last executing test programs:

3m54.867412682s ago: executing program 4 (id=51):
add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x437, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r3, 0x5120b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}]}}}]}, 0x3c}}, 0x4000010)
sendmmsg$inet(r1, &(0x7f00000008c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0)

3m54.755653153s ago: executing program 4 (id=53):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x6e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}, 0x1c)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8)

3m54.618341915s ago: executing program 4 (id=56):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x400}, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x6}, 0x18)
r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa19a, 0x1000}, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000340)='cpu\t&0&&\t')

3m54.348818509s ago: executing program 4 (id=58):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x0, &(0x7f00000002c0), 0xff, 0x5be, &(0x7f0000001440)="$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")
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x31)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00')
fchdir(r1)
r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100)
getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8)

3m53.995270873s ago: executing program 4 (id=60):
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000180), 0x1, 0x553, &(0x7f0000001080)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r1}, 0x18)
write$binfmt_script(r0, &(0x7f0000000540), 0x84)
mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0)
perf_event_open(&(0x7f00000004c0)={0x8, 0x80, 0x0, 0xc, 0x0, 0xfe, 0x82, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080), 0x9}, 0x18204, 0x0, 0x3, 0x0, 0x0, 0x5338c7af, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

3m53.131458505s ago: executing program 4 (id=75):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0xa26}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x21, 0x0, 0x0, 0x100000, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2000000, 0x0, 0x200000000000000, @void, @value, @void, @value}, 0x50)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r4=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000f000000050030000000000005002f000000000008000300", @ANYRES32=r4], 0x2c}}, 0x0)

3m53.130943125s ago: executing program 32 (id=75):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0xa26}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x21, 0x0, 0x0, 0x100000, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2000000, 0x0, 0x200000000000000, @void, @value, @void, @value}, 0x50)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r4=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000f000000050030000000000005002f000000000008000300", @ANYRES32=r4], 0x2c}}, 0x0)

3m52.474216073s ago: executing program 3 (id=95):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12012, 0xffffffffffffffff, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100)={'batadv0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x54, 0x10, 0x401, 0x0, 0x1000000, {0x0, 0x0, 0x0, 0x0, 0xf0ff, 0x308}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @local}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x54}, 0x1, 0x0, 0x0, 0x20081}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@dellink={0x20, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, 0x1480, 0x2104}}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80)

3m51.791615702s ago: executing program 3 (id=103):
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r0 = io_uring_setup(0x1fc3, &(0x7f0000000940)={0x0, 0x4bb2, 0x800, 0x2, 0x27})
r1 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0)
preadv(r1, &(0x7f0000001d00)=[{&(0x7f0000000140)=""/117, 0x75}], 0x1, 0xff, 0xb26)
close_range(r0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
timer_gettime(0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)

3m51.636466854s ago: executing program 3 (id=105):
r0 = socket$inet6(0xa, 0x6, 0x0)
r1 = syz_io_uring_setup(0x7d9b, &(0x7f00000008c0)={0x0, 0x92b2, 0x10500, 0xfffffffe, 0x219}, &(0x7f0000000980)=<r2=>0x0, &(0x7f0000000300)=<r3=>0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10)
syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[], 0x14a8}, 0x0, 0x8000})
io_uring_enter(r1, 0x2ded, 0x4000, 0x0, 0x0, 0x0)

3m51.601084544s ago: executing program 3 (id=106):
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000006c0)='./file0\x00', 0x0, &(0x7f0000000680)={[{@unhide}, {@nocompress}, {@cruft}, {@map_off}, {@overriderock}]}, 0x1, 0x660, &(0x7f0000000fc0)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(&(0x7f0000000400)='./file0/file0\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x3125899, 0x0)
umount2(&(0x7f00000001c0)='./file0/../file0\x00', 0x3)

3m51.457901446s ago: executing program 3 (id=108):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x53, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
sendmmsg$inet(r3, &(0x7f0000002000)=[{{&(0x7f0000000300)={0x2, 0x4e23, @loopback}, 0x10, 0x0}}], 0x1, 0x2400c040)

3m51.095507181s ago: executing program 3 (id=110):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$sock_int(r0, 0x1, 0x4c, &(0x7f0000000000)=0xb, 0x4)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
alarm(0x81)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000027c0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x40002020, 0x0)

3m51.048165761s ago: executing program 33 (id=110):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$sock_int(r0, 0x1, 0x4c, &(0x7f0000000000)=0xb, 0x4)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
alarm(0x81)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000027c0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x40002020, 0x0)

3m48.968045599s ago: executing program 2 (id=130):
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xdec, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5, 0x0, 0x2}, 0x18)
write(r1, &(0x7f0000000240)="94", 0x1)
tee(r0, r4, 0x8f5, 0x0)
write(r2, 0x0, 0x0)

3m48.82222681s ago: executing program 2 (id=131):
r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0)
syz_read_part_table(0x1051, &(0x7f0000000000)="$eJzsz8uNwkAQBNCa9WftIFbaMEiEfHA6RAY5WBo0xiYE4PDeqdTdKqnDR80lSdefStZaa9K/Nj9tkWmYW+qO6VgvKfU3ybBPlvuQsYUpSTlab3/PtNZl3A+3/uS/3dStsDtf3/QmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHy1RwAAAP//7rMRKg==")
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000040], 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'/25]}, 0x91)
write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x2000)

3m48.703789402s ago: executing program 2 (id=132):
r0 = getpid()
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b000000000000000000000000666eeb72e6d8f0553b1905b6ce697fb2b7e483ac40ec3873443434a32c270b6f59df368bba324061f35581b5a8f7d2b75f97beb9849d924c088e1341cf73fd13b669fdbefa6eca5f04f80b7a0b3fa949d75c3f938788abdb9ece385638b1", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48)
semop(0x0, &(0x7f0000000540)=[{0x0, 0x5}], 0x1)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x10000002}, 0x18)
r5 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x0, 0x800}, &(0x7f0000000240)=<r6=>0x0, &(0x7f0000000280)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_SPLICE={0x1e, 0x8, 0x0, @fd_index=0x6, 0x7, {}, 0x6, 0x1})
io_uring_enter(r5, 0x47f9, 0x0, 0x0, 0x0, 0x0)
rt_sigsuspend(&(0x7f0000000040), 0x8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r2}, 0x18)
r8 = syz_pidfd_open(r0, 0x0)
set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000300000005"], 0x48)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000a61a7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
set_robust_list(0x0, 0x0)
setgroups(0x0, 0x0)
r11 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="cd", 0x1}], 0x1}, 0x240448c4)
r12 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r12, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r12, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r13=>0x0})
sendmsg$nl_route_sched(r12, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=@deltfilter={0x44, 0x2d, 0x10, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r13, {0x9, 0x7}, {0x8}, {0x1, 0xfff1}}, [@TCA_CHAIN={0x8, 0xb, 0x2}, @TCA_RATE={0x6, 0x5, {0x9, 0xd}}, @TCA_CHAIN={0x8, 0xb, 0x1ff}, @TCA_RATE={0x6, 0x5, {0x71, 0xfd}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x90)
write$selinux_load(r11, &(0x7f0000000000)=ANY=[], 0xffa8)
setns(r8, 0x24020000)
syz_clone(0xf5982500, 0x0, 0x0, 0x0, 0x0, 0x0)

3m47.813177504s ago: executing program 2 (id=136):
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000006c0)='./file0\x00', 0x0, &(0x7f0000000680)={[{@unhide}, {@nocompress}, {@cruft}, {@map_off}, {@overriderock}]}, 0x1, 0x660, &(0x7f0000000fc0)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(&(0x7f0000000400)='./file0/file0\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x3125899, 0x0)
umount2(&(0x7f00000001c0)='./file0/../file0\x00', 0x3)

3m47.678445046s ago: executing program 2 (id=137):
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$rds(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x1)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0x2}, 0x18)
timer_create(0x0, 0x0, 0x0)
recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)

3m46.983285045s ago: executing program 2 (id=139):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000009f910000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
unshare(0x2040400)
r2 = fsopen(&(0x7f0000000440)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
unshare(0x2000400)
fsmount(r2, 0x0, 0x0)

3m46.982962465s ago: executing program 34 (id=139):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000009f910000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
unshare(0x2040400)
r2 = fsopen(&(0x7f0000000440)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
unshare(0x2000400)
fsmount(r2, 0x0, 0x0)

1m13.707596544s ago: executing program 1 (id=2928):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103000, 0x0)
r0 = fsopen(&(0x7f00000003c0)='debugfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x8, 0x0, 0x0, 0x0)
arch_prctl$ARCH_GET_MAX_TAG_BITS(0x4003, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x163242, 0x110)
openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0xfffffffffffffffc, &(0x7f0000000040), 0x13f}}, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0x541b, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
close_range(r3, 0xffffffffffffffff, 0x0)

1m13.688817864s ago: executing program 1 (id=2929):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x6)
r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x10)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf4fffff7, 0x12, r3, 0x0)
write$tun(r2, &(0x7f0000000c00)=ANY=[@ANYBLOB="0103ffff0900fffe0cff4517002c0068000009119078ac1414bbe00000024e204e21001890780400000026d08d7bff01000000000000b4f7af8c6c1ffbcda008553faec8ac8200497d67564ae23c02fcf8654297b0ef9c7d3498f8cfd72bc489f663d7277511d842cfe7b5eb02a241e5266fe4b843cde6c4b0d1c7f5328686ba4bb1a6ef27bf5550e975dc9e98c086d4d288c3e0955d47a7b20e80ba15fd3dfb4df49c6494eccefc6123da0a9c17389265585c426b4963beafda8c30f07af786fd21fd5374"], 0x36)
r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x30, 0x1, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], &(0x7f0000000500)=[0x2], 0x0, 0x1f}}, 0x3c)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10)

1m13.634788385s ago: executing program 1 (id=2930):
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$inet6(0xa, 0x2, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x437, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r4, 0x5120b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r4}]}}}]}, 0x3c}}, 0x4000010)
sendmmsg$inet(r2, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0)

1m12.960593254s ago: executing program 1 (id=2940):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r0}, 0x18)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000000)={[{@errors_remount}, {@nobh}]}, 0x3, 0x519, &(0x7f0000001300)="$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")
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00')
syz_open_dev$tty1(0xc, 0x4, 0x2)

1m12.346971582s ago: executing program 1 (id=2953):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r1, &(0x7f0000000040), 0x10)
listen(r1, 0x5)
r2 = socket(0x28, 0x5, 0x0)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000, 0x0, 0x0, 0x5989})
setrlimit(0x40000000000008, &(0x7f0000000000))
connect$vsock_stream(r2, &(0x7f0000000080), 0x10)
sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=@newtaction={0x14, 0x30, 0x400, 0x70bd2b, 0x25dfdbfb}, 0x14}}, 0x40004)
setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f00000000c0)={0x1, 0x79e}, 0x8)
sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094)

1m11.922337747s ago: executing program 1 (id=2944):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x400}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48)
sync()
bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6d3a2e17dee28253, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x6}, 0x18)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000)
socket$nl_generic(0x10, 0x3, 0x10)
mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil)

1m11.921922457s ago: executing program 35 (id=2944):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x400}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48)
sync()
bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6d3a2e17dee28253, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x6}, 0x18)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000)
socket$nl_generic(0x10, 0x3, 0x10)
mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil)

5.051431934s ago: executing program 5 (id=3728):
socket(0x29, 0x2, 0xc)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
read(r0, &(0x7f0000000040)=""/148, 0xffffff96)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
ioctl$IMADDTIMER(r3, 0x80044940, &(0x7f0000000080)=0x14)
unshare(0x62040200)
close(r3)

4.042538247s ago: executing program 6 (id=3742):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x24, 0x0, 0x0)
shutdown(r0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000bc0000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r1, 0x0, 0x3}, 0x18)
r2 = socket(0x10, 0x2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r3, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000340)=@gcm_128={{0x304}, "a6341a1a379332f5", "38d33cb95d66a1781f31bf07fd2ae874", "62266bd8", "d1b29b99d21d88a2"}, 0x28)
write$binfmt_script(r3, &(0x7f0000000780)={'#! ', './file0'}, 0xb)
close_range(r2, r3, 0x0)

4.005945217s ago: executing program 8 (id=3744):
socket(0x29, 0x2, 0xc)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
read(r0, &(0x7f0000000040)=""/148, 0xffffff96)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000080)=0x14)
unshare(0x62040200)
close(r2)

4.004999747s ago: executing program 6 (id=3745):
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
creat(0x0, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
rt_sigtimedwait(0x0, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {0xffff, 0xffff}, {0xfff4, 0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x0, 0x0, 0xfff, 0x1, 0x54e7}}}}]}, 0x4c}}, 0x40044)

3.988486368s ago: executing program 5 (id=3746):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = inotify_init1(0x0)
r3 = inotify_add_watch(r2, 0x0, 0x10000a0)
inotify_rm_watch(r2, r3)
open(0x0, 0x60840, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
r5 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r6, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)

3.210581568s ago: executing program 8 (id=3748):
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
umount2(0x0, 0x0)
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r2=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={<r3=>r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r0, 0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, 0x0, 0x0)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f00000000c0)={r3, 0x1, 0x1, 0x5, 0x400, 0x5}, 0x14)

3.210025698s ago: executing program 6 (id=3750):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x18)
uname(&(0x7f0000000300)=""/10)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="568748a6baaf9cc1e400"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x48)
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/NvrWjPA7HcPQ1UwDAP9nrEbEKAPSYRPsPAD0m/x3g5spyOZ+6+4vE3rr+XETsX4s/v765tqQ/u2a3v3kddOhmcteVkSQiRnag/NGI+PjLVz9Np9il65AA7bxxOSLOjoyuP/8n68YsbNUTGyzbl72O3jPf+Q/2zldp/+fpdv2/wu3+T7Tp/wy2OXa3477H/4EdKGQDaf/v2Zaxbbda4s+M9GW5fzX7fAPJufPVSnpu+3dEjMXAYJqf2KCMsRt/3ui0rLX/9+v7r32Slp++3lmj8FP/4N3vmSo1Sg8Sc6vrlyMe6W8Xf3J7+ycd+r+nN1nGi8+8/VGnZWn8abz5tD7+yEYn7Y7VKxGPtd3+d0a0JRuOTxxv7g7j+U7Rxhc/fDjUqfzW7Z9Oafn5d4G9kG7/oY3jH0lax2vWt17Gd1eGv+607P7xt9//9yWvNNN5P+JSqdGYn4jYl7y0fv6xO+/N8/n6afxjj7Y//jfa/9PvhGc3GX//tZ8/2378uyuNf2pL23/riau3Zvo6lb+57T/ZTI1lczZz/ttsBR/kswMAAAAAAAAAAAAAAAAAAAAAAACAzSpExKFICsXb6UKhWFx7hvd/Y6hQrdUbR87VFuamovms7JEYKOS3uhxuuR/qRHY//Dx/7J78kxHxn4j4YPBAkt9HcarLsQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7mCH5/+nfhzsdu0AgF2zv9sVAAD2nPYfAHqP9h8Aeo/2HwB6j/YfAHqP9h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/X1luZzmpy4uLszULh6dqtRnirML5WK5Nn+hOF2rTVcrxXJt9n7/r1qrXZiMuYVL441KvTFeX1w6M1tbmGucOT9bmq6cqQzsSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1xaWZUrVamZfYRmL14ahG9xN92e70sNRnTxPJw1GNHU50+cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DfxVwAAAP//02Ii/w==")
r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x2d)
write(r3, &(0x7f0000004200)='t', 0x1)
sendfile(r3, r2, 0x0, 0x7ffff000)
fallocate(r1, 0x0, 0x0, 0x1001f0)

3.209586208s ago: executing program 5 (id=3751):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0xa, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
socket$inet(0x2, 0x2, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x7, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2)

3.119443299s ago: executing program 8 (id=3752):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r2}, 0x10)
openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x80, 0x142}, 0x18)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYRESDEC=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r3}, 0x10)
r4 = syz_io_uring_setup(0x373d, &(0x7f0000000500)={0x0, 0x4, 0x1, 0xa, 0xffffff}, &(0x7f0000000380), &(0x7f0000000400))
io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r5}, 0x10)
prctl$PR_SET_NAME(0xf, &(0x7f0000000740)='\x00\a\a\x00\x00\x01\x00\x00\x00\x00\xcf\x80o\xdb\xc7q\x00\x00\x00!\x83\xf8\xad\x17\xcf\xa7\xd6R\x88\xf9\xed\xcdC\x8a\x8b\xf0\x7f\xf1<\x94\xdf\xe1\xaa\xb7j\\\xdf\x1eN\xab\xc9PA:\xdf\a\x0f\xf6\x13\xf2\x16\xf54U\x85C\xdb\x8bkQ\xfarw]\xbd\xf4\x10\x1aG\xc5\xbe\x17\xf0}gb\x8e\x02@a\xb8\xbc\xd4\xd2\xa2\xbc\xc9\x02\xb0\xf8\xc0\xcb\xe4\xfaE5!\xad\x90\xb2\xc7Dw\xf2X,j$6Aj1ho\x12\xc0v\xcd\x1e\x9f\xadA\x84\xc4\xf8\xb3%g\xac}\x86\x80\\/\xa1\xdf\xd4KM\t\xb0dK\x0e$\xf2\xad;E[\xf5\xc9 \xf9\t\x00\x00\x00\x00\x00\x00\x00\xbc\xa5I\xf6\xba7\xcb\xc7\x81\xc4Q\xcd\xa6&\xc5\xd8\x7fa4\x8b\xb9\x104\xfc+x\xaazY\xf0\xe2\xa8\x1b\x9b\xa2\xfdx\x00\xab&:\xa7\x17\x1d\x03.\xdb\xe5\xa9\xc6\x1ba\n\xe5Br\b\x8e:E\xb7\x18\xf2S\xc4\xc9\"T\x8c\f\xbf\xad\xe2\x89\xd1\xaf\xef\xd4\xac\xcf4\xab\xf3\xc5\xfb\xb2\xf1\x14`I\xb1\xd7\xd1\xb0B\x12')
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)

3.104003229s ago: executing program 0 (id=3753):
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
getpid()
lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x1a, 0x0)
getdents(r0, 0x0, 0x0)
mknod(&(0x7f0000000000)='./bus\x00', 0x1000, 0x0)
open(&(0x7f00000002c0)='./bus\x00', 0x42203, 0x13d)
close(r0)
unshare(0x64000600)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0)
getdents64(0xffffffffffffffff, &(0x7f00000002c0)=""/231, 0xe7)

2.789699744s ago: executing program 8 (id=3754):
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000340)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r2, 0x0, 0xfffffffffffffffc}, 0x18)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1000000000004)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@lazytime}, {@nomblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@nombcache}, {@quota}, {@quota}]}, 0xff, 0x443, &(0x7f0000000940)="$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")
r3 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
ftruncate(r3, 0x2007ffc)
sendfile(r3, r3, 0x0, 0x800000009)

2.639463085s ago: executing program 0 (id=3755):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", ' \x00'}, 0x28)
sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000b80)='n', 0x1}, {&(0x7f0000000340)="5fdb", 0x2}], 0x2}, 0x0)

2.452770208s ago: executing program 5 (id=3756):
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001900)="$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")
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x2d)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x600}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x2}, 0x0)
write(r2, &(0x7f0000004200)='t', 0x1)
sendfile(r2, r1, 0x0, 0x7ffff000)
fallocate(r0, 0x0, 0x0, 0x1001f0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)

2.34619892s ago: executing program 0 (id=3757):
socket(0x29, 0x2, 0xc)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
read(r0, &(0x7f0000000040)=""/148, 0xffffff96)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000080)=0x14)
unshare(0x62040200)
close(r2)

2.34354362s ago: executing program 8 (id=3767):
r0 = socket(0x10, 0x803, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, 0x0, 0x40000)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x190)

2.28600488s ago: executing program 6 (id=3758):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, 0x0)
io_setup(0x8, 0x0)
io_submit(0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x8000}, 0x18)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$GTP_CMD_ECHOREQ(r0, 0x0, 0x40810)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)
writev(r2, &(0x7f00000004c0)=[{&(0x7f0000000500)="aefdcd9d240200005a90f57f077029eff0f64ebbee07942c22595943bb05e374cbee8ad1b7244232b0772e11b44e65d766", 0x31}], 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)

2.224944841s ago: executing program 6 (id=3759):
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xd, @void, @value}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, 0x0, 0x0)
sendmsg$nl_route(r1, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000025940000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c0002400000000000000010140001800c000100636f756e746572"], 0x118}}, 0x0)

2.183669731s ago: executing program 7 (id=3760):
socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0))
socket$nl_route(0x10, 0x3, 0x0)
r0 = add_key$fscrypt_v1(0x0, &(0x7f0000000040)={'fscrypt:', @desc1}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_WATCH_KEY(0x6, r0, 0xffffffffffffffff, 0xfffffffdffffffff)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18)
syz_emit_ethernet(0x6f, &(0x7f0000000a40)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x88, 0x0, @empty}, {0x0, 0x0, 0x4d, 0x0, @opaque="965b0156895dff3de39eeee15aa5a25cc5cc1f5a10142e53948d759fb61af979127fd9b8e95212ade7bdc25c9fb10b6f34034a0d2fb4f9eb3697d3a005e8b03db36e3279e2"}}}}}, 0x0)

2.095060563s ago: executing program 7 (id=3761):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0)
readv(r0, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf100eeff0000a2c2000100000000002000"})
r1 = syz_open_pts(r0, 0x101)
r2 = dup3(r1, r0, 0x0)
r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r3, 0x75fa, 0xe475, 0x0, 0x0, 0x0)
write$UHID_INPUT(r2, &(0x7f00000001c0)={0xa, {"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", 0x1000}}, 0xffffff5c)

1.948619154s ago: executing program 5 (id=3762):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000d02a0000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f00000002c0)='mm_lru_insertion\x00', r2, 0x0, 0x3}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r2}, 0x10)
tgkill(0x0, 0x0, 0x25)
fsetxattr$security_capability(r1, &(0x7f0000000100), 0x0, 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
syz_usb_disconnect(r3)
syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0)
ioctl$EVIOCGBITSW(r3, 0x40085507, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='kfree\x00', r0}, 0x10)
r4 = fsopen(&(0x7f0000000380)='ceph\x00', 0x1)
fsmount(r4, 0x0, 0x20)

1.900606165s ago: executing program 6 (id=3763):
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xfffd, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x9)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0))
gettid()
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r1 = io_uring_setup(0x191a, &(0x7f0000000000)={0x0, 0x761, 0x10, 0x1, 0x11cb})
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="d8000000180081064e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e120800060000000401a800080008000c4003000000206010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r0}, 0x10)
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)

1.849643606s ago: executing program 7 (id=3764):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2171, 0xffffffffffffffff, 0x0)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, r3, 0x323, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4801}, 0x4000)
openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
r4 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x8, 0x26, 0x40, 0x7, 0x0, 0x0, 0xa005a, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_config_ext={0x7, 0x1}, 0x100987, 0x2, 0xb, 0x4, 0x81, 0x2, 0x5, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x4, 0x12011, r4, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x5d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @perf_config_ext={0x5}, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan0\x00'})
sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r1, 0x30b}, 0x14}}, 0x0)

1.816641936s ago: executing program 7 (id=3765):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10)
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)

863.632239ms ago: executing program 5 (id=3766):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x1000004, &(0x7f0000000d80)=ANY=[@ANYBLOB='shortname=lower,iocharset=iso8859-1,fmask=00000000000000000000066,uni_xlate=1,uni_xlate=0,fmask=00000000000000000000003,uid=', @ANYRESHEX=0x0, @ANYBLOB=',uni_xlate=0,utf8=1,check=strict,nonumtail=0,rodir,errors=continue,shortname=lower,umaQk=00000000000000000000007,rodir,sys_immutable,\x00', @ANYBLOB="1a961083c216e398b3852441fbacd14539194e81e2ec74ea00af4757fd632db5866c80f5b55492be6ad393d28d63023cd2e764a6bb41fa00d6c103356045fc3ade2c93339a56afb89b72a46f475c860a952e02dbf9c947a7cb75e89843f6d981fe7eed0ef37d5ab46550aa22", @ANYRES64], 0x6, 0x2bb, &(0x7f0000001240)="$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")
renameat2(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file7\x00', 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
openat$vcs(0xffffffffffffff9c, 0x0, 0x401, 0x0)
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0)
write(r2, &(0x7f0000004200)='t', 0x1)
sendfile(r2, r1, 0x0, 0x3ffff)
sendfile(r2, r1, 0x0, 0x7ffff000)

862.773789ms ago: executing program 8 (id=3777):
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1)
r0 = gettid()
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000003c0)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x5a, 0x0, 0x401, 0x6, 0x5, 0x7, "f72493b624af5651219c10f4ffbdf890135e7080b6a4c9d61544ff4b3fd7d2796743e6613dd428bc30536bc3c5555c4da440ec4d5f0bfcf9af96b88f779f709b204bc57e880973fe9f09016b0edb3db2e6e02c6a03d6fa8f1cad"}}, 0x172)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x1d5000)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x100)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0)
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000)

502.244873ms ago: executing program 0 (id=3768):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r1}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000fffe8000000000000010"], 0xfdef)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0xffffffffffffffae}, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfdef)

351.551075ms ago: executing program 0 (id=3769):
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
umount2(0x0, 0x0)
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r2=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={<r3=>r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r0, 0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, 0x0, 0x0)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f00000000c0)={r3, 0x1, 0x1, 0x5, 0x400, 0x5}, 0x14)

263.256207ms ago: executing program 0 (id=3770):
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
r0 = syz_open_dev$MSR(0x0, 0xfffffffffffff998, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
keyctl$negate(0x13, 0x0, 0x4a2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000380))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
pipe2(&(0x7f0000001440)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
splice(r4, 0x0, r3, 0x0, 0x3, 0x0)
fcntl$setpipe(r2, 0x4, 0xfffffffffffff000)

52.693669ms ago: executing program 7 (id=3771):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, 0x0)
io_setup(0x8, 0x0)
io_submit(0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x8000}, 0x18)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$GTP_CMD_ECHOREQ(r0, 0x0, 0x40810)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)
writev(r2, &(0x7f00000004c0)=[{&(0x7f0000000500)="aefdcd9d240200005a90f57f077029eff0f64ebbee07942c22595943bb05e374cbee8ad1b7244232b0772e11b44e65d766", 0x31}], 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)

0s ago: executing program 7 (id=3772):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ff90000000000000100000850000007b00000095"], &(0x7f0000000480)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000780)='mm_page_free\x00', r0}, 0x18)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

kernel console output (not intermixed with test programs):

6576] veth1: entered allmulticast mode
[  197.708597][T16576] wg0: entered promiscuous mode
[  197.713536][T16576] wg0: entered allmulticast mode
[  197.731271][T16584] loop1: detected capacity change from 0 to 512
[  197.739768][T16584] EXT4-fs: Ignoring removed nobh option
[  197.746756][T16576] wg1: entered promiscuous mode
[  197.751646][T16576] wg1: entered allmulticast mode
[  197.759265][T16576] veth0_to_bridge: entered promiscuous mode
[  197.765193][T16576] veth0_to_bridge: entered allmulticast mode
[  197.771579][T16576] bridge_slave_0: entered promiscuous mode
[  197.777464][T16576] bridge_slave_0: entered allmulticast mode
[  197.789299][T16584] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #16: comm syz.1.2940: corrupted inode contents
[  197.802715][T16584] EXT4-fs (loop1): Remounting filesystem read-only
[  197.809690][T16576] veth1_to_bridge: entered promiscuous mode
[  197.815651][T16576] veth1_to_bridge: entered allmulticast mode
[  197.824143][T16576] bridge_slave_1: entered promiscuous mode
[  197.830202][T16576] bridge_slave_1: entered allmulticast mode
[  197.838487][T16584] EXT4-fs (loop1): 1 truncate cleaned up
[  197.844893][T16584] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  197.860380][T16576] veth0_to_bond: entered promiscuous mode
[  197.866187][T16576] veth0_to_bond: entered allmulticast mode
[  197.872539][T16584] ext4 filesystem being mounted at /617/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  197.885535][T16576] veth1_to_bond: entered promiscuous mode
[  197.891373][T16576] veth1_to_bond: entered allmulticast mode
[  197.903906][T16576] veth0_to_team: entered promiscuous mode
[  197.909733][T16576] veth0_to_team: entered allmulticast mode
[  197.932486][T16576] veth1_to_team: entered promiscuous mode
[  197.938486][T16576] veth1_to_team: entered allmulticast mode
[  197.973905][T16576] veth0_to_batadv: entered promiscuous mode
[  197.980068][T16576] veth0_to_batadv: entered allmulticast mode
[  197.999445][T16576] batadv_slave_0: entered promiscuous mode
[  198.006031][T16576] batadv_slave_0: entered allmulticast mode
[  198.021817][T16576] veth1_to_batadv: entered promiscuous mode
[  198.027731][ T9117] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  198.027982][T16576] veth1_to_batadv: entered allmulticast mode
[  198.038404][ T9117] __quota_error: 226 callbacks suppressed
[  198.038461][ T9117] Quota error (device loop1): write_blk: dquota write failed
[  198.047439][T16576] batadv_slave_1: entered promiscuous mode
[  198.050914][ T9117] Quota error (device loop1): remove_free_dqentry: Can't write block (5) with free entries
[  198.057572][T16576] batadv_slave_1: entered allmulticast mode
[  198.063433][ T9117] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  198.063455][ T9117] Quota error (device loop1): write_blk: dquota write failed
[  198.063467][ T9117] Quota error (device loop1): free_dqentry: Can't move quota data block (5) to free list
[  198.064122][ T9117] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started
[  198.080495][T16576] xfrm0: entered promiscuous mode
[  198.091584][ T9117] Quota error (device loop1): v2_write_file_info: Can't write info structure
[  198.098611][T16576] xfrm0: entered allmulticast mode
[  198.109880][T14556] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  198.123387][T16576] veth0_to_hsr: entered promiscuous mode
[  198.153376][T16576] veth0_to_hsr: entered allmulticast mode
[  198.162849][T16576] hsr_slave_0: entered promiscuous mode
[  198.168530][T16576] hsr_slave_0: entered allmulticast mode
[  198.175262][T16576] veth1_to_hsr: entered promiscuous mode
[  198.181614][T16576] veth1_to_hsr: entered allmulticast mode
[  198.197279][T16576] hsr_slave_1: entered promiscuous mode
[  198.203027][T16576] hsr_slave_1: entered allmulticast mode
[  198.223014][T16576] veth1_virt_wifi: entered promiscuous mode
[  198.229218][T16576] veth1_virt_wifi: entered allmulticast mode
[  198.251202][T16576] veth0_virt_wifi: entered promiscuous mode
[  198.257333][T16576] veth0_virt_wifi: entered allmulticast mode
[  198.265480][T16576] veth1_vlan: entered allmulticast mode
[  198.271846][T16576] veth0_vlan: entered allmulticast mode
[  198.280146][T16576] @: entered promiscuous mode
[  198.285303][T16576] @: entered allmulticast mode
[  198.333066][ T9117] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  198.354549][T16560] Set syz1 is full, maxelem 65536 reached
[  198.362900][T16576] vlan1: entered promiscuous mode
[  198.369098][T16576] vlan1: entered allmulticast mode
[  198.374695][T16576] macvlan0: entered promiscuous mode
[  198.380114][T16576] macvlan0: entered allmulticast mode
[  198.387437][T16576] macvlan1: entered promiscuous mode
[  198.392949][T16576] macvlan1: entered allmulticast mode
[  198.399001][T16576] ipvlan0: entered promiscuous mode
[  198.404311][T16576] ipvlan0: entered allmulticast mode
[  198.410808][T16576] ipvlan1: entered promiscuous mode
[  198.416245][T16576] ipvlan1: entered allmulticast mode
[  198.421804][T16576] geneve0: entered promiscuous mode
[  198.428016][T16576] geneve0: entered allmulticast mode
[  198.433684][T16576] geneve1: entered promiscuous mode
[  198.439153][T16576] geneve1: entered allmulticast mode
[  198.444739][T16576] bridge1: entered promiscuous mode
[  198.450828][T16576] bridge1: entered allmulticast mode
[  198.456630][T16576] ip6tnl1: entered promiscuous mode
[  198.461868][T16576] ip6tnl1: entered allmulticast mode
[  198.468984][T16576] gtp0: entered promiscuous mode
[  198.474171][T16576] gtp0: entered allmulticast mode
[  198.479610][T16576] geneve2: entered promiscuous mode
[  198.484892][T16576] geneve2: entered allmulticast mode
[  198.491247][T16576] ip6gre1: entered promiscuous mode
[  198.497080][T16576] ip6gre1: entered allmulticast mode
[  198.502690][T16576] : entered promiscuous mode
[  198.508246][T16576] : entered allmulticast mode
[  198.513302][T16576] syztnl2: entered promiscuous mode
[  198.519028][T16576] syztnl2: entered allmulticast mode
[  198.524958][T16576] ip6_vti1: entered promiscuous mode
[  198.531152][T16576] ip6_vti1: entered allmulticast mode
[  198.536824][T16576] veth2: entered promiscuous mode
[  198.542412][T16576] veth2: entered allmulticast mode
[  198.548649][T16576] veth3: entered promiscuous mode
[  198.553770][T16576] veth3: entered allmulticast mode
[  198.559297][T16576] ip6_vti2: entered promiscuous mode
[  198.564603][T16576] ip6_vti2: entered allmulticast mode
[  198.571368][T16576] ip6gre2: entered promiscuous mode
[  198.576616][T16576] ip6gre2: entered allmulticast mode
[  198.582209][T16576] bond0: entered promiscuous mode
[  198.588116][T16576] bond0: entered allmulticast mode
[  198.593591][T16576] syztnl1: entered promiscuous mode
[  198.598834][T16576] syztnl1: entered allmulticast mode
[  198.607612][T16576] netdevsim netdevsim0 eth0: entered promiscuous mode
[  198.614412][T16576] netdevsim netdevsim0 eth0: entered allmulticast mode
[  198.636402][T16576] netdevsim netdevsim0 eth1: entered promiscuous mode
[  198.643264][T16576] netdevsim netdevsim0 eth1: entered allmulticast mode
[  198.651207][T16576] netdevsim netdevsim0 eth2: entered promiscuous mode
[  198.658123][T16576] netdevsim netdevsim0 eth2: entered allmulticast mode
[  198.676212][T16576] netdevsim netdevsim0 eth3: entered promiscuous mode
[  198.683117][T16576] netdevsim netdevsim0 eth3: entered allmulticast mode
[  198.696128][T16579] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  198.797589][T16607] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2951'.
[  198.970186][T16609] lo speed is unknown, defaulting to 1000
[  199.157407][T16609] chnl_net:caif_netlink_parms(): no params data found
[  199.305001][T16609] bridge0: port 1(bridge_slave_0) entered blocking state
[  199.313019][T16609] bridge0: port 1(bridge_slave_0) entered disabled state
[  199.322591][T16609] bridge_slave_0: entered allmulticast mode
[  199.330784][T16609] bridge_slave_0: entered promiscuous mode
[  199.340860][T16609] bridge0: port 2(bridge_slave_1) entered blocking state
[  199.348717][T16609] bridge0: port 2(bridge_slave_1) entered disabled state
[  199.362990][T16609] bridge_slave_1: entered allmulticast mode
[  199.371822][T16609] bridge_slave_1: entered promiscuous mode
[  199.412236][T16609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  199.423051][T16609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  199.447869][T16609] team0: Port device team_slave_0 added
[  199.454793][T16609] team0: Port device team_slave_1 added
[  199.474483][T16609] batman_adv: batadv0: Adding interface: batadv_slave_0
[  199.481556][T16609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  199.508325][T16609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  199.519839][T16609] batman_adv: batadv0: Adding interface: batadv_slave_1
[  199.527408][T16609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  199.554147][T16609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  199.584191][T16609] hsr_slave_0: entered promiscuous mode
[  199.591006][T16609] hsr_slave_1: entered promiscuous mode
[  199.668040][T16609] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  199.677550][T16609] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  199.686797][T16609] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  199.696081][T16609] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  199.751975][T16609] bridge0: port 2(bridge_slave_1) entered blocking state
[  199.759113][T16609] bridge0: port 2(bridge_slave_1) entered forwarding state
[  199.766478][T16609] bridge0: port 1(bridge_slave_0) entered blocking state
[  199.773561][T16609] bridge0: port 1(bridge_slave_0) entered forwarding state
[  199.813231][ T9117] bridge0: port 1(bridge_slave_0) entered disabled state
[  199.827945][ T9117] bridge0: port 2(bridge_slave_1) entered disabled state
[  199.869363][T16957] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2958'.
[  199.950552][T16962] netlink: 'syz.6.2960': attribute type 13 has an invalid length.
[  199.979050][T16962] lo: entered promiscuous mode
[  199.983935][T16962] lo: entered allmulticast mode
[  199.992220][T16962] tunl0: entered promiscuous mode
[  199.998120][T16962] tunl0: entered allmulticast mode
[  200.029508][T16962] gre0: entered promiscuous mode
[  200.034521][T16962] gre0: entered allmulticast mode
[  200.048056][T16962] gretap0: entered promiscuous mode
[  200.053308][T16962] gretap0: entered allmulticast mode
[  200.061883][T16968] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2961'.
[  200.074359][T16962] erspan0: entered promiscuous mode
[  200.079660][T16962] erspan0: entered allmulticast mode
[  200.101459][T16962] ip_vti0: entered promiscuous mode
[  200.106836][T16962] ip_vti0: entered allmulticast mode
[  200.122489][T16962] ip6_vti0: entered promiscuous mode
[  200.127926][T16962] ip6_vti0: entered allmulticast mode
[  200.147270][T16962] sit0: entered promiscuous mode
[  200.152266][T16962] sit0: entered allmulticast mode
[  200.167263][T16962] ip6tnl0: entered promiscuous mode
[  200.172562][T16962] ip6tnl0: entered allmulticast mode
[  200.197449][T16962] ip6gre0: entered promiscuous mode
[  200.202698][T16962] ip6gre0: entered allmulticast mode
[  200.227066][T16962] ip6gretap0: entered promiscuous mode
[  200.232608][T16962] ip6gretap0: entered allmulticast mode
[  200.259385][T16962] vcan0: entered promiscuous mode
[  200.264657][T16962] vcan0: entered allmulticast mode
[  200.270426][T16962] : entered allmulticast mode
[  200.275825][T16962] dummy0: entered promiscuous mode
[  200.281902][T16962] dummy0: entered allmulticast mode
[  200.290972][T16962] nlmon0: entered promiscuous mode
[  200.296906][T16962] nlmon0: entered allmulticast mode
[  200.303396][T16962] caif0: entered promiscuous mode
[  200.308646][T16962] caif0: entered allmulticast mode
[  200.316986][T16962] batadv0: entered promiscuous mode
[  200.322245][T16962] batadv0: entered allmulticast mode
[  200.333113][T16962] wg0: entered promiscuous mode
[  200.338771][T16962] wg0: entered allmulticast mode
[  200.344926][T16962] wg1: entered promiscuous mode
[  200.349869][T16962] wg1: entered allmulticast mode
[  200.358650][T16962] wg2: entered promiscuous mode
[  200.363625][T16962] wg2: entered allmulticast mode
[  200.370901][T16962] veth0_to_bridge: entered promiscuous mode
[  200.377662][T16962] veth0_to_bridge: entered allmulticast mode
[  200.386718][T16962] bridge_slave_0: entered promiscuous mode
[  200.392841][T16962] bridge_slave_0: entered allmulticast mode
[  200.405047][T16962] veth1_to_bridge: entered promiscuous mode
[  200.411170][T16962] veth1_to_bridge: entered allmulticast mode
[  200.419485][T16962] bridge_slave_1: entered promiscuous mode
[  200.425407][T16962] bridge_slave_1: entered allmulticast mode
[  200.433200][T16962] veth0_to_bond: entered promiscuous mode
[  200.439828][T16962] veth0_to_bond: entered allmulticast mode
[  200.452880][T16962] C: entered promiscuous mode
[  200.458429][T16962] C: entered allmulticast mode
[  200.474153][T16962] veth1_to_bond: entered promiscuous mode
[  200.480885][T16962] veth1_to_bond: entered allmulticast mode
[  200.495959][T16962] bond_slave_1: entered promiscuous mode
[  200.501641][T16962] bond_slave_1: entered allmulticast mode
[  200.514725][T16962] veth0_to_team: entered promiscuous mode
[  200.520566][T16962] veth0_to_team: entered allmulticast mode
[  200.527173][T16962] team_slave_0: entered promiscuous mode
[  200.532898][T16962] team_slave_0: entered allmulticast mode
[  200.539211][T16962] veth1_to_team: entered promiscuous mode
[  200.544983][T16962] veth1_to_team: entered allmulticast mode
[  200.554153][T16962] team_slave_1: entered promiscuous mode
[  200.559888][T16962] team_slave_1: entered allmulticast mode
[  200.566310][T16962] veth0_to_batadv: entered promiscuous mode
[  200.572347][T16962] veth0_to_batadv: entered allmulticast mode
[  200.579836][T16962] batadv_slave_0: entered promiscuous mode
[  200.585756][T16962] batadv_slave_0: entered allmulticast mode
[  200.593186][T16962] veth1_to_batadv: entered promiscuous mode
[  200.599231][T16962] veth1_to_batadv: entered allmulticast mode
[  200.606764][T16962] batadv_slave_1: entered promiscuous mode
[  200.612640][T16962] batadv_slave_1: entered allmulticast mode
[  200.618894][T16978] loop0: detected capacity change from 0 to 1024
[  200.620343][T16962] xfrm0: entered promiscuous mode
[  200.625956][T16978] EXT4-fs: Ignoring removed orlov option
[  200.630406][T16962] xfrm0: entered allmulticast mode
[  200.642333][T16978] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  200.642543][T16962] veth0_to_hsr: entered promiscuous mode
[  200.661338][T16962] veth0_to_hsr: entered allmulticast mode
[  200.668781][T16962] hsr_slave_0: entered promiscuous mode
[  200.674431][T16962] hsr_slave_0: entered allmulticast mode
[  200.681838][T16962] veth1_to_hsr: entered promiscuous mode
[  200.690758][T16962] veth1_to_hsr: entered allmulticast mode
[  200.698850][T16962] hsr_slave_1: entered promiscuous mode
[  200.704500][T16962] hsr_slave_1: entered allmulticast mode
[  200.713436][T16962] veth1_virt_wifi: entered promiscuous mode
[  200.720407][T16962] veth1_virt_wifi: entered allmulticast mode
[  200.730163][T16962] veth0_virt_wifi: entered promiscuous mode
[  200.736882][T16962] veth0_virt_wifi: entered allmulticast mode
[  200.744752][T16962] veth1_vlan: entered allmulticast mode
[  200.751698][T16962] veth0_vlan: entered allmulticast mode
[  200.760520][T16962] @: entered promiscuous mode
[  200.765336][T16962] @: entered allmulticast mode
[  200.776683][T16962] vlan1: entered promiscuous mode
[  200.781894][T16962] vlan1: entered allmulticast mode
[  200.821200][T16962] macvlan0: entered promiscuous mode
[  200.826889][T16962] macvlan0: entered allmulticast mode
[  200.851394][T16962] macvlan1: entered promiscuous mode
[  200.856836][T16962] macvlan1: entered allmulticast mode
[  200.875518][T16962] ipvlan0: entered promiscuous mode
[  200.880883][T16962] ipvlan0: entered allmulticast mode
[  200.888683][T16962] ipvlan1: entered promiscuous mode
[  200.893939][T16962] ipvlan1: entered allmulticast mode
[  200.900532][T16962] geneve0: entered promiscuous mode
[  200.905873][T16962] geneve0: entered allmulticast mode
[  200.912752][T16962] geneve1: entered promiscuous mode
[  200.918090][T16962] geneve1: entered allmulticast mode
[  200.924754][T16962] gtp0: entered allmulticast mode
[  200.931062][T16962] veth2: entered promiscuous mode
[  200.936193][T16962] veth2: entered allmulticast mode
[  200.941958][T16962] veth3: entered promiscuous mode
[  200.947105][T16962] veth3: entered allmulticast mode
[  200.953101][T16962] : entered promiscuous mode
[  200.957909][T16962] : entered allmulticast mode
[  200.963440][T16962] syztnl1: entered promiscuous mode
[  200.968716][T16962] syztnl1: entered allmulticast mode
[  200.974464][T16962] batadv1: entered promiscuous mode
[  200.979941][T16962] batadv1: entered allmulticast mode
[  200.985624][T16962] veth4: entered promiscuous mode
[  200.990866][T16962] veth4: entered allmulticast mode
[  200.996516][T16962] veth5: entered promiscuous mode
[  201.001625][T16962] veth5: entered allmulticast mode
[  201.007311][T16962] 
: entered promiscuous mode
[  201.012115][T16962] 
: entered allmulticast mode
[  201.017373][T16962] veth6: entered promiscuous mode
[  201.022477][T16962] veth6: entered allmulticast mode
[  201.028272][T16962] veth7: entered promiscuous mode
[  201.033385][T16962] veth7: entered allmulticast mode
[  201.039113][T16962] ip6_vti1: entered promiscuous mode
[  201.044450][T16962] ip6_vti1: entered allmulticast mode
[  201.050280][T16962] bridge0: entered promiscuous mode
[  201.055560][T16962] bridge0: entered allmulticast mode
[  201.062424][T16962] netdevsim netdevsim6 eth0: entered promiscuous mode
[  201.069361][T16962] netdevsim netdevsim6 eth0: entered allmulticast mode
[  201.076747][T16962] netdevsim netdevsim6 eth1: entered promiscuous mode
[  201.083704][T16962] netdevsim netdevsim6 eth1: entered allmulticast mode
[  201.094517][T16962] netdevsim netdevsim6 eth2: entered promiscuous mode
[  201.102434][T16962] netdevsim netdevsim6 eth2: entered allmulticast mode
[  201.110560][T16962] netdevsim netdevsim6 eth3: entered promiscuous mode
[  201.117476][T16962] netdevsim netdevsim6 eth3: entered allmulticast mode
[  201.171040][T16609] 8021q: adding VLAN 0 to HW filter on device bond0
[  201.327611][T16609] 8021q: adding VLAN 0 to HW filter on device team0
[  201.340314][ T9092] bridge0: port 1(bridge_slave_0) entered blocking state
[  201.347677][ T9092] bridge0: port 1(bridge_slave_0) entered forwarding state
[  201.373164][ T9092] bridge0: port 2(bridge_slave_1) entered blocking state
[  201.380428][ T9092] bridge0: port 2(bridge_slave_1) entered forwarding state
[  201.398797][T16609] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  201.409901][T16609] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  201.545714][T16609] 8021q: adding VLAN 0 to HW filter on device batadv0
[  201.564975][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  201.656911][T16609] veth0_vlan: entered promiscuous mode
[  201.664546][T16609] veth1_vlan: entered promiscuous mode
[  201.679833][T16609] veth0_macvtap: entered promiscuous mode
[  201.688330][T16609] veth1_macvtap: entered promiscuous mode
[  201.698679][T16609] batman_adv: batadv0: Interface activated: batadv_slave_0
[  201.710551][T16609] batman_adv: batadv0: Interface activated: batadv_slave_1
[  201.719823][T16609] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  201.728753][T16609] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  201.737519][T16609] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  201.746299][T16609] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  201.768231][   T29] audit: type=1400 audit(1747659146.802:5304): avc:  denied  { mounton } for  pid=16609 comm="syz-executor" path="/root/syzkaller.AlSg18/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=34571 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[  201.797449][   T29] audit: type=1400 audit(1747659146.832:5305): avc:  denied  { mount } for  pid=16609 comm="syz-executor" name="/" dev="gadgetfs" ino=3032 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  201.840552][T17036] loop8: detected capacity change from 0 to 128
[  201.871774][T17037] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  201.880194][T17037] syzkaller0: entered promiscuous mode
[  201.885738][T17037] syzkaller0: entered allmulticast mode
[  201.894065][T17037] tipc: Resetting bearer <eth:syzkaller0>
[  201.903122][T17030] tipc: Resetting bearer <eth:syzkaller0>
[  201.910160][T17030] tipc: Disabling bearer <eth:syzkaller0>
[  201.946534][T17062] loop7: detected capacity change from 0 to 512
[  201.960613][T17062] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  201.973692][T17062] ext4 filesystem being mounted at /573/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  202.030060][T17071] loop8: detected capacity change from 0 to 512
[  202.057179][   T29] audit: type=1326 audit(1747659147.092:5306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17073 comm="syz.5.2977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccc2dde969 code=0x7ffc0000
[  202.113721][   T29] audit: type=1326 audit(1747659147.112:5307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17073 comm="syz.5.2977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7fccc2dde969 code=0x7ffc0000
[  202.141413][T17071] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  202.168246][T17071] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  202.180286][T17083] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  202.192749][ T3905] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  202.263875][T17083] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  202.278026][T17099] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  202.338405][T17083] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  202.380289][T17083] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  202.396205][T17113] loop7: detected capacity change from 0 to 2048
[  202.409285][T16609] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  202.431277][T17113] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  202.560228][T17083] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  202.578894][T17083] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  202.596469][T17083] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  202.639113][T17083] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  202.678687][T17134] lo speed is unknown, defaulting to 1000
[  202.890267][T17113] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  203.052774][T17162] netlink: 'syz.5.2995': attribute type 4 has an invalid length.
[  203.056878][T17113] EXT4-fs (loop7): Delayed block allocation failed for inode 16 at logical offset 1408 with max blocks 2 with error 28
[  203.073705][T17113] EXT4-fs (loop7): This should not happen!! Data will be lost
[  203.073705][T17113] 
[  203.076626][T17162] netlink: 'syz.5.2995': attribute type 4 has an invalid length.
[  203.084560][T17113] EXT4-fs (loop7): Total free blocks count 0
[  203.098610][T17113] EXT4-fs (loop7): Free/Dirty block details
[  203.104567][T17113] EXT4-fs (loop7): free_blocks=2415919104
[  203.110423][T17113] EXT4-fs (loop7): dirty_blocks=16
[  203.115564][T17113] EXT4-fs (loop7): Block reservation details
[  203.122418][T17113] EXT4-fs (loop7): i_reserved_data_blocks=1
[  203.148507][T17164] loop0: detected capacity change from 0 to 1024
[  203.179302][T17164] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  203.196026][T17169] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2997'.
[  203.214135][T17164] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters
[  203.241492][ T3905] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  203.255182][T17169] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2997'.
[  203.255669][   T29] kauditd_printk_skb: 31 callbacks suppressed
[  203.255686][   T29] audit: type=1326 audit(1747659148.282:5339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17172 comm="syz.6.2999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd499d2e969 code=0x7ffc0000
[  203.303749][   T29] audit: type=1326 audit(1747659148.332:5340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17172 comm="syz.6.2999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd499d2e969 code=0x7ffc0000
[  203.331231][   T29] audit: type=1326 audit(1747659148.362:5341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17172 comm="syz.6.2999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd499d2e969 code=0x7ffc0000
[  203.355627][   T29] audit: type=1326 audit(1747659148.362:5342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17172 comm="syz.6.2999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd499d2e969 code=0x7ffc0000
[  203.393253][   T29] audit: type=1326 audit(1747659148.422:5343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17172 comm="syz.6.2999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd499d2e969 code=0x7ffc0000
[  203.453388][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  203.476763][   T29] audit: type=1326 audit(1747659148.462:5344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17172 comm="syz.6.2999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd499d2e969 code=0x7ffc0000
[  203.500908][   T29] audit: type=1326 audit(1747659148.462:5345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17172 comm="syz.6.2999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd499d2e969 code=0x7ffc0000
[  203.525303][   T29] audit: type=1326 audit(1747659148.472:5346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17172 comm="syz.6.2999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fd499d2e969 code=0x7ffc0000
[  203.549610][   T29] audit: type=1326 audit(1747659148.472:5347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17172 comm="syz.6.2999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd499d2e969 code=0x7ffc0000
[  203.573886][   T29] audit: type=1326 audit(1747659148.472:5348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17172 comm="syz.6.2999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd499d2e969 code=0x7ffc0000
[  203.614049][T17175] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.667592][T17186] loop7: detected capacity change from 0 to 1024
[  203.708627][T17186] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  203.712470][T17175] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.738065][T17201] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3001'.
[  203.747705][T17201] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3001'.
[  203.799858][T17186] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters
[  203.825323][ T3905] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  203.840656][T17175] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.908045][T17175] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.930741][T17224] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3007'.
[  203.987050][T17242] netlink: 192 bytes leftover after parsing attributes in process `syz.8.3014'.
[  204.096429][T17258] loop5: detected capacity change from 0 to 512
[  204.104001][T17258] EXT4-fs (loop5): blocks per group (95) and clusters per group (32768) inconsistent
[  204.162514][T17263] loop0: detected capacity change from 0 to 2048
[  204.203061][T17263] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  204.228732][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  204.402518][T17280] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3022'.
[  204.438306][T17282] loop0: detected capacity change from 0 to 1024
[  204.445695][T17282] EXT4-fs: Ignoring removed oldalloc option
[  204.454447][T17282] EXT4-fs: Ignoring removed orlov option
[  204.461062][T17282] EXT4-fs (loop0): stripe (1570) is not aligned with cluster size (16), stripe is disabled
[  204.493825][T17282] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  204.515886][T17282] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 18: block 369:freeing already freed block (bit 23); block bitmap corrupt.
[  204.532546][T17282] EXT4-fs (loop0): Remounting filesystem read-only
[  204.555225][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  204.604784][T17289] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3024'.
[  204.615143][T17289] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  204.622889][T17289] batman_adv: batadv0: Removing interface: batadv_slave_0
[  204.631065][T17289] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  204.638570][T17289] batman_adv: batadv0: Removing interface: batadv_slave_1
[  204.782531][T17302] netlink: 'syz.5.3027': attribute type 21 has an invalid length.
[  204.790648][T17302] netlink: 'syz.5.3027': attribute type 20 has an invalid length.
[  204.798865][T17302] IPv6: NLM_F_CREATE should be specified when creating new route
[  204.835389][T17306] IPVS: Error connecting to the multicast addr
[  204.967249][T17322] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  204.976096][T17322] syzkaller0: entered promiscuous mode
[  204.981683][T17322] syzkaller0: entered allmulticast mode
[  204.993283][T17322] tipc: Resetting bearer <eth:syzkaller0>
[  205.001211][T17320] tipc: Resetting bearer <eth:syzkaller0>
[  205.010018][T17320] tipc: Disabling bearer <eth:syzkaller0>
[  205.204044][T17344] netlink: 'syz.8.3041': attribute type 21 has an invalid length.
[  205.212900][T17344] netlink: 'syz.8.3041': attribute type 20 has an invalid length.
[  205.221126][T17344] IPv6: NLM_F_CREATE should be specified when creating new route
[  205.230064][T17346] sch_tbf: burst 3298 is lower than device lo mtu (11337746) !
[  205.264604][T17349] netlink: 'syz.7.3045': attribute type 10 has an invalid length.
[  205.277062][T17349] 8021q: adding VLAN 0 to HW filter on device team0
[  205.286070][T17349] bond0: (slave team0): Enslaving as an active interface with an up link
[  205.405601][T17357] netlink: 'syz.7.3057': attribute type 4 has an invalid length.
[  205.416031][T17357] netlink: 'syz.7.3057': attribute type 4 has an invalid length.
[  205.667951][T17371] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3052'.
[  205.772366][ T3381] lo speed is unknown, defaulting to 1000
[  205.778243][ T3381] sxz0: Port: 1 Link ACTIVE
[  205.846371][T17378] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3055'.
[  205.876556][T17378] lo speed is unknown, defaulting to 1000
[  205.925150][T17389] netlink: 'syz.0.3058': attribute type 10 has an invalid length.
[  205.936044][T17389] team0: left promiscuous mode
[  205.941136][T17389] team0: left allmulticast mode
[  205.947166][T17389] 8021q: adding VLAN 0 to HW filter on device team0
[  205.956430][T17389] team0: entered promiscuous mode
[  205.962276][T17389] team0: entered allmulticast mode
[  205.968534][T17389] $Hÿ: (slave team0): Enslaving as an active interface with an up link
[  206.478525][T17175] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  206.534434][T17175] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  206.572211][T17175] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  206.611925][T17175] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  207.377829][T17440] IPv6: NLM_F_CREATE should be specified when creating new route
[  207.409264][T17440] loop5: detected capacity change from 0 to 512
[  207.442897][T17440] EXT4-fs (loop5): 1 orphan inode deleted
[  207.444654][T17442] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  207.449546][T17440] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  207.485131][ T9126] EXT4-fs error (device loop5): ext4_release_dquot:6971: comm kworker/u8:52: Failed to release dquot type 1
[  207.501693][T17441] tipc: Resetting bearer <eth:syzkaller0>
[  207.552155][T17456] loop8: detected capacity change from 0 to 2048
[  207.565934][T17441] tipc: Disabling bearer <eth:syzkaller0>
[  207.573506][T17440] ext4 filesystem being mounted at /560/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  207.608109][T17456] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  207.620864][T17440] bond0: (slave team0): Releasing backup interface
[  207.729537][T17456] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  207.758481][T17499] loop0: detected capacity change from 0 to 512
[  207.770777][T17456] EXT4-fs (loop8): Delayed block allocation failed for inode 16 at logical offset 1024 with max blocks 32 with error 28
[  207.784446][T17456] EXT4-fs (loop8): This should not happen!! Data will be lost
[  207.784446][T17456] 
[  207.794427][T17456] EXT4-fs (loop8): Total free blocks count 0
[  207.800449][T17456] EXT4-fs (loop8): Free/Dirty block details
[  207.806455][T17456] EXT4-fs (loop8): free_blocks=2415919104
[  207.812264][T17456] EXT4-fs (loop8): dirty_blocks=32
[  207.817448][T17456] EXT4-fs (loop8): Block reservation details
[  207.823623][T17456] EXT4-fs (loop8): i_reserved_data_blocks=2
[  207.860754][ T3668] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  207.870224][T17459] loop0: detected capacity change from 0 to 512
[  207.882217][T17459] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities
[  207.933927][T17454] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.3071'.
[  207.948964][T17454] netlink: zone id is out of range
[  207.955384][T17454] netlink: zone id is out of range
[  207.960924][T17454] netlink: del zone limit has 8 unknown bytes
[  207.971284][T16609] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  207.996739][T17512] loop7: detected capacity change from 0 to 164
[  208.103047][T17535] Unsupported NM flag settings (8)
[  208.115358][T17535] netlink: 152 bytes leftover after parsing attributes in process `syz.7.3076'.
[  208.168911][T17535] : renamed from bond0 (while UP)
[  208.234697][T17540] loop8: detected capacity change from 0 to 8192
[  208.326802][T17540]  loop8: p1 p3 p4
[  208.333680][T17540] loop8: p1 size 8390912 extends beyond EOD, truncated
[  208.351654][T17540] loop8: p3 size 589824 extends beyond EOD, truncated
[  208.673272][T17583] loop8: detected capacity change from 0 to 512
[  208.782678][T17573] loop8: detected capacity change from 0 to 512
[  208.803097][T17573] EXT4-fs (loop8): couldn't mount as ext2 due to feature incompatibilities
[  208.999996][   T29] kauditd_printk_skb: 88 callbacks suppressed
[  209.000015][   T29] audit: type=1326 audit(1747659153.708:5436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17595 comm="syz.5.3094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccc2dde969 code=0x7ffc0000
[  209.041527][   T29] audit: type=1326 audit(1747659153.755:5437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17595 comm="syz.5.3094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fccc2dde969 code=0x7ffc0000
[  209.069388][   T29] audit: type=1326 audit(1747659153.755:5438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17595 comm="syz.5.3094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccc2dde969 code=0x7ffc0000
[  209.093667][   T29] audit: type=1326 audit(1747659153.755:5439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17595 comm="syz.5.3094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccc2dde969 code=0x7ffc0000
[  209.121271][   T29] audit: type=1326 audit(1747659153.829:5440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17595 comm="syz.5.3094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fccc2dde969 code=0x7ffc0000
[  209.145444][   T29] audit: type=1326 audit(1747659153.829:5441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17595 comm="syz.5.3094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccc2dde969 code=0x7ffc0000
[  209.169669][   T29] audit: type=1326 audit(1747659153.829:5442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17595 comm="syz.5.3094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccc2dde969 code=0x7ffc0000
[  209.201218][   T29] audit: type=1326 audit(1747659153.904:5443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17595 comm="syz.5.3094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=172 compat=0 ip=0x7fccc2dde969 code=0x7ffc0000
[  209.225515][   T29] audit: type=1326 audit(1747659153.904:5444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17595 comm="syz.5.3094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccc2dde969 code=0x7ffc0000
[  209.250491][   T29] audit: type=1326 audit(1747659153.904:5445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17595 comm="syz.5.3094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccc2dde969 code=0x7ffc0000
[  209.262216][T17607] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3100'.
[  209.291086][T17596] usb usb8: usbfs: process 17596 (syz.5.3094) did not claim interface 0 before use
[  209.336862][T17617] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3102'.
[  209.346162][T17610] loop8: detected capacity change from 0 to 164
[  209.356442][T17610] Unable to read rock-ridge attributes
[  209.363876][T17610] Unable to read rock-ridge attributes
[  209.383237][T17617] $Hÿ: (slave team0): Releasing backup interface
[  209.392682][T17617] team0 (unregistering): left promiscuous mode
[  209.399865][T17617] team0 (unregistering): left allmulticast mode
[  209.408307][T17617] team0 (unregistering): Port device team_slave_0 removed
[  209.422506][T17617] team0 (unregistering): Port device team_slave_1 removed
[  209.443247][T17629] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3103'.
[  209.452427][T17629] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3103'.
[  209.552911][T17668] loop5: detected capacity change from 0 to 512
[  209.609925][T17625] loop5: detected capacity change from 0 to 512
[  209.619593][T17625] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities
[  209.652607][T17690] loop7: detected capacity change from 0 to 128
[  209.780049][T17702] loop5: detected capacity change from 0 to 1024
[  209.788612][T17702] EXT4-fs: Mount option(s) incompatible with ext2
[  209.868333][ T3391] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  209.876645][T17713] loop0: detected capacity change from 0 to 1024
[  209.883685][ T3391] hid-generic 0000:0000:0000.000C: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  209.894871][T17713] EXT4-fs: Ignoring removed nomblk_io_submit option
[  209.955178][T17713] EXT4-fs: Mount option(s) incompatible with ext2
[  210.023129][T17724] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3117'.
[  210.517859][T17730] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3118'.
[  210.582218][T17730] team0 (unregistering): Port device team_slave_0 removed
[  210.601597][T17730] team0 (unregistering): Port device team_slave_1 removed
[  211.040170][T17791] loop8: detected capacity change from 0 to 512
[  211.048980][T17791] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  211.060930][T17791] EXT4-fs (loop8): 1 truncate cleaned up
[  211.067325][T17791] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  211.166093][T17796] lo speed is unknown, defaulting to 1000
[  211.391193][ T1041] hid-generic 0000:0004:0000.000D: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  211.701525][T16609] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  212.573026][T17848] loop8: detected capacity change from 0 to 128
[  212.584144][T17848] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  212.601502][T17848] ext4 filesystem being mounted at /31/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  212.739938][T16609] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  212.794852][T17863] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3137'.
[  212.805308][T17867] loop0: detected capacity change from 0 to 128
[  212.820844][T17869] atomic_op ffff88810365fd28 conn xmit_atomic 0000000000000000
[  212.894303][T17876] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3142'.
[  212.936103][T17881] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3144'.
[  212.965836][T17881] : (slave team0): Releasing backup interface
[  213.005626][T17883] loop5: detected capacity change from 0 to 8192
[  213.074657][T17930] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3146'.
[  213.111876][T17933] loop5: detected capacity change from 0 to 1764
[  213.255808][T17940] validate_nla: 1 callbacks suppressed
[  213.255827][T17940] netlink: 'syz.5.3152': attribute type 6 has an invalid length.
[  213.917445][T17961] loop8: detected capacity change from 0 to 128
[  214.162142][T17967] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3160'.
[  214.394372][T17989] syz_tun: entered allmulticast mode
[  214.418188][T17989] syz_tun: left allmulticast mode
[  214.441900][   T29] kauditd_printk_skb: 541 callbacks suppressed
[  214.441923][   T29] audit: type=1326 audit(1747659158.778:5987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17990 comm="syz.8.3165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f483b20e969 code=0x7ffc0000
[  214.474751][   T29] audit: type=1326 audit(1747659158.778:5988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17990 comm="syz.8.3165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f483b20e969 code=0x7ffc0000
[  214.499182][   T29] audit: type=1326 audit(1747659158.778:5989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17990 comm="syz.8.3165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f483b20e969 code=0x7ffc0000
[  214.523321][   T29] audit: type=1326 audit(1747659158.778:5990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17990 comm="syz.8.3165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f483b20e969 code=0x7ffc0000
[  214.547774][   T29] audit: type=1326 audit(1747659158.778:5991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17990 comm="syz.8.3165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f483b20e969 code=0x7ffc0000
[  214.572008][   T29] audit: type=1326 audit(1747659158.778:5992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17990 comm="syz.8.3165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f483b20e969 code=0x7ffc0000
[  214.596581][   T29] audit: type=1326 audit(1747659158.778:5993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17990 comm="syz.8.3165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f483b20e969 code=0x7ffc0000
[  214.620515][   T29] audit: type=1326 audit(1747659158.778:5994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17990 comm="syz.8.3165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f483b20e969 code=0x7ffc0000
[  214.645234][   T29] audit: type=1326 audit(1747659158.778:5995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17990 comm="syz.8.3165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f483b20e969 code=0x7ffc0000
[  214.669132][   T29] audit: type=1326 audit(1747659158.778:5996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17990 comm="syz.8.3165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f483b20e969 code=0x7ffc0000
[  214.714117][T17989] xt_CT: You must specify a L4 protocol and not use inversions on it
[  214.784550][ T3632] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  214.795179][ T3632] hid-generic 0000:0000:0000.000E: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  214.805834][T18000] loop7: detected capacity change from 0 to 1024
[  214.813818][T18000] EXT4-fs: Ignoring removed nomblk_io_submit option
[  214.822519][T18000] EXT4-fs: Mount option(s) incompatible with ext2
[  214.894612][T18013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  214.905057][T18013] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  214.980184][T18023] loop7: detected capacity change from 0 to 1024
[  215.088651][T18023] Falling back ldisc for ttyS3.
[  215.366117][T18060] loop0: detected capacity change from 0 to 1024
[  215.426880][T18060] EXT4-fs: Ignoring removed nomblk_io_submit option
[  215.519334][T18060] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  215.889505][T18062] veth1_macvtap: left allmulticast mode
[  215.896271][T18062] macsec0: left promiscuous mode
[  215.922035][T18062] netdevsim netdevsim7 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  215.931435][T18062] netdevsim netdevsim7 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  215.939901][T18062] netdevsim netdevsim7 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  215.948457][T18062] netdevsim netdevsim7 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  215.987187][T18062] netdevsim netdevsim7 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[  215.996467][T18062] netdevsim netdevsim7 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[  216.005107][T18062] netdevsim netdevsim7 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[  216.014298][T18062] netdevsim netdevsim7 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[  216.080439][T18062] geneve2: left promiscuous mode
[  216.090074][T18062] netdevsim netdevsim7 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  216.098971][T18062] netdevsim netdevsim7 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  216.107584][T18062] netdevsim netdevsim7 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  216.116183][T18062] netdevsim netdevsim7 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  216.142193][T18062] vxlan0: left promiscuous mode
[  216.152871][ T1041] lo speed is unknown, defaulting to 1000
[  216.158708][ T1041] sxz0: Port: 1 Link DOWN
[  216.178695][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  216.280991][T18086] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3192'.
[  216.317018][T18086] ip6gre1: entered allmulticast mode
[  216.446782][T18106] loop7: detected capacity change from 0 to 128
[  216.465132][T18106] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  216.490002][T18106] ext4 filesystem being mounted at /624/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  216.610015][ T3905] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  216.921564][T18128] loop0: detected capacity change from 0 to 1024
[  217.001641][T18128] Falling back ldisc for ttyS3.
[  217.255071][T18011] xt_hashlimit: max too large, truncated to 1048576
[  217.595049][T18173] lo speed is unknown, defaulting to 1000
[  218.023649][T18196] loop7: detected capacity change from 0 to 128
[  218.067921][T18196] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  218.083244][T18196] ext4 filesystem being mounted at /627/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  218.138858][ T3905] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  218.446747][T18231] $Hÿ: left allmulticast mode
[  218.506521][T18237] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  218.522032][T18239] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3227'.
[  218.562044][T18242] loop5: detected capacity change from 0 to 164
[  218.570447][T18242] ISOFS: unable to read i-node block
[  218.575983][T18242] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[  218.590837][T18242] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3228'.
[  218.782750][T18261] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3233'.
[  218.791811][T18261] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3233'.
[  218.801779][T18261] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3233'.
[  218.810987][T18261] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3233'.
[  218.850231][T18263] netlink: 256 bytes leftover after parsing attributes in process `syz.8.3235'.
[  218.873076][T18267] loop0: detected capacity change from 0 to 2048
[  218.885114][T18273] loop8: detected capacity change from 0 to 512
[  218.895691][T18273] EXT4-fs: Ignoring removed orlov option
[  218.904172][T18267] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  218.924329][T18273] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  218.948902][T18273] EXT4-fs (loop8): 1 orphan inode deleted
[  218.955077][T18273] EXT4-fs (loop8): 1 truncate cleaned up
[  218.961942][T18273] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  218.976467][T18273] EXT4-fs error (device loop8): ext4_inlinedir_to_tree:1339: inode #12: block 7: comm syz.8.3237: path /48/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=20, inode=13, rec_len=16, size=60 fake=0
[  219.004681][T18273] EXT4-fs (loop8): Remounting filesystem read-only
[  219.040491][T16609] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  219.105157][T18267] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2 with max blocks 1 with error 28
[  219.118242][T18267] EXT4-fs (loop0): This should not happen!! Data will be lost
[  219.118242][T18267] 
[  219.128776][T18267] EXT4-fs (loop0): Total free blocks count 0
[  219.134915][T18267] EXT4-fs (loop0): Free/Dirty block details
[  219.141379][T18267] EXT4-fs (loop0): free_blocks=0
[  219.146594][T18267] EXT4-fs (loop0): dirty_blocks=0
[  219.151688][T18267] EXT4-fs (loop0): Block reservation details
[  219.158026][T18267] EXT4-fs (loop0): i_reserved_data_blocks=0
[  219.174816][T18294] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3240'.
[  219.185301][T18294] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3240'.
[  219.211301][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  219.442343][T18316] loop0: detected capacity change from 0 to 512
[  219.457517][T18316] EXT4-fs (loop0): 1 orphan inode deleted
[  219.463883][T18316] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  219.477872][ T9092] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:22: Failed to release dquot type 1
[  219.489780][T18316] ext4 filesystem being mounted at /681/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  219.582428][T18322] syz_tun: entered allmulticast mode
[  219.589615][T18322] syz_tun: left allmulticast mode
[  219.596253][T18322] Cannot find add_set index 0 as target
[  219.902363][T18341] lo speed is unknown, defaulting to 1000
[  220.241153][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  220.623736][T18366] SELinux: security policydb version 18 (MLS) not backwards compatible
[  220.632113][T18366] SELinux: failed to load policy
[  220.699079][T18380] SELinux:  policydb version 0 does not match my version range 15-34
[  220.711709][T18380] SELinux: failed to load policy
[  220.735094][T18383] lo speed is unknown, defaulting to 1000
[  220.744542][T18380] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3257'.
[  220.755461][T18380] hsr_slave_0: left promiscuous mode
[  220.764449][T18380] hsr_slave_1: left promiscuous mode
[  220.875545][T18421] xt_CT: You must specify a L4 protocol and not use inversions on it
[  220.978180][T18438] SELinux:  policydb version 0 does not match my version range 15-34
[  220.988653][T18438] SELinux: failed to load policy
[  221.087722][   T29] kauditd_printk_skb: 86 callbacks suppressed
[  221.087740][   T29] audit: type=1400 audit(1747659165.018:6082): avc:  denied  { validate_trans } for  pid=18450 comm="syz.7.3269" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  221.125214][T18451] loop7: detected capacity change from 0 to 512
[  221.132095][T18451] journal_path: Non-blockdev passed as './bus'
[  221.138473][T18451] EXT4-fs: error: could not find journal device path
[  221.158257][T18451] rdma_op ffff888141c30180 conn xmit_rdma 0000000000000000
[  221.561414][   T29] audit: type=1326 audit(1747659165.458:6083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18463 comm="syz.8.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f483b20e969 code=0x7ffc0000
[  221.649908][   T29] audit: type=1326 audit(1747659165.505:6084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18463 comm="syz.8.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f483b20e969 code=0x7ffc0000
[  221.675043][   T29] audit: type=1326 audit(1747659165.505:6085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18463 comm="syz.8.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f483b20e969 code=0x7ffc0000
[  221.699952][   T29] audit: type=1326 audit(1747659165.505:6086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18463 comm="syz.8.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f483b20e969 code=0x7ffc0000
[  221.725396][   T29] audit: type=1326 audit(1747659165.505:6087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18463 comm="syz.8.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f483b20e969 code=0x7ffc0000
[  221.751178][   T29] audit: type=1326 audit(1747659165.505:6088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18463 comm="syz.8.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f483b20e969 code=0x7ffc0000
[  221.816573][   T29] audit: type=1326 audit(1747659165.701:6089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18463 comm="syz.8.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f483b20e969 code=0x7ffc0000
[  221.845465][   T29] audit: type=1326 audit(1747659165.701:6090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18463 comm="syz.8.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f483b20e969 code=0x7ffc0000
[  221.899020][T18478] syz_tun: entered allmulticast mode
[  221.914160][T18478] syz_tun: left allmulticast mode
[  221.924110][T18478] xt_CT: You must specify a L4 protocol and not use inversions on it
[  222.042360][   T29] audit: type=1326 audit(1747659165.907:6091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18481 comm="syz.5.3276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccc2dde969 code=0x7ffc0000
[  222.134744][T18490] syz.8.3279: attempt to access beyond end of device
[  222.134744][T18490] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  222.192945][T18495] batadv_slave_0: entered promiscuous mode
[  222.214905][T18490] batadv_slave_0: left promiscuous mode
[  222.217424][T18497] loop5: detected capacity change from 0 to 764
[  222.400024][T18512] lo speed is unknown, defaulting to 1000
[  222.416883][T18519] loop5: detected capacity change from 0 to 1024
[  222.430817][T18519] EXT4-fs: Ignoring removed bh option
[  222.453454][T18519] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  222.729975][T18549] $Hÿ: renamed from 
[  222.746060][T18549] $Hÿ: entered promiscuous mode
[  224.403782][T18573] cgroup: Unknown subsys name '¬§@﬽æì¦4*oäÂÒ£hÓîºoþüíUÜ'
[  224.804427][T18585] __nla_validate_parse: 3 callbacks suppressed
[  224.804446][T18585] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3297'.
[  224.819813][T18585] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3297'.
[  224.873366][T18552] Cannot find add_set index 0 as target
[  224.909352][ T3668] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  224.932070][ T3381] hid-generic 0000:0004:0000.000F: unknown main item tag 0x0
[  224.939927][ T3381] hid-generic 0000:0004:0000.000F: unknown main item tag 0x0
[  224.947568][ T3381] hid-generic 0000:0004:0000.000F: unknown main item tag 0x0
[  224.987294][ T3381] hid-generic 0000:0004:0000.000F: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  225.126189][T18602] $Hÿ: renamed from bond0
[  225.133031][T18602] $Hÿ: entered promiscuous mode
[  225.529277][T18610] loop7: detected capacity change from 0 to 164
[  225.558692][T18610] ISOFS: unable to read i-node block
[  225.564034][T18610] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[  225.579055][T18604] lo speed is unknown, defaulting to 1000
[  225.588539][T18614] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  225.632553][T18610] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3301'.
[  225.645187][T18610] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  225.653406][T18610] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  225.662516][T18610] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  225.670844][T18610] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  225.687943][T18614] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  225.764029][T18614] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  225.829166][T18614] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  225.956178][T18614] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  225.968555][T18614] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  225.980682][T18614] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  225.994394][T18614] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  226.558796][T18661] loop7: detected capacity change from 0 to 1024
[  226.589123][T18663] loop5: detected capacity change from 0 to 2048
[  226.598051][T18661] EXT4-fs: Ignoring removed bh option
[  226.620191][T18661] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  226.633347][T18663] EXT4-fs (loop5): failed to initialize system zone (-117)
[  226.651131][T18663] EXT4-fs (loop5): mount failed
[  226.801844][   T29] kauditd_printk_skb: 50 callbacks suppressed
[  226.801863][   T29] audit: type=1400 audit(1747661748.375:6142): avc:  denied  { ioctl } for  pid=18686 comm="syz.6.3322" path="socket:[37617]" dev="sockfs" ino=37617 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  226.875596][T18685] lo speed is unknown, defaulting to 1000
[  226.943802][T18702] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3315'.
[  227.027552][T18720] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3316'.
[  227.036621][T18720] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3316'.
[  227.090547][T18720] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  227.098954][T18720] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  227.107255][T18720] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  227.116246][T18720] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  227.397068][T18739] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3320'.
[  227.408748][   T29] audit: type=1326 audit(1747661748.918:6143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18737 comm="syz.5.3320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccc2dde969 code=0x7ffc0000
[  227.433555][   T29] audit: type=1326 audit(1747661748.918:6144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18737 comm="syz.5.3320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7fccc2dde969 code=0x7ffc0000
[  227.458902][   T29] audit: type=1326 audit(1747661748.918:6145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18737 comm="syz.5.3320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccc2dde969 code=0x7ffc0000
[  227.484166][   T29] audit: type=1326 audit(1747661748.918:6146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18737 comm="syz.5.3320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7fccc2dde969 code=0x7ffc0000
[  227.510980][   T29] audit: type=1326 audit(1747661748.918:6147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18737 comm="syz.5.3320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccc2dde969 code=0x7ffc0000
[  227.537217][   T29] audit: type=1326 audit(1747661748.918:6148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18737 comm="syz.5.3320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7fccc2dde969 code=0x7ffc0000
[  227.565222][   T29] audit: type=1326 audit(1747661748.918:6149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18737 comm="syz.5.3320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccc2dde969 code=0x7ffc0000
[  227.590033][   T29] audit: type=1326 audit(1747661748.927:6150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18737 comm="syz.5.3320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fccc2dde969 code=0x7ffc0000
[  228.040526][T18731] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3317'.
[  228.070163][   T29] audit: type=1326 audit(1747661749.367:6151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18737 comm="syz.5.3320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccc2dde969 code=0x7ffc0000
[  228.102580][T18731] netlink: 'syz.0.3317': attribute type 5 has an invalid length.
[  228.111141][T18731] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3317'.
[  228.397401][T18752] lo speed is unknown, defaulting to 1000
[  229.166206][T18783] xt_hashlimit: max too large, truncated to 1048576
[  229.375226][ T3905] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  229.440979][T18794] random: crng reseeded on system resumption
[  229.499240][T18790] lo speed is unknown, defaulting to 1000
[  229.611881][T18781] lo speed is unknown, defaulting to 1000
[  229.644549][T18805] loop8: detected capacity change from 0 to 2048
[  229.715558][T18831] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3334'.
[  229.728079][T18805]  loop8: p1 < > p3
[  229.735898][T18805] loop8: p3 size 134217728 extends beyond EOD, truncated
[  229.745341][T18831] 0·: renamed from hsr_slave_1
[  229.764950][T18831] 0·: left promiscuous mode
[  229.770086][T18831] A link change request failed with some changes committed already. Interface 
c0· may have been left with an inconsistent configuration, please check.
[  229.923831][T18836] loop7: detected capacity change from 0 to 512
[  229.986529][T18836] EXT4-fs (loop7): 1 orphan inode deleted
[  229.993068][T18836] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  230.007091][T18836] ext4 filesystem being mounted at /646/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  230.022271][ T9126] EXT4-fs error (device loop7): ext4_release_dquot:6971: comm kworker/u8:52: Failed to release dquot type 1
[  230.197418][T18850] loop0: detected capacity change from 0 to 1024
[  230.211199][T18850] EXT4-fs: Ignoring removed nomblk_io_submit option
[  230.223196][T18850] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  230.236721][T18850] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  230.272579][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  230.338371][T18862] loop8: detected capacity change from 0 to 1024
[  230.345816][T18862] EXT4-fs: Ignoring removed bh option
[  230.400918][T18862] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  230.467510][T18869] netdevsim netdevsim6 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  230.477372][T18869] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  230.653931][T18869] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  230.664153][T18869] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  230.719986][ T3905] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  230.909359][T18869] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  230.919550][T18869] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  231.026510][T18869] netdevsim netdevsim6 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  231.036670][T18869] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  231.165429][T18869] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  231.175256][T18869] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  231.206137][T18869] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  231.214686][T18869] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  231.231490][T18869] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  231.240954][T18869] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  231.265168][T18869] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  231.274115][T18869] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  231.813803][T16609] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  231.963585][T18962] loop8: detected capacity change from 0 to 4096
[  231.974185][T18962] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  232.258883][T18975] netlink: 9 bytes leftover after parsing attributes in process `syz.5.3357'.
[  232.269052][T18975] 0·: renamed from hsr_slave_1
[  232.277044][T18975] 0·: entered allmulticast mode
[  232.283259][T18975] A link change request failed with some changes committed already. Interface 
c0· may have been left with an inconsistent configuration, please check.
[  232.337328][T16609] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  232.435329][   T29] kauditd_printk_skb: 324 callbacks suppressed
[  232.435351][   T29] audit: type=1326 audit(1747661753.642:6475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18982 comm="syz.0.3359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e02c7e969 code=0x7ffc0000
[  232.468771][   T29] audit: type=1326 audit(1747661753.642:6476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18982 comm="syz.0.3359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e02c7e969 code=0x7ffc0000
[  232.493539][   T29] audit: type=1326 audit(1747661753.642:6477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18982 comm="syz.0.3359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2e02c7e969 code=0x7ffc0000
[  232.517432][   T29] audit: type=1326 audit(1747661753.642:6478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18982 comm="syz.0.3359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e02c7e969 code=0x7ffc0000
[  232.541563][   T29] audit: type=1326 audit(1747661753.642:6479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18982 comm="syz.0.3359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e02c7e969 code=0x7ffc0000
[  232.566126][   T29] audit: type=1326 audit(1747661753.642:6480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18982 comm="syz.0.3359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2e02c7e969 code=0x7ffc0000
[  232.589909][   T29] audit: type=1326 audit(1747661753.642:6481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18982 comm="syz.0.3359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e02c7e969 code=0x7ffc0000
[  232.613902][   T29] audit: type=1326 audit(1747661753.642:6482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18982 comm="syz.0.3359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e02c7e969 code=0x7ffc0000
[  232.637916][   T29] audit: type=1326 audit(1747661753.642:6483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18982 comm="syz.0.3359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2e02c7e969 code=0x7ffc0000
[  232.662130][   T29] audit: type=1326 audit(1747661753.642:6484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18982 comm="syz.0.3359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e02c7e969 code=0x7ffc0000
[  232.883638][T18990] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3361'.
[  233.199226][T19004] netlink: 'syz.0.3364': attribute type 4 has an invalid length.
[  233.286999][T19006] lo: left promiscuous mode
[  233.291842][T19006] tunl0: left promiscuous mode
[  233.296816][T19006] gre0: left promiscuous mode
[  233.303024][T19006] gretap0: left promiscuous mode
[  233.308624][T19006] erspan0: left promiscuous mode
[  233.314019][T19006] ip_vti0: left promiscuous mode
[  233.320874][T19006] ip6_vti0: left promiscuous mode
[  233.326179][T19006] sit0: left promiscuous mode
[  233.331589][T19006] ip6tnl0: left promiscuous mode
[  233.336846][T19006] ip6gre0: left promiscuous mode
[  233.343141][T19006] syz_tun: left promiscuous mode
[  233.348236][T19006] ip6gretap0: left promiscuous mode
[  233.353640][T19006] vcan0: left promiscuous mode
[  233.358660][T19006] $Hÿ: left promiscuous mode
[  233.364770][T19006] dummy0: left promiscuous mode
[  233.369755][T19006] nlmon0: left promiscuous mode
[  233.374887][T19006] caif0: left promiscuous mode
[  233.379939][T19006] vxcan0: left promiscuous mode
[  233.385743][T19006] vxcan1: left promiscuous mode
[  233.390950][T19006] veth0: left promiscuous mode
[  233.396108][T19006] veth1: left promiscuous mode
[  233.401219][T19006] wg0: left promiscuous mode
[  233.407034][T19006] wg1: left promiscuous mode
[  233.415032][T19006] wg2: left promiscuous mode
[  233.420716][T19006] veth0_to_bridge: left promiscuous mode
[  233.427305][T19006] bridge_slave_0: left promiscuous mode
[  233.433242][T19006] veth0_to_bond: left promiscuous mode
[  233.438951][T19006] bond_slave_0: left promiscuous mode
[  233.444674][T19006] veth1_to_bond: left promiscuous mode
[  233.451175][T19006] bond_slave_1: left promiscuous mode
[  233.456677][T19006] veth0_to_team: left promiscuous mode
[  233.462299][T19006] team_slave_0: left promiscuous mode
[  233.468931][T19006] veth1_to_team: left promiscuous mode
[  233.474596][T19006] team_slave_1: left promiscuous mode
[  233.480509][T19006] veth0_to_batadv: left promiscuous mode
[  233.486393][T19006] batadv_slave_0: left promiscuous mode
[  233.493276][T19006] veth1_to_batadv: left promiscuous mode
[  233.499537][T19006] batadv_slave_1: left promiscuous mode
[  233.505322][T19006] xfrm0: left promiscuous mode
[  233.510292][T19006] veth0_to_hsr: left promiscuous mode
[  233.516881][T19006] hsr_slave_0: left promiscuous mode
[  233.522374][T19006] veth1_to_hsr: left promiscuous mode
[  233.530799][T19006] veth1_virt_wifi: left promiscuous mode
[  233.536909][T19006] veth0_virt_wifi: left promiscuous mode
[  233.542802][T19006] @: left promiscuous mode
[  233.547598][T19006] vlan1: left promiscuous mode
[  233.552703][T19006] macvlan0: left promiscuous mode
[  233.558400][T19006] macvlan1: left promiscuous mode
[  233.564367][T19006] ipvlan0: left promiscuous mode
[  233.569807][T19006] ipvlan1: left promiscuous mode
[  233.575179][T19006] geneve0: left promiscuous mode
[  233.580323][T19006] geneve1: left promiscuous mode
[  233.585511][T19006] bridge1: left promiscuous mode
[  233.590729][T19006] ip6tnl1: left promiscuous mode
[  233.595953][T19006] gtp0: left promiscuous mode
[  233.600836][T19006] geneve2: left promiscuous mode
[  233.605874][T19006] ip6gre1: left promiscuous mode
[  233.611036][T19006] : left promiscuous mode
[  233.615590][T19006] syztnl2: left promiscuous mode
[  233.620706][T19006] ip6_vti1: left promiscuous mode
[  233.625825][T19006] veth2: left promiscuous mode
[  233.630731][T19006] veth3: left promiscuous mode
[  233.635651][T19006] ip6_vti2: left promiscuous mode
[  233.640967][T19006] ip6gre2: left promiscuous mode
[  233.646105][T19006] bond0: left promiscuous mode
[  233.651453][T19006] syztnl1: left promiscuous mode
[  233.681402][T18996] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3362'.
[  233.690535][T18996] netlink: 'syz.5.3362': attribute type 5 has an invalid length.
[  233.698363][T18996] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3362'.
[  233.712216][T19006] bond1: left promiscuous mode
[  233.855719][T19016] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3367'.
[  233.923540][T19020] loop5: detected capacity change from 0 to 4096
[  233.952396][T19020] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  234.054509][T19040] SELinux:  Context system_u:object_r:dhcpd_state_t:s0 is not valid (left unmapped).
[  234.222130][T18981] loop8: detected capacity change from 0 to 128
[  234.292530][T19028] lo speed is unknown, defaulting to 1000
[  234.349353][ T3668] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  234.493632][T19055] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3373'.
[  234.503630][T19055] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3373'.
[  234.719498][T19066] loop8: detected capacity change from 0 to 164
[  234.730250][T19066] syz.8.3377: attempt to access beyond end of device
[  234.730250][T19066] loop8: rw=524288, sector=263328, nr_sectors = 4 limit=164
[  234.772249][T19066] syz.8.3377: attempt to access beyond end of device
[  234.772249][T19066] loop8: rw=0, sector=263328, nr_sectors = 4 limit=164
[  235.007829][T18966] xt_hashlimit: max too large, truncated to 1048576
[  235.125564][T19083] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3381'.
[  235.148581][T19084] loop7: detected capacity change from 0 to 2048
[  235.170582][T19083] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3381'.
[  235.204961][T19084]  loop7: p1 < > p3
[  235.210787][T19084] loop7: p3 size 134217728 extends beyond EOD, truncated
[  235.218482][T19083] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3381'.
[  235.514898][T19113] loop0: detected capacity change from 0 to 2048
[  235.594185][T19113] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  235.728243][T19127] EXT4-fs: Ignoring removed orlov option
[  235.798607][T19127] EXT4-fs (loop0): can't enable nombcache during remount
[  235.985835][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  236.305312][T19145] lo speed is unknown, defaulting to 1000
[  237.387516][T19207] ref_ctr_offset mismatch. inode: 0xcfe offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xa
[  237.418763][T19207] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: 0, delta: -1
[  237.429485][T19207] ref_ctr decrement failed for inode: 0xcfe offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88810ad87900
[  237.478056][T19207] uprobe: syz.5.3401:19207 failed to unregister, leaking uprobe
[  237.655470][T19218] loop5: detected capacity change from 0 to 2048
[  237.701929][T19218]  loop5: p1 < > p3
[  237.708056][T19218] loop5: p3 size 134217728 extends beyond EOD, truncated
[  237.898708][T19244] IPv6: sit1: Disabled Multicast RS
[  238.007818][T19254] loop7: detected capacity change from 0 to 512
[  238.015760][T19254] EXT4-fs: Ignoring removed i_version option
[  238.040332][T19254] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  238.082941][T19254] ext4 filesystem being mounted at /656/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  238.102811][T19254] EXT4-fs error (device loop7): ext4_do_update_inode:5211: inode #2: comm syz.7.3408: corrupted inode contents
[  238.115548][T19254] EXT4-fs error (device loop7): ext4_dirty_inode:6103: inode #2: comm syz.7.3408: mark_inode_dirty error
[  238.129853][T19254] EXT4-fs error (device loop7): ext4_do_update_inode:5211: inode #2: comm syz.7.3408: corrupted inode contents
[  238.347245][T19143] xt_hashlimit: max too large, truncated to 1048576
[  238.459277][T19261] bridge0: port 2(bridge_slave_1) entered disabled state
[  238.466716][T19261] bridge0: port 1(bridge_slave_0) entered disabled state
[  238.563556][T19261] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  238.572901][T19261] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  238.581989][T19261] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  238.591308][T19261] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  238.780158][ T3905] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  238.869034][   T29] kauditd_printk_skb: 71 callbacks suppressed
[  238.869053][   T29] audit: type=1326 audit(1747661759.658:6556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19279 comm="syz.7.3416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17e7e5e969 code=0x7ffc0000
[  238.899114][   T29] audit: type=1326 audit(1747661759.658:6557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19279 comm="syz.7.3416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7f17e7e5e969 code=0x7ffc0000
[  238.923095][   T29] audit: type=1326 audit(1747661759.658:6558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19279 comm="syz.7.3416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17e7e5e969 code=0x7ffc0000
[  238.948223][T19280] __nla_validate_parse: 2 callbacks suppressed
[  238.948241][T19280] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3416'.
[  238.971721][   T29] audit: type=1326 audit(1747661759.733:6559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19279 comm="syz.7.3416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7f17e7e5e969 code=0x7ffc0000
[  238.997581][   T29] audit: type=1326 audit(1747661759.733:6560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19279 comm="syz.7.3416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17e7e5e969 code=0x7ffc0000
[  239.022483][   T29] audit: type=1326 audit(1747661759.733:6561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19279 comm="syz.7.3416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17e7e5e969 code=0x7ffc0000
[  239.048436][   T29] audit: type=1326 audit(1747661759.733:6562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19279 comm="syz.7.3416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f17e7e5e969 code=0x7ffc0000
[  239.075639][   T29] audit: type=1326 audit(1747661759.733:6563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19279 comm="syz.7.3416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17e7e5e969 code=0x7ffc0000
[  239.105508][   T29] audit: type=1326 audit(1747661759.733:6564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19279 comm="syz.7.3416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17e7e5e969 code=0x7ffc0000
[  239.131428][   T29] audit: type=1326 audit(1747661759.733:6565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19279 comm="syz.7.3416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f17e7e5e969 code=0x7ffc0000
[  239.242166][T19309] loop5: detected capacity change from 0 to 2048
[  239.263551][T19309] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  239.267047][T19314] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3421'.
[  239.286944][T19314] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3421'.
[  239.296893][T19314] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3421'.
[  239.317725][T19314] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3421'.
[  239.404756][T19319] EXT4-fs: Ignoring removed orlov option
[  239.416973][T19319] EXT4-fs (loop5): can't enable nombcache during remount
[  239.684627][T19323] syzkaller0: entered promiscuous mode
[  239.690177][T19323] syzkaller0: entered allmulticast mode
[  239.769565][ T3668] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  240.684165][T19376] program syz.8.3438 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  240.727198][T19378] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3439'.
[  240.740242][T19378] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3439'.
[  240.809231][T19381] lo speed is unknown, defaulting to 1000
[  241.632648][T19422] loop0: detected capacity change from 0 to 512
[  241.669634][T19422] EXT4-fs: Ignoring removed bh option
[  241.675075][T19422] EXT4-fs: Ignoring removed orlov option
[  241.685690][T19422] EXT4-fs (loop0): blocks per group (255) and clusters per group (8192) inconsistent
[  241.775120][T19441] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3447'.
[  241.935272][T19441] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3447'.
[  241.987985][T19441] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3447'.
[  242.257757][T19460] sch_tbf: burst 0 is lower than device lo mtu (11337746) !
[  242.889915][T19492] usb usb1: check_ctrlrecip: process 19492 (syz.7.3457) requesting ep 01 but needs 81
[  242.900471][T19492] usb usb1: usbfs: process 19492 (syz.7.3457) did not claim interface 0 before use
[  243.332456][T19519] loop5: detected capacity change from 0 to 2048
[  243.361604][T19519] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  243.401201][T19528] lo speed is unknown, defaulting to 1000
[  243.437203][T19536] netlink: 'syz.0.3467': attribute type 2 has an invalid length.
[  243.566199][ T3668] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  244.245460][   T29] kauditd_printk_skb: 172 callbacks suppressed
[  244.245480][   T29] audit: type=1400 audit(1747661764.691:6738): avc:  denied  { relabelfrom } for  pid=19592 comm="syz.0.3475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  244.273057][   T29] audit: type=1400 audit(1747661764.691:6739): avc:  denied  { relabelto } for  pid=19592 comm="syz.0.3475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  244.386511][   T29] audit: type=1326 audit(1747661764.822:6740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19516 comm="syz.8.3465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f483b20e969 code=0x7ffc0000
[  244.411527][   T29] audit: type=1326 audit(1747661764.822:6741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19516 comm="syz.8.3465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f483b20e969 code=0x7ffc0000
[  244.496884][T19610] tipc: Bearer <udp:syz0>: already 2 bearers with priority 10
[  244.504889][T19610] tipc: Bearer <udp:syz0>: trying with adjusted priority
[  244.514901][T19610] tipc: New replicast peer: 10.1.1.2
[  244.520526][T19610] tipc: Enabled bearer <udp:syz0>, priority 9
[  244.539130][   T29] audit: type=1400 audit(1747661764.916:6742): avc:  denied  { create } for  pid=19606 comm="syz.5.3478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  244.560960][   T29] audit: type=1400 audit(1747661764.916:6743): avc:  denied  { bind } for  pid=19606 comm="syz.5.3478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  244.622854][T19608] ref_ctr_offset mismatch. inode: 0x23d offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xa
[  244.649341][   T29] audit: type=1400 audit(1747661765.009:6744): avc:  denied  { execute } for  pid=19605 comm="syz.8.3477" path="/104/file0" dev="tmpfs" ino=573 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  244.675282][T19608] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: 0, delta: -1
[  244.686206][T19608] ref_ctr decrement failed for inode: 0x23d offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88810ad82c00
[  244.710981][T19608] uprobe: syz.8.3477:19608 failed to unregister, leaking uprobe
[  244.834341][   T29] audit: type=1400 audit(1747661765.243:6745): avc:  denied  { read write } for  pid=16609 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  244.886851][T19630] __nla_validate_parse: 15 callbacks suppressed
[  244.886872][T19630] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3479'.
[  244.890336][   T29] audit: type=1400 audit(1747661765.271:6746): avc:  denied  { open } for  pid=16609 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  244.905821][T19630] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3479'.
[  244.929704][   T29] audit: type=1400 audit(1747661765.271:6747): avc:  denied  { ioctl } for  pid=16609 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=108 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  245.331806][T19650] syzkaller0: entered promiscuous mode
[  245.337616][T19650] syzkaller0: entered allmulticast mode
[  246.242488][T19688] ªªªªªª: renamed from vlan0
[  246.369993][T19696] loop7: detected capacity change from 0 to 512
[  246.451378][T19696] EXT4-fs (loop7): orphan cleanup on readonly fs
[  246.470513][T19702] loop0: detected capacity change from 0 to 512
[  246.484071][T19696] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz.7.3496: bad orphan inode 13
[  246.506759][T19696] ext4_test_bit(bit=12, block=18) = 1
[  246.512301][T19696] is_bad_inode(inode)=0
[  246.516556][T19696] NEXT_ORPHAN(inode)=2130706432
[  246.521527][T19696] max_ino=32
[  246.524746][T19696] i_nlink=1
[  246.540535][T19702] EXT4-fs (loop0): 1 orphan inode deleted
[  246.552658][T19702] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  246.580353][T19702] ext4 filesystem being mounted at /734/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  246.694443][T19696] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  246.708288][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  246.784080][T19696] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended
[  246.853734][T19696] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.3496: bg 0: block 248: padding at end of block bitmap is not set
[  246.901199][T19696] EXT4-fs error (device loop7): ext4_acquire_dquot:6935: comm syz.7.3496: Failed to acquire dquot type 1
[  246.916057][T19696] EXT4-fs warning (device loop7): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  246.945443][T19733] x_tables: ip6_tables: tcpmss match: only valid for protocol 6
[  246.956637][T19733] blktrace: Concurrent blktraces are not allowed on loop1
[  247.039969][ T3905] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  247.110331][T19735] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3505'.
[  247.120283][T19735] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3505'.
[  247.133260][T19743] syz.6.3502: attempt to access beyond end of device
[  247.133260][T19743] loop13: rw=0, sector=0, nr_sectors = 1 limit=0
[  247.146774][T19743] FAT-fs (loop13): unable to read boot sector
[  247.367232][T19747] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -98
[  247.388061][T19749] netlink: 9 bytes leftover after parsing attributes in process `syz.8.3509'.
[  247.436392][T19749] gretap0: entered promiscuous mode
[  247.475285][T19753] netlink: 5 bytes leftover after parsing attributes in process `syz.8.3509'.
[  247.572939][T19753] 0ªX¹¦D: renamed from gretap0
[  247.591355][T19755] netlink: 72 bytes leftover after parsing attributes in process `syz.7.3511'.
[  247.663523][T19753] 0ªX¹¦D: left promiscuous mode
[  247.668696][T19753] 0ªX¹¦D: entered allmulticast mode
[  247.698787][T19753] A link change request failed with some changes committed already. Interface 
30ªX¹¦D may have been left with an inconsistent configuration, please check.
[  248.098627][T19753] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3509'.
[  248.107665][T19753] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3509'.
[  248.547490][T19785] loop7: detected capacity change from 0 to 1024
[  248.555533][T19785] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  248.570092][T19785] EXT4-fs (loop7): revision level too high, forcing read-only mode
[  248.590479][T19785] EXT4-fs (loop7): orphan cleanup on readonly fs
[  248.617055][T19785] EXT4-fs error (device loop7): ext4_map_blocks:709: inode #3: block 3: comm syz.7.3521: lblock 3 mapped to illegal pblock 3 (length 1)
[  248.641178][T19785] EXT4-fs error (device loop7): ext4_acquire_dquot:6935: comm syz.7.3521: Failed to acquire dquot type 0
[  248.654963][T19785] EXT4-fs error (device loop7): ext4_map_blocks:675: inode #3: block 3: comm syz.7.3521: lblock 3 mapped to illegal pblock 3 (length 1)
[  248.672282][T19785] EXT4-fs error (device loop7): ext4_acquire_dquot:6935: comm syz.7.3521: Failed to acquire dquot type 0
[  248.683996][T19785] EXT4-fs error (device loop7): ext4_free_blocks:6587: comm syz.7.3521: Freeing blocks not in datazone - block = 0, count = 4096
[  248.720495][T19785] EXT4-fs error (device loop7): ext4_map_blocks:675: inode #3: block 3: comm syz.7.3521: lblock 3 mapped to illegal pblock 3 (length 1)
[  248.784639][T19785] EXT4-fs error (device loop7): ext4_acquire_dquot:6935: comm syz.7.3521: Failed to acquire dquot type 0
[  248.815413][T19785] EXT4-fs (loop7): 1 orphan inode deleted
[  248.828829][T19785] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  248.868337][T19797] syz!: rxe_newlink: already configured on team_slave_0
[  248.882391][ T3905] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  249.105074][T19817] loop0: detected capacity change from 0 to 256
[  249.423363][T19837] netdevsim netdevsim6 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  249.433608][T19837] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  249.494739][T19837] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  249.505374][T19837] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  249.571597][T19837] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  249.581572][T19837] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  249.663122][T19837] netdevsim netdevsim6 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  249.673918][T19837] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  249.745149][T19837] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  249.754058][T19837] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  249.767754][T19837] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  249.776382][T19837] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  249.791939][T19837] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  249.801218][T19837] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  249.814206][T19837] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  249.822845][T19837] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  249.861338][   T29] kauditd_printk_skb: 288 callbacks suppressed
[  249.861356][   T29] audit: type=1400 audit(1747661769.940:7029): avc:  denied  { tracepoint } for  pid=19865 comm="syz.7.3541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  249.927651][   T29] audit: type=1400 audit(1747661769.977:7030): avc:  denied  { create } for  pid=19867 comm="syz.6.3543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  249.934716][T19872] loop0: detected capacity change from 0 to 512
[  249.948028][   T29] audit: type=1400 audit(1747661769.977:7031): avc:  denied  { setopt } for  pid=19867 comm="syz.6.3543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  249.975089][   T29] audit: type=1326 audit(1747661769.977:7032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19867 comm="syz.6.3543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd499d2e969 code=0x7ffc0000
[  249.999050][   T29] audit: type=1326 audit(1747661769.977:7033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19867 comm="syz.6.3543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7fd499d2e969 code=0x7ffc0000
[  250.055092][   T29] audit: type=1400 audit(1747661770.015:7034): avc:  denied  { create } for  pid=19866 comm="syz.0.3542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  250.055302][T19872] EXT4-fs warning (device loop0): dx_probe:863: inode #2: comm syz.0.3542: dx entry: limit 1024 != root limit 124
[  250.075544][   T29] audit: type=1326 audit(1747661770.043:7035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19867 comm="syz.6.3543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd499d2e969 code=0x7ffc0000
[  250.075584][   T29] audit: type=1326 audit(1747661770.043:7036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19867 comm="syz.6.3543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd499d2e969 code=0x7ffc0000
[  250.075667][   T29] audit: type=1400 audit(1747661770.043:7037): avc:  denied  { read } for  pid=19865 comm="syz.7.3541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  250.075699][   T29] audit: type=1326 audit(1747661770.043:7038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19865 comm="syz.7.3541" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f17e7e5e969 code=0x0
[  250.182433][T19872] EXT4-fs warning (device loop0): dx_probe:936: inode #2: comm syz.0.3542: Corrupt directory, running e2fsck is recommended
[  250.201341][T19880] random: crng reseeded on system resumption
[  250.220416][T19872] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117
[  250.229756][T19872] EXT4-fs error (device loop0): ext4_iget_extra_inode:4693: inode #15: comm syz.0.3542: corrupted in-inode xattr: invalid ea_ino
[  250.246427][T19872] EXT4-fs (loop0): Remounting filesystem read-only
[  250.266541][T19872] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  250.783569][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  251.169803][T19899] loop0: detected capacity change from 0 to 164
[  251.190550][T19899] syz.0.3559: attempt to access beyond end of device
[  251.190550][T19899] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164
[  251.218844][T19899] syz.0.3559: attempt to access beyond end of device
[  251.218844][T19899] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164
[  251.958017][T19926] loop8: detected capacity change from 0 to 512
[  251.989319][T19926] EXT4-fs (loop8): orphan cleanup on readonly fs
[  251.998571][T19926] EXT4-fs error (device loop8): ext4_orphan_get:1417: comm syz.8.3556: bad orphan inode 13
[  252.013891][T19930] x_tables: ip6_tables: tcpmss match: only valid for protocol 6
[  252.023574][T19926] ext4_test_bit(bit=12, block=18) = 1
[  252.029311][T19926] is_bad_inode(inode)=0
[  252.033662][T19926] NEXT_ORPHAN(inode)=2130706432
[  252.039562][T19926] max_ino=32
[  252.043328][T19926] i_nlink=1
[  252.133559][T19926] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  252.238202][T19926] EXT4-fs (loop8): warning: mounting fs with errors, running e2fsck is recommended
[  252.310266][T19926] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.3556: bg 0: block 248: padding at end of block bitmap is not set
[  252.355278][T19926] EXT4-fs error (device loop8): ext4_acquire_dquot:6935: comm syz.8.3556: Failed to acquire dquot type 1
[  252.462602][T19926] EXT4-fs warning (device loop8): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  252.513436][T19941] binfmt_misc: register: failed to install interpreter file ./file2
[  252.562475][T16609] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  252.621977][T19949] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(4)
[  252.629662][T19949] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  252.637399][T19949] vhci_hcd vhci_hcd.0: Device attached
[  252.679650][T19949] loop8: detected capacity change from 0 to 512
[  252.711824][T19949] EXT4-fs: Ignoring removed mblk_io_submit option
[  252.735956][T19949] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  252.787261][T19949] EXT4-fs (loop8): 1 truncate cleaned up
[  252.829856][T19949] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  252.910748][ T3633] usb 17-1: new low-speed USB device number 2 using vhci_hcd
[  253.124784][T19976] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3571'.
[  253.426572][T19951] vhci_hcd: connection reset by peer
[  253.432297][ T8770] vhci_hcd: stop threads
[  253.437331][ T8770] vhci_hcd: release socket
[  253.441840][ T8770] vhci_hcd: disconnect device
[  253.484132][T19978] loop7: detected capacity change from 0 to 512
[  254.050977][T20041] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3585'.
[  254.102226][T16609] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  254.120085][T20041] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  254.129567][T20041] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  254.138418][T20041] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  254.147845][T20041] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  254.181750][T20041] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  254.197516][T20041] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  254.206857][T20041] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  254.224462][T20041] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  254.286782][   T36] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  254.299293][T20053] loop8: detected capacity change from 0 to 1024
[  254.306481][   T36] hid-generic 0000:0000:0000.0010: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  254.316900][T20053] EXT4-fs: Ignoring removed nomblk_io_submit option
[  254.341441][T20053] EXT4-fs: Mount option(s) incompatible with ext2
[  254.478427][T20072] netlink: 4 bytes leftover after parsing attributes in process `+}[@'.
[  254.551614][T20080] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3594'.
[  254.766245][T20092] random: crng reseeded on system resumption
[  254.849931][T20090] loop7: detected capacity change from 0 to 8192
[  254.857962][T20090] vfat: Unknown parameter '18446744073709551615'
[  254.867923][T20094] syz.8.3598: attempt to access beyond end of device
[  254.867923][T20094] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  254.955965][T20098] loop8: detected capacity change from 0 to 512
[  255.009646][T20102] loop7: detected capacity change from 0 to 512
[  255.024203][T20102] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  255.036909][T20098] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  255.053591][T20098] ext4 filesystem being mounted at /125/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  255.081696][T20102] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  255.108267][T20102] ext4 filesystem being mounted at /693/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  255.208854][   T29] kauditd_printk_skb: 150 callbacks suppressed
[  255.208870][   T29] audit: type=1400 audit(1747661774.936:7187): avc:  denied  { execmem } for  pid=20113 comm="syz.5.3601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  255.332060][T20117] loop0: detected capacity change from 0 to 512
[  255.340293][T20117] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  255.374924][T16609] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  255.385695][T20117] EXT4-fs (loop0): 1 truncate cleaned up
[  255.395586][T20117] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  255.501852][ T3905] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  255.512796][   T29] audit: type=1400 audit(1747661775.207:7188): avc:  denied  { remove_name } for  pid=20116 comm="syz.0.3602" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  255.536431][   T29] audit: type=1400 audit(1747661775.207:7189): avc:  denied  { unlink } for  pid=20116 comm="syz.0.3602" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  255.578379][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  255.640405][   T29] audit: type=1326 audit(1747661775.329:7190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20131 comm="syz.0.3605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e02c7e969 code=0x7ffc0000
[  255.664800][   T29] audit: type=1326 audit(1747661775.329:7191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20131 comm="syz.0.3605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e02c7e969 code=0x7ffc0000
[  255.693541][   T29] audit: type=1326 audit(1747661775.329:7192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20131 comm="syz.0.3605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f2e02c7e969 code=0x7ffc0000
[  255.753385][T20114] bridge0: entered promiscuous mode
[  255.757689][   T29] audit: type=1326 audit(1747661775.404:7193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20131 comm="syz.0.3605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e02c7e969 code=0x7ffc0000
[  255.764744][T20114] macsec1: entered allmulticast mode
[  255.783067][   T29] audit: type=1326 audit(1747661775.404:7194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20131 comm="syz.0.3605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e02c7e969 code=0x7ffc0000
[  255.787709][T20114] bridge0: entered allmulticast mode
[  255.812114][   T29] audit: type=1400 audit(1747661775.450:7195): avc:  denied  { ioctl } for  pid=20113 comm="syz.5.3601" path="socket:[41207]" dev="sockfs" ino=41207 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  255.830178][T20114] bridge0: port 1(macsec1) entered blocking state
[  255.842576][   T29] audit: type=1326 audit(1747661775.450:7196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20131 comm="syz.0.3605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7f2e02c7e969 code=0x7ffc0000
[  255.848551][T20114] bridge0: port 1(macsec1) entered disabled state
[  255.907309][T20114] bridge0: left allmulticast mode
[  255.912518][T20114] bridge0: left promiscuous mode
[  255.993523][T20123] loop8: detected capacity change from 0 to 512
[  256.197508][T20159] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3613'.
[  256.254663][T20163] loop8: detected capacity change from 0 to 2048
[  256.264558][T20163] EXT4-fs: inline encryption not supported
[  256.275284][T20163] EXT4-fs: Ignoring removed mblk_io_submit option
[  256.290449][T20163] EXT4-fs: dax option not supported
[  256.318590][T20177] loop5: detected capacity change from 0 to 512
[  256.327656][T20179] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3617'.
[  256.348070][T20177] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  256.378084][T20177] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  256.381397][T20185] loop8: detected capacity change from 0 to 1024
[  256.406901][T20177] ext4 filesystem being mounted at /661/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  256.434177][T20185] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  256.469367][T16609] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  256.592329][ T3668] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  256.615059][T20197] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3629'.
[  256.933850][T20215] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3621'.
[  258.188697][T20240] netlink: 'syz.0.3632': attribute type 21 has an invalid length.
[  258.293440][ T3633] usb 17-1: enqueue for inactive port 0
[  258.309252][ T3633] usb 17-1: enqueue for inactive port 0
[  258.393984][ T3633] vhci_hcd: vhci_device speed not set
[  258.600867][T20258] loop8: detected capacity change from 0 to 1024
[  258.622502][T20258] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  258.635572][T20258] ext4 filesystem being mounted at /133/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  258.684688][T20258] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000.
[  258.709898][T20268] loop7: detected capacity change from 0 to 2048
[  258.776576][T20268] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  258.808828][T16609] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  259.027271][ T3905] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  259.047820][T20290] loop8: detected capacity change from 0 to 256
[  259.056335][T20290] FAT-fs (loop8): bogus number of FAT sectors
[  259.062609][T20290] FAT-fs (loop8): Can't find a valid FAT filesystem
[  259.180908][T20303] loop8: detected capacity change from 0 to 256
[  259.250997][T20310] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3651'.
[  259.481345][T20317] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3650'.
[  259.765730][T20319] loop5: detected capacity change from 0 to 1024
[  259.818437][T20319] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  259.993496][ T3668] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  260.239209][T20339] pim6reg1: entered promiscuous mode
[  260.245981][T20339] pim6reg1: entered allmulticast mode
[  260.358351][T20345] loop0: detected capacity change from 0 to 2048
[  260.412542][T20348] netlink: 'syz.7.3662': attribute type 4 has an invalid length.
[  260.457643][T20345]  loop0: p1 < > p4
[  260.513740][T20352] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3658'.
[  260.546792][T20345] loop0: p4 size 8388608 extends beyond EOD, truncated
[  261.378397][   T29] kauditd_printk_skb: 424 callbacks suppressed
[  261.378413][   T29] audit: type=1400 audit(1747662548.721:7621): avc:  denied  { getopt } for  pid=20372 comm="syz.6.3666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  261.466755][   T29] audit: type=1400 audit(1747662548.740:7622): avc:  denied  { connect } for  pid=20372 comm="syz.6.3666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  261.486710][   T29] audit: type=1400 audit(1747662548.740:7623): avc:  denied  { name_connect } for  pid=20372 comm="syz.6.3666" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1
[  261.507350][   T29] audit: type=1400 audit(1747662548.768:7624): avc:  denied  { write } for  pid=20372 comm="syz.6.3666" lport=46790 faddr=::ffff:10.1.1.1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  261.530398][T20375] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3667'.
[  261.570371][T20378] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3668'.
[  261.751379][T20367] loop0: detected capacity change from 0 to 512
[  261.830663][   T29] audit: type=1400 audit(1747663317.139:7625): avc:  denied  { bind } for  pid=20391 comm="syz.5.3671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  261.873576][   T29] audit: type=1400 audit(1747663317.167:7626): avc:  denied  { setopt } for  pid=20391 comm="syz.5.3671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  261.895048][   T29] audit: type=1400 audit(1747663317.167:7627): avc:  denied  { create } for  pid=20391 comm="syz.5.3671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  261.915853][   T29] audit: type=1400 audit(1747663317.167:7628): avc:  denied  { connect } for  pid=20391 comm="syz.5.3671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  262.027955][ T3633] hid-generic 0021:0009:0000.0011: unknown main item tag 0x0
[  262.035550][ T3633] hid-generic 0021:0009:0000.0011: unknown main item tag 0x0
[  262.043025][ T3633] hid-generic 0021:0009:0000.0011: unknown main item tag 0x0
[  262.050645][ T3633] hid-generic 0021:0009:0000.0011: unknown main item tag 0x0
[  262.058238][ T3633] hid-generic 0021:0009:0000.0011: unknown main item tag 0x0
[  262.065711][ T3633] hid-generic 0021:0009:0000.0011: unknown main item tag 0x0
[  262.070167][   T29] audit: type=1400 audit(1747663317.251:7629): avc:  denied  { create } for  pid=20395 comm="syz.5.3672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  262.094409][   T29] audit: type=1400 audit(1747663317.307:7630): avc:  denied  { ioctl } for  pid=20395 comm="syz.5.3672" path="/dev/mISDNtimer" dev="devtmpfs" ino=249 ioctlcmd=0x4940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  262.169284][T20399] lo speed is unknown, defaulting to 1000
[  262.326864][ T3633] hid-generic 0021:0009:0000.0011: hidraw0: <UNKNOWN> HID v0.07 Device [syz0] on syz1
[  262.952924][T20476] $Hÿ: renamed from 
[  262.958005][T20476] $Hÿ: left allmulticast mode
[  262.976399][T20475] lo speed is unknown, defaulting to 1000
[  263.011794][T20481] loop5: detected capacity change from 0 to 164
[  263.019818][T20481] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  263.032077][T20465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  263.042452][T20465] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  263.110687][T20507] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3686'.
[  263.589082][T20536] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3697'.
[  263.697747][T20543] lo speed is unknown, defaulting to 1000
[  263.727082][T20552] loop8: detected capacity change from 0 to 512
[  263.744900][T20552] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  263.792911][T20552] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  263.825153][T20552] ext4 filesystem being mounted at /144/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  264.032266][T20585] lo speed is unknown, defaulting to 1000
[  264.128921][T16609] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  264.228210][T20614] loop5: detected capacity change from 0 to 512
[  264.264050][T20618] sg_write: data in/out 512/1 bytes for SCSI command 0xb7-- guessing data in;
[  264.264050][T20618]    program syz.8.3709 not setting count and/or reply_len properly
[  264.335229][T20614] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  264.389659][T20614] ext4 filesystem being mounted at /680/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  264.559369][T20634] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3714'.
[  264.706030][ T3668] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  264.753383][T20650] loop5: detected capacity change from 0 to 2048
[  264.830704][T20650]  loop5: p1 < > p4
[  264.837331][T20650] loop5: p4 size 8388608 extends beyond EOD, truncated
[  264.967331][T20664] lo speed is unknown, defaulting to 1000
[  265.480300][T20702] loop5: detected capacity change from 0 to 1024
[  265.493243][T20702] EXT4-fs: Ignoring removed nomblk_io_submit option
[  265.518086][T20702] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  265.608545][ T3668] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  265.726784][T20713] lo speed is unknown, defaulting to 1000
[  265.748117][T20715] loop8: detected capacity change from 0 to 512
[  265.788752][T20715] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  265.838392][T20715] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  265.870021][T20715] ext4 filesystem being mounted at /150/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  265.925694][T20715] EXT4-fs error (device loop8): ext4_xattr_block_get:593: inode #15: comm syz.8.3730: corrupted xattr block 19: overlapping e_value 
[  265.959718][T20715] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop8 ino=15
[  265.992815][T20747] EXT4-fs error (device loop8): ext4_xattr_block_get:593: inode #15: comm syz.8.3730: corrupted xattr block 19: overlapping e_value 
[  265.993505][T20715] EXT4-fs error (device loop8): ext4_xattr_block_get:593: inode #15: comm syz.8.3730: corrupted xattr block 19: overlapping e_value 
[  266.028886][T20747] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop8 ino=15
[  266.062336][T20715] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop8 ino=15
[  266.071565][T20747] EXT4-fs error (device loop8): ext4_xattr_block_find:1869: inode #15: comm syz.8.3730: corrupted xattr block 19: overlapping e_value 
[  266.168148][T16609] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  266.225382][T20757] loop8: detected capacity change from 0 to 2048
[  266.288996][T20757] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  266.481108][T20780] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3738'.
[  266.642787][T16609] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  266.716935][T20808] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  266.758467][T20811] lo speed is unknown, defaulting to 1000
[  266.783026][T20808] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  266.828990][T20793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  266.838690][T20808] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  266.851227][T20793] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  266.906786][T20808] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  266.956448][T20808] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  266.971733][T20808] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  266.984158][T20808] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  266.999595][T20808] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  267.456615][   T29] kauditd_printk_skb: 371 callbacks suppressed
[  267.456634][   T29] audit: type=1400 audit(1747664090.397:8002): avc:  denied  { create } for  pid=20852 comm="syz.5.3751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  267.514490][   T29] audit: type=1400 audit(1747664090.444:8003): avc:  denied  { setopt } for  pid=20853 comm="syz.8.3748" lport=48005 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  267.597193][T20864] SELinux:  Context system_u:object_r:fsadm_ex is not valid (left unmapped).
[  267.608940][   T29] audit: type=1400 audit(1747664090.528:8004): avc:  denied  { mac_admin } for  pid=20863 comm="syz.0.3753" capability=33  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  267.630421][   T29] audit: type=1400 audit(1747664090.547:8005): avc:  denied  { relabelto } for  pid=20863 comm="syz.0.3753" name="782" dev="tmpfs" ino=4145 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_ex"
[  267.647790][T20867] lo speed is unknown, defaulting to 1000
[  267.656336][   T29] audit: type=1400 audit(1747664090.547:8006): avc:  denied  { associate } for  pid=20863 comm="syz.0.3753" name="782" dev="tmpfs" ino=4145 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_ex"
[  267.690325][   T29] audit: type=1400 audit(1747664090.594:8007): avc:  denied  { write } for  pid=20863 comm="syz.0.3753" name="782" dev="tmpfs" ino=4145 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_ex"
[  267.715931][   T29] audit: type=1400 audit(1747664090.594:8008): avc:  denied  { add_name } for  pid=20863 comm="syz.0.3753" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_ex"
[  267.739962][   T29] audit: type=1400 audit(1747664090.594:8009): avc:  denied  { create } for  pid=20863 comm="syz.0.3753" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1
[  267.760878][   T29] audit: type=1400 audit(1747664090.594:8010): avc:  denied  { associate } for  pid=20863 comm="syz.0.3753" name="bus" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  267.782191][   T29] audit: type=1400 audit(1747664090.594:8011): avc:  denied  { read write } for  pid=20863 comm="syz.0.3753" name="bus" dev="tmpfs" ino=4150 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1
[  267.808006][T20864] lo speed is unknown, defaulting to 1000
[  267.839241][T20878] loop8: detected capacity change from 0 to 512
[  267.846177][T20878] EXT4-fs: Ignoring removed nomblk_io_submit option
[  267.853175][T20878] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  267.907649][T20878] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  268.000356][T20878] EXT4-fs (loop8): 1 truncate cleaned up
[  268.088596][T20878] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  268.211941][T16609] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  268.249602][T20922] loop5: detected capacity change from 0 to 2048
[  268.299899][T20922] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  268.377062][T20935] lo speed is unknown, defaulting to 1000
[  268.494551][T20944] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3759'.
[  268.503650][T20944] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3759'.
[  268.554049][T20944] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3759'.
[  268.716127][ T3668] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  268.939439][T20976] netlink: 'syz.6.3763': attribute type 21 has an invalid length.
[  268.969349][T20973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  268.979663][T20973] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  269.088021][T20985] lo speed is unknown, defaulting to 1000
[  269.836812][T21013] loop5: detected capacity change from 0 to 256
[  270.615497][T21026] sg_write: data in/out 512/1 bytes for SCSI command 0xb7-- guessing data in;
[  270.615497][T21026]    program syz.7.3771 not setting count and/or reply_len properly
[  270.674780][ T9117] ==================================================================
[  270.682933][ T9117] BUG: KCSAN: data-race in copy_page_from_iter_atomic / copy_page_from_iter_atomic
[  270.692363][ T9117] 
[  270.694699][ T9117] write to 0xffff888132a51282 of 3 bytes by task 21013 on cpu 0:
[  270.702431][ T9117]  copy_page_from_iter_atomic+0x77f/0xff0
[  270.708173][ T9117]  generic_perform_write+0x2c2/0x490
[  270.713490][ T9117]  __generic_file_write_iter+0x9e/0x120
[  270.719068][ T9117]  generic_file_write_iter+0x8d/0x2f0
[  270.724476][ T9117]  iter_file_splice_write+0x5f2/0x970
[  270.729961][ T9117]  direct_splice_actor+0x153/0x2a0
[  270.735096][ T9117]  splice_direct_to_actor+0x30f/0x680
[  270.740494][ T9117]  do_splice_direct+0xda/0x150
[  270.745311][ T9117]  do_sendfile+0x380/0x640
[  270.749752][ T9117]  __x64_sys_sendfile64+0x105/0x150
[  270.755012][ T9117]  x64_sys_call+0xb39/0x2fb0
[  270.759621][ T9117]  do_syscall_64+0xd0/0x1a0
[  270.764150][ T9117]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  270.770063][ T9117] 
[  270.772396][ T9117] read to 0xffff888132a51000 of 2048 bytes by task 9117 on cpu 1:
[  270.780221][ T9117]  copy_page_from_iter_atomic+0x77f/0xff0
[  270.785972][ T9117]  generic_perform_write+0x2c2/0x490
[  270.791299][ T9117]  shmem_file_write_iter+0xc5/0xf0
[  270.796443][ T9117]  lo_rw_aio+0x5fa/0x7c0
[  270.800800][ T9117]  loop_process_work+0x52d/0xa60
[  270.805791][ T9117]  loop_workfn+0x31/0x40
[  270.810062][ T9117]  process_scheduled_works+0x4cb/0x9d0
[  270.815557][ T9117]  worker_thread+0x582/0x770
[  270.820180][ T9117]  kthread+0x486/0x510
[  270.824264][ T9117]  ret_from_fork+0x4b/0x60
[  270.828698][ T9117]  ret_from_fork_asm+0x1a/0x30
[  270.833479][ T9117] 
[  270.835806][ T9117] Reported by Kernel Concurrency Sanitizer on:
[  270.841983][ T9117] CPU: 1 UID: 0 PID: 9117 Comm: kworker/u8:46 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(voluntary) 
[  270.852938][ T9117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  270.863102][ T9117] Workqueue: loop5 loop_workfn
[  270.867905][ T9117] ==================================================================