last executing test programs:

4.43895635s ago: executing program 0 (id=710):
syz_open_procfs(0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{}, &(0x7f0000000000), 0x0}, 0x20)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10)
io_setup(0x6, &(0x7f00000000c0))
openat$sysfs(0xffffffffffffff9c, 0x0, 0x20001, 0x82)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
connect$inet(r0, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10)
sendmmsg$inet(r0, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x7e1f, 0x0, 0x0, 0x0, 0x0, 0x6000}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="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", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x300}}], 0x3, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000180), 0x101000, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/mdstat\x00', 0x0, 0x0)
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYRES32, @ANYRES16, @ANYBLOB="01002cbd7000ffdbdf250c000000200001801400020076657468315f746f5f6873720000000008050300e1000000180003801400038010000180040003000800010004000000"], 0x4c}, 0x1, 0x0, 0x0, 0x40000818}, 0x20000004)
read$msr(r1, &(0x7f0000000180)=""/92, 0x5c)
add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @auto=[0x61, 0x33, 0x0, 0x31, 0x64, 0x38, 0x36, 0x34, 0x62, 0x66, 0x33, 0x64, 0x31, 0x61, 0x32, 0x65]}, &(0x7f0000000100)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143", 0x100001f}, 0x48, 0xfffffffffffffffb)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x10)

4.197914441s ago: executing program 0 (id=715):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@bridge_newvlan={0x24, 0x76, 0x709, 0x2, 0x0, {0x7, 0x2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0xd, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x4}}]}, 0x24}, 0x1, 0x5502000000000000}, 0x4000)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c)
setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x4, 0xfffffffe}, 0x3c)
setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f4d7ed79c31e2e0f1da00000000230000002000", 0x1, 0x0, 0x3}, 0x3c)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x2, 0x10, 0x4, 0x64, 0x2, 0x5, 0x4b, 0xa7, @loopback, @dev={0xac, 0x14, 0x14, 0x35}}}}}}}, 0x0)
setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x1d, 0x3, @private=0xa010102, @local}}}}}}, 0x0)
r4 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "fc79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c)

4.111644885s ago: executing program 0 (id=716):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000002c0), 0x64, 0x50a, &(0x7f0000000940)="$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")
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r0}, 0x10)
r1 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x1, @multicast, 'ip6gre0\x00'}}, 0x1e)
connect$pppoe(r1, 0x0, 0x0)
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000))
syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200080, &(0x7f0000000500)={[{@mb_optimize_scan}, {@discard}, {@barrier}, {@noauto_da_alloc}, {@prjquota}, {@journal_dev={'journal_dev', 0x3d, 0x4}}]}, 0xfb, 0x59e, &(0x7f0000001480)="$eJzs3U9rVFcbAPDnTjJGje9rBJHXd1ECLmqxTkzSPxa6sMvSSgPt3oZkDJKJI8lETCqoi7rppkihlAqlH6B7l9Iv0E8hVEGKhHbRRafcyR0zSWaSSRzNmPn9YDLn3Hsn5z733nPmnDkz3AB61nD6JxdxMiK+TSKONqzrj2zl8Op2K89uTqWPJKrVz/9IIsmW1bdPsufBLPO/iPj164gzuc3lLiwtz06WSsX5LD9Smbs2srC0fPbK3ORMcaZ4dWx8/Py742MfvP/e5hcP7C7Wtyb++uGzhx+f/+bUyve/PDl2L4kLcSRb1xjHC7jdmBmO4eyY5OPChg1HO1BYN0n2egfYlb6snucjbQOORl9W64H971ZEVIEelaj/0KPq/YD62H7LcXB1/43ynn5UGwANbI4/Wf1sJA7WxkaHV5J1I6P0SAx1oPy0jAeP79978Dg7Ibc68jkEwLZu34mIc/3969q//0ZD+7d759rYZmMZHfocFmjDw7T/8/ZAk/5f7nn/Jxr6P7PZ6wab1N3d2L7+5550oJiW0v7fh037v88nrYb6stx/an2+fHL5SqmYtm1pM3k68gNpfqv5nPMrj6qt1q31/1Yfafnp89oWuSf9G+a7picrky8Sc6OndyL+398s/rX+b9Kk/5sej4k2yzhRvP9Gq3Xbx/9yVX+OeLPp+V8b6yTr5idPbpyfHKldDyP1q2KzP++e+K1V+Xsdf3r+D28d/1DSOF+7sPMyfjr4d7HVuuEkmzTd4fV/IPmilj6QLbsxWanMj0YcSD7dvHxs7bX1fH37NP7Tp5rX/62u/0MR8WWb8d89frflpm2f/3ybhe1QGv/0js5/i0Q1abnq0Sdf/bj7+NPz/04tdTpb0k77t8Werku8yLEDAAAAAACAbpOLiCOR5Aq19ME4ErlcobD6/Y7jcThXKi9UzlwuL16djtpvZYcin6vPdA82fB9iNPs+bD0/tiE/HhHHIuK7vkO1fGGqXJre6+ABAAAAAAAAAAAAAAAAAACgSwyu+/1/PP/9f+r3vr3eO+ClW7uxwcQub60PvK62veV/J+70BHSlLer//rvjL7DOtu//wL6l/kPvarf+//OS9wN49bz/Q+9S/6F3qf/Qu9R/AAAAAAAAAAAAAAAAAAAAAAAAAAAA6KiJixfTR3Xl2c2pND99fWlxtnz97HRxYbYwtzhVmCrPXyvMlMszpWJhqhxD2/y/Url8bXQsFm+MVIpJZWRhafnSXHnxauXSlbnJmeKlYv7VhAUAAAAAAAAAAAAAAAAAAACvlYWl5dnJUqk4LyHRfiIfEdmS/m7Yn04lqtVqtQt2oxsSe90yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCafwMAAP//jeA8bA==")
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000007c0)=ANY=[], &(0x7f0000000180)=""/17, 0x8d, 0x11, 0x1, 0x80000001}, 0x28)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x4, 0x7ffc0002}]})
socket$nl_netfilter(0x10, 0x3, 0xc)
semtimedop(0x0, &(0x7f0000000280)=[{0x0, 0x1000, 0x1000}], 0x1, 0x0)
unshare(0x2c040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f00000000c0))
openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42103, 0x71)

3.52371174s ago: executing program 0 (id=720):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18)
readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000580)=""/244, 0xf4}], 0x1)
timer_create(0x7, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000280))
r3 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
fcntl$setsig(r3, 0xa, 0x13)
fcntl$setlease(r3, 0x400, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
truncate(&(0x7f0000000040)='./file0\x00', 0x0)

2.747193613s ago: executing program 3 (id=724):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[], 0x50)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
r1 = fsopen(0x0, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0x17, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x1)
fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, 0xffffffffffffffff)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="a80000001200080029bd7000fbdbdf25010300084e234e22010000000a000000750000000700000006000000080200000004000168ebfffff58a9f75ad3ea5c4", @ANYBLOB="09000000f9ffffff0c000000ba0c0000580001003160cf8228b3c21869bc1e293e2b782c69836972b1b37c998d508bbbb68e32bb054afadcd76ced199a654b84fb3eb69e2df6abc426d824caadc7441aeb057c485f95ea61816acf247da86b"], 0xa8}, 0x1, 0x0, 0x0, 0x80}, 0x40000)
fsmount(r1, 0x0, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xf, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000100000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00'}, 0x18)
syslog(0x9, 0x0, 0x0)
r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x143041, 0x8)
pwritev2(r4, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0)
fcntl$lock(r3, 0x7, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x2})
r5 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$unlink(0x9, r5, r5)
ftruncate(0xffffffffffffffff, 0x2007ffc)

2.728565013s ago: executing program 1 (id=725):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f0000"], 0x50)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='coredump_filter\x00')
fcntl$setstatus(r0, 0x4, 0x40800)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x80, 0x4, 0x28, 0xffffffffffffffff, 0x8000}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r3, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8)
bind$vsock_stream(r3, &(0x7f0000000940), 0x10)
listen(r3, 0x0)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r4, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1)
recvmmsg(r4, &(0x7f0000000ac0)=[{{0x0, 0xffffffffffffff8e, &(0x7f0000000300)=[{&(0x7f0000000b40)=""/90, 0x5a}], 0x1}, 0x14}, {{&(0x7f0000000180)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000003c0)=""/241, 0xf1}, {&(0x7f0000000240)=""/126, 0x7e}, {&(0x7f00000004c0)=""/89, 0x59}, {&(0x7f0000000540)=""/139, 0x8b}, {&(0x7f00000007c0)=""/85, 0x55}, {&(0x7f0000000840)=""/110, 0x6e}, {&(0x7f0000000040)}], 0x7, &(0x7f0000000a00)=""/189, 0xbd}, 0x4}], 0x2, 0x10100, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c)
listen(r5, 0x6)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
accept(0xffffffffffffffff, 0x0, 0x0)

2.677183475s ago: executing program 2 (id=726):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000840)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@grpquota}]}, 0x1, 0x52a, &(0x7f0000001440)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0)
ftruncate(r0, 0xc17a)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000005000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x100)
mkdirat(r4, &(0x7f0000000300)='./file2\x00', 0x21)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
chroot(&(0x7f0000000000)='./file0/../file0\x00')
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x182)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x80642, 0x150)
pwrite64(r6, &(0x7f0000000140)='2', 0xfdef, 0xfecc)
fallocate(r5, 0x0, 0xbf5, 0x2000402)
ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000040)={0xc, r5, 0x0, 0x0, 0x0, 0xfffffffffdffffff})

2.664950456s ago: executing program 3 (id=727):
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x0, 0x48)
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x208a022, 0x0, 0x1, 0x0, &(0x7f0000000000))
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x5, 0x0)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32=r1], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
umount2(0x0, 0xa)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x61, 0x18, 0xfa00, {0xfffffffffffffffe, 0x0, 0x13f, 0x4}}, 0xc)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000600)}], 0x1, 0x0, 0x480}, 0x0, 0x50, 0x1})
r2 = syz_io_uring_setup(0x223d, &(0x7f0000000100)={0x0, 0x6e7f, 0x800, 0x2, 0x5cc}, &(0x7f0000000280)=<r3=>0x0, &(0x7f00000005c0)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffa, 0x0, 0x4)
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x1, 0x0, 0xffffffffffffffff, 0x0, r2})
io_uring_enter(r2, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{0x5, 0x8, 0x18, 0x7fff0000}]})

2.592813009s ago: executing program 0 (id=728):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x44d, &(0x7f00000037c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0/file0\x00', 0x8042, 0x0)
pwrite64(r0, &(0x7f00000003c0)="0e85", 0x2, 0x8080c61)
fallocate(r0, 0x3, 0x80007, 0x8000c60)
open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0)
syz_io_uring_setup(0x88d, &(0x7f0000000140)={0x0, 0x84c0, 0x0, 0xffffffff, 0x121}, &(0x7f0000000100)=<r1=>0x0, &(0x7f00000003c0)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00')
preadv(r3, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/24, 0x18}], 0x1, 0x0, 0x4)
recvmmsg(r3, &(0x7f0000003680)=[{{0x0, 0x0, 0x0}, 0x36d}, {{0x0, 0x0, &(0x7f0000003400)=[{&(0x7f00000033c0)=""/18, 0x12}], 0x1, &(0x7f0000003440)=""/231, 0xe7}, 0xc00000}, {{&(0x7f0000003540)=@nl, 0x80, &(0x7f0000003640)=[{&(0x7f00000035c0)=""/102, 0x66}], 0x1, &(0x7f0000004000)=""/4096, 0x1000}, 0x2}], 0x3, 0x40000000, 0x0)
syz_io_uring_submit(r1, r2, 0x0)
creat(&(0x7f00000001c0)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r6, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}}, 0x0)
sendmsg$FOU_CMD_DEL(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050001000000030000000200000006e60a004e"], 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000080)

2.582946859s ago: executing program 4 (id=729):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94)
syz_open_procfs(0xffffffffffffffff, 0x0)
exit(0xffff)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
ftruncate(0xffffffffffffffff, 0x80000001)
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast1}}}], 0x20}}], 0x1, 0x9880)
r1 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000050)
writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)
r3 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc)
setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57)
setsockopt$inet_mreqsrc(r1, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc)
setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88)

2.379850998s ago: executing program 2 (id=730):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0xa}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0xf, 0x5}]}]}}, 0x0, 0x1d, 0x0, 0x8}, 0x28)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0)
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x88281, 0x0)
write$rfkill(r0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f00000007c0)=@ethtool_coalesce={0x11, 0xd, 0x0, 0x400, 0x9, 0x5, 0x1, 0x7, 0x73fd, 0x1, 0x0, 0x2084, 0x2, 0xd7, 0xffffff81, 0x1, 0x7ff, 0x1, 0xd1a7, 0x4, 0x6, 0x7f, 0x1008}})
sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x20, 0x19, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x8004)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x1}, 0x8)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r3, &(0x7f0000000000), 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vxcan0\x00', <r4=>0x0})
sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=r4, @ANYRES64=0x0, @ANYRES64=r4, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94)
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r5, &(0x7f0000000140), 0x10)
sendmsg$can_bcm(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000080)=ANY=[@ANYBLOB="050000000208"], 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x4004010)

2.284281242s ago: executing program 0 (id=731):
timer_create(0x0, 0x0, &(0x7f0000000300))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffc4, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10)
syz_open_dev$usbfs(0x0, 0x77, 0x101301)
mkdir(0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000540)=ANY=[@ANYBLOB="12011003cacd44079ac740c6056290fdcf01020301090212000197e03001"], 0x0)

2.238959304s ago: executing program 3 (id=732):
pipe(&(0x7f0000000d00)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90)
mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18)
write$selinux_access(r0, &(0x7f00000001c0)={'system_u:object_r:fsadm_log_t:s0', 0x20, 'unconfined', 0x20, 0x3}, 0x41)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r4, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='p'], 0x70}}], 0x1, 0x2000c044)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r7=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r7], 0x20}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000240), 0xfffffecc)
splice(r0, 0x0, r4, 0x0, 0x714f, 0x0)

2.225306185s ago: executing program 2 (id=733):
r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="160000000000000005000000ff"], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00'}, 0x9)
socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x800001}, 0x1c)
pivot_root(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00')
socket$inet_mptcp(0x2, 0x1, 0x106)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000300)='swiotlb_bounced\x00'}, 0x18)
clock_nanosleep(0x2, 0x0, &(0x7f0000000180)={0x0, 0x3938700}, 0x0)
syz_read_part_table(0x4097, &(0x7f00000040c0)="$eJzsz7FN61AYBeDjxE5elCdFUFAioKF1FsgWWQchWIIOiTLDsANDUNBg5FwcZ4EIhL6v8Dn2//tKN/yo17FWSZ727a0+fOhNxpqcl5gnZ0murvPYtsm/eZJ1Gd0fdpu0627VH/A/Sf0y6aer+nu6TLa7094OAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4TaqxPi9Lzkt8JJkeL3RHu4skd5uL2+H9oUmzuayGf/cms+H82bR/fnZFku3udDcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP6gqi7ZLPLe582y/mJ/jm0YhIEwjF5iWwlLULMQS7B/Q3VIiIMJ6N7r/Ptz4bpqMT1dZuZvafd5zJ8xKv3X2uOatnoT/XvmVewZa773HQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBgBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwQAIAAAAg6P/rdgQKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwEMBAAD//33UI0E=")
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000001e00100000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000fcffffffb70200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10)
mq_open(&(0x7f0000000000)='kfree\x00', 0x40, 0x11, &(0x7f0000000040)={0x0, 0x3, 0x0, 0xe83a})
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0)

1.541324954s ago: executing program 2 (id=734):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b'], 0x48)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'team0\x00', <r2=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e671ab4912f9f6a31854ec98e950cf8caa52dd8d39af14c31ed56a13d900"}, 0x48, 0xffffffffffffffff)
r4 = add_key$fscrypt_v1(&(0x7f0000000240), &(0x7f0000000200)={'fscrypt:', @auto=[0x37, 0x37, 0x65, 0x34, 0x39, 0x31, 0x33, 0x38, 0x66, 0x36, 0x5c, 0x33, 0x30, 0x61, 0x65, 0x61]}, &(0x7f00000002c0)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd780bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138", 0x18}, 0x48, 0xfffffffffffffffe)
keyctl$KEYCTL_MOVE(0x4, r4, r3, r3, 0x0)
keyctl$KEYCTL_MOVE(0x4, 0x0, 0x0, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018f2f56514fbfd8f39438f02110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r2, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r1, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r5, 0x0, 0x10007ffffffff}, 0x18)
r6 = gettid()
r7 = socket(0x40000000015, 0x5, 0x0)
recvmmsg(r7, &(0x7f00000026c0)=[{{0x0, 0x0, 0x0}, 0x200}], 0x1, 0x60010002, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000000300)=<r8=>0x0)
timer_settime(r8, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

1.287078935s ago: executing program 1 (id=735):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
prctl$PR_SET_NAME(0xf, 0x0)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x6, 0x10}, 0x50)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r1, 0x0, 0x0}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={0x0, r0}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x12345})
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
unlink(0x0)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000020605000000000000000000000000000500040000000073797a31000000000500010007000000050005000a00000015000300686173683a69702c706f72742c6e657400000000"], 0x50}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002040), 0xc2001, 0x0)
ioctl$SNAPSHOT_FREE(r5, 0x3305)

1.286146724s ago: executing program 4 (id=736):
sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, 0x0, 0x4)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
cachestat(r0, 0x0, &(0x7f000009de80), 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200))
io_uring_register$IORING_REGISTER_CLONE_BUFFERS(0xffffffffffffffff, 0x1e, &(0x7f00000000c0)={r1}, 0x1)
sendmsg$nl_route(r1, 0x0, 0x0)
r2 = socket$phonet_pipe(0x23, 0x5, 0x2)
dup(r2)
rseq(&(0x7f0000000400), 0x20, 0x0, 0x0)
r3 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001000)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x84, 0x2c, 0x605, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {}, {0xffff, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4c, 0x2, [@TCA_CGROUP_ACT={0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x10, 0x7ff, 0x6, 0x1, 0xff}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}]}, 0x84}}, 0x20004084)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x3f)

1.269579575s ago: executing program 3 (id=737):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x482, &(0x7f0000000100)={[{@nr_inodes={'nr_inodes', 0x3d, [0x32]}}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000400000028"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
dup3(r2, 0xffffffffffffffff, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x0, 0x574, &(0x7f0000001600)="$eJzs3c1rHOUfAPDvbDZ9Sfv7NYVSVEQCPVip3TSJLxU81KNosaD3uiTTULLpluymNLFge7AXPUgRRCyIdz0KHov/gH9FQQNFStSDl5XZzOal2U227bZJ3c8HJjzPzGye+e7M99ln9tllA+hbI9mfQsTzEfFlEnEoIpJ8WzHyjSMr+y3fvzaZLUk0Gh/+kTT3y+qt/9V63IG88lxE/PJZxInC5nZrC4sz5Uolncvro/XZy6O1P39aqU2nl8YnJk6/PjH+1ptv9CzWV879/c0Hd949/fmx5a9/XDp8K4kzcTDftj6Ox3B9fWUkRvLnZDDOPLDjWA8a202SnT4AHslAnueDkfUBh2Igz3rgv+/TiGgAfSqR/9CnWuOA1r19j+6Dnxn33lm5Adocf3HlvZHY17w3GlpONtwZZfe7wz1oP2vj599v38qW6N37EADbun4jIk4Vi5v7vyTv/x7dqS72ebAN/R88PXey8c+r7cY/hdXxT7QZ/xxok7uPYvv8Lyz1oJmOsvHf223Hv6uTVsMDee1/zTHfYHLhYiXN+rb/R8TxGNyb1beazzm9fLfRadv68V+2ZO23xoKt4yju3fiYqXK9/Dgxr3fvRsQLbce/yer5T9qc/+z5ONdlG0fT2y912rZ9/E9W4/uIl9ue/7UZrWR1fnJh8eTF2fJ0umF+crR5PYy2rorN/rp59NdO7e90/Nn5H9oy/uvN0up8be3h2/hu3z9pp20b4o+21/9Su+t/T/JRs7wnX3e1XK/PjUXsSd7fvH587bGtemv/LP7jx7bu/9pd//sj4uMu47955IcXu4p/h87/1NbX//DG8//whbvvffJtp/a76P+Wintfa5aO52u66f+6PcDHee4AAAAAAABgtylExMFICqXVcqFQKq18vuNIDBUq1Vr9xIXq/KWpaH5XdjgGC62Z7kPrPg8xln8etlUff6A+ERGHI+Krgf3NemmyWpna6eABAAAAAAAAAAAAAAAAAABglzjQ4fv/md8GdvrogCfOT35D/9o2/3vxS0/AruT1H/qX/If+Jf+hf8l/6F/yH/qX/If+9RD533iSxwE8fV7/AQAAAAAAAAAAAAAAAAAAAAAAAAAAoKfOnT2bLY3l+9cms/rUlYX5meqVk1NpbaY0Oz9ZmqzOXS5NV6vTlbQ0WZ3d7v9VqtXLY+Mxf3W0ntbqo7WFxfOz1flL9fMXZ8vT6fl08KlEBQAAAAAAAAAAAAAAAAAAAM+W2sLiTLlSSecUFLoufDG0tqa4C45HofeFne6ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDNvwEAAP//8M82bQ==")
io_uring_setup(0x7a53, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000240)={0x1, 0x1, 0x5b, 0x7})
mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000040)='kfree\x00', r4}, 0x18)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@o_path={0x0, 0x0, 0x4010, r3}, 0x18)
mq_timedsend(r3, 0x0, 0x0, 0x9, 0x0)
mq_timedreceive(r3, &(0x7f0000000880)=""/202, 0xca, 0x100000000000000, 0x0)

1.220780827s ago: executing program 4 (id=738):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
readv(r2, &(0x7f0000000000)=[{&(0x7f0000000580)=""/244, 0xf4}], 0x1)
timer_create(0x7, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000280))
r3 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
fcntl$setsig(r3, 0xa, 0x13)
fcntl$setlease(r3, 0x400, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
truncate(&(0x7f0000000040)='./file0\x00', 0x0)

1.220415297s ago: executing program 3 (id=739):
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0)
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
add_key(&(0x7f00000001c0)='ceph\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x7}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20025, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)

1.219987597s ago: executing program 1 (id=740):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x3c, 0x0, 0x0)
setsockopt$inet6_buf(r0, 0x29, 0x3e, 0x0, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000040)=0x2c1, 0x4)
sendto$inet6(r0, &(0x7f0000000800)="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", 0x2d7, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x3, @mcast2}, 0x1c)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f00000000c0)=0x2002, 0x4)
recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}, 0xa248}], 0x1, 0x40000000, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000000), 0x80000001, 0x40080)
ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000200))
socket(0x10, 0x803, 0x0)
set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4)
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x400)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x8, 0x3, 0x4d0, 0x368, 0xa, 0x148, 0x0, 0x60, 0x438, 0x2a8, 0x2a8, 0x438, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x4, 0x1, 0x1, 0x0, 0x1], 0x3}, {0x3, [0x2, 0x6, 0x1, 0x0, 0x0, 0x3], 0x4}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x530)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r3 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106)

484.869839ms ago: executing program 2 (id=741):
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400f400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10)
fstat(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x800700, &(0x7f0000001840)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@journal_path={'journal_path', 0x3d, '\xe9\x1fq\x89Y\x1e\x923aK'}}, {@errors_remount}, {@dax_inode}, {@resgid={'resgid', 0x3d, r5}}, {@sysvgroups}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x6}}]}, 0x3, 0x478, &(0x7f0000003000)="$eJzs3M9rHFUcAPDvzCb93SbWKrRWjRYx+CNp0qo9eFEUPFQU9FCPcZOW0m0jTQRbio0i9SJIQc/iUfAv8OZF1JPgVe9SKFqEVk+R2Z1pN9vdZJNsdmP384Fp3tt5M+99d+btvJm32wD61kj2TxKxKyJ+i4ihWnZpgZHan1s3LpX/uXGpnMTi4lt/JtVyN29cKhdFi+125pnRNCL9JMkria31u527cPHMVKUycz7Pj8+ffW987sLFZ0+fnTo1c2rm3OSxY0ePTLzw/ORzbcWRrLA+i+vmgQ9nD+5/7Z2rr5dPXH33p2+zbXbl6+vj6JSRLPC/Fqsa1z3R6cp6bHddOhnoYUNYlVJEZIdrsNr/h6IUdw7eULz6cU8bB2yo7Nq0tfXqhUXgHpbEymX+7kZDgC4rLvTZ/W+xdGnosSlcf6l2A5TFfStfamsGIs3/Djbc33bSSEScWPj3q2yJDXoOAQBQ77Pyl8fjmWbjvzQerCu3J59DGY6I+yJib0TcHxH7IuKBiKxs45CyLSMN+bvHP+m1NYbWlmz892I+t7V0/JcWRYZLeW53Nf7B5OTpyszh/D0ZjcGtWX5imTq+f+XXz1utqx//ZUtWfzEWzNtxbaDhAd301PxUdVDaAdc/ijgw0Cz+5PZMQBIR+yPiwOp2vadInH7qm4PbDzYvtHL8y+jAPNPi1xFP1o7/QjTEX0iWn58c3xaVmcPjxVlxt59/ufJmq/pbxL9l/ZG1Jzv+O5ae/41FhpP6+dq51ddx5fdPW97TrPX835K8XT0uxRv1wdT8/PmJiC3J8Wp+yeuTd7Yt8kX5LP7RQ837/958m6yehyIiO4UfjohHIuLRvO2PRcTjEXFomfh/fDlPNDlf13X+d0AW/3TTz7/b53/D8V99onTmh++KnW1bdfzZ8T9aTY3mr1Q//1bQbgPX+/4BAADA/0Fa/Q58ko7dTqfp2FjtO/z7YkdamZ2bf/rk7PvnpmvflR+OwbR40jVU9zx0IlnI91jLT+bPiov1R/Lnxl+UtlfzY+XZynSPY4d+t7NF/8/8Uep164AN12webbJrU1BALzX2/3Rp9vIb3WwM0FV+rw39a4X+n3arHUD3uf5D/2rW/y835M0FwL3J9R/6l/4P/Wvt/b9Dv0IGesb1H/rSen7X33ZiYOOrkOh2ItJKZXpbxPKFi/8QaHO0eTMl0ojYBM1omej1JxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEBn/BcAAP//o+zzDQ==")
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x2d)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$team(&(0x7f0000000d80), r6)
sendmsg$TEAM_CMD_PORT_LIST_GET(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f00000010c0)={0x20, r7, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{{0x8}, {0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x8001}, 0x40)
r8 = syz_open_procfs(0x0, &(0x7f0000000380)='map_files\x00')
getdents64(r8, &(0x7f0000000fc0)=""/224, 0xe0)
socket$pppl2tp(0x18, 0x1, 0x1)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6e}}, {@user_xattr}, {@lazytime}, {@quota}]}, 0x3, 0x441, &(0x7f0000000440)="$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")

358.637294ms ago: executing program 4 (id=742):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2b, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86)
pwritev2(r2, 0x0, 0x0, 0x7880, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r3}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
kcmp(r4, r4, 0x6, 0xffffffffffffffff, 0xffffffffffffffff)
r5 = getuid()
chown(&(0x7f00000003c0)='./file0\x00', 0x0, 0xee01)
quotactl$Q_GETNEXTQUOTA(0xffffffff80000902, &(0x7f0000000100)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000300))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r0, {<r6=>0xffffffffffffffff, 0xee00}}, './file1/../file0\x00'})
mount$9p_rdma(&(0x7f0000000380), &(0x7f00000003c0)='./file1\x00', &(0x7f0000000400), 0x2, &(0x7f0000000500)={'trans=rdma,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@sq={'sq', 0x3d, 0x7}}, {@rq={'rq', 0x3d, 0x2}}, {@timeout={'timeout', 0x3d, 0xfffffffffffffff9}}, {@timeout={'timeout', 0x3d, 0x6}}, {@common=@aname={'aname', 0x3d, 'kfree\x00'}}, {@sq}, {@sq={'sq', 0x3d, 0x3}}], [{@fsmagic}, {@euid_gt={'euid>', r5}}, {@euid_lt}, {@fowner_lt}, {@dont_hash}, {@euid_lt}, {@fowner_gt={'fowner>', r6}}]}})
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r7}, 0x10)
setresuid(0x0, 0x0, 0x0)
r8 = syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$TIOCL_BLANKSCREEN(r8, 0x4b67, &(0x7f0000000180))

332.679725ms ago: executing program 1 (id=743):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b000000050000000004000009"], 0x48)
ioctl$SNAPSHOT_SET_SWAP_AREA(0xffffffffffffffff, 0x400c330d, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x17, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="c0020000100063d10000000000000000fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000000000000000000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc01000000000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000b000000000000000000000000000000ffffffffffffffff000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001600000000020000000000000000000000bf010100636d61632861657329"], 0x2c0}, 0x1, 0x0, 0x0, 0x40000}, 0x4004)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x95255000)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0)
socket$inet(0xa, 0x1, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00')
preadv(r1, &(0x7f0000000580)=[{&(0x7f0000000080)=""/162, 0xa2}, {&(0x7f0000001600)=""/46, 0x2e}, {&(0x7f0000000280)=""/151, 0x97}, {&(0x7f0000001640)=""/129, 0x81}, {&(0x7f0000000340)=""/26, 0x1a}], 0x5, 0x3, 0x8)
set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9)
ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x5, 0x200, &(0x7f0000003c40)="1ae19337aa151f36ae49bb3f8cb95c5bf840d4f1e55efaaf098d47a70eb36a73090000000000001b0f4743f490c585108c1331c7749299a25a705f5096cb268cbc6070d680e1be250700000000000000472471ff550c0010000007f3c7b61abe4162256004ea8ca5e5b5f379c6eb3257eda08f7e6959090000004d13184d382747e035b4722525e00ade86b4c6d1e157c75d15c1f961ebc0a64d7f2a73f8979fcecacaa64f9b9069ebcc1d5b471edbc4f6c7f1b98ae74e909aa6f25b7fa77bf9cd4ed36d5c53dc519d11c3cc1c22a3b86cf3c645413f4afbcea0c99ded703699d2bb6a4a663b99b6069da5aaf64785a5887c31261d4b9e57ee07000000def6f255ca26108f11f02047d47f2d0fec30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a0e1090fd515380aae83c5eaeed338701574b64200a16ef2811fadcf1e0f49a514df529061e09ce45e3da03a03fe9b4a6bcfa7d04594e4f6d0714a2e14ea127ab37d64a5e0db630cd4f4a2e6c985a542ff20a9b2193f265f93a258a88dd6c9d6a926dd23d32425849c5d9210007660a617f22133b6cb5087f4c6057942aa18193172bd995fa70a1f949b196f2e2a3c175858575713be5ee3f7f4dcecc98123f9ded3afdebe13d79a7f7fcb2469ae0ac503111401612df7ee995f74fb97a63bf62d61f78c062f959119ab50c1f706a930121ebcd53ccb93d158186ed360750ca8e728150d988844b9a5cff46591ccaff416e5a8c25f9555da5ca6fdf75b86ea6171b046b856168f403b5253a5cc393430a09a4489a0895571e597ac8846f945ffb372a88d3a25978b463dc961416c80c55773f917020751ed51cfd73c1e06fbadd156d56bedc117af95d242d6dccbe2ce34dccd6005e944afa92b22ec9a698469c6edc06caa2cfcd61912607d459b4c28ebea9745bcd4697d75c9601fd333d3cd797963a3c71b7cc5fdc756da8d97207936e5f53b53b732533c2722e03002293517966611602f297de6ff5408777b7a93c45cee3ee5c5601a4e94266b295ea7a86812a7ab8896ec5ea1b12643e1844b185734528399e62bceb8700cc6cd491e4a4430d0a3ba329a5a2fa170fd0b1cc4ba8294de988cd35df2cd7344aa8a9f3432b96fb889c02f484f635a0cc3466a3c2733d45f176931b2db18dba54991a9553cedb7f585786388d4042dbae1c95b769e3d4e036e8afea0a04c04f542b152ca1fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c9d79509cc47d7305114990148a7291cb0fe2d1c773a6664b66ae04aa62c534d072ae54c2ca0d5962cc58945d8924abfc4d5af922462507430d8f2c17479a6678b0b3700000000000000000000000000000000000000000000f800"})
openat(0xffffffffffffff9c, 0x0, 0x143042, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x3)
ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x8, 0xf, 0x12c, &(0x7f00000000c0)="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"})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="911052000000000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94)
timer_create(0x2, &(0x7f0000000400)={0x0, 0x39, 0x2, @thr={&(0x7f0000000280)="494b6ec1a186e84f92b3bcac1fe4452d58c99661c4006d61f600d7cab05d1484afdd46a7afda1dfb77acfd008b2571a36add470e1c28132784e97326aa7c25bc964e3fcc749acca27a258734126bd351dbbbae04a847df925cf7839019bbdbc4f9", &(0x7f0000000200)="d0d57c915557edbc7dc7b5916be7d517f318c9c8ca327cbb9b2854e73ee2603755da96e1c08d327137b02eba472a12a10a02a670ea8225eb75981c5ac3b9c04a"}}, &(0x7f0000000500))

322.297265ms ago: executing program 2 (id=744):
r0 = socket(0x200000000000011, 0x2, 0x0)
r1 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000340))
ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000a40)={0x60, 0x2, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0xfffffffffffffff9, 0x0, 0x0, 0x7fff, 0x24, 0x8, 0x10, 0x3})
bind$packet(r0, 0x0, 0x0)
r2 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='attr/current\x00')
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r4, 0x0, 0x80000}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_emit_ethernet(0xfdef, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x1, 0x0, @private, @broadcast}, @echo_reply={0xe0}}}}}, 0x0)

279.493997ms ago: executing program 4 (id=745):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000570000"], 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x8}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xf, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000007}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="75746638006d61703d6f983c756661703d6e6f726d616c2c6909000000f2ff00003dda5de4d586f0df206d65656b416d6f64653d3078303030303010303071303030303030302c73657373696f6e3d307830faffffff30303030303030f4e4b4f82c6d61736b3d4d4159574b50be30c8486470722677b93165cfe6f62127553b2017754598752d977369672c7063723d303030303030303030303030303030303030332c64566e745f6d6561737572652c00000000000000006bbf4d6406b59dbc529c00000000000000fada265ab14119997600a2299d2c35a2efc1bf037787a0d801f26d335ef2ba9ac2423a358ccbb776b21e1d3b", @ANYRESDEC=0x0, @ANYRESHEX], 0xfe, 0x677, &(0x7f0000000c00)="$eJzs3UtvG9fdx/HfUNT1AYwHbREYhmOd2A0goy5NUrECwV2UHQ6lSUkOMUMV0ipwYykwTDmt7QK1Nqk2vQDtG+gumyz6Igp0nXXfQJcFgnZXoBsWc+NFnBFp3ew234+Q8HDOf+b85+I5GpFzRgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQJZdL5crlppue2fX5LPrvtc6pT5e2rzuxoW7U9uVrPA/LS3pejzp+neG1e+E/7utm/G7m1oKX5Z09H/v/P/DbxcL6fynJHQWet0Fvnh19PRRr7f//Gyt9a2zzHcpJjJRYYa5tpy2G3huq7blGDfwzObGRvn+diMwDbfpBHtB12kZ23cKXc83a/ZdU9ncXDdOac/baW/Va00nnfjh96vl8ob5aDHZ/fc/KgX2tttsuu2tKCasDmMWB0eIU2sZc/Ckt78+LckwqDJLUHVaULVcrVYq1Wpl48Hmgw/L5eLEhPIJmogYHrRvz87HVbqgMzdwfoWw//+bJTW1pLZ2tCuT+WOrLl+eWjn1ibT/f/++c2q7o/1/2stfH1bfUNT/34rf3crr/3NyMTLRDFk1Vs70s/280Csd6akeqaee9vX8Ypa7enEZXu7PllSUXAXy5KqlmrbkyCRTjDa1oQ2V9bG21VAgo4ZcNeUo0J4CdeWoFe0TX45q6sqTL6M12boro4o2tal1GTkqaU+edtTWluqq6V/9fv9AT6Ltvn5KjkqDKrMEFQfH4GRQXv//08/jOV6v/8f/nsGxM0MM8Mb1k+v/fHNZE1cvLyMAAAAAAHDRrOiv71b02f27kvpquE2n/KbTAgAAAAAAFyj65P9m+DIflt6VlXP937/63AAAAAAAwMWwonvsLEkr0Zf6reGdULN8CSDz5gAAAAAAAPB2iT7/v7Ug9aOh1VZlvdb1PwAAAAAA+C/w25Ex9ovpGLv99GP9gqSgs2j9+R+L8uet487ud63DWlhTO0xiJr4B0G3csIqKB+qNxutdkBS9s52bVjI+cDIIphUP7Ct9fTBtrH/LP5HAwlz654uMBK4djSSwUUze6fd6L455L2n38VFBUU3cykrDbTol22s+rKhWu1boOrvdXzx78kvJH6znwZPefumTz3qPo1yOw0nHh2Een4+lU5iWy8tovIXonousNV5WI23yd+3WihW1W07Xf061w8JoQ7Ot/691O465vRK/rhyle0DWr5JCpRTtsuHaR6NDWMMsKifXPGtH5GSxFGVxJ465s3Ynfknzi/fC0vfmpGppch/4o1lUR7OYvi2sf05siylZhMfCepjFX8IF5WSx/npZTOwRAHhTDoa9UDSI+eQY+yf73Yyz3HLymnuWm967/3C8lZd/7Mc3HM5JRfUXk+6ln9+vKDyjr8VhC/Eo7sUbGWf0ctKvLCnnjF4+R+8WtvWn4TOQkqfVJDXFQRb/7vf7DytRu3840at+Ec7wRW67QbM6F27C+y8PfxYNgB/6dP/T/WfV6vpG+YNy+UFV89FqJC/0PQCADNOfsTMesTTszwZ99weDq+rHf38/Lo31u98afKWgpE/0mXp6rHvpIwRWs9tdGfkawr3Jq9YwNvqtYzy2onu5V3VRXzoSWx3EziudZfz3hWHs+mXvBgAArtTtKf3wyf4/69r9XnrdvXYj87p7vC8/+YTgvNjKFW8JAAC+ORz/a2ul+xvL993Ox5XNzUqtu+0Y37N/bHy3vuUYt911fHu71t5yTMf3up7tNU3H16JbdwIT7HQ6nt81Dc83HS9wd6Mnv5vk0e+B06q1u64ddJpOLXCM7bW7Nbtr6m5gm87Oj5pusO340cxBx7HdhmvXuq7XNoG3LNspGRM4zkigW3faXbfhhsW26fhuq+bvmZ94zZ2WY+pOYPtup+vFC0zbctsNz29Fiy2pf9qDDgEA+MZ48ero6aNeb//5KYVjxYX0+2hJ1VcZwQtZC3zDqwgAAE6glwYAAAAAAAAAAAAAAAAAAAAA4O03y/1/pxbSmwLTKfPKCJYGU35+baYlWxpO+fKv58rwDIXCySnJSLv96bN/FReKWTHLYWFBUi/d/KMxx1MTm8uYK6+wOtOaKi4UL34bLktZR8KlFX5wMH4cTsSElZlVi4OtWjz/P4eswrMvc6qmH1GL49tw4bQVHC8UJT1fOMcuuNrzEICr958AAAD//7gMOck=")
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0xf2de1000)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1}, 0x18)
socket(0x2, 0x2, 0x1)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x40000)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket(0x10, 0x3, 0x4)
sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x48, 0x14, 0x1, 0xfffffffa, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4, 0x10}, {0xa, 0xc}, {0x4, 0xf}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x40, 0xfc, 0x200, 0x4002, 0x0, 0xfffffffd, 0x7e}}, {0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x24008814}, 0x20000040)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90)

278.739237ms ago: executing program 3 (id=746):
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000073015f00000000009500000000"], &(0x7f0000000200)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x5a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r2, 0x0, r3, 0x0, 0xf3a, 0x0)
tee(r1, r3, 0x8f5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000040000000000000000850000002300000095", @ANYRES64], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0)
r5 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r5}, &(0x7f0000bbdffc)=<r6=>0x0)
timer_settime(r6, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex(&(0x7f000000cffc), 0x80, 0x0, 0x0, 0x0, 0x0)
prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000)
write$cgroup_int(r4, &(0x7f0000000040)=0xfe8e, 0x12)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)
fcntl$setlease(r7, 0x400, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x17, 0x0, 0x41100}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
munlockall()
bpf$MAP_CREATE(0x0, 0x0, 0x48)

45.798197ms ago: executing program 1 (id=747):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup(r2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="0a000010ffffffffffff00000000000086dd6900040000202c00fc020000000000000000000000000001ff0200000000000000000000000000010402"], 0x5a)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
tgkill(0x0, 0x0, 0x24)
mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x40, 0x0, 0x0)
r5 = epoll_create1(0x80000)
r6 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000240)={0xf})
sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYRES64=r2], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x200000c0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@nombcache}]}, 0x1, 0x437, &(0x7f0000000900)="$eJzs289PHFUcAPDv7EKR/hBs6o/Sqmg1En9AobX24EWjiQdNTPRQjwi0wW6LKZjYhigaU4+miXfj0cS/wJNejHoy8ap306QxXFo9rZndGdhddrdAF7a6n08y8N7MW9777szbfW8eE0DPGk1/JBH7I+L3iBiqZusLjFZ/3Vpdnvl7dXkmiXL5rb+SSrmbq8szedH8dfvyTF9E4bMkjjSpd/HylfPTpdLcpSw/sXTh/YnFy1eem78wfW7u3NzFqdOnT56YfOHU1PMdiTON6+bIRwtHD7/2zrU3Zs5ce/fnb5M8/oY4OmS03cEny+UOV9ddB2rSSV8XG8KWFKvdNPor/X8oirF+8obi1U+72jhgR5XL5fIDrQ+vlIH/sSS63QKgO/Iv+nT+m2+7NPS4K9x4qToBSuO+lW3VI31RyMr0N8xvO2k0Is6s/PNVusXO3IcAAKjzfTr+ebbZ+K8QtfeF7s3WUIYj4r6IOBgRpyLiUETcH1Ep+2BEPNSskqR1/Y2LJBvHP4Xr2w5uE9Lx34vZ2lb9+C8f/cVwMcsdqMTfn5ydL80dz96TsegfSPOTber44ZXfvmh1rHb8l25p/flYMGvH9b6B+tfMTi9N30nMtW58EjHS1yz+ZG0lID19hyNiZJt1zD/9zdFWx24ffxsdWGcqfx3xVPX8r0RD/Lmk/frkxD1Rmjs+kV8VG/3y69U3W9V/R/F3QHr+9za9/tfiH05q12sXt17H1T8+bzmn2e71vyd5u27fh9NLS5cmI/Ykr1cbXbt/qqHc1Hr5NP6xY837/8FYfyeORER6ET8cEY9ExKNZ2x+LiMcj4lib+H96+Yn3thf/QJu/2hlp/LNbOv/riT3RuKd5onj+x+/qKh3ebPyRnf+TldRYtmczn3+badf2rmYAAAD47ylExP5ICuNr6UJhfLz6P/yHYm+htLC49MzZhQ8uzlafERiO/kJ+p2uo5n7oZDatz/NTDfkT2X3jL4uDlfz4zEJpttvBQ4/b16L/p/4sdrt1wI7zvBb0Lv0fepf+D71L/4fe1aT/D3ajHcDua/b9/3EX2gHsvob+b9kPeoj5P/Qu/R96l/4PPWlxMG7/kLyExIZEFO6KZkjsUKLbn0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACd8W8AAAD//zpS5t0=")
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014400000000c0a01011d000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
close(r0)

43.037067ms ago: executing program 4 (id=748):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c)
sendto$inet6(r0, &(0x7f0000000240)='\x00', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000)=0x81, 0x4)
syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000180)='./file1\x00', 0x8084, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0x1, 0x16b, &(0x7f0000000600)="$eJzs20GrElEUB/Azab73avPW0WKgTSupVi2LeEE0UBQualVgbTSE3Eyt/BSt+4JBuGrVDZ3QEkWknJHn77fxwB+958rMXO7AfXPzw6A/Gr8fPZ/GaZZF+0Hk8TOL87gSrahMAgC4TH6kFN9TSulkEmdfI6XUdEcAwL5Z/wHg+Gxd/+831BgAsDf2/wBwfF6+ev30YVFcvMjz04hvk7JX9qrPKn/8pLi4k8+dL781Lctea5HfrfL87/xqXPud31ubd+L2rSqfZY+eFSv59ejvf/oAAABwFLr5wtr9fbe7Ka+qP94PrOzf23GjXds0AIAdjD99HrwdDt99rKE4m4+Y1TvobsWXBv6Wgy1acRBtKLYWs0v2f/9yk08loA7Lm77pTgAAAAAAAAAAAAAAgE3+8ahQJyLWRBGdbScLTmqfKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACz8CgAA//9vQEW+")
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x42, 0x61)
r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b0000000700000001000100090000"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000300)=""/180}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r4}, 0x10)
epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
write(r2, &(0x7f0000004200)='t', 0x1)
sendfile(r2, r1, 0x0, 0x3ffff)
sendfile(r2, r1, 0x0, 0x7ffff000)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xdb, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
recvmmsg(r0, &(0x7f0000000740)=[{{0x0, 0x4a, &(0x7f00000000c0), 0x1, &(0x7f00000003c0)=""/21, 0x21}, 0x1ff}], 0x73d, 0x40000040, 0x0)

0s ago: executing program 1 (id=749):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c399000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
r5 = socket(0x10, 0x803, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newtfilter={0x58, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x2c, 0x2, [@TCA_U32_ACT={0x4}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x58}}, 0x24040084)

kernel console output (not intermixed with test programs):

8][ T4099] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.827856][ T4105] netlink: 4 bytes leftover after parsing attributes in process `syz.0.216'.
[   57.884585][ T4115] netlink: 3 bytes leftover after parsing attributes in process `syz.4.221'.
[   57.893943][ T4111] netlink: 'syz.2.218': attribute type 10 has an invalid length.
[   57.917840][ T4115] 0�X���: renamed from caif0
[   57.925220][ T4115] 0�X���: entered allmulticast mode
[   57.930710][ T4115] A link change request failed with some changes committed already. Interface 
60�X��� may have been left with an inconsistent configuration, please check.
[   57.949444][ T4111] bridge_slave_1: entered promiscuous mode
[   57.966265][ T4111] $H�: (slave bridge_slave_1): Enslaving as an active interface with an up link
[   57.998898][ T4098] syz.1.213 (4098) used greatest stack depth: 10160 bytes left
[   58.023736][ T4121] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: 1
[   58.032476][ T4121] ref_ctr increment failed for inode: 0xea offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888109afae00
[   58.044447][ T4121] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: -1
[   58.053203][ T4121] ref_ctr decrement failed for inode: 0xea offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888109afae00
[   58.098825][ T4121] uprobe: syz.4.223:4121 failed to unregister, leaking uprobe
[   58.626383][ T4147] loop1: detected capacity change from 0 to 512
[   58.705631][ T4147] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   58.768619][ T4147] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   59.255445][ T4160] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4160 comm=syz.2.235
[   59.327682][ T4150] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 18: invalid block bitmap
[   59.369335][ T4157] ip6_vti0 speed is unknown, defaulting to 1000
[   59.384709][ T4162] macvlan1: entered promiscuous mode
[   59.403208][ T4162] ipvlan0: entered promiscuous mode
[   59.426786][ T4162] ipvlan0: left promiscuous mode
[   59.432542][ T4162] macvlan1: left promiscuous mode
[   59.439540][ T4165] x_tables: duplicate underflow at hook 2
[   59.445589][ T1035] IPVS: starting estimator thread 0...
[   59.453705][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   59.542640][ T4166] IPVS: using max 2400 ests per chain, 120000 per kthread
[   59.673182][ T4173] tipc: Started in network mode
[   59.678259][ T4173] tipc: Node identity 7646da73f4e3, cluster identity 4711
[   59.685467][ T4173] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   59.707154][ T4173] syzkaller0: entered promiscuous mode
[   59.707528][ T4175] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: 1
[   59.712800][ T4173] syzkaller0: entered allmulticast mode
[   59.721382][ T4175] ref_ctr increment failed for inode: 0x127 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888109afb980
[   59.776128][ T4175] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: -1
[   59.784869][ T4175] ref_ctr decrement failed for inode: 0x127 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888109afb980
[   59.806189][ T4173] tipc: Resetting bearer <eth:syzkaller0>
[   59.819851][ T4172] tipc: Resetting bearer <eth:syzkaller0>
[   59.836844][ T4175] uprobe: syz.3.241:4175 failed to unregister, leaking uprobe
[   59.845742][ T4172] tipc: Disabling bearer <eth:syzkaller0>
[   59.885631][ T4179] ip6_vti0 speed is unknown, defaulting to 1000
[   59.992313][ T4185] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.013500][ T4183] lo: entered promiscuous mode
[   60.018612][ T4183] lo: entered allmulticast mode
[   60.027386][ T4183] tunl0: entered promiscuous mode
[   60.032480][ T4183] tunl0: entered allmulticast mode
[   60.040382][ T4183] gre0: entered promiscuous mode
[   60.049232][ T4183] gre0: entered allmulticast mode
[   60.057229][ T4183] gretap0: entered promiscuous mode
[   60.062487][ T4183] gretap0: entered allmulticast mode
[   60.068957][ T4183] erspan0: entered promiscuous mode
[   60.074208][ T4183] erspan0: entered allmulticast mode
[   60.081141][ T4183] ip_vti0: entered promiscuous mode
[   60.086454][ T4183] ip_vti0: entered allmulticast mode
[   60.093197][ T4183] ip6_vti0: entered promiscuous mode
[   60.098574][ T4183] ip6_vti0: entered allmulticast mode
[   60.106559][ T4183] sit0: entered promiscuous mode
[   60.111604][ T4183] sit0: entered allmulticast mode
[   60.118328][ T4183] ip6tnl0: entered promiscuous mode
[   60.123599][ T4183] ip6tnl0: entered allmulticast mode
[   60.130081][ T4183] ip6gre0: entered promiscuous mode
[   60.136706][ T4183] ip6gre0: entered allmulticast mode
[   60.143613][ T4183] syz_tun: entered promiscuous mode
[   60.151885][ T4183] syz_tun: entered allmulticast mode
[   60.160624][ T4183] ip6gretap0: entered promiscuous mode
[   60.166202][ T4183] ip6gretap0: entered allmulticast mode
[   60.173814][ T4183] bridge0: entered promiscuous mode
[   60.179162][ T4183] bridge0: entered allmulticast mode
[   60.185683][ T4183] vcan0: entered promiscuous mode
[   60.190798][ T4183] vcan0: entered allmulticast mode
[   60.197041][ T4183] $H�: entered allmulticast mode
[   60.202168][ T4183] bridge_slave_1: entered allmulticast mode
[   60.209916][ T4183] 8021q: adding VLAN 0 to HW filter on device $H�
[   60.218798][ T4183] dummy0: entered promiscuous mode
[   60.224063][ T4183] dummy0: entered allmulticast mode
[   60.240253][ T4183] nlmon0: entered promiscuous mode
[   60.245523][ T4183] nlmon0: entered allmulticast mode
[   60.259325][ T4183] caif0: entered promiscuous mode
[   60.264381][ T4183] caif0: entered allmulticast mode
[   60.269603][ T4183] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   60.295608][ T4185] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.310530][ T4199] tipc: Started in network mode
[   60.315522][ T4199] tipc: Node identity 3efdb2bcaf8c, cluster identity 4711
[   60.322721][ T4199] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   60.355914][ T4197] syzkaller0: entered promiscuous mode
[   60.361566][ T4197] syzkaller0: entered allmulticast mode
[   60.372270][ T4202] syzkaller0: entered promiscuous mode
[   60.377860][ T4202] syzkaller0: entered allmulticast mode
[   60.394908][ T4196] tipc: Resetting bearer <eth:syzkaller0>
[   60.409506][ T4185] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.429960][ T2966] IPVS: starting estimator thread 0...
[   60.436580][ T4190] tipc: Resetting bearer <eth:syzkaller0>
[   60.445259][ T4190] tipc: Disabling bearer <eth:syzkaller0>
[   60.470377][ T4185] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.516089][ T4210] IPVS: using max 2400 ests per chain, 120000 per kthread
[   60.521508][ T4214] ip6_vti0 speed is unknown, defaulting to 1000
[   60.568359][ T4218] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.586814][ T3457] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   60.599078][ T3457] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   60.623457][ T4218] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.634428][   T31] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   60.667228][ T3457] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   60.690504][ T4218] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.768417][ T4218] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.791170][ T4225] netlink: 'syz.3.253': attribute type 39 has an invalid length.
[   60.821528][ T4230] loop2: detected capacity change from 0 to 1024
[   60.851744][ T4230] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   60.882565][ T3340] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   60.899485][ T3457] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   60.912352][ T3457] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   60.925394][ T3457] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   60.969030][ T4236] __nla_validate_parse: 5 callbacks suppressed
[   60.969048][ T4236] netlink: 28 bytes leftover after parsing attributes in process `syz.1.257'.
[   60.984905][ T4236] netlink: 28 bytes leftover after parsing attributes in process `syz.1.257'.
[   61.002245][ T4236] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.069892][ T4236] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.128257][ T4236] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.140443][ T4245] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   61.148937][ T4245] syzkaller0: entered promiscuous mode
[   61.155758][ T4245] syzkaller0: entered allmulticast mode
[   61.170524][ T4245] tipc: Resetting bearer <eth:syzkaller0>
[   61.177466][ T4244] tipc: Resetting bearer <eth:syzkaller0>
[   61.184804][ T4244] tipc: Disabling bearer <eth:syzkaller0>
[   61.197763][ T4236] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.249031][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   61.407891][ T4255] loop2: detected capacity change from 0 to 2048
[   61.482308][ T4255] Alternate GPT is invalid, using primary GPT.
[   61.488711][ T4255]  loop2: p1 p2 p3
[   61.492464][ T4255] loop2: partition table partially beyond EOD, truncated
[   61.797994][ T4262] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   61.873926][ T4262] syzkaller0: entered promiscuous mode
[   61.879274][ T4264] Cannot find del_set index 3 as target
[   61.879842][ T4262] syzkaller0: entered allmulticast mode
[   61.891180][   T29] kauditd_printk_skb: 176 callbacks suppressed
[   61.891195][   T29] audit: type=1400 audit(1764198588.461:1000): avc:  denied  { create } for  pid=4263 comm="syz.2.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   61.917392][   T29] audit: type=1400 audit(1764198588.491:1001): avc:  denied  { name_bind } for  pid=4265 comm="syz.2.270" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[   61.942829][   T29] audit: type=1400 audit(1764198588.491:1002): avc:  denied  { node_bind } for  pid=4265 comm="syz.2.270" saddr=255.255.255.255 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[   61.974068][ T4262] tipc: Resetting bearer <eth:syzkaller0>
[   61.986187][ T4261] tipc: Resetting bearer <eth:syzkaller0>
[   61.994149][ T4261] tipc: Disabling bearer <eth:syzkaller0>
[   62.106260][ T4270] loop4: detected capacity change from 0 to 8192
[   62.156315][ T4270]  loop4: p1 p2 p3 p4
[   62.160381][ T4270] loop4: p1 size 3523149824 extends beyond EOD, truncated
[   62.168549][ T4270] loop4: p2 start 4293394688 is beyond EOD, truncated
[   62.175394][ T4270] loop4: p3 start 150994944 is beyond EOD, truncated
[   62.182292][ T4270] loop4: p4 size 50331648 extends beyond EOD, truncated
[   62.197319][ T4272] serio: Serial port ttyS3
[   62.212997][ T4270] loop4: detected capacity change from 0 to 512
[   62.228253][ T4270] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   62.243077][ T4270] ext4 filesystem being mounted at /47/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[   62.256177][   T29] audit: type=1400 audit(1764198588.851:1003): avc:  denied  { setattr } for  pid=4269 comm="syz.4.271" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   62.278907][ T4270] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #4: comm syz.4.271: corrupted inode contents
[   62.291199][ T4270] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #4: comm syz.4.271: mark_inode_dirty error
[   62.302876][ T4270] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #4: comm syz.4.271: corrupted inode contents
[   62.317965][ T4270] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #4: comm syz.4.271: mark_inode_dirty error
[   62.329412][ T4270] Quota error (device loop4): write_blk: dquota write failed
[   62.336875][ T4270] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[   62.346975][ T4270] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.271: Failed to acquire dquot type 1
[   62.359291][ T4277] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.271: corrupted xattr block 33: bad e_name length
[   62.373250][ T4277] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=15
[   62.382678][ T4277] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.271: corrupted xattr block 33: bad e_name length
[   62.396857][ T4277] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=15
[   62.406575][ T4277] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.271: corrupted xattr block 33: bad e_name length
[   62.406580][   T29] audit: type=1400 audit(1764198589.001:1004): avc:  denied  { read write } for  pid=4269 comm="syz.4.271" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   62.443850][ T4277] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=15
[   62.454809][   T29] audit: type=1400 audit(1764198589.051:1005): avc:  denied  { open } for  pid=4269 comm="syz.4.271" path="/47/file2/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   62.454777][ T4277] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #4: comm syz.4.271: corrupted inode contents
[   62.490266][ T4277] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #4: comm syz.4.271: mark_inode_dirty error
[   62.505345][ T4277] Quota error (device loop4): write_blk: dquota write failed
[   62.514782][ T4277] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5
[   62.529146][ T4270] syz.4.271 (4270) used greatest stack depth: 10064 bytes left
[   62.536794][ T4277] syz.4.271 (4277) used greatest stack depth: 9552 bytes left
[   62.556787][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   62.661238][ T4291] netlink: 8 bytes leftover after parsing attributes in process `syz.0.278'.
[   62.834390][ T4299] block device autoloading is deprecated and will be removed.
[   62.887520][ T4303] loop4: detected capacity change from 0 to 764
[   62.900396][ T4303] rock: directory entry would overflow storage
[   62.906747][ T4303] rock: sig=0x4f50, size=4, remaining=3
[   62.912462][ T4303] iso9660: Corrupted directory entry in block 6 of inode 1792
[   62.917488][ T4304] netlink: 4 bytes leftover after parsing attributes in process `syz.2.283'.
[   62.935270][ T4304] netlink: 12 bytes leftover after parsing attributes in process `syz.2.283'.
[   63.002934][ T4308] ip6_vti0 speed is unknown, defaulting to 1000
[   63.003984][ T4306] hub 6-0:1.0: USB hub found
[   63.015232][ T4306] hub 6-0:1.0: 8 ports detected
[   63.046547][ T4311] bridge0: port 4(gretap0) entered blocking state
[   63.053053][ T4311] bridge0: port 4(gretap0) entered disabled state
[   63.060101][ T4311] gretap0: entered allmulticast mode
[   63.066225][ T4311] gretap0: entered promiscuous mode
[   63.071710][ T4311] bridge0: port 4(gretap0) entered blocking state
[   63.078188][ T4311] bridge0: port 4(gretap0) entered forwarding state
[   63.093985][ T4311] gretap0: left allmulticast mode
[   63.099109][ T4311] gretap0: left promiscuous mode
[   63.104259][ T4311] bridge0: port 4(gretap0) entered disabled state
[   63.426212][ T4324] syzkaller0: entered promiscuous mode
[   63.431808][ T4324] syzkaller0: entered allmulticast mode
[   63.745621][ T4328] loop0: detected capacity change from 0 to 512
[   63.752972][ T4328] EXT4-fs: Ignoring removed oldalloc option
[   63.760949][ T4328] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   63.778548][ T4328] EXT4-fs (loop0): 1 truncate cleaned up
[   63.785355][ T4328] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   63.901110][ T4331] loop2: detected capacity change from 0 to 512
[   64.159528][ T4338] loop4: detected capacity change from 0 to 512
[   64.176523][ T4338] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   64.198368][ T4338] EXT4-fs (loop4): 1 truncate cleaned up
[   64.205414][ T4338] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   64.352386][  T382] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.370536][  T382] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.393211][ T3340] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.406394][  T382] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.623685][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   65.237628][ T4364] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[   65.516581][ T4369] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[   65.767845][ T4373] geneve2: entered promiscuous mode
[   65.773139][ T4373] geneve2: entered allmulticast mode
[   65.912004][ T4375] syzkaller0: entered allmulticast mode
[   65.938849][ T4378] tipc: Started in network mode
[   65.944020][ T4378] tipc: Node identity d2087824ab48, cluster identity 4711
[   65.951390][ T4378] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   65.977157][ T4378] syzkaller0: entered promiscuous mode
[   65.982702][ T4378] syzkaller0: entered allmulticast mode
[   66.010677][ T4378] tipc: Resetting bearer <eth:syzkaller0>
[   66.018097][ T4377] tipc: Resetting bearer <eth:syzkaller0>
[   66.025150][ T4377] tipc: Disabling bearer <eth:syzkaller0>
[   66.112500][ T4382] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   66.130432][ T4385] loop1: detected capacity change from 0 to 512
[   66.137233][ T4385] EXT4-fs: Ignoring removed i_version option
[   66.143256][ T4385] EXT4-fs: Ignoring removed bh option
[   66.156774][ T4382] syzkaller0: entered promiscuous mode
[   66.162936][ T4382] syzkaller0: entered allmulticast mode
[   66.178111][ T4385] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   66.200901][ T4385] ext4 filesystem being mounted at /57/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   66.219705][ T4382] tipc: Resetting bearer <eth:syzkaller0>
[   66.236701][ T4381] tipc: Resetting bearer <eth:syzkaller0>
[   66.260474][ T4381] tipc: Disabling bearer <eth:syzkaller0>
[   66.465940][ T4395] netlink: 8 bytes leftover after parsing attributes in process `syz.4.313'.
[   66.508506][ T4397] ip6_vti0 speed is unknown, defaulting to 1000
[   66.527320][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   66.548000][ T4392] ip6_vti0 speed is unknown, defaulting to 1000
[   66.654340][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   66.707704][ T4406] tipc: Started in network mode
[   66.712620][ T4406] tipc: Node identity d67862785eac, cluster identity 4711
[   66.719941][ T4406] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   66.727624][ T4406] syzkaller0: entered promiscuous mode
[   66.733117][ T4406] syzkaller0: entered allmulticast mode
[   66.743218][ T4406] tipc: Resetting bearer <eth:syzkaller0>
[   66.750510][ T4405] tipc: Resetting bearer <eth:syzkaller0>
[   66.758479][ T4405] tipc: Disabling bearer <eth:syzkaller0>
[   66.837344][ T4409] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   66.844424][ T4409] syzkaller0: entered promiscuous mode
[   66.849978][ T4409] syzkaller0: entered allmulticast mode
[   66.861335][ T4409] tipc: Resetting bearer <eth:syzkaller0>
[   66.868833][ T4408] tipc: Resetting bearer <eth:syzkaller0>
[   66.876367][ T4408] tipc: Disabling bearer <eth:syzkaller0>
[   66.959790][ T4410] ip6_vti0 speed is unknown, defaulting to 1000
[   67.223970][   T29] kauditd_printk_skb: 168 callbacks suppressed
[   67.223988][   T29] audit: type=1400 audit(1764198593.811:1173): avc:  denied  { setopt } for  pid=4412 comm="syz.1.329" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   67.325830][   T29] audit: type=1400 audit(1764198593.881:1174): avc:  denied  { sqpoll } for  pid=4414 comm="syz.4.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[   67.348608][ T4413] ip6_vti0 speed is unknown, defaulting to 1000
[   67.358920][ T4415] netlink: 8 bytes leftover after parsing attributes in process `syz.4.319'.
[   67.378741][   T29] audit: type=1400 audit(1764198593.971:1175): avc:  denied  { firmware_load } for  pid=4414 comm="syz.4.319" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1
[   67.537691][   T29] audit: type=1400 audit(1764198594.131:1176): avc:  denied  { write } for  pid=4425 comm="syz.1.322" name="config" dev="proc" ino=4026532753 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[   67.836854][   T29] audit: type=1400 audit(1764198594.351:1177): avc:  denied  { read } for  pid=4429 comm="syz.1.323" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[   67.859596][   T29] audit: type=1400 audit(1764198594.351:1178): avc:  denied  { open } for  pid=4429 comm="syz.1.323" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[   68.342218][ T4439] netlink: 16 bytes leftover after parsing attributes in process `syz.3.326'.
[   68.397196][   T29] audit: type=1400 audit(1764198594.981:1179): avc:  denied  { setopt } for  pid=4440 comm="syz.4.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   68.582462][   T29] audit: type=1400 audit(1764198595.171:1180): avc:  denied  { ioctl } for  pid=4440 comm="syz.4.327" path="socket:[8939]" dev="sockfs" ino=8939 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   68.607079][   T29] audit: type=1400 audit(1764198595.171:1181): avc:  denied  { bind } for  pid=4440 comm="syz.4.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   68.647778][ T4451] loop2: detected capacity change from 0 to 128
[   68.815706][ T4457] netlink: 256 bytes leftover after parsing attributes in process `syz.2.332'.
[   68.824839][ T4457] netlink: 64 bytes leftover after parsing attributes in process `syz.2.332'.
[   68.843945][   T29] audit: type=1400 audit(1764198595.431:1182): avc:  denied  { read } for  pid=4455 comm="syz.1.333" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[   69.123808][ T4463] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   69.141607][ T4463] syzkaller0: entered promiscuous mode
[   69.147184][ T4463] syzkaller0: entered allmulticast mode
[   69.165781][ T4463] tipc: Resetting bearer <eth:syzkaller0>
[   69.172199][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   69.180327][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   69.189743][ T4462] tipc: Resetting bearer <eth:syzkaller0>
[   69.197092][ T4462] tipc: Disabling bearer <eth:syzkaller0>
[   69.269212][ T4468] loop4: detected capacity change from 0 to 1024
[   69.299173][ T4468] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   69.327385][ T4471] netlink: 4 bytes leftover after parsing attributes in process `syz.1.338'.
[   69.347170][ T4478] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.357853][ T4476] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[   69.434200][ T4481] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   69.447968][ T4478] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.522036][ T4481] syzkaller0: entered promiscuous mode
[   69.527648][ T4481] syzkaller0: entered allmulticast mode
[   69.541635][ T4481] tipc: Resetting bearer <eth:syzkaller0>
[   69.549755][ T4480] tipc: Resetting bearer <eth:syzkaller0>
[   69.557631][ T4480] tipc: Disabling bearer <eth:syzkaller0>
[   69.568341][ T4478] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.638907][ T4478] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.700275][   T31] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.708803][ T4484] netlink: 4 bytes leftover after parsing attributes in process `syz.1.341'.
[   69.719334][ T4484] geneve0: entered allmulticast mode
[   69.738246][   T31] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.765108][   T31] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.784235][   T31] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.830311][ T4493] netlink: 8 bytes leftover after parsing attributes in process `syz.1.344'.
[   69.850965][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.026629][ T4502] lo: entered promiscuous mode
[   70.031479][ T4502] lo: entered allmulticast mode
[   70.047344][ T4502] tunl0: entered promiscuous mode
[   70.052466][ T4502] tunl0: entered allmulticast mode
[   70.065751][ T4500] loop1: detected capacity change from 0 to 8192
[   70.073406][ T4502] gre0: entered promiscuous mode
[   70.078466][ T4502] gre0: entered allmulticast mode
[   70.085388][ T4502] gretap0: entered promiscuous mode
[   70.090695][ T4502] gretap0: entered allmulticast mode
[   70.095022][ T4504] loop2: detected capacity change from 0 to 256
[   70.108110][ T4502] erspan0: entered promiscuous mode
[   70.113288][ T4504] vfat: Bad value for 'tz'
[   70.113374][ T4502] erspan0: entered allmulticast mode
[   70.126069][ T4502] ip_vti0: entered promiscuous mode
[   70.131372][ T4502] ip_vti0: entered allmulticast mode
[   70.137300][ T4500]  loop1: p1 p2 p3 p4
[   70.141659][ T4500] loop1: p1 size 3523149824 extends beyond EOD, truncated
[   70.144394][ T4504] loop2: detected capacity change from 0 to 2048
[   70.176518][ T4500] loop1: p2 start 4293394688 is beyond EOD, truncated
[   70.177093][ T4504] EXT4-fs (loop2): failed to initialize system zone (-117)
[   70.183374][ T4500] loop1: p3 start 150994944 is beyond EOD, truncated
[   70.196272][ T4504] EXT4-fs (loop2): mount failed
[   70.197572][ T4500] loop1: p4 size 50331648 extends beyond EOD, truncated
[   70.219129][ T4502] ip6_vti0: entered promiscuous mode
[   70.224500][ T4502] ip6_vti0: entered allmulticast mode
[   70.245487][ T4502] sit0: entered promiscuous mode
[   70.250802][ T4502] sit0: entered allmulticast mode
[   70.257697][ T4502] ip6tnl0: entered promiscuous mode
[   70.262963][ T4502] ip6tnl0: entered allmulticast mode
[   70.269729][ T4502] ip6gre0: entered promiscuous mode
[   70.274982][ T4502] ip6gre0: entered allmulticast mode
[   70.281731][ T4502] ip6gretap0: entered promiscuous mode
[   70.287273][ T4502] ip6gretap0: entered allmulticast mode
[   70.294188][ T4502] bridge0: entered promiscuous mode
[   70.299474][ T4502] bridge0: entered allmulticast mode
[   70.306409][ T4502] vcan0: entered promiscuous mode
[   70.311477][ T4502] vcan0: entered allmulticast mode
[   70.319421][ T4502] bond0: entered promiscuous mode
[   70.324493][ T4502] bond_slave_0: entered promiscuous mode
[   70.330338][ T4502] bond_slave_1: entered promiscuous mode
[   70.336140][ T4502] bond0: entered allmulticast mode
[   70.341289][ T4502] bond_slave_0: entered allmulticast mode
[   70.347073][ T4502] bond_slave_1: entered allmulticast mode
[   70.360714][ T4500] loop1: detected capacity change from 0 to 512
[   70.369224][ T4502] team0: entered promiscuous mode
[   70.374836][ T4502] team_slave_0: entered promiscuous mode
[   70.380667][ T4502] team_slave_1: entered promiscuous mode
[   70.386552][ T4502] team0: entered allmulticast mode
[   70.391684][ T4502] team_slave_0: entered allmulticast mode
[   70.397456][ T4502] team_slave_1: entered allmulticast mode
[   70.408520][ T4502] dummy0: entered promiscuous mode
[   70.413702][ T4502] dummy0: entered allmulticast mode
[   70.437356][ T4500] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   70.455724][ T4502] nlmon0: entered promiscuous mode
[   70.461089][ T4502] nlmon0: entered allmulticast mode
[   70.467989][ T4500] ext4 filesystem being mounted at /71/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[   70.478762][ T4502] 0�X���: entered promiscuous mode
[   70.483911][ T4502] A link change request failed with some changes committed already. Interface 
60�X��� may have been left with an inconsistent configuration, please check.
[   70.507174][ T4500] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #4: comm syz.1.346: corrupted inode contents
[   70.519271][ T4500] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #4: comm syz.1.346: mark_inode_dirty error
[   70.542967][ T4500] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #4: comm syz.1.346: corrupted inode contents
[   70.552079][ T4509] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.346: corrupted xattr block 33: bad e_name length
[   70.555149][ T4500] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #4: comm syz.1.346: mark_inode_dirty error
[   70.588072][ T4500] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.346: Failed to acquire dquot type 1
[   70.600331][ T4509] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop1 ino=15
[   70.610644][ T4509] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.346: corrupted xattr block 33: bad e_name length
[   70.634110][ T4509] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop1 ino=15
[   70.643442][ T4509] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.346: corrupted xattr block 33: bad e_name length
[   70.658020][ T4509] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop1 ino=15
[   70.667306][ T4509] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #4: comm syz.1.346: corrupted inode contents
[   70.679819][ T4509] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #4: comm syz.1.346: mark_inode_dirty error
[   70.720244][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   71.543278][ T4530] netlink: 8 bytes leftover after parsing attributes in process `syz.0.355'.
[   71.599613][ T4535] netlink: 'syz.0.357': attribute type 4 has an invalid length.
[   71.611406][ T4535] netlink: 'syz.0.357': attribute type 4 has an invalid length.
[   71.862384][ T4541] macvlan1: entered promiscuous mode
[   71.869419][ T4541] ipvlan0: entered promiscuous mode
[   71.876551][ T4541] ipvlan0: left promiscuous mode
[   71.881729][ T4541] macvlan1: left promiscuous mode
[   71.892298][ T4537] ip6_vti0 speed is unknown, defaulting to 1000
[   71.911752][ T4544] x_tables: duplicate underflow at hook 2
[   71.925184][ T4540] lo: left promiscuous mode
[   71.929809][ T4540] lo: left allmulticast mode
[   71.937210][ T4540] tunl0: left promiscuous mode
[   71.942010][ T4540] tunl0: left allmulticast mode
[   71.948312][   T10] IPVS: starting estimator thread 0...
[   71.956687][ T4540] gre0: left promiscuous mode
[   71.961466][ T4540] gre0: left allmulticast mode
[   72.017999][ T4540] gretap0: left promiscuous mode
[   72.023108][ T4540] gretap0: left allmulticast mode
[   72.031121][ T4540] erspan0: left promiscuous mode
[   72.036228][ T4540] erspan0: left allmulticast mode
[   72.042820][ T4549] SELinux: security_context_str_to_sid () failed with errno=-22
[   72.054456][ T4540] ip_vti0: left promiscuous mode
[   72.059697][ T4540] ip_vti0: left allmulticast mode
[   72.065197][ T4545] IPVS: using max 1728 ests per chain, 86400 per kthread
[   72.074033][ T4540] ip6_vti0: left promiscuous mode
[   72.080687][ T4540] ip6_vti0: left allmulticast mode
[   72.088088][ T4540] sit0: left promiscuous mode
[   72.092922][ T4540] sit0: left allmulticast mode
[   72.101294][ T4540] ip6tnl0: left promiscuous mode
[   72.106332][ T4540] ip6tnl0: left allmulticast mode
[   72.119459][ T4550] loop4: detected capacity change from 0 to 1024
[   72.126888][ T4550] EXT4-fs: Ignoring removed oldalloc option
[   72.135479][ T4540] ip6gre0: left promiscuous mode
[   72.140749][ T4540] ip6gre0: left allmulticast mode
[   72.148606][ T4550] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback.
[   72.162853][ T4550] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   72.175573][ T4540] syz_tun: left promiscuous mode
[   72.180685][ T4540] syz_tun: left allmulticast mode
[   72.188607][ T4540] ip6gretap0: left promiscuous mode
[   72.194018][ T4540] ip6gretap0: left allmulticast mode
[   72.203989][ T4550] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: comm syz.4.360: lblock 0 mapped to illegal pblock 0 (length 1)
[   72.217805][ T4550] EXT4-fs (loop4): Remounting filesystem read-only
[   72.226563][ T4540] bridge0: left promiscuous mode
[   72.231560][ T4540] bridge0: left allmulticast mode
[   72.239468][ T4540] vcan0: left promiscuous mode
[   72.244305][ T4540] vcan0: left allmulticast mode
[   72.250594][ T4540] $H�: left promiscuous mode
[   72.255454][ T4540] bridge_slave_1: left promiscuous mode
[   72.261316][ T4540] $H�: left allmulticast mode
[   72.266280][ T4540] bridge_slave_1: left allmulticast mode
[   72.273267][ T4540] dummy0: left promiscuous mode
[   72.278360][ T4540] dummy0: left allmulticast mode
[   72.285166][ T4540] nlmon0: left promiscuous mode
[   72.290190][ T4540] nlmon0: left allmulticast mode
[   72.296544][ T4540] caif0: left promiscuous mode
[   72.301346][ T4540] caif0: left allmulticast mode
[   72.312253][   T29] kauditd_printk_skb: 96 callbacks suppressed
[   72.312270][   T29] audit: type=1326 audit(1764198598.901:1274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4547 comm="syz.4.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a2f11f749 code=0x7ffc0000
[   72.342006][   T29] audit: type=1326 audit(1764198598.901:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4547 comm="syz.4.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a2f11f749 code=0x7ffc0000
[   72.392220][ T4540] batman_adv: batadv0: Interface deactivated: veth1_vlan
[   72.429995][   T29] audit: type=1326 audit(1764198599.011:1276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4539 comm="syz.2.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff377fbf749 code=0x7ffc0000
[   72.433565][ T3340] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[   72.454672][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[   72.461757][ T3340] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.471343][   T29] audit: type=1326 audit(1764198599.071:1277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4539 comm="syz.2.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff377fbf749 code=0x7ffc0000
[   72.543859][  T382] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[   72.552328][  T382] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.575704][  T382] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[   72.584361][  T382] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.607510][  T382] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[   72.612275][ T4555] netlink: 14 bytes leftover after parsing attributes in process `syz.4.361'.
[   72.615925][  T382] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.645901][ T4555] hsr_slave_0: left promiscuous mode
[   72.664699][ T4555] hsr_slave_1: left promiscuous mode
[   72.702436][ T4561] netlink: 120 bytes leftover after parsing attributes in process `syz.1.363'.
[   72.718844][ T4557] lo: entered promiscuous mode
[   72.723690][ T4557] lo: entered allmulticast mode
[   72.759773][ T4557] tunl0: entered promiscuous mode
[   72.764888][ T4557] tunl0: entered allmulticast mode
[   72.772046][ T4557] gre0: entered promiscuous mode
[   72.777067][ T4557] gre0: entered allmulticast mode
[   72.783328][ T4557] gretap0: entered promiscuous mode
[   72.788686][ T4557] gretap0: entered allmulticast mode
[   72.794246][   T29] audit: type=1400 audit(1764198599.381:1278): avc:  denied  { write } for  pid=4560 comm="syz.1.363" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   72.820593][ T4557] erspan0: entered promiscuous mode
[   72.825945][ T4557] erspan0: entered allmulticast mode
[   72.832434][ T4557] ip_vti0: entered promiscuous mode
[   72.837708][ T4557] ip_vti0: entered allmulticast mode
[   72.844149][ T4557] ip6_vti0: entered promiscuous mode
[   72.849589][ T4557] ip6_vti0: entered allmulticast mode
[   72.856391][ T4557] sit0: entered promiscuous mode
[   72.861388][ T4557] sit0: entered allmulticast mode
[   72.867672][ T4557] ip6tnl0: entered promiscuous mode
[   72.873005][ T4557] ip6tnl0: entered allmulticast mode
[   72.879705][ T4557] ip6gre0: entered promiscuous mode
[   72.885059][ T4557] ip6gre0: entered allmulticast mode
[   72.891440][ T4557] ip6gretap0: entered promiscuous mode
[   72.896967][ T4557] ip6gretap0: entered allmulticast mode
[   72.903860][ T4557] vcan0: entered promiscuous mode
[   72.909142][ T4557] vcan0: entered allmulticast mode
[   72.939728][ T4569] netlink: 8 bytes leftover after parsing attributes in process `syz.4.365'.
[   72.950626][ T4557] bond0: entered promiscuous mode
[   72.955807][ T4557] bond_slave_0: entered promiscuous mode
[   72.961686][ T4557] bond_slave_1: entered promiscuous mode
[   72.967564][ T4557] bond0: entered allmulticast mode
[   72.972700][ T4557] bond_slave_0: entered allmulticast mode
[   72.978463][ T4557] bond_slave_1: entered allmulticast mode
[   72.993602][ T4557] team0: entered promiscuous mode
[   72.998912][ T4557] team_slave_0: entered promiscuous mode
[   73.004785][ T4557] team_slave_1: entered promiscuous mode
[   73.010526][ T4557] team0: entered allmulticast mode
[   73.015668][ T4557] team_slave_0: entered allmulticast mode
[   73.021438][ T4557] team_slave_1: entered allmulticast mode
[   73.178807][ T4557] dummy0: entered promiscuous mode
[   73.202343][ T4575] rdma_op ffff88811cef0980 conn xmit_rdma 0000000000000000
[   73.211276][ T4557] nlmon0: entered promiscuous mode
[   73.216468][ T4557] nlmon0: entered allmulticast mode
[   73.238051][ T4557] caif0: entered promiscuous mode
[   73.243160][ T4557] caif0: entered allmulticast mode
[   73.248382][ T4557] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   73.319496][ T4566] ip6_vti0 speed is unknown, defaulting to 1000
[   73.414658][   T29] audit: type=1400 audit(1764198600.001:1279): avc:  denied  { load_policy } for  pid=4576 comm="syz.1.367" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[   73.427923][ T4577] SELinux: failed to load policy
[   73.651464][ T4585] geneve2: entered promiscuous mode
[   73.656886][ T4585] geneve2: entered allmulticast mode
[   73.675114][   T29] audit: type=1400 audit(1764198600.261:1280): avc:  denied  { create } for  pid=4583 comm="syz.2.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[   73.909047][ T4597] loop2: detected capacity change from 0 to 1024
[   73.986190][ T4597] EXT4-fs (loop2): stripe (32769) is not aligned with cluster size (16), stripe is disabled
[   73.998597][ T4599] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[   74.105176][ T4597] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   74.387716][ T4597] ip6_vti0 speed is unknown, defaulting to 1000
[   74.538464][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   74.655344][   T29] audit: type=1400 audit(1764198600.291:1281): avc:  denied  { write } for  pid=4583 comm="syz.2.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[   74.674893][   T29] audit: type=1400 audit(1764198600.571:1282): avc:  denied  { create } for  pid=4590 comm="syz.1.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   74.695101][   T29] audit: type=1400 audit(1764198600.611:1283): avc:  denied  { write } for  pid=4590 comm="syz.1.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   74.927310][ T4591] ip6_vti0 speed is unknown, defaulting to 1000
[   75.657442][ T4630] lo: entered promiscuous mode
[   75.662360][ T4630] lo: entered allmulticast mode
[   75.679465][ T4630] tunl0: entered promiscuous mode
[   75.684579][ T4630] tunl0: entered allmulticast mode
[   75.697306][ T4630] gre0: entered promiscuous mode
[   75.702310][ T4630] gre0: entered allmulticast mode
[   75.716962][ T4630] gretap0: entered promiscuous mode
[   75.722289][ T4630] gretap0: entered allmulticast mode
[   75.729492][ T4630] erspan0: entered promiscuous mode
[   75.734744][ T4630] erspan0: entered allmulticast mode
[   75.741641][ T4630] ip_vti0: entered promiscuous mode
[   75.747004][ T4630] ip_vti0: entered allmulticast mode
[   75.753514][ T4630] ip6_vti0: entered promiscuous mode
[   75.758964][ T4630] ip6_vti0: entered allmulticast mode
[   75.778462][ T4633] loop2: detected capacity change from 0 to 512
[   75.786762][ T4630] sit0: entered promiscuous mode
[   75.791783][ T4630] sit0: entered allmulticast mode
[   75.798993][ T4630] ip6tnl0: entered promiscuous mode
[   75.805439][ T4630] ip6tnl0: entered allmulticast mode
[   75.812435][ T4630] ip6gre0: entered promiscuous mode
[   75.817746][ T4630] ip6gre0: entered allmulticast mode
[   75.826254][ T4633] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   75.839495][ T4633] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   75.849983][ T4630] syz_tun: entered promiscuous mode
[   75.855283][ T4630] syz_tun: entered allmulticast mode
[   75.862405][ T4630] ip6gretap0: entered promiscuous mode
[   75.868145][ T4630] ip6gretap0: entered allmulticast mode
[   75.874907][ T4630] bridge0: entered promiscuous mode
[   75.880274][ T4630] bridge0: entered allmulticast mode
[   75.887696][ T4630] vcan0: entered promiscuous mode
[   75.892795][ T4630] vcan0: entered allmulticast mode
[   75.900711][ T4630] bond0: entered promiscuous mode
[   75.906324][ T4630] bond_slave_0: entered promiscuous mode
[   75.913123][ T4630] bond_slave_1: entered promiscuous mode
[   75.919051][ T4630] bond0: entered allmulticast mode
[   75.924380][ T4630] bond_slave_0: entered allmulticast mode
[   75.930209][ T4630] bond_slave_1: entered allmulticast mode
[   75.943234][ T4630] dummy0: entered promiscuous mode
[   75.948660][ T4630] dummy0: entered allmulticast mode
[   75.954498][ T4630] nlmon0: entered promiscuous mode
[   75.959728][ T4630] nlmon0: entered allmulticast mode
[   75.968302][ T4630] caif0: entered promiscuous mode
[   75.973457][ T4630] caif0: entered allmulticast mode
[   75.978915][ T4630] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   76.108751][ T4642] netlink: 284 bytes leftover after parsing attributes in process `syz.3.385'.
[   76.378852][ T4640] syzkaller0: entered promiscuous mode
[   76.384492][ T4640] syzkaller0: entered allmulticast mode
[   76.441437][ T4656] $H�: renamed from bond0 (while UP)
[   76.468165][ T4656] $H�: left allmulticast mode
[   76.473076][ T4656] bond_slave_0: left allmulticast mode
[   76.478765][ T4656] bond_slave_1: left allmulticast mode
[   76.809125][   T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   76.823245][   T10] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   77.216996][ T4668] netlink: 8 bytes leftover after parsing attributes in process `syz.3.394'.
[   77.243199][ T4668] netlink: 4 bytes leftover after parsing attributes in process `syz.3.394'.
[   77.371410][ T4677] loop2: detected capacity change from 0 to 2048
[   77.434392][ T4677] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   77.458408][ T4677] ext4 filesystem being mounted at /90/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   77.481862][ T4682] loop1: detected capacity change from 0 to 512
[   77.488502][ T4682] EXT4-fs: Ignoring removed orlov option
[   77.496230][ T4682] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   77.507657][ T4682] EXT4-fs (loop1): 1 orphan inode deleted
[   77.513420][ T4682] EXT4-fs (loop1): 1 truncate cleaned up
[   77.519755][ T4682] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   77.533512][ T4682] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   77.550571][ T4686] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.397: bg 0: block 345: padding at end of block bitmap is not set
[   77.565313][ T4686] EXT4-fs (loop2): Remounting filesystem read-only
[   77.572185][   T31] EXT4-fs warning (device loop2): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30
[   77.618732][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   78.281768][   T29] kauditd_printk_skb: 121 callbacks suppressed
[   78.281786][   T29] audit: type=1400 audit(1764198604.871:1405): avc:  denied  { map } for  pid=4690 comm="syz.0.409" path="pipe:[1598]" dev="pipefs" ino=1598 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[   78.311411][   T29] audit: type=1400 audit(1764198604.871:1406): avc:  denied  { execute } for  pid=4690 comm="syz.0.409" path="pipe:[1598]" dev="pipefs" ino=1598 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[   78.339221][ T4691] lo: entered promiscuous mode
[   78.344050][ T4691] lo: entered allmulticast mode
[   78.347105][ T4688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   78.366776][ T4691] tunl0: entered promiscuous mode
[   78.372028][ T4691] tunl0: entered allmulticast mode
[   78.374186][ T4688] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   78.412037][ T4691] gre0: entered promiscuous mode
[   78.417230][ T4691] gre0: entered allmulticast mode
[   78.430635][ T4691] gretap0: entered promiscuous mode
[   78.435934][ T4691] gretap0: entered allmulticast mode
[   78.452064][   T29] audit: type=1400 audit(1764198604.931:1407): avc:  denied  { setcheckreqprot } for  pid=4690 comm="syz.0.409" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[   78.473306][   T29] audit: type=1400 audit(1764198604.931:1408): avc:  denied  { create } for  pid=4690 comm="syz.0.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   78.492827][   T29] audit: type=1400 audit(1764198604.931:1409): avc:  denied  { setopt } for  pid=4690 comm="syz.0.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   78.512279][   T29] audit: type=1400 audit(1764198604.931:1410): avc:  denied  { read } for  pid=4687 comm="syz.3.401" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   78.535231][   T29] audit: type=1400 audit(1764198604.931:1411): avc:  denied  { ioctl } for  pid=4687 comm="syz.3.401" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   78.626789][ T4691] erspan0: entered promiscuous mode
[   78.632064][ T4691] erspan0: entered allmulticast mode
[   78.683464][ T4691] ip_vti0: entered promiscuous mode
[   78.688837][ T4691] ip_vti0: entered allmulticast mode
[   78.698092][ T4691] ip6_vti0: entered promiscuous mode
[   78.703436][ T4691] ip6_vti0: entered allmulticast mode
[   78.709582][ T4691] sit0: entered promiscuous mode
[   78.716079][ T4691] sit0: entered allmulticast mode
[   78.745342][ T4691] ip6tnl0: entered promiscuous mode
[   78.751141][ T4691] ip6tnl0: entered allmulticast mode
[   78.771078][ T4691] ip6gre0: entered promiscuous mode
[   78.777097][ T4691] ip6gre0: entered allmulticast mode
[   78.800102][ T4691] syz_tun: entered promiscuous mode
[   78.805632][ T4691] syz_tun: entered allmulticast mode
[   78.814185][   T29] audit: type=1400 audit(1764198605.071:1412): avc:  denied  { append } for  pid=4687 comm="syz.3.401" name="event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   78.833836][ T4691] ip6gretap0: entered promiscuous mode
[   78.838286][   T29] audit: type=1400 audit(1764198605.191:1413): avc:  denied  { read } for  pid=4698 comm="syz.0.403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   78.843762][ T4691] ip6gretap0: entered allmulticast mode
[   78.886731][ T4691] bridge0: entered promiscuous mode
[   78.892298][ T4691] bridge0: entered allmulticast mode
[   78.904413][ T4691] vcan0: entered promiscuous mode
[   78.909664][ T4691] vcan0: entered allmulticast mode
[   78.955459][ T4691] bond0: entered promiscuous mode
[   78.960622][ T4691] bond_slave_0: entered promiscuous mode
[   78.966471][ T4691] bond_slave_1: entered promiscuous mode
[   78.972216][ T4691] bond0: entered allmulticast mode
[   78.977390][ T4691] bond_slave_0: entered allmulticast mode
[   78.983170][ T4691] bond_slave_1: entered allmulticast mode
[   79.062934][ T4713] loop2: detected capacity change from 0 to 512
[   79.063205][ T4691] dummy0: entered promiscuous mode
[   79.074513][ T4691] dummy0: entered allmulticast mode
[   79.099947][ T4713] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   79.127898][ T4691] nlmon0: entered promiscuous mode
[   79.133082][ T4691] nlmon0: entered allmulticast mode
[   79.148961][ T4713] ext4 filesystem being mounted at /93/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   79.166651][ T4691] caif0: entered promiscuous mode
[   79.171772][ T4691] caif0: entered allmulticast mode
[   79.177041][ T4691] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   79.196126][ T2966] ip6_vti0 speed is unknown, defaulting to 1000
[   79.200040][ T4711] macvlan1: entered promiscuous mode
[   79.202409][ T2966] syz2: Port: 1 Link ACTIVE
[   79.216670][ T4711] ipvlan0: entered promiscuous mode
[   79.229160][ T4711] ipvlan0: left promiscuous mode
[   79.239112][   T29] audit: type=1400 audit(1764198605.831:1414): avc:  denied  { append } for  pid=4712 comm="syz.2.407" path="/93/bus/blkio.bfq.io_merged" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   79.273177][ T4711] macvlan1: left promiscuous mode
[   79.281264][ T3410] ip6_vti0 speed is unknown, defaulting to 1000
[   79.296939][ T4713] EXT4-fs error (device loop2): ext4_lookup:1787: inode #12: comm syz.2.407: iget: bad i_size value: 2533274857506816
[   79.370879][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.396393][ T4732] loop9: detected capacity change from 0 to 7
[   79.408636][ T4728] loop1: detected capacity change from 0 to 512
[   79.413853][ T4732] Buffer I/O error on dev loop9, logical block 0, async page read
[   79.435134][ T4732] Buffer I/O error on dev loop9, logical block 0, async page read
[   79.441421][ T4733] ip6_vti0 speed is unknown, defaulting to 1000
[   79.443101][ T4732]  loop9: unable to read partition table
[   79.462437][ T4728] EXT4-fs (loop1): orphan cleanup on readonly fs
[   79.490995][ T4737] bridge0: port 1(gretap0) entered blocking state
[   79.497638][ T4737] bridge0: port 1(gretap0) entered disabled state
[   79.504446][ T4732] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[   79.504446][ T4732] 
) failed (rc=-5)
[   79.508603][ T4728] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.413: Failed to acquire dquot type 1
[   79.551396][ T4737] gretap0: entered allmulticast mode
[   79.569187][ T4737] gretap0: entered promiscuous mode
[   79.585879][ T4728] EXT4-fs (loop1): 1 truncate cleaned up
[   79.611644][ T4738] gretap0: left allmulticast mode
[   79.613194][ T4728] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   79.616895][ T4738] gretap0: left promiscuous mode
[   79.617088][ T4738] bridge0: port 1(gretap0) entered disabled state
[   79.666395][ T4728] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.749228][ T4728] netlink: 68 bytes leftover after parsing attributes in process `syz.1.413'.
[   79.789010][ T4728] loop1: detected capacity change from 0 to 512
[   79.849203][ T4728] EXT4-fs (loop1): too many log groups per flexible block group
[   79.865242][ T4728] EXT4-fs (loop1): failed to initialize mballoc (-12)
[   79.894663][ T4728] EXT4-fs (loop1): mount failed
[   80.678376][ T4776] netlink: 24 bytes leftover after parsing attributes in process `syz.4.427'.
[   80.779088][ T4776] netlink: 4 bytes leftover after parsing attributes in process `syz.4.427'.
[   81.264825][ T4788] loop1: detected capacity change from 0 to 1024
[   81.281946][ T4788] EXT4-fs: Ignoring removed bh option
[   81.319118][ T4788] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   81.423074][ T4784] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 15: block 273:freeing already freed block (bit 17); block bitmap corrupt.
[   81.450702][ T4784] EXT4-fs (loop1): Remounting filesystem read-only
[   81.463885][ T4784] EXT4-fs warning (device loop1): ext4_convert_unwritten_extents:4984: inode #15: block 64: len 64: ext4_ext_map_blocks returned -30
[   81.503916][ T4794] netlink: 12 bytes leftover after parsing attributes in process `syz.3.430'.
[   81.564850][ T4796] macvlan1: entered promiscuous mode
[   81.577614][ T4796] ipvlan0: entered promiscuous mode
[   81.587102][ T4796] ipvlan0: left promiscuous mode
[   81.595908][ T4796] macvlan1: left promiscuous mode
[   81.629919][ T2966] IPVS: starting estimator thread 0...
[   81.654543][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   81.726028][ T4800] IPVS: using max 2400 ests per chain, 120000 per kthread
[   81.844113][ T4811] uprobe: syz.2.436:4811 failed to unregister, leaking uprobe
[   82.031149][ T4816] uprobe: syz.2.436:4816 failed to unregister, leaking uprobe
[   82.210620][ T4820] ip6_vti0 speed is unknown, defaulting to 1000
[   82.410059][ T4824] xt_recent: hitcount (16777216) is larger than allowed maximum (65535)
[   82.674135][   T31] Bluetooth: hci0: Frame reassembly failed (-84)
[   82.834861][ T4831] loop1: detected capacity change from 0 to 1024
[   82.877625][ T4833] loop4: detected capacity change from 0 to 2048
[   82.887105][ T4831] EXT4-fs (loop1): stripe (32769) is not aligned with cluster size (16), stripe is disabled
[   82.907531][ T4833] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   82.928982][ T4831] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   82.936517][ T4833] ext4 filesystem being mounted at /85/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   82.972347][ T4833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   82.986993][ T4833] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   83.222489][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   83.293815][ T4840] loop2: detected capacity change from 0 to 1024
[   83.302143][ T4840] EXT4-fs: Ignoring removed bh option
[   83.318209][ T4840] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   83.336936][ T4840] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 15: block 273:freeing already freed block (bit 17); block bitmap corrupt.
[   83.351943][ T4840] EXT4-fs (loop2): Remounting filesystem read-only
[   83.360205][ T4840] EXT4-fs warning (device loop2): ext4_convert_unwritten_extents:4984: inode #15: block 64: len 64: ext4_ext_map_blocks returned -30
[   83.390150][ T4851] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.429494][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   83.441664][   T29] kauditd_printk_skb: 185 callbacks suppressed
[   83.441681][   T29] audit: type=1326 audit(1764198610.031:1598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4850 comm="syz.1.446" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f42e142f749 code=0x0
[   83.456458][ T4854] loop2: detected capacity change from 0 to 1024
[   83.478283][ T4854] EXT4-fs: Ignoring removed nobh option
[   83.484379][ T4854] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   83.484990][ T4851] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.496184][ T4854] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   83.514013][ T4854] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #11: comm syz.2.447: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[   83.532981][ T4854] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.447: couldn't read orphan inode 11 (err -117)
[   83.547869][ T4854] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   83.561989][ T4855] bond1 (unregistering): Released all slaves
[   83.581325][ T4851] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.589937][ T4854] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.447: Invalid block bitmap block 0 in block_group 0
[   83.605165][ T4854] Quota error (device loop2): write_blk: dquota write failed
[   83.612634][ T4854] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[   83.653442][ T4854] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.447: Failed to acquire dquot type 0
[   83.667367][ T4851] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.679045][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   83.711426][ T4865] loop4: detected capacity change from 0 to 512
[   83.727772][ T4865] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   83.740519][ T4865] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   83.754177][   T29] audit: type=1326 audit(1764198610.351:1599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4863 comm="syz.4.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a2f11f749 code=0x7ffc0000
[   83.757793][   T52] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   83.816069][   T29] audit: type=1326 audit(1764198610.381:1600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4863 comm="syz.4.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f1a2f11f749 code=0x7ffc0000
[   83.839483][   T29] audit: type=1326 audit(1764198610.381:1601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4863 comm="syz.4.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a2f11f749 code=0x7ffc0000
[   83.863557][   T29] audit: type=1326 audit(1764198610.391:1602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4863 comm="syz.4.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1a2f11f749 code=0x7ffc0000
[   83.887305][   T29] audit: type=1326 audit(1764198610.391:1603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4863 comm="syz.4.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a2f11f749 code=0x7ffc0000
[   83.910821][   T29] audit: type=1326 audit(1764198610.391:1604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4863 comm="syz.4.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1a2f11f749 code=0x7ffc0000
[   83.934233][   T29] audit: type=1326 audit(1764198610.391:1605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4863 comm="syz.4.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a2f11f749 code=0x7ffc0000
[   83.957703][   T52] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   83.965932][   T52] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   83.974966][   T52] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   83.994574][ T4854] syz.2.447 (4854) used greatest stack depth: 9544 bytes left
[   84.003786][   T52] EXT4-fs error (device loop2): __ext4_get_inode_loc:4832: comm kworker/u8:3: Invalid inode table block 18446744065119617025 in block_group 0
[   84.019913][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   84.048538][ T4873] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: 1
[   84.057252][ T4873] ref_ctr increment failed for inode: 0x222 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888109af9700
[   84.069905][ T4873] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: -1
[   84.074894][ T4874] ip6_vti0 speed is unknown, defaulting to 1000
[   84.078726][ T4873] ref_ctr decrement failed for inode: 0x222 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888109af9700
[   84.146141][ T4873] uprobe: syz.2.451:4873 failed to unregister, leaking uprobe
[   84.192393][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   84.231530][ T4880] netlink: 'syz.2.454': attribute type 3 has an invalid length.
[   84.245708][ T4882] autofs4:pid:4882:validate_dev_ioctl: path string terminator missing for cmd(0xc018937a)
[   84.282065][ T4884] netlink: 57 bytes leftover after parsing attributes in process `syz.2.456'.
[   84.418086][ T4896] netlink: 'syz.3.460': attribute type 10 has an invalid length.
[   84.443110][ T4896] ipvlan0: entered allmulticast mode
[   84.448545][ T4896] veth0_vlan: entered allmulticast mode
[   84.456412][ T4896] team0: Device ipvlan0 failed to register rx_handler
[   84.466051][ T4897] ip6_vti0 speed is unknown, defaulting to 1000
[   84.716132][ T3643] Bluetooth: hci0: command 0x1003 tx timeout
[   84.722320][ T3516] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   84.768924][ T4908] loop2: detected capacity change from 0 to 512
[   84.778573][ T4908] loop2: detected capacity change from 0 to 128
[   84.829759][ T4911] ip6_vti0 speed is unknown, defaulting to 1000
[   84.904680][ T4913] rdma_op ffff88811a420180 conn xmit_rdma 0000000000000000
[   85.216437][ T4957] netlink: 24 bytes leftover after parsing attributes in process `syz.4.469'.
[   85.269154][ T4957] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4957 comm=syz.4.469
[   85.356963][ T4965] loop4: detected capacity change from 0 to 512
[   85.386348][ T4965] EXT4-fs: Ignoring removed nomblk_io_submit option
[   85.404019][ T4965] EXT4-fs (loop4): revision level too high, forcing read-only mode
[   85.412072][ T4965] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01d, mo2=0102]
[   85.454710][ T4965] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80)
[   85.464333][ T4965] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features
[   85.499532][ T4968] netlink: 'syz.0.472': attribute type 1 has an invalid length.
[   85.508252][ T4965] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[   85.522029][ T4965] EXT4-fs: Ignoring removed nomblk_io_submit option
[   85.534835][ T4968] 8021q: adding VLAN 0 to HW filter on device bond1
[   85.542833][ T4965] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80)
[   85.558996][ T4968] macvlan2: entered promiscuous mode
[   85.564422][ T4968] macvlan2: entered allmulticast mode
[   85.571367][ T4968] bond1: entered promiscuous mode
[   85.577453][ T4968] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   85.597657][ T4965] EXT4-fs warning (device loop4): dx_probe:861: inode #2: comm syz.4.471: dx entry: limit 65535 != root limit 120
[   85.609772][ T4965] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.471: Corrupt directory, running e2fsck is recommended
[   85.646880][ T4968] bond1: left promiscuous mode
[   85.692555][ T4971] bond1: (slave ip6gretap1): making interface the new active one
[   85.732089][ T4971] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link
[   85.745454][ T4973] macvlan2: entered promiscuous mode
[   85.750887][ T4973] macvlan2: entered allmulticast mode
[   85.758625][ T4973] bond1: entered promiscuous mode
[   85.763720][ T4973] ip6gretap1: entered promiscuous mode
[   85.778408][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.790495][ T4973] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   85.806548][ T4973] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of ip6gretap1
[   85.838413][ T4977] openvswitch: netlink: Missing key (keys=40, expected=2000)
[   85.852919][ T4973] bond1: left promiscuous mode
[   85.857928][ T4973] ip6gretap1: left promiscuous mode
[   86.023753][ T4991] loop9: detected capacity change from 0 to 7
[   86.035038][ T4991] Buffer I/O error on dev loop9, logical block 0, async page read
[   86.045543][ T4991] Buffer I/O error on dev loop9, logical block 0, async page read
[   86.052657][ T4992] $H�: renamed from bond0 (while UP)
[   86.053511][ T4991]  loop9: unable to read partition table
[   86.064680][ T4991] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[   86.064680][ T4991] 
) failed (rc=-5)
[   86.066539][ T4992] $H�: left allmulticast mode
[   86.083225][ T4992] bond_slave_0: left allmulticast mode
[   86.088984][ T4992] bond_slave_1: left allmulticast mode
[   86.161346][ T4994] tipc: New replicast peer: 255.255.255.255
[   86.167795][ T4994] tipc: Enabled bearer <udp:s>, priority 10
[   86.200010][ T4996] macvlan1: entered promiscuous mode
[   86.207041][ T4996] ipvlan0: entered promiscuous mode
[   86.213519][ T4996] ipvlan0: left promiscuous mode
[   86.218995][ T4996] macvlan1: left promiscuous mode
[   86.479532][ T5006] syzkaller0: entered promiscuous mode
[   86.485068][ T5006] syzkaller0: entered allmulticast mode
[   86.495172][ T5006] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   86.505327][ T5006] tipc: Resetting bearer <eth:syzkaller0>
[   86.512651][ T5005] tipc: Resetting bearer <eth:syzkaller0>
[   86.520623][ T5005] tipc: Disabling bearer <eth:syzkaller0>
[   86.666071][ T5011] loop4: detected capacity change from 0 to 512
[   86.676461][ T5011] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2803: inode #11: comm syz.4.486: corrupted xattr block 95: invalid header
[   86.694292][ T5011] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.486: bg 0: block 7: invalid block bitmap
[   86.706954][ T5011] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6667: Corrupt filesystem
[   86.715896][ T5011] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2967: inode #11: comm syz.4.486: corrupted xattr block 95: invalid header
[   86.730207][ T5011] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117)
[   86.739647][ T5011] EXT4-fs (loop4): 1 orphan inode deleted
[   86.746209][ T5011] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   86.778344][ T5015] netlink: 4 bytes leftover after parsing attributes in process `syz.2.496'.
[   86.910585][ T5023] loop1: detected capacity change from 0 to 512
[   86.943185][ T5022] netlink: 'syz.2.488': attribute type 1 has an invalid length.
[   86.959428][ T5022] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.068717][ T5023] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   87.082046][ T5023] ext4 filesystem being mounted at /96/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   87.112593][ T5023] EXT4-fs error (device loop1): ext4_lookup:1787: inode #12: comm syz.1.487: iget: bad i_size value: 2533274857506816
[   87.365578][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   87.741156][ T3425] tipc: Node number set to 2034268196
[   88.263734][ T5045] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[   88.760430][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   88.791775][   T29] kauditd_printk_skb: 141 callbacks suppressed
[   88.791793][   T29] audit: type=1400 audit(1764198615.381:1747): avc:  denied  { ioctl } for  pid=5048 comm="syz.3.497" path="socket:[11126]" dev="sockfs" ino=11126 ioctlcmd=0x9408 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   88.925771][   T29] audit: type=1326 audit(1764198615.451:1748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5048 comm="syz.3.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57d6a5f749 code=0x7ffc0000
[   88.949323][   T29] audit: type=1326 audit(1764198615.451:1749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5048 comm="syz.3.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f57d6a5f749 code=0x7ffc0000
[   88.988606][ T5044] loop1: detected capacity change from 0 to 1024
[   89.015833][ T5044] EXT4-fs: inline encryption not supported
[   89.042101][ T5059] SELinux:  Context @ is not valid (left unmapped).
[   89.057287][ T5044] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   89.069837][   T29] audit: type=1326 audit(1764198615.511:1750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5048 comm="syz.3.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57d6a5f749 code=0x7ffc0000
[   89.093228][   T29] audit: type=1326 audit(1764198615.511:1751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5048 comm="syz.3.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57d6a5f749 code=0x7ffc0000
[   89.116681][   T29] audit: type=1400 audit(1764198615.631:1752): avc:  denied  { mac_admin } for  pid=5058 comm="syz.3.499" capability=33  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   89.137767][   T29] audit: type=1400 audit(1764198615.641:1753): avc:  denied  { relabelto } for  pid=5058 comm="syz.3.499" name="cgroup.controllers" dev="tmpfs" ino=555 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="@"
[   89.162560][   T29] audit: type=1400 audit(1764198615.641:1754): avc:  denied  { associate } for  pid=5058 comm="syz.3.499" name="cgroup.controllers" dev="tmpfs" ino=555 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="@"
[   89.205280][   T29] audit: type=1400 audit(1764198615.791:1755): avc:  denied  { unlink } for  pid=3314 comm="syz-executor" name="cgroup.controllers" dev="tmpfs" ino=555 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="@"
[   89.285076][ T5068] netlink: 12 bytes leftover after parsing attributes in process `syz.4.500'.
[   89.436234][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   89.766460][ T5076] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[   90.428320][ T5080] ip6_vti0 speed is unknown, defaulting to 1000
[   90.457573][   T29] audit: type=1400 audit(1764198617.051:1756): avc:  denied  { mount } for  pid=5069 comm="syz.3.502" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[   90.938398][ T5082] netlink: 4 bytes leftover after parsing attributes in process `syz.2.505'.
[   91.101437][ T5090] netlink: 96 bytes leftover after parsing attributes in process `syz.2.507'.
[   91.161453][ T5092] netlink: 8 bytes leftover after parsing attributes in process `syz.0.508'.
[   91.439979][ T5098] loop1: detected capacity change from 0 to 512
[   91.452819][ T5098] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   91.556435][ T5098] EXT4-fs (loop1): 1 truncate cleaned up
[   91.563217][ T5098] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   92.209407][ T5107] xt_NFQUEUE: number of total queues is 0
[   92.248739][ T5109] tipc: New replicast peer: 255.255.255.255
[   92.254917][ T5109] tipc: Enabled bearer <udp:s>, priority 10
[   92.379505][ T5111] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5111 comm=syz.2.513
[   92.738397][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   92.842407][ T5120] loop2: detected capacity change from 0 to 256
[   92.878186][ T5120] hub 9-0:1.0: USB hub found
[   92.883024][ T5120] hub 9-0:1.0: 8 ports detected
[   92.895869][ T5122] ip6_vti0 speed is unknown, defaulting to 1000
[   92.901470][ T5120] netlink: 20 bytes leftover after parsing attributes in process `syz.2.517'.
[   92.915236][ T5120] netlink: 20 bytes leftover after parsing attributes in process `syz.2.517'.
[   92.947539][ T5123] loop1: detected capacity change from 0 to 512
[   92.973440][ T5123] ------------[ cut here ]------------
[   92.979298][ T5123] EA inode 11 i_nlink=2
[   92.979555][ T5123] WARNING: CPU: 1 PID: 5123 at fs/ext4/xattr.c:1058 ext4_xattr_inode_update_ref+0x36a/0x380
[   92.996534][ T5123] Modules linked in:
[   93.001755][ T5123] CPU: 1 UID: 0 PID: 5123 Comm: syz.1.516 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   93.011927][ T5123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   93.022059][ T5123] RIP: 0010:ext4_xattr_inode_update_ref+0x36a/0x380
[   93.028781][ T5123] Code: 90 49 8d 7e 40 e8 16 f7 b8 ff 4d 8b 6e 40 4c 89 e7 e8 2a f2 b8 ff 41 8b 56 48 48 c7 c7 82 d6 55 86 4c 89 ee e8 e7 f2 67 ff 90 <0f> 0b 90 90 e9 ff fe ff ff e8 68 01 b6 03 0f 1f 84 00 00 00 00 00
[   93.048608][ T5123] RSP: 0018:ffffc9000ee5b5a0 EFLAGS: 00010246
[   93.054892][ T5123] RAX: e956f3d6bd4d8100 RBX: ffff8881073e5760 RCX: 0000000000080000
[   93.063031][ T5123] RDX: ffffc90002d65000 RSI: 0000000000004288 RDI: 0000000000004289
[   93.071106][ T5123] RBP: 0000000000000002 R08: 0001c9000ee5b427 R09: 0000000000000000
[   93.079261][ T5123] R10: 00000000ffffffff R11: 0000000000000002 R12: ffff8881073e5710
[   93.087995][ T5123] R13: 000000000000000b R14: ffff8881073e56c8 R15: 0000000000000001
[   93.098251][ T5123] FS:  00007f42dfe766c0(0000) GS:ffff8882aef11000(0000) knlGS:0000000000000000
[   93.108769][ T5123] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   93.115643][ T5123] CR2: 00007f1a2db7fd58 CR3: 000000011ae64000 CR4: 00000000003506f0
[   93.123699][ T5123] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   93.131786][ T5123] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[   93.139892][ T5123] Call Trace:
[   93.143256][ T5123]  <TASK>
[   93.146252][ T5123]  ext4_xattr_set_entry+0x77f/0x1020
[   93.151782][ T5123]  ext4_xattr_ibody_set+0x184/0x3c0
[   93.157088][ T5123]  ext4_expand_extra_isize_ea+0xcbb/0x11f0
[   93.162951][ T5123]  __ext4_expand_extra_isize+0x246/0x280
[   93.168870][ T5123]  __ext4_mark_inode_dirty+0x29d/0x3f0
[   93.174494][ T5123]  ext4_evict_inode+0x80e/0xd90
[   93.179455][ T5123]  ? __pfx_ext4_evict_inode+0x10/0x10
[   93.184884][ T5123]  evict+0x2e3/0x550
[   93.189038][ T5123]  ? __dquot_initialize+0x146/0x7c0
[   93.194892][ T5123]  iput+0x4ed/0x650
[   93.200873][ T5123]  ext4_process_orphan+0x1a9/0x1c0
[   93.206292][ T5123]  ext4_orphan_cleanup+0x6a8/0xa00
[   93.211751][ T5123]  ext4_fill_super+0x3483/0x3810
[   93.216883][ T5123]  ? snprintf+0x86/0xb0
[   93.221108][ T5123]  ? set_blocksize+0x1a8/0x310
[   93.226064][ T5123]  ? sb_set_blocksize+0xe3/0x100
[   93.231150][ T5123]  ? setup_bdev_super+0x30e/0x370
[   93.236288][ T5123]  ? __pfx_ext4_fill_super+0x10/0x10
[   93.241650][ T5123]  get_tree_bdev_flags+0x291/0x300
[   93.246850][ T5123]  ? __pfx_ext4_fill_super+0x10/0x10
[   93.252256][ T5123]  get_tree_bdev+0x1f/0x30
[   93.256760][ T5123]  ext4_get_tree+0x1c/0x30
[   93.261228][ T5123]  vfs_get_tree+0x57/0x1d0
[   93.265746][ T5123]  do_new_mount+0x24d/0x660
[   93.270359][ T5123]  path_mount+0x4a5/0xb70
[   93.274739][ T5123]  ? user_path_at+0x109/0x130
[   93.279507][ T5123]  __se_sys_mount+0x28c/0x2e0
[   93.284283][ T5123]  __x64_sys_mount+0x67/0x80
[   93.289021][ T5123]  x64_sys_call+0x2b51/0x3000
[   93.293921][ T5123]  do_syscall_64+0xd2/0x200
[   93.298852][ T5123]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   93.305746][ T5123]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   93.312917][ T5123]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   93.319180][ T5123] RIP: 0033:0x7f42e1430eea
[   93.324234][ T5123] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   93.344931][ T5123] RSP: 002b:00007f42dfe75e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[   93.353875][ T5123] RAX: ffffffffffffffda RBX: 00007f42dfe75ef0 RCX: 00007f42e1430eea
[   93.362034][ T5123] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f42dfe75eb0
[   93.370059][ T5123] RBP: 0000200000000180 R08: 00007f42dfe75ef0 R09: 0000000000800700
[   93.378395][ T5123] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0
[   93.386897][ T5123] R13: 00007f42dfe75eb0 R14: 000000000000046f R15: 000000000000002c
[   93.395256][ T5123]  </TASK>
[   93.397318][ T3410] tipc: Node number set to 2191907443
[   93.399585][ T5123] ---[ end trace 0000000000000000 ]---
[   93.506114][ T5123] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #18: comm syz.1.516: iget: bad extra_isize 90 (inode size 256)
[   93.513523][ T5135] macvlan1: entered promiscuous mode
[   93.540745][ T5123] EXT4-fs (loop1): Remounting filesystem read-only
[   93.551738][ T5123] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -30)
[   93.562097][ T5135] ipvlan0: entered promiscuous mode
[   93.570565][ T5123] EXT4-fs (loop1): 1 orphan inode deleted
[   93.577596][ T5135] ipvlan0: left promiscuous mode
[   93.583752][ T5123] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   93.597250][ T5135] macvlan1: left promiscuous mode
[   93.822946][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   93.894062][ T5128] ip6_vti0 speed is unknown, defaulting to 1000
[   94.018737][ T5148] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5148 comm=syz.2.524
[   94.067499][ T5148] netlink: 4 bytes leftover after parsing attributes in process `syz.2.524'.
[   94.549676][ T5154] ip6_vti0 speed is unknown, defaulting to 1000
[   95.111992][ T5143] Set syz1 is full, maxelem 65536 reached
[   95.125570][   T29] kauditd_printk_skb: 13 callbacks suppressed
[   95.125589][   T29] audit: type=1400 audit(1764198621.711:1770): avc:  denied  { create } for  pid=5158 comm=77DEA305FF07 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[   95.169188][   T29] audit: type=1400 audit(1764198621.751:1771): avc:  denied  { connect } for  pid=5158 comm=77DEA305FF07 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[   95.248164][ T5164] loop2: detected capacity change from 0 to 2048
[   95.368506][ T5164] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   95.450182][   T29] audit: type=1400 audit(1764198622.041:1772): avc:  denied  { append } for  pid=5168 comm="syz.4.531" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   95.654694][   T29] audit: type=1400 audit(1764198622.241:1773): avc:  denied  { append } for  pid=5177 comm="syz.1.532" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[   95.683599][ T5178] macvlan1: entered promiscuous mode
[   95.718092][ T5179] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[   95.728523][ T5178] ipvlan0: entered promiscuous mode
[   95.740659][ T5178] ipvlan0: left promiscuous mode
[   95.786597][ T5178] macvlan1: left promiscuous mode
[   96.005531][ T5187] netlink: 4 bytes leftover after parsing attributes in process `syz.1.535'.
[   96.133978][ T5192] loop1: detected capacity change from 0 to 512
[   96.166358][ T5195] 9p: Unknown access argument : -22
[   96.179187][ T5192] vfat: Unknown parameter 's�ortname'
[   96.228266][ T5192] loop1: detected capacity change from 0 to 512
[   96.264173][ T5192] netlink: 'syz.1.537': attribute type 39 has an invalid length.
[   96.317680][ T5198] netlink: 'syz.3.538': attribute type 13 has an invalid length.
[   96.489045][ T5198] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   96.505903][   T29] audit: type=1400 audit(1764198623.081:1774): avc:  denied  { unmount } for  pid=5197 comm="syz.3.538" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   96.628250][ T5206] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.682492][ T5209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   96.710568][ T5206] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.726266][ T5209] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   96.795380][ T5206] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.866593][ T5214] netlink: 'syz.4.544': attribute type 39 has an invalid length.
[   96.885151][ T5206] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.976449][ T4925] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   96.994106][ T4925] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   97.022923][ T4925] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   97.056775][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   97.066593][ T4925] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   97.124293][ T5218] loop2: detected capacity change from 0 to 512
[   97.139205][ T5222] netlink: 'syz.3.547': attribute type 1 has an invalid length.
[   97.146966][ T5220] loop4: detected capacity change from 0 to 512
[   97.153822][ T5218] EXT4-fs: Ignoring removed i_version option
[   97.159920][ T5218] EXT4-fs: Ignoring removed bh option
[   97.168489][ T5220] EXT4-fs (loop4): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   97.198396][ T5222] 8021q: adding VLAN 0 to HW filter on device bond0
[   97.217945][ T5218] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   97.225883][ T5226] macvlan2: entered promiscuous mode
[   97.232523][ T5218] ext4 filesystem being mounted at /121/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   97.236109][ T5226] macvlan2: entered allmulticast mode
[   97.255394][ T5229] netlink: 1152 bytes leftover after parsing attributes in process `syz.4.546'.
[   97.273561][ T5226] bond0: entered promiscuous mode
[   97.286945][ T5226] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   97.295332][ T5226] bond0: left promiscuous mode
[   97.300445][   T29] audit: type=1400 audit(1764198623.881:1775): avc:  denied  { setattr } for  pid=5217 comm="syz.2.545" path="/121/bus/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   97.331653][ T5222] bond0: (slave ip6gretap1): making interface the new active one
[   97.352467][ T5222] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link
[   97.379593][ T5232] macvlan2: entered promiscuous mode
[   97.385069][ T5232] macvlan2: entered allmulticast mode
[   97.404987][ T5232] bond0: entered promiscuous mode
[   97.410263][ T5232] ip6gretap1: entered promiscuous mode
[   97.416728][ T5232] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   97.424208][ T5232] bond0: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of ip6gretap1
[   97.439875][ T5232] bond0: left promiscuous mode
[   97.444743][ T5232] ip6gretap1: left promiscuous mode
[   97.506222][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   97.711463][   T29] audit: type=1326 audit(1764198624.301:1776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5268 comm="syz.3.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f57d6a565e7 code=0x7ffc0000
[   97.736466][   T29] audit: type=1326 audit(1764198624.301:1777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5268 comm="syz.3.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f57d69fb829 code=0x7ffc0000
[   97.759982][   T29] audit: type=1326 audit(1764198624.301:1778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5268 comm="syz.3.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f57d6a565e7 code=0x7ffc0000
[   97.783304][   T29] audit: type=1326 audit(1764198624.301:1779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5268 comm="syz.3.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f57d69fb829 code=0x7ffc0000
[   97.966004][ T3319] EXT4-fs (loop4): unmounting filesystem 00000005-0000-0000-0000-000000000000.
[   98.007839][ T5273] macvlan1: entered promiscuous mode
[   98.030450][ T5273] ipvlan0: entered promiscuous mode
[   98.047073][ T5273] ipvlan0: left promiscuous mode
[   98.058162][ T5274] x_tables: duplicate underflow at hook 2
[   98.065838][ T5273] macvlan1: left promiscuous mode
[   98.165553][ T5277] loop1: detected capacity change from 0 to 1024
[   98.185786][ T5277] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   98.230316][ T5277] netlink: 'syz.1.553': attribute type 13 has an invalid length.
[   98.240514][ T5280] netlink: 'syz.4.554': attribute type 4 has an invalid length.
[   98.248393][ T5280] netlink: 152 bytes leftover after parsing attributes in process `syz.4.554'.
[   98.317214][ T5280] .`: renamed from bond0 (while UP)
[   98.345123][ T5277] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   98.433516][ T5282] block device autoloading is deprecated and will be removed.
[   98.595091][ T5292] macvlan1: entered promiscuous mode
[   98.605927][ T5292] ipvlan0: entered promiscuous mode
[   98.612383][ T5292] ipvlan0: left promiscuous mode
[   98.617966][ T5292] macvlan1: left promiscuous mode
[   98.675673][ T5294] xt_CT: You must specify a L4 protocol and not use inversions on it
[   99.078354][ T5298] loop0: detected capacity change from 0 to 512
[   99.090320][ T5298] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   99.146163][ T5304] netlink: 12 bytes leftover after parsing attributes in process `syz.2.563'.
[   99.175875][ T5298] EXT4-fs (loop0): 1 truncate cleaned up
[   99.188265][ T5298] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   99.258471][ T5308] macvlan1: entered promiscuous mode
[   99.290611][ T5308] ipvlan0: entered promiscuous mode
[   99.318840][ T5312] x_tables: duplicate underflow at hook 2
[   99.325210][ T5308] ipvlan0: left promiscuous mode
[   99.353590][ T5308] macvlan1: left promiscuous mode
[   99.453099][ T5316] 9pnet_fd: Insufficient options for proto=fd
[   99.531899][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   99.603166][ T5325] loop0: detected capacity change from 0 to 512
[   99.814313][ T5339] macvlan1: entered promiscuous mode
[   99.828886][ T5339] ipvlan0: entered promiscuous mode
[   99.842047][ T5339] ipvlan0: left promiscuous mode
[   99.854776][ T5339] macvlan1: left promiscuous mode
[   99.867200][ T5341] x_tables: duplicate underflow at hook 2
[   99.888932][ T5343] process 'syz.1.573' launched '/dev/fd/8' with NULL argv: empty string added
[  100.477072][ T5359] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  100.744081][ T5362] xt_CT: No such helper "pptp"
[  101.795882][ T5382] netlink: 'syz.2.583': attribute type 13 has an invalid length.
[  102.168975][ T5389] netlink: 76 bytes leftover after parsing attributes in process `syz.1.586'.
[  102.248588][   T29] kauditd_printk_skb: 149 callbacks suppressed
[  102.248671][   T29] audit: type=1400 audit(1764198628.841:1929): avc:  denied  { map } for  pid=5377 comm="syz.3.585" path="socket:[11780]" dev="sockfs" ino=11780 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  102.278365][   T29] audit: type=1400 audit(1764198628.841:1930): avc:  denied  { read } for  pid=5377 comm="syz.3.585" path="socket:[11780]" dev="sockfs" ino=11780 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  102.288394][ T5394] netlink: 8 bytes leftover after parsing attributes in process `syz.3.585'.
[  102.365142][ T5398] x_tables: duplicate underflow at hook 2
[  102.371190][ T2966] IPVS: starting estimator thread 0...
[  102.393881][   T29] audit: type=1326 audit(1764198628.981:1931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5406 comm="syz.1.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42e142f749 code=0x7ffc0000
[  102.430256][   T29] audit: type=1326 audit(1764198628.981:1932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5406 comm="syz.1.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42e142f749 code=0x7ffc0000
[  102.453876][   T29] audit: type=1326 audit(1764198628.981:1933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5406 comm="syz.1.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f42e142f749 code=0x7ffc0000
[  102.476152][ T5405] IPVS: using max 2256 ests per chain, 112800 per kthread
[  102.477347][   T29] audit: type=1326 audit(1764198628.981:1934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5406 comm="syz.1.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42e142f749 code=0x7ffc0000
[  102.507830][   T29] audit: type=1326 audit(1764198628.981:1935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5406 comm="syz.1.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42e142f749 code=0x7ffc0000
[  102.531298][   T29] audit: type=1326 audit(1764198628.981:1936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5406 comm="syz.1.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f42e142f749 code=0x7ffc0000
[  102.554651][   T29] audit: type=1326 audit(1764198628.981:1937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5406 comm="syz.1.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42e142f749 code=0x7ffc0000
[  102.578041][   T29] audit: type=1326 audit(1764198628.981:1938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5406 comm="syz.1.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f42e142f749 code=0x7ffc0000
[  102.670988][ T5402] netlink: 8 bytes leftover after parsing attributes in process `syz.3.588'.
[  102.692492][ T5410] macvlan1: entered promiscuous mode
[  102.698964][ T5410] ipvlan0: entered promiscuous mode
[  102.704762][ T5410] ipvlan0: left promiscuous mode
[  102.710174][ T5410] macvlan1: left promiscuous mode
[  102.741477][ T5413] x_tables: duplicate underflow at hook 2
[  102.781597][ T5415] netlink: 'syz.4.593': attribute type 3 has an invalid length.
[  102.790466][ T5415] netlink: 'syz.4.593': attribute type 3 has an invalid length.
[  103.675899][ T5422] xt_CT: No such helper "pptp"
[  103.769072][ T5431] ip6_vti0 speed is unknown, defaulting to 1000
[  104.004607][ T5433] loop0: detected capacity change from 0 to 512
[  104.060089][ T5439] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.600'.
[  104.140106][ T5433] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #18: comm syz.0.596: iget: bad extra_isize 90 (inode size 256)
[  104.177222][ T5439] netlink: zone id is out of range
[  104.182413][ T5439] netlink: zone id is out of range
[  104.277512][ T5439] netlink: zone id is out of range
[  104.285488][ T5433] EXT4-fs (loop0): Remounting filesystem read-only
[  104.296681][ T5439] netlink: zone id is out of range
[  104.303319][ T5433] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -30)
[  104.305555][ T5439] netlink: zone id is out of range
[  104.317641][ T5439] netlink: zone id is out of range
[  104.322460][ T5436] ip6_vti0 speed is unknown, defaulting to 1000
[  104.322763][ T5439] netlink: zone id is out of range
[  104.322870][ T5439] netlink: zone id is out of range
[  104.339943][ T5439] netlink: zone id is out of range
[  104.345282][ T5439] netlink: zone id is out of range
[  104.364538][ T5433] EXT4-fs (loop0): 1 orphan inode deleted
[  104.371031][ T5433] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  104.442558][ T5453] netlink: 328 bytes leftover after parsing attributes in process `syz.1.602'.
[  104.444136][ T5451] syz.4.601 uses obsolete (PF_INET,SOCK_PACKET)
[  104.638679][ T5461] loop2: detected capacity change from 0 to 8192
[  104.760109][ T5465] loop4: detected capacity change from 0 to 512
[  104.775381][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.864277][ T5465] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  104.909444][ T5465] EXT4-fs (loop4): 1 truncate cleaned up
[  104.932257][ T5465] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  105.076996][ T5478] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  105.566359][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.617099][ T5494] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.718874][ T5494] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.793444][ T5503] x_tables: duplicate underflow at hook 1
[  106.259452][ T5494] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.311396][ T5494] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.398371][ T4925] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  106.416247][ T4925] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  106.432243][ T4925] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  106.452863][ T4925] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  106.563990][ T5527] ip6_vti0 speed is unknown, defaulting to 1000
[  106.631776][ T5528] tipc: New replicast peer: 255.255.255.255
[  106.638796][ T5528] tipc: Enabled bearer <udp:syz2>, priority 10
[  107.332562][   T29] kauditd_printk_skb: 384 callbacks suppressed
[  107.332578][   T29] audit: type=1326 audit(1764198633.921:2323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5538 comm="syz.4.621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a2f11f749 code=0x7ffc0000
[  107.590373][ T5539] ip6_vti0 speed is unknown, defaulting to 1000
[  107.624249][   T29] audit: type=1326 audit(1764198633.951:2324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5538 comm="syz.4.621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a2f11f749 code=0x7ffc0000
[  107.648277][   T29] audit: type=1326 audit(1764198633.951:2325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5538 comm="syz.4.621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a2f11f749 code=0x7ffc0000
[  107.671652][   T29] audit: type=1326 audit(1764198633.951:2326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5538 comm="syz.4.621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1a2f11f749 code=0x7ffc0000
[  107.695699][   T29] audit: type=1326 audit(1764198633.951:2327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5538 comm="syz.4.621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a2f11f749 code=0x7ffc0000
[  107.719224][   T29] audit: type=1326 audit(1764198633.951:2328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5538 comm="syz.4.621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a2f11f749 code=0x7ffc0000
[  107.744513][   T29] audit: type=1326 audit(1764198633.961:2329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5538 comm="syz.4.621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a2f11f749 code=0x7ffc0000
[  107.769649][   T29] audit: type=1326 audit(1764198633.961:2330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5538 comm="syz.4.621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a2f11f749 code=0x7ffc0000
[  107.794064][   T29] audit: type=1326 audit(1764198633.961:2331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5538 comm="syz.4.621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f1a2f11f749 code=0x7ffc0000
[  107.818113][   T29] audit: type=1326 audit(1764198633.961:2332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5538 comm="syz.4.621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a2f11f749 code=0x7ffc0000
[  108.051907][ T5549] loop2: detected capacity change from 0 to 512
[  108.083437][ T5549] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  108.110070][ T5553] tipc: Enabled bearer <udp:syz2>, priority 10
[  108.119285][ T5553] tipc: Enabled bearer <eth:veth0_macvtap>, priority 10
[  108.186158][ T5549] EXT4-fs (loop2): 1 truncate cleaned up
[  108.205327][ T5549] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  108.633902][ T5565] xt_connbytes: Forcing CT accounting to be enabled
[  108.659749][ T5565] Cannot find set identified by id 0 to match
[  108.869612][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.891804][ T5579] netlink: 8 bytes leftover after parsing attributes in process `syz.0.634'.
[  108.904085][ T5575] netlink: 4 bytes leftover after parsing attributes in process `syz.4.632'.
[  108.921218][ T5579] loop0: detected capacity change from 0 to 512
[  108.932913][ T5575] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  108.937256][ T5579] EXT4-fs: Ignoring removed oldalloc option
[  108.944628][ T5575] batman_adv: batadv0: Removing interface: batadv_slave_0
[  108.968176][ T5575] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  108.975669][ T5575] batman_adv: batadv0: Removing interface: batadv_slave_1
[  108.996495][ T5579] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  109.015897][ T5579] ext4 filesystem being mounted at /110/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  109.033747][ T5579] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.634: bg 0: block 217: padding at end of block bitmap is not set
[  109.226150][ T3397] tipc: Node number set to 2440147644
[  109.678231][ T5593] netlink: 'syz.1.637': attribute type 39 has an invalid length.
[  109.731457][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  109.987413][ T5617] $H�: entered promiscuous mode
[  109.992636][ T5617] bridge_slave_1: entered promiscuous mode
[  111.558722][ T5634] xt_CT: No such helper "pptp"
[  111.681177][ T5641] ������: renamed from wg2 (while UP)
[  111.895211][ T5644] loop2: detected capacity change from 0 to 512
[  111.903481][ T5644] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  111.914998][ T5644] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.650: invalid indirect mapped block 4294967295 (level 0)
[  111.929365][ T5644] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.650: invalid indirect mapped block 4294967295 (level 1)
[  111.986597][ T5644] EXT4-fs (loop2): 1 orphan inode deleted
[  111.992379][ T5644] EXT4-fs (loop2): 1 truncate cleaned up
[  112.007249][ T5644] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  112.042434][ T5651] netlink: 131740 bytes leftover after parsing attributes in process `syz.0.654'.
[  112.052223][ T5651] net_ratelimit: 18 callbacks suppressed
[  112.052238][ T5651] netlink: zone id is out of range
[  112.063148][ T5651] netlink: zone id is out of range
[  112.069242][ T5651] netlink: zone id is out of range
[  112.074646][ T5651] netlink: del zone limit has 8 unknown bytes
[  112.082309][ T5653] netlink: 4 bytes leftover after parsing attributes in process `syz.4.653'.
[  112.106845][ T5657] netlink: 4 bytes leftover after parsing attributes in process `syz.3.655'.
[  112.210854][ T5663] x_tables: duplicate underflow at hook 1
[  112.732447][ T5671] netlink: 'syz.3.659': attribute type 29 has an invalid length.
[  113.008608][ T5680] netlink: 4 bytes leftover after parsing attributes in process `syz.1.662'.
[  113.026108][ T5680] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  113.033539][ T5680] batman_adv: batadv0: Removing interface: batadv_slave_0
[  113.045080][ T5680] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  113.052530][ T5680] batman_adv: batadv0: Removing interface: batadv_slave_1
[  113.171264][ T5686] netlink: 'syz.1.664': attribute type 1 has an invalid length.
[  113.172597][   T29] kauditd_printk_skb: 228 callbacks suppressed
[  113.172616][   T29] audit: type=1326 audit(1764198639.761:2561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5689 comm="syz.0.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e7d86f749 code=0x7ffc0000
[  113.213603][ T5690] netlink: 'syz.0.666': attribute type 1 has an invalid length.
[  113.222325][   T29] audit: type=1326 audit(1764198639.801:2562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5689 comm="syz.0.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e7d86f749 code=0x7ffc0000
[  113.245931][   T29] audit: type=1326 audit(1764198639.801:2563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5689 comm="syz.0.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2e7d86f749 code=0x7ffc0000
[  113.269332][   T29] audit: type=1326 audit(1764198639.801:2564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5689 comm="syz.0.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e7d86f749 code=0x7ffc0000
[  113.292725][   T29] audit: type=1326 audit(1764198639.801:2565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5689 comm="syz.0.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e7d86f749 code=0x7ffc0000
[  113.316128][   T29] audit: type=1326 audit(1764198639.801:2566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5689 comm="syz.0.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2e7d86f749 code=0x7ffc0000
[  113.339564][   T29] audit: type=1326 audit(1764198639.801:2567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5689 comm="syz.0.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e7d86f749 code=0x7ffc0000
[  113.362928][   T29] audit: type=1326 audit(1764198639.801:2568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5689 comm="syz.0.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e7d86f749 code=0x7ffc0000
[  113.386330][   T29] audit: type=1326 audit(1764198639.801:2569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5689 comm="syz.0.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2e7d86f749 code=0x7ffc0000
[  113.409806][   T29] audit: type=1326 audit(1764198639.801:2570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5689 comm="syz.0.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e7d86f749 code=0x7ffc0000
[  113.513744][ T5698] ip6_vti0 speed is unknown, defaulting to 1000
[  113.573028][ T5701] loop4: detected capacity change from 0 to 128
[  113.598788][ T5701] FAT-fs (loop4): Directory bread(block 32) failed
[  113.605638][ T5701] FAT-fs (loop4): Directory bread(block 33) failed
[  113.612659][ T5701] FAT-fs (loop4): Directory bread(block 34) failed
[  113.619449][ T5701] FAT-fs (loop4): Directory bread(block 35) failed
[  113.626142][ T5704] netlink: 4 bytes leftover after parsing attributes in process `syz.1.671'.
[  113.626438][ T5701] FAT-fs (loop4): Directory bread(block 36) failed
[  113.642034][ T5701] FAT-fs (loop4): Directory bread(block 37) failed
[  113.648824][ T5701] FAT-fs (loop4): Directory bread(block 38) failed
[  113.655682][ T5701] FAT-fs (loop4): Directory bread(block 39) failed
[  113.662761][ T5701] FAT-fs (loop4): Directory bread(block 40) failed
[  113.669683][ T5701] FAT-fs (loop4): Directory bread(block 41) failed
[  113.724624][ T5701] syz.4.670: attempt to access beyond end of device
[  113.724624][ T5701] loop4: rw=0, sector=4108, nr_sectors = 4 limit=128
[  113.748803][ T5701] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 196)
[  113.756988][ T5701] FAT-fs (loop4): Filesystem has been set read-only
[  114.002357][ T5716] x_tables: duplicate underflow at hook 1
[  114.366353][ T5555] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  114.486611][ T5722] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  114.584485][ T5726] tipc: Enabled bearer <udp:syz2>, priority 10
[  114.788048][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.026479][ T5738] ip6_vti0 speed is unknown, defaulting to 1000
[  115.984742][ T5750] syzkaller0: entered promiscuous mode
[  115.990359][ T5750] syzkaller0: entered allmulticast mode
[  116.025026][ T5750] TC_ACT_REPEAT abuse ?
[  116.047008][ T5749] ip6_vti0 speed is unknown, defaulting to 1000
[  116.432830][ T5758] ip6_vti0 speed is unknown, defaulting to 1000
[  116.787718][ T5761] netlink: 4 bytes leftover after parsing attributes in process `syz.3.687'.
[  117.192234][ T5765] loop2: detected capacity change from 0 to 128
[  117.234297][ T5765] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  117.288863][ T5765] ext4 filesystem being mounted at /144/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  117.559277][ T3324] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  117.630208][ T5775] loop2: detected capacity change from 0 to 128
[  117.704029][ T5775] tipc: Bearer <udp:� >: already 2 bearers with priority 10
[  117.711449][ T5775] tipc: Bearer <udp:� >: trying with adjusted priority
[  117.764907][ T5775] tipc: New replicast peer: 255.255.255.83
[  117.770916][ T5775] tipc: Enabled bearer <udp:� >, priority 9
[  117.862432][ T5779] netlink: 8 bytes leftover after parsing attributes in process `syz.2.692'.
[  117.925760][ T5779] loop2: detected capacity change from 0 to 512
[  117.947064][ T5779] EXT4-fs: Ignoring removed oldalloc option
[  117.980151][ T4925] Bluetooth: hci0: Frame reassembly failed (-84)
[  118.113929][ T5779] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  118.127357][ T5779] ext4 filesystem being mounted at /146/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  118.141900][ T5779] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.692: bg 0: block 217: padding at end of block bitmap is not set
[  118.585865][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  118.609736][ T5790] loop2: detected capacity change from 0 to 128
[  118.630108][ T5790] FAT-fs (loop2): Directory bread(block 32) failed
[  118.646483][ T5790] FAT-fs (loop2): Directory bread(block 33) failed
[  118.656279][ T5790] FAT-fs (loop2): Directory bread(block 34) failed
[  118.666739][ T5790] FAT-fs (loop2): Directory bread(block 35) failed
[  118.674948][ T5790] FAT-fs (loop2): Directory bread(block 36) failed
[  118.683901][ T5790] FAT-fs (loop2): Directory bread(block 37) failed
[  118.691261][ T5790] FAT-fs (loop2): Directory bread(block 38) failed
[  118.698114][ T5790] FAT-fs (loop2): Directory bread(block 39) failed
[  118.704855][ T5790] FAT-fs (loop2): Directory bread(block 40) failed
[  118.711752][ T5790] FAT-fs (loop2): Directory bread(block 41) failed
[  118.745094][ T5790] syz.2.694: attempt to access beyond end of device
[  118.745094][ T5790] loop2: rw=0, sector=4108, nr_sectors = 4 limit=128
[  118.758877][ T5790] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 196)
[  118.767018][ T5790] FAT-fs (loop2): Filesystem has been set read-only
[  118.879846][ T5795] netlink: 4 bytes leftover after parsing attributes in process `syz.2.696'.
[  118.912510][ T5795] netlink: 4 bytes leftover after parsing attributes in process `syz.2.696'.
[  118.981585][ T5797] netlink: 4 bytes leftover after parsing attributes in process `syz.1.697'.
[  119.048426][ T5812] blktrace: Concurrent blktraces are not allowed on loop0
[  119.180321][   T29] kauditd_printk_skb: 425 callbacks suppressed
[  119.180339][   T29] audit: type=1400 audit(1764198645.771:2996): avc:  denied  { append } for  pid=5813 comm="syz.2.701" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  119.402148][   T29] audit: type=1326 audit(1764198645.991:2997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5825 comm="syz.2.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff377fbf749 code=0x7ffc0000
[  119.425737][   T29] audit: type=1326 audit(1764198645.991:2998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5825 comm="syz.2.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff377fbf749 code=0x7ffc0000
[  119.429557][ T5829] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  119.449523][   T29] audit: type=1326 audit(1764198645.991:2999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5825 comm="syz.2.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7ff377fbf749 code=0x7ffc0000
[  119.480670][   T29] audit: type=1326 audit(1764198645.991:3000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5825 comm="syz.2.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff377fbf749 code=0x7ffc0000
[  119.504033][   T29] audit: type=1326 audit(1764198645.991:3001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5825 comm="syz.2.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff377fbf749 code=0x7ffc0000
[  119.527648][   T29] audit: type=1326 audit(1764198645.991:3002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5825 comm="syz.2.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7ff377fbf749 code=0x7ffc0000
[  119.712136][ T5828] netlink: 92 bytes leftover after parsing attributes in process `syz.1.704'.
[  119.733609][   T29] audit: type=1326 audit(1764198646.071:3003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5825 comm="syz.2.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff377fbf749 code=0x7ffc0000
[  119.757124][   T29] audit: type=1326 audit(1764198646.071:3004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5825 comm="syz.2.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff377fbf749 code=0x7ffc0000
[  119.780578][   T29] audit: type=1326 audit(1764198646.251:3005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5830 comm="syz.2.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff377ff2005 code=0x7ffc0000
[  119.868293][ T5832] netlink: 12 bytes leftover after parsing attributes in process `syz.1.704'.
[  119.875113][ T5828] netlink: 32 bytes leftover after parsing attributes in process `syz.1.704'.
[  119.877270][ T5832] netlink: 12 bytes leftover after parsing attributes in process `syz.1.704'.
[  119.996050][ T3516] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  120.144213][ T5827] loop2: detected capacity change from 0 to 128
[  120.178027][ T5827] syz.2.705: attempt to access beyond end of device
[  120.178027][ T5827] loop2: rw=2049, sector=154, nr_sectors = 6 limit=128
[  120.192121][ T5827] syz.2.705: attempt to access beyond end of device
[  120.192121][ T5827] loop2: rw=2049, sector=158, nr_sectors = 2 limit=128
[  120.205636][ T5827] Buffer I/O error on dev loop2, logical block 79, lost async page write
[  120.222185][ T5827] syz.2.705: attempt to access beyond end of device
[  120.222185][ T5827] loop2: rw=2049, sector=160, nr_sectors = 2 limit=128
[  120.235667][ T5827] Buffer I/O error on dev loop2, logical block 80, lost async page write
[  120.245848][ T5827] syz.2.705: attempt to access beyond end of device
[  120.245848][ T5827] loop2: rw=524288, sector=154, nr_sectors = 8 limit=128
[  120.264907][ T5827] syz.2.705: attempt to access beyond end of device
[  120.264907][ T5827] loop2: rw=0, sector=154, nr_sectors = 8 limit=128
[  120.281090][ T5827] syz.2.705: attempt to access beyond end of device
[  120.281090][ T5827] loop2: rw=0, sector=154, nr_sectors = 8 limit=128
[  120.360365][ T5843] netlink: 76 bytes leftover after parsing attributes in process `syz.1.708'.
[  120.481283][ T5845] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5845 comm=syz.1.709
[  120.567509][ T5853] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.785456][ T5853] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.805859][ T5861] netlink: 'syz.0.715': attribute type 3 has an invalid length.
[  120.839275][ T5863] loop0: detected capacity change from 0 to 512
[  120.847618][ T5863] EXT4-fs (loop0): orphan cleanup on readonly fs
[  120.854736][ T5863] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.716: bg 0: block 248: padding at end of block bitmap is not set
[  120.870149][ T5863] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.716: Failed to acquire dquot type 1
[  120.886960][ T5863] EXT4-fs (loop0): 1 truncate cleaned up
[  120.894063][ T5863] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  120.926049][ T5863] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended
[  120.936416][ T5863] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  120.946439][ T5863] ext4 filesystem being remounted at /123/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  121.043177][ T5853] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.405457][ T5863] syz.0.716 (5863) used greatest stack depth: 9128 bytes left
[  121.421691][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  121.434511][ T5872] netlink: 'syz.4.719': attribute type 1 has an invalid length.
[  121.479009][ T5853] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.608540][ T5876] ip6_vti0 speed is unknown, defaulting to 1000
[  121.619641][ T5877] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  122.035616][ T5883] loop4: detected capacity change from 0 to 128
[  122.045568][ T5883] syz.4.722: attempt to access beyond end of device
[  122.045568][ T5883] loop4: rw=2049, sector=154, nr_sectors = 6 limit=128
[  122.060037][ T5883] syz.4.722: attempt to access beyond end of device
[  122.060037][ T5883] loop4: rw=2049, sector=158, nr_sectors = 2 limit=128
[  122.073419][ T5883] Buffer I/O error on dev loop4, logical block 79, lost async page write
[  122.082720][ T5883] syz.4.722: attempt to access beyond end of device
[  122.082720][ T5883] loop4: rw=2049, sector=160, nr_sectors = 2 limit=128
[  122.096165][ T5883] Buffer I/O error on dev loop4, logical block 80, lost async page write
[  122.121682][ T4926] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  122.142609][ T5883] Buffer I/O error on dev loop4, logical block 83, lost async page write
[  122.152395][ T4926] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  122.176611][ T4926] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  122.187897][ T5883] Buffer I/O error on dev loop4, logical block 84, lost async page write
[  122.196891][ T5257] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  122.275239][ T5893] loop2: detected capacity change from 0 to 512
[  122.282943][ T5893] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  122.310192][ T5893] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  122.330761][ T5901] loop0: detected capacity change from 0 to 512
[  122.337956][ T5893] ext4 filesystem being mounted at /154/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  122.348977][ T5901] EXT4-fs: Ignoring removed bh option
[  122.356199][ T5901] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  122.374610][ T5893] EXT4-fs error (device loop2): ext4_lookup:1787: inode #12: comm syz.2.726: iget: bad i_size value: 2533274857506816
[  122.390099][ T5901] EXT4-fs (loop0): 1 truncate cleaned up
[  122.398969][ T5893] EXT4-fs error (device loop2): ext4_lookup:1787: inode #12: comm syz.2.726: iget: bad i_size value: 2533274857506816
[  122.412241][ T5901] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  122.427156][ T5901] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  122.436491][ T5893] EXT4-fs error (device loop2): ext4_lookup:1787: inode #12: comm syz.2.726: iget: bad i_size value: 2533274857506816
[  122.458307][ T5907] netlink: 'syz.4.729': attribute type 4 has an invalid length.
[  122.470588][ T5901] __nla_validate_parse: 3 callbacks suppressed
[  122.470608][ T5901] netlink: 16 bytes leftover after parsing attributes in process `syz.0.728'.
[  122.486329][ T5893] EXT4-fs error (device loop2): ext4_lookup:1787: inode #12: comm syz.2.726: iget: bad i_size value: 2533274857506816
[  122.517659][ T5909] EXT4-fs error (device loop2): ext4_lookup:1787: inode #12: comm syz.2.726: iget: bad i_size value: 2533274857506816
[  122.550700][ T5908] netlink: 'syz.4.729': attribute type 4 has an invalid length.
[  122.642684][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  122.814258][ T5925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  122.822932][ T5925] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  123.277119][ T5923] loop2: detected capacity change from 0 to 32768
[  123.326800][ T5923]  loop2: p1 p2 p3 < > p4 < p5 p6 >
[  123.332400][ T5923] loop2: p1 start 460800 is beyond EOD, truncated
[  123.338907][ T5923] loop2: p2 size 83886080 extends beyond EOD, truncated
[  123.349389][ T5923] loop2: p5 start 460800 is beyond EOD, truncated
[  123.355883][ T5923] loop2: p6 size 83886080 extends beyond EOD, truncated
[  123.672758][ T5932] netlink: 52 bytes leftover after parsing attributes in process `syz.1.735'.
[  123.693118][ T5932] futex_wake_op: syz.1.735 tries to shift op by -1; fix this program
[  123.793527][ T5942] Cannot find del_set index 3 as target
[  124.193780][   T29] kauditd_printk_skb: 587 callbacks suppressed
[  124.193805][   T29] audit: type=1326 audit(1764198650.781:3591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5927 comm="syz.2.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff377fb65e7 code=0x7ffc0000
[  124.225002][   T29] audit: type=1326 audit(1764198650.821:3592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5927 comm="syz.2.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff377f5b829 code=0x7ffc0000
[  124.248561][   T29] audit: type=1326 audit(1764198650.821:3593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5927 comm="syz.2.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff377fb65e7 code=0x7ffc0000
[  124.271912][   T29] audit: type=1326 audit(1764198650.821:3594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5927 comm="syz.2.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff377f5b829 code=0x7ffc0000
[  124.295276][   T29] audit: type=1326 audit(1764198650.821:3595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5927 comm="syz.2.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7ff377fbf749 code=0x7ffc0000
[  124.332622][   T29] audit: type=1326 audit(1764198650.871:3596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5927 comm="syz.2.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff377fb65e7 code=0x7ffc0000
[  124.356349][   T29] audit: type=1326 audit(1764198650.871:3597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5927 comm="syz.2.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff377f5b829 code=0x7ffc0000
[  124.379669][   T29] audit: type=1326 audit(1764198650.871:3598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5927 comm="syz.2.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7ff377fbf749 code=0x7ffc0000
[  124.403030][   T29] audit: type=1326 audit(1764198650.871:3599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5927 comm="syz.2.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff377fb65e7 code=0x7ffc0000
[  124.426387][   T29] audit: type=1326 audit(1764198650.871:3600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5927 comm="syz.2.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff377f5b829 code=0x7ffc0000
[  124.461665][ T5947] loop2: detected capacity change from 0 to 512
[  124.479318][ T5947] journal_path: Lookup failure for '�q�Y�3aK'
[  124.485684][ T5947] EXT4-fs: error: could not find journal device path
[  124.520348][ T5947] loop2: detected capacity change from 0 to 512
[  124.527538][ T5947] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  124.539769][ T5947] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters
[  124.555084][ T5947] EXT4-fs (loop2): 1 truncate cleaned up
[  124.567848][ T5947] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  124.616964][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  124.629755][ T5953] netlink: 16 bytes leftover after parsing attributes in process `syz.1.743'.
[  124.670061][ T5958] loop4: detected capacity change from 0 to 164
[  124.677710][ T5958] Unable to read rock-ridge attributes
[  124.684606][ T5958] Unable to read rock-ridge attributes
[  124.691226][ T5958] iso9660: Corrupted directory entry in block 4 of inode 1792
[  125.007843][ T5978] loop4: detected capacity change from 0 to 128
[  125.221660][ T5978] ==================================================================
[  125.229822][ T5978] BUG: KCSAN: data-race in file_write_and_wait_range / xas_set_mark
[  125.237866][ T5978] 
[  125.240214][ T5978] write to 0xffff8881004a9d14 of 4 bytes by task 5981 on cpu 1:
[  125.247859][ T5978]  xas_set_mark+0x12b/0x140
[  125.252396][ T5978]  tag_pages_for_writeback+0xc2/0x290
[  125.257820][ T5978]  writeback_iter+0x340/0x820
[  125.262549][ T5978]  mpage_writepages+0x87/0x1250
[  125.267449][ T5978]  fat_writepages+0x24/0x30
[  125.271999][ T5978]  do_writepages+0x1c6/0x310
[  125.276633][ T5978]  file_write_and_wait_range+0x156/0x2c0
[  125.282319][ T5978]  __generic_file_fsync+0x46/0x140
[  125.287467][ T5978]  fat_file_fsync+0x49/0x100
[  125.292107][ T5978]  vfs_fsync_range+0x10d/0x130
[  125.296895][ T5978]  generic_file_write_iter+0x1b8/0x2f0
[  125.302403][ T5978]  iter_file_splice_write+0x666/0xa60
[  125.307812][ T5978]  direct_splice_actor+0x156/0x2a0
[  125.312952][ T5978]  splice_direct_to_actor+0x312/0x680
[  125.318345][ T5978]  do_splice_direct+0xda/0x150
[  125.323137][ T5978]  do_sendfile+0x380/0x650
[  125.327600][ T5978]  __x64_sys_sendfile64+0x105/0x150
[  125.332846][ T5978]  x64_sys_call+0x2bb4/0x3000
[  125.337551][ T5978]  do_syscall_64+0xd2/0x200
[  125.342081][ T5978]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  125.348011][ T5978] 
[  125.350383][ T5978] read to 0xffff8881004a9d14 of 4 bytes by task 5978 on cpu 0:
[  125.357963][ T5978]  file_write_and_wait_range+0x10e/0x2c0
[  125.363653][ T5978]  __generic_file_fsync+0x46/0x140
[  125.368823][ T5978]  fat_file_fsync+0x49/0x100
[  125.373445][ T5978]  vfs_fsync_range+0x10d/0x130
[  125.378248][ T5978]  generic_file_write_iter+0x1b8/0x2f0
[  125.383740][ T5978]  iter_file_splice_write+0x666/0xa60
[  125.389162][ T5978]  direct_splice_actor+0x156/0x2a0
[  125.394296][ T5978]  splice_direct_to_actor+0x312/0x680
[  125.399700][ T5978]  do_splice_direct+0xda/0x150
[  125.404522][ T5978]  do_sendfile+0x380/0x650
[  125.408976][ T5978]  __x64_sys_sendfile64+0x105/0x150
[  125.414234][ T5978]  x64_sys_call+0x2bb4/0x3000
[  125.418994][ T5978]  do_syscall_64+0xd2/0x200
[  125.423634][ T5978]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  125.429574][ T5978] 
[  125.431930][ T5978] value changed: 0x02000021 -> 0x04000021
[  125.437674][ T5978] 
[  125.440031][ T5978] Reported by Kernel Concurrency Sanitizer on:
[  125.446217][ T5978] CPU: 0 UID: 0 PID: 5978 Comm: syz.4.748 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  125.457452][ T5978] Tainted: [W]=WARN
[  125.461281][ T5978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  125.471367][ T5978] ==================================================================