last executing test programs:

2m53.897800555s ago: executing program 32 (id=2370):
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SG_IO(r0, 0x2285, 0x0)
r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0xffffffff, 0xbfe00000}, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x300)

2m53.56023732s ago: executing program 33 (id=2382):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48284b70043dc6124d877142a48448b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d4023f210fa34b63a715a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f01000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb796ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab04000000ffe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890decace0200f404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef29cd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf0100483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6c354463d7d0917fc80e5009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab4000000000000000028df75cf43f8ecc8d37b126602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89fa516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f49198e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85eff010000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1099e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c391339878b699644c96bd6ea589765ed2a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac4741201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6d00000000000000000000008f6555f3b7d5021dfc8eb504f1e4fef716d60f0d50b03fc014fd3dff46f56750f0ba4f1b9f7de5c17e7d1f18522897edab8e9e76b667ec6b01908400f55e16f0cfbf026be5f5acc681053f697d62b3545aec4606e190216c22c1d8807b6c43f0f0a4b53619fe5c9412821c3816194a5e29cf12cc7a197b5bdafb096d2d7f6be483814c92ef29c3a21c169794c7de3b4c706f4de5f4b93c831944c7b66fa49f317aa22dbc211e19f031c4f8bee14ecd5eb061a052044adc4dd1b63a1500a9c0e09dbba23f2726a55975efb4519d864d984dcb3a1dcafa1124a6b004029a706478df3be2438d2e35e6ca674dc190143a0b6f7db3408c0c08011e5d8f54711a0bd410ab53a15b1596cb77d2b58df2d8d8"], &(0x7f0000000100)='GPL\x00'}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
r1 = msgget$private(0x0, 0x480)
msgsnd(r1, 0x0, 0x401, 0x0)
renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x5)

2m36.337154674s ago: executing program 34 (id=2426):
r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x7, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
bpf$MAP_CREATE(0x0, 0x0, 0x48)

2m34.34610774s ago: executing program 35 (id=2464):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0)
pipe2$9p(&(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='9p_protocol_dump\x00', r1}, 0x18)
mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}})

2m33.345966463s ago: executing program 36 (id=2485):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000007000000020000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100004}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
r2 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106)

2m30.227037718s ago: executing program 37 (id=2548):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x14}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x18)
mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0)

1m58.671935072s ago: executing program 38 (id=3426):
r0 = socket$inet6(0xa, 0x80002, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x97a3}, 0x18)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0)
setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x0)

1m54.54654071s ago: executing program 39 (id=4165):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10)
timer_create(0x3, 0x0, &(0x7f0000044000))
timer_settime(0x0, 0x1, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)

1m50.269212795s ago: executing program 40 (id=4338):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10)
r1 = gettid()
sched_getparam(r1, &(0x7f00000002c0))

1m43.548962235s ago: executing program 41 (id=4676):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f00000002c0)={[{@sysvgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}, {@usrjquota}, {@acl}, {@grpjquota}]}, 0xff, 0x23f, &(0x7f0000000540)="$eJzs3T1oLFUYBuB3Zne95t5FrtoI4g+IiAbCtRNsYqMQkBBEBBUiIjZKIsQEu8TKxkJrlVQ2QeyMlpIm2CiCVdQUsRE0WBgstFiZnURisuLPxh1xngdmZ2b3nPnOMPOe3WbYAK11Nclskk6S6SS9JMXpBnfWy9Xj3c2p3cVkMHjsh2LYrt6vnfS7kmQjyQNJdsoiL3STte2nDn7ae+Se11d7d7+7/eTURE/y2OHB/qNH78y/9sHc/WufffHdfJHZ9H93XhevGPFet0hu+jeK/UcU3aZHwF+x8Mr7X1a5vznJXcP891KmvnhvrFy308t9b/9R3ze///zWSY4VuHiDQa/6DtwYAK1TJumnKGeS1NtlOTNT/4b/qnO5fHF55eXp55dXl55reqYCLko/2X/4o0sfXjmT/287df6B/68q/48vbH1dbR91mh4NMBG31asq/9PPrN8b+YfWkX9oL/mH9pJ/aC/5h/aSf2gv+Yf2kn9oL/mH9pJ/aK/T+QcA2mVwqeknkIGmND3/AAAAAAAAAAAAAAAAAAAA521O7S6eLJOq+clbyeFDSbqj6neG/0ecXD98vfxjUTX7TVF3G8vTd4x5gDG91/DT1zd802z9T29vtv76UrLxapJr3e75+684vv/+uRv/5PPes2MW+JuKM/sPPjHZ+mf9stVs/bm95ONq/rk2av4pc8twPXr+6VfXb8z6L/085gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYmF8DAAD//xFQbUc=")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000), 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

1m41.640147858s ago: executing program 42 (id=4739):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x28)

1m39.080007988s ago: executing program 43 (id=4790):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
openat$tun(0xffffffffffffff9c, 0x0, 0x20702, 0x0)

1m37.483443197s ago: executing program 44 (id=4814):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r1}, 0x38)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000f0070000000900010073797a300000000080000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d3c00128014000180090001006c617374000000000400028010000180090001006c61737400000000140001800c000100636f756e746572000400028008000340000001"], 0xc8}, 0x1, 0x0, 0x0, 0x40000}, 0x20050800)

1m26.934228213s ago: executing program 1 (id=5237):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0)

1m26.885838685s ago: executing program 1 (id=5240):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d)
readv(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000a80)='./file0\x00', 0x2800810, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x3, 0x185, &(0x7f00000003c0)="$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")
r2 = open(&(0x7f0000000480)='./file2\x00', 0x4000, 0x90)
preadv2(r2, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0)

1m26.78821985s ago: executing program 1 (id=5241):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x1000000000000008}, 0x18)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0)

1m26.719586432s ago: executing program 1 (id=5244):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901)
move_mount(r0, &(0x7f00000001c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
chroot(&(0x7f0000000200)='./file0\x00')
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000600)='./file0/../file0/../file0/../file0\x00')

1m26.696724473s ago: executing program 1 (id=5246):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50)
r0 = socket$kcm(0xa, 0x5, 0x0)
r1 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)={r1})
r2 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r2})
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, &(0x7f0000000000)={r1})

1m26.480289323s ago: executing program 1 (id=5258):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)
write$binfmt_script(r0, &(0x7f0000000240), 0x3af4701e)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0)

1m26.479793573s ago: executing program 45 (id=5258):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)
write$binfmt_script(r0, &(0x7f0000000240), 0x3af4701e)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0)

1m20.251873752s ago: executing program 5 (id=5425):
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200))
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

1m19.216191217s ago: executing program 5 (id=5454):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0x4000, 0x8, 0xc1})
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00')
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005900)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e22}, 0x6e, 0x0, 0x0, 0x0, 0x88, 0x20044008}}], 0x1, 0x20004000)
syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000080045004bb0000000000011907864010101ac14142200004e20009c907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424dbcfd56f1373669caaa2f19935e6996c7097ffe4f3a4745a8f762b9649a3bfbc1f39cb307b3477f00000042d2643fcbb2"], 0x0)
preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000280)=""/196, 0xc4}], 0x1, 0x8, 0xffffffff)

1m17.345164408s ago: executing program 5 (id=5491):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18)
unshare(0x28020480)
r2 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2, 0x0)
mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0)

1m17.28881082s ago: executing program 5 (id=5496):
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x110)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x831018, 0x0)
mount$bind(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x212509d, 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='hugetlbfs\x00', 0x800010, 0x0)

1m17.247901312s ago: executing program 5 (id=5499):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)

1m17.070348519s ago: executing program 5 (id=5507):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex(&(0x7f000000cffc), 0x80, 0x0, 0x0, 0x0, 0x0)
prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000)
timer_settime(r1, 0x1, &(0x7f0000000300), &(0x7f0000000340))

1m17.041674861s ago: executing program 46 (id=5507):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex(&(0x7f000000cffc), 0x80, 0x0, 0x0, 0x0, 0x0)
prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000)
timer_settime(r1, 0x1, &(0x7f0000000300), &(0x7f0000000340))

50.42720718s ago: executing program 4 (id=6464):
r0 = creat(&(0x7f0000000140)='./file0\x00', 0x106)
close(r0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
shutdown(r1, 0x0)
recvmmsg(r1, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000001200), 0x9, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1])

50.42683321s ago: executing program 4 (id=6473):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f02, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
r1 = epoll_create(0x3ff)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)={0xa0000000, 0x1b54c8})
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000280)={0x2000000})

50.283925757s ago: executing program 4 (id=6466):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)

49.936258492s ago: executing program 4 (id=6469):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'syz_tun\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xfff3}}}, 0x24}}, 0x0)

49.776355279s ago: executing program 4 (id=6470):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='kfree\x00', r1}, 0x18)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)

49.681858193s ago: executing program 4 (id=6472):
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x318}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000003, 0x13, r0, 0x0)
syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)

34.179995863s ago: executing program 47 (id=6472):
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x318}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000003, 0x13, r0, 0x0)
syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)

27.05037184s ago: executing program 6 (id=6778):
perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x6, 0x40, 0x3, 0x0, 0x4000000000, 0xd4, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x100882, 0x7ff, 0x6, 0x3, 0xb, 0x3, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0))

27.031492602s ago: executing program 6 (id=6779):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x1d}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x11, 0x0, 0x2}}}}}}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3, 0x28, 0x0, 0x0, 0x8, 0x6, 0x0, @remote, @local}, {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x8000, 0x0, 0xfffc}}}}}}, 0x0)

27.003948543s ago: executing program 6 (id=6783):
r0 = open(&(0x7f0000000140)='./bus\x00', 0x143bc2, 0x1c0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000500)}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000005000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
fcntl$setlease(r0, 0x400, 0x1)
lsetxattr$security_selinux(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000200), &(0x7f0000000180)='system_u:object_r:systemd_systemctl_exec_t:s0\x00', 0x2e, 0x0)

26.958318575s ago: executing program 6 (id=6785):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x12c5008, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
pread64(r0, &(0x7f0000000200)=""/4098, 0x1002, 0xd37)

26.936901135s ago: executing program 6 (id=6786):
r0 = getpid()
process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r1}, 0x10)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

26.093810552s ago: executing program 6 (id=6811):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0x3e33, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r1}, 0x10)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x0)

26.093651902s ago: executing program 48 (id=6811):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0x3e33, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r1}, 0x10)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x0)

14.630462268s ago: executing program 8 (id=7211):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x401}, 0x11)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
timer_create(0x2, 0x0, &(0x7f0000000340))
timer_create(0x2, 0x0, &(0x7f0000bbdffc))
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x10000)

14.56780058s ago: executing program 8 (id=7214):
r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
write$selinux_access(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="73797374656d5f683a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56)
syz_mount_image$iso9660(&(0x7f0000000540), &(0x7f00000001c0)='./file1\x00', 0x14004, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYRES8=0x0, @ANYRES8=r0], 0x4, 0x70a, &(0x7f00000232c0)="$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")
bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="050000000600000008000000ae"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
chown(&(0x7f0000000040)='./file1\x00', 0x0, 0x0)

13.977601856s ago: executing program 8 (id=7216):
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030"], 0x15)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57)
r1 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00')
preadv(r1, &(0x7f0000001b80)=[{&(0x7f00000000c0)=""/92, 0x84}], 0x1, 0x62, 0xfd4c)

13.956048697s ago: executing program 8 (id=7218):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xab101a, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
umount2(&(0x7f0000000340)='./file0/file0\x00', 0x1)

13.8722729s ago: executing program 8 (id=7221):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1, 0x1, 0x4}})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000100))

13.866130651s ago: executing program 8 (id=7224):
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000c"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r0}, &(0x7f0000000300), &(0x7f0000000340)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000004c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffd}]})
sched_getparam(0x0, &(0x7f0000000180))

13.844189151s ago: executing program 49 (id=7224):
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000c"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r0}, &(0x7f0000000300), &(0x7f0000000340)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000004c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffd}]})
sched_getparam(0x0, &(0x7f0000000180))

1.764785983s ago: executing program 0 (id=7634):
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
execve(0x0, 0x0, 0x0)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
write$snapshot(r0, &(0x7f0000000100)='/', 0x1)
write$snapshot(r0, 0x0, 0x0)

1.734905525s ago: executing program 0 (id=7635):
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffd}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x68, 0x2c, 0xd27, 0x70bd2a, 0x8000002, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0x38, 0x2, [@TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x24, 0x1, 0x0, 0x0, {{0x8, 0x7, 0x4}, {{0x1, 0x0, 0x1, 0x1}, {0x4, 0x1, 0x1, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x2}, {0xffffffffffffffff, 0x1, 0x8}}}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x24008004}, 0x0)

1.654308068s ago: executing program 0 (id=7647):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
kexec_load(0x3, 0x1, &(0x7f0000000140)=[{0x0, 0x0, 0x116094000, 0x41000000}], 0x0)

963.903728ms ago: executing program 9 (id=7667):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf670000000000001507"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x8000002, 0x0, 0x0, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313b, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0xfffffffc}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180))

894.724321ms ago: executing program 9 (id=7669):
prctl$PR_SET_SECUREBITS(0x1c, 0x1d)
setuid(0xee01)
setresgid(0x0, 0xee00, 0x0)
r0 = semget$private(0x0, 0x4, 0x29b)
semop(r0, &(0x7f0000000180)=[{0x1, 0xfffd}], 0x1)
semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000240)={{0x2, 0xee00, 0x0, 0x0, 0x0, 0x18, 0xd49}, 0xfffffffffffffff8, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x1})
semtimedop(r0, &(0x7f0000000000)=[{0x3, 0x4, 0x1800}], 0x1, 0x0)

739.719678ms ago: executing program 0 (id=7676):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000440)='kmem_cache_free\x00', r0}, 0x18)
capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7})
setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
sendmmsg$inet(r1, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4000804)

714.712958ms ago: executing program 0 (id=7678):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xffd, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18)
r1 = socket(0x1e, 0x80004, 0x0)
r2 = socket(0x1e, 0x4, 0x0)
dup3(r2, r1, 0x0)

695.052279ms ago: executing program 0 (id=7679):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCMIWAIT(r2, 0x545c, 0x0)
ioctl$TIOCVHANGUP(r2, 0x5437, 0x8000000)

693.919499ms ago: executing program 3 (id=7680):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0x4, 0xa, 0x40}, 0x50)
close(0x3)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000080), &(0x7f00000001c0)=r2}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10)

681.27786ms ago: executing program 7 (id=7681):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r1, 0x0, 0x2}, 0x18)
r2 = syz_open_dev$sg(&(0x7f0000000740), 0x0, 0x18b203)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x5e, &(0x7f0000000240)=""/94}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0})

667.815201ms ago: executing program 3 (id=7682):
mkdir(&(0x7f0000000000)='./file0\x00', 0xe6)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10)
mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180), 0x400, 0x0)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'})

647.523572ms ago: executing program 7 (id=7683):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xc010}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp=r2}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x40}}, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

647.130442ms ago: executing program 7 (id=7684):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x3, 0x60, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x100}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00', r1, 0x0, 0x7}, 0x18)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r2, &(0x7f0000000080)="b1", 0xfffd, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x1000000, @loopback, 0xffffffff}, 0x1c)

646.919322ms ago: executing program 3 (id=7685):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x70)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2c, r3, 0x301, 0x70bd29, 0x25dfdbfc, {0x24}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0)

625.846923ms ago: executing program 3 (id=7686):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/mem_sleep', 0xa0502, 0x49)
io_setup(0x1, &(0x7f00000016c0)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x8, r2, 0x0, 0x0, 0x5}])

625.270333ms ago: executing program 7 (id=7687):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003000000000014000600ff"], 0x58}}, 0x0)

598.842083ms ago: executing program 7 (id=7688):
munmap(&(0x7f0000004000/0x2000)=nil, 0x2000)
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x18)
r3 = fcntl$dupfd(r0, 0x406, r0)
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})

585.455444ms ago: executing program 7 (id=7689):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
r3 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r4=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r4], 0x1c}}, 0x0)
close(r3)

551.807486ms ago: executing program 3 (id=7690):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
brk(0x200000ffc000)

551.265566ms ago: executing program 3 (id=7691):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x6}, 0x4, 0x5, 0xfff, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20010814)
close(r0)

333.462595ms ago: executing program 2 (id=7693):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18)
r2 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, <r3=>0x0}, &(0x7f00000000c0)=0xc)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)={0x28, 0x18, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @ipv4=@multicast2}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @uid=r3}]}]}, 0x28}}, 0x0)

321.699316ms ago: executing program 2 (id=7694):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0)
mbind(&(0x7f0000283000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x7, 0x0)
mbind(&(0x7f000058a000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x6, 0x3)
mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil)
mlock2(&(0x7f0000168000/0x2000)=nil, 0x2000, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0)

268.318538ms ago: executing program 2 (id=7695):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18)
r2 = syz_io_uring_setup(0x1104, &(0x7f00000004c0)={0x0, 0xfffffffd, 0x1000, 0xfffffffe, 0xcb}, &(0x7f00000003c0)=<r3=>0x0, &(0x7f0000000000)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1fc, 0x0, 0x1})
io_uring_enter(r2, 0x47fa, 0xfd5d, 0x200000000000000, 0x0, 0x0)

222.13513ms ago: executing program 2 (id=7696):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x5, 0x0, 0x0)
socket$unix(0x1, 0x1, 0x0)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000a40)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x10001}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug}, {@orlov}]}, 0x6, 0x605, &(0x7f0000000ac0)="$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")
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)

207.250951ms ago: executing program 2 (id=7697):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10)
r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c000080080003400000000214000000110001"], 0xb0}}, 0x40)
close_range(r1, 0xffffffffffffffff, 0x0)

148.326023ms ago: executing program 2 (id=7698):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12)
write(r1, &(0x7f0000000a00)="c7885a8f24f458bed72116", 0xb)
sendfile(r1, r0, 0x0, 0x3ffff)
sendfile(r1, r0, 0x0, 0x7ffff000)
syz_clone(0x4000, &(0x7f00000001c0)="b0c4dc345846be585bf5b5590398bdef9afdcc0aea", 0x15, &(0x7f0000000200), &(0x7f0000000280), &(0x7f0000000640)="309b418c2ff6ecdc2325525eb0f919ed1e740654d86989c6c6078bc1da5e22f1aba91544f7a3d49c85c63c4ecbc0126032a428edf3f02782f9be1f36d8f276bf565a2ae3422f772cb62ad7b776582306ae5c8544501f942375553298fbdf44ff5954bdb9599b50228be204d9fa3a366c83a7")

45.723717ms ago: executing program 9 (id=7699):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10)
r2 = getpgrp(0x0)
r3 = syz_pidfd_open(r2, 0x0)
fsetxattr$trusted_overlay_nlink(r3, &(0x7f00000018c0), 0x0, 0x0, 0x3)

31.164158ms ago: executing program 9 (id=7700):
munmap(&(0x7f0000004000/0x2000)=nil, 0x2000)
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x18)
r3 = fcntl$dupfd(r0, 0x406, r0)
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})

15.656299ms ago: executing program 9 (id=7701):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, 0x0, 0x8014)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="05000000070000000700000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

0s ago: executing program 9 (id=7702):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000040000000c"], 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0xe, 0x4, 0x8, 0x8}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x18)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)

kernel console output (not intermixed with test programs):

fc0000
[  181.670466][T24014] loop0: detected capacity change from 0 to 512
[  181.683393][T24014] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  181.709013][T24014] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  181.722596][T24024] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5333'.
[  181.732081][T24014] ext4 filesystem being mounted at /118/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  181.753433][T24024] team1: entered promiscuous mode
[  181.758469][T24024] team1: entered allmulticast mode
[  181.768136][T24024] 8021q: adding VLAN 0 to HW filter on device team1
[  181.829903][   T29] audit: type=1400 audit(1764035007.242:5701): avc:  denied  { watch watch_reads } for  pid=24060 comm="syz.8.5335" path="/98/file1" dev="tmpfs" ino=522 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=lnk_file permissive=1
[  181.874583][T21165] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  181.909558][T24067] loop0: detected capacity change from 0 to 512
[  181.940078][T24067] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.5337: inode has both inline data and extents flags
[  181.983354][T24067] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.5337: couldn't read orphan inode 15 (err -117)
[  182.000733][T24067] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  182.142159][T21165] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  182.533929][T24126] loop5: detected capacity change from 0 to 512
[  182.549470][T24126] EXT4-fs: Ignoring removed i_version option
[  182.555612][T24126] EXT4-fs: Ignoring removed bh option
[  182.583366][T24126] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  182.609802][T24126] ext4 filesystem being mounted at /97/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  182.671084][T20630] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  182.671201][T24142] loop2: detected capacity change from 0 to 1024
[  182.746131][T24142] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  182.759320][T24142] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  182.825373][T24153] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 8: comm syz.2.5365: lblock 8 mapped to illegal pblock 8 (length 4)
[  182.855729][T24155] netlink: 'syz.4.5368': attribute type 10 has an invalid length.
[  182.863728][T24153] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 4 with error 117
[  182.876139][T24153] EXT4-fs (loop2): This should not happen!! Data will be lost
[  182.876139][T24153] 
[  182.891901][T24155] team0: Failed to send port change of device netdevsim1 via netlink (err -105)
[  182.903886][T24155] team0: Failed to send options change via netlink (err -105)
[  182.911389][T24155] team0: Port device netdevsim1 added
[  182.940613][ T9971] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: comm kworker/u8:63: lblock 0 mapped to illegal pblock 0 (length 5)
[  182.955531][ T9971] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 5 with error 117
[  182.967821][ T9971] EXT4-fs (loop2): This should not happen!! Data will be lost
[  182.967821][ T9971] 
[  182.989333][T23426] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  183.152298][T24190] loop2: detected capacity change from 0 to 512
[  183.165341][T24190] FAT-fs (loop2): error, corrupted directory (invalid entries)
[  183.647644][T24240] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5400'.
[  183.760543][T24262] dummy0: entered promiscuous mode
[  183.783692][T24262] dummy0 (unregistering): left promiscuous mode
[  184.173422][T24336] dummy0: entered promiscuous mode
[  184.184528][T24336] dummy0 (unregistering): left promiscuous mode
[  184.318320][T24352] loop2: detected capacity change from 0 to 128
[  184.381889][T24359] loop4: detected capacity change from 0 to 512
[  184.391381][T24360] syz.2.5434: attempt to access beyond end of device
[  184.391381][T24360] loop2: rw=2049, sector=145, nr_sectors = 16 limit=128
[  184.404941][T24360] syz.2.5434: attempt to access beyond end of device
[  184.404941][T24360] loop2: rw=2049, sector=169, nr_sectors = 8 limit=128
[  184.418827][T24360] syz.2.5434: attempt to access beyond end of device
[  184.418827][T24360] loop2: rw=2049, sector=185, nr_sectors = 8 limit=128
[  184.432608][T24360] syz.2.5434: attempt to access beyond end of device
[  184.432608][T24360] loop2: rw=2049, sector=201, nr_sectors = 8 limit=128
[  184.440667][T24359] ext4 filesystem being mounted at /183/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  184.446288][T24360] syz.2.5434: attempt to access beyond end of device
[  184.446288][T24360] loop2: rw=2049, sector=217, nr_sectors = 8 limit=128
[  184.472757][T24360] syz.2.5434: attempt to access beyond end of device
[  184.472757][T24360] loop2: rw=2049, sector=233, nr_sectors = 8 limit=128
[  184.498819][T24367] __nla_validate_parse: 2 callbacks suppressed
[  184.498833][T24367] netlink: 96 bytes leftover after parsing attributes in process `syz.8.5438'.
[  184.515414][T24360] syz.2.5434: attempt to access beyond end of device
[  184.515414][T24360] loop2: rw=2049, sector=249, nr_sectors = 8 limit=128
[  184.527838][T24359] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.5437: Failed to acquire dquot type 0
[  184.543327][T24360] syz.2.5434: attempt to access beyond end of device
[  184.543327][T24360] loop2: rw=2049, sector=265, nr_sectors = 8 limit=128
[  184.557563][T24360] syz.2.5434: attempt to access beyond end of device
[  184.557563][T24360] loop2: rw=2049, sector=281, nr_sectors = 8 limit=128
[  184.568625][T24369] netlink: 'syz.8.5439': attribute type 4 has an invalid length.
[  184.571232][T24360] syz.2.5434: attempt to access beyond end of device
[  184.571232][T24360] loop2: rw=2049, sector=297, nr_sectors = 8 limit=128
[  184.585798][T24369] netlink: 'syz.8.5439': attribute type 4 has an invalid length.
[  184.611360][T24373] random: crng reseeded on system resumption
[  184.620735][ T1046] hid-generic 0000:0002:0005.000F: item fetching failed at offset 0/1
[  184.629234][ T1046] hid-generic 0000:0002:0005.000F: probe with driver hid-generic failed with error -22
[  184.677622][T24381] sd 0:0:1:0: device reset
[  184.684542][T24383] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5444'.
[  184.694843][T24383] bridge_slave_1: left allmulticast mode
[  184.700691][T24383] bridge_slave_1: left promiscuous mode
[  184.706511][T24383] bridge0: port 2(bridge_slave_1) entered disabled state
[  184.718397][T24383] bridge_slave_0: left allmulticast mode
[  184.724109][T24383] bridge_slave_0: left promiscuous mode
[  184.729930][T24383] bridge0: port 1(bridge_slave_0) entered disabled state
[  184.790105][   T29] kauditd_printk_skb: 107 callbacks suppressed
[  184.790120][   T29] audit: type=1400 audit(1764035010.202:5807): avc:  denied  { egress } for  pid=22 comm="ksoftirqd/1" saddr=fe80::1c daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1
[  184.819784][   T29] audit: type=1400 audit(1764035010.202:5808): avc:  denied  { sendto } for  pid=22 comm="ksoftirqd/1" saddr=fe80::1c daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1
[  184.860057][   T29] audit: type=1400 audit(1764035010.272:5809): avc:  denied  { setopt } for  pid=24394 comm="syz.4.5448" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  184.938148][   T10] hid_parser_main: 66 callbacks suppressed
[  184.938165][   T10] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x4
[  184.944217][   T29] audit: type=1400 audit(1764035010.302:5810): avc:  denied  { open } for  pid=24397 comm="syz.0.5449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  184.951776][   T10] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x2
[  184.962475][   T10] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x3
[  184.971335][   T29] audit: type=1400 audit(1764035010.302:5811): avc:  denied  { kernel } for  pid=24397 comm="syz.0.5449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  185.006157][   T29] audit: type=1400 audit(1764035010.302:5812): avc:  denied  { tracepoint } for  pid=24397 comm="syz.0.5449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  185.025973][   T29] audit: type=1326 audit(1764035010.312:5813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24400 comm="syz.4.5452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cf4b5f749 code=0x7ffc0000
[  185.049947][   T29] audit: type=1326 audit(1764035010.312:5814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24400 comm="syz.4.5452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f9cf4b5f749 code=0x7ffc0000
[  185.051282][   T10] hid-generic 0000:3000000:0000.0010: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[  185.073821][   T29] audit: type=1326 audit(1764035010.312:5815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24400 comm="syz.4.5452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cf4b5f749 code=0x7ffc0000
[  185.107015][   T29] audit: type=1400 audit(1764035010.342:5816): avc:  denied  { setopt } for  pid=24407 comm="syz.4.5453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  185.754078][T24459] uprobe: syz.2.5470:24459 failed to unregister, leaking uprobe
[  185.858674][T24465] atomic_op ffff88811a5fad28 conn xmit_atomic 0000000000000000
[  186.656487][T24494] serio: Serial port ptm0
[  186.724247][T24499] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5484'.
[  186.960059][T24458] uprobe: syz.2.5470:24458 failed to unregister, leaking uprobe
[  187.228773][ T9954] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  187.314890][ T9954] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  187.403706][T24584] loop8: detected capacity change from 0 to 512
[  187.412798][T24584] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  187.413463][ T9954] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  187.452387][T24584] ext4 filesystem being mounted at /129/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  187.481389][ T9954] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  187.592352][ T9954] bridge_slave_1: left allmulticast mode
[  187.598024][ T9954] bridge_slave_1: left promiscuous mode
[  187.603742][ T9954] bridge0: port 2(bridge_slave_1) entered disabled state
[  187.612806][ T9954] bridge_slave_0: left allmulticast mode
[  187.618522][ T9954] bridge_slave_0: left promiscuous mode
[  187.624193][ T9954] bridge0: port 1(bridge_slave_0) entered disabled state
[  187.722284][ T9954] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  187.732102][ T9954] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  187.742186][ T9954] bond0 (unregistering): Released all slaves
[  187.809576][T24569] chnl_net:caif_netlink_parms(): no params data found
[  187.871136][ T9954] hsr_slave_0: left promiscuous mode
[  187.901052][ T9954] hsr_slave_1: left promiscuous mode
[  187.906632][ T9954] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  187.914035][ T9954] batman_adv: batadv0: Removing interface: batadv_slave_0
[  187.941488][ T9954] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  187.948866][ T9954] batman_adv: batadv0: Removing interface: batadv_slave_1
[  187.987318][ T9954] veth1_macvtap: left promiscuous mode
[  188.003321][ T9954] veth0_macvtap: left promiscuous mode
[  188.019208][ T9954] veth1_vlan: left promiscuous mode
[  188.025136][ T9954] veth0_vlan: left promiscuous mode
[  188.167916][ T9954] team0 (unregistering): Port device team_slave_1 removed
[  188.181288][ T9954] team0 (unregistering): Port device team_slave_0 removed
[  188.251422][T24569] bridge0: port 1(bridge_slave_0) entered blocking state
[  188.258500][T24569] bridge0: port 1(bridge_slave_0) entered disabled state
[  188.267882][T24569] bridge_slave_0: entered allmulticast mode
[  188.274610][T24569] bridge_slave_0: entered promiscuous mode
[  188.281513][T24569] bridge0: port 2(bridge_slave_1) entered blocking state
[  188.288565][T24569] bridge0: port 2(bridge_slave_1) entered disabled state
[  188.296020][T24569] bridge_slave_1: entered allmulticast mode
[  188.302504][T24569] bridge_slave_1: entered promiscuous mode
[  188.309464][T24805] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5533'.
[  188.345424][T24569] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  188.372346][T24569] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  188.414265][T24569] team0: Port device team_slave_0 added
[  188.426905][T24569] team0: Port device team_slave_1 added
[  188.469770][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  188.489396][T24569] batman_adv: batadv0: Adding interface: batadv_slave_0
[  188.496364][T24569] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  188.522272][T24569] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  188.542666][T24569] batman_adv: batadv0: Adding interface: batadv_slave_1
[  188.549614][T24569] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  188.575755][T24569] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  188.643107][T24569] hsr_slave_0: entered promiscuous mode
[  188.649238][T24569] hsr_slave_1: entered promiscuous mode
[  188.655360][T24569] debugfs: 'hsr0' already exists in 'hsr'
[  188.661159][T24569] Cannot create hsr debugfs directory
[  188.951700][T25068] loop4: detected capacity change from 0 to 1024
[  188.986700][T25068] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4193: comm syz.4.5555: Allocating blocks 449-513 which overlap fs metadata
[  189.008431][T25064] EXT4-fs (loop4): pa ffff8881004a8ee0: logic 48, phys. 177, len 21
[  189.016488][T25064] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4
[  189.097708][T25096] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5560'.
[  189.106709][T25096] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5560'.
[  189.127546][ T9971] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  189.149821][T24569] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  189.160098][T25114] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5561'.
[  189.164229][T24569] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  189.181696][T24569] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  189.201327][T24569] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  189.305986][T24569] 8021q: adding VLAN 0 to HW filter on device bond0
[  189.316463][T25141] sch_fq: defrate 4294967295 ignored.
[  189.340572][T24569] 8021q: adding VLAN 0 to HW filter on device team0
[  189.351242][ T9954] bridge0: port 1(bridge_slave_0) entered blocking state
[  189.358383][ T9954] bridge0: port 1(bridge_slave_0) entered forwarding state
[  189.407515][ T9954] bridge0: port 2(bridge_slave_1) entered blocking state
[  189.414627][ T9954] bridge0: port 2(bridge_slave_1) entered forwarding state
[  189.511834][T24569] 8021q: adding VLAN 0 to HW filter on device batadv0
[  189.644277][T24569] veth0_vlan: entered promiscuous mode
[  189.662036][T24569] veth1_vlan: entered promiscuous mode
[  189.692121][T24569] veth0_macvtap: entered promiscuous mode
[  189.727885][T24569] veth1_macvtap: entered promiscuous mode
[  189.739292][T25187] serio: Serial port ttyS3
[  189.761341][T24569] batman_adv: batadv0: Interface activated: batadv_slave_0
[  189.780641][T24569] batman_adv: batadv0: Interface activated: batadv_slave_1
[  189.818507][T25194] sg_write: data in/out 49276/2 bytes for SCSI command 0x6-- guessing data in;
[  189.818507][T25194]    program syz.4.5590 not setting count and/or reply_len properly
[  189.837068][ T9954] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  189.848460][ T9954] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  189.872409][   T29] kauditd_printk_skb: 582 callbacks suppressed
[  189.872422][   T29] audit: type=1400 audit(1764035015.282:6399): avc:  denied  { mounton } for  pid=24569 comm="syz-executor" path="/root/syzkaller.JamhrN/syz-tmp" dev="sda1" ino=2075 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[  189.907115][ T9954] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  189.918048][ T9954] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  189.959278][   T29] audit: type=1400 audit(1764035015.312:6400): avc:  denied  { mount } for  pid=24569 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  189.981548][   T29] audit: type=1400 audit(1764035015.312:6401): avc:  denied  { mounton } for  pid=24569 comm="syz-executor" path="/root/syzkaller.JamhrN/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[  190.008332][   T29] audit: type=1400 audit(1764035015.312:6402): avc:  denied  { mounton } for  pid=24569 comm="syz-executor" path="/root/syzkaller.JamhrN/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=55894 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[  190.036064][   T29] audit: type=1400 audit(1764035015.322:6403): avc:  denied  { mounton } for  pid=24569 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[  190.059099][   T29] audit: type=1400 audit(1764035015.322:6404): avc:  denied  { mount } for  pid=24569 comm="syz-executor" name="/" dev="gadgetfs" ino=4018 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  190.175954][   T29] audit: type=1400 audit(1764035015.582:6405): avc:  denied  { ioctl } for  pid=25208 comm="syz.4.5596" path="socket:[56395]" dev="sockfs" ino=56395 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  190.277294][   T29] audit: type=1326 audit(1764035015.622:6406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25213 comm="syz.3.5597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd6333f749 code=0x7ffc0000
[  190.300892][   T29] audit: type=1326 audit(1764035015.622:6407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25213 comm="syz.3.5597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd6333f749 code=0x7ffc0000
[  190.324418][   T29] audit: type=1326 audit(1764035015.622:6408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25213 comm="syz.3.5597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd6333f749 code=0x7ffc0000
[  190.589734][T25226] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5602'.
[  190.811658][T25242] syzkaller1: entered promiscuous mode
[  190.817159][T25242] syzkaller1: entered allmulticast mode
[  191.172669][T25293] netlink: 'syz.4.5629': attribute type 1 has an invalid length.
[  191.203845][T25298] netlink: 96 bytes leftover after parsing attributes in process `syz.8.5632'.
[  191.217373][T25293] bond1: (slave geneve2): making interface the new active one
[  191.226107][T25293] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  191.234883][T20638] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  191.250743][ T9972] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  191.272649][ T9972] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  191.300834][T25348] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5638'.
[  191.311130][T25346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  191.320496][T25346] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  191.371589][T25359] sg_write: data in/out 49276/2 bytes for SCSI command 0x6-- guessing data in;
[  191.371589][T25359]    program syz.8.5641 not setting count and/or reply_len properly
[  191.882251][T13229] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[  191.889687][T13229] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[  191.897097][T13229] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[  191.904500][T13229] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[  191.912058][T13229] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[  191.919500][T13229] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[  191.926906][T13229] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[  191.934338][T13229] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[  191.941738][T13229] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[  191.949123][T13229] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[  191.961068][T13229] hid-generic 0000:0000:0000.0011: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[  192.170471][T25478] xt_hashlimit: max too large, truncated to 1048576
[  192.214750][T25488] syzkaller1: entered promiscuous mode
[  192.220309][T25488] syzkaller1: entered allmulticast mode
[  192.605443][T25560] pimreg: entered allmulticast mode
[  192.632805][T25560] pimreg: left allmulticast mode
[  192.793426][T25591] loop8: detected capacity change from 0 to 512
[  192.814115][T25558] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5714'.
[  192.819063][T25591] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  192.880341][T25594] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5728'.
[  192.914225][T25591] EXT4-fs (loop8): 1 orphan inode deleted
[  192.919995][T25591] EXT4-fs (loop8): 1 truncate cleaned up
[  192.970278][T25605] netlink: 'syz.2.5729': attribute type 10 has an invalid length.
[  193.004699][T25605] bond0: (slave netdevsim1): Enslaving as an active interface with an up link
[  193.152944][T25644] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5738'.
[  193.177716][T25655] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5744'.
[  193.207584][T25655] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5744'.
[  193.269224][T25633] loop8: detected capacity change from 0 to 512
[  193.269401][T25665] syzkaller1: entered promiscuous mode
[  193.281223][T25665] syzkaller1: entered allmulticast mode
[  193.293317][T25633] msdos: Bad value for 'errors'
[  193.299190][T25671] atomic_op ffff88811ac5d528 conn xmit_atomic 0000000000000000
[  193.717795][ T3411] IPVS: starting estimator thread 0...
[  193.819889][T25712] IPVS: using max 2832 ests per chain, 141600 per kthread
[  193.941824][T25739] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5765'.
[  193.950834][T25739] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5765'.
[  194.529909][ T1046] Process accounting resumed
[  195.013604][T25830] loop3: detected capacity change from 0 to 512
[  195.030292][T25830] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  195.142438][T25859] xt_hashlimit: max too large, truncated to 1048576
[  195.157512][T25859] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  195.178324][T25830] EXT4-fs (loop3): 1 truncate cleaned up
[  195.190273][   T29] kauditd_printk_skb: 282 callbacks suppressed
[  195.190287][   T29] audit: type=1400 audit(1764035020.602:6691): avc:  denied  { add_name } for  pid=25827 comm="syz.3.5798" name="memory.stat" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  195.217752][   T29] audit: type=1400 audit(1764035020.602:6692): avc:  denied  { create } for  pid=25827 comm="syz.3.5798" name="memory.stat" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  195.290739][   T29] audit: type=1400 audit(1764035020.652:6693): avc:  denied  { read append open } for  pid=25827 comm="syz.3.5798" path="/45/bus/memory.stat" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  195.333492][   T29] audit: type=1400 audit(1764035020.742:6694): avc:  denied  { read write } for  pid=25866 comm="syz.4.5809" name="qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  195.357011][   T29] audit: type=1400 audit(1764035020.742:6695): avc:  denied  { open } for  pid=25866 comm="syz.4.5809" path="/dev/qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  195.421535][   T29] audit: type=1400 audit(1764035020.832:6696): avc:  denied  { create } for  pid=25878 comm="syz.3.5810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  195.505049][   T29] audit: type=1326 audit(1764035020.902:6697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25886 comm="syz.3.5815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd6333f749 code=0x7ffc0000
[  195.529058][   T29] audit: type=1326 audit(1764035020.902:6698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25886 comm="syz.3.5815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd6333f749 code=0x7ffc0000
[  195.552800][   T29] audit: type=1326 audit(1764035020.902:6699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25886 comm="syz.3.5815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd6333f749 code=0x7ffc0000
[  195.576352][   T29] audit: type=1326 audit(1764035020.902:6700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25886 comm="syz.3.5815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7efd6333f749 code=0x7ffc0000
[  195.600257][T25889] 9pnet_fd: Insufficient options for proto=fd
[  195.616692][ T3411] hid-generic 0000:0000:0000.0012: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  195.675614][T25912] loop8: detected capacity change from 0 to 128
[  195.694189][T25912] bio_check_eod: 101 callbacks suppressed
[  195.694204][T25912] syz.8.5823: attempt to access beyond end of device
[  195.694204][T25912] loop8: rw=2049, sector=154, nr_sectors = 6 limit=128
[  195.715741][T25912] syz.8.5823: attempt to access beyond end of device
[  195.715741][T25912] loop8: rw=2049, sector=158, nr_sectors = 2 limit=128
[  195.729184][T25912] Buffer I/O error on dev loop8, logical block 79, lost async page write
[  195.737986][T25912] syz.8.5823: attempt to access beyond end of device
[  195.737986][T25912] loop8: rw=2049, sector=160, nr_sectors = 2 limit=128
[  195.751455][T25912] Buffer I/O error on dev loop8, logical block 80, lost async page write
[  195.760628][T25912] syz.8.5823: attempt to access beyond end of device
[  195.760628][T25912] loop8: rw=2049, sector=162, nr_sectors = 6 limit=128
[  195.774999][T25912] syz.8.5823: attempt to access beyond end of device
[  195.774999][T25912] loop8: rw=2049, sector=166, nr_sectors = 2 limit=128
[  195.788530][T25912] Buffer I/O error on dev loop8, logical block 83, lost async page write
[  195.798570][T25912] syz.8.5823: attempt to access beyond end of device
[  195.798570][T25912] loop8: rw=2049, sector=168, nr_sectors = 2 limit=128
[  195.798598][T25923] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=25923 comm=syz.0.5826
[  195.798619][T25923] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=25923 comm=syz.0.5826
[  195.812025][T25912] Buffer I/O error on dev loop8, logical block 84, lost async page write
[  195.848219][T25912] syz.8.5823: attempt to access beyond end of device
[  195.848219][T25912] loop8: rw=2049, sector=186, nr_sectors = 6 limit=128
[  195.866317][T25912] syz.8.5823: attempt to access beyond end of device
[  195.866317][T25912] loop8: rw=2049, sector=190, nr_sectors = 2 limit=128
[  195.879784][T25912] Buffer I/O error on dev loop8, logical block 95, lost async page write
[  195.901974][T25912] syz.8.5823: attempt to access beyond end of device
[  195.901974][T25912] loop8: rw=2049, sector=192, nr_sectors = 2 limit=128
[  195.915431][T25912] Buffer I/O error on dev loop8, logical block 96, lost async page write
[  195.929490][T25912] syz.8.5823: attempt to access beyond end of device
[  195.929490][T25912] loop8: rw=2049, sector=194, nr_sectors = 6 limit=128
[  195.943324][T25912] Buffer I/O error on dev loop8, logical block 99, lost async page write
[  195.945599][T25933] netem: incorrect gi model size
[  195.952115][T25912] Buffer I/O error on dev loop8, logical block 100, lost async page write
[  195.956885][T25933] netem: change failed
[  195.970328][T25912] Buffer I/O error on dev loop8, logical block 111, lost async page write
[  195.980783][T25912] Buffer I/O error on dev loop8, logical block 112, lost async page write
[  196.060555][T25949] tipc: Started in network mode
[  196.065456][T25949] tipc: Node identity ac14140f, cluster identity 4711
[  196.074383][T25949] tipc: New replicast peer: 255.255.255.255
[  196.080586][T25949] tipc: Enabled bearer <udp:syz2>, priority 10
[  196.105609][T25955] __nla_validate_parse: 5 callbacks suppressed
[  196.105647][T25955] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5840'.
[  196.152083][T25966] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5844'.
[  196.163128][T25962] netlink: 'syz.3.5843': attribute type 1 has an invalid length.
[  196.166232][T25972] loop8: detected capacity change from 0 to 128
[  196.177928][T25972] vfat: Bad value for 'shortname'
[  196.189585][T25955] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5840'.
[  196.251946][T25992] loop8: detected capacity change from 0 to 256
[  196.298026][T26006] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  196.328410][T26020] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5853'.
[  196.399940][T26027] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5857'.
[  196.408826][T26027] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5857'.
[  196.436391][T26027] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5857'.
[  196.445310][T26027] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5857'.
[  196.454718][T26036] netlink: 'syz.2.5861': attribute type 1 has an invalid length.
[  196.554682][T26053] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5869'.
[  196.565230][T26051] wg2: entered promiscuous mode
[  196.570249][T26051] wg2: entered allmulticast mode
[  196.596880][T26053] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5869'.
[  196.662667][T26068] loop8: detected capacity change from 0 to 512
[  196.682222][T26068] EXT4-fs: Ignoring removed i_version option
[  196.688279][T26068] EXT4-fs: Ignoring removed bh option
[  196.722472][T26068] EXT4-fs mount: 10 callbacks suppressed
[  196.722550][T26068] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  196.741032][T26068] ext4 filesystem being mounted at /202/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  196.775994][T21616] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  196.970019][T26127] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=26127 comm=syz.8.5891
[  197.089177][   T10] tipc: Node number set to 2886997007
[  197.422949][T26179] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  197.431409][T26179] tipc: Disabling bearer <udp:syz2>
[  197.976981][T26215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  197.995687][T26215] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  198.420828][T26240] 9pnet_fd: Insufficient options for proto=fd
[  198.443751][T26242] netlink: 'syz.4.5930': attribute type 1 has an invalid length.
[  198.565506][T26258] 8021q: adding VLAN 0 to HW filter on device bond2
[  198.618076][T26258] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  198.644462][T26300] netlink: 'syz.8.5941': attribute type 13 has an invalid length.
[  198.664611][T26258] bond2 (unregistering): (slave gretap1): Releasing backup interface
[  198.690885][T26258] bond2 (unregistering): Released all slaves
[  198.698297][T26308] loop8: detected capacity change from 0 to 128
[  198.728128][T26308] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  198.740518][T26308] ext4 filesystem being mounted at /210/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  198.796574][T26300] EXT4-fs warning (device loop8): ext4_group_extend:1891: can't read last block, resize aborted
[  198.838984][T21616] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  199.065933][T26380] netem: change failed
[  199.280027][T26406] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[  199.310038][T26406] SELinux: failed to load policy
[  199.351217][T26414] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  199.920513][T26468] loop8: detected capacity change from 0 to 128
[  200.103914][T26483] loop8: detected capacity change from 0 to 512
[  200.130127][T26483] EXT4-fs: Ignoring removed oldalloc option
[  200.180507][T26483] EXT4-fs (loop8): 1 truncate cleaned up
[  200.193099][T26483] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  200.236120][   T29] kauditd_printk_skb: 214 callbacks suppressed
[  200.236133][   T29] audit: type=1400 audit(1764035025.642:6915): avc:  denied  { add_name } for  pid=26482 comm="syz.8.5998" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  200.263089][   T29] audit: type=1400 audit(1764035025.642:6916): avc:  denied  { create } for  pid=26482 comm="syz.8.5998" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  200.358546][T21616] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  200.369878][   T29] audit: type=1400 audit(1764035025.702:6917): avc:  denied  { open } for  pid=26482 comm="syz.8.5998" path="/223/file1/file1" dev="loop8" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  200.483483][   T29] audit: type=1400 audit(1764035025.892:6918): avc:  denied  { execute } for  pid=26492 comm="syz.8.6000" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=59681 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  200.649480][   T29] audit: type=1400 audit(1764035026.052:6919): avc:  denied  { getopt } for  pid=26514 comm="syz.0.6005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  200.704215][   T29] audit: type=1326 audit(1764035026.112:6920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26518 comm="syz.2.6007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42cf82f749 code=0x7ffc0000
[  200.727826][   T29] audit: type=1326 audit(1764035026.112:6921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26518 comm="syz.2.6007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42cf82f749 code=0x7ffc0000
[  200.799041][   T29] audit: type=1326 audit(1764035026.162:6922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26518 comm="syz.2.6007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f42cf82f749 code=0x7ffc0000
[  200.822626][   T29] audit: type=1326 audit(1764035026.162:6923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26518 comm="syz.2.6007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42cf82f749 code=0x7ffc0000
[  200.846098][   T29] audit: type=1326 audit(1764035026.162:6924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26518 comm="syz.2.6007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42cf82f749 code=0x7ffc0000
[  200.938042][T26531] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26531 comm=syz.0.6011
[  201.283659][T26570] serio: Serial port ptm0
[  201.520426][T26603] __nla_validate_parse: 23 callbacks suppressed
[  201.520477][T26603] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6037'.
[  201.540013][T26603] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6037'.
[  201.579397][T26605] wireguard0: entered promiscuous mode
[  201.585008][T26605] wireguard0: entered allmulticast mode
[  201.824745][T26651] netlink: 'syz.2.6056': attribute type 1 has an invalid length.
[  201.832607][T26651] netlink: 'syz.2.6056': attribute type 4 has an invalid length.
[  201.840413][T26651] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.6056'.
[  201.906529][ T3401] hid_parser_main: 49 callbacks suppressed
[  201.906547][ T3401] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0
[  201.920114][ T3401] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0
[  201.927521][ T3401] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0
[  201.935464][T26661] xt_l2tp: invalid flags combination: 4
[  201.959964][ T3401] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0
[  201.967354][ T3401] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0
[  201.974767][ T3401] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0
[  201.982258][ T3401] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0
[  201.989679][ T3401] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0
[  201.997070][ T3401] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0
[  202.004511][ T3401] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0
[  202.014834][ T3401] hid-generic 0000:0000:0000.0013: hidraw0: <UNKNOWN> HID v8.00 Device [syz0] on syz0
[  202.230760][T26710] gtp0: entered promiscuous mode
[  202.244482][T26683] random: crng reseeded on system resumption
[  202.306097][T26723] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6081'.
[  202.453292][T26751] loop8: detected capacity change from 0 to 764
[  202.460950][T26751] rock: directory entry would overflow storage
[  202.467121][T26751] rock: sig=0x4654, size=5, remaining=4
[  202.495686][T26759] block device autoloading is deprecated and will be removed.
[  202.654851][T26777] netlink: 72 bytes leftover after parsing attributes in process `+}[@'.
[  202.696646][T26781] netlink: 'syz.8.6100': attribute type 12 has an invalid length.
[  203.177789][T26835] atomic_op ffff88811a015d28 conn xmit_atomic 0000000000000000
[  203.220392][T26837] sd 0:0:1:0: device reset
[  203.390090][T26855] binfmt_misc: register: failed to install interpreter file ./file2
[  203.654954][T26896] netlink: 'syz.3.6137': attribute type 12 has an invalid length.
[  203.665959][T26898] netlink: 'syz.2.6140': attribute type 13 has an invalid length.
[  203.806057][T26898] bridge0: port 2(bridge_slave_1) entered disabled state
[  203.813308][T26898] bridge0: port 1(bridge_slave_0) entered disabled state
[  203.980684][T26898] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  204.013720][T26898] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  204.100518][T26920] netlink: 80 bytes leftover after parsing attributes in process `syz.4.6145'.
[  204.245189][T26916] netlink: 'syz.0.6143': attribute type 3 has an invalid length.
[  204.270193][ T9954] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  204.296147][T26926] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6148'.
[  204.300131][ T9954] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  204.342456][T26926] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6148'.
[  204.353501][ T9954] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  204.369823][ T9954] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  204.379494][ T9954] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  204.393053][ T9954] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  204.407234][ T9954] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  204.551666][T26952] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0'
[  204.580211][T26951] netlink: 176 bytes leftover after parsing attributes in process `syz.4.6156'.
[  204.822974][T26983] sch_tbf: burst 22 is lower than device lo mtu (65550) !
[  205.230952][T26995] Set syz1 is full, maxelem 65536 reached
[  205.231236][T27005] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6174'.
[  205.248902][   T29] kauditd_printk_skb: 660 callbacks suppressed
[  205.248914][   T29] audit: type=1326 audit(1764035030.652:7585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27006 comm="syz.2.6175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42cf82f749 code=0x7ffc0000
[  205.272969][T27005] openvswitch: netlink: Key 0 has unexpected len 2 expected 0
[  205.278595][   T29] audit: type=1326 audit(1764035030.652:7586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27006 comm="syz.2.6175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42cf82f749 code=0x7ffc0000
[  205.309576][   T29] audit: type=1326 audit(1764035030.652:7587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27006 comm="syz.2.6175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f42cf82f749 code=0x7ffc0000
[  205.333127][   T29] audit: type=1326 audit(1764035030.652:7588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27006 comm="syz.2.6175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42cf82f749 code=0x7ffc0000
[  205.368107][   T29] audit: type=1326 audit(1764035030.762:7589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27006 comm="syz.2.6175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7f42cf82f749 code=0x7ffc0000
[  205.391718][   T29] audit: type=1326 audit(1764035030.762:7590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27006 comm="syz.2.6175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42cf82f749 code=0x7ffc0000
[  205.415578][   T29] audit: type=1326 audit(1764035030.762:7591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27006 comm="syz.2.6175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42cf82f749 code=0x7ffc0000
[  205.460013][   T29] audit: type=1400 audit(1764035030.852:7592): avc:  denied  { mount } for  pid=27010 comm="syz.2.6177" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  205.482330][   T29] audit: type=1400 audit(1764035030.852:7593): avc:  denied  { watch watch_reads } for  pid=27010 comm="syz.2.6177" path="/206/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0"
[  205.510015][   T29] audit: type=1400 audit(1764035030.852:7594): avc:  denied  { mac_admin } for  pid=27010 comm="syz.2.6177" capability=33  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  205.602279][T27022] xt_hashlimit: max too large, truncated to 1048576
[  205.770728][T27061] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 8
[  205.783437][T27066] xt_hashlimit: max too large, truncated to 1048576
[  206.142059][T27129] syzkaller0: entered allmulticast mode
[  206.798426][T27174] __nla_validate_parse: 1 callbacks suppressed
[  206.798441][T27174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6244'.
[  206.813583][T27174] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6244'.
[  206.855515][T27178] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6246'.
[  206.883419][T27174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6244'.
[  206.892400][T27174] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6244'.
[  206.968291][T27201] netlink: 'syz.4.6249': attribute type 3 has an invalid length.
[  206.993769][T27204] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6251'.
[  207.032968][T27204] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6251'.
[  207.330429][T27222] xt_hashlimit: max too large, truncated to 1048576
[  207.339573][T27224] netlink: 76 bytes leftover after parsing attributes in process `syz.0.6260'.
[  207.564679][T27243] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  207.777302][T27264] usb usb8: usbfs: process 27264 (syz.0.6278) did not claim interface 0 before use
[  208.026433][T27288] netlink: 'syz.3.6281': attribute type 13 has an invalid length.
[  208.134825][T27288] bridge0: port 2(bridge_slave_1) entered disabled state
[  208.142026][T27288] bridge0: port 1(bridge_slave_0) entered disabled state
[  208.199279][T27288] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  208.209446][T27288] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  208.286136][ T9954] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  208.338936][T27309] syzkaller0: entered allmulticast mode
[  208.351910][ T9954] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  208.396848][ T9954] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  208.407113][ T9954] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  208.625431][T27378] loop8: detected capacity change from 0 to 128
[  208.643336][T27376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  208.682878][T27376] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  208.978007][T27407] syzkaller0: entered allmulticast mode
[  209.022783][T27415] loop8: detected capacity change from 0 to 512
[  209.041925][T27415] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  209.057747][T27415] ext4 filesystem being mounted at /289/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  209.129769][T21616] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  209.151136][T27429] netlink: 104 bytes leftover after parsing attributes in process `syz.8.6324'.
[  209.267415][T27438] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6328'.
[  209.314215][T27442] usb usb8: usbfs: process 27442 (syz.2.6330) did not claim interface 0 before use
[  209.447108][T27456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  209.490347][T27456] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  209.532361][T27470] loop8: detected capacity change from 0 to 512
[  209.560800][T27470] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002]
[  209.570633][T27470] System zones: 0-2, 18-18, 34-34
[  209.577148][T27470] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters
[  209.592251][T27470] EXT4-fs (loop8): Remounting filesystem read-only
[  209.599023][T27470] EXT4-fs (loop8): 1 truncate cleaned up
[  209.605452][T27470] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  209.618164][ T9954] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  209.618326][T27470] ext4 filesystem being mounted at /295/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  209.628753][ T9954] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  209.643760][ T9954] EXT4-fs (loop8): Quota write (off=8, len=24) cancelled because transaction is not started
[  209.689492][T21616] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  210.455329][T27557] smc: net device hsr0 applied user defined pnetid SYZ2
[  210.462823][T27557] smc: net device hsr0 erased user defined pnetid SYZ2
[  210.523173][   T29] kauditd_printk_skb: 269 callbacks suppressed
[  210.523187][   T29] audit: type=1400 audit(1764035035.932:7856): avc:  denied  { watch watch_reads } for  pid=27564 comm="syz.8.6364" path="/302" dev="tmpfs" ino=1578 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  210.622034][   T29] audit: type=1400 audit(1764035036.032:7857): avc:  denied  { read } for  pid=27581 comm="syz.2.6368" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  210.659251][T27585] netlink: 'syz.4.6373': attribute type 1 has an invalid length.
[  210.673450][T27588] bridge0: port 3(vlan2) entered blocking state
[  210.679822][T27588] bridge0: port 3(vlan2) entered disabled state
[  210.687492][T27588] vlan2: entered allmulticast mode
[  210.692662][T27588] bridge0: entered allmulticast mode
[  210.714179][T27588] vlan2: left allmulticast mode
[  210.719056][T27588] bridge0: left allmulticast mode
[  210.761097][T27585] 8021q: adding VLAN 0 to HW filter on device batadv1
[  210.780196][T27585] bond2: (slave batadv1): making interface the new active one
[  210.792857][T27585] bond2: (slave batadv1): Enslaving as an active interface with an up link
[  210.810035][T27585] bond2 (unregistering): (slave batadv1): Releasing active interface
[  210.820471][T27585] bond2 (unregistering): Released all slaves
[  210.832871][T27633] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check.
[  210.868313][T27682] netlink: 'syz.2.6378': attribute type 13 has an invalid length.
[  210.877666][   T29] audit: type=1326 audit(1764035036.282:7858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27683 comm="syz.3.6379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd6333f749 code=0x7ffc0000
[  210.901210][   T29] audit: type=1326 audit(1764035036.282:7859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27683 comm="syz.3.6379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd6333f749 code=0x7ffc0000
[  210.927118][   T29] audit: type=1326 audit(1764035036.282:7860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27683 comm="syz.3.6379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7efd6333de97 code=0x7ffc0000
[  210.950691][   T29] audit: type=1326 audit(1764035036.282:7861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27683 comm="syz.3.6379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd6333f749 code=0x7ffc0000
[  210.974252][   T29] audit: type=1326 audit(1764035036.282:7862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27683 comm="syz.3.6379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd6333f749 code=0x7ffc0000
[  210.997770][   T29] audit: type=1326 audit(1764035036.282:7863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27683 comm="syz.3.6379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd6333f749 code=0x7ffc0000
[  211.021274][   T29] audit: type=1326 audit(1764035036.282:7864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27683 comm="syz.3.6379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd6333f749 code=0x7ffc0000
[  211.044765][   T29] audit: type=1326 audit(1764035036.332:7865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27683 comm="syz.3.6379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd6333f749 code=0x7ffc0000
[  211.106145][T26908] hid_parser_main: 22 callbacks suppressed
[  211.106163][T26908] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0
[  211.119568][T26908] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0
[  211.126999][T26908] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0
[  211.138929][T26908] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0
[  211.146414][T26908] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0
[  211.153917][T26908] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0
[  211.161421][T26908] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0
[  211.168861][T26908] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0
[  211.176271][T26908] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0
[  211.183731][T26908] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0
[  211.194388][T26908] hid-generic 0000:0000:0000.0014: hidraw0: <UNKNOWN> HID v8.00 Device [syz0] on syz0
[  211.213038][T27712] SELinux: syz.3.6389 (27712) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[  211.265793][T27724] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27724 comm=syz.0.6402
[  211.312998][T27734] netlink: 'gtp': attribute type 10 has an invalid length.
[  211.365368][T27744] loop8: detected capacity change from 0 to 256
[  211.373074][T27744] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  211.385592][T27744] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  212.066953][T27779] rdma_op ffff8881149cad80 conn xmit_rdma 0000000000000000
[  212.272415][T27798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  212.293693][T27798] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  212.361675][T27789] __nla_validate_parse: 4 callbacks suppressed
[  212.361689][T27789] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6416'.
[  212.787124][T27846] sd 0:0:1:0: device reset
[  213.016114][T27864] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  213.348135][T27884] serio: Serial port ptm0
[  213.361879][T27888] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6445'.
[  213.632630][T27913] 8021q: adding VLAN 0 to HW filter on device bond0
[  213.642421][T27913] 8021q: adding VLAN 0 to HW filter on device team0
[  213.651880][T27913] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  213.668706][T27918] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6462'.
[  213.783334][T27939] netlink: 'syz.0.6460': attribute type 3 has an invalid length.
[  213.851551][T27949] netlink: 'syz.0.6463': attribute type 1 has an invalid length.
[  213.876414][T27949] 8021q: adding VLAN 0 to HW filter on device batadv1
[  213.884537][T27949] bond2: (slave batadv1): making interface the new active one
[  213.893029][T27949] bond2: (slave batadv1): Enslaving as an active interface with an up link
[  213.905729][T27949] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6463'.
[  213.915984][T27949] bond2 (unregistering): (slave batadv1): Releasing active interface
[  213.928263][T27949] bond2 (unregistering): Released all slaves
[  214.447077][T28035] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6469'.
[  214.691006][T28044] Falling back ldisc for ttyS3.
[  214.698920][T28054] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6476'.
[  214.818119][T28070] netlink: 14 bytes leftover after parsing attributes in process `syz.8.6482'.
[  214.829998][T28070] hsr_slave_0: left promiscuous mode
[  214.840110][T28070] hsr_slave_1: left promiscuous mode
[  214.911987][T28088] pim6reg1: entered promiscuous mode
[  214.917283][T28088] pim6reg1: entered allmulticast mode
[  214.965734][T28098] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub
[  215.148197][T28119] netlink: 432 bytes leftover after parsing attributes in process `syz.0.6497'.
[  215.178627][T28124] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6499'.
[  215.195450][T28124] hsr_slave_0: left promiscuous mode
[  215.209804][T28124] hsr_slave_1: left promiscuous mode
[  215.305880][T28140] sd 0:0:1:0: device reset
[  215.456421][T28159] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub
[  216.321418][T28181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  216.349493][T28181] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  216.375543][T28181] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6515'.
[  216.397920][ T3394] hid_parser_main: 22 callbacks suppressed
[  216.397938][ T3394] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0
[  216.411209][ T3394] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0
[  216.418580][ T3394] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0
[  216.428806][ T3394] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0
[  216.436252][ T3394] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0
[  216.443677][ T3394] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0
[  216.451153][ T3394] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0
[  216.458516][ T3394] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0
[  216.465926][ T3394] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0
[  216.473453][ T3394] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0
[  216.517536][ T3394] hid-generic 0000:0000:0000.0015: hidraw0: <UNKNOWN> HID v8.00 Device [syz0] on syz0
[  216.600696][   T29] kauditd_printk_skb: 46 callbacks suppressed
[  216.600711][   T29] audit: type=1400 audit(1764035041.992:7912): avc:  denied  { create } for  pid=28217 comm="syz.2.6524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  216.627094][   T29] audit: type=1400 audit(1764035042.002:7913): avc:  denied  { write } for  pid=28217 comm="syz.2.6524" path="socket:[62935]" dev="sockfs" ino=62935 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  216.785639][T28239] sd 0:0:1:0: device reset
[  216.979939][T28259] SELinux:  Context system_u:object_r:systemd_systemctl_exec_t:s0 is not valid (left unmapped).
[  216.999820][   T29] audit: type=1400 audit(1764035042.402:7914): avc:  denied  { relabelto } for  pid=28258 comm="syz.2.6535" name="bus" dev="tmpfs" ino=1532 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:systemd_systemctl_exec_t:s0"
[  217.027432][   T29] audit: type=1400 audit(1764035042.402:7915): avc:  denied  { associate } for  pid=28258 comm="syz.2.6535" name="bus" dev="tmpfs" ino=1532 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:systemd_systemctl_exec_t:s0"
[  217.132154][   T29] audit: type=1400 audit(1764035042.522:7916): avc:  denied  { unlink } for  pid=23426 comm="syz-executor" name="bus" dev="tmpfs" ino=1532 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:systemd_systemctl_exec_t:s0"
[  217.297604][   T29] audit: type=1400 audit(1764035042.702:7917): avc:  denied  { bind } for  pid=28290 comm="syz.0.6547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  222.389780][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  230.131270][ T9940] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  230.141648][ T9940] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  230.142591][   T29] audit: type=1400 audit(1764035055.552:7918): avc:  denied  { mounton } for  pid=28300 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[  230.152045][ T9940] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  230.232756][ T9940] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  230.243136][ T9940] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  230.253460][ T9940] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  230.306694][ T9940] team0: Port device netdevsim1 removed
[  230.313381][ T9940] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  230.323662][ T9940] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  230.333934][ T9940] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  230.347190][T28300] chnl_net:caif_netlink_parms(): no params data found
[  230.382007][T28300] bridge0: port 1(bridge_slave_0) entered blocking state
[  230.389051][T28300] bridge0: port 1(bridge_slave_0) entered disabled state
[  230.396309][T28300] bridge_slave_0: entered allmulticast mode
[  230.402891][T28300] bridge_slave_0: entered promiscuous mode
[  230.412407][T28300] bridge0: port 2(bridge_slave_1) entered blocking state
[  230.419422][T28300] bridge0: port 2(bridge_slave_1) entered disabled state
[  230.426795][T28300] bridge_slave_1: entered allmulticast mode
[  230.433546][T28300] bridge_slave_1: entered promiscuous mode
[  230.450854][T28300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  230.460944][T28300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  230.483033][T28300] team0: Port device team_slave_0 added
[  230.489516][T28300] team0: Port device team_slave_1 added
[  230.509721][T28300] batman_adv: batadv0: Adding interface: batadv_slave_0
[  230.516658][T28300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  230.542650][T28300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  230.556339][T28300] batman_adv: batadv0: Adding interface: batadv_slave_1
[  230.563409][T28300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  230.589312][T28300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  230.627383][   T29] audit: type=1400 audit(1764035056.032:7919): avc:  denied  { sqpoll } for  pid=28543 comm="syz.0.6559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  230.675699][T28553] loop8: detected capacity change from 0 to 764
[  230.692939][T28300] hsr_slave_0: entered promiscuous mode
[  230.707831][   T29] audit: type=1326 audit(1764035056.112:7920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28583 comm="syz.2.6555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f42cf8265e7 code=0x7ffc0000
[  230.708469][T28300] hsr_slave_1: entered promiscuous mode
[  230.731412][   T29] audit: type=1326 audit(1764035056.112:7921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28583 comm="syz.2.6555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f42cf7cb829 code=0x7ffc0000
[  230.741837][T28300] debugfs: 'hsr0' already exists in 'hsr'
[  230.764903][   T29] audit: type=1326 audit(1764035056.112:7922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28583 comm="syz.2.6555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f42cf8265e7 code=0x7ffc0000
[  230.766116][T28300] Cannot create hsr debugfs directory
[  230.789495][   T29] audit: type=1326 audit(1764035056.112:7923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28583 comm="syz.2.6555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f42cf7cb829 code=0x7ffc0000
[  230.818649][   T29] audit: type=1326 audit(1764035056.112:7924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28583 comm="syz.2.6555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42cf82f749 code=0x7ffc0000
[  230.842343][   T29] audit: type=1326 audit(1764035056.112:7925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28583 comm="syz.2.6555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42cf82f749 code=0x7ffc0000
[  230.873379][   T29] audit: type=1326 audit(1764035056.202:7926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28583 comm="syz.2.6555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f42cf82f749 code=0x7ffc0000
[  230.896928][   T29] audit: type=1326 audit(1764035056.202:7927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28583 comm="syz.2.6555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42cf82f749 code=0x7ffc0000
[  230.929317][ T9940] bridge_slave_1: left allmulticast mode
[  230.935048][ T9940] bridge_slave_1: left promiscuous mode
[  230.940696][ T9940] bridge0: port 2(bridge_slave_1) entered disabled state
[  230.966018][ T9940] bridge_slave_0: left allmulticast mode
[  230.971865][ T9940] bridge_slave_0: left promiscuous mode
[  230.977623][ T9940] bridge0: port 1(bridge_slave_0) entered disabled state
[  231.111266][ T9940] bond1 (unregistering): (slave geneve2): Releasing active interface
[  231.162632][ T9940] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  231.174911][ T9940] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  231.187340][ T9940] bond0 (unregistering): Released all slaves
[  231.202425][ T9940] bond1 (unregistering): Released all slaves
[  231.302192][ T9940] hsr_slave_0: left promiscuous mode
[  231.310762][ T9940] hsr_slave_1: left promiscuous mode
[  231.324784][ T9940] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  231.332312][ T9940] batman_adv: batadv0: Removing interface: batadv_slave_0
[  231.364196][ T9940] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  231.371696][ T9940] batman_adv: batadv0: Removing interface: batadv_slave_1
[  231.401902][ T9940] veth1_macvtap: left promiscuous mode
[  231.414111][ T9940] veth0_macvtap: left promiscuous mode
[  231.426317][ T9940] veth1_vlan: left promiscuous mode
[  231.600019][ T9940] team0 (unregistering): Port device team_slave_1 removed
[  231.610426][ T9940] team0 (unregistering): Port device team_slave_0 removed
[  232.003131][T28300] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  232.022566][T28300] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  232.032421][T28300] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  232.052492][T28300] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  232.145633][T28300] 8021q: adding VLAN 0 to HW filter on device bond0
[  232.181856][T28300] 8021q: adding VLAN 0 to HW filter on device team0
[  232.191682][ T9951] bridge0: port 1(bridge_slave_0) entered blocking state
[  232.198788][ T9951] bridge0: port 1(bridge_slave_0) entered forwarding state
[  232.223453][ T9913] bridge0: port 2(bridge_slave_1) entered blocking state
[  232.230547][ T9913] bridge0: port 2(bridge_slave_1) entered forwarding state
[  232.258210][T28300] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  232.268616][T28300] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  232.335145][T28300] 8021q: adding VLAN 0 to HW filter on device batadv0
[  232.471083][T28300] veth0_vlan: entered promiscuous mode
[  232.478990][T28300] veth1_vlan: entered promiscuous mode
[  232.494381][T28300] veth0_macvtap: entered promiscuous mode
[  232.502180][T28300] veth1_macvtap: entered promiscuous mode
[  232.520983][T28300] batman_adv: batadv0: Interface activated: batadv_slave_0
[  232.532007][T28300] batman_adv: batadv0: Interface activated: batadv_slave_1
[  232.542677][ T9951] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  232.557630][ T9951] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  232.594985][ T9951] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  232.611882][ T9951] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  232.687336][T28811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  232.699083][T28807] netlink: 'syz.0.6598': attribute type 5 has an invalid length.
[  232.715683][T28811] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  232.749018][T28811] __nla_validate_parse: 1 callbacks suppressed
[  232.749065][T28811] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6549'.
[  232.957763][T28851] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6606'.
[  233.301559][T28870] ip6_tunnel: non-ECT from 2001:0000:0000:0000:0000:0000:0000:0001 with DS=0x7
[  233.740533][T28934] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6636'.
[  233.766270][T28934] netem: change failed
[  234.410559][T29025] netlink: 'syz.6.6677': attribute type 83 has an invalid length.
[  234.434405][T29018] loop8: detected capacity change from 0 to 8192
[  234.488899][T29038] netlink: 124 bytes leftover after parsing attributes in process `syz.2.6679'.
[  234.498016][T29038] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6679'.
[  234.520765][T29042] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6680'.
[  234.580901][T29052] atomic_op ffff888116d05128 conn xmit_atomic 0000000000000000
[  234.600415][T29046] bridge0: port 2(bridge_slave_1) entered disabled state
[  234.607650][T29046] bridge0: port 1(bridge_slave_0) entered disabled state
[  234.692089][T29064] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  234.727432][T29046] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  234.747710][T29046] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  234.815750][ T9938] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  234.839829][ T9938] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  234.864830][ T9938] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  234.880981][ T9938] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  234.916903][T29079] netlink: 176 bytes leftover after parsing attributes in process `syz.8.6694'.
[  235.196592][   T29] kauditd_printk_skb: 216 callbacks suppressed
[  235.196607][   T29] audit: type=1400 audit(1764035060.602:8144): avc:  denied  { bind } for  pid=29100 comm="syz.8.6703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  235.222200][   T29] audit: type=1400 audit(1764035060.602:8145): avc:  denied  { name_bind } for  pid=29100 comm="syz.8.6703" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  235.244163][   T29] audit: type=1400 audit(1764035060.602:8146): avc:  denied  { node_bind } for  pid=29100 comm="syz.8.6703" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1
[  235.272014][T29097] netlink: 'syz.2.6701': attribute type 3 has an invalid length.
[  235.299041][   T29] audit: type=1400 audit(1764035060.692:8147): avc:  denied  { name_connect } for  pid=29100 comm="syz.8.6703" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  235.348718][   T29] audit: type=1400 audit(1764035060.752:8148): avc:  denied  { setopt } for  pid=29104 comm="syz.2.6705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  235.369949][   T29] audit: type=1400 audit(1764035060.772:8149): avc:  denied  { write } for  pid=29104 comm="syz.2.6705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  235.409075][   T29] audit: type=1400 audit(1764035060.812:8150): avc:  denied  { create } for  pid=29106 comm="syz.6.6706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  235.430853][   T29] audit: type=1400 audit(1764035060.842:8151): avc:  denied  { setopt } for  pid=29106 comm="syz.6.6706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  235.450545][   T29] audit: type=1400 audit(1764035060.842:8152): avc:  denied  { connect } for  pid=29106 comm="syz.6.6706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  235.470312][   T29] audit: type=1400 audit(1764035060.842:8153): avc:  denied  { write } for  pid=29106 comm="syz.6.6706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  235.580373][T29114] siw: device registration error -23
[  235.687688][T29118] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6710'.
[  235.957889][T29148] sch_tbf: burst 19360 is lower than device lo mtu (65550) !
[  235.983286][T29151] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6721'.
[  236.175119][T29195] macsec1: entered promiscuous mode
[  236.180390][T29195] bridge0: entered promiscuous mode
[  236.196053][T29195] bridge0: port 3(macsec1) entered blocking state
[  236.202676][T29195] bridge0: port 3(macsec1) entered disabled state
[  236.214849][T29195] macsec1: entered allmulticast mode
[  236.220179][T29195] bridge0: entered allmulticast mode
[  236.230257][T29195] macsec1: left allmulticast mode
[  236.235342][T29195] bridge0: left allmulticast mode
[  236.244470][T29195] bridge0: left promiscuous mode
[  236.365160][T29219] netlink: 96 bytes leftover after parsing attributes in process `syz.6.6746'.
[  236.579894][T29239] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0'
[  236.709067][T29249] netlink: 'syz.6.6760': attribute type 10 has an invalid length.
[  236.740992][T29249] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  236.849492][T29255] loop6: detected capacity change from 0 to 512
[  236.871648][T29257] 8021q: adding VLAN 0 to HW filter on device bond1
[  236.894410][T29257] bond1: (slave macvlan1): Enslaving as an active interface with an up link
[  236.917106][T29255] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  236.939876][T29255] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  236.969319][T29300] netlink: 'syz.8.6768': attribute type 12 has an invalid length.
[  236.990691][T28300] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  236.999757][T29304] netlink: 'syz.2.6769': attribute type 5 has an invalid length.
[  237.224337][T29328] rdma_op ffff888116d05980 conn xmit_rdma 0000000000000000
[  237.483883][T29372] netlink: zone id is out of range
[  237.489055][T29372] netlink: zone id is out of range
[  237.504324][T29372] netlink: zone id is out of range
[  237.509437][T29372] netlink: zone id is out of range
[  237.519878][T29372] netlink: del zone limit has 8 unknown bytes
[  238.340816][T29447] loop8: detected capacity change from 0 to 164
[  238.364331][ T9913] bridge_slave_1: left allmulticast mode
[  238.370125][ T9913] bridge_slave_1: left promiscuous mode
[  238.375845][ T9913] bridge0: port 2(bridge_slave_1) entered disabled state
[  238.390828][T29447] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  238.410823][ T9913] bridge_slave_0: left allmulticast mode
[  238.416481][ T9913] bridge_slave_0: left promiscuous mode
[  238.422256][ T9913] bridge0: port 1(bridge_slave_0) entered disabled state
[  238.440820][T29447] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  238.452315][T29447] Symlink component flag not implemented
[  238.457949][T29447] Symlink component flag not implemented
[  238.476240][T29447] Symlink component flag not implemented (7)
[  238.482305][T29447] Symlink component flag not implemented (116)
[  238.511948][ T9913] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  238.521333][ T9913] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  238.540276][ T9913] bond0 (unregistering): Released all slaves
[  238.662164][ T9913] hsr_slave_0: left promiscuous mode
[  238.670153][ T9913] hsr_slave_1: left promiscuous mode
[  238.687895][ T9913] batman_adv: batadv0: Removing interface: batadv_slave_0
[  238.701892][ T9913] batman_adv: batadv0: Removing interface: batadv_slave_1
[  238.767231][ T9913] team0 (unregistering): Port device team_slave_1 removed
[  238.784223][T29489] __nla_validate_parse: 4 callbacks suppressed
[  238.784235][T29489] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6830'.
[  238.799901][ T9913] team0 (unregistering): Port device team_slave_0 removed
[  239.004154][T29435] chnl_net:caif_netlink_parms(): no params data found
[  239.071869][T29435] bridge0: port 1(bridge_slave_0) entered blocking state
[  239.078982][T29435] bridge0: port 1(bridge_slave_0) entered disabled state
[  239.101426][T29435] bridge_slave_0: entered allmulticast mode
[  239.108088][T29435] bridge_slave_0: entered promiscuous mode
[  239.115652][T29435] bridge0: port 2(bridge_slave_1) entered blocking state
[  239.122738][T29435] bridge0: port 2(bridge_slave_1) entered disabled state
[  239.130422][T29435] bridge_slave_1: entered allmulticast mode
[  239.137173][T29435] bridge_slave_1: entered promiscuous mode
[  239.171919][T29435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  239.181591][T29640] SELinux: failed to load policy
[  239.187945][T29435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  239.212138][T29435] team0: Port device team_slave_0 added
[  239.223170][T29435] team0: Port device team_slave_1 added
[  239.246178][T29435] batman_adv: batadv0: Adding interface: batadv_slave_0
[  239.253158][T29435] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  239.279053][T29435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  239.294680][T29435] batman_adv: batadv0: Adding interface: batadv_slave_1
[  239.301670][T29435] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  239.327721][T29435] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  239.362243][T29435] hsr_slave_0: entered promiscuous mode
[  239.368521][T29435] hsr_slave_1: entered promiscuous mode
[  239.374882][T29435] debugfs: 'hsr0' already exists in 'hsr'
[  239.380629][T29435] Cannot create hsr debugfs directory
[  239.425999][T29790] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) !
[  239.471430][T29435] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  239.481764][T29435] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  239.532701][T29435] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  239.543122][T29435] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  239.623274][T29435] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  239.633671][T29435] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  239.703888][T29435] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  239.714333][T29435] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  239.752640][T29866] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6855'.
[  239.790368][T29435] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  239.799531][T29435] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  239.809044][T29435] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  239.818503][T29435] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  239.852772][T29435] 8021q: adding VLAN 0 to HW filter on device bond0
[  239.864458][T29435] 8021q: adding VLAN 0 to HW filter on device team0
[  239.875497][ T9951] bridge0: port 1(bridge_slave_0) entered blocking state
[  239.882601][ T9951] bridge0: port 1(bridge_slave_0) entered forwarding state
[  239.901834][ T9932] bridge0: port 2(bridge_slave_1) entered blocking state
[  239.908997][ T9932] bridge0: port 2(bridge_slave_1) entered forwarding state
[  239.942611][T29906] hub 2-0:1.0: USB hub found
[  239.951966][T29906] hub 2-0:1.0: 8 ports detected
[  240.026481][T29435] 8021q: adding VLAN 0 to HW filter on device batadv0
[  240.168469][T29945] ALSA: seq fatal error: cannot create timer (-19)
[  240.207855][T29435] veth0_vlan: entered promiscuous mode
[  240.225813][T29435] veth1_vlan: entered promiscuous mode
[  240.250080][T29435] veth0_macvtap: entered promiscuous mode
[  240.260402][T29435] veth1_macvtap: entered promiscuous mode
[  240.271624][T29435] batman_adv: batadv0: Interface activated: batadv_slave_0
[  240.283073][T29435] batman_adv: batadv0: Interface activated: batadv_slave_1
[  240.302818][ T9932] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  240.314586][ T9932] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  240.330517][   T29] kauditd_printk_skb: 84 callbacks suppressed
[  240.330530][   T29] audit: type=1400 audit(2000000004.189:8238): avc:  denied  { mounton } for  pid=29435 comm="syz-executor" path="/root/syzkaller.ef7dJS/syz-tmp" dev="sda1" ino=2079 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[  240.340063][ T9932] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  240.364582][   T29] audit: type=1400 audit(2000000004.219:8239): avc:  denied  { mount } for  pid=29435 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  240.391954][   T29] audit: type=1400 audit(2000000004.219:8240): avc:  denied  { mount } for  pid=29435 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  240.413980][   T29] audit: type=1400 audit(2000000004.219:8241): avc:  denied  { mounton } for  pid=29435 comm="syz-executor" path="/root/syzkaller.ef7dJS/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[  240.440892][   T29] audit: type=1400 audit(2000000004.219:8242): avc:  denied  { mounton } for  pid=29435 comm="syz-executor" path="/root/syzkaller.ef7dJS/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=66916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[  240.469995][   T29] audit: type=1400 audit(2000000004.319:8243): avc:  denied  { mounton } for  pid=29435 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[  240.493085][   T29] audit: type=1400 audit(2000000004.329:8244): avc:  denied  { mount } for  pid=29435 comm="syz-executor" name="/" dev="gadgetfs" ino=4018 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  240.526024][ T9938] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  240.543166][   T29] audit: type=1400 audit(2000000004.399:8245): avc:  denied  { add_name } for  pid=29435 comm="syz-executor" name="syz9" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0"
[  240.567930][   T29] audit: type=1400 audit(2000000004.399:8246): avc:  denied  { create } for  pid=29435 comm="syz-executor" name="syz9" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  240.588329][   T29] audit: type=1400 audit(2000000004.399:8247): avc:  denied  { associate } for  pid=29435 comm="syz-executor" name="syz9" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  241.612692][T30002] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6892'.
[  241.891322][T30048] sd 0:0:1:0: device reset
[  241.960878][T30053] random: crng reseeded on system resumption
[  241.999805][T30056] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6914'.
[  242.008766][T30056] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6914'.
[  242.083158][T30069] netlink: 'syz.3.6921': attribute type 1 has an invalid length.
[  242.104922][T30067] hub 2-0:1.0: USB hub found
[  242.114529][T30067] hub 2-0:1.0: 8 ports detected
[  242.186626][T30087] bridge_slave_0: left allmulticast mode
[  242.192390][T30087] bridge_slave_0: left promiscuous mode
[  242.198058][T30087] bridge0: port 1(bridge_slave_0) entered disabled state
[  242.217118][T30087] bridge_slave_1: left allmulticast mode
[  242.223087][T30087] bridge_slave_1: left promiscuous mode
[  242.228771][T30087] bridge0: port 2(bridge_slave_1) entered disabled state
[  242.254957][T30087] bond0: (slave bond_slave_0): Releasing backup interface
[  242.273441][T30087] bond0: (slave bond_slave_1): Releasing backup interface
[  242.306590][T30087] team0: Port device team_slave_0 removed
[  242.318903][T30087] team0: Port device team_slave_1 removed
[  242.326607][T30087] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  242.334026][T30087] batman_adv: batadv0: Removing interface: batadv_slave_0
[  242.344599][T30087] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  242.352048][T30087] batman_adv: batadv0: Removing interface: batadv_slave_1
[  242.373572][T30087] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  242.412363][T30101] team0: Mode changed to "loadbalance"
[  242.568448][T30142] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6946'.
[  242.676795][T30148] SELinux: failed to load policy
[  242.949163][T30171] bridge_slave_0: left allmulticast mode
[  242.954983][T30171] bridge_slave_0: left promiscuous mode
[  242.960773][T30171] bridge0: port 1(bridge_slave_0) entered disabled state
[  242.992921][T30171] bridge_slave_1: left allmulticast mode
[  242.998570][T30171] bridge_slave_1: left promiscuous mode
[  243.004237][T30171] bridge0: port 2(bridge_slave_1) entered disabled state
[  243.023269][T30171] bond0: (slave bond_slave_0): Releasing backup interface
[  243.036009][T30171] bond0: (slave bond_slave_1): Releasing backup interface
[  243.068823][T30171] team0: Port device team_slave_0 removed
[  243.092618][T30171] team0: Port device team_slave_1 removed
[  243.099349][T30171] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  243.106752][T30171] batman_adv: batadv0: Removing interface: batadv_slave_0
[  243.131838][T30171] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  243.139316][T30171] batman_adv: batadv0: Removing interface: batadv_slave_1
[  243.184875][T30174] team0: Mode changed to "loadbalance"
[  243.238554][T30178] netlink: 'syz.8.6958': attribute type 1 has an invalid length.
[  243.292164][T30180] loop8: detected capacity change from 0 to 512
[  243.309999][T30180] EXT4-fs: Ignoring removed bh option
[  243.321954][T30183] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6960'.
[  243.338540][T30180] EXT4-fs error (device loop8): ext4_iget_extra_inode:5075: inode #15: comm syz.8.6959: corrupted in-inode xattr: invalid ea_ino
[  243.362643][T30180] EXT4-fs error (device loop8): ext4_orphan_get:1397: comm syz.8.6959: couldn't read orphan inode 15 (err -117)
[  243.364286][T30183] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6960'.
[  243.416991][T30180] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  243.485530][T21616] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  244.080938][T30230] netlink: 44 bytes leftover after parsing attributes in process `syz.8.6978'.
[  244.269468][T30254] netlink: 'syz.2.6986': attribute type 1 has an invalid length.
[  244.279741][T30251] nfs: Unknown parameter '0
[  244.279741][T30251] 0
[  244.279741][T30251] 0
[  244.279741][T30251] 0
[  244.279741][T30251] 0
[  244.279741][T30251] 0
[  244.279741][T30251] 0
[  244.279741][T30251] 0
[  244.279741][T30251] 0
[  244.279741][T30251] 0
[  244.279741][T30251] 0
[  244.279741][T30251] 0
[  244.279741][T30251] 0
[  244.279741][T30251] 0
[  244.279741][T30251] 0
[  244.279741][T30251] 0
[  244.279741][T30251] 0
[  244.279741][T30251] 0
[  244.279741][T30251] 0
[  244.279741][T30251] 0
[  244.279741][T30251] 0
[  244.279741][T30251] 0
[  244.279741][T30251] 0
[  244.279741][T30251] 0
[  244.279741][T30251] 0
[  244.279741][T30251] 0
[  244.279741][T30251] 0
[  244.279741][T30251] 0
[  244.279741][T30251] 0
[  244.279741][T30251] 0
[  244.279741][T30251] 0
[  244.279741][T30251] 0
[  244.279741][T30251] 0
[  244.279741][T30251] 0
[  244.279741][T30251] 0
[  244.279741][T30251] 0
[  244.279741][T30251] 0
[  244.279741][T30251] 0
[  244.279741][T30251] 0
[  244.279741][T30251] 0
[  244.279741][T30251] 0
[  244.279741][T30251] 0
[  244.279741][T30251] 0
[  244.279741][T30251] 0
[  244.279741][T30251] 0
[  244.279741][T30251] 0
[  244.279741][T30251] 0
[  244.279741][T30251] 0
[  244.279741][T30251] 0
[  244.279741][T30251] 0
[  244.279741][T30251] 0
[  244.279741][T30251] 0
[  244.279741][T30251] 0
[  244.279741][T30251] 0
[  244.279741][T30251] 0
[  244.279741][T30251] 0
[  244.279741][T30251] 0
[  244.279741][T30251] 0
[  244.279741][T30251] 0
[  244.279741][T30251] 0
[  244.279741][T30251] 0
[  244.279741][T30251] 0
[  244.279741][T30251] 0
[  244.279741][T30251] 0
[  244.279741][T30251] 0
[  244.279741][T30251] 0
[  244.279741][T30251] 0
[  244.279741][T30251] 0
[  244.279741][T30251] 0
[  244.279741][T30251] 0
[  244.279741][T30251] 0
[  244.279741][T30251] 0
[  244.279741][T30251] 0
[  244.279741][T30251] 0
[  244.279741][T30251] 0
[  244.279741][T30251] 0
[  244.279741][T30251] 0
[  244.279741][T30251] 0
[  244.279741][T30251] 0
[  244.279741][T30251] 0
[  244.509342][T30254] 8021q: adding VLAN 0 to HW filter on device bond2
[  244.526547][T30298] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6989'.
[  244.557653][T30298] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6989'.
[  244.660536][T30307] loop9: detected capacity change from 0 to 256
[  244.669052][T30307] FAT-fs (loop9): bogus number of FAT sectors
[  244.675149][T30307] FAT-fs (loop9): Can't find a valid FAT filesystem
[  244.727151][T30318] netlink: 28 bytes leftover after parsing attributes in process `+}[@'.
[  244.735633][T30318] netlink: 32 bytes leftover after parsing attributes in process `+}[@'.
[  244.744147][T30318] netlink: 28 bytes leftover after parsing attributes in process `+}[@'.
[  244.777277][T30318] netlink: 32 bytes leftover after parsing attributes in process `+}[@'.
[  244.865471][T30324] netlink: 96 bytes leftover after parsing attributes in process `syz.8.6998'.
[  244.879394][ T3394] hid_parser_main: 19 callbacks suppressed
[  244.879414][ T3394] hid-generic 0003:0004:0000.0016: unknown main item tag 0x0
[  244.892690][ T3394] hid-generic 0003:0004:0000.0016: unknown main item tag 0x0
[  244.900112][ T3394] hid-generic 0003:0004:0000.0016: unknown main item tag 0x0
[  244.907729][ T3394] hid-generic 0003:0004:0000.0016: unknown main item tag 0x0
[  244.915339][ T3394] hid-generic 0003:0004:0000.0016: unknown main item tag 0x0
[  244.922774][ T3394] hid-generic 0003:0004:0000.0016: unknown main item tag 0x0
[  244.930278][ T3394] hid-generic 0003:0004:0000.0016: unknown main item tag 0x0
[  244.937723][ T3394] hid-generic 0003:0004:0000.0016: unknown main item tag 0x0
[  244.945112][ T3394] hid-generic 0003:0004:0000.0016: unknown main item tag 0x0
[  244.952516][ T3394] hid-generic 0003:0004:0000.0016: unknown main item tag 0x0
[  244.982829][ T3394] hid-generic 0003:0004:0000.0016: hidraw0: USB HID v0.00 Device [syz0] on syz1
[  245.089305][T30356] sch_tbf: burst 3298 is lower than device lo mtu (11337746) !
[  245.490222][   T29] kauditd_printk_skb: 126 callbacks suppressed
[  245.490235][   T29] audit: type=1400 audit(2000000009.349:8374): avc:  denied  { read write } for  pid=30423 comm="syz.9.7033" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  245.520173][   T29] audit: type=1400 audit(2000000009.349:8375): avc:  denied  { open } for  pid=30423 comm="syz.9.7033" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  245.545775][T30424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  245.564450][T30424] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  245.582058][   T29] audit: type=1400 audit(2000000009.399:8376): avc:  denied  { ioctl } for  pid=30423 comm="syz.9.7033" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  245.673140][   T29] audit: type=1400 audit(2000000009.529:8377): avc:  denied  { bind } for  pid=30437 comm="syz.0.7037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  245.692661][   T29] audit: type=1400 audit(2000000009.529:8378): avc:  denied  { node_bind } for  pid=30437 comm="syz.0.7037" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[  245.750969][T30442] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7038'.
[  245.766046][   T29] audit: type=1400 audit(2000000009.619:8379): avc:  denied  { remount } for  pid=30441 comm="syz.2.7038" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  245.837047][   T29] audit: type=1326 audit(2000000009.689:8380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30450 comm="syz.0.7043" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa395d9f749 code=0x0
[  246.238620][   T29] audit: type=1326 audit(2000000010.089:8381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30487 comm="syz.2.7048" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f42cf82f749 code=0x0
[  246.425887][T30503] netlink: 32 bytes leftover after parsing attributes in process `syz.9.7054'.
[  246.510451][T30513] netlink: zone id is out of range
[  246.515597][T30513] netlink: zone id is out of range
[  246.534019][T30513] netlink: zone id is out of range
[  246.544428][T30513] netlink: del zone limit has 8 unknown bytes
[  246.613161][T30518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  246.623264][T30518] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  246.640217][T30514] loop9: detected capacity change from 0 to 8192
[  246.670106][T30514]  loop9: p4 < >
[  246.756256][T30533] sch_tbf: peakrate 7 is lower than or equals to rate 19 !
[  246.974643][   T29] audit: type=1400 audit(2000000010.829:8382): avc:  denied  { create } for  pid=30570 comm="syz.9.7078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  246.994205][   T29] audit: type=1400 audit(2000000010.829:8383): avc:  denied  { setopt } for  pid=30570 comm="syz.9.7078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  247.044274][T30576] netem: change failed
[  247.144978][T30598] netlink: 'syz.9.7090': attribute type 1 has an invalid length.
[  247.166172][T30598] 8021q: adding VLAN 0 to HW filter on device bond1
[  247.201853][T30598] bond1 (unregistering): Released all slaves
[  247.360651][T30697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  247.391673][T30697] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  247.585267][T30741] sd 0:0:1:0: device reset
[  247.658759][T30753] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=30753 comm=syz.0.7124
[  247.763563][T30773] netlink: zone id is out of range
[  247.768679][T30773] netlink: zone id is out of range
[  247.774137][T30773] netlink: zone id is out of range
[  247.779338][T30773] netlink: del zone limit has 8 unknown bytes
[  247.942017][T30781] netem: change failed
[  248.413933][T30840] sch_tbf: peakrate 7 is lower than or equals to rate 19 !
[  248.501622][ T9951] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  248.523819][ T9951] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  248.535838][ T9951] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  248.545205][ T9951] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  248.592707][T30869] loop9: detected capacity change from 0 to 4096
[  248.602975][T30869] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  248.997405][T29435] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  249.086475][T30919] ipip0: entered promiscuous mode
[  249.179534][T30929] loop8: detected capacity change from 0 to 4096
[  249.197752][T30929] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  249.365910][T30946] __nla_validate_parse: 12 callbacks suppressed
[  249.365925][T30946] netlink: 96 bytes leftover after parsing attributes in process `syz.0.7199'.
[  249.461310][T21616] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  249.506870][T30960] loop8: detected capacity change from 0 to 512
[  249.529806][T30960] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  249.549748][T30960] ext4 filesystem being mounted at /462/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  249.593261][T21616] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  249.708609][T30982] loop8: detected capacity change from 0 to 164
[  249.727316][T30982] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  249.773573][T30982] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  249.790542][T30982] Symlink component flag not implemented
[  249.796208][T30982] Symlink component flag not implemented
[  249.816449][T30982] Symlink component flag not implemented (7)
[  249.822481][T30982] Symlink component flag not implemented (116)
[  250.398404][T31028] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  250.517116][   T29] kauditd_printk_skb: 111 callbacks suppressed
[  250.517177][   T29] audit: type=1326 audit(2000000014.369:8495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31043 comm="syz.0.7228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa395d9f749 code=0x7ffc0000
[  250.546868][   T29] audit: type=1326 audit(2000000014.369:8496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31043 comm="syz.0.7228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa395d9f749 code=0x7ffc0000
[  250.570460][   T29] audit: type=1326 audit(2000000014.369:8497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31043 comm="syz.0.7228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa395d9f749 code=0x7ffc0000
[  250.593968][   T29] audit: type=1326 audit(2000000014.369:8498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31043 comm="syz.0.7228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa395d9f749 code=0x7ffc0000
[  250.617514][   T29] audit: type=1326 audit(2000000014.369:8499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31043 comm="syz.0.7228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa395d9f749 code=0x7ffc0000
[  250.799720][   T29] audit: type=1326 audit(2000000014.479:8500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31043 comm="syz.0.7228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa395d9f749 code=0x7ffc0000
[  250.823371][   T29] audit: type=1326 audit(2000000014.479:8501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31043 comm="syz.0.7228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa395d9f749 code=0x7ffc0000
[  250.846911][   T29] audit: type=1326 audit(2000000014.479:8502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31043 comm="syz.0.7228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa395d9f749 code=0x7ffc0000
[  250.870529][   T29] audit: type=1326 audit(2000000014.479:8503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31043 comm="syz.0.7228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa395d9f749 code=0x7ffc0000
[  250.894047][   T29] audit: type=1326 audit(2000000014.479:8504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31043 comm="syz.0.7228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa395d9f749 code=0x7ffc0000
[  250.944612][ T9925] bond1 (unregistering): (slave bridge1): Releasing active interface
[  251.122894][ T9925] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  251.134759][ T9925] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  251.153390][ T9925] bond0 (unregistering): Released all slaves
[  251.174852][ T9925] bond1 (unregistering): Released all slaves
[  251.318759][ T9925] batman_adv: batadv0: Removing interface: batadv_slave_0
[  251.333183][ T9925] batman_adv: batadv0: Removing interface: batadv_slave_1
[  251.411187][ T9925] team0 (unregistering): Port device team_slave_1 removed
[  251.432735][ T9925] team0 (unregistering): Port device team_slave_0 removed
[  251.459787][ T9947] smc: removing ib device syz0
[  251.690880][T31046] chnl_net:caif_netlink_parms(): no params data found
[  251.828789][T31046] bridge0: port 1(bridge_slave_0) entered blocking state
[  251.830802][T31290] netlink: 228 bytes leftover after parsing attributes in process `syz.0.7267'.
[  251.835986][T31046] bridge0: port 1(bridge_slave_0) entered disabled state
[  251.852121][T31046] bridge_slave_0: entered allmulticast mode
[  251.859109][T31046] bridge_slave_0: entered promiscuous mode
[  251.868850][T31046] bridge0: port 2(bridge_slave_1) entered blocking state
[  251.875938][T31046] bridge0: port 2(bridge_slave_1) entered disabled state
[  251.883090][T31046] bridge_slave_1: entered allmulticast mode
[  251.889455][T31046] bridge_slave_1: entered promiscuous mode
[  251.931720][T31046] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  251.942998][ T9925] IPVS: stop unused estimator thread 0...
[  251.955032][T31046] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  251.993165][T31300] loop9: detected capacity change from 0 to 8192
[  252.007240][T31046] team0: Port device team_slave_0 added
[  252.014018][T31046] team0: Port device team_slave_1 added
[  252.038214][T31046] batman_adv: batadv0: Adding interface: batadv_slave_0
[  252.045207][T31046] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  252.059856][T31336] SELinux: failed to load policy
[  252.071118][T31046] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  252.087682][T31300]  loop9: p1 < > p2 p4 < p5 >
[  252.092398][T31300] loop9: partition table partially beyond EOD, truncated
[  252.099668][T31300] loop9: p1 start 134217728 is beyond EOD, truncated
[  252.106465][T31300] loop9: p2 size 591360 extends beyond EOD, truncated
[  252.118982][T31398] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7262'.
[  252.120138][T31046] batman_adv: batadv0: Adding interface: batadv_slave_1
[  252.134868][T31046] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  252.154226][T31300] loop9: p5 size 591360 extends beyond EOD, truncated
[  252.160887][T31046] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  252.179113][T31398] netlink: 121 bytes leftover after parsing attributes in process `syz.3.7262'.
[  252.230314][T31419] netlink: 'syz.2.7265': attribute type 10 has an invalid length.
[  252.238197][T31421] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  252.270538][T31419] team0: Port device dummy0 added
[  252.283013][T31419] netlink: 'syz.2.7265': attribute type 10 has an invalid length.
[  252.305217][T31046] hsr_slave_0: entered promiscuous mode
[  252.311985][T31046] hsr_slave_1: entered promiscuous mode
[  252.317758][T31046] debugfs: 'hsr0' already exists in 'hsr'
[  252.323594][T31046] Cannot create hsr debugfs directory
[  252.330625][T31419] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  252.344684][T31419] team0: Failed to send options change via netlink (err -105)
[  252.352557][T31419] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  252.361659][T31419] team0: Port device dummy0 removed
[  252.370780][T31419] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  252.513939][T31568] netlink: 172 bytes leftover after parsing attributes in process `syz.9.7274'.
[  252.558554][T31578] pimreg: entered allmulticast mode
[  252.580725][T31578] pimreg: left allmulticast mode
[  252.648688][T31602] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7281'.
[  252.691892][T31611] netlink: 228 bytes leftover after parsing attributes in process `syz.9.7284'.
[  252.773538][T31632] netlink: 180 bytes leftover after parsing attributes in process `syz.9.7286'.
[  252.831933][T31046] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  252.845332][T31632] xt_time: unknown flags 0xf4
[  252.852260][T31046] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  252.888609][T31046] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  252.911843][T31046] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  253.025604][T31046] 8021q: adding VLAN 0 to HW filter on device bond0
[  253.040357][T31046] 8021q: adding VLAN 0 to HW filter on device team0
[  253.053654][ T9928] bridge0: port 1(bridge_slave_0) entered blocking state
[  253.060777][ T9928] bridge0: port 1(bridge_slave_0) entered forwarding state
[  253.083325][ T9928] bridge0: port 2(bridge_slave_1) entered blocking state
[  253.090423][ T9928] bridge0: port 2(bridge_slave_1) entered forwarding state
[  253.152587][T31046] 8021q: adding VLAN 0 to HW filter on device batadv0
[  253.266886][T31046] veth0_vlan: entered promiscuous mode
[  253.275930][T31046] veth1_vlan: entered promiscuous mode
[  253.294039][T31046] veth0_macvtap: entered promiscuous mode
[  253.303564][T31046] veth1_macvtap: entered promiscuous mode
[  253.314628][T31046] batman_adv: batadv0: Interface activated: batadv_slave_0
[  253.326557][T31046] batman_adv: batadv0: Interface activated: batadv_slave_1
[  253.337524][ T9925] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  253.346601][ T9925] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  253.370970][ T9925] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  253.380705][ T9925] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  253.468535][T31704] loop9: detected capacity change from 0 to 128
[  253.480592][T31704] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  253.551846][T31704] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  253.629427][ T9921] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  253.749462][T31750] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31750 comm=syz.3.7300
[  254.014015][T31805] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7316'.
[  254.026568][ T9947] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  254.039222][ T9947] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  254.050264][ T9947] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  254.059161][ T9947] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  254.166232][T31820] netlink: 'syz.0.7321': attribute type 10 has an invalid length.
[  254.178312][T31820] team0: Failed to send options change via netlink (err -105)
[  254.185845][T31820] team0: Port device dummy0 added
[  254.197530][T31820] netlink: 'syz.0.7321': attribute type 10 has an invalid length.
[  254.206066][T31820] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  254.220572][T31820] team0: Failed to send options change via netlink (err -105)
[  254.228225][T31820] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  254.237783][T31820] team0: Port device dummy0 removed
[  254.245372][T31820] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  254.560949][T31849] sch_tbf: burst 19869 is lower than device lo mtu (65550) !
[  255.092208][ T9921] Bluetooth: hci0: Frame reassembly failed (-84)
[  255.111619][T31932] pimreg: entered allmulticast mode
[  255.118931][T31932] pimreg: left allmulticast mode
[  255.244936][T31953] netlink: 19 bytes leftover after parsing attributes in process `syz.0.7358'.
[  255.288349][T31957] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  255.540688][   T29] kauditd_printk_skb: 68 callbacks suppressed
[  255.540701][   T29] audit: type=1400 audit(2000000019.399:8573): avc:  denied  { setopt } for  pid=31963 comm="syz.9.7363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  255.689728][   T29] audit: type=1400 audit(2000000019.399:8574): avc:  denied  { nlmsg_read } for  pid=31963 comm="syz.9.7363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  255.951026][T32002] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  255.977487][T32002] vhci_hcd: invalid port number 96
[  255.982711][T32002] vhci_hcd: default hub control req: 0300 vfffa i0060 l0
[  256.084924][T32016] netlink: 'syz.0.7382': attribute type 21 has an invalid length.
[  256.119453][T32023] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  256.145175][T32030] IPv6: NLM_F_CREATE should be specified when creating new route
[  256.156773][T32026] loop0: detected capacity change from 0 to 2048
[  256.174400][T32026] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  256.189293][T32026] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  256.295921][   T29] audit: type=1400 audit(2000000020.149:8575): avc:  denied  { audit_write } for  pid=32054 comm="syz.9.7396" capability=29  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  256.317236][   T29] audit: type=1107 audit(2000000020.149:8576): pid=32054 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg=''
[  256.527595][   T29] audit: type=1326 audit(2000000020.379:8577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32076 comm="syz.9.7404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4075faf749 code=0x7ffc0000
[  256.551164][   T29] audit: type=1326 audit(2000000020.379:8578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32076 comm="syz.9.7404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4075faf749 code=0x7ffc0000
[  256.575184][   T29] audit: type=1326 audit(2000000020.389:8579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32076 comm="syz.9.7404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4075faf749 code=0x7ffc0000
[  256.598710][   T29] audit: type=1326 audit(2000000020.389:8580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32076 comm="syz.9.7404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4075faf749 code=0x7ffc0000
[  256.622347][   T29] audit: type=1326 audit(2000000020.389:8581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32076 comm="syz.9.7404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4075faf749 code=0x7ffc0000
[  256.645896][   T29] audit: type=1326 audit(2000000020.389:8582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32076 comm="syz.9.7404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4075faf749 code=0x7ffc0000
[  256.752152][T32094] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=32094 comm=syz.0.7409
[  256.764844][T32094] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=32094 comm=syz.0.7409
[  257.102986][T32141] sch_tbf: burst 19869 is lower than device lo mtu (65550) !
[  257.110562][ T5196] Bluetooth: hci0: command 0x1003 tx timeout
[  257.119665][ T3593] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  257.203158][T32187] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  257.404953][T32199] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  257.404953][T32199]    program syz.3.7432 not setting count and/or reply_len properly
[  258.096982][T32243] ªªªªªª: renamed from vlan0 (while UP)
[  258.149466][T32251] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7451'.
[  258.158979][T32251] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7451'.
[  258.220875][T32263] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  258.220875][T32263]    program syz.0.7456 not setting count and/or reply_len properly
[  258.290790][T32274] netlink: 'syz.7.7462': attribute type 3 has an invalid length.
[  258.557592][T32312] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7474'.
[  258.566623][T32312] netem: change failed
[  258.641323][T32315] netlink: 76 bytes leftover after parsing attributes in process `syz.0.7475'.
[  258.807265][T32333] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22
[  258.815537][T32333] netdevsim netdevsim0: Direct firmware load for . failed with error -22
[  258.879115][T32336] SELinux: failed to load policy
[  259.438969][T32435] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7510'.
[  259.471464][T32439] netlink: 'syz.3.7511': attribute type 3 has an invalid length.
[  259.557736][T32452] netlink: 76 bytes leftover after parsing attributes in process `syz.9.7523'.
[  259.587297][T32454] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7516'.
[  259.597344][T32454] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7516'.
[  259.611145][T32456] loop9: detected capacity change from 0 to 128
[  259.637873][T32461] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7519'.
[  259.694414][T32456] bio_check_eod: 74 callbacks suppressed
[  259.694429][T32456] syz.9.7517: attempt to access beyond end of device
[  259.694429][T32456] loop9: rw=2049, sector=169, nr_sectors = 8 limit=128
[  259.714612][T32456] syz.9.7517: attempt to access beyond end of device
[  259.714612][T32456] loop9: rw=2049, sector=185, nr_sectors = 16 limit=128
[  259.728354][T32456] syz.9.7517: attempt to access beyond end of device
[  259.728354][T32456] loop9: rw=2049, sector=209, nr_sectors = 8 limit=128
[  259.742456][T32456] syz.9.7517: attempt to access beyond end of device
[  259.742456][T32456] loop9: rw=2049, sector=225, nr_sectors = 8 limit=128
[  259.758255][T32456] syz.9.7517: attempt to access beyond end of device
[  259.758255][T32456] loop9: rw=2049, sector=241, nr_sectors = 8 limit=128
[  259.771869][T32456] syz.9.7517: attempt to access beyond end of device
[  259.771869][T32456] loop9: rw=2049, sector=257, nr_sectors = 8 limit=128
[  259.785623][T32456] syz.9.7517: attempt to access beyond end of device
[  259.785623][T32456] loop9: rw=2049, sector=273, nr_sectors = 8 limit=128
[  259.799214][T32456] syz.9.7517: attempt to access beyond end of device
[  259.799214][T32456] loop9: rw=2049, sector=289, nr_sectors = 8 limit=128
[  259.813230][T32456] syz.9.7517: attempt to access beyond end of device
[  259.813230][T32456] loop9: rw=2049, sector=305, nr_sectors = 8 limit=128
[  259.826743][T32456] syz.9.7517: attempt to access beyond end of device
[  259.826743][T32456] loop9: rw=2049, sector=321, nr_sectors = 8 limit=128
[  259.981312][T32487] loop9: detected capacity change from 0 to 512
[  259.993864][T32487] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  260.015224][T32487] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #16: comm syz.9.7526: invalid indirect mapped block 4294967295 (level 0)
[  260.055735][T32487] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #16: comm syz.9.7526: invalid indirect mapped block 4294967295 (level 1)
[  260.100225][T32487] EXT4-fs (loop9): 1 orphan inode deleted
[  260.105965][T32487] EXT4-fs (loop9): 1 truncate cleaned up
[  260.112596][T32487] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  260.147524][T32487] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  260.440819][T32528] loop0: detected capacity change from 0 to 1024
[  260.560888][T32528] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  260.673125][T21165] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  260.808325][T32550] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[  260.816552][T32550] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[  260.876414][   T29] kauditd_printk_skb: 117 callbacks suppressed
[  260.876456][   T29] audit: type=1400 audit(2000000024.729:8700): avc:  denied  { write } for  pid=32559 comm="syz.2.7554" name="ptp0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  260.923670][   T29] audit: type=1326 audit(2000000024.779:8701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32565 comm="syz.7.7558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddacd3f749 code=0x7ffc0000
[  260.947269][   T29] audit: type=1326 audit(2000000024.779:8702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32565 comm="syz.7.7558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddacd3f749 code=0x7ffc0000
[  260.975148][   T29] audit: type=1326 audit(2000000024.829:8703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32565 comm="syz.7.7558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fddacd3f749 code=0x7ffc0000
[  260.998683][   T29] audit: type=1326 audit(2000000024.829:8704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32565 comm="syz.7.7558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddacd3f749 code=0x7ffc0000
[  261.022152][   T29] audit: type=1326 audit(2000000024.829:8705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32565 comm="syz.7.7558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddacd3f749 code=0x7ffc0000
[  261.045684][   T29] audit: type=1326 audit(2000000024.829:8706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32565 comm="syz.7.7558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fddacd3f749 code=0x7ffc0000
[  261.069260][   T29] audit: type=1326 audit(2000000024.829:8707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32565 comm="syz.7.7558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddacd3f749 code=0x7ffc0000
[  261.092802][   T29] audit: type=1326 audit(2000000024.829:8708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32565 comm="syz.7.7558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddacd3f749 code=0x7ffc0000
[  261.116319][   T29] audit: type=1326 audit(2000000024.829:8709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32565 comm="syz.7.7558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fddacd3f749 code=0x7ffc0000
[  261.191458][T32577] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7560'.
[  261.210181][T32587] netdevsim netdevsim9: loading /lib/firmware/. failed with error -22
[  261.218432][T32587] netdevsim netdevsim9: Direct firmware load for . failed with error -22
[  261.300456][T32603] netlink: 20 bytes leftover after parsing attributes in process `syz.7.7570'.
[  261.302547][T32606] block device autoloading is deprecated and will be removed.
[  261.423242][T32630] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7579'.
[  261.432359][T32630] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7579'.
[  261.497446][T32643] loop7: detected capacity change from 0 to 512
[  261.619481][T32643] EXT4-fs: Ignoring removed nobh option
[  261.627064][T32636] netlink: 48 bytes leftover after parsing attributes in process `syz.9.7582'.
[  261.655279][T32643] EXT4-fs: old and new quota format mixing
[  261.691152][T32659] random: crng reseeded on system resumption
[  261.986774][T32698] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7602'.
[  262.004910][T32698] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7602'.
[  262.022563][T32704] loop9: detected capacity change from 0 to 512
[  262.036816][T32703] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22
[  262.045021][T32703] netdevsim netdevsim0: Direct firmware load for . failed with error -22
[  262.054059][T32704] EXT4-fs: Ignoring removed nobh option
[  262.059902][T32704] EXT4-fs: old and new quota format mixing
[  262.101075][T32718] netlink: 'syz.3.7609': attribute type 3 has an invalid length.
[  262.170463][T32728] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7612'.
[  262.226644][T32737] loop0: detected capacity change from 0 to 1024
[  262.234178][T32737] EXT4-fs (loop0): stripe (32769) is not aligned with cluster size (16), stripe is disabled
[  262.252755][T32737] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  262.272323][T32746] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[  262.280545][T32746] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[  262.392241][T21165] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  262.474847][  T313] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7631'.
[  262.528593][  T326] random: crng reseeded on system resumption
[  262.744366][  T354] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7642'.
[  262.801246][  T358] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  263.043975][  T381] netlink: 'syz.7.7651': attribute type 3 has an invalid length.
[  263.197709][  T402] vlan2: entered allmulticast mode
[  263.205214][  T402] dummy0: entered allmulticast mode
[  263.442431][  T424] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  263.465721][  T427] policy can only be matched on NF_INET_PRE_ROUTING
[  263.465733][  T427] unable to load match
[  263.664662][  T472] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0
[  264.342944][  T511] ==================================================================
[  264.351047][  T511] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
[  264.359637][  T511] 
[  264.361948][  T511] write to 0xffff8881044a95e8 of 8 bytes by task 512 on cpu 1:
[  264.369479][  T511]  shmem_file_splice_read+0x470/0x600
[  264.374851][  T511]  splice_direct_to_actor+0x26f/0x680
[  264.380223][  T511]  do_splice_direct+0xda/0x150
[  264.384976][  T511]  do_sendfile+0x380/0x650
[  264.389410][  T511]  __x64_sys_sendfile64+0x105/0x150
[  264.394612][  T511]  x64_sys_call+0x2bb4/0x3000
[  264.399293][  T511]  do_syscall_64+0xd2/0x200
[  264.403788][  T511]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  264.409678][  T511] 
[  264.411985][  T511] write to 0xffff8881044a95e8 of 8 bytes by task 511 on cpu 0:
[  264.419517][  T511]  shmem_file_splice_read+0x470/0x600
[  264.424889][  T511]  splice_direct_to_actor+0x26f/0x680
[  264.430253][  T511]  do_splice_direct+0xda/0x150
[  264.435016][  T511]  do_sendfile+0x380/0x650
[  264.439430][  T511]  __x64_sys_sendfile64+0x105/0x150
[  264.444632][  T511]  x64_sys_call+0x2bb4/0x3000
[  264.449297][  T511]  do_syscall_64+0xd2/0x200
[  264.453784][  T511]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  264.459659][  T511] 
[  264.461962][  T511] value changed: 0x000000000002d8d6 -> 0x000000000002d90d
[  264.469045][  T511] 
[  264.471350][  T511] Reported by Kernel Concurrency Sanitizer on:
[  264.477479][  T511] CPU: 0 UID: 0 PID: 511 Comm: syz.2.7698 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  264.488659][  T511] Tainted: [W]=WARN
[  264.492441][  T511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  264.502478][  T511] ==================================================================