last executing test programs:

36.926450877s ago: executing program 3 (id=408):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@mss, @sack_perm, @timestamp, @mss={0x2, 0x1}, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp], 0x8)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25)

35.867670806s ago: executing program 3 (id=422):
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
listen(r0, 0x101)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
sendmmsg$inet(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f0000001700)="b8b0da9ce17fc488e9efd5ee70a5af502d79625cc12c94a1fff9af0f783e4fe1924754c2ec05ceaad9c44e28c823f4314678d681", 0x34}], 0x1}}, {{0x0, 0x0, &(0x7f0000002b80)=[{0x0}], 0x1}}], 0x2, 0x40884)

35.688148527s ago: executing program 3 (id=427):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)}, &(0x7f0000000180)=0x10)
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000002940), 0x101000, 0x0)
lseek(r1, 0xf3, 0x2)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000080), &(0x7f0000000340)='%pS    \x00'}, 0x20)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)=@assoc_value, 0x8)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000280)={'#! ', '', [{0x20, '\xef-'}, {0x20, '\x00'}, {0x20, 'sched_switch\x00'}, {0x20, '%pS    \x00'}]}, 0x20)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

34.682148236s ago: executing program 3 (id=438):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904, @void, @value}, 0xc3)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000000)={[{@nodiscard}, {@noinit_itable}, {@barrier_val={'barrier', 0x3d, 0x40}}, {@grpjquota}, {@errors_remount}, {@init_itable}]}, 0x1, 0x4c5, &(0x7f0000000540)="$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")
mount$nfs(&(0x7f00000000c0)='\xb2\x83\x87J9I\xc3i\xe4\x81\xc5:\xccLD\x9d\xd8\xc7\x90v:\x00\x00\x01\x00\x00\x00\x00\x00h#\xfacl\x01\x8cC\x1f|\xa5\xcb\x8f\xe5WJ\x00>\xf2\xd6\t\xf4I\xc5\xcb\x15A\xb5\xbbG\x9e\xea\xc4\x03\xf2\xf5\xf4\xa1\x9c\xe0Q<=\xb1\x9b,vjn\x8b[0\xd9\xcb\xf8\x1a\xdf\x9e\x89\x91H\xf4\x11p\xd2\x96\x82\xd9)6\xcdm\x88\x91\x1dv\xff\xb3\xad\x8b\x82\xcdR\x98\x80k1\xce}\x90\xe8e\xdb\xb1HL\x1d%\xc4\x1atCt\xb4\x00\xb29E\x87-\xd1\xcd\xf3w\"\v\xf3`\x06x\xb4TQ\x8dB\a\xe4\xe2\xf8\xd6%C\xf9\xd6~\xf80\xfcE\xa0\x80\x0e\"\xb0\a\x88\xbc\x7fbn\x02\xeb\x9b\x04\x1d\t', 0x0, 0x0, 0x123b058, 0x0)
creat(&(0x7f0000000000)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000340)='./bus\x00', 0x0, 0x1000, 0x0)
r2 = open(&(0x7f00000005c0)='./bus\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r2, 0x4c02, &(0x7f0000000140))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb01001800000000000000140000001400000005000000000000000100000d0a050000000000000300"], &(0x7f0000000f40)=""/4089, 0x31, 0xff9, 0x1, 0x0, 0x0, @void, @value}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000580)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_SIGNAL_INFO(r4, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x3f2, 0x400, 0x9, 0x25dfdbfe, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20004010}, 0x1)

34.15734381s ago: executing program 3 (id=450):
syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaa270005d70000fe08060001"], 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14)

32.554263363s ago: executing program 3 (id=466):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
pipe(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETSF(r3, 0x5409, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x8001000000000000, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x8, 0x3, 0x240, 0xd0, 0x11, 0x148, 0xd0, 0x0, 0x1a8, 0x2a8, 0x2a8, 0x1a8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x5, 0x9, 0x2, 0x3]}, {0xffffffffffffffff, [0x11, 0x2000000, 0x2]}}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10)
memfd_secret(0x80000)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, 0x0, 0x0)
sendto$inet6(r4, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
shutdown(r4, 0x1)
ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000080))
splice(r4, 0x0, r2, 0x0, 0x406f413, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
r10 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
close_range(r9, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, 0x0, &(0x7f0000000240))
setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)

32.526316214s ago: executing program 32 (id=466):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
pipe(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETSF(r3, 0x5409, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x8001000000000000, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x8, 0x3, 0x240, 0xd0, 0x11, 0x148, 0xd0, 0x0, 0x1a8, 0x2a8, 0x2a8, 0x1a8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x5, 0x9, 0x2, 0x3]}, {0xffffffffffffffff, [0x11, 0x2000000, 0x2]}}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10)
memfd_secret(0x80000)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, 0x0, 0x0)
sendto$inet6(r4, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
shutdown(r4, 0x1)
ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000080))
splice(r4, 0x0, r2, 0x0, 0x406f413, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
r10 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
close_range(r9, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, 0x0, &(0x7f0000000240))
setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)

2.871665166s ago: executing program 2 (id=786):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00bc"], 0x40}}, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x80000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x47, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x80000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380))
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000040), &(0x7f0000000280)='%pS    \x00'}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', 0xffffffffffffffff, 0x0, 0x1ff}, 0x18)
r3 = getpid()
r4 = syz_pidfd_open(r3, 0x0)
setns(r4, 0x24020000)
syz_clone(0xf5982500, 0x0, 0x0, 0x0, 0x0, 0x0)

2.42295795s ago: executing program 2 (id=791):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4080) (async)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4080)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=<r2=>r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10)
socketpair(0x1d, 0x2, 0x2, &(0x7f0000000000)={0x0, 0x0})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0}, 0x18)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'})
socket$netlink(0x10, 0x3, 0x4) (async)
socket$netlink(0x10, 0x3, 0x4)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRES32=r2], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r7}, 0x0, &(0x7f0000000040)=r5}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r8}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r8}, 0x10)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)

1.972769054s ago: executing program 5 (id=793):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000cc0)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000022007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10)
lsm_get_self_attr(0x66, &(0x7f0000001180)={0x0, 0x0, 0x1020, 0x1000, ""/4096}, &(0x7f0000000d40)=0x1020, 0x0)

1.950305544s ago: executing program 2 (id=794):
socket$nl_route(0x10, 0x3, 0x0)
open(&(0x7f0000000180)='./bus\x00', 0x14957e, 0x0)
socket$packet(0x11, 0xa, 0x300)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
socket$inet(0x2, 0x4000000000000001, 0x0)
socket(0x840000000002, 0x3, 0x100)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48)
socket$inet_dccp(0x2, 0x6, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff08000900fcfc0000080011000000000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0)

1.895091434s ago: executing program 1 (id=795):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000001000000080000000c"], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{r0}, &(0x7f00000005c0), &(0x7f0000000600)='%-5lx  \x00'}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x18)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$procfs(0xffffff9c, &(0x7f0000000280)='/proc/sysvipc/msg\x00', 0x0, 0x0)
waitid(0x0, 0x0, 0x0, 0x2000000e, 0x0)

1.843064335s ago: executing program 0 (id=796):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x9)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000980)='sys_enter\x00', r2}, 0x18)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
waitid(0x0, 0x0, 0x0, 0x2000000e, 0x0)

1.748382496s ago: executing program 5 (id=797):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1e000000000000000100000007"], 0x50)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000041000000850000007d00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x2111, 0x300, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8911, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf\xc8>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5<J\x1f\xba\xfc\x90(\x985\x93\xa8\xd4\xf0\xbdTy\x18\xc8\xa0\xbb\x99\x8c\xe0Q\xffCl\xbdX~3\xa1\xa2\xf4\xd9\xf7\xc7\xfb\xce\x959x\xfeW\r\xf0{\xcaT\xecp)=\x9d\xdfG8\xa1\xe3=\xa6\x00\x98\xc1\xb3\x91-\xab\'W\x8al?d<JN\xcb\xd4H\xb0_jO\xf3\x90\xe8/l\xdfg)\x8d#\xfdo\xa9L\xdeA*\xec\xa1\x14,\xe8\x8d^\xb9r=\xc0\x18\xd4\x11dU[Ry\xed\xd6\x97\x8a\xe8\xca\x99\x10\x8e\xc8P\xa3\xae/\xdaof\x06\x7f\xf7\x80$f\b\x92\xae\xeb\xdd\"\x89\xb8\xf0\xc3\b\x00\x00\x00\x00\a\xf6\xfc\x1d\xd4\x893\xeb)\xc1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00O!\xd2q\xda}\xe2\xa2\xfe\xfd)\\\xdf\x9aN\\\xaeyc\xe4g\xc0\x8a\n\v{\xa9H\\\xd1\x9d')
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/zoneinfo\x00', 0x0, 0x0)
sendfile(r0, r5, 0x0, 0x20000023896)

1.747843466s ago: executing program 2 (id=798):
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005000000", @ANYRES32, @ANYBLOB="000008000000000000edffffffffffffff000000", @ANYRES32=0x0, @ANYRES32, @ANYRES16=0x0], 0x48)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x2}}, './bus\x00'})
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x3, 0x0}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100000, 0xfff7fffffffffffe, 0x2c99, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffff7fffffff, 0xffffffffffffffff, 0x2)
r2 = socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x3838030, &(0x7f0000000580), 0x1, 0x503, &(0x7f0000000880)="$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")
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kfree\x00'}, 0x18)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f00000004c0), 0x208e24b)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil)
brk(0x20001000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r4, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
getrandom(&(0x7f0000000040)=""/133, 0xfffffffffffffdde, 0x2)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="3c0000001000810526bd70000000000000000000", @ANYRES32=r0, @ANYBLOB="02200000200000001c0012800b00010062726964676500000c0002800600270000000000828c6e00b3181e9a875a7ebb426426743303b3b28144f3f0171ac7725799444bf4cd45973f063fc1d0820b46e403fca8e6b8aa7e0d18a3030b58552ca3fc9036dbbf791207bb42aa025bb703858a09d56d6c5ce2c350593a5dccc5f8e6a15757c3e6fec6e6d9a0060200d0dabd8be5e3f7b13e908e8e82808587a106323177ec668ab7d1fffffc8ec6783e73604f99ebd60dc09f38eebd044318c9053e57459c55a85f625a0c0ad821f57d0c6acb3bd14bbaee126ccaf1cf41d234e751ed332c54a8d63e8a1a5dfdab346d0ee5664823062ea6a5e546cb48388353a4592980713a730691157b89b0c212e44b0939f2b474fe5370784ed62c58e051f83cef24f7f163670ccbed0ef046564ceaf559fe744077256395bdc3b237d82c6fecd86a04cd7010d6f24fd64480001f1dd8fb41be8e6440eb002f7190b3f5b81f82008765753b3eb7947afe7c95b46d98643a4325c539819dfedc"], 0x3c}, 0x1, 0x0, 0x0, 0x20040000}, 0x24044010)
brk(0xe)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000340), 0xfd, 0x50c, &(0x7f0000001580)="$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")

1.729494426s ago: executing program 4 (id=799):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000004180)=ANY=[@ANYBLOB="020000000400000007000000020000000010"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10)
fgetxattr(0xffffffffffffffff, &(0x7f0000000040)=@known='system.sockprotoname\x00', &(0x7f0000000280)=""/102, 0x66)

1.514470418s ago: executing program 4 (id=800):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c0, 0x1f0, 0x168, 0x9, 0x0, 0xb, 0x1f0, 0x250, 0x250, 0x1f0, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c, 0x0, 0x0, 0x20}, 0x6000000, 0xa8, 0xf0, 0x0, {0x0, 0x28e}}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x320)

1.444255809s ago: executing program 0 (id=801):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'})
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000340)='GPL\x00', 0x2, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x18)
add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x40)
flock(r3, 0x1)
r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
flock(r4, 0x2)
flock(r4, 0x2)
close_range(r2, 0xffffffffffffffff, 0x0)

1.433908088s ago: executing program 1 (id=802):
syz_io_uring_setup(0x4aa, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100020, 0xfffffffffffffe00, 0x0, 0x6, 0x3, 0x0, 0xa, 0x0, 0x0, 0x0, 0x12}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(0xffffffffffffffff, 0x40049366, 0x0)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000900000044000380080001"], 0x58}}, 0x0)
r3 = creat(&(0x7f0000000140)='./bus\x00', 0x4)
r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xd4}}, 0x20050800)
pipe(&(0x7f0000000000))
socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x3)
ioctl$KDSKBENT(r5, 0x4b47, &(0x7f0000000400)={0x0, 0x7f, 0x700})
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={&(0x7f00000001c0)="7cc089d57c42a1136ba63ab1c439b16ab6f45d22f834a323b03192", &(0x7f0000000340)=""/55, &(0x7f0000000380)="1f69e1fc261f700584fbaabb439d2fcc55685f662d4c3edb46691e8db7af5e5673a255e938d293255979aafaaef300d81de5d3b1b5bcc2014b6154118e1dcc205232e3489afbc6a7378ee11debe0c56060abcca87a878d78eef9b6379cec1c0ec5a435c248c2d6ba1c8f218b056c19e75480e0df311ac003899aaa9cadb9f112fbc7a8c842de9905a25b52e540b48adca5bba6bd8bceb963ff44087fa12b8f73ce347573ac1b3a1065a71f4646529255f80d3325a6d2072c78", &(0x7f0000000440)="88846f61773a9e83c927c4b2eadbbab79e81916aa97566922568620c0b8b", 0x0, r3, 0x4}, 0x38)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000640), r7)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000600), 0xca87, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000003d0007010000000000000000047c0000040008800c0001"], 0x34}}, 0xc000)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="ef000000000000458ca09f00008000001875957b71fe0c03e8989dd30000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300"/24, @ANYRES32=r4, @ANYBLOB], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0xb, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2)

1.22195897s ago: executing program 5 (id=803):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0), &(0x7f00000002c0), 0x9, r2}, 0x38)

1.22172421s ago: executing program 4 (id=804):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18)
r2 = socket(0x10, 0x803, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x30, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}}, 0x24040084)

1.15423899s ago: executing program 0 (id=805):
socket$nl_route(0x10, 0x3, 0x0)
open(&(0x7f0000000180)='./bus\x00', 0x14957e, 0x0)
socket$packet(0x11, 0xa, 0x300)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
socket$inet(0x2, 0x4000000000000001, 0x0)
socket(0x840000000002, 0x3, 0x100)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10)
socket$inet_dccp(0x2, 0x6, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff08000900fcfc0000080011000000000008000e00800000000800", @ANYRES64=r2], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0)

995.536452ms ago: executing program 5 (id=806):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xa, 0x2, 0xffd, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20)
syz_emit_ethernet(0x66, &(0x7f00000004c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb86dd60003a0400303afffe800000000000000000000000000000ff020000000000000000000000000001"], 0x0)

995.133982ms ago: executing program 4 (id=807):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000cc0)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000022007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10)
lsm_get_self_attr(0x66, &(0x7f0000001180)={0x0, 0x0, 0x1020, 0x1000, ""/4096}, &(0x7f0000000d40)=0x1020, 0x0)

964.887212ms ago: executing program 0 (id=808):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x23, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x80000001}, {}, {}, [@jmp={0x5, 0x0, 0x5, 0x2, 0x2, 0x50, 0x10}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x7}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x34}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x10a}}}, &(0x7f00000002c0)='syzkaller\x00', 0x4, 0xd8, &(0x7f00000006c0)=""/216, 0x41100, 0x53, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0x3, 0x8}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x4, 0x3, 0xd, 0xa}, {0x3, 0x2, 0xd, 0x4}], 0x10, 0x1, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f00000022c0)='x', 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='mm_migrate_pages\x00', r2, 0x0, 0x3}, 0x17)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r3=>0x0})
r4 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0xffffffff, @vifc_lcl_addr=@local, @dev}, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xb, 0x2, 0x0, @empty, @private=0xa010102}, @address_request}}}}, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r5, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, @void, @value}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r6, 0x0, 0x80000}, 0x18)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x44, 0x9, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r8 = socket(0x2, 0x80805, 0x0)
r9 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={<r10=>0x0}, &(0x7f00000002c0)=0x8)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r8, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={r10, 0x2}, 0x8)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000880)={r10, 0x9a9a}, 0x8)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000b40), 0x5, r7}, 0x38)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r7}, 0x38)
r11 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000030000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0)

944.257852ms ago: executing program 1 (id=809):
socket$nl_route(0x10, 0x3, 0x0)
open(&(0x7f0000000180)='./bus\x00', 0x14957e, 0x0)
socket$packet(0x11, 0xa, 0x300)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
socket$inet(0x2, 0x4000000000000001, 0x0)
socket(0x840000000002, 0x3, 0x100)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48)
socket$inet_dccp(0x2, 0x6, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff08000900fcfc0000080011000000000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0)

865.947233ms ago: executing program 4 (id=810):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8991, &(0x7f0000001740)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12t\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf\xc8>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x88j\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xf6\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe\x8f$\xd0qx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5<J\x1f\xba\xfc\x90(\x985\x93\xa8\xd4\xf0\xbdTy\x18\xc8\xa0\xbb\x99\x8c\xe0Q\xffCl\xbdX~3\xa1\xa2\xf4\xd9\xf7\xc7\xfb\xce\x959x\xfeW\r\xf0{\xcaT\xecp)=\x9d\xdfG8\xa1\xe3=\xa6\x00\x98\xc1\xb3\x91-\xab\'W\x8al?d<JN\xcb\xd4H\xb0_jO\xf3\x90\xe8/l\xdfg)\x8d#\xfdo\xa9L\xdeA*\xec\xa1\x14,\xe8\x8d^\xb9r=\xc0\x18\xd4\x11dU[Ry\xed\xd6\x97\x8a\xe8\xca\x99\x10\x8e\xc8P\xa3\xae/\xdaof\x06\x7f\xf7\x80$f\b\x92\xae\xeb\xdd\"\x89\xb8\xf0\xc3\b\x00\x00\x00\x00\a\xf6\xfc\x1d\xd4\x893\xeb)\xc1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00O!\xd2q\xda}\xe2\xa2\xfe\xfd)\\\xdf\x9aN\\\xaeyc\xe4g\xc0\x8a\n\v{\xa9H\\\xd1\x9d\xb1\xb7\xf5\f\xe1\xc5\xc1O\xc2Pl\x94o\xc2\xed\x0f\x83\xac\x00\x8d\x1b\xe6\xf7\x0e\xecf3\xea\xe9\xd0\xe9\xf2@nc\xf8\x11\xd8\xee\x98\ff\xe04<j\x11\xe4\x06O3\"l\x1c\xfc+\xbf-\xa1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf4\x9b\xd0\xf3]\xa9\x81\x12\x80\x9e \x1a5\xc2+\xb3\xcc\xe0\xbfF\xf7H\x1e\x04\x10\x02*\xef#\xc0\xb5\xa4\xca\x9b$u\x93\x80\xfb.\xbdA\xb4\x92\xa7\xa6s\xeb\xb7C\x17^\x80Y\r\\\xd6s\xbc\x00\x00\x00\x00\x00\x00\x00\x00\x00')
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10)
syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f00000021c0)={[{@dioread_nolock}, {@minixdf}, {@nolazytime}, {}]}, 0x1, 0x783, &(0x7f0000002200)="$eJzs3M9rXOUaAOD3nGaa/si9kwt3ce+mCi20UDpJmk27Mm7ETaFQcFtDMgkhJ5mSmdQkFpq6E4TabFQE0b1Lt0Kpf4A7KSi4F0RrXKibkTOZTNt0Zjptk04bnwdO5vvOfN9533dm8uUcyJkA/rFezX8kEUMRcTEiis39aUQcbLQORaxvjdu8d20q35Ko1y/9kuTTYrNebB0raT4ejcaU+F9E3ClEnH7v0bjV1bX5ySwrLzX7I7WFKyPV1bUzcwuTs+XZ8uLY+PnRc+Pj50bHd63WE2+dP3zr2zc2Nr77qnbz2MCZJCYadUeztl0L9ICt16QQEzv2L+5FsD5Kehgz8BzyAACgu/w8/0Dz3KwQxTjQ7SzNCRwAAAC8lOqD9V792fNIAAAA4AWTRL8zAAAAAPbW9v8BbN/bu1f3wXby8+sRMdwu/kDjHuKIQ1GIiCObyUO3HyRb0+CZrN+IiNsTbT5/vdzR3N3o/ebh3Tkiu+12vv5MtFt/0tb6E23Wn4Ht7054Rp3Xv/vxD3RY/y72GOPrz/5f6Bj/RnXl/WPt4iet+EmH+G/3GP/mxge3Oj1X/yLiZNu/P8lDsbp8P8TIzFzW7lerle6dv07d7Vx/xJFH4idJI2rSvf4rPdb/7uZv8+td4p863v3934o/+NC8/DPxYTOPNCJuNR/z/saOGMcXvv/m0cjJ+nb86Q6vf/v3/81W/Z/3WP+PXw6u9DgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGtKIGIokLbXaaVoqRRyNiP/GkTSrVGunZyrLi9P5cxHDUUhn5rLyaEQUt/pJ3h9rtO/3z+7oj0fEf344vBV0LiuXpirZdL+LBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoOVoRAxFkpYiIo2I34tpWir1OysAAABg1w33OwEAAABgz7n+BwAAgP3vaa//k13OAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjXLl64kG/1zXvXpvL+9NXV5fnK1TPT5ep8aWF5qjRVWbpSmq1UZrNyaaqy8LjjpRExdj6WV0Zq5WptpLq6dnmhsrxYuzy3MDlbvlwuPJeqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFJDjS1JSxGRNtppWipF/CsihqOQzMxl5dGI+HdE3C0WBvP+WL+TBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNdVV9fmJ7OsvPRyN+r7q5yeG5FEvABpdGh80nxXuo1J1iP6nmraTPRZjhPxJLOuP+Zl6XfjlT6tRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9Fd1dW1+MsvKS9V+ZwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB/pT8lEZFvJ4snhnY+ezD5o9h4jIh3Pr300cpkrbY0lu//tbW/9nFz/9kHJl5/njUAAADAvvfakwzevk7fvo4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoVXV1bX4yy8pLe9iIG/2uEgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeBp/BwAA//9Js7nR")
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f0000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/13, @ANYRES32=r3, @ANYBLOB], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
recvmmsg(0xffffffffffffffff, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0)
setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000040)={@dev={0xac, 0x14, 0x14, 0x17}, @broadcast, 0xffffffffffffffff, "246717e1db80a6f60c82a68d7cb18eceaf6d2be4f62e196f71f153ee47a665c9", 0x7, 0xffffffff, 0x7fff, 0x774f}, 0x3c)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd)
modify_ldt$write(0x1, &(0x7f0000000040)={0x806, 0xffffffffffffffff}, 0x10)
syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0)
open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000080)=ANY=[@ANYBLOB="16000000020000001d"], 0x0)
add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f00000007c0)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441700322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6de6269613800", 0x1}, 0x48, 0xfffffffffffffffb)

844.229523ms ago: executing program 2 (id=811):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f00000005c0), 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
sendmsg$can_raw(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x5}, 0x2, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000094e2f9663a918fa1efd9b0b"}, 0x48}, 0x2}, 0x4000000)

783.676604ms ago: executing program 5 (id=812):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{r0}, &(0x7f00000005c0), &(0x7f0000000600)='%-5lx  \x00'}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x18)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$procfs(0xffffff9c, &(0x7f0000000280)='/proc/sysvipc/msg\x00', 0x0, 0x0)
waitid(0x0, 0x0, 0x0, 0x2000000e, 0x0)

594.825105ms ago: executing program 1 (id=813):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2, 0x0, 0x9}, 0x18)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000140)="d800000018007b29e00212ba0d8105040a601800fe0f040b067c55a1bc000900b80006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ccd40dd601edef3d93452a92307ff0ff0e97031e9f05e9f16e9cb500"/216, 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0)

560.067335ms ago: executing program 2 (id=814):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$UHID_CREATE(r0, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000940)=""/3, 0x3, 0x0, 0x4, 0x0, 0x0, 0xc08}}, 0x120)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000400)='sched_switch\x00', r2}, 0x18)
readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}], 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r4}, 0x10)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{r3}, &(0x7f00000003c0), &(0x7f0000000400)='%-5lx  \x00'}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r5}, 0x10)
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)
write$UHID_DESTROY(r0, 0x0, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.idle_time\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000040)=0x80)
write$binfmt_script(r7, &(0x7f0000000380), 0x208e24b)
ioctl$EXT4_IOC_MIGRATE(r7, 0x6609)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0054ed0000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700edff944eb4e4938c5b7c0e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0x25, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wg0\x00', <r8=>0x0})
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', r8, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r9}, 0x10)
utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0)

415.243737ms ago: executing program 5 (id=815):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = syz_clone(0xe844880, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
r1 = socket(0x40000000015, 0x5, 0x0)
r2 = syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x200d8a1, &(0x7f0000000080)={[{@discard}, {@noload}]}, 0x64, 0x526, &(0x7f0000000a40)="$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")
r3 = signalfd4(r2, &(0x7f00000003c0)={[0x3]}, 0x8, 0x80000)
r4 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xc1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0xfffffffd, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8ff0000000000ff000044850000000e0000003f0000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000340)='kfree\x00', r5, 0x0, 0x200}, 0x18)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r8=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f0000000200)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @remote}, r8, 0xfffffffc}}, 0x48)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000200)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x4e20, 0x0, @remote}, r8, 0xfffffffc}}, 0x48)
r9 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r9, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000000)='cpu<\t\t')
connect$l2tp6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5, 0x4}, 0x20)
bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57)
sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
getrandom(&(0x7f0000000040)=""/120, 0x78, 0x1)
r10 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x2800, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f00000023c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x20001)
r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
ioctl$TCSETS(r11, 0x5402, &(0x7f0000000000)={0x401, 0x0, 0x10000, 0xb998, 0x0, "194f2f83c2e798c3584770116cddc8819592b1"})
write$binfmt_aout(r11, &(0x7f0000000000)=ANY=[], 0xff2e)
ioctl$TCSETS(r11, 0x5402, &(0x7f0000000040)={0x8, 0xfffffffd, 0x1, 0x7ff, 0xb, "53b62f00000000000400"})
pwrite64(r10, &(0x7f00000002c0)="407bec94320ce8780b9013e66517f735418a04d996cb31d9adde2fbe1d2daf4518182728352400ae7fe441486191b2b19dffb2f0883c43f2f41f63d65245b9c1b1f2cf6845749d1f8c93980858d9d66cca9550ae3c8a531d25fd60bc4cb496cbe287d27a934660a38c2f8dbb0f66075ea3824359524d2f73", 0x78, 0x8)
open_tree(r2, &(0x7f0000000380)='./file0\x00', 0x80000)

352.897947ms ago: executing program 1 (id=816):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000040)={@dev={0xac, 0x14, 0x14, 0x17}, @broadcast, 0xffffffffffffffff, "246717e1db80a6f60c82a68d7cb18eceaf6d2be4f62e196f71f153ee47a665c9", 0x7, 0xffffffff, 0x7fff, 0x774f}, 0x3c)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd)
modify_ldt$write(0x1, &(0x7f0000000040)={0x806, 0xffffffffffffffff}, 0x10)
syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0)
open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000080)=ANY=[@ANYBLOB="16000000020000001d"], 0x0)
add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f00000007c0)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441700322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6de6269613800", 0x1}, 0x48, 0xfffffffffffffffb)
mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x0, 0x0)

171.187489ms ago: executing program 0 (id=817):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0), &(0x7f00000002c0), 0x9, r2}, 0x38)

25.04112ms ago: executing program 0 (id=818):
socket$nl_route(0x10, 0x3, 0x0)
open(&(0x7f0000000180)='./bus\x00', 0x14957e, 0x0)
socket$packet(0x11, 0xa, 0x300)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
socket$inet(0x2, 0x4000000000000001, 0x0)
socket(0x840000000002, 0x3, 0x100)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x10)
socket$inet_dccp(0x2, 0x6, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff08000900fcfc0000080011000000000008000e00800000000800", @ANYRES64=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0)

24.65109ms ago: executing program 1 (id=819):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000570000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0), &(0x7f00000002c0), 0x9, r2}, 0x38)

0s ago: executing program 4 (id=820):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000cc0)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000022007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10)
lsm_get_self_attr(0x66, &(0x7f0000001180)={0x0, 0x0, 0x1020, 0x1000, ""/4096}, &(0x7f0000000d40)=0x1020, 0x0)

kernel console output (not intermixed with test programs):

removed nomblk_io_submit option
[   30.844444][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   30.874969][   T30] kauditd_printk_skb: 30 callbacks suppressed
[   30.874982][   T30] audit: type=1400 audit(1741899599.909:122): avc:  denied  { map_create } for  pid=3441 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   30.881323][ T3442] loop1: detected capacity change from 0 to 512
[   30.900127][   T30] audit: type=1400 audit(1741899599.909:123): avc:  denied  { perfmon } for  pid=3441 comm="syz.1.2" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   30.909164][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_1
[   30.927067][   T30] audit: type=1400 audit(1741899599.909:124): avc:  denied  { map_read map_write } for  pid=3441 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   30.948515][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   30.953677][   T30] audit: type=1400 audit(1741899599.909:125): avc:  denied  { prog_load } for  pid=3441 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   30.964032][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   30.982778][   T30] audit: type=1400 audit(1741899599.909:126): avc:  denied  { bpf } for  pid=3441 comm="syz.1.2" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   30.992551][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   30.992568][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   30.992581][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   30.992594][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.012811][   T30] audit: type=1400 audit(1741899599.909:127): avc:  denied  { prog_run } for  pid=3441 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   31.023184][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   31.023219][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.037341][ T3442] EXT4-fs: Ignoring removed oldalloc option
[   31.049698][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0
[   31.094791][ T3442] EXT4-fs error (device loop1): ext4_xattr_inode_iget:436: comm syz.1.2: Parent and EA inode have the same ino 15
[   31.108125][ T3298] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   31.126414][ T3298] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   31.135249][ T3298] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   31.144059][ T3298] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   31.154043][ T3442] EXT4-fs (loop1): Remounting filesystem read-only
[   31.160568][ T3439] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   31.172948][ T3442] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   31.186034][ T3442] EXT4-fs warning (device loop1): ext4_evict_inode:259: couldn't mark inode dirty (err -5)
[   31.203029][ T3442] EXT4-fs (loop1): 1 orphan inode deleted
[   31.205280][   T30] audit: type=1400 audit(1741899600.219:128): avc:  denied  { mount } for  pid=3438 comm="syz.0.1" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   31.210140][ T3442] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   31.232084][ T3439] process 'syz.0.1' launched './file0/file0' with NULL argv: empty string added
[   31.242738][ T3442] SELinux: (dev loop1, type ext4) getxattr errno 5
[   31.260392][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   31.267087][   T30] audit: type=1400 audit(1741899600.289:129): avc:  denied  { setattr } for  pid=3438 comm="syz.0.1" name="file0" dev="loop0" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   31.270954][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.293151][   T30] audit: type=1400 audit(1741899600.289:130): avc:  denied  { execute } for  pid=3438 comm="syz.0.1" name="file0" dev="loop0" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   31.302975][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   31.324935][   T30] audit: type=1400 audit(1741899600.289:131): avc:  denied  { read open } for  pid=3438 comm="syz.0.1" path="/0/file1/file0/file0" dev="loop0" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   31.328852][ T3442] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   31.335453][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.377920][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   31.388365][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.398303][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   31.408741][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.430500][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1
[   31.453262][ T3304] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   31.462085][ T3304] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   31.470912][ T3304] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   31.479732][ T3304] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   31.491427][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   31.560727][ T3449] cgroup2: Unknown parameter 'cpuacct'
[   31.603004][    C0] hrtimer: interrupt took 24330 ns
[   31.620877][ T3457] /dev/nullb0: Can't lookup blockdev
[   31.683553][ T3453] loop0: detected capacity change from 0 to 8192
[   31.701747][ T3461] loop2: detected capacity change from 0 to 2048
[   31.743465][ T3464] loop3: detected capacity change from 0 to 512
[   31.771355][ T3453]  loop0: p1 p3 p4
[   31.777760][ T3453] loop0: p1 size 3506438656 extends beyond EOD, truncated
[   31.786044][ T3464] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   31.799217][ T3464] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   31.911580][ T3453] loop0: p3 start 218103808 is beyond EOD, truncated
[   31.918449][ T3453] loop0: p4 size 50331648 extends beyond EOD, truncated
[   31.936053][ T3461] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   31.953059][ T3461] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   31.969153][ T3464] EXT4-fs (loop3): 1 truncate cleaned up
[   31.975383][ T3464] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   32.022879][ T3457] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 15: block 33:
[   32.022987][ T3461] futex_wake_op: syz.2.8 tries to shift op by -1; fix this program
[   32.022992][ T3457] freeing already freed block (bit 32); block bitmap corrupt.
[   32.053437][ T3457] EXT4-fs (loop3): Remounting filesystem read-only
[   32.088752][ T3457] EXT4-fs warning (device loop3): ext4_evict_inode:276: xattr delete (err -5)
[   32.172961][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   32.192155][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   33.690128][ T3541] Zero length message leads to an empty skb
[   33.771839][ T3513] syz.3.19 (3513) used greatest stack depth: 10648 bytes left
[   33.814163][ T3518] syz.3.19 (3518) used greatest stack depth: 9944 bytes left
[   34.013093][ T3553] netlink: 8 bytes leftover after parsing attributes in process `syz.2.35'.
[   34.021986][ T3553] netlink: 'syz.2.35': attribute type 30 has an invalid length.
[   34.033943][ T3553] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   34.042784][ T3553] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   34.051753][ T3553] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   34.060504][ T3553] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   34.512192][ T3565] tmpfs: Unknown parameter 'usrquota'
[   34.625941][ T3568] Invalid logical block size (511)
[   35.069073][ T3374] kernel write not supported for file /sg0 (pid: 3374 comm: kworker/1:4)
[   35.159727][ T3585] capability: warning: `syz.3.47' uses deprecated v2 capabilities in a way that may be insecure
[   35.542046][ T3595] serio: Serial port ptm0
[   35.642078][ T3600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   35.702057][ T3600] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   36.014041][ T3611] loop2: detected capacity change from 0 to 2048
[   36.064765][ T3611] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   36.107699][   T30] kauditd_printk_skb: 110 callbacks suppressed
[   36.107875][   T30] audit: type=1400 audit(1741899605.139:242): avc:  denied  { mount } for  pid=3610 comm="syz.2.58" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   36.165062][   T30] audit: type=1400 audit(1741899605.199:243): avc:  denied  { create } for  pid=3610 comm="syz.2.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[   36.185625][   T30] audit: type=1400 audit(1741899605.199:244): avc:  denied  { write } for  pid=3610 comm="syz.2.58" path="socket:[5197]" dev="sockfs" ino=5197 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[   36.209617][   T30] audit: type=1400 audit(1741899605.199:245): avc:  denied  { nlmsg_read } for  pid=3610 comm="syz.2.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[   36.230142][   T30] audit: type=1400 audit(1741899605.199:246): avc:  denied  { name_bind } for  pid=3610 comm="syz.2.58" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[   36.402826][ T3621] /dev/nullb0: Can't lookup blockdev
[   36.469992][ T3621] loop3: detected capacity change from 0 to 512
[   36.477089][ T3621] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   36.500134][ T3621] EXT4-fs (loop3): 1 truncate cleaned up
[   36.509895][ T3621] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   36.532131][ T3624] loop1: detected capacity change from 0 to 8192
[   36.548511][ T3621] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 15: block 33:freeing already freed block (bit 32); block bitmap corrupt.
[   36.564605][ T3621] EXT4-fs (loop3): Remounting filesystem read-only
[   36.571209][ T3621] EXT4-fs warning (device loop3): ext4_evict_inode:276: xattr delete (err -5)
[   36.608928][ T3624]  loop1: p1 p3 p4
[   36.612771][ T3624] loop1: p1 size 3506438656 extends beyond EOD, truncated
[   36.629034][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.643786][ T3624] loop1: p3 start 218103808 is beyond EOD, truncated
[   36.650661][ T3624] loop1: p4 size 50331648 extends beyond EOD, truncated
[   36.686565][ T3001]  loop1: p1 p3 p4
[   36.691634][ T3001] loop1: p1 size 3506438656 extends beyond EOD, truncated
[   36.702768][ T3001] loop1: p3 start 218103808 is beyond EOD, truncated
[   36.709681][ T3001] loop1: p4 size 50331648 extends beyond EOD, truncated
[   36.745106][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[   36.755257][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[   36.767295][ T3629] futex_wake_op: syz.3.63 tries to shift op by -1; fix this program
[   36.775576][   T30] audit: type=1326 audit(1741899605.829:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3628 comm="syz.3.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6da58d169 code=0x7ffc0000
[   36.798946][   T30] audit: type=1326 audit(1741899605.829:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3628 comm="syz.3.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6da58d169 code=0x7ffc0000
[   36.822112][   T30] audit: type=1326 audit(1741899605.829:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3628 comm="syz.3.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd6da58d169 code=0x7ffc0000
[   36.845508][   T30] audit: type=1326 audit(1741899605.829:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3628 comm="syz.3.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6da58d169 code=0x7ffc0000
[   36.869657][   T30] audit: type=1326 audit(1741899605.829:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3628 comm="syz.3.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6da58d169 code=0x7ffc0000
[   36.911839][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[   36.922112][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.934804][ T3377] udevd[3377]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[   37.049576][ T3646] wireguard0: entered promiscuous mode
[   37.055108][ T3646] wireguard0: entered allmulticast mode
[   37.273783][ T3651] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   38.039959][ T3663] /dev/nullb0: Can't lookup blockdev
[   38.054369][ T3660] loop3: detected capacity change from 0 to 8192
[   38.100393][ T3665] loop1: detected capacity change from 0 to 512
[   38.117855][ T3660]  loop3: p1 p3 p4
[   38.125099][ T3660] loop3: p1 size 3506438656 extends beyond EOD, truncated
[   38.131798][ T3666] loop2: detected capacity change from 0 to 512
[   38.149296][ T3660] loop3: p3 start 218103808 is beyond EOD, truncated
[   38.156046][ T3660] loop3: p4 size 50331648 extends beyond EOD, truncated
[   38.170401][ T3666] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   38.173447][ T3665] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[   38.180354][ T3001]  loop3: p1 p3 p4
[   38.208453][ T3001] loop3: p1 size 3506438656 extends beyond EOD, truncated
[   38.228115][ T3001] loop3: p3 start 218103808 is beyond EOD, truncated
[   38.234921][ T3001] loop3: p4 size 50331648 extends beyond EOD, truncated
[   38.301794][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[   38.370466][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[   38.420664][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[   38.441989][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[   38.647443][ T3671] IPv6: Can't replace route, no match found
[   38.795513][ T3666] EXT4-fs (loop2): 1 truncate cleaned up
[   38.835268][ T3673] /dev/nullb0: Can't lookup blockdev
[   38.837390][ T3666] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   38.913259][ T3674] loop3: detected capacity change from 0 to 512
[   38.929646][ T3674] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   38.964992][ T3674] EXT4-fs (loop3): 1 truncate cleaned up
[   38.971218][ T3674] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   38.986324][ T3677] loop1: detected capacity change from 0 to 2048
[   39.012842][ T3673] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 15: block 33:freeing already freed block (bit 32); block bitmap corrupt.
[   39.039891][ T3673] EXT4-fs (loop3): Remounting filesystem read-only
[   39.047669][ T3673] EXT4-fs warning (device loop3): ext4_evict_inode:276: xattr delete (err -5)
[   39.084312][ T3663] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 15: block 33:freeing already freed block (bit 32); block bitmap corrupt.
[   39.107392][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.122140][ T3680] /dev/nullb0: Can't lookup blockdev
[   39.148107][ T3682] futex_wake_op: syz.3.79 tries to shift op by -1; fix this program
[   39.157198][ T3663] EXT4-fs (loop2): Remounting filesystem read-only
[   39.163790][ T3663] EXT4-fs warning (device loop2): ext4_evict_inode:276: xattr delete (err -5)
[   39.199607][ T3677] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   39.222433][ T3680] loop4: detected capacity change from 0 to 512
[   39.247648][ T3680] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   39.289737][ T3680] EXT4-fs (loop4): 1 truncate cleaned up
[   39.295750][ T3680] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   39.321977][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.364145][ T3680] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 15: block 33:freeing already freed block (bit 32); block bitmap corrupt.
[   39.381267][ T3689] pim6reg: entered allmulticast mode
[   39.396399][ T3680] EXT4-fs (loop4): Remounting filesystem read-only
[   39.457110][ T3680] EXT4-fs warning (device loop4): ext4_evict_inode:276: xattr delete (err -5)
[   39.546294][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.753680][ T3710] /dev/nullb0: Can't lookup blockdev
[   39.760218][ T3708] /dev/nullb0: Can't lookup blockdev
[   39.866544][ T3712] loop2: detected capacity change from 0 to 512
[   40.043637][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.058410][ T3711] loop3: detected capacity change from 0 to 512
[   40.105139][ T3712] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   40.150575][ T3711] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   40.283702][ T3711] EXT4-fs (loop3): 1 truncate cleaned up
[   40.291936][ T3712] EXT4-fs (loop2): 1 truncate cleaned up
[   40.293812][ T3711] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   40.340593][ T3712] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   40.342009][ T3722] program syz.0.91 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   40.387508][ T3710] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 15: block 33:freeing already freed block (bit 32); block bitmap corrupt.
[   40.418046][ T3710] EXT4-fs (loop3): Remounting filesystem read-only
[   40.456962][ T3710] EXT4-fs warning (device loop3): ext4_evict_inode:276: xattr delete (err -5)
[   40.489406][ T3729] loop0: detected capacity change from 0 to 2048
[   40.513478][ T3731] loop1: detected capacity change from 0 to 8192
[   40.534759][ T3708] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 15: block 33:freeing already freed block (bit 32); block bitmap corrupt.
[   40.535186][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.551304][ T3708] EXT4-fs (loop2): Remounting filesystem read-only
[   40.565120][ T3708] EXT4-fs warning (device loop2): ext4_evict_inode:276: xattr delete (err -5)
[   40.584184][ T3729] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   40.631479][ T3731]  loop1: p1 p3 p4
[   40.635385][ T3731] loop1: p1 size 3506438656 extends beyond EOD, truncated
[   40.642807][ T3729] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   40.654792][ T3731] loop1: p3 start 218103808 is beyond EOD, truncated
[   40.661661][ T3731] loop1: p4 size 50331648 extends beyond EOD, truncated
[   40.745012][ T3729] futex_wake_op: syz.0.94 tries to shift op by -1; fix this program
[   40.752533][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.797271][ T3748] /dev/nullb0: Can't lookup blockdev
[   40.835093][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.853590][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[   40.865091][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[   40.880075][ T3752] loop2: detected capacity change from 0 to 164
[   40.904025][ T3757] loop4: detected capacity change from 0 to 512
[   40.907244][ T3752] =======================================================
[   40.907244][ T3752] WARNING: The mand mount option has been deprecated and
[   40.907244][ T3752]          and is ignored by this kernel. Remove the mand
[   40.907244][ T3752]          option from the mount to silence this warning.
[   40.907244][ T3752] =======================================================
[   40.915227][ T3754] loop1: detected capacity change from 0 to 2048
[   40.956943][ T3757] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   40.969366][ T3757] EXT4-fs (loop4): 1 truncate cleaned up
[   40.969744][ T3757] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   41.013964][ T3754] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   41.040108][ T3757] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 15: block 33:freeing already freed block (bit 32); block bitmap corrupt.
[   41.060223][ T3752] Unable to read rock-ridge attributes
[   41.071999][ T3757] EXT4-fs (loop4): Remounting filesystem read-only
[   41.078824][ T3757] EXT4-fs warning (device loop4): ext4_evict_inode:276: xattr delete (err -5)
[   41.145938][ T3773] IPv6: Can't replace route, no match found
[   41.246991][   T30] kauditd_printk_skb: 392 callbacks suppressed
[   41.247008][   T30] audit: type=1400 audit(1741899610.239:644): avc:  denied  { unmount } for  pid=3308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1
[   41.322172][ T1046] kernel write not supported for file /sg0 (pid: 1046 comm: kworker/1:2)
[   41.339836][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.409446][ T3793] loop0: detected capacity change from 0 to 512
[   41.432415][ T3789] loop2: detected capacity change from 0 to 2048
[   41.443904][ T3793] EXT4-fs: Ignoring removed oldalloc option
[   41.468378][ T3789] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   41.468391][ T3793] EXT4-fs error (device loop0): ext4_xattr_inode_iget:436: comm syz.0.113: Parent and EA inode have the same ino 15
[   41.468578][ T3793] EXT4-fs (loop0): Remounting filesystem read-only
[   41.498993][   T30] audit: type=1400 audit(1741899610.549:645): avc:  denied  { create } for  pid=3788 comm="syz.2.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[   41.499364][ T3793] EXT4-fs warning (device loop0): ext4_evict_inode:259: couldn't mark inode dirty (err -5)
[   41.543809][   T30] audit: type=1400 audit(1741899610.589:646): avc:  denied  { getopt } for  pid=3788 comm="syz.2.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[   41.563207][   T30] audit: type=1400 audit(1741899610.589:647): avc:  denied  { ioctl } for  pid=3788 comm="syz.2.112" path="socket:[5495]" dev="sockfs" ino=5495 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[   41.587889][ T3793] EXT4-fs (loop0): 1 orphan inode deleted
[   41.588297][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.594102][ T3793] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   41.616310][ T3793] SELinux: (dev loop0, type ext4) getxattr errno 5
[   41.623023][ T3795] loop4: detected capacity change from 0 to 2048
[   41.623505][ T3793] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.692850][ T3795] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   41.710091][ T3802] loop2: detected capacity change from 0 to 2048
[   41.720720][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.731456][ T3795] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   41.744516][   T30] audit: type=1326 audit(1741899610.799:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3794 comm="syz.4.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99ada6d169 code=0x7ffc0000
[   41.745556][ T3795] futex_wake_op: syz.4.114 tries to shift op by -1; fix this program
[   41.767819][   T30] audit: type=1326 audit(1741899610.799:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3794 comm="syz.4.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f99ada6d169 code=0x7ffc0000
[   41.799176][   T30] audit: type=1326 audit(1741899610.799:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3794 comm="syz.4.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99ada6d169 code=0x7ffc0000
[   41.822548][   T30] audit: type=1326 audit(1741899610.799:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3794 comm="syz.4.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f99ada6d169 code=0x7ffc0000
[   41.845811][   T30] audit: type=1326 audit(1741899610.799:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3794 comm="syz.4.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99ada6d169 code=0x7ffc0000
[   41.869150][   T30] audit: type=1326 audit(1741899610.799:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3794 comm="syz.4.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f99ada6d169 code=0x7ffc0000
[   41.900598][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.948160][ T3802] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   41.960413][ T3802] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   41.981604][ T3802] futex_wake_op: syz.2.115 tries to shift op by -1; fix this program
[   42.007434][ T3809] loop1: detected capacity change from 0 to 128
[   42.021800][ T3813] IPv6: Can't replace route, no match found
[   42.125886][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.223078][ T3835] loop0: detected capacity change from 0 to 2048
[   42.249248][ T3835] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   42.261792][ T3838] loop3: detected capacity change from 0 to 2048
[   42.289858][ T3838] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   42.305822][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.343584][ T3851] loop0: detected capacity change from 0 to 164
[   42.351563][ T3851] Unable to read rock-ridge attributes
[   42.590444][ T3859] loop0: detected capacity change from 0 to 2048
[   42.608466][ T3859] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   42.621305][ T3859] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   42.636083][ T3859] futex_wake_op: syz.0.133 tries to shift op by -1; fix this program
[   42.667080][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.806258][ T3876] wireguard0: entered promiscuous mode
[   42.811821][ T3876] wireguard0: entered allmulticast mode
[   43.006437][ T3881] cgroup2: Unknown parameter 'cpuacct'
[   43.072723][ T3883] loop1: detected capacity change from 0 to 2048
[   43.085089][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.102527][ T3883] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   43.138988][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.237998][ T3893] /dev/nullb0: Can't lookup blockdev
[   43.312834][ T3903] loop3: detected capacity change from 0 to 512
[   43.337143][ T3903] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   43.376725][ T3903] EXT4-fs (loop3): 1 truncate cleaned up
[   43.383259][ T3903] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   43.407204][ T3893] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 15: block 33:freeing already freed block (bit 32); block bitmap corrupt.
[   43.425313][ T3893] EXT4-fs (loop3): Remounting filesystem read-only
[   43.433686][ T3913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   43.456802][ T3893] EXT4-fs warning (device loop3): ext4_evict_inode:276: xattr delete (err -5)
[   43.474186][ T3913] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   43.541674][ T3918] netlink: 12 bytes leftover after parsing attributes in process `syz.0.153'.
[   43.587844][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.731235][ T3913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   43.743697][ T3913] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   43.816802][ T3932] /dev/nullb0: Can't lookup blockdev
[   44.198431][ T3940] loop4: detected capacity change from 0 to 512
[   44.346842][ T3940] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   44.442791][ T3942] pim6reg: entered allmulticast mode
[   44.457716][ T3940] EXT4-fs (loop4): 1 truncate cleaned up
[   44.473207][ T3948] IPv6: Can't replace route, no match found
[   44.488791][ T3940] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   44.633817][ T3952] loop2: detected capacity change from 0 to 512
[   44.649752][ T3955] netlink: 12 bytes leftover after parsing attributes in process `syz.0.164'.
[   44.668655][ T3952] EXT4-fs: Ignoring removed oldalloc option
[   44.685250][ T3932] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 15: block 33:freeing already freed block (bit 32); block bitmap corrupt.
[   44.731175][ T3932] EXT4-fs (loop4): Remounting filesystem read-only
[   44.739571][ T3952] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.166: Parent and EA inode have the same ino 15
[   44.775775][ T3932] EXT4-fs warning (device loop4): ext4_evict_inode:276: xattr delete (err -5)
[   44.802687][ T3952] EXT4-fs (loop2): Remounting filesystem read-only
[   44.802860][ T3962] cgroup2: Unknown parameter 'cpuacct'
[   44.809266][ T3952] EXT4-fs warning (device loop2): ext4_evict_inode:259: couldn't mark inode dirty (err -5)
[   44.824934][ T3952] EXT4-fs (loop2): 1 orphan inode deleted
[   44.831038][ T3952] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   44.831082][ T3960] netlink: 12 bytes leftover after parsing attributes in process `syz.0.168'.
[   44.843264][ T3952] SELinux: (dev loop2, type ext4) getxattr errno 5
[   44.866021][ T3952] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.941947][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.014480][ T3972] IPv6: Can't replace route, no match found
[   45.250817][ T3980] /dev/nullb0: Can't lookup blockdev
[   45.262408][ T3982] loop0: detected capacity change from 0 to 164
[   45.271488][ T3982] Unable to read rock-ridge attributes
[   45.295366][ T3980] loop2: detected capacity change from 0 to 512
[   45.304519][ T3980] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   45.339296][ T3980] EXT4-fs (loop2): 1 truncate cleaned up
[   45.345920][ T3980] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   45.439137][ T3980] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 15: block 33:freeing already freed block (bit 32); block bitmap corrupt.
[   45.572686][ T3980] EXT4-fs (loop2): Remounting filesystem read-only
[   45.645897][ T3980] EXT4-fs warning (device loop2): ext4_evict_inode:276: xattr delete (err -5)
[   45.723440][ T3990] cgroup2: Unknown parameter 'cpuacct'
[   45.758696][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.921085][ T4006] IPv6: Can't replace route, no match found
[   45.974279][ T4008] loop2: detected capacity change from 0 to 2048
[   45.993227][ T4014] program syz.1.192 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   46.038673][ T4008] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   46.091910][ T4021] /dev/nullb0: Can't lookup blockdev
[   46.162731][ T4025] loop0: detected capacity change from 0 to 512
[   46.196843][ T4025] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   46.223515][ T4027] pim6reg: entered allmulticast mode
[   46.233406][ T4025] EXT4-fs (loop0): 1 truncate cleaned up
[   46.240682][ T4025] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   46.285832][ T4021] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 15: block 33:freeing already freed block (bit 32); block bitmap corrupt.
[   46.301053][ T4021] EXT4-fs (loop0): Remounting filesystem read-only
[   46.308678][ T4021] EXT4-fs warning (device loop0): ext4_evict_inode:276: xattr delete (err -5)
[   46.453199][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.282910][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.345308][ T4040] /dev/nullb0: Can't lookup blockdev
[   47.406624][ T4044] loop1: detected capacity change from 0 to 512
[   47.434044][ T4044] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   47.454901][ T4044] EXT4-fs (loop1): 1 truncate cleaned up
[   47.489625][ T4044] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   47.550315][ T4040] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 15: block 33:freeing already freed block (bit 32); block bitmap corrupt.
[   47.565315][ T4040] EXT4-fs (loop1): Remounting filesystem read-only
[   47.588211][ T4040] EXT4-fs warning (device loop1): ext4_evict_inode:276: xattr delete (err -5)
[   47.668840][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.819663][ T4062] loop0: detected capacity change from 0 to 2048
[   47.834017][   T30] kauditd_printk_skb: 549 callbacks suppressed
[   47.834035][   T30] audit: type=1326 audit(1741899616.889:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4067 comm="syz.1.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9423dfd169 code=0x7ffc0000
[   47.866094][   T30] audit: type=1326 audit(1741899616.909:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4067 comm="syz.1.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9423dfd169 code=0x7ffc0000
[   47.889539][   T30] audit: type=1326 audit(1741899616.919:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4067 comm="syz.1.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9423dfd169 code=0x7ffc0000
[   47.912948][   T30] audit: type=1326 audit(1741899616.919:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4067 comm="syz.1.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9423dfd169 code=0x7ffc0000
[   47.932385][ T4068] IPv6: Can't replace route, no match found
[   47.936325][   T30] audit: type=1326 audit(1741899616.919:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4067 comm="syz.1.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9423dfd169 code=0x7ffc0000
[   47.965615][   T30] audit: type=1326 audit(1741899616.919:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4067 comm="syz.1.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9423dfd169 code=0x7ffc0000
[   47.988956][   T30] audit: type=1326 audit(1741899616.919:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4067 comm="syz.1.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9423dfd169 code=0x7ffc0000
[   48.014711][ T4062] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   48.024571][   T30] audit: type=1326 audit(1741899616.919:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4067 comm="syz.1.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9423dfd169 code=0x7ffc0000
[   48.050177][   T30] audit: type=1326 audit(1741899616.989:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4067 comm="syz.1.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9423dfd169 code=0x7ffc0000
[   48.062448][ T4062] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   48.073563][   T30] audit: type=1326 audit(1741899616.989:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4067 comm="syz.1.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9423dfd169 code=0x7ffc0000
[   48.123109][ T4062] futex_wake_op: syz.0.208 tries to shift op by -1; fix this program
[   48.171785][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.198286][ T4083] /dev/nullb0: Can't lookup blockdev
[   48.246668][ T4086] wireguard0: entered promiscuous mode
[   48.252222][ T4086] wireguard0: entered allmulticast mode
[   48.261433][ T4089] loop1: detected capacity change from 0 to 512
[   48.271330][ T4089] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   48.284982][ T4089] EXT4-fs (loop1): 1 truncate cleaned up
[   48.293056][ T4089] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   48.315236][ T4092] loop0: detected capacity change from 0 to 2048
[   48.406814][ T4083] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 15: block 33:freeing already freed block (bit 32); block bitmap corrupt.
[   48.422692][ T4092] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   48.435817][ T4083] EXT4-fs (loop1): Remounting filesystem read-only
[   48.453050][ T4092] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   48.463970][ T4083] EXT4-fs warning (device loop1): ext4_evict_inode:276: xattr delete (err -5)
[   48.487384][ T4087] futex_wake_op: syz.0.216 tries to shift op by -1; fix this program
[   48.538487][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.578476][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.663966][ T4097] loop2: detected capacity change from 0 to 8192
[   48.701696][ T4102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   48.718994][ T4102] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   48.727954][ T4106] 9pnet_fd: Insufficient options for proto=fd
[   48.747310][ T4097]  loop2: p1 p3 p4
[   48.757029][ T4097] loop2: p1 size 3506438656 extends beyond EOD, truncated
[   48.774241][ T4097] loop2: p3 start 218103808 is beyond EOD, truncated
[   48.781045][ T4097] loop2: p4 size 50331648 extends beyond EOD, truncated
[   48.842795][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[   48.854903][ T3761] udevd[3761]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[   48.945527][ T4102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   48.965212][ T4102] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   49.106069][ T4120] IPv6: Can't replace route, no match found
[   49.119365][ T4121] loop4: detected capacity change from 0 to 164
[   49.169689][ T4121] Unable to read rock-ridge attributes
[   49.355239][ T4129] /dev/nullb0: Can't lookup blockdev
[   49.640382][ T4131] loop4: detected capacity change from 0 to 512
[   49.785525][ T4131] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   49.956007][ T4131] EXT4-fs (loop4): 1 truncate cleaned up
[   49.962136][ T4131] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   50.002496][ T4129] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 15: block 33:freeing already freed block (bit 32); block bitmap corrupt.
[   50.025181][ T4136] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   50.034025][ T4129] EXT4-fs (loop4): Remounting filesystem read-only
[   50.050777][ T4129] EXT4-fs warning (device loop4): ext4_evict_inode:276: xattr delete (err -5)
[   50.106090][ T4136] bond_slave_1: entered promiscuous mode
[   50.172031][ T4136] netlink: 4 bytes leftover after parsing attributes in process `syz.0.233'.
[   50.223665][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.247748][ T4136] bond0: (slave bond_slave_1): Releasing backup interface
[   51.060724][ T4136] bond_slave_1 (unregistering): left promiscuous mode
[   51.487232][ T4184] loop3: detected capacity change from 0 to 2048
[   51.499316][ T4184] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   51.532447][ T4184] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   51.562272][ T4184] futex_wake_op: syz.3.252 tries to shift op by -1; fix this program
[   51.678350][ T4190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   51.688132][ T4190] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   51.709026][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.839649][ T4199] program syz.3.254 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   51.970932][ T4190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   51.979696][ T4190] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   52.232062][ T4214] pim6reg: entered allmulticast mode
[   52.351731][ T4217] loop0: detected capacity change from 0 to 2048
[   52.370901][ T4217] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   52.385940][ T4217] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   52.400449][ T4217] futex_wake_op: syz.0.264 tries to shift op by -1; fix this program
[   52.429039][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.521094][ T4228] loop4: detected capacity change from 0 to 512
[   52.528919][ T4228] EXT4-fs: Ignoring removed oldalloc option
[   52.541868][ T4228] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.267: Parent and EA inode have the same ino 15
[   52.555674][ T4228] EXT4-fs (loop4): Remounting filesystem read-only
[   52.562340][ T4228] EXT4-fs warning (device loop4): ext4_evict_inode:259: couldn't mark inode dirty (err -5)
[   52.573697][ T4228] EXT4-fs (loop4): 1 orphan inode deleted
[   52.580161][ T4228] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   52.592473][ T4228] SELinux: (dev loop4, type ext4) getxattr errno 5
[   52.600683][ T4228] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.634672][ T4237] program syz.0.271 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   52.683988][ T4243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   52.692720][ T4243] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   52.800330][ T4248] loop1: detected capacity change from 0 to 2048
[   52.839464][ T4248] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   52.852673][ T4248] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   53.011771][ T4243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   53.020573][ T4243] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   53.037681][ T4248] futex_wake_op: syz.1.276 tries to shift op by -1; fix this program
[   53.051679][   T30] kauditd_printk_skb: 297 callbacks suppressed
[   53.051698][   T30] audit: type=1326 audit(1741899622.069:1510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4247 comm="syz.1.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9423dfd169 code=0x7ffc0000
[   53.081416][   T30] audit: type=1326 audit(1741899622.069:1511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4247 comm="syz.1.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9423dfd169 code=0x7ffc0000
[   53.105079][   T30] audit: type=1326 audit(1741899622.069:1512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4247 comm="syz.1.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9423dfd169 code=0x7ffc0000
[   53.128463][   T30] audit: type=1326 audit(1741899622.069:1513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4247 comm="syz.1.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9423dfd169 code=0x7ffc0000
[   53.151868][   T30] audit: type=1326 audit(1741899622.069:1514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4247 comm="syz.1.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9423dfd169 code=0x7ffc0000
[   53.175254][   T30] audit: type=1326 audit(1741899622.089:1515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4247 comm="syz.1.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9423dfd169 code=0x7ffc0000
[   53.198571][   T30] audit: type=1326 audit(1741899622.089:1516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4247 comm="syz.1.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9423dfd169 code=0x7ffc0000
[   53.221901][   T30] audit: type=1326 audit(1741899622.089:1517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4247 comm="syz.1.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9423dfd169 code=0x7ffc0000
[   53.245224][   T30] audit: type=1326 audit(1741899622.089:1518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4247 comm="syz.1.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f9423dfd169 code=0x7ffc0000
[   53.268576][   T30] audit: type=1326 audit(1741899622.089:1519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4247 comm="syz.1.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9423dfd169 code=0x7ffc0000
[   53.454125][ T4268] futex_wake_op: syz.1.283 tries to shift op by -1; fix this program
[   53.618374][ T4282] loop3: detected capacity change from 0 to 2048
[   53.649667][ T4282] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   53.833750][ T4301] loop1: detected capacity change from 0 to 2048
[   54.847507][ T4321] netlink: 12 bytes leftover after parsing attributes in process `syz.4.302'.
[   55.393031][ T3664] kernel write not supported for file /sg0 (pid: 3664 comm: kworker/0:4)
[   55.416268][ T4332] loop4: detected capacity change from 0 to 2048
[   55.484560][ T4332] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   55.628987][ T4344] IPv6: Can't replace route, no match found
[   55.714758][ T4351] loop2: detected capacity change from 0 to 1024
[   55.910908][ T4357] /dev/nullb0: Can't lookup blockdev
[   56.131486][ T4351] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   56.163562][ T4363] loop4: detected capacity change from 0 to 512
[   56.188899][ T4363] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   56.279990][ T4363] EXT4-fs (loop4): 1 truncate cleaned up
[   56.345473][ T4357] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 15: block 33:freeing already freed block (bit 32); block bitmap corrupt.
[   56.407061][ T4357] EXT4-fs (loop4): Remounting filesystem read-only
[   56.413661][ T4357] EXT4-fs warning (device loop4): ext4_evict_inode:276: xattr delete (err -5)
[   56.821418][ T4380] loop0: detected capacity change from 0 to 2048
[   56.975549][ T4380] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   57.048309][ T4389] IPv6: Can't replace route, no match found
[   57.054696][ T4378] futex_wake_op: syz.0.317 tries to shift op by -1; fix this program
[   57.130596][ T3664] kernel write not supported for file /sg0 (pid: 3664 comm: kworker/0:4)
[   57.259848][ T4397] loop4: detected capacity change from 0 to 128
[   57.276820][ T4397] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   57.357381][ T4397] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   57.388883][ T4400] wireguard0: entered promiscuous mode
[   57.394417][ T4400] wireguard0: entered allmulticast mode
[   57.410965][ T4405] loop3: detected capacity change from 0 to 164
[   57.468574][ T4405] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   57.599387][ T4406] wireguard0: entered promiscuous mode
[   57.604921][ T4406] wireguard0: entered allmulticast mode
[   57.939352][ T4426] geneve2: entered promiscuous mode
[   57.944605][ T4426] geneve2: entered allmulticast mode
[   57.968950][ T4423] loop4: detected capacity change from 0 to 2048
[   58.086909][   T30] kauditd_printk_skb: 1265 callbacks suppressed
[   58.086984][   T30] audit: type=1400 audit(1741899627.139:2785): avc:  denied  { read write open } for  pid=3299 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   58.118512][   T30] audit: type=1400 audit(1741899627.139:2786): avc:  denied  { ioctl } for  pid=3299 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   58.144265][   T30] audit: type=1400 audit(1741899627.139:2787): avc:  denied  { read write } for  pid=3304 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   58.168513][   T30] audit: type=1400 audit(1741899627.139:2788): avc:  denied  { open } for  pid=3304 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   58.236031][ T4437] loop1: detected capacity change from 0 to 2048
[   58.244727][   T30] audit: type=1400 audit(1741899627.269:2789): avc:  denied  { prog_load } for  pid=4434 comm="syz.3.341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   58.263760][   T30] audit: type=1400 audit(1741899627.269:2790): avc:  denied  { bpf } for  pid=4434 comm="syz.3.341" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   58.284279][   T30] audit: type=1400 audit(1741899627.269:2791): avc:  denied  { perfmon } for  pid=4434 comm="syz.3.341" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   58.305104][   T30] audit: type=1400 audit(1741899627.269:2792): avc:  denied  { prog_run } for  pid=4434 comm="syz.3.341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   58.324128][   T30] audit: type=1400 audit(1741899627.279:2793): avc:  denied  { create } for  pid=4435 comm="syz.1.340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   58.344672][   T30] audit: type=1400 audit(1741899627.279:2794): avc:  denied  { create } for  pid=4435 comm="syz.1.340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   58.389351][ T4436] /dev/nullb0: Can't lookup blockdev
[   58.541337][ T4445] loop3: detected capacity change from 0 to 512
[   58.590653][ T4445] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   58.718959][ T4445] EXT4-fs (loop3): 1 truncate cleaned up
[   58.859906][ T4452] 9pnet: Could not find request transport: r
[   58.927460][ T4436] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 15: block 33:freeing already freed block (bit 32); block bitmap corrupt.
[   58.987779][ T4456] netlink: 12 bytes leftover after parsing attributes in process `syz.4.345'.
[   59.023107][ T4436] EXT4-fs (loop3): Remounting filesystem read-only
[   59.062083][ T4436] EXT4-fs warning (device loop3): ext4_evict_inode:276: xattr delete (err -5)
[   59.148657][ T4460] loop0: detected capacity change from 0 to 2048
[   59.216505][ T4460] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   59.291003][ T4460] futex_wake_op: syz.0.346 tries to shift op by -1; fix this program
[   59.320645][ T4464] loop1: detected capacity change from 0 to 8192
[   59.378600][ T3761]  loop1: p1 p3 p4
[   59.383845][ T3761] loop1: p1 size 3506438656 extends beyond EOD, truncated
[   59.405448][ T3761] loop1: p3 start 218103808 is beyond EOD, truncated
[   59.412337][ T3761] loop1: p4 size 50331648 extends beyond EOD, truncated
[   59.461432][ T4464]  loop1: p1 p3 p4
[   59.465296][ T4464] loop1: p1 size 3506438656 extends beyond EOD, truncated
[   59.479599][ T4464] loop1: p3 start 218103808 is beyond EOD, truncated
[   59.486365][ T4464] loop1: p4 size 50331648 extends beyond EOD, truncated
[   59.954045][ T4479] loop2: detected capacity change from 0 to 2048
[   60.057957][ T4480] loop0: detected capacity change from 0 to 764
[   60.476152][ T4480] Symlink component flag not implemented
[   60.554551][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[   60.600983][ T3761] udevd[3761]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[   60.614681][ T4480] Symlink component flag not implemented (101)
[   60.858495][ T4497] loop4: detected capacity change from 0 to 2048
[   60.906855][ T4500] /dev/nullb0: Can't lookup blockdev
[   61.067087][ T4509] loop1: detected capacity change from 0 to 512
[   61.176059][ T4509] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   61.201006][ T3761] udevd[3761]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[   61.223069][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[   61.266767][ T4509] EXT4-fs (loop1): 1 truncate cleaned up
[   61.505876][ T4500] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 15: block 33:freeing already freed block (bit 32); block bitmap corrupt.
[   61.602071][ T4500] EXT4-fs (loop1): Remounting filesystem read-only
[   61.652988][ T4500] EXT4-fs warning (device loop1): ext4_evict_inode:276: xattr delete (err -5)
[   61.905429][ T4518] netlink: 'syz.3.365': attribute type 12 has an invalid length.
[   62.138639][ T4519] loop0: detected capacity change from 0 to 8192
[   62.288783][ T4525]  loop0: p1 p3 p4
[   62.320646][ T4525] loop0: p1 size 3506438656 extends beyond EOD, truncated
[   62.367826][ T4525] loop0: p3 start 218103808 is beyond EOD, truncated
[   62.374604][ T4525] loop0: p4 size 50331648 extends beyond EOD, truncated
[   62.443564][ T4519]  loop0: p1 p3 p4
[   62.467260][ T4519] loop0: p1 size 3506438656 extends beyond EOD, truncated
[   62.491472][ T4519] loop0: p3 start 218103808 is beyond EOD, truncated
[   62.498303][ T4519] loop0: p4 size 50331648 extends beyond EOD, truncated
[   62.508907][ T4535] wireguard0: entered promiscuous mode
[   62.514495][ T4535] wireguard0: entered allmulticast mode
[   62.749199][ T4539] loop2: detected capacity change from 0 to 512
[   62.778455][ T4539] EXT4-fs: Ignoring removed oldalloc option
[   62.851197][ T4539] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.372: Parent and EA inode have the same ino 15
[   62.878661][ T3761] udevd[3761]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[   62.900501][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[   62.936972][ T4539] EXT4-fs (loop2): Remounting filesystem read-only
[   62.943594][ T4539] EXT4-fs warning (device loop2): ext4_evict_inode:259: couldn't mark inode dirty (err -5)
[   63.019014][ T4539] EXT4-fs (loop2): 1 orphan inode deleted
[   63.039357][ T4539] SELinux: (dev loop2, type ext4) getxattr errno 5
[   63.099344][   T30] kauditd_printk_skb: 1154 callbacks suppressed
[   63.099362][   T30] audit: type=1326 audit(1741899632.159:3949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4529 comm="syz.1.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9423d99359 code=0x7ffc0000
[   63.128967][   T30] audit: type=1326 audit(1741899632.159:3950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4529 comm="syz.1.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9423dfd169 code=0x7ffc0000
[   63.276765][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[   63.294584][ T3761] udevd[3761]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[   63.301678][   T30] audit: type=1326 audit(1741899632.209:3951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4529 comm="syz.1.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9423d99359 code=0x7ffc0000
[   63.327619][   T30] audit: type=1326 audit(1741899632.209:3952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4529 comm="syz.1.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9423dfd169 code=0x7ffc0000
[   63.351046][   T30] audit: type=1326 audit(1741899632.219:3953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4529 comm="syz.1.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9423d99359 code=0x7ffc0000
[   63.374304][   T30] audit: type=1326 audit(1741899632.219:3954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4529 comm="syz.1.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9423dfd169 code=0x7ffc0000
[   63.397678][   T30] audit: type=1400 audit(1741899632.239:3955): avc:  denied  { read write } for  pid=3308 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   63.421674][ T4555] program syz.1.378 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   63.421849][   T30] audit: type=1400 audit(1741899632.239:3956): avc:  denied  { open } for  pid=3308 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   63.455028][   T30] audit: type=1400 audit(1741899632.249:3957): avc:  denied  { ioctl } for  pid=3308 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   63.480767][   T30] audit: type=1400 audit(1741899632.279:3958): avc:  denied  { read write } for  pid=3299 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   63.685201][ T4552] /dev/nullb0: Can't lookup blockdev
[   63.755412][ T3377] udevd[3377]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[   63.759386][ T3761] udevd[3761]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[   63.818721][ T4567] futex_wake_op: syz.2.382 tries to shift op by -1; fix this program
[   63.854160][ T4552] loop0: detected capacity change from 0 to 512
[   63.953068][ T4552] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   64.008460][ T4552] EXT4-fs (loop0): 1 truncate cleaned up
[   64.091596][ T4552] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 15: block 33:freeing already freed block (bit 32); block bitmap corrupt.
[   64.180542][ T4575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   64.217066][ T4575] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   64.225173][ T4552] EXT4-fs (loop0): Remounting filesystem read-only
[   64.274723][ T4552] EXT4-fs warning (device loop0): ext4_evict_inode:276: xattr delete (err -5)
[   64.477415][ T4575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   64.508588][ T4575] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   64.541576][ T4587] program syz.1.390 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   65.579018][ T4605] loop1: detected capacity change from 0 to 2048
[   65.625953][ T4605] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   65.687787][ T4611] /dev/nullb0: Can't lookup blockdev
[   65.723582][ T4605] futex_wake_op: syz.1.397 tries to shift op by -1; fix this program
[   65.789341][ T4614] loop0: detected capacity change from 0 to 512
[   65.818728][ T4614] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   65.888589][ T4613] netlink: 'syz.3.399': attribute type 12 has an invalid length.
[   65.946094][ T4614] EXT4-fs (loop0): 1 truncate cleaned up
[   66.001996][ T4622] loop3: detected capacity change from 0 to 2048
[   66.034941][ T4622] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   66.102439][ T4628] program syz.1.402 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   66.192425][ T4611] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 15: block 33:freeing already freed block (bit 32); block bitmap corrupt.
[   66.240956][ T4611] EXT4-fs (loop0): Remounting filesystem read-only
[   66.297098][ T4611] EXT4-fs warning (device loop0): ext4_evict_inode:276: xattr delete (err -5)
[   66.425599][ T4630] loop4: detected capacity change from 0 to 8192
[   66.474398][ T4630]  loop4: p1 p3 p4
[   66.489822][ T4630] loop4: p1 size 3506438656 extends beyond EOD, truncated
[   66.542654][ T4630] loop4: p3 start 218103808 is beyond EOD, truncated
[   66.549514][ T4630] loop4: p4 size 50331648 extends beyond EOD, truncated
[   66.793706][ T4650] loop0: detected capacity change from 0 to 512
[   66.818842][ T4650] EXT4-fs: Ignoring removed oldalloc option
[   66.858842][ T4653] IPv6: Can't replace route, no match found
[   66.864964][ T4650] EXT4-fs error (device loop0): ext4_xattr_inode_iget:436: comm syz.0.411: Parent and EA inode have the same ino 15
[   66.911941][ T4650] EXT4-fs (loop0): Remounting filesystem read-only
[   66.918595][ T4650] EXT4-fs warning (device loop0): ext4_evict_inode:259: couldn't mark inode dirty (err -5)
[   66.942267][ T4654] netlink: 'syz.4.413': attribute type 12 has an invalid length.
[   66.948601][ T3761] udevd[3761]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[   66.971987][ T4650] EXT4-fs (loop0): 1 orphan inode deleted
[   66.978212][ T4650] EXT4-fs mount: 37 callbacks suppressed
[   66.978227][ T4650] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   66.998250][ T4650] SELinux: (dev loop0, type ext4) getxattr errno 5
[   67.006261][ T4650] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   67.023560][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[   67.208558][ T4662] program syz.0.416 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   67.278013][ T4663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   67.325581][ T4663] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   67.608479][ T4663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   67.657927][ T4663] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   67.805035][ T4682] netlink: 12 bytes leftover after parsing attributes in process `syz.2.426'.
[   68.079682][ T4693] program syz.2.430 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   68.111081][   T30] kauditd_printk_skb: 1451 callbacks suppressed
[   68.111127][   T30] audit: type=1326 audit(1741899637.169:5410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4681 comm="syz.3.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd6da529359 code=0x7ffc0000
[   68.154165][   T30] audit: type=1326 audit(1741899637.199:5411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4681 comm="syz.3.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd6da529359 code=0x7ffc0000
[   68.177557][   T30] audit: type=1326 audit(1741899637.199:5412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4681 comm="syz.3.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6da58d169 code=0x7ffc0000
[   68.200885][   T30] audit: type=1326 audit(1741899637.209:5413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4681 comm="syz.3.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd6da529359 code=0x7ffc0000
[   68.224179][   T30] audit: type=1326 audit(1741899637.209:5414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4681 comm="syz.3.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6da58d169 code=0x7ffc0000
[   68.269905][   T30] audit: type=1400 audit(1741899637.209:5415): avc:  denied  { map_create } for  pid=4694 comm="syz.4.431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   68.289041][   T30] audit: type=1400 audit(1741899637.209:5416): avc:  denied  { map_create } for  pid=4695 comm="syz.2.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   68.308133][   T30] audit: type=1400 audit(1741899637.209:5417): avc:  denied  { perfmon } for  pid=4695 comm="syz.2.432" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   68.313756][ T4697] loop2: detected capacity change from 0 to 2048
[   68.329069][   T30] audit: type=1400 audit(1741899637.209:5418): avc:  denied  { map_read map_write } for  pid=4695 comm="syz.2.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   68.329096][   T30] audit: type=1400 audit(1741899637.239:5419): avc:  denied  { prog_load } for  pid=4695 comm="syz.2.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   68.490459][ T4697] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   68.507406][ T4697] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   68.593100][ T4709] loop4: detected capacity change from 0 to 2048
[   68.632133][ T4709] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   68.703307][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   68.757772][ T4716] loop3: detected capacity change from 0 to 512
[   68.759948][ T4718] futex_wake_op: syz.1.439 tries to shift op by -1; fix this program
[   68.801885][ T4716] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   68.829923][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   68.899652][ T4716] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   68.957749][ T4716] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   69.013701][ T4731] 9pnet_fd: Insufficient options for proto=fd
[   69.048316][ T4716] loop3: detected capacity change from 512 to 0
[   69.131319][ T3304] syz-executor: attempt to access beyond end of device
[   69.131319][ T3304] loop3: rw=12288, sector=8, nr_sectors = 2 limit=0
[   69.148124][ T3304] syz-executor: attempt to access beyond end of device
[   69.148124][ T3304] loop3: rw=524288, sector=72, nr_sectors = 2 limit=0
[   69.205057][ T3304] syz-executor: attempt to access beyond end of device
[   69.205057][ T3304] loop3: rw=524288, sector=74, nr_sectors = 2 limit=0
[   69.232961][ T3304] syz-executor: attempt to access beyond end of device
[   69.232961][ T3304] loop3: rw=524288, sector=76, nr_sectors = 2 limit=0
[   69.269080][ T4745] loop2: detected capacity change from 0 to 512
[   69.295920][ T3304] syz-executor: attempt to access beyond end of device
[   69.295920][ T3304] loop3: rw=524288, sector=78, nr_sectors = 2 limit=0
[   69.297389][ T3001] udevd[3001]: worker [3761] terminated by signal 33 (Unknown signal 33)
[   69.311535][ T4745] journal_path: Non-blockdev passed as './bus'
[   69.324208][ T4745] EXT4-fs: error: could not find journal device path
[   69.328961][ T3001] udevd[3001]: worker [3761] failed while handling '/devices/virtual/block/loop4'
[   69.342549][ T3304] syz-executor: attempt to access beyond end of device
[   69.342549][ T3304] loop3: rw=12288, sector=70, nr_sectors = 2 limit=0
[   69.363882][ T3304] EXT4-fs error (device loop3): ext4_get_inode_loc:4573: inode #2: block 35: comm syz-executor: unable to read itable block
[   69.386624][ T3304] syz-executor: attempt to access beyond end of device
[   69.386624][ T3304] loop3: rw=145409, sector=2, nr_sectors = 2 limit=0
[   69.400115][ T3304] Buffer I/O error on dev loop3, logical block 1, lost sync page write
[   69.446982][ T4750] futex_wake_op: syz.0.452 tries to shift op by -1; fix this program
[   69.465431][ T3304] EXT4-fs (loop3): I/O error while writing superblock
[   69.472314][ T3304] EXT4-fs (loop3): Remounting filesystem read-only
[   69.490668][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   69.504994][ T3304] syz-executor: attempt to access beyond end of device
[   69.504994][ T3304] loop3: rw=145409, sector=2, nr_sectors = 2 limit=0
[   69.518622][ T3304] Buffer I/O error on dev loop3, logical block 1, lost sync page write
[   69.535804][ T3304] EXT4-fs (loop3): I/O error while writing superblock
[   69.540910][ T4754] netlink: 12 bytes leftover after parsing attributes in process `syz.1.453'.
[   69.564824][ T4722] kmmpd-loop3: attempt to access beyond end of device
[   69.564824][ T4722] loop3: rw=14337, sector=34, nr_sectors = 2 limit=0
[   69.578574][ T4722] Buffer I/O error on dev loop3, logical block 17, lost sync page write
[   69.647115][ T4759] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[   69.657042][ T4758] loop0: detected capacity change from 0 to 2048
[   69.717164][ T4758] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   69.732572][ T4759] loop2: detected capacity change from 0 to 256
[   69.739739][ T4758] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   69.834887][   T29] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.946551][ T4759] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   69.978137][   T29] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.050591][   T29] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.091155][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.160914][   T29] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.342116][   T29] bridge_slave_1: left allmulticast mode
[   70.347937][   T29] bridge_slave_1: left promiscuous mode
[   70.353745][   T29] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.375720][ T4773] loop4: detected capacity change from 0 to 8192
[   70.449854][ T4773]  loop4: p1 p3 p4
[   70.460571][   T29] bridge_slave_0: left allmulticast mode
[   70.466350][   T29] bridge_slave_0: left promiscuous mode
[   70.472049][   T29] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.481320][ T4773] loop4: p1 size 3506438656 extends beyond EOD, truncated
[   70.564036][ T4773] loop4: p3 start 218103808 is beyond EOD, truncated
[   70.570903][ T4773] loop4: p4 size 50331648 extends beyond EOD, truncated
[   70.860133][ T4792] futex_wake_op: syz.0.465 tries to shift op by -1; fix this program
[   70.940319][   T29] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   70.971826][   T29] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   71.006345][   T29] bond0 (unregistering): Released all slaves
[   71.121739][   T29] hsr_slave_0: left promiscuous mode
[   71.171927][   T29] hsr_slave_1: left promiscuous mode
[   71.206153][   T29] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   71.213687][   T29] batman_adv: batadv0: Removing interface: batadv_slave_0
[   71.239964][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[   71.250766][   T29] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   71.258299][   T29] batman_adv: batadv0: Removing interface: batadv_slave_1
[   71.258469][ T4796] udevd[4796]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[   71.314910][   T29] veth1_macvtap: left promiscuous mode
[   71.325735][   T29] veth0_macvtap: left promiscuous mode
[   71.348845][   T29] veth1_vlan: left promiscuous mode
[   71.354190][   T29] veth0_vlan: left promiscuous mode
[   71.390909][ T4813] loop1: detected capacity change from 0 to 2048
[   71.498584][   T29] pim6reg (unregistering): left allmulticast mode
[   71.510348][ T4813] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   71.532136][ T4813] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   71.678020][   T29] team0 (unregistering): Port device team_slave_1 removed
[   71.706343][   T29] team0 (unregistering): Port device team_slave_0 removed
[   71.783682][ T4812] wireguard0: entered promiscuous mode
[   71.789264][ T4812] wireguard0: entered allmulticast mode
[   71.833792][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.512902][ T4801] chnl_net:caif_netlink_parms(): no params data found
[   72.541621][ T4870] futex_wake_op: syz.4.478 tries to shift op by -1; fix this program
[   72.602411][ T4861] loop1: detected capacity change from 0 to 8192
[   72.669522][ T4861]  loop1: p1 p3 p4
[   72.673391][ T4861] loop1: p1 size 3506438656 extends beyond EOD, truncated
[   72.723641][ T4861] loop1: p3 start 218103808 is beyond EOD, truncated
[   72.730512][ T4861] loop1: p4 size 50331648 extends beyond EOD, truncated
[   72.782082][ T4801] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.789249][ T4801] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.829119][ T4801] bridge_slave_0: entered allmulticast mode
[   72.858605][ T4801] bridge_slave_0: entered promiscuous mode
[   72.888261][ T4801] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.895348][ T4801] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.946083][ T4801] bridge_slave_1: entered allmulticast mode
[   72.971112][ T4801] bridge_slave_1: entered promiscuous mode
[   73.070958][ T4801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   73.103668][ T4801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   73.120278][   T30] kauditd_printk_skb: 1766 callbacks suppressed
[   73.120294][   T30] audit: type=1400 audit(1741899642.179:7186): avc:  denied  { bpf } for  pid=4893 comm="syz.0.482" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   73.147206][   T30] audit: type=1400 audit(1741899642.179:7187): avc:  denied  { prog_run } for  pid=4893 comm="syz.0.482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   73.209547][ T4894] loop0: detected capacity change from 0 to 2048
[   73.236193][ T4783] udevd[4783]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[   73.254684][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[   73.287166][ T4801] team0: Port device team_slave_0 added
[   73.295155][ T4801] team0: Port device team_slave_1 added
[   73.301015][   T30] audit: type=1400 audit(1741899642.209:7188): avc:  denied  { search } for  pid=4899 comm="sed" name="resolv.conf" dev="tmpfs" ino=415 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   73.323252][   T30] audit: type=1400 audit(1741899642.209:7189): avc:  denied  { read } for  pid=4899 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=443 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   73.345206][   T30] audit: type=1400 audit(1741899642.209:7190): avc:  denied  { open } for  pid=4899 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=443 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   73.370091][   T30] audit: type=1400 audit(1741899642.209:7191): avc:  denied  { getattr } for  pid=4899 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=443 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   73.395335][   T30] audit: type=1400 audit(1741899642.249:7192): avc:  denied  { create } for  pid=4895 comm="syz.1.483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   73.411958][ T4894] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   73.415756][   T30] audit: type=1400 audit(1741899642.249:7193): avc:  denied  { create } for  pid=4895 comm="syz.1.483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   73.448214][   T30] audit: type=1400 audit(1741899642.249:7194): avc:  denied  { write } for  pid=4895 comm="syz.1.483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   73.468492][   T30] audit: type=1400 audit(1741899642.249:7195): avc:  denied  { read } for  pid=4895 comm="syz.1.483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   73.499918][ T4894] ext4 filesystem being mounted at /112/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   73.574981][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.600092][ T4801] batman_adv: batadv0: Adding interface: batadv_slave_0
[   73.607280][ T4801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.633285][ T4801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   73.771704][ T4801] batman_adv: batadv0: Adding interface: batadv_slave_1
[   73.778850][ T4801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.804900][ T4801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   73.944625][ T4927] futex_wake_op: syz.1.489 tries to shift op by -1; fix this program
[   73.967257][ T4909] IPv6: Can't replace route, no match found
[   74.166205][ T4801] hsr_slave_0: entered promiscuous mode
[   74.203196][ T4801] hsr_slave_1: entered promiscuous mode
[   74.223889][ T4801] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   74.248636][ T4801] Cannot create hsr debugfs directory
[   74.731709][ T4801] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   74.791077][ T4801] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   74.817560][ T4801] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   74.850940][ T4801] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   75.191550][ T4985] netlink: 596 bytes leftover after parsing attributes in process `syz.1.502'.
[   75.367662][ T4801] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.511749][ T4801] 8021q: adding VLAN 0 to HW filter on device team0
[   75.534479][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.541616][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.595510][ T3416] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.602681][ T3416] bridge0: port 2(bridge_slave_1) entered forwarding state
[   76.151999][ T5035] loop1: detected capacity change from 0 to 2048
[   76.260358][ T4801] 8021q: adding VLAN 0 to HW filter on device batadv0
[   76.355639][ T5035] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   76.388490][ T5035] ext4 filesystem being mounted at /114/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   76.500054][ T5035] futex_wake_op: syz.1.513 tries to shift op by -1; fix this program
[   76.729864][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   77.304655][ T5097] netlink: 12 bytes leftover after parsing attributes in process `syz.2.525'.
[   77.358781][ T4801] veth0_vlan: entered promiscuous mode
[   77.418343][ T4801] veth1_vlan: entered promiscuous mode
[   77.554719][ T4801] veth0_macvtap: entered promiscuous mode
[   77.620391][ T4801] veth1_macvtap: entered promiscuous mode
[   77.662996][ T4801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   77.673551][ T4801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.683671][ T4801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   77.694275][ T4801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.704233][ T4801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   77.714796][ T4801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.724889][ T4801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   77.735357][ T4801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.739183][ T5114] loop2: detected capacity change from 0 to 2048
[   77.895042][ T5114] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   77.944639][ T4801] batman_adv: batadv0: Interface activated: batadv_slave_0
[   77.962491][ T5114] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   78.002834][ T4801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   78.013494][ T4801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.023399][ T4801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   78.033853][ T4801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.043741][ T4801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   78.046350][ T5133] loop1: detected capacity change from 0 to 512
[   78.054179][ T4801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.054195][ T4801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   78.054211][ T4801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.117938][ T5133] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   78.127888][   T30] kauditd_printk_skb: 1806 callbacks suppressed
[   78.127900][   T30] audit: type=1400 audit(1741899647.189:9002): avc:  denied  { search } for  pid=5136 comm="rm" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   78.155139][   T30] audit: type=1400 audit(1741899647.189:9003): avc:  denied  { search } for  pid=5136 comm="rm" name="dhcpcd" dev="tmpfs" ino=410 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   78.203810][ T4801] batman_adv: batadv0: Interface activated: batadv_slave_1
[   78.236702][ T5114] futex_wake_op: syz.2.531 tries to shift op by -1; fix this program
[   78.242041][ T4801] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   78.253581][ T4801] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   78.262430][ T4801] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   78.271203][ T4801] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   78.280804][   T30] audit: type=1400 audit(1741899647.189:9004): avc:  denied  { map_create } for  pid=5112 comm="syz.2.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   78.282962][ T5133] EXT4-fs (loop1): 1 truncate cleaned up
[   78.299920][   T30] audit: type=1400 audit(1741899647.239:9005): avc:  denied  { prog_load } for  pid=5112 comm="syz.2.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   78.324720][   T30] audit: type=1400 audit(1741899647.239:9006): avc:  denied  { bpf } for  pid=5112 comm="syz.2.531" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   78.345279][   T30] audit: type=1326 audit(1741899647.239:9007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5112 comm="syz.2.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec6dfdd169 code=0x7ffc0000
[   78.368619][   T30] audit: type=1326 audit(1741899647.239:9008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5112 comm="syz.2.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec6dfdd169 code=0x7ffc0000
[   78.384844][ T5133] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   78.391948][   T30] audit: type=1326 audit(1741899647.239:9009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5112 comm="syz.2.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fec6dfdd169 code=0x7ffc0000
[   78.427749][   T30] audit: type=1400 audit(1741899647.249:9010): avc:  denied  { map_create } for  pid=5112 comm="syz.2.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   78.446901][   T30] audit: type=1400 audit(1741899647.269:9011): avc:  denied  { map_create } for  pid=5137 comm="syz.4.536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   78.546387][ T5133] netlink: 'syz.1.535': attribute type 13 has an invalid length.
[   78.617296][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   78.629038][ T5142] netlink: 4 bytes leftover after parsing attributes in process `syz.4.536'.
[   78.675042][ T5133] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.682248][ T5133] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.802756][ T5150] netlink: 12 bytes leftover after parsing attributes in process `syz.2.537'.
[   78.854474][ T5133] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   78.865090][ T5133] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   78.936411][ T5133] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   78.945505][ T5133] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   78.955158][ T5133] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   78.964269][ T5133] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   79.460877][ T5173] netlink: 'syz.5.542': attribute type 298 has an invalid length.
[   79.469856][ T5173] netlink: 'syz.5.542': attribute type 13 has an invalid length.
[   79.491906][ T5171] netlink: 'syz.4.541': attribute type 1 has an invalid length.
[   79.558873][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.611544][ T5173] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.618850][ T5173] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.720908][ T5173] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   79.731937][ T5173] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   79.821977][ T5173] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   79.831041][ T5173] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   79.839957][ T5173] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   79.849039][ T5173] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   79.887840][ T5171] tipc: Started in network mode
[   79.892750][ T5171] tipc: Node identity 4, cluster identity 4711
[   79.899026][ T5171] tipc: Node number set to 4
[   80.001979][ T5191] netlink: 'syz.5.548': attribute type 12 has an invalid length.
[   80.027082][ T5189] loop1: detected capacity change from 0 to 512
[   80.039489][ T5189] EXT4-fs: Invalid want_extra_isize 2047
[   80.108291][ T5189] netlink: 8 bytes leftover after parsing attributes in process `syz.1.547'.
[   80.117657][ T5195] capability: warning: `syz.2.550' uses 32-bit capabilities (legacy support in use)
[   80.180716][ T5198] loop2: detected capacity change from 0 to 512
[   80.226930][ T5198] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[   80.236023][ T5198] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[   80.285833][ T5198] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended
[   80.300194][ T5198] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[   80.339085][ T5198] System zones: 0-2, 18-18, 34-34
[   80.364946][ T5198] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended
[   80.395691][ T5198] EXT4-fs (loop2): 1 truncate cleaned up
[   80.415082][ T5198] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   80.592146][ T5198] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10)
[   80.598864][ T5198] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[   80.606625][ T5198] vhci_hcd vhci_hcd.0: Device attached
[   80.636716][ T5210] xt_TPROXY: Can be used only with -p tcp or -p udp
[   80.665665][ T5211] vhci_hcd: connection closed
[   80.701534][   T29] vhci_hcd: stop threads
[   80.710573][   T29] vhci_hcd: release socket
[   80.715112][   T29] vhci_hcd: disconnect device
[   80.810306][ T5216] vlan2: entered allmulticast mode
[   81.166985][ T5230] loop4: detected capacity change from 0 to 512
[   81.180594][ T5230] EXT4-fs: Ignoring removed oldalloc option
[   81.190188][ T5230] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.561: Parent and EA inode have the same ino 15
[   81.203790][ T5230] EXT4-fs (loop4): Remounting filesystem read-only
[   81.210450][ T5230] EXT4-fs warning (device loop4): ext4_evict_inode:259: couldn't mark inode dirty (err -5)
[   81.220620][ T5230] EXT4-fs (loop4): 1 orphan inode deleted
[   81.226895][ T5230] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   81.239015][ T5230] SELinux: (dev loop4, type ext4) getxattr errno 5
[   81.279579][ T5230] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   81.290581][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   81.333913][ T5238] wireguard0: entered promiscuous mode
[   81.339734][ T5238] wireguard0: entered allmulticast mode
[   82.066036][ T5261] netlink: 'syz.4.573': attribute type 1 has an invalid length.
[   82.073936][ T5261] netlink: 'syz.4.573': attribute type 1 has an invalid length.
[   82.081821][ T5261] netlink: 'syz.4.573': attribute type 1 has an invalid length.
[   82.089713][ T5261] netlink: 'syz.4.573': attribute type 1 has an invalid length.
[   82.092943][ T5263] netlink: 24 bytes leftover after parsing attributes in process `syz.5.572'.
[   82.097576][ T5261] netlink: 'syz.4.573': attribute type 2 has an invalid length.
[   82.364440][ T5272] loop4: detected capacity change from 0 to 512
[   82.372871][ T5274] wireguard0: entered promiscuous mode
[   82.378630][ T5274] wireguard0: entered allmulticast mode
[   82.388507][ T5272] EXT4-fs: Ignoring removed oldalloc option
[   82.452930][ T5272] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.575: Parent and EA inode have the same ino 15
[   82.530332][ T5272] EXT4-fs (loop4): Remounting filesystem read-only
[   82.537108][ T5272] EXT4-fs warning (device loop4): ext4_evict_inode:259: couldn't mark inode dirty (err -5)
[   82.547794][ T5279] IPv6: Can't replace route, no match found
[   82.577535][ T5272] EXT4-fs (loop4): 1 orphan inode deleted
[   82.585060][ T5272] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   82.619012][ T5272] SELinux: (dev loop4, type ext4) getxattr errno 5
[   82.648881][ T5272] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.950289][ T5294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   83.028355][ T5294] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   83.140893][   T30] kauditd_printk_skb: 1355 callbacks suppressed
[   83.140909][   T30] audit: type=1400 audit(1741899652.199:10365): avc:  denied  { read write } for  pid=3298 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   83.204714][   T30] audit: type=1400 audit(1741899652.229:10366): avc:  denied  { read write open } for  pid=3298 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   83.230108][   T30] audit: type=1400 audit(1741899652.229:10367): avc:  denied  { ioctl } for  pid=3298 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   83.255935][   T30] audit: type=1400 audit(1741899652.259:10368): avc:  denied  { read write } for  pid=3299 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   83.280417][   T30] audit: type=1400 audit(1741899652.259:10369): avc:  denied  { open } for  pid=3299 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   83.304749][   T30] audit: type=1400 audit(1741899652.259:10370): avc:  denied  { ioctl } for  pid=3299 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   83.361173][ T5294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   83.377009][ T5294] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   83.424954][ T5304] loop1: detected capacity change from 0 to 512
[   83.469580][   T30] audit: type=1400 audit(1741899652.259:10371): avc:  denied  { prog_load } for  pid=5300 comm="syz.4.585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   83.488738][   T30] audit: type=1400 audit(1741899652.259:10372): avc:  denied  { bpf } for  pid=5300 comm="syz.4.585" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   83.509446][   T30] audit: type=1400 audit(1741899652.259:10373): avc:  denied  { map_create } for  pid=5300 comm="syz.4.585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   83.528696][   T30] audit: type=1400 audit(1741899652.259:10374): avc:  denied  { prog_load } for  pid=5300 comm="syz.4.585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   83.552262][ T5304] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.586: corrupted in-inode xattr: invalid ea_ino
[   83.596966][ T5304] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.586: couldn't read orphan inode 15 (err -117)
[   83.629048][ T5304] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   83.712086][ T5309] netlink: 12 bytes leftover after parsing attributes in process `syz.4.588'.
[   83.738164][ T5303] rdma_op ffff8881331ec580 conn xmit_rdma 0000000000000000
[   83.959335][ T5320] /dev/nullb0: Can't lookup blockdev
[   84.061760][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   84.066120][ T5324] loop4: detected capacity change from 0 to 512
[   84.113370][ T5324] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   84.161685][ T5324] EXT4-fs (loop4): 1 truncate cleaned up
[   84.172241][ T5324] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   84.332428][ T5320] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 15: block 33:freeing already freed block (bit 32); block bitmap corrupt.
[   84.392711][ T5320] EXT4-fs (loop4): Remounting filesystem read-only
[   84.406971][ T5320] EXT4-fs warning (device loop4): ext4_evict_inode:276: xattr delete (err -5)
[   84.548235][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.121827][ T5365] program syz.4.601 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   85.183732][ T5368] lo: entered promiscuous mode
[   85.188657][ T5368] lo: entered allmulticast mode
[   85.235876][ T5371] wireguard0: entered promiscuous mode
[   85.241477][ T5371] wireguard0: entered allmulticast mode
[   86.256361][ T5403] loop4: detected capacity change from 0 to 8192
[   86.332236][ T5403]  loop4: p1 p3 p4
[   86.336072][ T5403] loop4: p1 size 3506438656 extends beyond EOD, truncated
[   86.371219][ T5403] loop4: p3 start 218103808 is beyond EOD, truncated
[   86.378056][ T5403] loop4: p4 size 50331648 extends beyond EOD, truncated
[   86.378756][ T5412] loop2: detected capacity change from 0 to 2048
[   86.448987][ T5412] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   86.502788][ T5412] ext4 filesystem being mounted at /118/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   86.565861][ T5412] futex_wake_op: syz.2.618 tries to shift op by -1; fix this program
[   86.646328][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   86.741952][ T5429] wireguard0: entered promiscuous mode
[   86.747512][ T5429] wireguard0: entered allmulticast mode
[   86.792240][ T4783] udevd[4783]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[   86.850453][ T5434] loop1: detected capacity change from 0 to 2048
[   86.864131][ T4767] udevd[4767]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[   86.902436][ T5434] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   86.920770][ T5434] ext4 filesystem being mounted at /137/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   87.063480][ T5439] pim6reg: entered allmulticast mode
[   87.099247][ T5434] futex_wake_op: syz.1.624 tries to shift op by -1; fix this program
[   87.155551][ T4767] udevd[4767]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[   87.170386][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[   87.374544][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   87.433967][ T5448] loop4: detected capacity change from 0 to 2048
[   87.598615][ T5448] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   87.866130][ T5459] syz.5.631 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   88.161982][   T30] kauditd_printk_skb: 1387 callbacks suppressed
[   88.162087][   T30] audit: type=1400 audit(1741899657.219:11714): avc:  denied  { map_create } for  pid=5475 comm="syz.0.636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   88.212058][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   88.271183][   T30] audit: type=1400 audit(1741899657.219:11715): avc:  denied  { perfmon } for  pid=5475 comm="syz.0.636" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   88.292275][   T30] audit: type=1400 audit(1741899657.219:11716): avc:  denied  { map_read map_write } for  pid=5475 comm="syz.0.636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   88.312370][   T30] audit: type=1400 audit(1741899657.229:11717): avc:  denied  { prog_load } for  pid=5475 comm="syz.0.636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   88.328579][ T5476] loop0: detected capacity change from 0 to 2048
[   88.331636][   T30] audit: type=1400 audit(1741899657.229:11718): avc:  denied  { bpf } for  pid=5475 comm="syz.0.636" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   88.358941][   T30] audit: type=1400 audit(1741899657.229:11719): avc:  denied  { perfmon } for  pid=5475 comm="syz.0.636" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   88.379869][   T30] audit: type=1400 audit(1741899657.249:11720): avc:  denied  { read write } for  pid=4801 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   88.404213][   T30] audit: type=1400 audit(1741899657.249:11721): avc:  denied  { open } for  pid=4801 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   88.428549][   T30] audit: type=1400 audit(1741899657.249:11722): avc:  denied  { ioctl } for  pid=4801 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   88.454274][   T30] audit: type=1400 audit(1741899657.249:11723): avc:  denied  { unmount } for  pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   88.525818][ T5481] loop5: detected capacity change from 0 to 128
[   88.553084][ T5470] loop2: detected capacity change from 0 to 8192
[   88.607634][ T5476] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   88.687226][ T5476] ext4 filesystem being mounted at /149/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   88.763956][ T5470]  loop2: p1 p3 p4
[   88.834520][ T5470] loop2: p1 size 3506438656 extends beyond EOD, truncated
[   88.873436][ T5476] futex_wake_op: syz.0.636 tries to shift op by -1; fix this program
[   88.881232][ T5503] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[   88.903627][ T5481] syz.5.637: attempt to access beyond end of device
[   88.903627][ T5481] loop5: rw=0, sector=121, nr_sectors = 8 limit=128
[   88.919986][ T5470] loop2: p3 start 218103808 is beyond EOD, truncated
[   88.926747][ T5470] loop2: p4 size 50331648 extends beyond EOD, truncated
[   88.941488][ T5505] 9pnet_fd: Insufficient options for proto=fd
[   88.949385][ T5503] SELinux: failed to load policy
[   89.197689][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   89.357615][ T4767] udevd[4767]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[   89.374744][ T4783] udevd[4783]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[   90.276102][ T5570] /dev/nullb0: Can't lookup blockdev
[   90.399668][ T5576] loop5: detected capacity change from 0 to 512
[   90.451430][ T5576] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   90.519224][ T5576] EXT4-fs (loop5): 1 truncate cleaned up
[   90.525237][ T5576] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   90.748297][ T5586] loop2: detected capacity change from 0 to 128
[   90.778300][ T5570] EXT4-fs error (device loop5): mb_free_blocks:1948: group 0, inode 15: block 33:freeing already freed block (bit 32); block bitmap corrupt.
[   90.829489][ T5570] EXT4-fs (loop5): Remounting filesystem read-only
[   90.860724][ T5570] EXT4-fs warning (device loop5): ext4_evict_inode:276: xattr delete (err -5)
[   91.002557][ T4801] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   91.223003][ T5616] vlan2: entered allmulticast mode
[   91.449048][ T5612] loop4: detected capacity change from 0 to 512
[   91.471634][ T5612] ext4: Invalid uid '0x00000000ffffffff'
[   91.513100][ T5635] syz.0.670 uses obsolete (PF_INET,SOCK_PACKET)
[   91.702798][ T5649] netlink: 12 bytes leftover after parsing attributes in process `syz.0.670'.
[   91.987787][ T5666] sd 0:0:1:0: device reset
[   92.014521][ T5657] Restarting kernel threads ... done.
[   92.392042][ T5689] futex_wake_op: syz.5.680 tries to shift op by -1; fix this program
[   92.648679][ T5712] IPv6: NLM_F_CREATE should be specified when creating new route
[   92.770953][ T5722] /dev/nullb0: Can't lookup blockdev
[   92.842543][ T5730] loop2: detected capacity change from 0 to 512
[   92.917410][ T5730] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   92.999594][ T5737] can0: slcan on ttyS3.
[   93.043039][ T5730] EXT4-fs (loop2): 1 truncate cleaned up
[   93.082705][ T5725] can0 (unregistered): slcan off ttyS3.
[   93.093615][ T5730] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   93.145621][ T5746] netlink: 16 bytes leftover after parsing attributes in process `syz.0.692'.
[   93.170477][   T30] kauditd_printk_skb: 2195 callbacks suppressed
[   93.170495][   T30] audit: type=1400 audit(1741899662.219:13919): avc:  denied  { kernel } for  pid=5716 comm="syz.2.687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[   93.172889][ T5722] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, 
[   93.176936][   T30] audit: type=1400 audit(1741899662.229:13920): avc:  denied  { prog_load } for  pid=5745 comm="syz.4.693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   93.196317][ T5722] inode 15: block 33:
[   93.203891][   T30] audit: type=1400 audit(1741899662.229:13921): avc:  denied  { perfmon } for  pid=5716 comm="syz.2.687" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   93.222886][ T5722] freeing already freed block (bit 32); block bitmap corrupt.
[   93.226885][   T30] audit: type=1400 audit(1741899662.229:13922): avc:  denied  { bpf } for  pid=5745 comm="syz.4.693" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   93.226935][   T30] audit: type=1400 audit(1741899662.229:13923): avc:  denied  { perfmon } for  pid=5745 comm="syz.4.693" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   93.296928][   T30] audit: type=1400 audit(1741899662.229:13924): avc:  denied  { prog_run } for  pid=5745 comm="syz.4.693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   93.315955][   T30] audit: type=1400 audit(1741899662.229:13925): avc:  denied  { map_create } for  pid=5716 comm="syz.2.687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   93.335329][   T30] audit: type=1400 audit(1741899662.229:13926): avc:  denied  { write } for  pid=5716 comm="syz.2.687" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   93.357090][   T30] audit: type=1400 audit(1741899662.229:13927): avc:  denied  { add_name } for  pid=5716 comm="syz.2.687" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   93.377848][   T30] audit: type=1400 audit(1741899662.229:13928): avc:  denied  { create } for  pid=5716 comm="syz.2.687" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   93.420874][ T5722] EXT4-fs (loop2): Remounting filesystem read-only
[   93.434900][ T5722] EXT4-fs warning (device loop2): ext4_evict_inode:276: xattr delete (err -5)
[   93.554935][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   93.638491][ T5757] netlink: 24 bytes leftover after parsing attributes in process `syz.4.697'.
[   93.675909][ T5757] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5757 comm=syz.4.697
[   94.131666][ T5774] validate_nla: 1 callbacks suppressed
[   94.131684][ T5774] netlink: 'syz.2.704': attribute type 4 has an invalid length.
[   94.602889][ T5797] futex_wake_op: syz.5.712 tries to shift op by -1; fix this program
[   94.842514][ T5810] loop0: detected capacity change from 0 to 512
[   94.864675][ T5810] EXT4-fs: Ignoring removed orlov option
[   94.905083][ T5810] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   94.947033][ T5810] EXT4-fs (loop0): revision level too high, forcing read-only mode
[   94.963775][ T5810] EXT4-fs (loop0): orphan cleanup on readonly fs
[   94.986514][ T5810] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 248: padding at end of block bitmap is not set
[   95.020472][ T5810] EXT4-fs error (device loop0): ext4_acquire_dquot:6927: comm +}[@: Failed to acquire dquot type 1
[   95.054575][ T5810] EXT4-fs (loop0): 1 truncate cleaned up
[   95.102174][ T5810] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   95.127519][ T5816] SELinux:  Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped).
[   95.179291][ T5810] +}[@ (5810) used greatest stack depth: 9128 bytes left
[   95.218866][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   95.274285][ T5821] futex_wake_op: syz.0.721 tries to shift op by -1; fix this program
[   95.604030][ T5837] wireguard0: entered promiscuous mode
[   95.609782][ T5837] wireguard0: entered allmulticast mode
[   95.621936][ T5836] futex_wake_op: syz.1.727 tries to shift op by -1; fix this program
[   97.219732][ T5894] netlink: 'syz.1.746': attribute type 12 has an invalid length.
[   98.178115][   T30] kauditd_printk_skb: 1224 callbacks suppressed
[   98.178130][   T30] audit: type=1400 audit(1741899667.239:15151): avc:  denied  { open } for  pid=5923 comm="syz.2.758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[   98.237791][   T30] audit: type=1400 audit(1741899667.239:15152): avc:  denied  { perfmon } for  pid=5923 comm="syz.2.758" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   98.258998][   T30] audit: type=1400 audit(1741899667.239:15153): avc:  denied  { kernel } for  pid=5923 comm="syz.2.758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[   98.278522][   T30] audit: type=1400 audit(1741899667.239:15154): avc:  denied  { perfmon } for  pid=5923 comm="syz.2.758" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   98.299457][   T30] audit: type=1400 audit(1741899667.239:15155): avc:  denied  { prog_load } for  pid=5928 comm="syz.1.761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   98.318557][   T30] audit: type=1400 audit(1741899667.269:15156): avc:  denied  { bpf } for  pid=5928 comm="syz.1.761" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   98.339274][   T30] audit: type=1400 audit(1741899667.269:15157): avc:  denied  { perfmon } for  pid=5928 comm="syz.1.761" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   98.360240][   T30] audit: type=1400 audit(1741899667.269:15158): avc:  denied  { perfmon } for  pid=5928 comm="syz.1.761" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   98.381208][   T30] audit: type=1400 audit(1741899667.269:15159): avc:  denied  { bpf } for  pid=5928 comm="syz.1.761" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   98.401868][   T30] audit: type=1400 audit(1741899667.269:15160): avc:  denied  { read } for  pid=5923 comm="syz.2.758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[   98.466086][ T5930] /dev/nullb0: Can't lookup blockdev
[   98.594225][ T5942] loop1: detected capacity change from 0 to 512
[   98.675030][ T5942] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   98.746047][ T5942] EXT4-fs (loop1): 1 truncate cleaned up
[   98.757924][ T5942] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   98.784483][ T5953] loop0: detected capacity change from 0 to 2048
[   98.928404][ T5953] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   99.034969][ T5930] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 15: block 33:freeing already freed block (bit 32); block bitmap corrupt.
[   99.071735][ T5953] ext4 filesystem being mounted at /179/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   99.084372][ T5930] EXT4-fs (loop1): Remounting filesystem read-only
[   99.115538][ T5930] EXT4-fs warning (device loop1): ext4_evict_inode:276: xattr delete (err -5)
[   99.160542][ T5959] loop4: detected capacity change from 0 to 2048
[   99.162563][ T5966] loop2: detected capacity change from 0 to 256
[   99.198961][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   99.211920][ T5953] futex_wake_op: syz.0.769 tries to shift op by -1; fix this program
[   99.238921][ T5959] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   99.257214][ T5959] ext4 filesystem being mounted at /145/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   99.425719][ T5959] futex_wake_op: syz.4.770 tries to shift op by -1; fix this program
[   99.454996][ T5972] loop1: detected capacity change from 0 to 512
[   99.518146][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   99.583569][ T5972] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.774: bg 0: block 248: padding at end of block bitmap is not set
[   99.641607][ T5972] EXT4-fs error (device loop1): ext4_acquire_dquot:6927: comm syz.1.774: Failed to acquire dquot type 1
[   99.697958][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   99.714235][ T5972] EXT4-fs (loop1): 1 truncate cleaned up
[   99.731296][ T5972] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   99.769222][ T5972] ext4 filesystem being mounted at /165/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  100.072270][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  100.234190][ T5998] netlink: 'syz.1.780': attribute type 12 has an invalid length.
[  100.374475][ T6003] /dev/nullb0: Can't lookup blockdev
[  100.462608][ T6007] loop1: detected capacity change from 0 to 512
[  100.541182][ T6007] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  100.670324][ T6007] EXT4-fs (loop1): 1 truncate cleaned up
[  100.677646][ T6010] loop0: detected capacity change from 0 to 512
[  100.698724][ T6010] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  100.717252][ T6007] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  100.722382][ T6010] EXT4-fs error (device loop0): ext4_orphan_get:1389: inode #17: comm syz.0.783: iget: bad i_size value: -6917529027641081756
[  100.745403][ T6010] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.783: couldn't read orphan inode 17 (err -117)
[  100.758985][ T6010] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  100.833168][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  100.935167][ T6022] FAULT_INJECTION: forcing a failure.
[  100.935167][ T6022] name failslab, interval 1, probability 0, space 0, times 0
[  100.947846][ T6022] CPU: 1 UID: 0 PID: 6022 Comm: syz.5.790 Not tainted 6.14.0-rc6-syzkaller-00022-gb7f94fcf5546 #0
[  100.947882][ T6022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  100.947894][ T6022] Call Trace:
[  100.947902][ T6022]  <TASK>
[  100.947910][ T6022]  dump_stack_lvl+0xf2/0x150
[  100.947939][ T6022]  dump_stack+0x15/0x1a
[  100.947963][ T6022]  should_fail_ex+0x24a/0x260
[  100.948031][ T6022]  ? sel_netnode_sid+0x39f/0x770
[  100.948055][ T6022]  should_failslab+0x8f/0xb0
[  100.948084][ T6022]  __kmalloc_cache_noprof+0x4e/0x320
[  100.948108][ T6022]  sel_netnode_sid+0x39f/0x770
[  100.948239][ T6022]  selinux_socket_bind+0x48e/0x6a0
[  100.948291][ T6022]  security_socket_bind+0x47/0x80
[  100.948319][ T6022]  __sys_bind+0xbf/0x190
[  100.948420][ T6022]  __x64_sys_bind+0x41/0x50
[  100.948443][ T6022]  x64_sys_call+0x20ab/0x2dc0
[  100.948492][ T6022]  do_syscall_64+0xc9/0x1c0
[  100.948561][ T6022]  ? clear_bhb_loop+0x55/0xb0
[  100.948595][ T6022]  ? clear_bhb_loop+0x55/0xb0
[  100.948686][ T6022]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  100.948719][ T6022] RIP: 0033:0x7f94c744d169
[  100.948742][ T6022] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  100.948761][ T6022] RSP: 002b:00007f94c5ab7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031
[  100.948783][ T6022] RAX: ffffffffffffffda RBX: 00007f94c7665fa0 RCX: 00007f94c744d169
[  100.948797][ T6022] RDX: 0000000000000080 RSI: 0000400000000040 RDI: 0000000000000003
[  100.948810][ T6022] RBP: 00007f94c5ab7090 R08: 0000000000000000 R09: 0000000000000000
[  100.948883][ T6022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  100.948894][ T6022] R13: 0000000000000000 R14: 00007f94c7665fa0 R15: 00007ffe56335998
[  100.948914][ T6022]  </TASK>
[  101.172374][ T6007] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 15: block 33:freeing already freed block (bit 32); block bitmap corrupt.
[  101.220877][ T6025] loop4: detected capacity change from 0 to 2048
[  101.237137][ T6007] EXT4-fs (loop1): Remounting filesystem read-only
[  101.243689][ T6007] EXT4-fs warning (device loop1): ext4_evict_inode:276: xattr delete (err -5)
[  101.318686][ T6025] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  101.371329][ T6036] netlink: 'syz.2.794': attribute type 12 has an invalid length.
[  101.391456][ T6025] ext4 filesystem being mounted at /147/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  101.419543][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.466347][ T6021] futex_wake_op: syz.4.788 tries to shift op by -1; fix this program
[  101.565946][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.723725][ T6050] loop2: detected capacity change from 0 to 512
[  101.971558][ T6059] netlink: 56 bytes leftover after parsing attributes in process `syz.1.802'.
[  102.211048][ T6059] netlink: 'syz.1.802': attribute type 1 has an invalid length.
[  102.218874][ T6059] netlink: 16 bytes leftover after parsing attributes in process `syz.1.802'.
[  102.421171][ T6072] syz_tun: entered allmulticast mode
[  102.474275][ T6072] sctp: [Deprecated]: syz.0.808 (pid 6072) Use of struct sctp_assoc_value in delayed_ack socket option.
[  102.474275][ T6072] Use struct sctp_sack_info instead
[  102.624070][ T6075] netlink: 'syz.1.809': attribute type 12 has an invalid length.
[  102.633704][ T6077] loop4: detected capacity change from 0 to 2048
[  102.730544][ T6077] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  102.857304][ T6077] ext4 filesystem being mounted at /152/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  102.870020][ T1046] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0
[  102.877597][ T1046] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0
[  102.885010][ T1046] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0
[  102.948463][ T6071] syz_tun: left allmulticast mode
[  102.950258][ T6093] loop5: detected capacity change from 0 to 512
[  102.978409][ T6077] futex_wake_op: syz.4.810 tries to shift op by -1; fix this program
[  102.986679][ T1046] hid-generic 0000:0004:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  102.991533][ T6096] futex_wake_op: syz.1.816 tries to shift op by -1; fix this program
[  103.058181][ T6093] netlink: 'syz.5.815': attribute type 10 has an invalid length.
[  103.065979][ T6093] netlink: 40 bytes leftover after parsing attributes in process `syz.5.815'.
[  103.131991][ T6093] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  103.140777][ T6093] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  103.149558][ T6093] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  103.158400][ T6093] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  103.200518][   T30] kauditd_printk_skb: 1455 callbacks suppressed
[  103.200536][   T30] audit: type=1400 audit(1741899672.259:16614): avc:  denied  { read write open } for  pid=3299 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  103.232118][   T30] audit: type=1400 audit(1741899672.259:16616): avc:  denied  { unmount } for  pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  103.239761][ T6093] team0: Port device geneve1 added
[  103.251956][   T30] audit: type=1400 audit(1741899672.259:16615): avc:  denied  { ioctl } for  pid=3299 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  103.286914][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.314800][   T37] ==================================================================
[  103.322906][   T37] BUG: KCSAN: data-race in n_tty_receive_char_flow_ctrl / tty_set_termios
[  103.331433][   T37] 
[  103.333755][   T37] write to 0xffff888117d57922 of 1 bytes by task 6105 on cpu 1:
[  103.341383][   T37]  tty_set_termios+0x4c9/0x8b0
[  103.346160][   T37]  set_termios+0x365/0x4e0
[  103.350582][   T37]  tty_mode_ioctl+0x391/0x5d0
[  103.355261][   T37]  n_tty_ioctl_helper+0x8d/0x240
[  103.360212][   T37]  n_tty_ioctl+0xfd/0x200
[  103.364554][   T37]  tty_ioctl+0x87a/0xbe0
[  103.368806][   T37]  __se_sys_ioctl+0xc9/0x140
[  103.373416][   T37]  __x64_sys_ioctl+0x43/0x50
[  103.378012][   T37]  x64_sys_call+0x1690/0x2dc0
[  103.382695][   T37]  do_syscall_64+0xc9/0x1c0
[  103.387211][   T37]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  103.393107][   T37] 
[  103.395424][   T37] read to 0xffff888117d57922 of 1 bytes by task 37 on cpu 0:
[  103.402789][   T37]  n_tty_receive_char_flow_ctrl+0x58/0x1a0
[  103.408596][   T37]  n_tty_lookahead_flow_ctrl+0xee/0x130
[  103.414157][   T37]  tty_port_default_lookahead_buf+0x8a/0xc0
[  103.420060][   T37]  flush_to_ldisc+0x31c/0x410
[  103.424747][   T37]  process_scheduled_works+0x4db/0xa20
[  103.430209][   T37]  worker_thread+0x51d/0x6f0
[  103.434820][   T37]  kthread+0x4ae/0x520
[  103.438903][   T37]  ret_from_fork+0x4b/0x60
[  103.443358][   T37]  ret_from_fork_asm+0x1a/0x30
[  103.448136][   T37] 
[  103.450474][   T37] value changed: 0x47 -> 0x00
[  103.455146][   T37] 
[  103.457466][   T37] Reported by Kernel Concurrency Sanitizer on:
[  103.463612][   T37] CPU: 0 UID: 0 PID: 37 Comm: kworker/u8:2 Not tainted 6.14.0-rc6-syzkaller-00022-gb7f94fcf5546 #0
[  103.474288][   T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  103.484350][   T37] Workqueue: events_unbound flush_to_ldisc
[  103.490174][   T37] ==================================================================
[  103.587000][   T30] audit: type=1400 audit(1741899672.259:16617): avc:  denied  { read write } for  pid=3307 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  103.611486][   T30] audit: type=1400 audit(1741899672.259:16618): avc:  denied  { read write open } for  pid=3307 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  103.636762][   T30] audit: type=1400 audit(1741899672.259:16619): avc:  denied  { ioctl } for  pid=3307 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  103.662670][   T30] audit: type=1326 audit(1741899672.359:16620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6092 comm="syz.5.815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94c744d169 code=0x7ffc0000
[  103.686274][   T30] audit: type=1326 audit(1741899672.359:16621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6092 comm="syz.5.815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94c744d169 code=0x7ffc0000
[  103.709724][   T30] audit: type=1400 audit(1741899672.369:16622): avc:  denied  { create } for  pid=6104 comm="syz.0.818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  103.729496][   T30] audit: type=1400 audit(1741899672.559:16623): avc:  denied  { read } for  pid=6104 comm="syz.0.818" dev="nsfs" ino=4026532647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  108.419519][   T30] kauditd_printk_skb: 67 callbacks suppressed
[  108.419533][   T30] audit: type=1400 audit(1741899677.479:16691): avc:  denied  { read } for  pid=2983 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[  108.447770][   T30] audit: type=1400 audit(1741899677.479:16692): avc:  denied  { search } for  pid=2983 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  108.469475][   T30] audit: type=1400 audit(1741899677.479:16693): avc:  denied  { append } for  pid=2983 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  108.491881][   T30] audit: type=1400 audit(1741899677.479:16694): avc:  denied  { open } for  pid=2983 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  108.514568][   T30] audit: type=1400 audit(1741899677.479:16695): avc:  denied  { getattr } for  pid=2983 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  109.807835][   T30] audit: type=1400 audit(1741899678.869:16696): avc:  denied  { read } for  pid=2983 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[  109.830116][   T30] audit: type=1400 audit(1741899678.869:16697): avc:  denied  { search } for  pid=2983 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  109.851821][   T30] audit: type=1400 audit(1741899678.869:16698): avc:  denied  { append } for  pid=2983 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  109.874290][   T30] audit: type=1400 audit(1741899678.869:16699): avc:  denied  { open } for  pid=2983 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  109.896964][   T30] audit: type=1400 audit(1741899678.869:16700): avc:  denied  { getattr } for  pid=2983 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1