last executing test programs:

11.16997073s ago: executing program 3 (id=390):
socket$netlink(0x10, 0x3, 0x12)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x40, &(0x7f0000000100)={[{@errors_remount}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}, {@dioread_nolock}]}, 0x1, 0x573, &(0x7f0000000ec0)="$eJzs3T1sG+UbAPDnzvG/X/mTIoEEqEMFSEWq6iT9gMLUrohKlTogsUDkuFEVJ47iBJooQ7pXiA4IUJeywcAIYmBALIysLCBmpIpGIDUdwMhfaZo4wSl1XHK/n3T2vfee/bzvnZ/XvtOdHEBmHa0/pBHPRsTFJGJoXd1AtCqPNtdbXVkq3ltZKiZRq136LYkkIu6uLBXb6yet50MRsRwRz0TEd/mI4+nmuNWFxcmxcrk02yoPz03NDFcXFk9cmRqbKE2Upk+98uqZs6fPjJ4cXf+ye7X1pfzO+nr95xvvX//h9Vs3Pv/iyHLxw7EkzsVgq259Px6l5jbJx7kNy0/3IlgfJf1uAA8l18rzeio9HUORa2V9J7WhXW0a0GO1fRE1IKMS+Q8Z1f4dUD/+bU+7+fvj9vnmAUg97mpratYMNM9NxP7GscnB35MHjkzqx5uHd7Oh7EnL1yJiZGBg8+c/aX3+Ht7Io2ggPfXt+eaO2rz/07XxJzqMP4Ptc6f/Unv8W900/t2Pn9ti/LvYZYw/3/rlky3jX4t4rmP8ZC1+0iF+GhHvdBn/5ptfn92qrvZpxLHoHL8t2f788PDlK+XSSPOxY4xvjh15bbv+H9wifvOc7f7G10yn7T/TZf+/+v7L55e3if/SC9vv/07b/0BEfNBl/CfvfvbGVnW3ryV36r8Cdrr/68tudRn/5XNHf+pyVQAAAAAAAAAAYAfSxrVsSVpYm0/TQqF5D+9TcTAtV6pzxy9X5qfHm9e8HY582r7SaqhZTurl0db1uO3yyQ3lU7lWwNyBRrlQrJTH+9x3AAAAAAAAAAAAAAAAAAAAeFwc2nD//x+5xv3/G/+uGtirtv7Lb2Cvk/+QXQ/mf9K3dgC7z/c/ZFZN/kN2yX/ILvkP2SX/IbvkP2SX/Ifskv8AAAAAAAAAAAAAAAAAAAAAAAAAANATFy9cqE+1eytLxXp5fGBhfrLy7onxUnWyMDVfLBQrszOFiUplolwqFCtT//R+SaUyMxLT81eH50rVueHqwuLbU5X56fZ/ipbyPe8RAAAAAAAAAAAAAAAAAAAA/PcMNqYkLURE2phP00Ih4v8RcTjyyeUr5dJIRDwRET/m8vvq5dF+NxoAAAAAAAAAAAAAAAAAAAD2mOrC4uRYuVyazcjMwE5WjojlR9uM+jvu+FX51r56XLahmSzM9HlgAgAAAAAAAAAAAAAAAACADLp/02+3r/irtw0CAAAAAAAAAAAAAAAAAACATEp/TSKiPh0benFwY+3/ktVc4zki3rt56aOrY3Nzs6P15XfWls993Fp+sh/tB7rVztN2HgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD3VRcWJ8fK5dJsD2f63UcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAh/F3AAAA///pCdd8")
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
r3 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
sendfile(r3, r3, 0x0, 0x800000009)

10.754621226s ago: executing program 3 (id=400):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xf, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r3}, 0x18)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10)

10.606169969s ago: executing program 3 (id=402):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000380), &(0x7f0000000200)=r1}, 0x20)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fcntl$notify(r2, 0x402, 0x4)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fcntl$notify(r3, 0x402, 0xd)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fcntl$notify(r4, 0x402, 0x5)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)

10.54357809s ago: executing program 3 (id=405):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]})
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00')

10.301156334s ago: executing program 3 (id=408):
perf_event_open(0x0, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000900)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r4, <r5=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20)
sendmsg$inet(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4040086)

9.944785399s ago: executing program 3 (id=415):
epoll_create1(0x80000)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1}, 0x10)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
r2 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x2a309, 0x1000})
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2)

9.907335829s ago: executing program 32 (id=415):
epoll_create1(0x80000)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1}, 0x10)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
r2 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x2a309, 0x1000})
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2)

3.217634111s ago: executing program 0 (id=499):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000054850000000400000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
syz_clone(0x8c040580, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0)
r3 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, 0x0, &(0x7f0000000040))
sendmsg$inet_sctp(r2, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x4)
write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0x44f0)

2.186204537s ago: executing program 1 (id=514):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x0)
fchdir(r3)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x20)
open(&(0x7f0000000040)='./file0\x00', 0x551083, 0x40)

2.185497897s ago: executing program 0 (id=505):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3, 0x0, 0x3}, 0x18)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x10000, {0x0, 0x0, 0x0, r5, {0xc, 0xffff}, {0x0, 0x4}, {0xfff3, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x8014}, 0x0)

2.125865958s ago: executing program 1 (id=506):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)

2.018999079s ago: executing program 1 (id=508):
unshare(0x2c000600)
r0 = syz_io_uring_setup(0x53c, &(0x7f00000001c0)={0x0, 0xaee2, 0x800, 0xffffffff, 0xeb}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000001440)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x6})
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000000), &(0x7f0000000040)=r4}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000340)='kfree\x00', r5, 0x0, 0xfffffffffffffffe}, 0x18)
io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0)

1.97042651s ago: executing program 0 (id=510):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0xfe, 0x2ae, &(0x7f0000000a40)="$eJzs3c9qY1UYAPDvpkka7SJZuBLBu5iFG8tkti7MIBXErpQs/AM6ODMwNGGggcCoGGblE7hw4Xu4cy+48Q0EH8CdgxSO3NzbJLZp2rSmlfr7bXo45/vu+U7uabO43NPPXxsePHw6evz869+i1cqi1otevMiiE7U4lioBANwKL1KKPy71/V6vbaomAGCzFr7/G2eEbJ/uenvTZQEAG/ThRx+/f39/f++DPG9FDL8d97Mof5bj9x/HkxjEo7gb7TiaPwtIqWy/+97+XtTzQifuDCfjfpE5/OyXxccGRX432tFZnt/NSwv5k3G/ES9HZFnEk15RyL1oxyun8ovxvXtL8qPfjDda1SKL+XejHb9+EU9jEA+nzzTm83/TzfN30nd/fvVJEVzkZ5Nxf3saN5e2rvveAAAAAAAAAAAAAAAAAAAAAABwe+3mM524Myy6qvN3to6m47v/GJ+er1Objpf5WURz2jhxPtAkxQ/H5+vczfM8ZWX8/Hyferxaj/qNLRwAAAAAAAAAAAAAAAAAAAD+Q0bPvjx4MBg8OvxXGtVL/rPX+i97nd5Cz+uxOnh7rbliqwovaj0Z0/350+Gsp1jEZYofN/KIVTU3TvW8VNRz/pX/SimlLIu42m1qXGSucxo7q2OKD/in73fePHiQnfcZto5v3I+LQ804HD07cU8jW6fCtNb2a66IaVY75kLX2bniL9Fbv5eTVT3ZGqtoVI04a/u11trP1/c3CAAAAAAAAAAAAAAAAAAAKM1f+l0y+Hxlam1jRQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADANZv///81GpMqeXlMSmky62nG4eiGlwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD/wN8BAAD//7DYbww=")
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080), 0x3, 0x4cd, &(0x7f0000000c80)="$eJzs3M9vFGUfAPDvbHdpgZfXioiCKAU0Nia2UFA4eMHExIMmRjzIsWkrQRYwtAchREpi8Ezi3Xg03jTxqkfjyT8ADx5MDAkxXABPa2Z3pt3ur+7CtqXs55Ns+zwzz8zzPDPzzD77PDsbwMAaS/8kEf+LiFsR8VQtujLBWO3f/btXZx7cvToTi5XKqX+Sarp7aTyTb7c9i4wXIgpfJg07rJm/fOXcdLk8dymLTy6c/2xy/vKV18+enz4zd2buwtSJE8eOHjn+5tQbvVeqRX5pve7t/eLivj3vnr75/kwxXz6S/a+vR1vF3oox1mHdK73t6rG3oy6cNB+na+taGLo2kl3WpbT9Xy0fPL3RBQLWTaVSqQy3X71YaXS9aQmwaSWx0SUANkb+Rp9+/s1f69T1eCzcOVn7AJTW+372qq0pRiFLU2r4fNtPYxHx8eK/36Sv6DQO8ecaFQAAGDi/nMx7go39v0Lsrkv3/2wOZTQino6InRHxTETsiohnI6ppn4uI5xszSCIqHfLf1RBfzv/HbBahcPuRK9lB2v97K5vbWtn/y3t/MTqUxXZE5B3mucPZMRmP0vAnZ8tzR9rsf8sq+df3/9JXmn/eF8zKcbvYMEA3O70w/XC1bXbnesTeYmP9k2J64vJpnCQi9kTE3h72O1oXPvvad/uWIqWV6Vavf1WlxZRez/NxrVS+jXi1dv4XY8X5X84x6Tw/OTkS5bnDk+lVcLhlHr/9fuODdvmvWv+f/mrc5J3jP5961GovSc//trrrP/L52+X6jyYRydJ87XxEZai3PG788VV1v2OHmtc97PW/JfmoGs7b1+fTCwuXjkRsSd5rXj61vG0ez9On9R8/1Lr978y2SY/ECxGRXsQvRsRLEbE/K/uBiDgYES2qtuTXt1/+tN26Lq//NZPWf7bl/W/F+V+er+8ykG+cLhk6d+DWgzY3j+7O/7FqaDxb0vr+l6y4RXRb0kc7egAAALA5FKL63f/CxFK4UJiYqI0B7YpthfLF+YX9EXFhtvaMwGiUCvlIV208uJTk45+jdfGphvjRbNz466Gt1fjEzMXy7EZXHgbc9mqbT5raf+rvHsd5gU2oD/NowCa1WvvffXOdCgKsO+//MLjq2v9imySLvikDTybv/zC4WrX/a/F9x2cX3DNg86toyzDQtH8YXMX4cClcfey55dO2wJPI+z8MpF6f6+8tUBluvWokWvxiwMjaFGNri7w2JJD2rPq4w1JEdJd468NkkXcB2//CQ6G3HQ5H86qh6LRV0sPvOOSB9KismvjM7r5f/PlvovT7svlhuZ2WujzdfQpsyO0IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg7/4LAAD///QJ1ng=")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a310000ffff0500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)

1.780339113s ago: executing program 2 (id=511):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x1003, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000001c0)='mm_page_free\x00', r1, 0x0, 0x6}, 0x18)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
open_by_handle_at(r2, 0x0, 0x402)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0)

1.736713094s ago: executing program 1 (id=513):
openat$sysfs(0xffffffffffffff9c, 0x0, 0x42, 0x0)
r0 = socket(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc)
write(r0, &(0x7f0000000000)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5bcff1", 0x28)
connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000b4bffc)=0x1, 0x4)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
write(r0, &(0x7f0000000980)="a9", 0x1)

1.648060405s ago: executing program 2 (id=515):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r1}, 0x38)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x2}, 0x18)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x304}, "7817765dc5914c3d", "c0a9b92b592a8e91a6934cb6b7b18f7a7a6eaa9cbd8ef3b0fbc326100136e976", '\x00', "2a1e833e7af32011"}, 0x38)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, "54164ace389ff5c0", "faad50724acb18aba4e3bc654d684ad9c694f3e96ca4b72643dd3689727968e9", "5cb6d054", "29a78ab9b0a4e8ae"}, 0x38)

1.575804486s ago: executing program 0 (id=516):
r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x67a, 0x1, 0xfffffffe, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r3}, 0x10)
syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4, 0x10000}, 0x0, 0x0)

1.575454516s ago: executing program 2 (id=517):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xe0000000, 0x5, 0xb7, 0x2, 0x1, 0x1, 0x4, 0x3, 0x1}}}}]}, 0x58}}, 0x4000)
r4 = socket(0x10, 0x803, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=@newtfilter={0x4c, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xb, 0x3}, {}, {0x1, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x20, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x7, 0x6, 0x0, 0x9, 0x401, 0x1000, 0x8a0, 0xd5}}, @TCA_U32_CLASSID={0x8, 0x1, {0xfff3, 0xffe0}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x800)

1.479741658s ago: executing program 2 (id=518):
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35bda", 0x7)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000100)=[0x7], 0x0, 0x0, 0x1, 0x0, r2}}, 0x40)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001740)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x84, 0x7fffffff}]})
r4 = socket$unix(0x1, 0x5, 0x0)
r5 = dup2(r4, r3)
close_range(r5, 0xffffffffffffffff, 0x0)

1.431391518s ago: executing program 2 (id=519):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
r2 = getpid()
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0)
sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0)

969.006035ms ago: executing program 5 (id=526):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_MOVE(0x1e, r3, 0xfffffffffffffffe, r3, 0x1)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x9)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x4, @perf_bp={0x0, 0x7}, 0x4110, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_clone(0x41980100, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a00)=@acquire={0x128, 0x17, 0x611, 0x0, 0x0, {{@in6=@private0}, @in6=@remote, {@in=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {{@in6=@private2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1ff}}, 0x128}}, 0x800)

881.918317ms ago: executing program 4 (id=527):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x20000}, 0x18)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@nolazytime}, {@jqfmt_vfsold}, {@journal_path={'journal_path', 0x3d, './file0/../file0'}}, {@noquota}, {@nodioread_nolock}, {@journal_checksum}, {@data_err_abort}], [{@seclabel}]}, 0x3, 0x473, &(0x7f0000000640)="$eJzs3M1vG0UbAPBn7Tht+pW8Vd9CP4AgQJQCSZOW0gMXEEgcQEKCQzmGJK1K0wY1QSJVBQGhckSVOHFBHJH4CzjBBcENiQsHuKNKFeqlhZPRZncT2zhpmjpepf79pHVndtedeTwz9uxO7AB61nD6kETsiojfI2IwyzafMJz9c/vmlcm/b16ZTKJef/OvpC89fOvmlcXi1OJ5O4tMX0Tl0yQOtSl3buHy+YmZmelLeX50/sJ7o3MLl589d2Hi7PTZ6Yvjp06dOD72/Mnx5zoSZxrXrYMfzh4+8Orb116fPH3tnZ+/TYr4szgmO1LQiuG1Dj5Rr3e4uHLtbkhnPYOtoJoN06gtjf/BqMZK4w3GK5+UWjlgU9Xr9fr+5Vyt9fBiHbiPJVF2DYByFB/06fVvsXVx+lG6Gy9mF0Bp3LfzLTvSF5X8nFrL9W0nDUfE6cV/vkq32Jz7EAAATb5P5z/PtJv/VWJ/w3l78jWUoYj4X0TsjYiTEbEvIv4fsXTuAxHx4F2W37pIkpU/0LCncn2jsa1HOv97IV/bap7/FbO/GKrmud1L8deSM+dmpo/lr8mRqG1L82NrlPHDy79+vtqxxvlfuqXlF3PBvB7X+7Y1P2dqYn7iXmJudOPjiIN97eJPllcCkog4EBEHN1jGuaPfHF7t2J3jX0MH1pnqX0c8mbX/YrTEX0jWXp8c3R4z08dGi17Rxi9X31it/HuKvwPS9t/Rtv8vxz+UNK7Xzt3N//7lU+nj1T8+W/WaZqP9vz95q2nfBxPz85fGIvqT17JKN+4fbzlvfOX8NP4jj7Uf/3tj5ZU4FBFpJ34oIh6OiEfyuj/62547vgo/vfT4uy27qivxD5Te/lPrb//6YETRERb6I08s72mfqJ7/8bumQodWko3tv2fV9j+xlDqS71nP+9966nW3vRkAAAC2qkpE7IqkMrKcrlRGRrK/4d8XOyozs3PzT5+Zff/iVPYdgaGoVYo7XYMN90PH8sv6Ij/ekj+e3zf+ojqwlB+ZnJ2ZKjt46HE7Vxn/qT+zu5Tbyq0hsKl8Xwt6l/EPvcv4h9713/G/vTlb6V5dgO5q8/k/UEY9gO5rHv/Zj4B8tJ4n7tqc+gDd0/L5Xy2rHkD3uf8HvWsj4997Btwf+tb6yeb+rlYF6J65gbjzl+QltlKiWK3djCJqaW85GhELl6NSeqQSm5go+50JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgM/4NAAD//55o4Oc=")
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1)
r2 = creat(&(0x7f00000000c0)='./file0\x00', 0xd4)
r3 = dup2(r2, r2)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8})
ioctl$BLKTRACESETUP(r3, 0x1276, 0x0)

863.401907ms ago: executing program 1 (id=528):
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x67)
close(r0)
r1 = socket$inet6(0xa, 0x800000000000002, 0x0)
close(r1)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000480)=0x400000001, 0x4)
setsockopt$inet6_tcp_int(r2, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @mcast2, 0x9}, 0x1c)
sendmsg$key(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0xfcc8}}, 0x4000010)

760.645669ms ago: executing program 5 (id=529):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
close(0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r3}, 0x10)
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)

655.543631ms ago: executing program 5 (id=530):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x10)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_read_part_table(0x60d, &(0x7f0000002200)="$eJzs3D9olHcYB/DvJbmcUTAdnFxqHDoJRXE0Q5XkqlgIp1IIDvYfIs0UIXDSw5Q4tBkUM0jHLlK4DhonYwYnRaFzEQeLkMGlYBepHXLl7l6SOyjF0oRS/HyGe353PDzf94F3/V34XxtIuTi1Kp3y/qd/298a3TzP50xzYvJ4q9VqnU5KOZtyxsq7l5MMpX9q9icZ7plz8/udq9/+9mG5+fTUq/fOPVgc2JhZyTtJdvU2Z+SvHqXyzzZlO9wafzi6cGW2erX9pdpYW/84uf1yorZycnFp+UT52Oft3y8nj4r+7osxkoup51K+zCdDbxz19eax1Jc/386vj194Um2sfdd8fnB9b3Xw7vkjr/etXrt/KJlrR0yl87JvGv6Xi/fkL/Tkz41dn15qHD1wZ8+Nw/V7j2svBn9vdRWR5a3JBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABge9xqf1yZrV6tj194Um2sffPzTx/dfjlRWzm5uLR8YvjYs6LvUVGHinox9VxKOclMZvJFZt88crrUmz/+cHRhI/+Pncnzg+t7q82754+8nly9dv9Qp6uUqXYZ2IqN+/XnN9bmxq5PLzWOHriz58bh+r3HtReD3b6ZSj7rrJuksvWPAQAAAAAAAAAAAAAAAAAAwFtuYvL4vqkPaqeTUs7uSPLrV51b9q3KyI/p3Lzv2l/UZ5Vkd5KbO7r/BdB8eurV8LkHi78Ul+LnU8l8kl0/rJxJ3t3IudwfW96czH/pzwAAAP//gTiR5w==")
creat(&(0x7f0000000200)='./bus\x00', 0x10)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x1200, 0x30, 0x3)

402.833094ms ago: executing program 2 (id=531):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000800000000005e002200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10)
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r1 = socket$netlink(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0xf)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000080)=0x100, 0x4)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4)

402.587574ms ago: executing program 5 (id=532):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xe0000000, 0x5, 0xb7, 0x2, 0x1, 0x1, 0x4, 0x3, 0x1}}}}]}, 0x58}}, 0x4000)
r4 = socket(0x10, 0x803, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=@newtfilter={0x4c, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xb, 0x3}, {}, {0x1, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x20, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x7, 0x6, 0x0, 0x9, 0x401, 0x1000, 0x8a0, 0xd5}}, @TCA_U32_CLASSID={0x8, 0x1, {0xfff3, 0xffe0}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x800)

402.354054ms ago: executing program 4 (id=533):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000))
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="d2ff03066003008cb89e08d988a8", 0x0, 0xd5b4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$LINK_DETACH(0x22, 0x0, 0x0)

400.959724ms ago: executing program 0 (id=541):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x20000}, 0x18)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@nolazytime}, {@jqfmt_vfsold}, {@journal_path={'journal_path', 0x3d, './file0/../file0'}}, {@noquota}, {@nodioread_nolock}, {@journal_checksum}, {@data_err_abort}], [{@seclabel}]}, 0x3, 0x473, &(0x7f0000000640)="$eJzs3M1vG0UbAPBn7Tht+pW8Vd9CP4AgQJQCSZOW0gMXEEgcQEKCQzmGJK1K0wY1QSJVBQGhckSVOHFBHJH4CzjBBcENiQsHuKNKFeqlhZPRZncT2zhpmjpepf79pHVndtedeTwz9uxO7AB61nD6kETsiojfI2IwyzafMJz9c/vmlcm/b16ZTKJef/OvpC89fOvmlcXi1OJ5O4tMX0Tl0yQOtSl3buHy+YmZmelLeX50/sJ7o3MLl589d2Hi7PTZ6Yvjp06dOD72/Mnx5zoSZxrXrYMfzh4+8Orb116fPH3tnZ+/TYr4szgmO1LQiuG1Dj5Rr3e4uHLtbkhnPYOtoJoN06gtjf/BqMZK4w3GK5+UWjlgU9Xr9fr+5Vyt9fBiHbiPJVF2DYByFB/06fVvsXVx+lG6Gy9mF0Bp3LfzLTvSF5X8nFrL9W0nDUfE6cV/vkq32Jz7EAAATb5P5z/PtJv/VWJ/w3l78jWUoYj4X0TsjYiTEbEvIv4fsXTuAxHx4F2W37pIkpU/0LCncn2jsa1HOv97IV/bap7/FbO/GKrmud1L8deSM+dmpo/lr8mRqG1L82NrlPHDy79+vtqxxvlfuqXlF3PBvB7X+7Y1P2dqYn7iXmJudOPjiIN97eJPllcCkog4EBEHN1jGuaPfHF7t2J3jX0MH1pnqX0c8mbX/YrTEX0jWXp8c3R4z08dGi17Rxi9X31it/HuKvwPS9t/Rtv8vxz+UNK7Xzt3N//7lU+nj1T8+W/WaZqP9vz95q2nfBxPz85fGIvqT17JKN+4fbzlvfOX8NP4jj7Uf/3tj5ZU4FBFpJ34oIh6OiEfyuj/62547vgo/vfT4uy27qivxD5Te/lPrb//6YETRERb6I08s72mfqJ7/8bumQodWko3tv2fV9j+xlDqS71nP+9966nW3vRkAAAC2qkpE7IqkMrKcrlRGRrK/4d8XOyozs3PzT5+Zff/iVPYdgaGoVYo7XYMN90PH8sv6Ij/ekj+e3zf+ojqwlB+ZnJ2ZKjt46HE7Vxn/qT+zu5Tbyq0hsKl8Xwt6l/EPvcv4h9713/G/vTlb6V5dgO5q8/k/UEY9gO5rHv/Zj4B8tJ4n7tqc+gDd0/L5Xy2rHkD3uf8HvWsj4997Btwf+tb6yeb+rlYF6J65gbjzl+QltlKiWK3djCJqaW85GhELl6NSeqQSm5go+50JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgM/4NAAD//55o4Oc=")
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1)
r2 = creat(&(0x7f00000000c0)='./file0\x00', 0xd4)
r3 = dup2(r2, r2)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8})
ioctl$BLKTRACESETUP(r3, 0x1276, 0x0)

258.124386ms ago: executing program 5 (id=534):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
close(0x3)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x50)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socket$kcm(0x1e, 0x2, 0x0)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r2=>0x0, 0x0})
close(r2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1}, &(0x7f0000000080), &(0x7f0000000240)=r3}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x18000000000002a0, 0xe, 0x20, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x3f, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x21}, 0x50)

230.405566ms ago: executing program 4 (id=535):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r2=>0x0})
bind$can_raw(r1, &(0x7f00000001c0)={0x1d, r2}, 0x10)
recvmmsg(r1, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0}, 0x200}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000600)=""/181, 0xb5}], 0x1}, 0xfffff67c}], 0x2, 0x40000022, 0x0)
setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4)
sendmsg$can_raw(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x3, 0x0, 0x0, "0000000000000003"}, 0x10}, 0x1, 0x0, 0x0, 0x44811}, 0xc010)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000005bc0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000005cc0)={0x0, 0x0, &(0x7f0000005c80)={&(0x7f0000005c00)={0x68, r4, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x2, @media='eth\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x4848}, 0x20000000)

208.354867ms ago: executing program 4 (id=536):
openat(0xffffffffffffff9c, 0x0, 0xd40, 0xd2)
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002440)={{0x14, 0x10, 0x1, 0x0, 0x4000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}]}]}]}], {0x14, 0x10}}, 0xd0}}, 0x0)

129.705818ms ago: executing program 4 (id=537):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x2)

129.130698ms ago: executing program 0 (id=548):
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0)
write(r3, &(0x7f0000004200)='t', 0x1)
sendfile(r3, r2, 0x0, 0x3ffff)
sendfile(r3, r2, 0x0, 0x7ffff000)

128.693498ms ago: executing program 5 (id=538):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10)
openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r2 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0)
write(r2, &(0x7f00000004c0)="0600", 0x2)
sendfile(r2, r2, &(0x7f0000001000), 0xffff)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f000002eff0)={0x135, &(0x7f0000000000)=[{}]}, 0x10)

250.45µs ago: executing program 1 (id=539):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x961e, 0x80, 0x2, 0x8b6}, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000300)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456})
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002)
io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0)
close(r0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

0s ago: executing program 4 (id=540):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x61680, 0x20, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0)
close(r1)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x6, 0x4, 0x599, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001340), &(0x7f0000000900), 0x404, r2, 0x0, 0x1ba8847c99}, 0x38)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.151' (ED25519) to the list of known hosts.
[   20.485698][   T29] audit: type=1400 audit(1750257383.614:62): avc:  denied  { mounton } for  pid=3234 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   20.486642][ T3234] cgroup: Unknown subsys name 'net'
[   20.508420][   T29] audit: type=1400 audit(1750257383.614:63): avc:  denied  { mount } for  pid=3234 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   20.536042][   T29] audit: type=1400 audit(1750257383.644:64): avc:  denied  { unmount } for  pid=3234 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   20.691668][ T3234] cgroup: Unknown subsys name 'cpuset'
[   20.697776][ T3234] cgroup: Unknown subsys name 'rlimit'
[   20.866513][   T29] audit: type=1400 audit(1750257383.994:65): avc:  denied  { setattr } for  pid=3234 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   20.889914][   T29] audit: type=1400 audit(1750257383.994:66): avc:  denied  { create } for  pid=3234 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[   20.906570][ T3298] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   20.910340][   T29] audit: type=1400 audit(1750257383.994:67): avc:  denied  { write } for  pid=3234 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   20.939349][   T29] audit: type=1400 audit(1750257383.994:68): avc:  denied  { read } for  pid=3234 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   20.952359][ T3234] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   20.959582][   T29] audit: type=1400 audit(1750257384.004:69): avc:  denied  { mounton } for  pid=3234 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   20.992992][   T29] audit: type=1400 audit(1750257384.004:70): avc:  denied  { mount } for  pid=3234 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   21.016374][   T29] audit: type=1400 audit(1750257384.044:71): avc:  denied  { relabelto } for  pid=3298 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   22.075278][ T3310] chnl_net:caif_netlink_parms(): no params data found
[   22.104833][ T3306] chnl_net:caif_netlink_parms(): no params data found
[   22.161409][ T3313] chnl_net:caif_netlink_parms(): no params data found
[   22.222616][ T3312] chnl_net:caif_netlink_parms(): no params data found
[   22.237380][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.244523][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.251939][ T3310] bridge_slave_0: entered allmulticast mode
[   22.258326][ T3310] bridge_slave_0: entered promiscuous mode
[   22.264817][ T3307] chnl_net:caif_netlink_parms(): no params data found
[   22.273276][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.280311][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.287442][ T3306] bridge_slave_0: entered allmulticast mode
[   22.293961][ T3306] bridge_slave_0: entered promiscuous mode
[   22.307448][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.314567][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.321720][ T3310] bridge_slave_1: entered allmulticast mode
[   22.328127][ T3310] bridge_slave_1: entered promiscuous mode
[   22.337065][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.344124][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.351742][ T3306] bridge_slave_1: entered allmulticast mode
[   22.358071][ T3306] bridge_slave_1: entered promiscuous mode
[   22.407169][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.414269][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.421571][ T3313] bridge_slave_0: entered allmulticast mode
[   22.428125][ T3313] bridge_slave_0: entered promiscuous mode
[   22.435588][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   22.444695][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.451824][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.459053][ T3313] bridge_slave_1: entered allmulticast mode
[   22.465353][ T3313] bridge_slave_1: entered promiscuous mode
[   22.476227][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   22.488788][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   22.516141][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   22.552250][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.559326][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.566554][ T3312] bridge_slave_0: entered allmulticast mode
[   22.572923][ T3312] bridge_slave_0: entered promiscuous mode
[   22.580446][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   22.589878][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.596947][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.604229][ T3307] bridge_slave_0: entered allmulticast mode
[   22.610623][ T3307] bridge_slave_0: entered promiscuous mode
[   22.622449][ T3310] team0: Port device team_slave_0 added
[   22.628660][ T3306] team0: Port device team_slave_0 added
[   22.634378][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.641460][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.648592][ T3312] bridge_slave_1: entered allmulticast mode
[   22.654916][ T3312] bridge_slave_1: entered promiscuous mode
[   22.666631][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   22.675780][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.682856][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.690046][ T3307] bridge_slave_1: entered allmulticast mode
[   22.696496][ T3307] bridge_slave_1: entered promiscuous mode
[   22.703186][ T3310] team0: Port device team_slave_1 added
[   22.714044][ T3306] team0: Port device team_slave_1 added
[   22.743796][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   22.753879][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   22.773049][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   22.787194][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   22.801290][ T3313] team0: Port device team_slave_0 added
[   22.807242][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0
[   22.814242][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   22.840262][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   22.851480][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1
[   22.858436][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   22.884446][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   22.899747][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0
[   22.906742][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   22.932662][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   22.947933][ T3313] team0: Port device team_slave_1 added
[   22.960546][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1
[   22.967563][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   22.993484][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   23.004792][ T3312] team0: Port device team_slave_0 added
[   23.020940][ T3307] team0: Port device team_slave_0 added
[   23.029357][ T3307] team0: Port device team_slave_1 added
[   23.035978][ T3312] team0: Port device team_slave_1 added
[   23.042466][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0
[   23.049446][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   23.075589][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   23.086957][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1
[   23.093949][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   23.119961][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   23.152119][ T3310] hsr_slave_0: entered promiscuous mode
[   23.158005][ T3310] hsr_slave_1: entered promiscuous mode
[   23.173324][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0
[   23.180284][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   23.206340][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   23.229995][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1
[   23.237003][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   23.262997][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   23.276409][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0
[   23.283482][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   23.309581][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   23.321140][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1
[   23.328091][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   23.354045][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   23.367022][ T3306] hsr_slave_0: entered promiscuous mode
[   23.373104][ T3306] hsr_slave_1: entered promiscuous mode
[   23.379063][ T3306] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   23.386647][ T3306] Cannot create hsr debugfs directory
[   23.422728][ T3313] hsr_slave_0: entered promiscuous mode
[   23.428931][ T3313] hsr_slave_1: entered promiscuous mode
[   23.434801][ T3313] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   23.442424][ T3313] Cannot create hsr debugfs directory
[   23.464231][ T3307] hsr_slave_0: entered promiscuous mode
[   23.470262][ T3307] hsr_slave_1: entered promiscuous mode
[   23.476267][ T3307] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   23.486820][ T3307] Cannot create hsr debugfs directory
[   23.506059][ T3312] hsr_slave_0: entered promiscuous mode
[   23.512677][ T3312] hsr_slave_1: entered promiscuous mode
[   23.518722][ T3312] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   23.526343][ T3312] Cannot create hsr debugfs directory
[   23.700813][ T3306] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   23.709380][ T3306] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   23.718273][ T3306] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   23.728720][ T3306] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   23.761455][ T3310] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   23.773512][ T3310] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   23.789689][ T3307] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   23.799434][ T3307] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   23.808411][ T3310] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   23.818112][ T3310] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   23.831237][ T3307] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   23.841584][ T3307] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   23.863420][ T3312] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   23.872734][ T3312] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   23.888051][ T3312] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   23.906808][ T3312] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   23.920564][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0
[   23.938919][ T3306] 8021q: adding VLAN 0 to HW filter on device team0
[   23.959918][ T3313] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   23.968513][ T3313] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   23.979428][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.986548][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.998573][ T3313] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   24.013022][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.020136][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.030686][ T3313] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   24.040612][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0
[   24.063736][ T3310] 8021q: adding VLAN 0 to HW filter on device team0
[   24.086772][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.093838][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.116627][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.123833][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.138753][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0
[   24.167883][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0
[   24.184534][ T3312] 8021q: adding VLAN 0 to HW filter on device team0
[   24.194077][ T3307] 8021q: adding VLAN 0 to HW filter on device team0
[   24.205451][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.212547][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.228249][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0
[   24.243347][   T41] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.250492][   T41] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.259035][   T41] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.266110][   T41] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.275558][   T41] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.282676][   T41] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.305762][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0
[   24.359344][ T3312] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   24.393547][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0
[   24.422495][ T3313] 8021q: adding VLAN 0 to HW filter on device team0
[   24.448740][ T3310] veth0_vlan: entered promiscuous mode
[   24.467845][  T269] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.474942][  T269] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.489799][   T41] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.496944][   T41] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.517187][ T3306] veth0_vlan: entered promiscuous mode
[   24.525423][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0
[   24.544115][ T3310] veth1_vlan: entered promiscuous mode
[   24.559981][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0
[   24.568954][ T3306] veth1_vlan: entered promiscuous mode
[   24.597111][ T3310] veth0_macvtap: entered promiscuous mode
[   24.607961][ T3306] veth0_macvtap: entered promiscuous mode
[   24.619657][ T3310] veth1_macvtap: entered promiscuous mode
[   24.629464][ T3306] veth1_macvtap: entered promiscuous mode
[   24.655542][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0
[   24.666144][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0
[   24.679015][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1
[   24.689700][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0
[   24.701023][ T3310] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   24.709744][ T3310] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   24.718598][ T3310] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   24.727509][ T3310] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   24.739312][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1
[   24.756607][ T3312] veth0_vlan: entered promiscuous mode
[   24.766241][ T3306] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   24.775109][ T3306] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   24.784013][ T3306] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   24.793009][ T3306] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   24.811162][ T3312] veth1_vlan: entered promiscuous mode
[   24.847660][ T3312] veth0_macvtap: entered promiscuous mode
[   24.858286][ T3307] veth0_vlan: entered promiscuous mode
[   24.868548][ T3310] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   24.873776][ T3307] veth1_vlan: entered promiscuous mode
[   24.899599][ T3312] veth1_macvtap: entered promiscuous mode
[   24.914317][ T3313] veth0_vlan: entered promiscuous mode
[   24.934496][ T3313] veth1_vlan: entered promiscuous mode
[   24.953024][ T3313] veth0_macvtap: entered promiscuous mode
[   24.961715][ T3313] veth1_macvtap: entered promiscuous mode
[   24.974150][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0
[   24.983637][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1
[   24.992148][ T3313] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   25.000947][ T3313] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   25.009679][ T3313] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   25.018474][ T3313] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   25.056730][ T3307] veth0_macvtap: entered promiscuous mode
[   25.079805][ T3307] veth1_macvtap: entered promiscuous mode
[   25.092285][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0
[   25.451137][    C1] hrtimer: interrupt took 28170 ns
[   25.502649][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0
[   25.523984][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1
[   25.535768][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1
[   25.546725][ T3312] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   25.555678][ T3312] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   25.564432][ T3312] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   25.573258][ T3312] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   25.586528][   T29] kauditd_printk_skb: 37 callbacks suppressed
[   25.586542][   T29] audit: type=1400 audit(1750257388.714:109): avc:  denied  { map_create } for  pid=3487 comm="syz.3.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   25.603409][ T3307] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   25.620221][ T3307] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   25.629076][ T3307] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   25.637839][ T3307] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   25.657452][   T29] audit: type=1400 audit(1750257388.744:110): avc:  denied  { map_read map_write } for  pid=3487 comm="syz.3.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   25.934556][   T29] audit: type=1400 audit(1750257389.064:111): avc:  denied  { create } for  pid=3499 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   25.935626][ T3502] loop1: detected capacity change from 0 to 1024
[   25.987052][ T3502] EXT4-fs: Ignoring removed bh option
[   25.992608][ T3502] EXT4-fs: Ignoring removed nomblk_io_submit option
[   26.004607][   T29] audit: type=1400 audit(1750257389.084:112): avc:  denied  { write } for  pid=3499 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   26.026713][ T3502] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   26.058469][   T29] audit: type=1400 audit(1750257389.184:113): avc:  denied  { mount } for  pid=3501 comm="syz.1.9" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   26.141869][   T29] audit: type=1400 audit(1750257389.274:114): avc:  denied  { add_name } for  pid=3501 comm="syz.1.9" name="freezer.state" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   26.164018][   T29] audit: type=1400 audit(1750257389.274:115): avc:  denied  { create } for  pid=3501 comm="syz.1.9" name="freezer.state" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   26.265071][   T29] audit: type=1400 audit(1750257389.374:116): avc:  denied  { read append open } for  pid=3501 comm="syz.1.9" path="/2/bus/freezer.state" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   26.338157][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   26.390120][   T29] audit: type=1400 audit(1750257389.514:117): avc:  denied  { create } for  pid=3520 comm="syz.1.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   26.414776][ T3521] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12'.
[   26.456183][   T29] audit: type=1400 audit(1750257389.584:118): avc:  denied  { mount } for  pid=3522 comm="syz.0.14" name="/" dev="ramfs" ino=4009 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[   26.837211][ T3535] netlink: 324 bytes leftover after parsing attributes in process `syz.3.20'.
[   26.869877][ T3538] loop4: detected capacity change from 0 to 1024
[   26.882322][ T3538] EXT4-fs: Ignoring removed orlov option
[   26.899309][ T3538] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   27.146679][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   27.340675][ T3549] loop4: detected capacity change from 0 to 512
[   27.357867][ T3549] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   27.370936][ T3549] ext4 filesystem being mounted at /7/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   27.445429][ T3552] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #19: comm +}[@: corrupted inode contents
[   27.457869][ T3552] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #19: comm +}[@: mark_inode_dirty error
[   27.470291][ T3552] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #19: comm +}[@: corrupted inode contents
[   27.483438][ T3552] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2991: inode #19: comm +}[@: mark_inode_dirty error
[   27.495475][ T3552] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2994: inode #19: comm +}[@: mark inode dirty (error -117)
[   27.509393][ T3552] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117)
[   27.569221][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   27.742506][ T3565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   27.751775][ T3565] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   27.959845][ T3574] loop2: detected capacity change from 0 to 2048
[   28.012389][ T3574]  loop2: p2 p3 < > p4 < p5 >
[   28.017124][ T3574] loop2: partition table partially beyond EOD, truncated
[   28.029812][ T3574] loop2: p3 start 4284289 is beyond EOD, truncated
[   28.057977][ T3579] mmap: syz.3.36 (3579) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   28.144688][ T3586] loop9: detected capacity change from 0 to 7
[   28.151324][ T3586] Buffer I/O error on dev loop9, logical block 0, async page read
[   28.159265][ T3586] Buffer I/O error on dev loop9, logical block 0, async page read
[   28.167271][ T3586]  loop9: unable to read partition table
[   28.173213][ T3586] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[   28.173213][ T3586] 
) failed (rc=-5)
[   28.174317][ T3299] Buffer I/O error on dev loop9, logical block 0, async page read
[   28.207512][ T3299] Buffer I/O error on dev loop9, logical block 0, async page read
[   28.217417][ T3299] Buffer I/O error on dev loop9, logical block 0, async page read
[   28.225921][ T3299] Buffer I/O error on dev loop9, logical block 0, async page read
[   28.234884][ T3299] Buffer I/O error on dev loop9, logical block 0, async page read
[   28.359765][ T3595] capability: warning: `syz.1.43' uses deprecated v2 capabilities in a way that may be insecure
[   28.372215][ T3593] bridge_slave_0: left allmulticast mode
[   28.377888][ T3593] bridge_slave_0: left promiscuous mode
[   28.383666][ T3593] bridge0: port 1(bridge_slave_0) entered disabled state
[   28.396276][ T3593] bridge_slave_1: left allmulticast mode
[   28.402093][ T3593] bridge_slave_1: left promiscuous mode
[   28.407731][ T3593] bridge0: port 2(bridge_slave_1) entered disabled state
[   28.439296][ T3593] bond0: (slave bond_slave_0): Releasing backup interface
[   28.449253][ T3593] bond0: (slave bond_slave_1): Releasing backup interface
[   28.464086][ T3593] team0: Port device team_slave_0 removed
[   28.472983][ T3593] team0: Port device team_slave_1 removed
[   28.479970][ T3593] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   28.487664][ T3593] batman_adv: batadv0: Removing interface: batadv_slave_0
[   28.527866][ T3593] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   28.535422][ T3593] batman_adv: batadv0: Removing interface: batadv_slave_1
[   28.628668][ T3593] wg1 (3593) used greatest stack depth: 10888 bytes left
[   28.787671][ T3628] loop2: detected capacity change from 0 to 512
[   28.824148][ T3628] =======================================================
[   28.824148][ T3628] WARNING: The mand mount option has been deprecated and
[   28.824148][ T3628]          and is ignored by this kernel. Remove the mand
[   28.824148][ T3628]          option from the mount to silence this warning.
[   28.824148][ T3628] =======================================================
[   28.978260][ T3623] loop4: detected capacity change from 0 to 512
[   28.990026][ T3623] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   29.003340][ T3623] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   29.011604][ T3641] usb usb8: usbfs: process 3641 (syz.0.60) did not claim interface 0 before use
[   29.037249][ T3623] EXT4-fs (loop4): 1 truncate cleaned up
[   29.048891][ T3628] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   29.065271][ T3623] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   29.078155][ T3628] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   29.149468][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   29.193495][ T3653] IPv4: Oversized IP packet from 127.202.26.0
[   29.245903][ T3627] syz.2.53 (3627) used greatest stack depth: 10784 bytes left
[   29.254827][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   29.288903][ T3659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   29.297789][ T3659] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   29.747785][ T3664] loop2: detected capacity change from 0 to 8192
[   29.756033][ T3664] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   30.131551][ T3416] IPVS: starting estimator thread 0...
[   30.167042][ T3690] Zero length message leads to an empty skb
[   30.221401][ T3686] IPVS: using max 2736 ests per chain, 136800 per kthread
[   30.365400][ T3706] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   30.423388][ T3706] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   30.483250][ T3706] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   30.543854][ T3706] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   30.600646][ T3706] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   30.613875][ T3706] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   30.627840][ T3706] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   30.642203][ T3706] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   30.758597][   T29] kauditd_printk_skb: 467 callbacks suppressed
[   30.758610][   T29] audit: type=1400 audit(1750257393.884:586): avc:  denied  { connect } for  pid=3709 comm="syz.4.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   30.798211][   T29] audit: type=1400 audit(1750257393.914:587): avc:  denied  { write } for  pid=3709 comm="syz.4.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   30.914444][ T3716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   30.923254][ T3716] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   30.981884][ T3718] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3718 comm=syz.2.92
[   31.005376][   T29] audit: type=1326 audit(1750257394.134:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3719 comm="syz.2.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf07d7e929 code=0x7ffc0000
[   31.030918][   T29] audit: type=1326 audit(1750257394.134:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3719 comm="syz.2.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf07d7e929 code=0x7ffc0000
[   31.054306][   T29] audit: type=1326 audit(1750257394.134:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3719 comm="syz.2.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faf07d7e929 code=0x7ffc0000
[   31.077442][   T29] audit: type=1326 audit(1750257394.134:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3719 comm="syz.2.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf07d7e929 code=0x7ffc0000
[   31.100642][   T29] audit: type=1326 audit(1750257394.134:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3719 comm="syz.2.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faf07d7e929 code=0x7ffc0000
[   31.123976][   T29] audit: type=1326 audit(1750257394.134:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3719 comm="syz.2.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf07d7e929 code=0x7ffc0000
[   31.147192][   T29] audit: type=1326 audit(1750257394.134:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3719 comm="syz.2.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faf07d7e929 code=0x7ffc0000
[   31.170395][   T29] audit: type=1326 audit(1750257394.154:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3719 comm="syz.2.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf07d7e929 code=0x7ffc0000
[   31.640494][ T3762] loop2: detected capacity change from 0 to 512
[   31.647407][ T3762] EXT4-fs: Ignoring removed nobh option
[   31.668374][ T3762] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13
[   31.710211][ T3762] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.109: attempt to clear invalid blocks 2 len 1
[   31.749977][ T3762] EXT4-fs (loop2): Remounting filesystem read-only
[   31.759311][ T3762] EXT4-fs (loop2): 1 truncate cleaned up
[   31.766272][ T3762] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   31.789998][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   31.806546][ T3784] netlink: 96 bytes leftover after parsing attributes in process `syz.3.119'.
[   31.842875][ T3789] netlink: 4 bytes leftover after parsing attributes in process `syz.3.120'.
[   31.857815][ T3789] team1: entered promiscuous mode
[   31.863242][ T3789] team1: entered allmulticast mode
[   31.868706][ T3786] loop2: detected capacity change from 0 to 8192
[   31.924391][ T3799] Driver unsupported XDP return value 0 on prog  (id 107) dev N/A, expect packet loss!
[   31.942083][ T3802] netlink: 8 bytes leftover after parsing attributes in process `syz.2.126'.
[   32.015930][ T3809] loop0: detected capacity change from 0 to 128
[   32.304951][ T3839] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   32.359853][ T3842] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   32.428747][ T3842] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   32.530477][ T3842] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   32.601057][ T3842] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   32.641458][ T3871] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   32.653935][ T3871] netlink: 4 bytes leftover after parsing attributes in process `syz.0.156'.
[   32.662961][ T3871] bridge_slave_1: left allmulticast mode
[   32.668675][ T3871] bridge_slave_1: left promiscuous mode
[   32.674564][ T3871] bridge0: port 2(bridge_slave_1) entered disabled state
[   32.682487][ T3871] bridge_slave_0: left allmulticast mode
[   32.688204][ T3871] bridge_slave_0: left promiscuous mode
[   32.694050][ T3871] bridge0: port 1(bridge_slave_0) entered disabled state
[   32.754810][ T3842] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   32.775781][ T3842] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   32.801437][ T3842] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   32.824812][ T3842] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   32.889760][ T3842] syz.2.143 (3842) used greatest stack depth: 10568 bytes left
[   32.906659][ T3409] IPVS: starting estimator thread 0...
[   32.940444][ T3893] loop3: detected capacity change from 0 to 512
[   32.953799][ T3893] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   32.967035][ T3893] ext4 filesystem being mounted at /35/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   33.010192][ T3901] tipc: Started in network mode
[   33.010227][ T3901] tipc: Node identity ac14140f, cluster identity 4711
[   33.010311][ T3901] tipc: New replicast peer: 255.255.255.255
[   33.010519][ T3901] tipc: Enabled bearer <udp:syz2>, priority 10
[   33.011949][ T3890] IPVS: using max 2352 ests per chain, 117600 per kthread
[   33.325380][ T3923] xt_hashlimit: size too large, truncated to 1048576
[   33.778720][ T3955] process 'syz.0.191' launched './file0' with NULL argv: empty string added
[   33.811568][ T3957] loop1: detected capacity change from 0 to 512
[   33.852219][ T3957] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   33.887640][ T3957] ext4 filesystem being mounted at /25/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   34.021232][ T3957] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #18: comm syz.1.192: corrupted inode contents
[   34.036663][ T3973] netlink: 'syz.4.198': attribute type 1 has an invalid length.
[   34.062073][ T3957] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #18: comm syz.1.192: mark_inode_dirty error
[   34.072531][ T3973] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link
[   34.088211][ T3973] netlink: 28 bytes leftover after parsing attributes in process `syz.4.198'.
[   34.099574][ T3973] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface
[   34.109325][ T3957] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #18: comm syz.1.192: corrupted inode contents
[   34.121172][ T2963] tipc: Node number set to 2886997007
[   34.128133][ T3973] bond1 (unregistering): Released all slaves
[   34.153756][ T3957] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2991: inode #18: comm syz.1.192: mark_inode_dirty error
[   34.186456][ T3957] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2994: inode #18: comm syz.1.192: mark inode dirty (error -117)
[   34.226196][ T3957] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117)
[   34.300365][ T3988] loop4: detected capacity change from 0 to 128
[   34.308469][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   34.320439][ T3988] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   34.343139][ T3988] ext4 filesystem being mounted at /35/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   34.382879][ T3995] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3995 comm=syz.1.207
[   34.412781][ T3997] loop0: detected capacity change from 0 to 1024
[   34.431153][ T3997] EXT4-fs: Ignoring removed orlov option
[   34.437161][ T3995] netlink: 12 bytes leftover after parsing attributes in process `syz.1.207'.
[   34.463380][ T3997] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   34.484768][ T3995] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   34.494080][ T3995] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   34.502820][ T3995] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   34.512461][ T3995] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   34.592729][ T3307] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   34.611111][ T4006] syz.2.209 uses obsolete (PF_INET,SOCK_PACKET)
[   34.664960][ T4005] netlink: 'syz.4.210': attribute type 39 has an invalid length.
[   34.728250][ T4011] netlink: 'syz.1.211': attribute type 13 has an invalid length.
[   34.779251][ T4015] netlink: 12 bytes leftover after parsing attributes in process `syz.2.213'.
[   34.832754][ T4016] netlink: 32 bytes leftover after parsing attributes in process `syz.1.211'.
[   34.870051][ T4011] bridge0: port 2(bridge_slave_1) entered disabled state
[   34.877497][ T4011] bridge0: port 1(bridge_slave_0) entered disabled state
[   34.911483][ T4018] netlink: 28 bytes leftover after parsing attributes in process `syz.2.213'.
[   34.923686][ T4011] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   34.935103][ T4011] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   34.967591][ T4011] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   34.977529][ T4011] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   34.986594][ T4011] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   34.995623][ T4011] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   35.011862][ T4011] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   35.020946][ T4011] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   35.029866][ T4011] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[   35.038892][ T4011] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[   35.077839][ T4017] 8021q: adding VLAN 0 to HW filter on device bond2
[   35.095167][ T4017] bond1: (slave bond2): Enslaving as an active interface with an up link
[   35.131176][ T4018] 8021q: adding VLAN 0 to HW filter on device bond1
[   35.161559][ T4024] netlink: 'syz.2.216': attribute type 27 has an invalid length.
[   35.210840][ T4024] bridge0: port 2(bridge_slave_1) entered disabled state
[   35.218718][ T4024] bridge0: port 1(bridge_slave_0) entered disabled state
[   35.353102][ T4024] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   35.367372][ T4024] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   35.377070][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.402824][ T4024] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   35.411291][ T4024] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   35.419716][ T4024] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   35.428234][ T4024] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   35.472799][ T4030] 8021q: adding VLAN 0 to HW filter on device bond0
[   35.480666][ T4030] 8021q: adding VLAN 0 to HW filter on device team0
[   35.489812][ T4030] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   35.548076][ T4030] syz.2.216 (4030) used greatest stack depth: 10360 bytes left
[   35.607366][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.627877][ T4053] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.225'.
[   35.723474][ T4063] loop2: detected capacity change from 0 to 512
[   35.741644][ T4063] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix.
[   35.756249][ T4063] EXT4-fs (loop2): mount failed
[   35.784829][ T4069] xt_hashlimit: max too large, truncated to 1048576
[   35.912777][ T4081] tipc: Started in network mode
[   35.917679][ T4081] tipc: Node identity 2000007, cluster identity 4711
[   35.924480][ T4081] tipc: Node number set to 33554439
[   35.947370][   T29] kauditd_printk_skb: 479 callbacks suppressed
[   35.947383][   T29] audit: type=1326 audit(1750257399.074:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4084 comm="syz.0.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b9e78e929 code=0x7ffc0000
[   35.976941][   T29] audit: type=1326 audit(1750257399.074:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4084 comm="syz.0.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b9e78e929 code=0x7ffc0000
[   36.000301][   T29] audit: type=1326 audit(1750257399.074:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4084 comm="syz.0.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7b9e78e929 code=0x7ffc0000
[   36.023677][   T29] audit: type=1326 audit(1750257399.074:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4084 comm="syz.0.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b9e78e929 code=0x7ffc0000
[   36.047439][   T29] audit: type=1326 audit(1750257399.074:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4084 comm="syz.0.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b9e78e929 code=0x7ffc0000
[   36.071508][   T29] audit: type=1326 audit(1750257399.074:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4084 comm="syz.0.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7b9e78e929 code=0x7ffc0000
[   36.094890][   T29] audit: type=1326 audit(1750257399.074:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4084 comm="syz.0.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b9e78e929 code=0x7ffc0000
[   36.118941][   T29] audit: type=1326 audit(1750257399.074:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4084 comm="syz.0.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7b9e78e929 code=0x7ffc0000
[   36.142985][   T29] audit: type=1326 audit(1750257399.074:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4084 comm="syz.0.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b9e78e929 code=0x7ffc0000
[   36.166399][   T29] audit: type=1326 audit(1750257399.074:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4084 comm="syz.0.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7b9e78e929 code=0x7ffc0000
[   36.317977][ T4097] syz.2.244 (4097) used greatest stack depth: 10192 bytes left
[   36.823569][ T4189] __nla_validate_parse: 6 callbacks suppressed
[   36.823649][ T4189] netlink: 24 bytes leftover after parsing attributes in process `syz.3.251'.
[   37.342475][ T4234] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[   37.357042][ T4232] rdma_op ffff888166d6a180 conn xmit_rdma 0000000000000000
[   37.447682][ T4247] loop3: detected capacity change from 0 to 512
[   37.455903][ T4247] journal_path: Lookup failure for './file0/../file0'
[   37.462755][ T4247] EXT4-fs: error: could not find journal device path
[   37.713723][ T4273] netlink: 8 bytes leftover after parsing attributes in process `syz.0.287'.
[   37.760820][ T4277] loop4: detected capacity change from 0 to 1024
[   37.767561][ T4277] EXT4-fs: Ignoring removed orlov option
[   37.776149][ T4277] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   37.857040][ T4285] syzkaller0: entered promiscuous mode
[   37.862877][ T4285] syzkaller0: entered allmulticast mode
[   38.052280][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.107873][ T4302] tipc: Started in network mode
[   38.112896][ T4302] tipc: Node identity 621d46655c7d, cluster identity 4711
[   38.120170][ T4302] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   38.131914][ T4302] tipc: Disabling bearer <eth:syzkaller0>
[   38.253843][ T4311] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   38.263036][ T4310] tipc: Resetting bearer <eth:syzkaller0>
[   38.296121][ T4310] tipc: Disabling bearer <eth:syzkaller0>
[   38.307990][ T4321] veth0: entered promiscuous mode
[   38.317273][ T4321] netlink: 4 bytes leftover after parsing attributes in process `syz.0.309'.
[   38.328533][ T4323] loop2: detected capacity change from 0 to 256
[   38.335903][ T4323] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   38.478470][ T4332] wg2: entered promiscuous mode
[   38.483555][ T4332] wg2: entered allmulticast mode
[   38.493730][ T4336] @: renamed from vlan0 (while UP)
[   38.565810][ T4341] netlink: 'syz.4.317': attribute type 13 has an invalid length.
[   38.586812][ T4341] gretap0: refused to change device tx_queue_len
[   38.594031][ T4341] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   38.691727][ T4352] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   38.717347][ T4354] netlink: 4 bytes leftover after parsing attributes in process `syz.2.323'.
[   38.778624][ T4361] lo speed is unknown, defaulting to 1000
[   38.797333][ T4352] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   38.810522][ T4361] lo speed is unknown, defaulting to 1000
[   38.821757][ T4361] lo speed is unknown, defaulting to 1000
[   38.830076][ T4361] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   38.845763][ T4361] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   38.873382][ T4361] lo speed is unknown, defaulting to 1000
[   38.888488][ T4352] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   38.902975][ T4361] lo speed is unknown, defaulting to 1000
[   38.913099][ T4361] lo speed is unknown, defaulting to 1000
[   38.923704][ T4361] lo speed is unknown, defaulting to 1000
[   38.934413][ T4361] lo speed is unknown, defaulting to 1000
[   38.943703][ T4352] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   38.998270][ T4352] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   39.010891][ T4352] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   39.033692][ T4352] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   39.063299][ T4352] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   39.347258][ T4375] netlink: 8 bytes leftover after parsing attributes in process `syz.1.331'.
[   39.724362][ T4377] loop1: detected capacity change from 0 to 2048
[   39.831403][ T4377]  loop1: p1 < > p4
[   39.837128][ T4377] loop1: p4 size 8388608 extends beyond EOD, truncated
[   39.915897][ T4382] wg2: entered promiscuous mode
[   39.920842][ T4382] wg2: entered allmulticast mode
[   40.050230][ T4397] netlink: 'syz.2.340': attribute type 1 has an invalid length.
[   40.082578][ T4397] 8021q: adding VLAN 0 to HW filter on device bond3
[   40.101257][ T4400] netlink: 'syz.0.343': attribute type 7 has an invalid length.
[   40.108937][ T4400] netlink: 8 bytes leftover after parsing attributes in process `syz.0.343'.
[   40.126153][ T4405] netlink: 4 bytes leftover after parsing attributes in process `syz.2.340'.
[   40.174275][ T4405] bond3 (unregistering): Released all slaves
[   40.314842][ T4415] loop1: detected capacity change from 0 to 512
[   40.327288][ T4415] EXT4-fs error (device loop1): ext4_iget_extra_inode:5035: inode #15: comm syz.1.348: corrupted in-inode xattr: invalid ea_ino
[   40.343502][ T4415] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.348: couldn't read orphan inode 15 (err -117)
[   40.368635][ T4415] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   40.387950][ T4426] tipc: New replicast peer: 255.255.255.255
[   40.394308][ T4426] tipc: Enabled bearer <udp:s>, priority 10
[   40.494493][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.524674][ T4446] loop3: detected capacity change from 0 to 512
[   40.535218][ T4446] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   40.553771][ T4446] EXT4-fs (loop3): 1 truncate cleaned up
[   40.560088][ T4446] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   40.668834][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.738480][ T4466] syz_tun: entered allmulticast mode
[   40.757103][ T4464] syz_tun: left allmulticast mode
[   40.785045][ T4469] netlink: 'syz.1.374': attribute type 1 has an invalid length.
[   40.792775][ T4469] netlink: 224 bytes leftover after parsing attributes in process `syz.1.374'.
[   40.810374][ T4474] loop3: detected capacity change from 0 to 512
[   40.823832][ T4474] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   40.842984][ T4474] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   40.856896][ T4474] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   40.867146][ T4461] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4461 comm=syz.2.370
[   40.895041][ T4474] SELinux:  Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped).
[   40.912736][ T4474] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[   40.939486][ T4474] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.011877][ T4483] lo speed is unknown, defaulting to 1000
[   41.043246][ T4489] bridge: RTM_NEWNEIGH with invalid ether address
[   41.136720][ T4501] wg2: entered promiscuous mode
[   41.141755][ T4501] wg2: entered allmulticast mode
[   41.172016][   T29] kauditd_printk_skb: 183 callbacks suppressed
[   41.172030][   T29] audit: type=1400 audit(1750257404.304:1267): avc:  denied  { mount } for  pid=4504 comm="syz.4.389" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   41.212396][   T29] audit: type=1400 audit(1750257404.334:1268): avc:  denied  { create } for  pid=4506 comm="syz.3.390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1
[   41.239326][ T4511] loop3: detected capacity change from 0 to 1024
[   41.250616][ T4513] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4513 comm=syz.2.392
[   41.263798][ T4513] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4513 comm=syz.2.392
[   41.308951][ T4511] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   41.373296][ T4511] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   41.387074][ T4521] netlink: 4 bytes leftover after parsing attributes in process `syz.2.395'.
[   41.397127][   T29] audit: type=1400 audit(1750257404.514:1269): avc:  denied  { ioctl } for  pid=4520 comm="syz.2.395" path="socket:[7931]" dev="sockfs" ino=7931 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   41.481819][ T4521] hsr_slave_0 (unregistering): left promiscuous mode
[   41.594168][ T4528] loop2: detected capacity change from 0 to 1024
[   41.603165][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.612535][ T4528] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   41.644399][ T4528] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   41.655971][ T4528] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[   41.671595][ T4528] JBD2: no valid journal superblock found
[   41.677421][ T4528] EXT4-fs (loop2): Could not load journal inode
[   41.717100][ T4539] usb usb8: usbfs: process 4539 (syz.4.397) did not claim interface 0 before use
[   41.808900][   T29] audit: type=1326 audit(1750257404.934:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4551 comm="syz.3.405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5a175e929 code=0x7ffc0000
[   41.884936][   T29] audit: type=1326 audit(1750257404.964:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4551 comm="syz.3.405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5a175e929 code=0x7ffc0000
[   41.908517][   T29] audit: type=1326 audit(1750257404.964:1272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4551 comm="syz.3.405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe5a175e929 code=0x7ffc0000
[   41.931898][   T29] audit: type=1326 audit(1750257404.964:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4551 comm="syz.3.405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5a175e929 code=0x7ffc0000
[   41.955329][   T29] audit: type=1326 audit(1750257404.964:1274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4551 comm="syz.3.405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5a175e929 code=0x7ffc0000
[   41.978782][   T29] audit: type=1326 audit(1750257404.964:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4551 comm="syz.3.405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe5a175e929 code=0x7ffc0000
[   42.002181][   T29] audit: type=1326 audit(1750257404.984:1276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4551 comm="syz.3.405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5a175e929 code=0x7ffc0000
[   42.003741][ T4533] loop0: detected capacity change from 0 to 1024
[   42.059950][ T4533] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[   42.074425][ T4568] loop4: detected capacity change from 0 to 1764
[   42.125527][ T4533] netlink: 12 bytes leftover after parsing attributes in process `syz.0.401'.
[   42.194064][ T4571] loop2: detected capacity change from 0 to 1024
[   42.213449][ T4571] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   42.228511][ T4577] netlink: 'syz.4.412': attribute type 27 has an invalid length.
[   42.242420][ T4571] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 15: block 433:freeing already freed block (bit 27); block bitmap corrupt.
[   42.275671][ T4571] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28
[   42.288026][ T4571] EXT4-fs (loop2): This should not happen!! Data will be lost
[   42.288026][ T4571] 
[   42.297749][ T4571] EXT4-fs (loop2): Total free blocks count 0
[   42.304368][ T4571] EXT4-fs (loop2): Free/Dirty block details
[   42.310273][ T4571] EXT4-fs (loop2): free_blocks=16
[   42.315404][ T4571] EXT4-fs (loop2): dirty_blocks=0
[   42.320456][ T4571] EXT4-fs (loop2): Block reservation details
[   42.326475][ T4571] EXT4-fs (loop2): i_reserved_data_blocks=0
[   42.360262][ T4577] bridge0: port 2(bridge_slave_1) entered disabled state
[   42.367670][ T4577] bridge0: port 1(bridge_slave_0) entered disabled state
[   42.411125][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.442183][ T4591] netlink: 'syz.0.418': attribute type 1 has an invalid length.
[   42.457757][ T4577] wg2: left promiscuous mode
[   42.462477][ T4577] wg2: left allmulticast mode
[   42.497560][ T4577] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   42.509436][ T4577] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   42.539374][ T4577] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   42.547803][ T4577] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   42.556182][ T4577] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   42.564543][ T4577] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   42.582684][ T4600] netlink: 28 bytes leftover after parsing attributes in process `syz.0.418'.
[   42.605442][ T4148] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   42.623417][ T4591] bond1: entered promiscuous mode
[   42.628505][ T4591] bond1: entered allmulticast mode
[   42.652879][ T4148] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   42.697434][ T4598] geneve2: entered allmulticast mode
[   42.744163][ T4598] bond1: (slave geneve2): making interface the new active one
[   42.753180][ T4598] geneve2: entered promiscuous mode
[   42.801844][ T4598] bond1: (slave geneve2): Enslaving as an active interface with an up link
[   42.811391][ T4600] bond1: left promiscuous mode
[   42.816212][ T4600] geneve2: left promiscuous mode
[   42.821326][ T4600] bond1: left allmulticast mode
[   42.828657][ T4600] 8021q: adding VLAN 0 to HW filter on device bond1
[   42.833885][ T4610] loop4: detected capacity change from 0 to 512
[   42.843083][ T4148] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   42.853652][ T4610] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349)
[   42.856958][ T4598] syz.0.418 (4598) used greatest stack depth: 10096 bytes left
[   42.872742][ T4610] EXT4-fs (loop4): orphan cleanup on readonly fs
[   42.880157][ T4610] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:517: comm syz.4.422: Block bitmap for bg 0 marked uninitialized
[   42.895564][ T4610] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem
[   42.904950][ T4610] EXT4-fs (loop4): 1 orphan inode deleted
[   42.917877][ T4616] vhci_hcd: default hub control req: 2317 v0040 i0002 l0
[   42.923623][ T4594] lo speed is unknown, defaulting to 1000
[   42.926597][ T4610] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[   42.944333][ T4148] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   42.951203][ T4610] EXT4-fs (loop4): shut down requested (1)
[   42.974147][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.010870][ T4594] chnl_net:caif_netlink_parms(): no params data found
[   43.112796][ T4148] bond0 (unregistering): Released all slaves
[   43.139734][ T4594] bridge0: port 1(bridge_slave_0) entered blocking state
[   43.146903][ T4594] bridge0: port 1(bridge_slave_0) entered disabled state
[   43.154129][ T4594] bridge_slave_0: entered allmulticast mode
[   43.160693][ T4594] bridge_slave_0: entered promiscuous mode
[   43.167466][ T4594] bridge0: port 2(bridge_slave_1) entered blocking state
[   43.175095][ T4594] bridge0: port 2(bridge_slave_1) entered disabled state
[   43.182427][ T4594] bridge_slave_1: entered allmulticast mode
[   43.188967][ T4594] bridge_slave_1: entered promiscuous mode
[   43.195302][ T4148] tipc: Left network mode
[   43.206192][ T4594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   43.217434][ T4148] hsr_slave_0: left promiscuous mode
[   43.223202][ T4148] hsr_slave_1: left promiscuous mode
[   43.231061][ T4148] veth1_macvtap: left promiscuous mode
[   43.236568][ T4148] veth0_macvtap: left promiscuous mode
[   43.242983][ T4148] veth1_vlan: left promiscuous mode
[   43.248281][ T4148] veth0_vlan: left promiscuous mode
[   43.363140][ T4594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   43.373044][ T3402] lo speed is unknown, defaulting to 1000
[   43.378781][ T3402] infiniband syz2: ib_query_port failed (-19)
[   43.455835][ T4594] team0: Port device team_slave_0 added
[   43.465938][ T4594] team0: Port device team_slave_1 added
[   43.476834][ T4634] SELinux: failed to load policy
[   43.509714][ T4594] batman_adv: batadv0: Adding interface: batadv_slave_0
[   43.517336][ T4594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   43.544104][ T4594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   43.567091][ T4594] batman_adv: batadv0: Adding interface: batadv_slave_1
[   43.574712][ T4594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   43.600747][ T4594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   43.667808][ T4594] hsr_slave_0: entered promiscuous mode
[   43.681281][ T4594] hsr_slave_1: entered promiscuous mode
[   43.696346][ T4594] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   43.717388][ T4637] loop2: detected capacity change from 0 to 1024
[   43.724371][ T4594] Cannot create hsr debugfs directory
[   43.737356][ T4637] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[   43.766825][ T4637] netlink: 32 bytes leftover after parsing attributes in process `syz.2.429'.
[   43.804031][ T4148] IPVS: stop unused estimator thread 0...
[   43.844719][ T4642] loop0: detected capacity change from 0 to 2048
[   43.893470][ T4648] netlink: 'syz.4.434': attribute type 27 has an invalid length.
[   43.906218][ T4642]  loop0: p1 < > p3
[   43.913525][ T4642] loop0: p3 size 134217728 extends beyond EOD, truncated
[   44.029821][ T4594] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   44.061262][ T4594] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   44.079807][ T4594] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   44.099971][ T4594] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   44.206126][ T4594] 8021q: adding VLAN 0 to HW filter on device bond0
[   44.233976][ T4594] 8021q: adding VLAN 0 to HW filter on device team0
[   44.245808][ T4119] bridge0: port 1(bridge_slave_0) entered blocking state
[   44.253009][ T4119] bridge0: port 1(bridge_slave_0) entered forwarding state
[   44.254796][ T3388] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   44.267712][ T3388] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   44.275805][ T3388] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   44.282768][ T4131] bridge0: port 2(bridge_slave_1) entered blocking state
[   44.290249][ T4131] bridge0: port 2(bridge_slave_1) entered forwarding state
[   44.353285][ T3388] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   44.360840][ T3388] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   44.368252][ T3388] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   44.376318][ T3388] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   44.383847][ T3388] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   44.391344][ T3388] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   44.398789][ T3388] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   44.406851][ T3388] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   44.407258][ T4594] 8021q: adding VLAN 0 to HW filter on device batadv0
[   44.414334][ T3388] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   44.428609][ T3388] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   44.436757][ T3388] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   44.508079][ T4684] loop0: detected capacity change from 0 to 164
[   44.515319][ T4684] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   44.535875][ T3388] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   44.544001][ T3388] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   44.551644][ T3388] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   44.559241][ T3388] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   44.566731][ T3388] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   44.574747][ T3388] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   44.582171][ T3388] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   44.589616][ T3388] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   44.597111][ T3388] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   44.605203][ T3388] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   44.613055][ T3388] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   44.620528][ T3388] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   44.628086][ T3388] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   44.636611][ T3388] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   44.650070][ T3388] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[   44.681007][ T4698] netlink: 28 bytes leftover after parsing attributes in process `syz.2.447'.
[   44.689960][ T4698] netlink: 28 bytes leftover after parsing attributes in process `syz.2.447'.
[   44.704023][ T4698] syz_tun: entered promiscuous mode
[   44.711150][ T4698] syz_tun: left promiscuous mode
[   44.717816][ T4696] wg2: entered promiscuous mode
[   44.723344][ T4696] wg2: entered allmulticast mode
[   44.753105][ T4594] veth0_vlan: entered promiscuous mode
[   44.774425][ T4705] netlink: 4 bytes leftover after parsing attributes in process `syz.0.448'.
[   44.777596][ T4594] veth1_vlan: entered promiscuous mode
[   44.856476][ T4594] veth0_macvtap: entered promiscuous mode
[   44.880599][ T4713] netlink: 'syz.2.453': attribute type 1 has an invalid length.
[   44.881175][ T4594] veth1_macvtap: entered promiscuous mode
[   44.937330][ T4713] 8021q: adding VLAN 0 to HW filter on device bond3
[   44.986200][ T4594] batman_adv: batadv0: Interface activated: batadv_slave_0
[   45.015250][ T4716] 8021q: adding VLAN 0 to HW filter on device bond3
[   45.024888][ T4716] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[   45.062044][ T4716] bond3: (slave vxcan3): Error -95 calling set_mac_address
[   45.103825][ T4594] batman_adv: batadv0: Interface activated: batadv_slave_1
[   45.114455][ T4713] ip6erspan0: entered promiscuous mode
[   45.132087][ T4713] bond3: (slave ip6erspan0): making interface the new active one
[   45.141732][ T4713] bond3: (slave ip6erspan0): Enslaving as an active interface with an up link
[   45.156987][ T4594] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   45.165852][ T4594] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   45.175188][ T4594] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   45.184084][ T4594] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   45.196975][ T4721] netlink: 'syz.0.455': attribute type 27 has an invalid length.
[   45.340024][ T4721] wg2: left promiscuous mode
[   45.344757][ T4721] wg2: left allmulticast mode
[   45.401494][ T4721] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   45.423688][ T4721] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   45.506149][ T4721] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   45.515119][ T4721] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   45.524228][ T4721] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   45.533311][ T4721] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   45.562367][ T4721] geneve2: left allmulticast mode
[   45.618278][ T4722] 8021q: adding VLAN 0 to HW filter on device bond0
[   45.652246][ T4722] 8021q: adding VLAN 0 to HW filter on device team0
[   45.672073][ T4722] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   45.943341][ T4744] loop2: detected capacity change from 0 to 128
[   45.954073][ T4748] capability: warning: `syz.5.466' uses 32-bit capabilities (legacy support in use)
[   45.981264][ T4744] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   46.001511][ T4744] ext4 filesystem being mounted at /108/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   46.105460][ T3310] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   46.135466][ T4756] netlink: 'syz.4.469': attribute type 1 has an invalid length.
[   46.157634][ T4756] 8021q: adding VLAN 0 to HW filter on device bond1
[   46.165498][ T4759] netlink: 4 bytes leftover after parsing attributes in process `syz.2.468'.
[   46.218466][ T4756] netlink: 4 bytes leftover after parsing attributes in process `syz.4.469'.
[   46.229736][ T4756] bond1 (unregistering): Released all slaves
[   46.242467][   T29] kauditd_printk_skb: 333 callbacks suppressed
[   46.242542][   T29] audit: type=1400 audit(1750257409.374:1610): avc:  denied  { mount } for  pid=4765 comm="syz.5.472" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[   46.373205][ T4776] netlink: 'syz.0.475': attribute type 27 has an invalid length.
[   46.420165][   T29] audit: type=1326 audit(1750257409.544:1611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4773 comm="syz.4.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde5399e929 code=0x7ffc0000
[   46.444246][   T29] audit: type=1326 audit(1750257409.544:1612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4773 comm="syz.4.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fde5399e929 code=0x7ffc0000
[   46.467667][   T29] audit: type=1326 audit(1750257409.544:1613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4773 comm="syz.4.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde5399e929 code=0x7ffc0000
[   46.491657][   T29] audit: type=1326 audit(1750257409.544:1614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4773 comm="syz.4.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fde5399e929 code=0x7ffc0000
[   46.515545][   T29] audit: type=1326 audit(1750257409.544:1615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4773 comm="syz.4.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde5399e929 code=0x7ffc0000
[   46.539669][   T29] audit: type=1326 audit(1750257409.544:1616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4773 comm="syz.4.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fde5399e929 code=0x7ffc0000
[   46.563657][   T29] audit: type=1326 audit(1750257409.544:1617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4773 comm="syz.4.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fde539958e7 code=0x7ffc0000
[   46.586896][   T29] audit: type=1326 audit(1750257409.544:1618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4773 comm="syz.4.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fde5393ab19 code=0x7ffc0000
[   46.610737][   T29] audit: type=1326 audit(1750257409.544:1619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4773 comm="syz.4.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde5399e929 code=0x7ffc0000
[   46.698888][ T4778] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.707384][ T4778] 8021q: adding VLAN 0 to HW filter on device team0
[   46.724140][ T4778] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   47.953804][ T4804] tipc: Started in network mode
[   47.958821][ T4804] tipc: Node identity ba4725edb51e, cluster identity 4711
[   47.966068][ T4804] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   47.999925][ T4798] tipc: Resetting bearer <eth:syzkaller0>
[   48.014443][ T4798] tipc: Disabling bearer <eth:syzkaller0>
[   48.073257][ T4806] netlink: 4 bytes leftover after parsing attributes in process `syz.2.496'.
[   48.094721][ T4808] netlink: 'syz.5.485': attribute type 1 has an invalid length.
[   48.115609][ T4808] netlink: 4 bytes leftover after parsing attributes in process `syz.5.485'.
[   48.196692][ T4814] lo speed is unknown, defaulting to 1000
[   48.204941][ T4814] lo speed is unknown, defaulting to 1000
[   48.212670][ T4814] lo speed is unknown, defaulting to 1000
[   48.223136][ T4816] netlink: 'syz.1.489': attribute type 27 has an invalid length.
[   48.225995][ T4814] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   48.238845][ T4816] wg2: left promiscuous mode
[   48.243552][ T4816] wg2: left allmulticast mode
[   48.252950][ T4814] lo speed is unknown, defaulting to 1000
[   48.272095][ T4816] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.279861][ T4816] 8021q: adding VLAN 0 to HW filter on device team0
[   48.289181][ T4816] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   48.304902][ T4814] lo speed is unknown, defaulting to 1000
[   48.327111][ T4814] lo speed is unknown, defaulting to 1000
[   48.343903][ T4821] netlink: 4 bytes leftover after parsing attributes in process `syz.1.490'.
[   48.347039][ T4814] lo speed is unknown, defaulting to 1000
[   48.363187][ T4814] lo speed is unknown, defaulting to 1000
[   48.723943][ T4826] loop5: detected capacity change from 0 to 256
[   48.731832][ T4826] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   49.255012][ T4838] SELinux: failed to load policy
[   50.170554][ T4853] netlink: 'syz.0.505': attribute type 1 has an invalid length.
[   50.170696][ T4856] netlink: 'syz.2.503': attribute type 27 has an invalid length.
[   50.184414][ T4853] 8021q: adding VLAN 0 to HW filter on device bond2
[   50.223480][ T4853] netlink: 4 bytes leftover after parsing attributes in process `syz.0.505'.
[   50.241271][ T4859] siw: device registration error -23
[   50.244064][ T4854] tipc: Started in network mode
[   50.253501][ T4854] tipc: Node identity 4af1ba94fa0b, cluster identity 4711
[   50.261859][ T4854] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   50.284577][ T4853] bond2 (unregistering): Released all slaves
[   50.333845][ T4856] wg2: left promiscuous mode
[   50.338496][ T4856] wg2: left allmulticast mode
[   50.344619][ T4856] ip6erspan0: left promiscuous mode
[   50.376275][ T4867] loop0: detected capacity change from 0 to 256
[   50.394856][ T4860] 8021q: adding VLAN 0 to HW filter on device bond0
[   50.406535][ T4867] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   50.424422][ T4860] 8021q: adding VLAN 0 to HW filter on device team0
[   50.463709][ T4860] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   50.496807][ T4861] tipc: Disabling bearer <eth:syzkaller0>
[   50.535490][ T4865] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   50.613399][ T4872] netlink: 4 bytes leftover after parsing attributes in process `syz.4.512'.
[   50.634532][ T4865] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   50.693657][ T4865] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   50.743312][ T4865] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   50.797190][ T4865] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   50.815705][ T4865] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   50.827216][ T4865] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   50.848058][ T4865] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   50.945585][ T4888] loop5: detected capacity change from 0 to 512
[   50.960242][ T4888] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   50.973097][ T4888] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   50.986432][ T4888] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   51.029298][ T4888] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[   51.060252][ T4888] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.209753][ T4899] loop9: detected capacity change from 0 to 7
[   51.217728][ T4899] Buffer I/O error on dev loop9, logical block 0, async page read
[   51.227745][ T4899] Buffer I/O error on dev loop9, logical block 0, async page read
[   51.235741][ T4899]  loop9: unable to read partition table
[   51.243680][ T4899] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[   51.243680][ T4899] 
) failed (rc=-5)
[   51.407227][ T4903] lo speed is unknown, defaulting to 1000
[   51.495268][ T4907] loop4: detected capacity change from 0 to 512
[   51.514473][ T4907] journal_path: Lookup failure for './file0/../file0'
[   51.521419][ T4907] EXT4-fs: error: could not find journal device path
[   51.726187][ T4916] loop5: detected capacity change from 0 to 2048
[   51.761568][ T4916]  loop5: p1 < > p4
[   51.766096][ T4916] loop5: p4 size 8388608 extends beyond EOD, truncated
[   51.784922][   T29] kauditd_printk_skb: 453 callbacks suppressed
[   51.784938][   T29] audit: type=1400 audit(1750257414.914:2073): avc:  denied  { mounton } for  pid=4915 comm="syz.5.530" path="/22/bus" dev="tmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   51.962367][ T4924] loop0: detected capacity change from 0 to 512
[   51.981834][ T4924] journal_path: Lookup failure for './file0/../file0'
[   51.988672][ T4924] EXT4-fs: error: could not find journal device path
[   52.223276][ T4938] loop0: detected capacity change from 0 to 1024
[   52.231624][ T4938] EXT4-fs: Ignoring removed orlov option
[   52.247223][ T4938] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   52.346439][ T4942] ==================================================================
[   52.354560][ T4942] BUG: KCSAN: data-race in generic_buffers_fsync_noflush / writeback_single_inode
[   52.363791][ T4942] 
[   52.366126][ T4942] write to 0xffff888106f40ea8 of 4 bytes by task 4938 on cpu 0:
[   52.373760][ T4942]  writeback_single_inode+0x14a/0x3e0
[   52.379142][ T4942]  sync_inode_metadata+0x5b/0x90
[   52.384077][ T4942]  generic_buffers_fsync_noflush+0xd9/0x120
[   52.389981][ T4942]  ext4_sync_file+0x1ab/0x690
[   52.394669][ T4942]  vfs_fsync_range+0x10d/0x130
[   52.399427][ T4942]  ext4_buffered_write_iter+0x34f/0x3c0
[   52.404972][ T4942]  ext4_file_write_iter+0x383/0xf00
[   52.410173][ T4942]  iter_file_splice_write+0x5f2/0x970
[   52.415543][ T4942]  direct_splice_actor+0x156/0x2a0
[   52.420654][ T4942]  splice_direct_to_actor+0x312/0x680
[   52.426042][ T4942]  do_splice_direct+0xda/0x150
[   52.430821][ T4942]  do_sendfile+0x380/0x650
[   52.435235][ T4942]  __x64_sys_sendfile64+0x105/0x150
[   52.440427][ T4942]  x64_sys_call+0xb39/0x2fb0
[   52.445023][ T4942]  do_syscall_64+0xd2/0x200
[   52.449515][ T4942]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   52.455405][ T4942] 
[   52.457716][ T4942] read to 0xffff888106f40ea8 of 4 bytes by task 4942 on cpu 1:
[   52.465248][ T4942]  generic_buffers_fsync_noflush+0x80/0x120
[   52.471144][ T4942]  ext4_sync_file+0x1ab/0x690
[   52.475815][ T4942]  vfs_fsync_range+0x10d/0x130
[   52.480564][ T4942]  ext4_buffered_write_iter+0x34f/0x3c0
[   52.486105][ T4942]  ext4_file_write_iter+0x383/0xf00
[   52.491296][ T4942]  iter_file_splice_write+0x5f2/0x970
[   52.496670][ T4942]  direct_splice_actor+0x156/0x2a0
[   52.501781][ T4942]  splice_direct_to_actor+0x312/0x680
[   52.507161][ T4942]  do_splice_direct+0xda/0x150
[   52.511934][ T4942]  do_sendfile+0x380/0x650
[   52.516344][ T4942]  __x64_sys_sendfile64+0x105/0x150
[   52.521536][ T4942]  x64_sys_call+0xb39/0x2fb0
[   52.526118][ T4942]  do_syscall_64+0xd2/0x200
[   52.530608][ T4942]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   52.536500][ T4942] 
[   52.538811][ T4942] value changed: 0x00000038 -> 0x00000002
[   52.544514][ T4942] 
[   52.546827][ T4942] Reported by Kernel Concurrency Sanitizer on:
[   52.554551][ T4942] CPU: 1 UID: 0 PID: 4942 Comm: syz.0.548 Not tainted 6.16.0-rc2-syzkaller-00047-g52da431bf03b #0 PREEMPT(voluntary) 
[   52.566865][ T4942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   52.576907][ T4942] ==================================================================
[   52.842312][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.