last executing test programs:

2m37.719976022s ago: executing program 32 (id=1677):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
capset(&(0x7f0000000380)={0x19980330}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7})
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x14)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x1)

2m25.235842132s ago: executing program 33 (id=1633):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r1}, 0x18)
unshare(0xa000200)
semget$private(0x0, 0x4000, 0x0)
semtimedop(0x0, &(0x7f0000000040)=[{0x4, 0x6, 0x1000}], 0x1, 0x0)
unshare(0x20060400)

2m1.659021821s ago: executing program 34 (id=2432):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1m53.778654533s ago: executing program 5 (id=2667):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0))
r1 = syz_open_pts(r0, 0x101000)
r2 = dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17)

1m53.232499108s ago: executing program 5 (id=2682):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f00000001c0)='kfree\x00', r3, 0x0, 0x2}, 0x18)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0)

1m53.092198253s ago: executing program 5 (id=2688):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
timerfd_create(0x0, 0x800)
syz_open_dev$loop(&(0x7f0000000000), 0x9, 0x40000)
r0 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xcd1d, 0x10100}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000080)=<r2=>0x0)
io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1)
syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x20, 0x0, @fd_index=0x5, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1})
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
io_uring_enter(r0, 0x26c3, 0xdffffffb, 0x4c, 0x0, 0x0)

1m53.047811187s ago: executing program 5 (id=2691):
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000500)='./file0/../file0\x00', &(0x7f00000004c0)='./file0/../file0\x00', 0x0, 0x202f099, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
umount2(&(0x7f0000000340)='./file0/../file0\x00', 0x8)

1m52.951730297s ago: executing program 5 (id=2694):
pipe(0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000bd52007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0x2a, &(0x7f00000004c0)=ANY=[], 0x0)

1m52.880659904s ago: executing program 5 (id=2697):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS    \x00'}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r1}, 0x3d)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='hrtimer_start\x00', r2}, 0x18)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

1m52.852521767s ago: executing program 35 (id=2697):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS    \x00'}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r1}, 0x3d)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='hrtimer_start\x00', r2}, 0x18)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

1m45.74785808s ago: executing program 2 (id=2868):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
sendmmsg$sock(r2, &(0x7f00000044c0), 0x4000000000001c0, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r3, 0xffffffffffffffff, 0x0)

1m45.6535377s ago: executing program 2 (id=2872):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c)
connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32)
writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1)

1m45.519221523s ago: executing program 2 (id=2876):
r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18)
write$binfmt_elf32(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c4601079704080000000000000002000600010000004300000038000000c0010000030000000100200002"], 0x78)
close(r0)
execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)

1m45.461597109s ago: executing program 2 (id=2879):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x4)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0)
mknodat(r1, &(0x7f0000000040)='./file1/file4/file5\x00', 0x100, 0xfffffffc)
renameat2(0xffffffffffffff9c, &(0x7f0000000600)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x2)

1m45.426951763s ago: executing program 2 (id=2882):
syz_open_dev$evdev(&(0x7f00000002c0), 0xc000, 0x142)
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
r1 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3380, 0x2, 0x40024e}, &(0x7f0000000340)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0x6, 0x0, 0x0, 0x2, 0x1})
io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x0)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000480)={0x57, 0x0, 0x0, {0x1, 0x1}, {0x80, 0x2}})
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250)

1m45.133986322s ago: executing program 2 (id=2888):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', <r4=>0x0})
sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fedbdf25080000001800028014000380100001800400030008000100050000000c00018008000100", @ANYRES32=r4], 0x38}, 0x1, 0x0, 0x0, 0x4000814}, 0x0)

1m45.106817145s ago: executing program 36 (id=2888):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', <r4=>0x0})
sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fedbdf25080000001800028014000380100001800400030008000100050000000c00018008000100", @ANYRES32=r4], 0x38}, 0x1, 0x0, 0x0, 0x4000814}, 0x0)

1m33.479691678s ago: executing program 7 (id=3157):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
pipe(&(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
pipe(&(0x7f00000000c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',uname=fownes<,debug=0x0000000000000003,', @ANYRESHEX=0x0])
splice(r4, 0x0, r3, 0x0, 0xffffffffffff8000, 0x0)
write$P9_RLERRORu(r3, &(0x7f0000000100)=ANY=[], 0xe)

1m33.303958296s ago: executing program 7 (id=3172):
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000280)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x800000, 0x4}, 0x48)

1m33.230892834s ago: executing program 7 (id=3163):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18)
pipe2(&(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
r4 = epoll_create1(0x0)
epoll_pwait(r4, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000000)={0x30000008})
dup3(r2, r3, 0x0)

1m33.054836932s ago: executing program 7 (id=3166):
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000500)='./file0/../file0\x00', &(0x7f00000004c0)='./file0/../file0\x00', 0x0, 0x202f099, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
umount2(&(0x7f0000000340)='./file0/../file0\x00', 0x8)

1m32.671185701s ago: executing program 7 (id=3181):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x4}}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0x6}, {0x8, 0x2, [@TCA_BASIC_EMATCHES={0x4}]}}]}, 0x38}}, 0x48014)

1m32.487806469s ago: executing program 7 (id=3173):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
r2 = io_uring_setup(0x3b44, &(0x7f00000002c0)={0x0, 0x86a1, 0x0, 0x0, 0x20000004})
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8)
sendto$inet6(r3, &(0x7f00000005c0)="f5", 0x1, 0x20000880, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c)
close_range(r2, 0xffffffffffffffff, 0x0)

1m32.443378554s ago: executing program 37 (id=3173):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
r2 = io_uring_setup(0x3b44, &(0x7f00000002c0)={0x0, 0x86a1, 0x0, 0x0, 0x20000004})
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8)
sendto$inet6(r3, &(0x7f00000005c0)="f5", 0x1, 0x20000880, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c)
close_range(r2, 0xffffffffffffffff, 0x0)

40.091823451s ago: executing program 9 (id=4378):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001980), 0x40002, 0x0)
ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f00000019c0))
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x2d)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@jqfmt_vfsv1}]}, 0xc1, 0x7e9, &(0x7f00000017c0)="$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")
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b)

39.444649196s ago: executing program 9 (id=4393):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x5, 0x8, 0x9})
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @loopback, 0x3681}, 0x1c)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000000)={@in6={{0xa, 0x4e22, 0x7, @local, 0x7}}, 0x0, 0x0, 0x3a, 0x0, "a30b3b28af4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00"}, 0xd8)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, r0, 0xe4776000)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e21, 0xc, @loopback, 0x400}}, 0x0, 0x0, 0x40, 0x0, "947116a1a606754bab1cb61212bb07a2bd205f00f81bef965a071f0d1aadd97b9640d9a0cd9ea71a5e9aec7f03d4406a7710c42cb5e754b089928abcd7589d209bc45b4064028eb7fafaa8b125736e00"}, 0xd8)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e62, 0x1ff, @loopback, 0x23}, 0x1c)

38.325341141s ago: executing program 9 (id=4430):
r0 = socket(0x2000000000000021, 0x2, 0x10000000000002)
sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000010010000"], 0x18, 0xe000}, 0x5}], 0x1, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='rxrpc_local\x00', r2, 0x0, 0x200ffff}, 0x18)
r3 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0)

38.245028169s ago: executing program 9 (id=4432):
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x2301091, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x261)

38.242546919s ago: executing program 9 (id=4433):
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x5031, 0xffffffffffffffff, 0xc2dcc000)
io_uring_enter(0xffffffffffffffff, 0xf000, 0x589, 0xd, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000840)='map_files\x00')
getdents64(r1, &(0x7f0000002f40)=""/4098, 0x1002)

38.104194753s ago: executing program 9 (id=4434):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socket$netlink(0x10, 0x3, 0x0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
ptrace$cont(0x18, r1, 0x0, 0x1)

38.065632267s ago: executing program 38 (id=4434):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socket$netlink(0x10, 0x3, 0x0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
ptrace$cont(0x18, r1, 0x0, 0x1)

16.724781658s ago: executing program 4 (id=4826):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x1, 0x1000ffffffff}, 0x2000, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
r1 = getpid()
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0xb0)

16.349816667s ago: executing program 4 (id=4828):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
epoll_create1(0x80000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x18)
syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000a80)='./file1\x00', 0x2800810, &(0x7f00000025c0)=ANY=[], 0x1, 0x15d, &(0x7f0000000f00)="$eJzs27+KE1EUB+AzJmrUJrVYDNhYBbWyVCSCOKAoKbRSiDaJBEwzWgWfxNaHEyRVCuGKzpLshoRl/8zO7ub7mhz4ccM9xZ3LGZj3dz6PhpPpp8mreXSyLNqPI49FFt24Eq2ozAIAuEwWKcXvlFK6PosbPyKl1PSOAIC6uf8BYPccev8/amhjAEBtzP8AsHvevH334klR9F/neSfi16wclIPqt8qfPS/69/P/uqtV87IctJb5gyrPD+ZX4+Ze/nBjfi3u3a3yf9nTl8VafiuG9bcPAAAAO6GXL22c73u9bXlV7Xs/sDa/t+N2+8zaAACOYPr12+jDePzxi0JxQYs/KaVjLP/+szoC56SL0y2yiDjZ/zT9ZALqtjr0Te8EAAAAAAAAAAAAAADYpt6vkVpNtwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAb/Q0AAP//LjxONw==")
r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
ftruncate(r0, 0x2007ffc)
sendfile(r0, r0, 0x0, 0x800000009)

15.832706599s ago: executing program 4 (id=4848):
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x8, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x0, 0x10000, 0xda, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000200)={'#! ', './file0'}, 0xb)
mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0)
perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1e, 0x12, r1, 0x0)

15.569041016s ago: executing program 4 (id=4843):
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x2301091, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x261)

15.480947525s ago: executing program 4 (id=4845):
r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0b00000005000000010001000a00000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x36}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48)

14.928132561s ago: executing program 4 (id=4854):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0xc)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x7f8404caeb85699d}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x2800008, 0x0)
umount2(&(0x7f00000002c0)='./file0\x00', 0x9)

14.927880981s ago: executing program 39 (id=4854):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0xc)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x7f8404caeb85699d}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x2800008, 0x0)
umount2(&(0x7f00000002c0)='./file0\x00', 0x9)

3.491374695s ago: executing program 1 (id=5103):
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000300)=""/180}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)

3.393415065s ago: executing program 8 (id=5109):
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x82044, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0)
write(r1, &(0x7f0000004200)='t', 0x1)
sendfile(r1, r0, 0x0, 0x3ffff)
sendfile(r1, r0, 0x0, 0x7ffff000)

3.280285446s ago: executing program 1 (id=5112):
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
socket$xdp(0x2c, 0x3, 0x0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r1}, 0x18)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800)

2.352768081s ago: executing program 6 (id=5122):
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x8, 0x0, 0x0, 0x5}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {0x7, 0x0, 0xb, 0x9}}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x76}}]}, &(0x7f0000000000)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x8, 0x3, 0x4e8, 0x0, 0x11, 0x148, 0x340, 0x0, 0x450, 0x2a8, 0x2a8, 0x450, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548)

2.324558643s ago: executing program 8 (id=5123):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x24004004)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, &(0x7f0000000200), &(0x7f0000000280)=r3}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kfree\x00', r3, 0x0, 0x100000000000000}, 0x18)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0)

2.225916554s ago: executing program 6 (id=5124):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x0, 0x0})
bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r3, &(0x7f0000000040)=ANY=[], 0x6)

2.225298574s ago: executing program 6 (id=5125):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'geneve0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r3, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c0002"], 0x44}, 0x1, 0x2}, 0x40000)

2.202112096s ago: executing program 1 (id=5126):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000cc0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000)
sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000003060500000000000000000000000000050001"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010)

2.121013524s ago: executing program 6 (id=5128):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000b80)=[{0x6}]}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6)
ioctl$TCFLSH(r0, 0x400455c8, 0x0)

2.081873388s ago: executing program 1 (id=5130):
prctl$PR_SET_NAME(0xf, &(0x7f0000000580)='gtp\x00\xf3\x90F\x0e\xb9cc\xc8\xb1)\xbcI\xf9\x11\xc7>\f\x91\xdc*w\f\xceU\xda\rP\a}\x1a@\xf1M\x92\xa11q6}%\xd4\x8c1\xaf\xfc\x1c\x16y\xc7Vk\xfd\xf8\xd65g?\xc5\xc6\xf0\xa0\x95i\xe6\xfe\xdf\x9aUa\'\xf7\x13C\xe9\xce8\x8fm\x9e\xaf\xce?\xd3\xc9\xd7\x03\xa8\x04W\x04.\xce-\xa0\x85\xcd\x90\xf9\x00\x00\x00\x00\x00\x00\x0e?g\xeeO\"I_\xf1b%V\x9f\x80\x1b\t\xca\xb4O')
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff27}, 0x41)
r1 = gettid()
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
read$ptp(r2, 0x0, 0x0)
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=<r3=>0x0)
timer_settime(r3, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x6}, 0x18)

1.719531985s ago: executing program 8 (id=5138):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000380)='rxrpc_call\x00', r1}, 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000002c0)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rxrpc_call\x00', r2}, 0x10)
r3 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x4e22, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x20000054)
close_range(r0, 0xffffffffffffffff, 0x0)

1.683921228s ago: executing program 8 (id=5141):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
write$cgroup_type(r2, &(0x7f0000000180), 0x40010)

1.655661211s ago: executing program 8 (id=5143):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
ppoll(&(0x7f0000000200)=[{r0}], 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="5766b1020affff20c311df259149e300", 0x10)
listen(r0, 0x0)
r1 = syz_io_uring_setup(0x239, &(0x7f0000000680)={0x0, 0x405e5, 0x10100, 0x2, 0x2e0}, &(0x7f0000000180)=<r2=>0x0, &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000500)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x31a0}})
io_uring_enter(r1, 0x663e, 0x0, 0x2, 0x0, 0x0)
shutdown(r0, 0x1)

1.232829204s ago: executing program 1 (id=5146):
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888035", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000002100)="b9fa030711a5f32e019e14f088a847e0ffff00124000638877fbac141416e000030a94029f03", 0x0, 0xfffffffc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

800.770008ms ago: executing program 8 (id=5148):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010000d040000", @ANYRES32=r1, @ANYBLOB="000000000031010024001280110001006272696467655f736c617665000000000c0005800500190003"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0)
pipe(&(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$nl_route(0x10, 0x3, 0x0)
write$binfmt_misc(r4, &(0x7f0000000000), 0xfffffecc)
splice(r3, 0x0, r5, 0x0, 0x4ffe3, 0x8)

630.912366ms ago: executing program 0 (id=5150):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18)
pipe2(&(0x7f00000006c0)={<r2=>0xffffffffffffffff}, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310)
close_range(r2, r3, 0x0)

612.551138ms ago: executing program 0 (id=5151):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x81, 0x6}, 0x1050, 0x10000, 0x0, 0x6, 0x10000, 0xfffffff9, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x4, 0xfff3}, {}, {0xa, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x8e, 0x1}, {0x5, 0xc0}}}]}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)

512.507438ms ago: executing program 0 (id=5155):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x7, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x18)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x300, 0x203, 0x101, 0x0, 0x300}})

441.063105ms ago: executing program 0 (id=5156):
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x9, 0x1, 0x7fe2, 0x1, 0x12}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000c40)="c10e020022003505d25a806f8c6394f90435fc60040011000a740100053582c137153e37024801", 0x27}], 0x3b, 0x0, 0x31}, 0x0)
r2 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90124fc60100c03400a000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)

440.768595ms ago: executing program 3 (id=5157):
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r0 = syz_io_uring_setup(0x2f90, &(0x7f0000000180)={0x0, 0xc383, 0x3010, 0x2, 0x200004}, &(0x7f0000000100), &(0x7f0000000140))
r1 = epoll_create(0xaf2)
r2 = syz_io_uring_setup(0x12e, &(0x7f0000000340)={0x0, 0x5cb1, 0x2, 0x3, 0xfffffffd}, &(0x7f0000000140)=<r3=>0x0, &(0x7f0000000280))
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4)
io_uring_enter(r2, 0x1e76, 0xf728, 0x5, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0xe000200f})

440.377245ms ago: executing program 0 (id=5158):
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r1}, 0x10)
pipe2$9p(&(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}]}})

335.711586ms ago: executing program 0 (id=5159):
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x82044, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0)
write(r1, &(0x7f0000004200)='t', 0x1)
sendfile(r1, r0, 0x0, 0x3ffff)
sendfile(r1, r0, 0x0, 0x7ffff000)

247.391105ms ago: executing program 3 (id=5160):
write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB='decodes '], 0xc)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000003c0)='mm_page_alloc\x00', r1, 0x0, 0xffffffffffffffff}, 0x18)
r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x9, 0x7, 0x0, 0x0, 0x0, 0x40008, 0x590, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x14c58, 0x4, 0x0, 0x0, 0x8, 0x4ac, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r2, 0x0)

181.542442ms ago: executing program 3 (id=5161):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r2}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r1}, 0x18)
r3 = socket$kcm(0x21, 0x2, 0x2)
recvmsg$kcm(r3, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)

110.819319ms ago: executing program 3 (id=5162):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r0}, &(0x7f0000000740), &(0x7f0000000780)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x14, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket(0x2, 0x80805, 0x0)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
sendmmsg$inet(r2, &(0x7f0000000000)=[{{&(0x7f0000000080)={0x2, 0x4c21, @private=0xa01fdff}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000300)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f00000002c0)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000ac0)="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", 0x541}], 0x1}}], 0x2, 0x0)

64.942254ms ago: executing program 3 (id=5163):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r0}, &(0x7f0000000740), &(0x7f0000000780)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x14, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r1, 0x0, 0x2}, 0x18)
r2 = socket(0x2b, 0x1, 0x1)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)

41.655416ms ago: executing program 1 (id=5164):
prctl$PR_SET_NAME(0xf, &(0x7f0000000640)='LX[X\x00.]%Jk\xe8\xd4M\xd7\xf9m\xa7%\xe5)J81`.\x7f7\xa6\'\x1f4\x06_0\xf3\x05\xc8\xcc\xf8\r:\r*w\x8d\xbd\x02\xd3F\x83\x82u3\xc7\x1bp\xa1=\xdb\x9e8H\a\xdc(\xb9\x84\f%\xb8\xd8\xd9\xa2`2\xc6V\xda\x14@\x12-\x94e\xca\xb8\xf8\x0e\xf4\xb2\x87J3\x9eucSYT\x81\xb2t\x13*\x8c\x8d\xdf\x17\xcc\xa7nO\xbb\x05\x95;\xcd\x10\x80\xfdx$\xc6CLk.\xe4Nin\xdaXH(\x97\xd1\x03\xe6\xec\x1d)\x98\xca\x83hy\x11\a\xda\xac\xfb{\xa6\xdd\x7f\xe2\xf5\xc4p=\x14v\x91\x92Hhd42\xbb\x00\x00\x00')
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r0 = syz_io_uring_setup(0x116c, &(0x7f0000000000)={0x0, 0x7f36, 0x0, 0x1, 0x34f}, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000080)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8})
io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0)

23.048698ms ago: executing program 6 (id=5165):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8)
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x4, &(0x7f0000000280)=[{0x2, 0xa6, 0x2, 0x3}, {0x2, 0x8, 0x8, 0xfffc}, {0xaee, 0x2, 0xac, 0x1000}, {0x40, 0xac, 0x5, 0x2}]}, 0x10)
write$binfmt_misc(r0, &(0x7f0000000100), 0x6)

22.472078ms ago: executing program 3 (id=5166):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
r2 = memfd_secret(0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="61124c000000000061138c0000000000bf200000000000000703000008ff0200ad0301000000000095000000000000006916000000000000bf67000000000000170600000fff07006706000002000000070600000ee60000bf050000000000001f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070500000419311f2d3001000000000095000000000000000500000000000000950000000000000032ed3c5be95e76b67754bb12dc8c27df8ecf264e0f84f9f17d3c30e3c72fe9751f008554bb4f2278af6d71d79a5e12810a089dc1d4681d295c45a674f888a08034b7dd399703d6c4f633a9a4f16d0a3e1282ee45a010fb94fa9de56c9d8a814261bdb94a65f78238b89dc6c60bf70d742a81b72bab8395fa64810b5b1bfd3782519518c505000000b8fab4d4d897db2c544c0e0895a9044f50c50b8eac8c63d2b1cd06a39702bd547f5ebaa69520bbb15f4f01cef3c9bacec15e2e3b2bd352e93a22adfe8efe33ff2f8ee5476d4ef7a6f0c4704403b9bad2b648e90fff24f69a5ef05f5408ea197ed09a9510ee6063229de2984abdd46ea3ec78e3127002ed37c2564bd98a621483fb2a5ff221e0d831f24759d17b8c59d0f2b0727f6b7958fb5b939af4be5e55a95f8c6d785a91c7c3f0c17ae7f9ac5ff05f5ecddf0cef90d50e763be96496661c749e21ab63a1f50b30a65a9027ba357bf8c614497ee59b68bf6a5d45c81c567e347d54574164bbea3e7b7f8a13cce7014137f250370b8a70ae3eaf6d6f17759c3886871e97d063b7f26eed3226bb0b9ee6320a2b02fea7a06a0e37182adf4b1be6f29358d4f5dfec405bde000000000000000000000000000000902e647cc5962eccaad64429335f3ce2a10ce72da82875427c1d16db24dca08487ba41a3fb337f8432d8176a515229e32ee11a1dd23dac038f989eafdd67f60b63f7be4d1bf325b57335b9973c73bfa89517a98b1fc15f8a2713718feb01059d570a0000e3b2a93bd745a74f9bf7f7abc5d15d56331055cc0820c5c9d676d92557c4e47cfbe27f91e0eb18e21dfdab3c84ec11377fbb00000000848060962bcbc47cefd1a2a7bd3b646614bf7cd3495663de5b63f6b5910daee8ebb7ba84a8b5b6f2d1fbc22a51a500f94c871d5e1d31ab5d7a89965bbdbf355a8544e1688a61f459f3618b3a5416eb143180d3d2c5f4e0b1a556422038801703e109e23944e53f230a3537a5412c7d0bf278c6c1684dd8de90aaa33f47dc2c7b5e4f73784fd31aa2f9d1b1623734f9cf84718b2bad31f651e3607f3ac6c427cb6c0652d21ecd4b29e96c0a3781ee820faab71040768f6b08a69fdfd0b2b7be25f19500c1b8330994efb57a53c1a67bda909630f75738ab40e7ab63d527d6c1e8cf611f05c1b6d0da1ba84d405b4d834162c88022a4625a5f7c431c39f3f9a7789f9b668ec4da9f1a981086dcf4c5a940691f9638ce34dba904483f2ed4e7a713b7eac29c5e122f1b6acd6f1da2"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r3, r2, 0x2e, 0x4608, @void}, 0x10)

0s ago: executing program 6 (id=5167):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
r2 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f000002eff0)={0x135, &(0x7f0000000000)=[{}]}, 0x10)

kernel console output (not intermixed with test programs):

low-speed)
[  194.850406][T13384] vhci_hcd vhci_hcd.0: Device attached
[  194.856743][T13411] netlink: 60 bytes leftover after parsing attributes in process `syz.9.3848'.
[  194.881684][T13415] EXT4-fs: Ignoring removed bh option
[  194.887674][T13415] EXT4-fs: inline encryption not supported
[  194.894109][T13415] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  194.905256][T13406] vhci_hcd: connection closed
[  194.905274][T13408] vhci_hcd: connection closed
[  194.905741][T10487] vhci_hcd vhci_hcd.3: stop threads
[  194.910105][T13402] vhci_hcd: connection closed
[  194.920123][T10487] vhci_hcd vhci_hcd.3: release socket
[  194.927623][T13395] vhci_hcd: connection closed
[  194.930330][T10487] vhci_hcd vhci_hcd.3: disconnect device
[  194.930607][T13391] vhci_hcd: connection closed
[  194.935833][T13404] vhci_hcd: connection closed
[  194.942226][T13399] vhci_hcd: connection closed
[  194.948145][T10487] vhci_hcd vhci_hcd.3: stop threads
[  194.952930][T13385] vhci_hcd: connection closed
[  194.955056][T10487] vhci_hcd vhci_hcd.3: release socket
[  194.971031][T10487] vhci_hcd vhci_hcd.3: disconnect device
[  194.971293][T13415] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  194.985585][T10487] vhci_hcd vhci_hcd.3: stop threads
[  194.990904][T10487] vhci_hcd vhci_hcd.3: release socket
[  194.996641][T10487] vhci_hcd vhci_hcd.3: disconnect device
[  195.002689][T10487] vhci_hcd vhci_hcd.3: stop threads
[  195.007996][T10487] vhci_hcd vhci_hcd.3: release socket
[  195.013466][T10487] vhci_hcd vhci_hcd.3: disconnect device
[  195.019524][T10487] vhci_hcd vhci_hcd.3: stop threads
[  195.024853][T10487] vhci_hcd vhci_hcd.3: release socket
[  195.030333][T10487] vhci_hcd vhci_hcd.3: disconnect device
[  195.036439][T10487] vhci_hcd vhci_hcd.3: stop threads
[  195.041840][T10487] vhci_hcd vhci_hcd.3: release socket
[  195.047326][T10487] vhci_hcd vhci_hcd.3: disconnect device
[  195.053293][T10487] vhci_hcd vhci_hcd.3: stop threads
[  195.055641][T13415] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 2: comm syz.4.3850: lblock 2 mapped to illegal pblock 2 (length 1)
[  195.058760][T10487] vhci_hcd vhci_hcd.3: release socket
[  195.077917][T10487] vhci_hcd vhci_hcd.3: disconnect device
[  195.083872][T10487] vhci_hcd vhci_hcd.3: stop threads
[  195.089160][T10487] vhci_hcd vhci_hcd.3: release socket
[  195.094582][T10487] vhci_hcd vhci_hcd.3: disconnect device
[  195.103229][T13415] __quota_error: 26 callbacks suppressed
[  195.103304][T13415] Quota error (device loop4): qtree_write_dquot: dquota write failed
[  195.117744][T13415] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 48: comm syz.4.3850: lblock 0 mapped to illegal pblock 48 (length 1)
[  195.132197][T13415] Quota error (device loop4): v2_write_file_info: Can't write info structure
[  195.141040][T13415] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.3850: Failed to acquire dquot type 0
[  195.153011][T13415] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6298: Corrupt filesystem
[  195.162991][T13415] EXT4-fs error (device loop4): ext4_evict_inode:253: inode #11: comm syz.4.3850: mark_inode_dirty error
[  195.191588][T13415] EXT4-fs warning (device loop4): ext4_evict_inode:256: couldn't mark inode dirty (err -117)
[  195.202178][T13415] EXT4-fs (loop4): 1 orphan inode deleted
[  195.210297][T13415] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  195.222971][T10487] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:48: lblock 1 mapped to illegal pblock 1 (length 1)
[  195.252414][T10487] Quota error (device loop4): remove_tree: Can't read quota data block 1
[  195.260989][T10487] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:48: Failed to release dquot type 0
[  195.279055][T13415] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  195.305361][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  195.495488][   T29] audit: type=1326 audit(1768180567.508:5789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13446 comm="syz.3.3863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d72e6f749 code=0x7ffc0000
[  195.540835][   T29] audit: type=1326 audit(1768180567.538:5790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13446 comm="syz.3.3863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d72e6f749 code=0x7ffc0000
[  195.564485][   T29] audit: type=1326 audit(1768180567.538:5791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13446 comm="syz.3.3863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d72e6f749 code=0x7ffc0000
[  195.588071][   T29] audit: type=1326 audit(1768180567.538:5792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13446 comm="syz.3.3863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d72e6f749 code=0x7ffc0000
[  195.611653][   T29] audit: type=1326 audit(1768180567.538:5793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13446 comm="syz.3.3863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0d72e6f749 code=0x7ffc0000
[  195.635469][   T29] audit: type=1326 audit(1768180567.538:5794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13446 comm="syz.3.3863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d72e6f749 code=0x7ffc0000
[  195.659124][   T29] audit: type=1326 audit(1768180567.548:5795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13446 comm="syz.3.3863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d72e6f749 code=0x7ffc0000
[  195.780337][T13465] set_capacity_and_notify: 13 callbacks suppressed
[  195.780359][T13465] loop8: detected capacity change from 0 to 1024
[  195.800797][T13465] EXT4-fs: Ignoring removed bh option
[  195.806543][T13465] EXT4-fs: inline encryption not supported
[  195.813206][T13465] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  195.815356][T13470] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3872'.
[  195.831049][T13465] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  195.841859][T13465] EXT4-fs error (device loop8): ext4_map_blocks:783: inode #3: block 2: comm syz.8.3870: lblock 2 mapped to illegal pblock 2 (length 1)
[  195.856342][T13465] EXT4-fs error (device loop8): ext4_map_blocks:783: inode #3: block 48: comm syz.8.3870: lblock 0 mapped to illegal pblock 48 (length 1)
[  195.870844][T13465] EXT4-fs error (device loop8): ext4_acquire_dquot:6986: comm syz.8.3870: Failed to acquire dquot type 0
[  195.882472][T13465] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6298: Corrupt filesystem
[  195.891993][T13465] EXT4-fs error (device loop8): ext4_evict_inode:253: inode #11: comm syz.8.3870: mark_inode_dirty error
[  195.903433][T13465] EXT4-fs warning (device loop8): ext4_evict_inode:256: couldn't mark inode dirty (err -117)
[  195.914166][T13465] EXT4-fs (loop8): 1 orphan inode deleted
[  195.920351][T13465] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  195.932994][  T156] EXT4-fs error (device loop8): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1)
[  195.953992][T13473] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3873'.
[  195.963181][  T156] EXT4-fs error (device loop8): ext4_release_dquot:7022: comm kworker/u8:5: Failed to release dquot type 0
[  195.975524][T13465] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  195.975570][T13473] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3873'.
[  196.012059][T13475] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(3)
[  196.018669][T13475] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  196.026359][T13475] vhci_hcd vhci_hcd.0: Device attached
[  196.036832][T10192] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  196.054880][T13475] vhci_hcd vhci_hcd.0: pdev(9) rhport(1) sockfd(5)
[  196.061451][T13475] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  196.069195][T13475] vhci_hcd vhci_hcd.0: Device attached
[  196.075278][ T6786] usb 3-1: enqueue for inactive port 0
[  196.081630][ T6786] usb 3-1: enqueue for inactive port 0
[  196.105092][T13475] vhci_hcd vhci_hcd.0: pdev(9) rhport(2) sockfd(7)
[  196.111660][T13475] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  196.119390][T13475] vhci_hcd vhci_hcd.0: Device attached
[  196.131489][T13475] vhci_hcd vhci_hcd.0: pdev(9) rhport(3) sockfd(9)
[  196.138136][T13475] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  196.145825][T13475] vhci_hcd vhci_hcd.0: Device attached
[  196.157480][ T6786] vhci_hcd vhci_hcd.1: vhci_device speed not set
[  196.184768][T13475] vhci_hcd vhci_hcd.0: pdev(9) rhport(4) sockfd(11)
[  196.191442][T13475] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  196.199225][T13475] vhci_hcd vhci_hcd.0: Device attached
[  196.217834][ T3608] vhci_hcd vhci_hcd.9: vhci_device speed not set
[  196.256177][T13495] vhci_hcd vhci_hcd.0: pdev(9) rhport(5) sockfd(13)
[  196.262913][T13495] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  196.270635][T13495] vhci_hcd vhci_hcd.0: Device attached
[  196.279759][ T3608] usb 19-1: new full-speed USB device number 3 using vhci_hcd
[  196.297727][T13475] vhci_hcd vhci_hcd.0: pdev(9) rhport(6) sockfd(16)
[  196.304386][T13475] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  196.312089][T13475] vhci_hcd vhci_hcd.0: Device attached
[  196.337866][T13495] vhci_hcd vhci_hcd.0: pdev(9) rhport(7) sockfd(15)
[  196.344575][T13495] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  196.352247][T13495] vhci_hcd vhci_hcd.0: Device attached
[  196.367963][T13503] vhci_hcd: connection closed
[  196.368032][T13500] vhci_hcd: connection closed
[  196.373034][T13497] vhci_hcd: connection closed
[  196.374244][T10483] vhci_hcd vhci_hcd.9: stop threads
[  196.385621][T13493] vhci_hcd: connection closed
[  196.387781][T10483] vhci_hcd vhci_hcd.9: release socket
[  196.397929][T10483] vhci_hcd vhci_hcd.9: disconnect device
[  196.407351][T13481] vhci_hcd: connection closed
[  196.407547][T13476] vhci_hcd: connection reset by peer
[  196.417877][T13485] vhci_hcd: connection closed
[  196.417987][T13489] vhci_hcd: connection closed
[  196.442404][T10483] vhci_hcd vhci_hcd.9: stop threads
[  196.442482][T10483] vhci_hcd vhci_hcd.9: release socket
[  196.442509][T10483] vhci_hcd vhci_hcd.9: disconnect device
[  196.448000][T10483] vhci_hcd vhci_hcd.9: stop threads
[  196.448020][T10483] vhci_hcd vhci_hcd.9: release socket
[  196.448109][T10483] vhci_hcd vhci_hcd.9: disconnect device
[  196.448231][T10483] vhci_hcd vhci_hcd.9: stop threads
[  196.448266][T10483] vhci_hcd vhci_hcd.9: release socket
[  196.448289][T10483] vhci_hcd vhci_hcd.9: disconnect device
[  196.456137][T10483] vhci_hcd vhci_hcd.9: stop threads
[  196.456155][T10483] vhci_hcd vhci_hcd.9: release socket
[  196.456179][T10483] vhci_hcd vhci_hcd.9: disconnect device
[  196.456327][T10483] vhci_hcd vhci_hcd.9: stop threads
[  196.456340][T10483] vhci_hcd vhci_hcd.9: release socket
[  196.456357][T10483] vhci_hcd vhci_hcd.9: disconnect device
[  196.456485][T10483] vhci_hcd vhci_hcd.9: stop threads
[  196.456498][T10483] vhci_hcd vhci_hcd.9: release socket
[  196.456517][T10483] vhci_hcd vhci_hcd.9: disconnect device
[  196.456702][T10483] vhci_hcd vhci_hcd.9: stop threads
[  196.456720][T10483] vhci_hcd vhci_hcd.9: release socket
[  196.456742][T10483] vhci_hcd vhci_hcd.9: disconnect device
[  196.666672][T13522] loop4: detected capacity change from 0 to 1024
[  196.691612][T13522] EXT4-fs: Ignoring removed bh option
[  196.697443][T13522] EXT4-fs: inline encryption not supported
[  196.704716][T13522] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  196.728542][T13522] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  196.751502][T13522] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 2: comm syz.4.3887: lblock 2 mapped to illegal pblock 2 (length 1)
[  196.802489][T13527] loop8: detected capacity change from 0 to 8192
[  196.804038][T13522] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 48: comm syz.4.3887: lblock 0 mapped to illegal pblock 48 (length 1)
[  196.857796][ T3523] usb 9-1: enqueue for inactive port 0
[  196.863342][ T3523] usb 9-1: enqueue for inactive port 0
[  196.864721][T13522] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.3887: Failed to acquire dquot type 0
[  196.882075][T13522] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6298: Corrupt filesystem
[  196.899712][T13522] EXT4-fs error (device loop4): ext4_evict_inode:253: inode #11: comm syz.4.3887: mark_inode_dirty error
[  196.911664][T13522] EXT4-fs warning (device loop4): ext4_evict_inode:256: couldn't mark inode dirty (err -117)
[  196.922217][T13522] EXT4-fs (loop4): 1 orphan inode deleted
[  196.938357][ T3523] vhci_hcd vhci_hcd.4: vhci_device speed not set
[  196.945331][T10530] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:70: lblock 1 mapped to illegal pblock 1 (length 1)
[  196.988567][T10530] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:70: Failed to release dquot type 0
[  197.001211][T13522] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  197.025938][T13554] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3901'.
[  197.036801][T13556] netlink: 'syz.3.3902': attribute type 10 has an invalid length.
[  197.044738][T13556] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3902'.
[  197.060585][T13522] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  197.084886][T13556] dummy0: entered promiscuous mode
[  197.091875][T13556] bridge0: port 3(dummy0) entered blocking state
[  197.098433][T13556] bridge0: port 3(dummy0) entered disabled state
[  197.123498][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  197.138412][T13561] netlink: 'syz.9.3905': attribute type 1 has an invalid length.
[  197.142717][T13556] dummy0: entered allmulticast mode
[  197.146255][T13561] netlink: 'syz.9.3905': attribute type 4 has an invalid length.
[  197.146273][T13561] netlink: 9462 bytes leftover after parsing attributes in process `syz.9.3905'.
[  197.172153][T13556] bridge0: port 3(dummy0) entered blocking state
[  197.178573][T13556] bridge0: port 3(dummy0) entered forwarding state
[  197.191277][T13563] loop4: detected capacity change from 0 to 512
[  197.222681][T13563] EXT4-fs (loop4): 1 orphan inode deleted
[  197.242951][T13563] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  197.319898][T13578] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(3)
[  197.326523][T13578] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  197.334211][T13578] vhci_hcd vhci_hcd.0: Device attached
[  197.343446][T13578] vhci_hcd vhci_hcd.0: pdev(8) rhport(1) sockfd(5)
[  197.350039][T13578] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  197.357774][T13578] vhci_hcd vhci_hcd.0: Device attached
[  197.365412][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  197.381534][T13578] vhci_hcd vhci_hcd.0: pdev(8) rhport(2) sockfd(7)
[  197.388156][T13578] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  197.395962][T13578] vhci_hcd vhci_hcd.0: Device attached
[  197.404298][T13578] vhci_hcd vhci_hcd.0: pdev(8) rhport(3) sockfd(9)
[  197.410870][T13578] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  197.418544][T13578] vhci_hcd vhci_hcd.0: Device attached
[  197.428878][T13578] vhci_hcd vhci_hcd.0: pdev(8) rhport(4) sockfd(11)
[  197.435530][T13578] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  197.443175][T13578] vhci_hcd vhci_hcd.0: Device attached
[  197.461391][T13578] vhci_hcd vhci_hcd.0: pdev(8) rhport(5) sockfd(13)
[  197.468065][T13578] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  197.475712][T13578] vhci_hcd vhci_hcd.0: Device attached
[  197.492551][T13578] vhci_hcd vhci_hcd.0: pdev(8) rhport(6) sockfd(15)
[  197.499254][T13578] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  197.506933][T13578] vhci_hcd vhci_hcd.0: Device attached
[  197.514176][T13578] vhci_hcd vhci_hcd.0: pdev(8) rhport(7) sockfd(17)
[  197.520841][T13578] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  197.528413][T13578] vhci_hcd vhci_hcd.0: Device attached
[  197.535001][T13597] vhci_hcd: connection closed
[  197.535202][T10466] vhci_hcd vhci_hcd.8: stop threads
[  197.535524][T13595] vhci_hcd: connection closed
[  197.540068][T10466] vhci_hcd vhci_hcd.8: release socket
[  197.545596][T13592] vhci_hcd: connection closed
[  197.550143][T10466] vhci_hcd vhci_hcd.8: disconnect device
[  197.556531][T13590] vhci_hcd: connection closed
[  197.565860][T13586] vhci_hcd: connection closed
[  197.570805][T13581] vhci_hcd: connection closed
[  197.570825][T13584] vhci_hcd: connection closed
[  197.580891][T13579] vhci_hcd: connection closed
[  197.590497][T10466] vhci_hcd vhci_hcd.8: stop threads
[  197.600714][T10466] vhci_hcd vhci_hcd.8: release socket
[  197.606132][T10466] vhci_hcd vhci_hcd.8: disconnect device
[  197.612179][T10466] vhci_hcd vhci_hcd.8: stop threads
[  197.617524][T10466] vhci_hcd vhci_hcd.8: release socket
[  197.623048][T10466] vhci_hcd vhci_hcd.8: disconnect device
[  197.629538][T10466] vhci_hcd vhci_hcd.8: stop threads
[  197.634865][T10466] vhci_hcd vhci_hcd.8: release socket
[  197.640295][T10466] vhci_hcd vhci_hcd.8: disconnect device
[  197.661464][T10466] vhci_hcd vhci_hcd.8: stop threads
[  197.666793][T10466] vhci_hcd vhci_hcd.8: release socket
[  197.672236][T10466] vhci_hcd vhci_hcd.8: disconnect device
[  197.679041][T10466] vhci_hcd vhci_hcd.8: stop threads
[  197.684351][T10466] vhci_hcd vhci_hcd.8: release socket
[  197.689928][T10466] vhci_hcd vhci_hcd.8: disconnect device
[  197.699279][T10466] vhci_hcd vhci_hcd.8: stop threads
[  197.704562][T10466] vhci_hcd vhci_hcd.8: release socket
[  197.710084][T10466] vhci_hcd vhci_hcd.8: disconnect device
[  197.717043][T10466] vhci_hcd vhci_hcd.8: stop threads
[  197.722330][T10466] vhci_hcd vhci_hcd.8: release socket
[  197.727814][T10466] vhci_hcd vhci_hcd.8: disconnect device
[  197.741371][T13603] loop4: detected capacity change from 0 to 1024
[  197.748110][T13603] EXT4-fs: Ignoring removed bh option
[  197.753549][T13603] EXT4-fs: inline encryption not supported
[  197.759921][T13603] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  197.772485][T13603] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  197.781479][T13603] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 2: comm syz.4.3915: lblock 2 mapped to illegal pblock 2 (length 1)
[  197.795707][T13603] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 48: comm syz.4.3915: lblock 0 mapped to illegal pblock 48 (length 1)
[  197.812705][T13603] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.3915: Failed to acquire dquot type 0
[  197.824488][T13603] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6298: Corrupt filesystem
[  197.837133][T13603] EXT4-fs error (device loop4): ext4_evict_inode:253: inode #11: comm syz.4.3915: mark_inode_dirty error
[  197.850109][T13603] EXT4-fs warning (device loop4): ext4_evict_inode:256: couldn't mark inode dirty (err -117)
[  197.860541][T13603] EXT4-fs (loop4): 1 orphan inode deleted
[  197.866336][T10466] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:28: lblock 1 mapped to illegal pblock 1 (length 1)
[  197.868130][T13603] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  197.913572][T10466] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:28: Failed to release dquot type 0
[  197.946592][T13603] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  197.983414][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  198.005079][T13619] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3922'.
[  198.064622][T13621] Invalid ELF header magic: != ELF
[  198.094244][T13621] loop4: detected capacity change from 0 to 512
[  198.140192][T13612] loop9: detected capacity change from 0 to 1024
[  198.151660][T13621] EXT4-fs (loop4): orphan cleanup on readonly fs
[  198.176257][T13621] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.3923: bad orphan inode 13
[  198.187349][T13612] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  198.200845][T13621] ext4_test_bit(bit=12, block=18) = 1
[  198.206314][T13621] is_bad_inode(inode)=0
[  198.210617][T13621] NEXT_ORPHAN(inode)=2130706432
[  198.215625][T13621] max_ino=32
[  198.218889][T13621] i_nlink=1
[  198.224412][T13621] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  198.241112][T13621] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended
[  198.248871][T13633] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3927'.
[  198.259427][T13633] dummy0: left allmulticast mode
[  198.264530][T13633] bridge0: port 3(dummy0) entered disabled state
[  198.271692][T13633] bridge_slave_1: left allmulticast mode
[  198.277488][T13633] bridge_slave_1: left promiscuous mode
[  198.283162][T13633] bridge0: port 2(bridge_slave_1) entered disabled state
[  198.291627][T13633] bridge_slave_0: left allmulticast mode
[  198.293458][T13621] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  198.297400][T13633] bridge_slave_0: left promiscuous mode
[  198.297741][T13633] bridge0: port 1(bridge_slave_0) entered disabled state
[  198.319599][T13637] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3923: bg 0: block 248: padding at end of block bitmap is not set
[  198.345872][T13637] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.3923: Failed to acquire dquot type 1
[  198.377523][ T8235] usb 17-1: enqueue for inactive port 0
[  198.383169][ T8235] usb 17-1: enqueue for inactive port 0
[  198.417152][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  198.457318][ T8235] vhci_hcd vhci_hcd.8: vhci_device speed not set
[  198.497529][T13642] program syz.8.3929 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  198.509756][T10743] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  198.644415][T13653] loop8: detected capacity change from 0 to 8192
[  198.677081][T13661] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3)
[  198.684786][T13661] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  198.692502][T13661] vhci_hcd vhci_hcd.0: Device attached
[  198.723938][T13667] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(6)
[  198.730516][T13667] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  198.738110][T13667] vhci_hcd vhci_hcd.0: Device attached
[  198.748605][T13667] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(8)
[  198.755208][T13667] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  198.762896][T13667] vhci_hcd vhci_hcd.0: Device attached
[  198.772052][T13661] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(5)
[  198.778619][T13661] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  198.786400][T13661] vhci_hcd vhci_hcd.0: Device attached
[  198.851820][T13661] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(11)
[  198.856472][T10192] FAT-fs (loop8): error, invalid access to FAT (entry 0x0000e1b1)
[  198.858478][T13661] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  198.858688][T13661] vhci_hcd vhci_hcd.0: Device attached
[  198.866893][T10192] FAT-fs (loop8): Filesystem has been set read-only
[  198.913066][T13681] netlink: 'syz.8.3942': attribute type 30 has an invalid length.
[  198.942407][T13661] vhci_hcd vhci_hcd.0: pdev(3) rhport(5) sockfd(13)
[  198.949230][T13661] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  198.957023][T13661] vhci_hcd vhci_hcd.0: Device attached
[  198.969211][T13667] vhci_hcd vhci_hcd.0: pdev(3) rhport(6) sockfd(15)
[  198.975870][T13667] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  198.983575][T13667] vhci_hcd vhci_hcd.0: Device attached
[  198.999733][T13684] bridge_slave_1: left allmulticast mode
[  199.005527][T13684] bridge_slave_1: left promiscuous mode
[  199.011288][T13684] bridge0: port 2(bridge_slave_1) entered disabled state
[  199.021696][T13684] bridge_slave_0: left promiscuous mode
[  199.027053][T13661] vhci_hcd vhci_hcd.0: pdev(3) rhport(7) sockfd(17)
[  199.027682][T13684] bridge0: port 1(bridge_slave_0) entered disabled state
[  199.034006][T13661] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  199.048763][T13661] vhci_hcd vhci_hcd.0: Device attached
[  199.065975][T13685] vhci_hcd: connection closed
[  199.066062][T13687] vhci_hcd: connection closed
[  199.066449][  T321] vhci_hcd vhci_hcd.3: stop threads
[  199.080806][  T321] vhci_hcd vhci_hcd.3: release socket
[  199.086212][  T321] vhci_hcd vhci_hcd.3: disconnect device
[  199.091266][ T3523] IPVS: starting estimator thread 0...
[  199.097832][  T321] vhci_hcd vhci_hcd.3: stop threads
[  199.103108][  T321] vhci_hcd vhci_hcd.3: release socket
[  199.108559][  T321] vhci_hcd vhci_hcd.3: disconnect device
[  199.114289][T13671] vhci_hcd: connection closed
[  199.114445][T13668] vhci_hcd: connection closed
[  199.119192][T13673] vhci_hcd: connection closed
[  199.124260][T13662] vhci_hcd: connection closed
[  199.129194][T13677] vhci_hcd: connection closed
[  199.134102][T13679] vhci_hcd: connection closed
[  199.139236][  T321] vhci_hcd vhci_hcd.3: stop threads
[  199.149290][  T321] vhci_hcd vhci_hcd.3: release socket
[  199.154703][  T321] vhci_hcd vhci_hcd.3: disconnect device
[  199.162935][  T321] vhci_hcd vhci_hcd.3: stop threads
[  199.168235][  T321] vhci_hcd vhci_hcd.3: release socket
[  199.173714][  T321] vhci_hcd vhci_hcd.3: disconnect device
[  199.181440][  T321] vhci_hcd vhci_hcd.3: stop threads
[  199.186771][  T321] vhci_hcd vhci_hcd.3: release socket
[  199.190254][T13691] IPVS: using max 1776 ests per chain, 88800 per kthread
[  199.192364][  T321] vhci_hcd vhci_hcd.3: disconnect device
[  199.205429][  T321] vhci_hcd vhci_hcd.3: stop threads
[  199.210718][  T321] vhci_hcd vhci_hcd.3: release socket
[  199.216202][  T321] vhci_hcd vhci_hcd.3: disconnect device
[  199.222880][  T321] vhci_hcd vhci_hcd.3: stop threads
[  199.228173][  T321] vhci_hcd vhci_hcd.3: release socket
[  199.233591][  T321] vhci_hcd vhci_hcd.3: disconnect device
[  199.240932][  T321] vhci_hcd vhci_hcd.3: stop threads
[  199.246271][  T321] vhci_hcd vhci_hcd.3: release socket
[  199.251732][  T321] vhci_hcd vhci_hcd.3: disconnect device
[  199.364795][T13695] loop8: detected capacity change from 0 to 8192
[  199.589583][T13715] loop4: detected capacity change from 0 to 8192
[  199.754346][ T3321] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1)
[  199.762356][ T3321] FAT-fs (loop4): Filesystem has been set read-only
[  199.819758][T13725] __nla_validate_parse: 1 callbacks suppressed
[  199.819772][T13725] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3958'.
[  199.993794][T13739] Alternate GPT is invalid, using primary GPT.
[  200.000307][T13739]  loop8: p2 p3 p7
[  200.006681][T13742] deleting an unspecified loop device is not supported.
[  200.040828][T13744] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3)
[  200.047530][T13744] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  200.055356][T13744] vhci_hcd vhci_hcd.0: Device attached
[  200.064355][T13744] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(5)
[  200.070952][T13744] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  200.078593][T13744] vhci_hcd vhci_hcd.0: Device attached
[  200.090523][T13744] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(7)
[  200.097084][T13744] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  200.104865][T13744] vhci_hcd vhci_hcd.0: Device attached
[  200.122838][   T29] kauditd_printk_skb: 152 callbacks suppressed
[  200.122857][   T29] audit: type=1400 audit(1768180572.138:5937): avc:  denied  { audit_read } for  pid=13751 comm="syz.8.3968" capability=37  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  200.152238][T13744] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(9)
[  200.158800][T13744] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  200.166410][T13744] vhci_hcd vhci_hcd.0: Device attached
[  200.199870][T13757] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(12)
[  200.206564][T13757] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  200.214410][T13757] vhci_hcd vhci_hcd.0: Device attached
[  200.237534][ T3523] vhci_hcd vhci_hcd.1: vhci_device speed not set
[  200.245928][T13744] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(11)
[  200.252660][T13744] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  200.260393][T13744] vhci_hcd vhci_hcd.0: Device attached
[  200.271813][T13744] vhci_hcd vhci_hcd.0: pdev(1) rhport(6) sockfd(15)
[  200.278459][T13744] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  200.286240][T13744] vhci_hcd vhci_hcd.0: Device attached
[  200.317280][T13744] vhci_hcd vhci_hcd.0: pdev(1) rhport(7) sockfd(17)
[  200.323942][T13744] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  200.331661][T13744] vhci_hcd vhci_hcd.0: Device attached
[  200.337452][ T3523] usb 3-1: new full-speed USB device number 4 using vhci_hcd
[  200.357845][T13761] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3970'.
[  200.366848][T13761] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3970'.
[  200.369332][T13768] vhci_hcd: connection closed
[  200.376211][T10480] vhci_hcd vhci_hcd.1: stop threads
[  200.386442][T10480] vhci_hcd vhci_hcd.1: release socket
[  200.392067][T10480] vhci_hcd vhci_hcd.1: disconnect device
[  200.401268][T13758] vhci_hcd: connection closed
[  200.401492][T13749] vhci_hcd: connection closed
[  200.401505][T13747] vhci_hcd: connection closed
[  200.406494][T13753] vhci_hcd: connection closed
[  200.419720][T13762] vhci_hcd: connection closed
[  200.422072][T13745] vhci_hcd: connection reset by peer
[  200.426294][T13764] vhci_hcd: connection closed
[  200.451164][T10480] vhci_hcd vhci_hcd.1: stop threads
[  200.461185][T10480] vhci_hcd vhci_hcd.1: release socket
[  200.466754][T10480] vhci_hcd vhci_hcd.1: disconnect device
[  200.480264][T13761] geneve0: entered promiscuous mode
[  200.485627][T13761] geneve0: entered allmulticast mode
[  200.500934][T13771] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13771 comm=syz.8.3971
[  200.514415][T10480] vhci_hcd vhci_hcd.1: stop threads
[  200.519796][T10480] vhci_hcd vhci_hcd.1: release socket
[  200.525488][T10480] vhci_hcd vhci_hcd.1: disconnect device
[  200.541804][T10480] vhci_hcd vhci_hcd.1: stop threads
[  200.547233][T10480] vhci_hcd vhci_hcd.1: release socket
[  200.552833][T10480] vhci_hcd vhci_hcd.1: disconnect device
[  200.570082][T10480] vhci_hcd vhci_hcd.1: stop threads
[  200.575405][T10480] vhci_hcd vhci_hcd.1: release socket
[  200.580939][T10480] vhci_hcd vhci_hcd.1: disconnect device
[  200.587828][T10480] vhci_hcd vhci_hcd.1: stop threads
[  200.593292][T10480] vhci_hcd vhci_hcd.1: release socket
[  200.598838][T10480] vhci_hcd vhci_hcd.1: disconnect device
[  200.606626][T10480] vhci_hcd vhci_hcd.1: stop threads
[  200.612238][T10480] vhci_hcd vhci_hcd.1: release socket
[  200.617979][T10480] vhci_hcd vhci_hcd.1: disconnect device
[  200.638530][T10480] vhci_hcd vhci_hcd.1: stop threads
[  200.643909][T10480] vhci_hcd vhci_hcd.1: release socket
[  200.649574][T10480] vhci_hcd vhci_hcd.1: disconnect device
[  200.671930][T13775] netlink: 19 bytes leftover after parsing attributes in process `syz.8.3973'.
[  200.807056][   T29] audit: type=1326 audit(1768180572.818:5938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13778 comm="syz.9.3975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f284127f749 code=0x7ffc0000
[  200.833324][   T29] audit: type=1326 audit(1768180572.828:5939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13778 comm="syz.9.3975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f284127f749 code=0x7ffc0000
[  200.868550][   T29] audit: type=1326 audit(1768180572.858:5940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13778 comm="syz.9.3975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f284127f749 code=0x7ffc0000
[  200.892166][   T29] audit: type=1326 audit(1768180572.858:5941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13778 comm="syz.9.3975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f284127f749 code=0x7ffc0000
[  200.915803][   T29] audit: type=1326 audit(1768180572.858:5942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13778 comm="syz.9.3975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f284127f749 code=0x7ffc0000
[  200.939465][   T29] audit: type=1326 audit(1768180572.858:5943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13778 comm="syz.9.3975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f284127f749 code=0x7ffc0000
[  200.963234][   T29] audit: type=1326 audit(1768180572.858:5944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13778 comm="syz.9.3975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f284127f749 code=0x7ffc0000
[  200.987463][   T29] audit: type=1326 audit(1768180572.858:5945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13778 comm="syz.9.3975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f284127f749 code=0x7ffc0000
[  201.010990][   T29] audit: type=1326 audit(1768180572.858:5946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13778 comm="syz.9.3975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7f284127f749 code=0x7ffc0000
[  201.135675][T13792] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3)
[  201.142252][T13792] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  201.149966][T13792] vhci_hcd vhci_hcd.0: Device attached
[  201.184523][T13792] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(5)
[  201.191172][T13792] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  201.198770][T13792] vhci_hcd vhci_hcd.0: Device attached
[  201.211263][T13792] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(7)
[  201.217833][T13792] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  201.225494][T13792] vhci_hcd vhci_hcd.0: Device attached
[  201.244629][T13792] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(9)
[  201.251193][T13792] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  201.258893][T13792] vhci_hcd vhci_hcd.0: Device attached
[  201.273528][T13792] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(11)
[  201.280178][T13792] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  201.287841][T13792] vhci_hcd vhci_hcd.0: Device attached
[  201.309133][T13792] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(13)
[  201.315782][T13792] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  201.323497][T13792] vhci_hcd vhci_hcd.0: Device attached
[  201.337328][T13792] vhci_hcd vhci_hcd.0: pdev(1) rhport(6) sockfd(15)
[  201.343979][T13792] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  201.345324][ T3608] usb 19-1: enqueue for inactive port 0
[  201.351970][T13792] vhci_hcd vhci_hcd.0: Device attached
[  201.357426][ T3608] usb 19-1: enqueue for inactive port 0
[  201.384042][T13792] vhci_hcd vhci_hcd.0: pdev(1) rhport(7) sockfd(17)
[  201.391131][T13792] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  201.398710][T13792] vhci_hcd vhci_hcd.0: Device attached
[  201.405138][T13816] vhci_hcd: connection closed
[  201.405374][T13810] vhci_hcd: connection closed
[  201.410324][T13806] vhci_hcd: connection closed
[  201.410328][T13808] vhci_hcd: connection closed
[  201.420028][T10480] vhci_hcd vhci_hcd.1: stop threads
[  201.421187][T13804] vhci_hcd: connection closed
[  201.424824][T10480] vhci_hcd vhci_hcd.1: release socket
[  201.424847][T10480] vhci_hcd vhci_hcd.1: disconnect device
[  201.447216][T10480] vhci_hcd vhci_hcd.1: stop threads
[  201.452650][T10480] vhci_hcd vhci_hcd.1: release socket
[  201.453244][T13802] vhci_hcd: connection closed
[  201.458263][T10480] vhci_hcd vhci_hcd.1: disconnect device
[  201.470730][ T3608] vhci_hcd vhci_hcd.9: vhci_device speed not set
[  201.477554][T13800] vhci_hcd: connection closed
[  201.477863][T13794] vhci_hcd: connection closed
[  201.510403][T10480] vhci_hcd vhci_hcd.1: stop threads
[  201.520572][T10480] vhci_hcd vhci_hcd.1: release socket
[  201.526122][T10480] vhci_hcd vhci_hcd.1: disconnect device
[  201.532850][T10480] vhci_hcd vhci_hcd.1: stop threads
[  201.538175][T10480] vhci_hcd vhci_hcd.1: release socket
[  201.543591][T10480] vhci_hcd vhci_hcd.1: disconnect device
[  201.555439][T10480] vhci_hcd vhci_hcd.1: stop threads
[  201.560793][T10480] vhci_hcd vhci_hcd.1: release socket
[  201.566207][T10480] vhci_hcd vhci_hcd.1: disconnect device
[  201.572064][T10480] vhci_hcd vhci_hcd.1: stop threads
[  201.577440][T10480] vhci_hcd vhci_hcd.1: release socket
[  201.582921][T10480] vhci_hcd vhci_hcd.1: disconnect device
[  201.602407][T10480] vhci_hcd vhci_hcd.1: stop threads
[  201.607794][T10480] vhci_hcd vhci_hcd.1: release socket
[  201.613213][T10480] vhci_hcd vhci_hcd.1: disconnect device
[  201.630150][T10480] vhci_hcd vhci_hcd.1: stop threads
[  201.635510][T10480] vhci_hcd vhci_hcd.1: release socket
[  201.640985][T10480] vhci_hcd vhci_hcd.1: disconnect device
[  201.820027][T13828] syzkaller0: entered allmulticast mode
[  201.837094][T13828] syzkaller0 (unregistering): left allmulticast mode
[  202.029609][T13836] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3989'.
[  202.244982][T13855] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4000'.
[  202.274095][T13855] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4000'.
[  202.546456][T13872] set_capacity_and_notify: 1 callbacks suppressed
[  202.546477][T13872] loop3: detected capacity change from 0 to 4096
[  202.573899][T13872] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  202.865787][T13880] sch_tbf: burst 22 is lower than device lo mtu (65550) !
[  202.900845][T12147] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  203.091269][T13898] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4014'.
[  203.103998][T13898] vlan2: entered allmulticast mode
[  203.172164][T13902] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=13902 comm=syz.4.4015
[  203.203775][T13904] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4016'.
[  203.440005][T13924] loop8: detected capacity change from 0 to 512
[  203.458157][T13926] netlink: 'syz.1.4027': attribute type 4 has an invalid length.
[  203.469784][T13924] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  203.497227][T13924] ext4 filesystem being mounted at /276/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  203.527128][T13924] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[  203.554764][T13924] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1 with error 28
[  203.567122][T13924] EXT4-fs (loop8): This should not happen!! Data will be lost
[  203.567122][T13924] 
[  203.576817][T13924] EXT4-fs (loop8): Total free blocks count 0
[  203.582874][T13924] EXT4-fs (loop8): Free/Dirty block details
[  203.588832][T13924] EXT4-fs (loop8): free_blocks=65280
[  203.594259][T13924] EXT4-fs (loop8): dirty_blocks=1
[  203.599435][T13924] EXT4-fs (loop8): Block reservation details
[  203.605444][T13924] EXT4-fs (loop8): i_reserved_data_blocks=1
[  203.623914][T10192] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  204.183110][T13949] sd 0:0:1:0: device reset
[  204.314325][T13954] loop9: detected capacity change from 0 to 128
[  204.518619][T13983] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4050'.
[  204.670146][T13994] loop8: detected capacity change from 0 to 128
[  204.889698][T14023] veth10: entered promiscuous mode
[  204.894917][T14023] veth10: entered allmulticast mode
[  205.061114][T14046] syzkaller1: entered promiscuous mode
[  205.066665][T14046] syzkaller1: entered allmulticast mode
[  205.161461][T14049] loop8: detected capacity change from 0 to 8192
[  205.442218][ T3523] usb 3-1: enqueue for inactive port 0
[  205.454912][ T3523] usb 3-1: enqueue for inactive port 0
[  205.533095][   T29] kauditd_printk_skb: 37 callbacks suppressed
[  205.533115][   T29] audit: type=1326 audit(1768180577.548:5984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14078 comm="syz.9.4093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f284127f749 code=0x7ffc0000
[  205.538304][ T3523] vhci_hcd vhci_hcd.1: vhci_device speed not set
[  205.569286][   T29] audit: type=1326 audit(1768180577.558:5985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14078 comm="syz.9.4093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f284127f749 code=0x7ffc0000
[  205.593072][   T29] audit: type=1326 audit(1768180577.558:5986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14078 comm="syz.9.4093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f284127f749 code=0x7ffc0000
[  205.617120][   T29] audit: type=1326 audit(1768180577.558:5987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14078 comm="syz.9.4093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f284127f749 code=0x7ffc0000
[  205.641306][   T29] audit: type=1326 audit(1768180577.558:5988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14078 comm="syz.9.4093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f284127f749 code=0x7ffc0000
[  205.664883][   T29] audit: type=1326 audit(1768180577.558:5989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14078 comm="syz.9.4093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f284127f749 code=0x7ffc0000
[  205.688548][   T29] audit: type=1326 audit(1768180577.558:5990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14078 comm="syz.9.4093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f284127f749 code=0x7ffc0000
[  205.712125][   T29] audit: type=1326 audit(1768180577.558:5991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14078 comm="syz.9.4093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f284127f749 code=0x7ffc0000
[  205.735665][   T29] audit: type=1326 audit(1768180577.558:5992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14078 comm="syz.9.4093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f284127f749 code=0x7ffc0000
[  205.766295][   T29] audit: type=1326 audit(1768180577.778:5993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14078 comm="syz.9.4093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f284127f749 code=0x7ffc0000
[  206.099293][T14112] SELinux: failed to load policy
[  206.396466][T14137] serio: Serial port ttyS3
[  206.578177][T14162] sg_write: data in/out 178/8 bytes for SCSI command 0xfe-- guessing data in;
[  206.578177][T14162]    program syz.9.4128 not setting count and/or reply_len properly
[  206.765392][T14179] __nla_validate_parse: 4 callbacks suppressed
[  206.765440][T14179] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4136'.
[  206.818015][T14183] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4138'.
[  207.123607][T14218] netlink: 'syz.9.4154': attribute type 10 has an invalid length.
[  207.131583][T14218] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4154'.
[  207.461799][T14249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  207.482052][T14249] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  207.894424][T14271] loop8: detected capacity change from 0 to 4096
[  207.906417][T14271] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  207.926416][T14271] EXT4-fs (loop8): shut down requested (2)
[  207.959882][T10192] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  208.011662][T14285] ref_ctr increment failed for inode: 0x12ca offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff8881043ad7c0
[  208.027568][T14284] uprobe: syz.4.4184:14284 failed to unregister, leaking uprobe
[  208.109939][T14292] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4186'.
[  208.183684][T14298] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4189'.
[  208.261862][T14298] bond0: (slave team0): Releasing backup interface
[  208.273864][T14298] team0 (unregistering): Port device team_slave_0 removed
[  208.292771][T14298] team0 (unregistering): Port device team_slave_1 removed
[  208.447480][T14317] xt_CT: You must specify a L4 protocol and not use inversions on it
[  208.498397][T14322] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4201'.
[  208.667026][T14340] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4208'.
[  208.760990][T14353] loop9: detected capacity change from 0 to 512
[  208.768332][T14353] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  208.789687][T14353] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  208.803082][T14353] ext4 filesystem being mounted at /272/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  208.832168][T10743] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  208.844693][T14357] ieee802154 phy0 wpan0: encryption failed: -22
[  208.995782][T14376] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4220'.
[  209.004883][T14376] netlink: 'syz.1.4220': attribute type 11 has an invalid length.
[  209.012796][T14376] netlink: 'syz.1.4220': attribute type 13 has an invalid length.
[  209.100203][T14379] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4225'.
[  209.288029][T14399] loop3: detected capacity change from 0 to 1024
[  209.295096][T14399] EXT4-fs: Ignoring removed bh option
[  209.324410][T14399] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback.
[  209.354931][T12147] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-001000000000.
[  209.587065][T14443] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4253'.
[  209.678797][T14457] ip6gre1: entered allmulticast mode
[  209.969431][T14511] loop4: detected capacity change from 0 to 512
[  209.979020][T14511] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  210.023844][T14517] loop9: detected capacity change from 0 to 128
[  210.044990][T14513] netlink: 'syz.3.4284': attribute type 1 has an invalid length.
[  210.063353][T14519] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  210.208083][T14536] loop3: detected capacity change from 0 to 1024
[  210.221345][T14536] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  210.253743][T10483] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  210.274305][T10483] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  210.292030][T10483] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  210.308799][T10483] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  210.325347][T14544] loop4: detected capacity change from 0 to 512
[  210.345758][T14544] EXT4-fs: Ignoring removed bh option
[  210.390650][T14544] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  210.403678][T14544] ext4 filesystem being mounted at /939/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  210.436895][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  210.537377][   T29] kauditd_printk_skb: 591 callbacks suppressed
[  210.537396][   T29] audit: type=1326 audit(1768180582.558:6585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14518 comm="syz.8.4287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8ab6e82005 code=0x7ffc0000
[  210.585127][   T29] audit: type=1326 audit(1768180582.558:6586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14518 comm="syz.8.4287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8ab6e82005 code=0x7ffc0000
[  210.608764][   T29] audit: type=1326 audit(1768180582.558:6587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14518 comm="syz.8.4287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8ab6e82005 code=0x7ffc0000
[  210.632559][   T29] audit: type=1326 audit(1768180582.558:6588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14518 comm="syz.8.4287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8ab6e82005 code=0x7ffc0000
[  210.656175][   T29] audit: type=1326 audit(1768180582.558:6589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14518 comm="syz.8.4287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8ab6e82005 code=0x7ffc0000
[  210.679827][   T29] audit: type=1326 audit(1768180582.558:6590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14518 comm="syz.8.4287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8ab6e82005 code=0x7ffc0000
[  210.703389][   T29] audit: type=1326 audit(1768180582.558:6591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14518 comm="syz.8.4287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8ab6e82005 code=0x7ffc0000
[  210.726995][   T29] audit: type=1326 audit(1768180582.558:6592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14518 comm="syz.8.4287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8ab6e82005 code=0x7ffc0000
[  210.750727][   T29] audit: type=1326 audit(1768180582.558:6593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14518 comm="syz.8.4287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8ab6e82005 code=0x7ffc0000
[  210.774362][   T29] audit: type=1326 audit(1768180582.588:6594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14518 comm="syz.8.4287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8ab6e82005 code=0x7ffc0000
[  210.953236][T14574] netlink: 'syz.8.4311': attribute type 7 has an invalid length.
[  210.961135][T14574] netlink: 'syz.8.4311': attribute type 8 has an invalid length.
[  211.021426][T14578] SELinux: failed to load policy
[  211.083159][T12147] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  211.171001][T14598] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[  211.182088][T14597] IPVS: stopping master sync thread 14598 ...
[  211.191223][T14600] loop9: detected capacity change from 0 to 512
[  211.200809][T14600] EXT4-fs: Ignoring removed i_version option
[  211.206866][T14600] EXT4-fs: Ignoring removed bh option
[  211.253381][T14600] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  211.266786][T14600] ext4 filesystem being mounted at /284/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  211.333124][T10743] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  211.345196][T14619] sch_tbf: peakrate 7 is lower than or equals to rate 19 !
[  211.609974][T14647] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  211.648995][T14651] loop4: detected capacity change from 0 to 2048
[  211.660258][T14651] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  211.660602][T14647] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  211.712022][T14647] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  211.729860][T14651] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  211.744913][T14651] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1126 with error 28
[  211.757529][T14651] EXT4-fs (loop4): This should not happen!! Data will be lost
[  211.757529][T14651] 
[  211.767322][T14651] EXT4-fs (loop4): Total free blocks count 0
[  211.773393][T14651] EXT4-fs (loop4): Free/Dirty block details
[  211.779373][T14651] EXT4-fs (loop4): free_blocks=2415919104
[  211.785229][T14651] EXT4-fs (loop4): dirty_blocks=1136
[  211.790649][T14651] EXT4-fs (loop4): Block reservation details
[  211.796660][T14651] EXT4-fs (loop4): i_reserved_data_blocks=71
[  211.811057][T14647] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  211.910566][T10474] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  211.939503][T10474] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  211.960792][T10474] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  211.971385][T10474] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  212.034426][T10474] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1126 with error 28
[  212.091651][T14665] __nla_validate_parse: 12 callbacks suppressed
[  212.091669][T14665] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4348'.
[  212.599391][T14681] netlink: 'syz.9.4354': attribute type 21 has an invalid length.
[  212.607382][T14681] netlink: 128 bytes leftover after parsing attributes in process `syz.9.4354'.
[  212.652081][T14681] netlink: 'syz.9.4354': attribute type 5 has an invalid length.
[  212.659933][T14681] netlink: 'syz.9.4354': attribute type 6 has an invalid length.
[  212.667754][T14681] netlink: 3 bytes leftover after parsing attributes in process `syz.9.4354'.
[  212.749577][T14687] loop9: detected capacity change from 0 to 1024
[  212.756286][T14687] EXT4-fs: Ignoring removed mblk_io_submit option
[  212.768800][T14691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  212.806738][T14691] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  212.818831][T14687] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  212.995646][T14709] loop3: detected capacity change from 0 to 1024
[  213.002287][T14712] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4366'.
[  213.030689][T14709] EXT4-fs: Ignoring removed nomblk_io_submit option
[  213.038129][T14709] EXT4-fs: Ignoring removed nomblk_io_submit option
[  213.058003][T14709] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002]
[  213.069862][T14709] System zones: 0-1, 3-36
[  213.075255][T14709] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  213.127915][T12147] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  213.152265][T10743] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  213.243766][T14733] loop8: detected capacity change from 0 to 512
[  213.250928][T14733] journal_path: Non-blockdev passed as './bus'
[  213.257112][T14733] EXT4-fs: error: could not find journal device path
[  213.298435][T14736] loop9: detected capacity change from 0 to 2048
[  213.322776][T14736] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  213.390318][T14743] loop4: detected capacity change from 0 to 2048
[  213.422158][T14743] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  213.472364][T14743] EXT4-fs error (device loop4): ext4_find_extent:939: inode #2: comm syz.4.4380: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  213.528908][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  213.583121][T14753] Invalid argument reading file caps for ./file0
[  213.763807][T14736] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  213.794193][T14736] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  213.806754][T14736] EXT4-fs (loop9): This should not happen!! Data will be lost
[  213.806754][T14736] 
[  213.816464][T14736] EXT4-fs (loop9): Total free blocks count 0
[  213.822563][T14736] EXT4-fs (loop9): Free/Dirty block details
[  213.828546][T14736] EXT4-fs (loop9): free_blocks=2415919104
[  213.834335][T14736] EXT4-fs (loop9): dirty_blocks=8208
[  213.839810][T14736] EXT4-fs (loop9): Block reservation details
[  213.845892][T14736] EXT4-fs (loop9): i_reserved_data_blocks=513
[  213.903336][T14770] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4391'.
[  213.953228][T10466] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28
[  214.115223][T14780] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4395'.
[  214.133874][T14780] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4395'.
[  214.197682][T14782] syzkaller1: entered promiscuous mode
[  214.203263][T14782] syzkaller1: entered allmulticast mode
[  214.216426][T14788] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4400'.
[  214.355810][T14802] syzkaller0: entered promiscuous mode
[  214.361537][T14802] syzkaller0: entered allmulticast mode
[  214.372390][T14805] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4407'.
[  214.392869][T14805] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4407'.
[  214.449911][T14813] ip6tnl1: entered promiscuous mode
[  214.455184][T14813] ip6tnl1: entered allmulticast mode
[  214.737149][T14833] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14833 comm=syz.4.4420
[  214.851715][T14844] tipc: Started in network mode
[  214.856697][T14844] tipc: Node identity 46dafd6b8a55, cluster identity 4711
[  214.864060][T14844] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  214.873929][T14844] tipc: Disabling bearer <eth:syzkaller0>
[  215.313120][ T1975] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  215.376211][ T1975] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  215.441422][ T1975] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  215.523594][ T1975] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  215.597378][T14864] chnl_net:caif_netlink_parms(): no params data found
[  215.784905][ T1975] .` (unregistering): (slave bond_slave_0): Releasing backup interface
[  215.797498][ T1975] .` (unregistering): (slave bond_slave_1): Releasing backup interface
[  215.806189][   T29] kauditd_printk_skb: 320 callbacks suppressed
[  215.806240][   T29] audit: type=1400 audit(1768180587.818:6915): avc:  denied  { write } for  pid=14880 comm="syz.4.4437" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  215.838911][ T1975] .` (unregistering): (slave dummy0): Releasing backup interface
[  215.848497][ T1975] .` (unregistering): Released all slaves
[  215.887229][T14864] bridge0: port 1(bridge_slave_0) entered blocking state
[  215.894448][T14864] bridge0: port 1(bridge_slave_0) entered disabled state
[  215.915589][T14864] bridge_slave_0: entered allmulticast mode
[  215.939849][T14864] bridge_slave_0: entered promiscuous mode
[  215.956058][ T1975] hsr_slave_0: left promiscuous mode
[  215.962623][ T1975] hsr_slave_1: left promiscuous mode
[  215.968603][ T1975] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  215.976089][ T1975] batman_adv: batadv0: Removing interface: batadv_slave_0
[  215.990462][ T1975] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  215.998062][ T1975] batman_adv: batadv0: Removing interface: batadv_slave_1
[  216.008602][ T1975] veth1_macvtap: left promiscuous mode
[  216.014517][ T1975] veth0_macvtap: left promiscuous mode
[  216.020409][   T29] audit: type=1400 audit(1768180588.028:6916): avc:  denied  { read append } for  pid=14894 comm="syz.4.4444" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  216.045250][   T29] audit: type=1400 audit(1768180588.028:6917): avc:  denied  { open } for  pid=14894 comm="syz.4.4444" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  216.070161][ T1975] veth1_vlan: left promiscuous mode
[  216.077371][ T1975] veth0_vlan: left promiscuous mode
[  216.080911][   T29] audit: type=1400 audit(1768180588.098:6918): avc:  denied  { append } for  pid=14896 comm="syz.3.4445" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  216.141355][   T29] audit: type=1400 audit(1768180588.158:6919): avc:  denied  { read } for  pid=14901 comm="syz.4.4447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  216.197299][ T1975] team0 (unregistering): Port device team_slave_1 removed
[  216.206985][   T29] audit: type=1400 audit(1768180588.218:6920): avc:  denied  { read write } for  pid=14904 comm="syz.4.4448" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  216.231822][   T29] audit: type=1400 audit(1768180588.218:6921): avc:  denied  { open } for  pid=14904 comm="syz.4.4448" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  216.258613][ T1975] team0 (unregistering): Port device team_slave_0 removed
[  216.267164][   T29] audit: type=1400 audit(1768180588.278:6922): avc:  denied  { ioctl } for  pid=14904 comm="syz.4.4448" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  216.321331][T14864] bridge0: port 2(bridge_slave_1) entered blocking state
[  216.328479][T14864] bridge0: port 2(bridge_slave_1) entered disabled state
[  216.337562][T14864] bridge_slave_1: entered allmulticast mode
[  216.348982][T14864] bridge_slave_1: entered promiscuous mode
[  216.382008][   T29] audit: type=1400 audit(1768180588.398:6923): avc:  denied  { create } for  pid=14913 comm="syz.4.4452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  216.385411][T14864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  216.402248][   T29] audit: type=1400 audit(1768180588.398:6924): avc:  denied  { bind } for  pid=14913 comm="syz.4.4452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  216.433664][T14864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  216.487912][T14864] team0: Port device team_slave_0 added
[  216.494618][T14864] team0: Port device team_slave_1 added
[  216.545980][T14864] batman_adv: batadv0: Adding interface: batadv_slave_0
[  216.553106][T14864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  216.579346][T14864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  216.592998][T14864] batman_adv: batadv0: Adding interface: batadv_slave_1
[  216.600296][T14864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  216.626645][T14864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  216.731789][T14864] hsr_slave_0: entered promiscuous mode
[  216.744760][T14864] hsr_slave_1: entered promiscuous mode
[  216.757635][T14864] debugfs: 'hsr0' already exists in 'hsr'
[  216.763431][T14864] Cannot create hsr debugfs directory
[  216.908062][T14944] serio: Serial port ttyS3
[  217.085858][T14864] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  217.097169][T14864] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  217.106934][T14864] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  217.119518][T14864] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  217.202002][T14864] 8021q: adding VLAN 0 to HW filter on device bond0
[  217.222799][T14864] 8021q: adding VLAN 0 to HW filter on device team0
[  217.242121][T10474] bridge0: port 1(bridge_slave_0) entered blocking state
[  217.249391][T10474] bridge0: port 1(bridge_slave_0) entered forwarding state
[  217.276432][T14967] loop8: detected capacity change from 0 to 2048
[  217.286201][T10474] bridge0: port 2(bridge_slave_1) entered blocking state
[  217.293356][T10474] bridge0: port 2(bridge_slave_1) entered forwarding state
[  217.320872][T14967] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  217.393695][T10192] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  217.446213][T14864] 8021q: adding VLAN 0 to HW filter on device batadv0
[  217.509224][T14983] __nla_validate_parse: 2 callbacks suppressed
[  217.509240][T14983] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4475'.
[  217.643576][T14864] veth0_vlan: entered promiscuous mode
[  217.672880][T14864] veth1_vlan: entered promiscuous mode
[  217.708478][T14864] veth0_macvtap: entered promiscuous mode
[  217.726245][T14864] veth1_macvtap: entered promiscuous mode
[  217.753784][T15003] loop3: detected capacity change from 0 to 512
[  217.765980][T14864] batman_adv: batadv0: Interface activated: batadv_slave_0
[  217.780648][T15003] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  217.799359][T14864] batman_adv: batadv0: Interface activated: batadv_slave_1
[  217.819087][T15003] EXT4-fs (loop3): 1 truncate cleaned up
[  217.828062][T10498] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  217.839768][T15003] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  217.854035][T10498] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  217.886139][T10498] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  217.917320][T10498] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  217.982971][T12147] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  218.482838][T15040] netlink: 2028 bytes leftover after parsing attributes in process `syz.1.4494'.
[  218.492178][T15040] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4494'.
[  218.636938][T15047] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4498'.
[  219.164195][T15067] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4505'.
[  219.187640][T15067] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4505'.
[  219.347611][T15073] serio: Serial port ttyS3
[  219.609248][T15089] netlink: 'syz.4.4514': attribute type 10 has an invalid length.
[  219.617233][T15089] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4514'.
[  219.651379][T15089] dummy0: entered promiscuous mode
[  219.662725][T15089] bond0: (slave dummy0): Releasing backup interface
[  219.675052][T15089] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  219.773235][T15096] netlink: 'syz.1.4518': attribute type 10 has an invalid length.
[  219.809153][T15096] .`: (slave team0): Releasing backup interface
[  219.821832][T15094] loop8: detected capacity change from 0 to 8192
[  219.833257][T15096] team0 (unregistering): Port device team_slave_0 removed
[  219.848264][T15096] team0 (unregistering): Port device team_slave_1 removed
[  219.965021][T15108] Invalid ELF header magic: != ELF
[  219.971538][T15109] loop3: detected capacity change from 0 to 1024
[  220.012636][T15109] EXT4-fs: Ignoring removed mblk_io_submit option
[  220.031831][T15113] netlink: 'syz.4.4528': attribute type 30 has an invalid length.
[  220.072841][T15109] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  220.091391][T15122] netlink: 'syz.8.4530': attribute type 10 has an invalid length.
[  220.099283][T15122] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4530'.
[  220.108483][T15122] dummy0: entered promiscuous mode
[  220.114765][T15122] bond0: (slave dummy0): Releasing backup interface
[  220.123203][T15122] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  220.389227][T15146] netlink: 'syz.0.4537': attribute type 10 has an invalid length.
[  220.410921][T15146] team0 (unregistering): Port device team_slave_0 removed
[  220.423234][T15146] team0 (unregistering): Port device team_slave_1 removed
[  220.466726][T12147] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  220.523051][T15157] netlink: 19 bytes leftover after parsing attributes in process `syz.3.4543'.
[  220.782955][T15160] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4544'.
[  220.797403][T15160] geneve0: entered promiscuous mode
[  220.802777][T15160] geneve0: entered allmulticast mode
[  220.859797][   T29] kauditd_printk_skb: 86 callbacks suppressed
[  220.859816][   T29] audit: type=1400 audit(1768180592.878:7011): avc:  denied  { read } for  pid=15173 comm="syz.4.4551" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  220.888818][   T29] audit: type=1400 audit(1768180592.878:7012): avc:  denied  { open } for  pid=15173 comm="syz.4.4551" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  220.951599][   T29] audit: type=1400 audit(1768180592.928:7013): avc:  denied  { read } for  pid=15173 comm="syz.4.4551" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  220.976096][   T29] audit: type=1400 audit(1768180592.928:7014): avc:  denied  { open } for  pid=15173 comm="syz.4.4551" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  221.000960][   T29] audit: type=1400 audit(1768180592.928:7015): avc:  denied  { ioctl } for  pid=15173 comm="syz.4.4551" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  221.027436][   T29] audit: type=1400 audit(1768180592.948:7016): avc:  denied  { write } for  pid=15180 comm="syz.4.4553" name="netstat" dev="proc" ino=4026532671 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[  221.478587][   T29] audit: type=1400 audit(1768180593.498:7017): avc:  denied  { ioctl } for  pid=15190 comm="syz.3.4557" path="socket:[49639]" dev="sockfs" ino=49639 ioctlcmd=0x89a0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  221.507768][T15191] syzkaller0: entered allmulticast mode
[  221.515224][T15191] syzkaller0 (unregistering): left allmulticast mode
[  221.560599][   T29] audit: type=1400 audit(1768180593.578:7018): avc:  denied  { mount } for  pid=15194 comm="syz.8.4558" name="/" dev="configfs" ino=2044 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[  221.583722][   T29] audit: type=1400 audit(1768180593.578:7019): avc:  denied  { search } for  pid=15194 comm="syz.8.4558" name="/" dev="configfs" ino=2044 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  221.606133][   T29] audit: type=1400 audit(1768180593.578:7020): avc:  denied  { search } for  pid=15194 comm="syz.8.4558" name="/" dev="configfs" ino=2044 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  221.740011][T15203] loop4: detected capacity change from 0 to 4096
[  221.754339][T15203] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  221.768117][T15214] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=15214 comm=syz.0.4569
[  221.891799][T15227] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  221.916228][T15225] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  222.102444][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  222.975157][T15277] SELinux: failed to load policy
[  223.177818][T15290] __nla_validate_parse: 6 callbacks suppressed
[  223.177833][T15290] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4598'.
[  223.221164][T15290] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4598'.
[  223.953427][T15305] netlink: 'syz.1.4610': attribute type 10 has an invalid length.
[  223.961327][T15305] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4610'.
[  223.975732][T15307] netlink: 'syz.8.4608': attribute type 10 has an invalid length.
[  224.489413][T15346] netlink: 'syz.3.4624': attribute type 10 has an invalid length.
[  224.504015][T15346] team0 (unregistering): Port device team_slave_0 removed
[  224.519582][T15346] team0 (unregistering): Port device team_slave_1 removed
[  224.631609][T15359] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4633'.
[  224.665638][T15359] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4633'.
[  224.930029][T15379] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4640'.
[  225.367298][T15393] netlink: 'syz.0.4645': attribute type 10 has an invalid length.
[  225.718306][T15427] netlink: 'syz.8.4660': attribute type 10 has an invalid length.
[  225.861067][T15434] loop4: detected capacity change from 0 to 8192
[  225.879575][   T29] kauditd_printk_skb: 98 callbacks suppressed
[  225.879594][   T29] audit: type=1400 audit(1768180597.898:7119): avc:  denied  { mount } for  pid=15432 comm="syz.4.4663" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[  225.931238][   T29] audit: type=1400 audit(1768180597.948:7120): avc:  denied  { unmount } for  pid=3321 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[  226.174983][   T29] audit: type=1400 audit(1768180598.188:7121): avc:  denied  { block_suspend } for  pid=15452 comm="syz.1.4674" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  226.182371][T15455] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4673'.
[  226.209413][T15455] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4673'.
[  226.241775][T15458] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4675'.
[  226.250960][T15458] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4675'.
[  226.315880][   T29] audit: type=1400 audit(1768180598.328:7122): avc:  denied  { name_bind } for  pid=15464 comm="syz.0.4679" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[  226.337436][   T29] audit: type=1400 audit(1768180598.328:7123): avc:  denied  { node_bind } for  pid=15464 comm="syz.0.4679" saddr=::1 src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[  226.355001][T15465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  226.360255][   T29] audit: type=1400 audit(1768180598.358:7124): avc:  denied  { read write } for  pid=15464 comm="syz.0.4679" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  226.373402][T15465] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  226.391192][   T29] audit: type=1400 audit(1768180598.358:7125): avc:  denied  { open } for  pid=15464 comm="syz.0.4679" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  226.421951][   T29] audit: type=1400 audit(1768180598.358:7126): avc:  denied  { ioctl } for  pid=15464 comm="syz.0.4679" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  226.451639][   T29] audit: type=1400 audit(1768180598.468:7127): avc:  denied  { setopt } for  pid=15463 comm="syz.4.4678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  226.471343][   T29] audit: type=1400 audit(1768180598.468:7128): avc:  denied  { name_connect } for  pid=15463 comm="syz.4.4678" dest=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1
[  226.631412][T15481] netlink: 'syz.3.4694': attribute type 7 has an invalid length.
[  226.639272][T15481] netlink: 'syz.3.4694': attribute type 8 has an invalid length.
[  227.196278][T15522] loop3: detected capacity change from 0 to 512
[  227.244684][T15522] EXT4-fs (loop3): 1 truncate cleaned up
[  227.264014][T15522] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  227.329384][T12147] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  227.495708][T15532] loop3: detected capacity change from 0 to 8192
[  227.652156][T15547] sd 0:0:1:0: device reset
[  227.663913][T15543] loop4: detected capacity change from 0 to 128
[  227.760465][T15556] loop4: detected capacity change from 0 to 512
[  227.770897][T15556] EXT4-fs (loop4): 1 truncate cleaned up
[  227.784648][T15556] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  227.821878][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  228.232002][T15581] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  228.910620][T15581] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  228.968796][T15581] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  229.010594][T15581] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  229.084236][T10476] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  229.095821][T10459] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  229.107835][T10476] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  229.119252][T10476] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  229.154650][T15592] sd 0:0:1:0: device reset
[  229.204651][T15594] loop8: detected capacity change from 0 to 128
[  229.676980][T15629] netlink: 'syz.4.4745': attribute type 10 has an invalid length.
[  229.684954][T15629] __nla_validate_parse: 4 callbacks suppressed
[  229.684968][T15629] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4745'.
[  229.703099][T15629] : entered promiscuous mode
[  229.708784][T15629] bridge0: port 1() entered blocking state
[  229.714842][T15629] bridge0: port 1() entered disabled state
[  229.722612][T15629] : entered allmulticast mode
[  229.727505][T15629] bridge0: entered allmulticast mode
[  229.733406][T15629] : left allmulticast mode
[  229.738026][T15629] bridge0: left allmulticast mode
[  230.116032][T15650] Invalid ELF header magic: != ELF
[  230.125034][T15650] loop8: detected capacity change from 0 to 512
[  230.133160][T15650] EXT4-fs (loop8): orphan cleanup on readonly fs
[  230.140019][T15650] EXT4-fs error (device loop8): ext4_orphan_get:1417: comm syz.8.4752: bad orphan inode 13
[  230.150684][T15650] ext4_test_bit(bit=12, block=18) = 1
[  230.156124][T15650] is_bad_inode(inode)=0
[  230.160495][T15650] NEXT_ORPHAN(inode)=2130706432
[  230.165363][T15650] max_ino=32
[  230.168632][T15650] i_nlink=1
[  230.172456][T15650] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  230.187577][T15650] EXT4-fs (loop8): warning: mounting fs with errors, running e2fsck is recommended
[  230.209193][T15650] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  230.219502][T15650] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.4752: bg 0: block 248: padding at end of block bitmap is not set
[  230.238528][T15650] EXT4-fs error (device loop8): ext4_acquire_dquot:6986: comm syz.8.4752: Failed to acquire dquot type 1
[  230.275178][T15656] ref_ctr increment failed for inode: 0x114 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff8881045e0000
[  230.287739][T10192] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  230.301368][T15655] uprobe: syz.0.4753:15655 failed to unregister, leaking uprobe
[  230.492765][T15668] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4758'.
[  230.511552][T15671] serio: Serial port ttyS3
[  230.624657][T15680] loop4: detected capacity change from 0 to 512
[  230.651672][T15680] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  230.691210][T15680] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  230.707360][T15680] ext4 filesystem being mounted at /1053/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  230.735160][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  230.941542][T15694] ref_ctr increment failed for inode: 0x5b1 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff8881045e5e80
[  230.953690][T15693] uprobe: syz.3.4770:15693 failed to unregister, leaking uprobe
[  231.078841][   T29] kauditd_printk_skb: 61 callbacks suppressed
[  231.078860][   T29] audit: type=1400 audit(1768180603.098:7188): avc:  denied  { mount } for  pid=15697 comm="syz.4.4772" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[  231.119865][   T29] audit: type=1400 audit(1768180603.098:7189): avc:  denied  { unmount } for  pid=15697 comm="syz.4.4772" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[  231.388094][   T29] audit: type=1400 audit(1768180603.408:7190): avc:  denied  { ioctl } for  pid=15707 comm="syz.4.4775" path="socket:[51644]" dev="sockfs" ino=51644 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  231.429725][   T29] audit: type=1400 audit(1768180603.448:7191): avc:  denied  { bind } for  pid=15707 comm="syz.4.4775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  231.457110][T15712] serio: Serial port ttyS3
[  231.498176][   T29] audit: type=1400 audit(1768180603.518:7192): avc:  denied  { bind } for  pid=15713 comm="syz.4.4778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  231.520839][T15716] netlink: 'syz.8.4777': attribute type 10 has an invalid length.
[  231.528796][T15716] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4777'.
[  231.541453][   T29] audit: type=1400 audit(1768180603.538:7193): avc:  denied  { setopt } for  pid=15713 comm="syz.4.4778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  231.565491][T15716] : entered promiscuous mode
[  231.580035][T15716] bridge0: port 1() entered blocking state
[  231.586043][T15716] bridge0: port 1() entered disabled state
[  231.592488][T15716] : entered allmulticast mode
[  231.597401][T15716] bridge0: entered allmulticast mode
[  231.603389][T15716] : left allmulticast mode
[  231.608053][T15716] bridge0: left allmulticast mode
[  231.680880][   T29] audit: type=1400 audit(1768180603.698:7194): avc:  denied  { read write } for  pid=15725 comm="syz.8.4782" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  231.704349][   T29] audit: type=1400 audit(1768180603.698:7195): avc:  denied  { open } for  pid=15725 comm="syz.8.4782" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  231.727668][   T29] audit: type=1400 audit(1768180603.698:7196): avc:  denied  { ioctl } for  pid=15725 comm="syz.8.4782" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  231.783207][   T29] audit: type=1400 audit(1768180603.798:7197): avc:  denied  { bind } for  pid=15727 comm="syz.1.4783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  231.823960][T15730] ref_ctr increment failed for inode: 0x135b offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff8881045e57c0
[  231.835915][T15729] uprobe: syz.1.4785:15729 failed to unregister, leaking uprobe
[  231.956408][T15738] netlink: 'syz.1.4789': attribute type 30 has an invalid length.
[  231.964311][T15739] xt_CT: You must specify a L4 protocol and not use inversions on it
[  232.003123][T15744] serio: Serial port ttyS3
[  232.059099][T15746] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4794'.
[  232.085091][T15751] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4795'.
[  232.258788][T15754] serio: Serial port ttyS3
[  232.409200][T15770] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  232.432710][ T8235] IPVS: starting estimator thread 0...
[  232.479684][T15770] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  232.530738][T15772] IPVS: using max 1776 ests per chain, 88800 per kthread
[  232.579687][T15770] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  232.620626][T15770] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  232.681383][T10474] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  232.700098][T10474] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  232.731731][T10474] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  232.749928][T10474] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  232.970341][T15800] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4817'.
[  232.979573][T15800] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4817'.
[  233.009623][T15802] loop4: detected capacity change from 0 to 128
[  233.470015][T15818] netlink: 19 bytes leftover after parsing attributes in process `syz.4.4824'.
[  236.715717][T15823] loop3: detected capacity change from 0 to 2048
[  236.739044][T15823] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  236.973857][T15823] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  236.988795][T15823] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  237.001488][T15823] EXT4-fs (loop3): This should not happen!! Data will be lost
[  237.001488][T15823] 
[  237.011218][T15823] EXT4-fs (loop3): Total free blocks count 0
[  237.017357][T15823] EXT4-fs (loop3): Free/Dirty block details
[  237.023264][T15823] EXT4-fs (loop3): free_blocks=2415919104
[  237.029056][T15823] EXT4-fs (loop3): dirty_blocks=8208
[  237.034380][T15823] EXT4-fs (loop3): Block reservation details
[  237.040487][T15823] EXT4-fs (loop3): i_reserved_data_blocks=513
[  237.103020][T15834] loop4: detected capacity change from 0 to 128
[  237.116973][T10476] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28
[  237.198216][   T29] kauditd_printk_skb: 46 callbacks suppressed
[  237.198281][   T29] audit: type=1400 audit(1768180609.218:7244): avc:  denied  { read write } for  pid=15841 comm="syz.8.4832" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  237.245503][   T29] audit: type=1400 audit(1768180609.218:7245): avc:  denied  { open } for  pid=15841 comm="syz.8.4832" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  237.269302][   T29] audit: type=1400 audit(1768180609.248:7246): avc:  denied  { ioctl } for  pid=15841 comm="syz.8.4832" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  237.306776][T15840] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4831'.
[  237.315966][T15840] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4831'.
[  237.328716][T15840] geneve0: entered promiscuous mode
[  237.333988][T15840] geneve0: entered allmulticast mode
[  237.481216][   T29] audit: type=1400 audit(1768180609.498:7247): avc:  denied  { read } for  pid=15847 comm="syz.8.4834" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  237.504006][   T29] audit: type=1400 audit(1768180609.498:7248): avc:  denied  { open } for  pid=15847 comm="syz.8.4834" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  237.532334][T15850] Invalid ELF header magic: != ELF
[  237.579996][   T29] audit: type=1400 audit(1768180609.598:7249): avc:  denied  { read } for  pid=15847 comm="syz.8.4834" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  237.604363][   T29] audit: type=1400 audit(1768180609.598:7250): avc:  denied  { open } for  pid=15847 comm="syz.8.4834" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  237.644765][T15855] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4837'.
[  237.656491][T15853] ref_ctr increment failed for inode: 0x15eb offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff8881043aca40
[  237.659235][   T29] audit: type=1400 audit(1768180609.668:7251): avc:  denied  { ioctl } for  pid=15847 comm="syz.8.4834" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  237.686907][T15852] uprobe: syz.4.4848:15852 failed to unregister, leaking uprobe
[  237.748961][T15860] Invalid argument reading file caps for ./file0
[  237.748949][   T29] audit: type=1400 audit(1768180609.768:7252): avc:  denied  { execute_no_trans } for  pid=15858 comm="syz.3.4851" path="/286/file0" dev="tmpfs" ino=1505 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  237.800149][T15861] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  237.826694][T15861] tipc: Disabling bearer <eth:syzkaller0>
[  237.828880][T15866] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4842'.
[  237.845993][T15864] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  237.887427][   T29] audit: type=1400 audit(1768180609.898:7253): avc:  denied  { unmount } for  pid=3321 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  237.930587][T15864] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  237.965046][T15872] ref_ctr increment failed for inode: 0x138e offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff8881043ad7c0
[  237.977051][T15870] uprobe: syz.1.4856:15870 failed to unregister, leaking uprobe
[  237.999292][T15864] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  238.059821][T15864] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  238.118270][ T4347] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  238.138874][T10511] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  238.157321][T10511] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  238.183623][T10511] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  238.280574][T15883] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4852'.
[  238.559152][T15886] loop3: detected capacity change from 0 to 1024
[  238.600370][T15886] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  238.716104][T15891] chnl_net:caif_netlink_parms(): no params data found
[  238.774109][T15891] bridge0: port 1(bridge_slave_0) entered blocking state
[  238.781282][T15891] bridge0: port 1(bridge_slave_0) entered disabled state
[  238.813483][T15891] bridge_slave_0: entered allmulticast mode
[  238.820529][T15891] bridge_slave_0: entered promiscuous mode
[  238.830405][T15891] bridge0: port 2(bridge_slave_1) entered blocking state
[  238.837581][T15891] bridge0: port 2(bridge_slave_1) entered disabled state
[  238.844950][T15891] bridge_slave_1: entered allmulticast mode
[  238.851842][T15891] bridge_slave_1: entered promiscuous mode
[  238.858485][T15912] tipc: Started in network mode
[  238.863406][T15912] tipc: Node identity 9237b499a83f, cluster identity 4711
[  238.870718][T15912] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  238.894194][T15912] tipc: Disabling bearer <eth:syzkaller0>
[  238.912742][T15891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  238.913077][T12147] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  238.926627][T15891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  238.972472][T15891] team0: Port device team_slave_0 added
[  238.979628][T15891] team0: Port device team_slave_1 added
[  239.005528][T15891] batman_adv: batadv0: Adding interface: batadv_slave_0
[  239.012750][T15891] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  239.038824][T15891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  239.050756][T15891] batman_adv: batadv0: Adding interface: batadv_slave_1
[  239.057833][T15891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  239.083930][T15891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  239.100132][T15917] loop3: detected capacity change from 0 to 2048
[  239.140075][T15891] hsr_slave_0: entered promiscuous mode
[  239.146620][T15891] hsr_slave_1: entered promiscuous mode
[  239.153200][T15917] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  239.165810][T15891] debugfs: 'hsr0' already exists in 'hsr'
[  239.171606][T15891] Cannot create hsr debugfs directory
[  239.244354][T15917] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  239.280729][T15917] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 632 with error 28
[  239.293266][T15917] EXT4-fs (loop3): This should not happen!! Data will be lost
[  239.293266][T15917] 
[  239.303119][T15917] EXT4-fs (loop3): Total free blocks count 0
[  239.309191][T15917] EXT4-fs (loop3): Free/Dirty block details
[  239.315107][T15917] EXT4-fs (loop3): free_blocks=2415919104
[  239.320892][T15917] EXT4-fs (loop3): dirty_blocks=640
[  239.326468][T15917] EXT4-fs (loop3): Block reservation details
[  239.332584][T15917] EXT4-fs (loop3): i_reserved_data_blocks=40
[  239.513139][T10498] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 632 with error 28
[  239.525745][T15891] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  239.535000][T15891] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  239.547762][T15891] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  239.557415][T15891] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  239.615633][T15891] 8021q: adding VLAN 0 to HW filter on device bond0
[  239.634214][T15891] 8021q: adding VLAN 0 to HW filter on device team0
[  239.645584][ T1975] bridge0: port 1(bridge_slave_0) entered blocking state
[  239.652885][ T1975] bridge0: port 1(bridge_slave_0) entered forwarding state
[  239.664169][T10474] bridge0: port 2(bridge_slave_1) entered blocking state
[  239.671246][T10474] bridge0: port 2(bridge_slave_1) entered forwarding state
[  239.738507][T15891] 8021q: adding VLAN 0 to HW filter on device batadv0
[  239.849097][T15891] veth0_vlan: entered promiscuous mode
[  239.857539][T15891] veth1_vlan: entered promiscuous mode
[  239.873554][T15891] veth0_macvtap: entered promiscuous mode
[  239.881039][T15891] veth1_macvtap: entered promiscuous mode
[  239.894433][T15891] batman_adv: batadv0: Interface activated: batadv_slave_0
[  239.905250][T15891] batman_adv: batadv0: Interface activated: batadv_slave_1
[  239.916935][T10474] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  239.926097][T10474] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  239.935650][T10474] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  239.946300][T10474] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  240.019193][T15951] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  240.056078][T15947] loop6: detected capacity change from 0 to 8192
[  240.100255][T15951] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  240.152801][T15965] ref_ctr increment failed for inode: 0x17 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff8881045e6540
[  240.166186][T15951] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  240.185264][T15964] uprobe: syz.6.4860:15964 failed to unregister, leaking uprobe
[  240.219680][T15951] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  240.243473][T15972] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  240.320747][T15972] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  240.380272][T15972] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  240.396474][T15977] loop8: detected capacity change from 0 to 128
[  240.405702][T15977] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  240.418574][T15977] ext4 filesystem being mounted at /445/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  240.439085][T15972] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  240.486502][ T1975] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  240.501536][ T1975] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  240.514796][T10192] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  240.526437][ T1975] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  240.534882][ T1975] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  240.574138][T15983] loop8: detected capacity change from 0 to 1024
[  240.581318][T15983] EXT4-fs: Ignoring removed mblk_io_submit option
[  240.600623][T15983] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  240.780423][T10192] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  241.273836][T16022] loop6: detected capacity change from 0 to 1024
[  241.281524][T16022] EXT4-fs: Ignoring removed mblk_io_submit option
[  241.300333][T16022] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  241.354858][T16031] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4893'.
[  241.366866][T16031] geneve2: entered promiscuous mode
[  241.373417][T10530] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  241.401786][T10530] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  241.432077][T10530] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  241.458551][T10530] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  241.531959][T15891] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  242.814367][T10459] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  242.826416][T10459] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  242.838730][T10459] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  242.863915][T10459] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  243.017605][ T3782] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  243.062582][   T29] kauditd_printk_skb: 48 callbacks suppressed
[  243.062600][   T29] audit: type=1400 audit(1768180615.078:7302): avc:  denied  { create } for  pid=16079 comm="syz.3.4921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  243.095911][   T29] audit: type=1400 audit(1768180615.108:7303): avc:  denied  { create } for  pid=16075 comm="syz.8.4913" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1
[  243.215226][T16088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  243.216021][   T29] audit: type=1400 audit(1768180615.228:7304): avc:  denied  { create } for  pid=16086 comm="syz.3.4918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  243.243777][T16088] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  243.254138][T16091] netlink: 7 bytes leftover after parsing attributes in process `syz.8.4920'.
[  243.287398][   T29] audit: type=1400 audit(1768180615.288:7305): avc:  denied  { watch watch_reads } for  pid=16087 comm="syz.6.4919" path="/12/file0" dev="tmpfs" ino=81 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  243.353329][T16103] netlink: 96 bytes leftover after parsing attributes in process `syz.8.4926'.
[  243.391727][T16107] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4928'.
[  243.414661][T16107] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4928'.
[  243.548715][   T29] audit: type=1326 audit(1768180615.568:7306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16095 comm="syz.3.4923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d72e6f749 code=0x7fc00000
[  243.623089][   T29] audit: type=1326 audit(1768180615.638:7307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16120 comm="syz.1.4932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f029d93f749 code=0x7ffc0000
[  243.648264][   T29] audit: type=1326 audit(1768180615.638:7308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16120 comm="syz.1.4932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f029d93f749 code=0x7ffc0000
[  243.671982][   T29] audit: type=1326 audit(1768180615.668:7309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16120 comm="syz.1.4932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f029d93f749 code=0x7ffc0000
[  243.695436][   T29] audit: type=1326 audit(1768180615.668:7310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16120 comm="syz.1.4932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f029d93f749 code=0x7ffc0000
[  243.719043][   T29] audit: type=1326 audit(1768180615.668:7311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16120 comm="syz.1.4932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f029d93f749 code=0x7ffc0000
[  243.822851][T16128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  243.879172][T16128] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  243.918705][T16135] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4938'.
[  243.927568][T16132] loop6: detected capacity change from 0 to 512
[  243.979917][T16132] EXT4-fs (loop6): orphan cleanup on readonly fs
[  243.989786][T16132] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.4937: bg 0: block 127: padding at end of block bitmap is not set
[  244.014326][T16132] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  244.031767][T16132] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #15: comm syz.6.4937: corrupted inode contents
[  244.044144][T16132] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem
[  244.053119][T16132] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #15: comm syz.6.4937: corrupted inode contents
[  244.065302][T16132] EXT4-fs error (device loop6): ext4_evict_inode:301: inode #15: comm syz.6.4937: mark_inode_dirty error
[  244.076988][T16132] EXT4-fs (loop6): 1 orphan inode deleted
[  244.086663][T16132] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  244.122719][T15891] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  244.220569][T16151] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  244.243345][T16156] netlink: 664 bytes leftover after parsing attributes in process `syz.6.4947'.
[  244.433353][T16175] loop3: detected capacity change from 0 to 1024
[  244.440723][T16175] EXT4-fs: Ignoring removed mblk_io_submit option
[  244.460665][T16175] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  244.756714][T16193] netlink: 'syz.8.4960': attribute type 1 has an invalid length.
[  244.790924][T16193] 8021q: adding VLAN 0 to HW filter on device bond1
[  244.814912][T16198] bond1: (slave ip6gretap0): making interface the new active one
[  244.843838][T16198] bond1: (slave ip6gretap0): Enslaving as an active interface with an up link
[  244.878121][T12147] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  244.968685][T16208] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  245.024594][T16208] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  245.063470][T16216] loop3: detected capacity change from 0 to 512
[  245.070565][T16216] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  245.090998][T16216] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548)
[  245.103658][T16208] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  245.115574][T16216] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548)
[  245.124390][T16216] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548)
[  245.132772][T16216] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548)
[  245.141289][T16216] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548)
[  245.154149][T16208] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  245.165928][T16216] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548)
[  245.174345][T16216] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548)
[  245.183232][T16216] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548)
[  245.201401][ T4347] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  245.214174][ T4347] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  245.227471][T16216] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548)
[  245.240548][ T4347] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  245.249555][T16216] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548)
[  245.267336][ T4347] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  245.275939][T16216] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548)
[  245.284306][T16216] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548)
[  245.292690][T16216] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 548)
[  245.301863][T16216] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548)
[  245.543500][T16236] pim6reg1: entered promiscuous mode
[  245.549023][T16236] pim6reg1: entered allmulticast mode
[  245.845212][T16238] loop6: detected capacity change from 0 to 1024
[  245.883336][T16238] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  245.920491][T16263] block device autoloading is deprecated and will be removed.
[  246.057631][T15891] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  246.469967][T16328] netlink: 'syz.6.5018': attribute type 12 has an invalid length.
[  246.861407][T16341] netlink: 'syz.6.5022': attribute type 29 has an invalid length.
[  246.871173][T16341] netlink: 'syz.6.5022': attribute type 29 has an invalid length.
[  246.883289][T16341] netlink: 500 bytes leftover after parsing attributes in process `syz.6.5022'.
[  247.077352][T16359] loop6: detected capacity change from 0 to 4096
[  247.087081][T16359] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  247.126195][T15891] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  247.168025][T16369] loop8: detected capacity change from 0 to 512
[  247.176679][T16369] EXT4-fs error (device loop8): ext4_xattr_inode_iget:446: comm syz.8.5035: error while reading EA inode 32 err=-116
[  247.189724][T16369] EXT4-fs warning (device loop8): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  247.203257][T16369] EXT4-fs error (device loop8): ext4_xattr_inode_iget:446: comm syz.8.5035: error while reading EA inode 32 err=-116
[  247.216273][T16369] EXT4-fs (loop8): 1 orphan inode deleted
[  247.222682][T16369] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  247.248393][T10192] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  247.432151][T16392] Invalid argument reading file caps for ./file0
[  247.480340][T16394] loop0: detected capacity change from 0 to 512
[  247.496008][T16394] EXT4-fs: Ignoring removed nobh option
[  247.514930][T16394] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  247.526540][T16394] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it
[  247.536698][T16394] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.5046: Corrupt directory, running e2fsck is recommended
[  247.550797][T16394] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117
[  247.559151][T16394] EXT4-fs error (device loop0): ext4_iget_extra_inode:5073: inode #15: comm syz.0.5046: corrupted in-inode xattr: invalid ea_ino
[  247.573106][T16394] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.5046: couldn't read orphan inode 15 (err -117)
[  247.585811][T16394] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  247.601534][T16394] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  247.613193][T16394] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it
[  247.623324][T16394] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.5046: Corrupt directory, running e2fsck is recommended
[  247.638388][T16394] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  247.650051][T16394] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it
[  247.660202][T16394] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.5046: Corrupt directory, running e2fsck is recommended
[  247.697696][T16394] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  247.709314][T16394] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it
[  247.719463][T16394] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.5046: Corrupt directory, running e2fsck is recommended
[  247.745826][T16394] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  247.784885][T14864] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  247.851309][T16408] veth2: entered promiscuous mode
[  247.894507][T16412] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  247.930962][T16412] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  247.990535][T16412] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  248.059300][T16422] loop3: detected capacity change from 0 to 1024
[  248.067427][T16412] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  248.089426][T16422] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  248.126719][   T52] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  248.139863][   T52] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  248.149407][T16422] EXT4-fs error (device loop3): __ext4_new_inode:1073: comm syz.3.5058: reserved inode found cleared - inode=2
[  248.172848][   T52] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  248.185467][   T52] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  248.195522][T12147] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  248.221624][T16432] ALSA: seq fatal error: cannot create timer (-22)
[  248.260825][   T29] kauditd_printk_skb: 218 callbacks suppressed
[  248.260844][   T29] audit: type=1326 audit(1768180620.278:7530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16435 comm="syz.0.5064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f010890f749 code=0x7ffc0000
[  248.319944][   T29] audit: type=1326 audit(1768180620.308:7531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16435 comm="syz.0.5064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f010890f749 code=0x7ffc0000
[  248.343835][   T29] audit: type=1326 audit(1768180620.308:7532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16435 comm="syz.0.5064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f010890f749 code=0x7ffc0000
[  248.367517][   T29] audit: type=1326 audit(1768180620.308:7533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16435 comm="syz.0.5064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f010890f749 code=0x7ffc0000
[  248.391396][   T29] audit: type=1326 audit(1768180620.308:7534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16435 comm="syz.0.5064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f010890f749 code=0x7ffc0000
[  248.412773][T16444] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5068'.
[  248.415411][   T29] audit: type=1326 audit(1768180620.308:7535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16435 comm="syz.0.5064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f010890f749 code=0x7ffc0000
[  248.447574][   T29] audit: type=1326 audit(1768180620.308:7536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16435 comm="syz.0.5064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f010890f749 code=0x7ffc0000
[  248.471271][   T29] audit: type=1326 audit(1768180620.308:7537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16435 comm="syz.0.5064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f010890f749 code=0x7ffc0000
[  248.494896][   T29] audit: type=1326 audit(1768180620.308:7538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16435 comm="syz.0.5064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f010890f749 code=0x7ffc0000
[  248.518412][   T29] audit: type=1326 audit(1768180620.308:7539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16435 comm="syz.0.5064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f010890f749 code=0x7ffc0000
[  248.542719][T16444] hsr_slave_0: left promiscuous mode
[  248.563005][T16444] hsr_slave_1: left promiscuous mode
[  248.625957][T16452] bridge0: port 1(macvtap1) entered blocking state
[  248.632822][T16452] bridge0: port 1(macvtap1) entered disabled state
[  248.640243][T16452] macvtap1: entered allmulticast mode
[  248.645706][T16452] bridge0: entered allmulticast mode
[  248.651953][T16452] macvtap1: left allmulticast mode
[  248.657224][T16452] bridge0: left allmulticast mode
[  248.675096][T16455] loop6: detected capacity change from 0 to 512
[  248.686937][T16455] EXT4-fs (loop6): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  248.711524][T16455] EXT4-fs warning (device loop6): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  248.737234][T16455] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended
[  248.784518][T16455] EXT4-fs warning (device loop6): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  248.824652][T15891] EXT4-fs (loop6): unmounting filesystem 00800000-0000-0000-0000-000000000000.
[  248.840582][T16466] syzkaller1: entered promiscuous mode
[  248.846117][T16466] syzkaller1: entered allmulticast mode
[  248.907924][T16469] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  248.961660][T16469] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  249.019541][T16469] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  249.089791][T16469] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  249.160659][T10463] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  249.185818][T10463] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  249.202465][T16490] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=16490 comm=syz.1.5085
[  249.215148][T16490] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=16490 comm=syz.1.5085
[  249.223764][T10463] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  249.242579][T10463] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  249.448537][T16512] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5095'.
[  249.457662][T16512] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5095'.
[  249.490082][T16516] loop8: detected capacity change from 0 to 512
[  249.496956][T16516] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  249.508717][T16516] EXT4-fs (loop8): 1 truncate cleaned up
[  249.514906][T16516] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  249.541302][T10192] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  249.591227][T16523] loop8: detected capacity change from 0 to 128
[  250.028430][T16542] loop8: detected capacity change from 0 to 1024
[  250.053823][T16542] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  250.133650][T16549] loop6: detected capacity change from 0 to 8192
[  250.250485][T15891] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000e1b1)
[  250.258543][T15891] FAT-fs (loop6): Filesystem has been set read-only
[  250.326684][T16554] loop6: detected capacity change from 0 to 1024
[  250.334398][T16554] EXT4-fs: inline encryption not supported
[  250.340664][T16554] EXT4-fs: Ignoring removed mblk_io_submit option
[  250.359010][T16554] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  250.391563][T16554] EXT4-fs error (device loop6): mb_free_blocks:2037: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt.
[  250.514513][T15891] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  250.565085][T16560] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5115'.
[  250.617975][T16564] loop6: detected capacity change from 0 to 1024
[  250.624952][T16564] EXT4-fs: inline encryption not supported
[  250.639792][T16564] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  250.738003][T15891] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  250.832451][T16570] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  250.889552][T16570] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  250.949923][T16570] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  251.039119][T16570] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  251.086710][T10192] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  251.096506][T16579] xt_hashlimit: max too large, truncated to 1048576
[  251.111586][ T1975] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  251.132199][ T1975] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  251.144788][ T1975] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  251.153387][ T1975] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  251.209199][T16585] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5125'.
[  251.218316][T16585] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5125'.
[  251.256561][T16587] hub 9-0:1.0: USB hub found
[  251.262227][T16587] hub 9-0:1.0: 8 ports detected
[  251.266667][T16589] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5126'.
[  251.637218][T16607] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5135'.
[  251.647200][T16607] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5135'.
[  252.621700][T16640] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5148'.
[  252.680303][T16642] SELinux: ebitmap start bit (280) is not a multiple of the map unit size (64)
[  252.692235][T16643] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=16643 comm=syz.8.5148
[  252.737736][T16642] SELinux: failed to load policy
[  252.934619][T16657] netlink: 'syz.0.5156': attribute type 3 has an invalid length.
[  252.942578][T16657] netlink: 'syz.0.5156': attribute type 1 has an invalid length.
[  253.090570][T16666] loop0: detected capacity change from 0 to 1024
[  253.119239][T16666] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  253.347373][   T44] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  253.458641][T16666] ==================================================================
[  253.466796][T16666] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark
[  253.473963][T16666] 
[  253.476311][T16666] write to 0xffff88811a64b304 of 4 bytes by task 16671 on cpu 1:
[  253.484051][T16666]  xas_set_mark+0x12b/0x140
[  253.488593][T16666]  __folio_start_writeback+0x155/0x340
[  253.494090][T16666]  ext4_bio_write_folio+0x5ad/0x9f0
[  253.499330][T16666]  mpage_process_page_bufs+0x4a1/0x620
[  253.504819][T16666]  mpage_prepare_extent_to_map+0x7a3/0xc20
[  253.510657][T16666]  ext4_do_writepages+0x9f6/0x27e0
[  253.515821][T16666]  ext4_writepages+0x179/0x300
[  253.520615][T16666]  do_writepages+0x1c6/0x310
[  253.525240][T16666]  file_write_and_wait_range+0x156/0x2c0
[  253.530905][T16666]  generic_buffers_fsync_noflush+0x45/0x130
[  253.536845][T16666]  ext4_sync_file+0x1ab/0x690
[  253.541547][T16666]  vfs_fsync_range+0x10d/0x130
[  253.546342][T16666]  ext4_buffered_write_iter+0x34f/0x3c0
[  253.552014][T16666]  ext4_file_write_iter+0x387/0xf60
[  253.557250][T16666]  iter_file_splice_write+0x66b/0xa20
[  253.562646][T16666]  direct_splice_actor+0x156/0x2a0
[  253.567780][T16666]  splice_direct_to_actor+0x312/0x680
[  253.573434][T16666]  do_splice_direct+0xda/0x150
[  253.578225][T16666]  do_sendfile+0x380/0x650
[  253.582678][T16666]  __x64_sys_sendfile64+0x105/0x150
[  253.587915][T16666]  x64_sys_call+0x2db1/0x3000
[  253.592625][T16666]  do_syscall_64+0xca/0x2b0
[  253.597165][T16666]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  253.603086][T16666] 
[  253.605432][T16666] read to 0xffff88811a64b304 of 4 bytes by task 16666 on cpu 0:
[  253.613081][T16666]  xas_find_marked+0x5dc/0x620
[  253.617884][T16666]  find_get_entry+0x5d/0x380
[  253.622593][T16666]  filemap_get_folios_tag+0x92/0x210
[  253.627920][T16666]  mpage_prepare_extent_to_map+0x308/0xc20
[  253.633797][T16666]  ext4_do_writepages+0x9f6/0x27e0
[  253.638961][T16666]  ext4_writepages+0x179/0x300
[  253.643766][T16666]  do_writepages+0x1c6/0x310
[  253.648394][T16666]  file_write_and_wait_range+0x156/0x2c0
[  253.654050][T16666]  generic_buffers_fsync_noflush+0x45/0x130
[  253.659978][T16666]  ext4_sync_file+0x1ab/0x690
[  253.664692][T16666]  vfs_fsync_range+0x10d/0x130
[  253.669488][T16666]  ext4_buffered_write_iter+0x34f/0x3c0
[  253.675079][T16666]  ext4_file_write_iter+0x387/0xf60
[  253.680321][T16666]  iter_file_splice_write+0x66b/0xa20
[  253.685732][T16666]  direct_splice_actor+0x156/0x2a0
[  253.690870][T16666]  splice_direct_to_actor+0x312/0x680
[  253.696269][T16666]  do_splice_direct+0xda/0x150
[  253.701059][T16666]  do_sendfile+0x380/0x650
[  253.705506][T16666]  __x64_sys_sendfile64+0x105/0x150
[  253.710733][T16666]  x64_sys_call+0x2db1/0x3000
[  253.715454][T16666]  do_syscall_64+0xca/0x2b0
[  253.720005][T16666]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  253.725937][T16666] 
[  253.728282][T16666] value changed: 0x0a000021 -> 0x04000021
[  253.734026][T16666] 
[  253.736366][T16666] Reported by Kernel Concurrency Sanitizer on:
[  253.742550][T16666] CPU: 0 UID: 0 PID: 16666 Comm: syz.0.5159 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  253.753957][T16666] Tainted: [W]=WARN
[  253.757788][T16666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  253.767861][T16666] ==================================================================
[  253.994247][T14864] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.