29975] macsec0: entered promiscuous mode
[  378.151958][T29975] macsec0: entered allmulticast mode
[  378.157344][T29975] veth1_macvtap: entered allmulticast mode
[  378.282935][T29983] loop2: detected capacity change from 0 to 512
[  378.291832][T29983] EXT4-fs: Ignoring removed nobh option
[  378.330477][T29983] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.10358: corrupted inode contents
[  378.368675][T29983] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #3: comm syz.2.10358: mark_inode_dirty error
[  378.428167][T29983] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.10358: corrupted inode contents
[  378.444027][T29983] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.10358: mark_inode_dirty error
[  378.460433][T29983] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.10358: Failed to acquire dquot type 0
[  378.500297][T29983] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.10358: corrupted inode contents
[  378.516817][T29983] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #16: comm syz.2.10358: mark_inode_dirty error
[  378.540943][T29983] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.10358: corrupted inode contents
[  378.555901][T29983] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.10358: mark_inode_dirty error
[  378.597147][T29983] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.10358: corrupted inode contents
[  378.637534][T29983] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem
[  378.650185][T29983] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.10358: corrupted inode contents
[  378.667596][T29983] EXT4-fs error (device loop2): ext4_truncate:4666: inode #16: comm syz.2.10358: mark_inode_dirty error
[  378.682788][T29983] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem
[  378.703782][T29983] EXT4-fs (loop2): 1 truncate cleaned up
[  378.712964][T29983] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  378.804701][T30009] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  378.816011][T28757] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  378.879815][T30026] loop7: detected capacity change from 0 to 128
[  378.890939][T30011] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10368'.
[  379.051098][T30042] vlan2: entered allmulticast mode
[  379.064002][T30042] dummy0: entered allmulticast mode
[  379.387237][T30061] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  379.406092][T30061] D: renamed from syzkaller0
[  379.417821][T30061] tipc: Disabling bearer <eth:syzkaller0>
[  380.953901][T30100] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  381.516205][T30096] loop7: detected capacity change from 0 to 512
[  381.532401][T30096] EXT4-fs: Ignoring removed nobh option
[  381.553960][T30096] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #3: comm syz.7.10400: corrupted inode contents
[  381.575233][T30096] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #3: comm syz.7.10400: mark_inode_dirty error
[  381.589479][T30096] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #3: comm syz.7.10400: corrupted inode contents
[  381.601825][T30096] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #3: comm syz.7.10400: mark_inode_dirty error
[  381.631925][T30096] __quota_error: 241 callbacks suppressed
[  381.631941][T30096] Quota error (device loop7): write_blk: dquota write failed
[  381.661411][T30096] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota
[  381.682808][T30096] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.10400: Failed to acquire dquot type 0
[  381.709436][T30096] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.10400: corrupted inode contents
[  381.741027][T30096] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #16: comm syz.7.10400: mark_inode_dirty error
[  381.768260][T30096] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.10400: corrupted inode contents
[  381.795919][T30096] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #16: comm syz.7.10400: mark_inode_dirty error
[  381.835923][T30096] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.10400: corrupted inode contents
[  381.865967][T30096] EXT4-fs error (device loop7) in ext4_orphan_del:305: Corrupt filesystem
[  381.880754][T30126] wireguard1: entered promiscuous mode
[  381.886417][T30126] wireguard1: entered allmulticast mode
[  381.903327][T30096] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.10400: corrupted inode contents
[  381.941539][T30096] EXT4-fs error (device loop7): ext4_truncate:4666: inode #16: comm syz.7.10400: mark_inode_dirty error
[  381.975067][T30096] EXT4-fs error (device loop7) in ext4_process_orphan:347: Corrupt filesystem
[  381.997381][T30096] EXT4-fs (loop7): 1 truncate cleaned up
[  382.010675][T30096] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  382.071044][   T29] audit: type=1326 audit(374.186:16782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30130 comm="syz.1.10413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92b9d7ebe9 code=0x7ffc0000
[  382.131387][   T29] audit: type=1326 audit(374.205:16783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30130 comm="syz.1.10413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f92b9d7ebe9 code=0x7ffc0000
[  382.154543][   T29] audit: type=1326 audit(374.214:16784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30130 comm="syz.1.10413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92b9d7ebe9 code=0x7ffc0000
[  382.177878][   T29] audit: type=1326 audit(374.214:16785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30130 comm="syz.1.10413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92b9d7ebe9 code=0x7ffc0000
[  382.200917][   T29] audit: type=1326 audit(374.214:16786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30130 comm="syz.1.10413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f92b9d7ebe9 code=0x7ffc0000
[  382.223967][   T29] audit: type=1326 audit(374.214:16787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30130 comm="syz.1.10413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92b9d7ebe9 code=0x7ffc0000
[  382.247092][   T29] audit: type=1326 audit(374.214:16788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30130 comm="syz.1.10413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92b9d7ebe9 code=0x7ffc0000
[  382.270156][   T29] audit: type=1326 audit(374.214:16789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30130 comm="syz.1.10413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f92b9d7ebe9 code=0x7ffc0000
[  382.372012][T30141] bond_slave_1: entered promiscuous mode
[  382.381357][T30141] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10417'.
[  382.394688][T30141] bond_slave_1 (unregistering): left promiscuous mode
[  382.768172][T30094] syz.7.10400 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[  382.779279][T30094] CPU: 0 UID: 0 PID: 30094 Comm: syz.7.10400 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(voluntary) 
[  382.779307][T30094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  382.779342][T30094] Call Trace:
[  382.779348][T30094]  <TASK>
[  382.779356][T30094]  __dump_stack+0x1d/0x30
[  382.779381][T30094]  dump_stack_lvl+0xe8/0x140
[  382.779404][T30094]  dump_stack+0x15/0x1b
[  382.779423][T30094]  dump_header+0x81/0x220
[  382.779492][T30094]  oom_kill_process+0x342/0x400
[  382.779542][T30094]  out_of_memory+0x979/0xb80
[  382.779659][T30094]  try_charge_memcg+0x5e6/0x9e0
[  382.779690][T30094]  charge_memcg+0x51/0xc0
[  382.779707][T30094]  mem_cgroup_swapin_charge_folio+0xcc/0x150
[  382.779793][T30094]  __read_swap_cache_async+0x1df/0x350
[  382.779880][T30094]  swap_cluster_readahead+0x277/0x3e0
[  382.779946][T30094]  swapin_readahead+0xde/0x6f0
[  382.779978][T30094]  ? __filemap_get_folio+0x4f7/0x6b0
[  382.780017][T30094]  ? __rcu_read_unlock+0x34/0x70
[  382.780048][T30094]  ? swap_cache_get_folio+0x77/0x200
[  382.780080][T30094]  do_swap_page+0x301/0x2430
[  382.780104][T30094]  ? css_rstat_updated+0xb7/0x240
[  382.780285][T30094]  ? __pfx_default_wake_function+0x10/0x10
[  382.780374][T30094]  handle_mm_fault+0x9a5/0x2c20
[  382.780417][T30094]  do_user_addr_fault+0x636/0x1090
[  382.780530][T30094]  exc_page_fault+0x62/0xa0
[  382.780553][T30094]  asm_exc_page_fault+0x26/0x30
[  382.780576][T30094] RIP: 0033:0x7f066414d9fd
[  382.780593][T30094] Code: 44 8d 56 04 4c 8d 0d 22 46 35 00 89 f0 4c 8d 05 19 26 35 00 89 c2 81 e2 ff 1f 00 00 49 8b 0c d1 48 39 f1 74 28 48 85 c9 74 29 <45> 38 1c 10 75 23 83 c0 01 44 39 d0 75 dc 48 89 f0 25 ff 1f 00 00
[  382.780613][T30094] RSP: 002b:00007ffff0d2d408 EFLAGS: 00010286
[  382.780631][T30094] RAX: 00000000844a1e30 RBX: 00007f0664fe5720 RCX: ffffffff81e5de30
[  382.780723][T30094] RDX: 0000000000001e30 RSI: ffffffff844a1e30 RDI: 0000000000000001
[  382.780737][T30094] RBP: ffffffff844a1e30 R08: 00007f06644a0000 R09: 00007f06644a2000
[  382.780751][T30094] R10: 00000000844a1e34 R11: 0000000000000001 R12: 0000000000000001
[  382.780765][T30094] R13: 0000000000000018 R14: ffffffff844a1f13 R15: 0000000000000018
[  382.780780][T30094]  ? ____sys_sendmsg+0x313/0x4e0
[  382.780813][T30094]  ? ____sys_sendmsg+0x230/0x4e0
[  382.780896][T30094]  ? dd_has_work+0x130/0x270
[  382.780921][T30094]  ? ____sys_sendmsg+0x230/0x4e0
[  382.780960][T30094]  </TASK>
[  382.780967][T30094] memory: usage 307200kB, limit 307200kB, failcnt 2466
[  383.016392][T30094] memory+swap: usage 308020kB, limit 9007199254740988kB, failcnt 0
[  383.024297][T30094] kmem: usage 300620kB, limit 9007199254740988kB, failcnt 0
[  383.031556][T30094] Memory cgroup stats for /syz7:
[  383.031782][T30094] cache 36864
[  383.040061][T30094] rss 6672384
[  383.043372][T30094] shmem 0
[  383.046307][T30094] mapped_file 0
[  383.049750][T30094] dirty 0
[  383.052659][T30094] writeback 0
[  383.055942][T30094] workingset_refault_anon 1138
[  383.060736][T30094] workingset_refault_file 2
[  383.065209][T30094] swap 839680
[  383.068489][T30094] swapcached 12288
[  383.072190][T30094] pgpgin 173806
[  383.075646][T30094] pgpgout 172161
[  383.079188][T30094] pgfault 200789
[  383.082730][T30094] pgmajfault 210
[  383.086248][T30094] inactive_anon 12288
[  383.090261][T30094] active_anon 4096
[  383.093959][T30094] inactive_file 6709248
[  383.098100][T30094] active_file 12288
[  383.101894][T30094] unevictable 0
[  383.105404][T30094] hierarchical_memory_limit 314572800
[  383.110767][T30094] hierarchical_memsw_limit 9223372036854771712
[  383.116890][T30094] total_cache 36864
[  383.120718][T30094] total_rss 6672384
[  383.124508][T30094] total_shmem 0
[  383.127953][T30094] total_mapped_file 0
[  383.132006][T30094] total_dirty 0
[  383.135435][T30094] total_writeback 0
[  383.139282][T30094] total_workingset_refault_anon 1138
[  383.144550][T30094] total_workingset_refault_file 2
[  383.149542][T30094] total_swap 839680
[  383.153333][T30094] total_swapcached 12288
[  383.157578][T30094] total_pgpgin 173806
[  383.161527][T30094] total_pgpgout 172161
[  383.165585][T30094] total_pgfault 200789
[  383.169638][T30094] total_pgmajfault 210
[  383.173705][T30094] total_inactive_anon 12288
[  383.178201][T30094] total_active_anon 4096
[  383.182432][T30094] total_inactive_file 6709248
[  383.187210][T30094] total_active_file 12288
[  383.191517][T30094] total_unevictable 0
[  383.195468][T30094] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.10400,pid=30094,uid=0
[  383.210241][T30094] Memory cgroup out of memory: Killed process 30094 (syz.7.10400) total-vm:95944kB, anon-rss:7604kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000
[  383.973012][T30165] vlan2: entered allmulticast mode
[  384.117533][T30171] loop2: detected capacity change from 0 to 512
[  384.144550][T30171] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  384.153716][T30171] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[  384.188527][T30171] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended
[  384.204109][T30171] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  384.212170][T30171] System zones: 0-2, 18-18, 34-35
[  384.222915][T30171] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  384.317413][T20556] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  384.327359][T28757] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  384.553362][T30196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  384.583177][T30196] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  384.875831][T30209] netlink: 'syz.1.10441': attribute type 1 has an invalid length.
[  384.913304][T30209] bond10: entered promiscuous mode
[  384.918661][T30209] 8021q: adding VLAN 0 to HW filter on device bond10
[  384.955903][T30209] 8021q: adding VLAN 0 to HW filter on device bond10
[  384.990728][T30209] bond10: (slave wireguard0): The slave device specified does not support setting the MAC address
[  385.001457][T30209] bond10: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  385.067177][T30209] bond10: (slave wireguard0): making interface the new active one
[  385.075067][T30209] wireguard0: entered promiscuous mode
[  385.106995][T30209] bond10: (slave wireguard0): Enslaving as an active interface with an up link
[  385.140129][T30214] bond8: (slave gretap0): Releasing active interface
[  385.159155][T30214] gretap0: left allmulticast mode
[  385.176008][T30214] bond9: (slave geneve2): Releasing active interface
[  385.201910][T30214] vlan0: left promiscuous mode
[  385.206695][T30214] bridge_slave_0: left promiscuous mode
[  385.212705][T30214] bridge0: port 1(vlan0) entered disabled state
[  385.227115][T30214] batadv3: left allmulticast mode
[  385.232155][T30214] batadv3: left promiscuous mode
[  385.237342][T30214] bridge0: port 2(batadv3) entered disabled state
[  385.245731][T30214] bond10: (slave wireguard0): Releasing backup interface
[  385.254717][T30214] wireguard0: left promiscuous mode
[  385.850980][T30236] syzkaller0: entered allmulticast mode
[  385.872757][T30236] syzkaller0: entered promiscuous mode
[  385.916080][T30236] syzkaller0 (unregistering): left allmulticast mode
[  385.922833][T30236] syzkaller0 (unregistering): left promiscuous mode
[  386.025071][T30242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  386.033475][T30242] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  386.271040][T30255] loop7: detected capacity change from 0 to 512
[  386.293971][T30255] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102]
[  386.302074][T30255] System zones: 1-12
[  386.326257][T30255] EXT4-fs error (device loop7): ext4_xattr_inode_iget:442: comm syz.7.10454: error while reading EA inode 32 err=-116
[  386.362435][T30255] EXT4-fs (loop7): Remounting filesystem read-only
[  386.369008][T30255] EXT4-fs warning (device loop7): ext4_evict_inode:257: couldn't mark inode dirty (err -30)
[  386.424874][T30255] EXT4-fs (loop7): 1 orphan inode deleted
[  386.442101][T30255] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  386.455194][T30239] Set syz1 is full, maxelem 65536 reached
[  386.571941][T30263] dvmrp1: entered allmulticast mode
[  386.657089][T30268] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10462'.
[  387.053263][   T29] kauditd_printk_skb: 117 callbacks suppressed
[  387.053279][   T29] audit: type=1326 audit(378.774:16907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30288 comm="syz.4.10473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d857debe9 code=0x7ffc0000
[  387.126864][   T29] audit: type=1326 audit(378.838:16908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30288 comm="syz.4.10473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7f6d857debe9 code=0x7ffc0000
[  387.150199][   T29] audit: type=1326 audit(378.838:16909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30288 comm="syz.4.10473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d857debe9 code=0x7ffc0000
[  387.173430][   T29] audit: type=1326 audit(378.838:16910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30288 comm="syz.4.10473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d857debe9 code=0x7ffc0000
[  387.211343][T20556] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  387.278517][T30293] netlink: 'syz.2.10474': attribute type 13 has an invalid length.
[  387.314978][T30293] 0ªX¹¦D: refused to change device tx_queue_len
[  387.328568][T30293] A link change request failed with some changes committed already. Interface 
30ªX¹¦D may have been left with an inconsistent configuration, please check.
[  387.478973][T30303] syzkaller0: entered promiscuous mode
[  387.484531][T30303] syzkaller0: entered allmulticast mode
[  387.576496][T30310] netlink: 'syz.3.10481': attribute type 1 has an invalid length.
[  387.623910][T30310] bond8: entered promiscuous mode
[  387.629212][T30310] 8021q: adding VLAN 0 to HW filter on device bond8
[  387.670304][T30312] 8021q: adding VLAN 0 to HW filter on device bond8
[  387.677884][T30312] bond8: (slave wireguard0): The slave device specified does not support setting the MAC address
[  387.688524][T30312] bond8: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  387.697176][   T29] audit: type=1400 audit(379.374:16911): avc:  denied  { listen } for  pid=30315 comm="syz.2.10482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  387.719149][T30312] bond8: (slave wireguard0): making interface the new active one
[  387.726938][T30312] wireguard0: entered promiscuous mode
[  387.736978][T30312] bond8: (slave wireguard0): Enslaving as an active interface with an up link
[  387.767307][T30310] syz_tun: left allmulticast mode
[  387.772511][T30310] syz_tun: left promiscuous mode
[  387.777556][T30310] bridge0: port 1(syz_tun) entered disabled state
[  387.794738][T30310] bond7: (slave batadv0): Releasing active interface
[  387.804646][T30310] bond8: (slave wireguard0): Releasing backup interface
[  387.811712][T30310] wireguard0: left promiscuous mode
[  388.231157][   T29] audit: type=1326 audit(379.863:16912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30326 comm="syz.3.10486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f629aabebe9 code=0x7ffc0000
[  388.261990][   T29] audit: type=1326 audit(379.891:16913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30326 comm="syz.3.10486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f629aabebe9 code=0x7ffc0000
[  388.285110][   T29] audit: type=1326 audit(379.891:16914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30326 comm="syz.3.10486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f629aabebe9 code=0x7ffc0000
[  388.377519][T30331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  388.407703][T30331] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  388.740399][   T29] audit: type=1326 audit(380.324:16915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30338 comm="syz.3.10501" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f629aabebe9 code=0x0
[  388.800580][T30325] Set syz1 is full, maxelem 65536 reached
[  388.860538][T30348] dvmrp1: entered allmulticast mode
[  389.662826][T30351] netlink: 'syz.7.10494': attribute type 1 has an invalid length.
[  389.694596][T30351] bond4: entered promiscuous mode
[  389.702387][T30351] 8021q: adding VLAN 0 to HW filter on device bond4
[  389.720000][T30351] 8021q: adding VLAN 0 to HW filter on device bond4
[  389.727169][T30351] bond4: (slave wireguard0): The slave device specified does not support setting the MAC address
[  389.737739][T30351] bond4: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  389.749986][T30351] bond4: (slave wireguard0): making interface the new active one
[  389.757763][T30351] wireguard0: entered promiscuous mode
[  389.765761][T30351] bond4: (slave wireguard0): Enslaving as an active interface with an up link
[  389.797721][T30366] bond0: (slave gretap1): Releasing active interface
[  389.805109][T30366] gretap1: left allmulticast mode
[  389.810054][   T29] audit: type=1400 audit(381.321:16916): avc:  denied  { accept } for  pid=30370 comm="syz.2.10500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  389.841165][T30366] bond1: (slave bridge4): Removing an active aggregator
[  389.851644][T30366] bond1: (slave bridge4): Releasing backup interface
[  389.859204][T30366] bridge4: left promiscuous mode
[  389.864348][T30366] bridge4: left allmulticast mode
[  389.889263][T30366] bond3: (slave geneve2): Releasing active interface
[  389.899708][T30366] bond4: (slave wireguard0): Releasing backup interface
[  389.906938][T30366] wireguard0: left promiscuous mode
[  389.952843][T30378] netlink: 'syz.7.10503': attribute type 1 has an invalid length.
[  389.971624][T30378] bond5: entered promiscuous mode
[  389.976964][T30378] 8021q: adding VLAN 0 to HW filter on device bond5
[  389.994071][T30378] 8021q: adding VLAN 0 to HW filter on device bond5
[  390.001100][T30378] bond5: (slave wireguard1): The slave device specified does not support setting the MAC address
[  390.011634][T30378] bond5: (slave wireguard1): Setting fail_over_mac to active for active-backup mode
[  390.023107][T30378] bond5: (slave wireguard1): making interface the new active one
[  390.030828][T30378] wireguard1: entered promiscuous mode
[  390.038711][T30378] bond5: (slave wireguard1): Enslaving as an active interface with an up link
[  390.046296][T30381] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  390.054745][T30381] IPv6: NLM_F_CREATE should be set when creating new route
[  390.061920][T30381] IPv6: NLM_F_CREATE should be set when creating new route
[  390.069341][T30381] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  390.078899][T30381] bond5: (slave wireguard2): The slave device specified does not support setting the MAC address
[  390.091746][T30381] bond5: (slave wireguard2): Enslaving as a backup interface with an up link
[  390.625091][T30391] geneve4: entered promiscuous mode
[  390.630343][T30391] geneve4: entered allmulticast mode
[  390.639721][ T3545] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  390.648063][ T3545] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  390.660143][ T3545] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  390.668890][ T3545] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  390.691301][T30394] vlan0: entered allmulticast mode
[  391.331254][T30423] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10517'.
[  392.484006][   T29] kauditd_printk_skb: 22 callbacks suppressed
[  392.484021][   T29] audit: type=1326 audit(383.795:16939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30461 comm="syz.4.10533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d857debe9 code=0x7ffc0000
[  392.521258][   T29] audit: type=1326 audit(383.823:16940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30461 comm="syz.4.10533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d857debe9 code=0x7ffc0000
[  392.587622][   T29] audit: type=1326 audit(383.887:16941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30461 comm="syz.4.10533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f6d857debe9 code=0x7ffc0000
[  392.618919][T30468] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10535'.
[  392.628955][   T29] audit: type=1326 audit(383.924:16942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30461 comm="syz.4.10533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6d857dec23 code=0x7ffc0000
[  392.651856][   T29] audit: type=1326 audit(383.924:16943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30461 comm="syz.4.10533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6d857dd69f code=0x7ffc0000
[  392.674860][   T29] audit: type=1326 audit(383.924:16944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30461 comm="syz.4.10533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f6d857dec77 code=0x7ffc0000
[  392.698005][   T29] audit: type=1326 audit(383.924:16945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30461 comm="syz.4.10533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6d857dd550 code=0x7ffc0000
[  392.721171][   T29] audit: type=1326 audit(383.924:16946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30461 comm="syz.4.10533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f6d857dd84a code=0x7ffc0000
[  392.744026][   T29] audit: type=1326 audit(383.924:16947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30461 comm="syz.4.10533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d857debe9 code=0x7ffc0000
[  392.767156][   T29] audit: type=1326 audit(383.924:16948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30461 comm="syz.4.10533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d857debe9 code=0x7ffc0000
[  393.311010][T30473] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10538'.
[  393.313971][T30475] loop2: detected capacity change from 0 to 512
[  393.327596][T30475] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  393.341564][T30475] EXT4-fs (loop2): 1 truncate cleaned up
[  393.348949][T30475] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  393.372314][T30481] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30481 comm=syz.4.10547
[  393.530774][T30486] netlink: 'syz.4.10541': attribute type 1 has an invalid length.
[  393.551214][T30486] bond17: entered promiscuous mode
[  393.556825][T30486] 8021q: adding VLAN 0 to HW filter on device bond17
[  393.599690][T30486] 8021q: adding VLAN 0 to HW filter on device bond17
[  393.676381][T30486] bond17: (slave wireguard1): The slave device specified does not support setting the MAC address
[  393.687065][T30486] bond17: (slave wireguard1): Setting fail_over_mac to active for active-backup mode
[  393.698824][T30498] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  393.706057][T30498] IPv6: NLM_F_CREATE should be set when creating new route
[  393.713250][T30498] IPv6: NLM_F_CREATE should be set when creating new route
[  393.722418][T30486] bond17: (slave wireguard1): making interface the new active one
[  393.730328][T30486] wireguard1: entered promiscuous mode
[  393.738783][T30486] bond17: (slave wireguard1): Enslaving as an active interface with an up link
[  393.748944][T30498] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  393.759524][T30498] bond17: (slave wireguard2): The slave device specified does not support setting the MAC address
[  393.783689][T30498] bond17: (slave wireguard2): Enslaving as a backup interface with an up link
[  394.032397][T30475] ==================================================================
[  394.040541][T30475] BUG: KCSAN: data-race in __filemap_remove_folio / folio_mapping
[  394.048371][T30475] 
[  394.050726][T30475] write to 0xffffea0004224118 of 8 bytes by task 30483 on cpu 0:
[  394.058441][T30475]  __filemap_remove_folio+0x1a5/0x2a0
[  394.063818][T30475]  folio_unmap_invalidate+0x1dd/0x360
[  394.069192][T30475]  invalidate_inode_pages2_range+0x27c/0x3d0
[  394.075178][T30475]  filemap_invalidate_pages+0x16d/0x1a0
[  394.080725][T30475]  kiocb_invalidate_pages+0x6e/0x80
[  394.085923][T30475]  __iomap_dio_rw+0x5d4/0x1250
[  394.090693][T30475]  iomap_dio_rw+0x40/0x90
[  394.095028][T30475]  ext4_file_write_iter+0xad9/0xf00
[  394.100229][T30475]  iter_file_splice_write+0x5f2/0x970
[  394.105594][T30475]  direct_splice_actor+0x153/0x2a0
[  394.110700][T30475]  splice_direct_to_actor+0x30f/0x680
[  394.116069][T30475]  do_splice_direct+0xda/0x150
[  394.120820][T30475]  do_sendfile+0x380/0x650
[  394.125235][T30475]  __x64_sys_sendfile64+0x105/0x150
[  394.130431][T30475]  x64_sys_call+0x2bb0/0x2ff0
[  394.135106][T30475]  do_syscall_64+0xd2/0x200
[  394.139603][T30475]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  394.145487][T30475] 
[  394.147798][T30475] read to 0xffffea0004224118 of 8 bytes by task 30475 on cpu 1:
[  394.155417][T30475]  folio_mapping+0xa1/0x120
[  394.159921][T30475]  folio_wait_writeback+0x43/0x140
[  394.165030][T30475]  file_write_and_wait_range+0x20b/0x2c0
[  394.170670][T30475]  generic_buffers_fsync_noflush+0x45/0x120
[  394.176561][T30475]  ext4_sync_file+0x1ab/0x690
[  394.181241][T30475]  vfs_fsync_range+0x10d/0x130
[  394.185996][T30475]  ext4_buffered_write_iter+0x34f/0x3c0
[  394.191547][T30475]  ext4_file_write_iter+0xdbf/0xf00
[  394.196751][T30475]  iter_file_splice_write+0x5f2/0x970
[  394.202109][T30475]  direct_splice_actor+0x153/0x2a0
[  394.207221][T30475]  splice_direct_to_actor+0x30f/0x680
[  394.212580][T30475]  do_splice_direct+0xda/0x150
[  394.217333][T30475]  do_sendfile+0x380/0x650
[  394.221745][T30475]  __x64_sys_sendfile64+0x105/0x150
[  394.226938][T30475]  x64_sys_call+0x2bb0/0x2ff0
[  394.231607][T30475]  do_syscall_64+0xd2/0x200
[  394.236105][T30475]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  394.241987][T30475] 
[  394.244303][T30475] value changed: 0xffff888119130f88 -> 0x0000000000000000
[  394.251395][T30475] 
[  394.253709][T30475] Reported by Kernel Concurrency Sanitizer on:
[  394.259841][T30475] CPU: 1 UID: 0 PID: 30475 Comm: syz.2.10537 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(voluntary) 
[  394.272155][T30475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  394.282198][T30475] ==================================================================
[  394.407498][T28757] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.