last executing test programs:

3.556465781s ago: executing program 2 (id=391):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x4, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xd, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x54, 0x2, [@TCA_ROUTE4_ACT={0x50, 0x6, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xa, 0x4005, 0x20, 0x7, 0x8}, 0x7e}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xfc, 0x3}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20008010}, 0x0)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$UHID_INPUT(r6, &(0x7f00000011c0)={0xfc, {"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", 0x1000}}, 0xffbc)

3.015700351s ago: executing program 2 (id=395):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4)
r3 = dup2(r2, r2)
write$tun(r3, &(0x7f0000000040)=ANY=[], 0x46)
recvmmsg(r3, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0}, 0x3ff}], 0x1, 0x2000, 0x0)

2.962346353s ago: executing program 2 (id=397):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = io_uring_setup(0x7543, &(0x7f0000000200)={0x0, 0x19, 0x400, 0x1, 0x17c})
r2 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0xd146, 0x20000, 0xc, 0x288, 0x0, r1}, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x18)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r0, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x30}})
r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r9 = socket$netlink(0x10, 0x3, 0x0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r10}, 0x10)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r11}, 0x10)
sendmsg$TIPC_CMD_GET_MAX_PORTS(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x1c}, 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r8, 0x0, 0x401}, 0x18)
writev(r6, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1)
io_uring_enter(r2, 0x3516, 0x0, 0x4, 0x0, 0x0)

2.797723056s ago: executing program 2 (id=400):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r2, 0x0)
accept(r2, 0x0, 0x0)
shutdown(r2, 0x0)
syz_emit_ethernet(0x42, &(0x7f0000000140)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x34, 0x64, 0x0, 0x7, 0x6, 0x0, @broadcast, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x10, 0x19ce, 0x0, 0xe7, {[@generic={0x0, 0x9, "09df168a88f985"}]}}}}}}}, 0x0)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x20c1c0, 0x92)
statx(r3, &(0x7f0000000580)='./file0\x00', 0x0, 0x7ff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@can_newroute={0x13c, 0x18, 0x400, 0x70bd25, 0x25dfdbfb, {0x1d, 0x1, 0x2}, [@CGW_MOD_UID={0x8, 0xe, r4}, @CGW_CS_CRC8={0x11e, 0x6, {0x3b, 0x4f, 0x75, 0x8, 0x8, "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", 0x2, "3bd9620d6fdb686c0b08dd45fae75847b042f10c"}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20000}, 0x40040d0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500))
clock_getres(0x7, &(0x7f0000000080))

2.714112148s ago: executing program 2 (id=402):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x4}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xfffffffffbffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020703400000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4)
bind$inet(r1, &(0x7f0000000040)={0x2, 0xe20, @empty}, 0x10)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10)

2.713183268s ago: executing program 2 (id=403):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) (async)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000080)=r1}, 0x20)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10)
r4 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xfe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x4}, 0x40db, 0x0, 0x4, 0x8, 0xa, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000000)='cpu<=0||!')
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid() (async)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) (async)
recvmmsg(r6, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008084}, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f0000000000)={[{@i_version}, {@init_itable}, {@noblock_validity}]}, 0x1, 0x71e, &(0x7f0000000f40)="$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")
creat(0x0, 0x0)

2.05576135s ago: executing program 1 (id=411):
syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000300)='./file0\x00', 0x414, &(0x7f00000000c0)=ANY=[], 0x1, 0x2c7, &(0x7f0000000980)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000001240)='./file0/file0\x00', 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x6}, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x39, 0xc, &(0x7f00000002c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet_smc(0x2b, 0x1, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={&(0x7f0000000380), &(0x7f00000003c0)=""/17, &(0x7f00000005c0)="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", &(0x7f00000006c0)="6fa6157b32a79966967143651c79a27627e71c94a53cd151523a52afa835775e83f65e118d5c5fed5dd7647ca04e16a75e9e98b776fb610e00053cb8428e5488d26ecf1854e3e6302b7a3f9f0e095f86872dbc827938beaad96d133aa94c4b32a631fd61f8da7b779d2b0737a6ecef675fdd3ef8bbf572950bfd1a5a9a77a7991b99ed554443c4b2b141c7e936d9ccb2856c5d3d918fb4d5e87a9d09fcc20ab5e70bf16fbb15cf2448ef1fe22968a223a98e40022be2b50fc20a62315f226ddabee6fdca2d5bed698742774f1ed4dc04be38", 0x0, r2, 0x4}, 0x38)
creat(&(0x7f00000000c0)='./file0\x00', 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
socket$kcm(0x10, 0x2, 0x0)
socketpair(0x1, 0x2, 0x0, &(0x7f0000000000))
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
socket$kcm(0xa, 0x5, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0)
socket$kcm(0x10, 0x400000002, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x24}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$kcm(0x10, 0x400000002, 0x0)
socket$kcm(0xa, 0x5, 0x0)

1.988420982s ago: executing program 0 (id=413):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x4}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xfffffffffbffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020703400000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4)
bind$inet(r1, &(0x7f0000000040)={0x2, 0xe20, @empty}, 0x10)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10)

1.897494563s ago: executing program 0 (id=415):
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x60008082, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'})
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000c40)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000002300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x6f)
syz_open_dev$tty20(0xc, 0x4, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00', r7}, 0x10)
close(0xffffffffffffffff)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', <r8=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}, 0x1, 0x0, 0x0, 0x810}, 0x140)
sendto$packet(r4, &(0x7f0000000180)="a6bea8a120e5f8320c30ce5086dda5e986f34c10d8c39c3002de8ec445ae083a4b7fc08a086fc691", 0x28, 0x0, &(0x7f0000000140)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @random="ad446050e878"}, 0x14)

1.819426065s ago: executing program 0 (id=418):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4)
r3 = dup2(r2, r2)
write$tun(r3, &(0x7f0000000040)=ANY=[], 0x46)
recvmmsg(r3, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0}, 0x3ff}], 0x1, 0x2000, 0x0)

1.800757485s ago: executing program 0 (id=419):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21481e, &(0x7f0000000080), 0x1, 0x503, &(0x7f0000000fc0)="$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")
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000000540)=0x2000204, 0x300)
futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0)
socket$packet(0x11, 0x3, 0x300)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x10000}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xb, 0x9}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xd, 0xb}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x1c, 0x52, 0x1, 0x70bd2a, 0x0, {0x2}, [@typed={0x8, 0x2, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f00000004c0)=0x10, 0x4)
syz_emit_ethernet(0x4e, &(0x7f0000000400)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x18, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x20}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@generic={0xfe, 0x2}, @generic={0xfe, 0x2}]}}}}}}}}, 0x0)

1.725526097s ago: executing program 4 (id=421):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x8080)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r1}, 0x18)
madvise(&(0x7f00009ec000/0x3000)=nil, 0x3000, 0x2)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00')
pread64(r4, &(0x7f0000001b80)=""/4084, 0xff4, 0x0)
ioctl$BINDER_GET_FROZEN_INFO(r4, 0xc00c620f, &(0x7f0000000600)={r2})
ioctl$USBDEVFS_FREE_STREAMS(r3, 0x8008551d, 0x0)
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x201001a, &(0x7f0000000080)=ANY=[], 0x1, 0x740, &(0x7f0000000880)="$eJzs3U9v2/b5APBHjt24LtBf8dtQFFmasmkPCZA6ktw6MHrSZMphK0sGKRcJdhiKJhmCOu3QbMDiHYpeuu1F7NDr3kTfxG57Db3vsnkg9cd/YstZklpF9vkY9fcr8iG/DymVj6lQVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAUWuv1+uNWnSz3vat5GTt9by/OWX+eH3fH2qmjBtRK/+LxcV4YzjpjZ/vz369/HU5Lg4fXYzFslmM3Vdef+3Dn83PjZefktCZePho9/NPd3bufjXrRGZkI+1lRT/bbG2kSVb0k7XV1fr1m50i6WTdtLhdDNLNpJ2nrUE/T660ryaNtbWVJF2+3d/ubay3uul44o33mvX6avLR8lbayot+7/pHy0X7ZtbtZr2NKqacXcbcSH7zZf5xNkgGaWszSe7d37m7clqSZVDjSYKapwU1681mo9FsNlY/WPvgRr0+36wvxqEJ9SPi0CJJvT4/ftHGa8PX9kljvRQnz//7aYlypuYOPliMKc9ccuBQCTM3N6r/0Y0serEdtyI59qcd65FHPzZPmD/yfcQfq871dOq4Zf1eHNX/cZV/Y3/2hfLX5fH/SpdOqv8n5HJ2Pw/jUezG5/Fp7MRO3I2vZp7R2f5sRBq9yKKIfmSxGa1qSjKaksRarMZq1OPXcTM6UUQSnciiG2kUcTuKGERavaLakUcarRhEP/JI4kq042ok0Yi1WIuVSCKN5bgd/diOXmzEerSqtdyL+9V+X5mS4ySo8SRBzSlBo2JevvAq84/9QVCvz4/mHVf/b0zq/1+r+vDw3bOoTszE+SOPz407z+/gDc9ob1z/Y2/v33ulWWcEAAAAPG+16t332qWXJo87WTf91YyzAgAAAJ6n6lKmi2WzUPbejFrn3KGAl2aUGAAAAPDc1OLS6F2ApXhr/H7AsKk79wcAAIAXQ3W+f6lslsreW1Gb3AmlPgmam2GCAAAAwDP78/499nfjyD12x7cyLU//y37tm61b79YetMpprQejjwmcO7rGQedC7dXRSqpmdX70qJ1erI3ufjm5CeYPo+beaff6r+X5wrMmsP9Oxtt3hu2dyZxqlKVO1k2X2/3uh41otV6dG6S3Br//4v4fIsrR/9LbfLUW9+7v3F3+7MudO1Uu35Rr+ebBgcsmnjSX38Wbw5g3z8djW7wbtYUyl/po3KXhuPWD2z+3/+yUXn6CMb8dx1xeGrZLh7d/sRyzsXzS1i/Vzo+WH235K5MN/W+2/Ntx8DtX3hk2x2TRnJJFtS+aB/f/kX3xRFnEO6dnsTLOYv/OmIezWHnGLABm5d6kCh2uuwuTe+xXdfdf/3di3ZmYcpQ7m+r+bVwZxly5UB1Y5y8cc0SvH1tX9s4dqbFPX9f/FleHMVfHwSfV2DxfiIjxuI1q3O/KBb47cdyiO94hD34b1+ce7b53v4q9+0WzubJaf79e/6AZC9VmjJoy038uHs305VB7AP6nXa6u/5/2HTvHR5zbL8219+Ptsv3FgbPqsiZNKt7/Ty4pWI7P4svYiTtxrfq0QXXFwbHjLh24DOFaXB4le/xZ69KBb3i5dspZ3TB2/LfLk8QOv14GAF4kl0+pw5P6P/layzLifHxYldDhufu1A+fdi/vn3eN/PzhSy6efHR+s5QDAjyPNf6gtDf5Uy8sHjbW1RmtwM03yfvvjJM/WN9Ik6w3SvH2z1dtIk628P+i3+92y80m2nhZJsb211c8HSaefJ1v9Yvye8uir34t0s9UbZO1iq5u2ijRp93uDVnuQrGdFO9na/mU3K77e29vrzEVSbKXtrJO1W4Os30uK/nbeTpeTpEjTUeDNNE+y9bQ3yDpZ2e0lW3l2PvLbySf97vZmmqynRTvPtgb9vMpmPFbW6/TzzWq1y7Pd1QDwk/Hw0e7nn+7s3P3q+M5inDir6vxj+uLDzqy3EQA4bFqVfuzqMwAAAAAAAAAAAAAAYCZO+fzf03dqR6bMRcSPNdYL19n7+kzGGn/AY3bPzrmfyA5/vPPdgSnJc1zzyxHxNIvXnmqpkzoLEXFKzIwPTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwjP8EAAD//72kP3M=")
recvmsg$unix(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000001c0)=@abs, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000240)=""/218, 0xda}, {&(0x7f0000000340)=""/65, 0x41}, {&(0x7f00000003c0)=""/108, 0x6c}], 0x3, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [<r5=>0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x128}, 0x60)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000017c0)={0x7cd6}, 0x8)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
r6 = gettid()
mmap$binder(&(0x7f0000ba4000/0x2000)=nil, 0x2000, 0x1, 0x11, r5, 0x8001)
process_vm_writev(r6, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x3}, 0x2000000, 0x0, 'id0\x00', 'timer0\x00'})

1.673386378s ago: executing program 1 (id=422):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21481e, &(0x7f0000000080), 0x1, 0x503, &(0x7f0000000fc0)="$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")
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000000540)=0x2000204, 0x300)
futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
socket(0x10, 0x3, 0x0)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x1}, 0x1c)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000005300)=[{0x28, 0x0, 0xfb, 0xfffff034}, {0x80000006, 0x66, 0x0, 0xc}]}, 0x10)
syz_emit_ethernet(0x4e, &(0x7f0000000400)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x18, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x20}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@generic={0xfe, 0x2}, @generic={0xfe, 0x2}]}}}}}}}}, 0x0)

1.457585632s ago: executing program 4 (id=424):
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r2}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = syz_io_uring_setup(0xbdc, &(0x7f0000000080)={0x0, 0xec21, 0x80, 0x1, 0x40000333}, &(0x7f0000000340)=<r5=>0x0, &(0x7f0000000040))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
io_uring_enter(r4, 0x847ba, 0x2000, 0xe, 0x0, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0xfe}}]}}}]}, 0x5c}}, 0x0)
socket(0x10, 0x3, 0x0)
r6 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x678f40a9)
ioctl$TIOCOUTQ(r6, 0x5411, &(0x7f0000000000))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
syz_emit_ethernet(0x5e, &(0x7f0000000340)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @ipv4={'\x00', '\xff\xff', @loopback}, @mcast1}}}}}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14, 0x10, 0xc00e}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x4000000, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x7, 0x1, "ac3381"}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xc4}}, 0x0)
r7 = io_uring_setup(0x2754, &(0x7f0000000080)={0x0, 0x77bf, 0x100, 0xfffffffe, 0x58})
io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)

1.322978234s ago: executing program 4 (id=426):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x18, 0x3, "c6a41d106c72fffffffffffffff5000007000000"}, @NFTA_MATCH_NAME={0xa, 0x1, 'owner\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x4048010)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200002300000007020000f8ffffffb703000000060000b7040000000000008500000057000000954623ab9f5ed675abda2c"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
unshare(0x62040200)

1.07055315s ago: executing program 3 (id=429):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4)
r3 = dup2(r2, r2)
write$tun(r3, &(0x7f0000000040)=ANY=[], 0x46)
recvmmsg(r3, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0}, 0x3ff}], 0x1, 0x2000, 0x0)

1.03194836s ago: executing program 3 (id=430):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='kfree\x00', r0}, 0x18)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, 0x0, 0x0)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000002808000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f3000000000080001"], 0xd4}}, 0x4000010)

946.889122ms ago: executing program 3 (id=431):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000004c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffd}]})
r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000180)=0x14, 0x80800)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x0, 0xffffffffffffffff}, 0x10)
lsm_list_modules(&(0x7f0000000000), &(0x7f0000000140), 0x0)

939.845822ms ago: executing program 0 (id=432):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000240), 0x1, 0x4d7, &(0x7f0000000f80)="$eJzs3c9vG1kdAPDvTJImzWY3WVjEDwFbloWCqrUTdzeqeioXEKoqISpOHNqQuFEUO45ipzShh/R/QKISJ/gTOCBxQOqpd25wQ0jlgFSgAjVIHIxmPEnT1A4RTewSfz7SdObNs/39vibznv2SzAtgaF2IiJ2IOBcRtyNiujifFFtc62zZ454/u7+4++z+YhLt9s2/JXl9di4OPCfzVvGaExHx/e9E/Ch5NW5za3t1oVarbhTlcqu+Xm5ubf9ppb6wXF2urlUq83Pzs1cuf1I5sba+X//V02+vXP/Bb3/zpSe/2/nmT7K0poq6g+04SZ2mj+3HyYxGxPXTCDYAI0V7zg06Ef4naUR8KiI+yK7/9qCzAQD6od2ejvb0wTIAcNal+RxYkpaKuYCpSNNSqTOH915MprVGs3XpTmNzbakzVzYTY+mdlVp1tpgrnImxJCvP5ccvypVD5csR8W5E/HT8fF4uLTZqS4N84wMAQ+ytQ+P/P8c74z8AcMZNZP88TgedBgDQRxODTgAA6DvjPwAMH+M/AAwf4z8ADB/jPwAMH+M/AAyV7924kW3t3eL+10t3tzZXG3c/Wqo2V0v1zcXSYmNjvbTcaCzn9+ypR5w/8vVqjcb63Mexea/cqjZb5ebW9q16Y3OtdSu/r/et6li/GgYA9PTu+4/+kETEztXz+RYH1nIwVsPZ5qYfMLxGBp0AMDCjg04AGBif8YEuS/S+pOevCD3s+RRdC7zhLn7e/D8MK/P/MLzM/8PwMv8Pw6vdTqz5DwBDxhw/cAo//wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAzbyrfkrRUrAU+FWlaKkW8HREzMZbcWalVZyPinYj4/fjYeFaeG3TSAMBrSv+SFOt/XZz+cOpw7bnkX+P5PiJ+/PObP7u30GptzGXn/75/vvWwOF85MpClBgFgQPbG6b1xfM/zZ/cX97Z+5vP0W53FRbO4u8XWqRmN0Xw/kb9xmPxHUpQ7svcrIycQf+dBRHyuW/uTfG5kplj59HD8LPbbfY2fvhQ/zes6++z/4tMnkAsMm0dZ/3Ot2/WXxoV83/36n8h7qNe31//tvtL/pfv930iP/u/CcWN8/Pi7PeseRHxhtFv8ZD9+0iP+h8eM/8cvfvmDXnXtX0RcjO7xD8Yqt+rr5ebW9kcr9YXl6nJ1rVKZn5ufvXL5k0o5n6Mu781Uv+qvVy+9c1T7J3vEn/gv7f/aMdr+mfGIX/779g+/ckT8b3y1+9f/vSPiZ2Pi148RP7Mw+euey3dn8Ze6t794Tu/2Xzpm/Cd/3l465kMBgD5obm2vLtRq1Y3m1t7H6Rdn/i8Psg/Ub0AaRxyMvfEZOjjdg+w74CRe57OnmOqAOybg1L246AedCQAAAAAAAAAAAAAA0Es//uBp0G0EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg7PpPAAAA//8KL9PQ")
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000f6000000006debff00850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10)
ioperm(0xc97, 0x2, 0x400)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000400007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x992}, 0x94)
modify_ldt$write(0x1, &(0x7f0000000080)={0x1000, 0x1000, 0xfffffffffffffffe}, 0x10)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c0002"], 0x64}}, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
ptrace$setregs(0xd, r3, 0x930, &(0x7f0000000800))
ptrace$poke(0x21, r3, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f00000001c0)='kfree\x00', r5}, 0x18)
lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x1001, 0x0)

939.339622ms ago: executing program 3 (id=433):
ftruncate(0xffffffffffffffff, 0xc17a)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)=0x40)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0)
mbind(&(0x7f000058a000/0x2000)=nil, 0x2000, 0x4000, 0x0, 0x6, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010300000ae6f72087a003"], 0x3c}}, 0x0)
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), r0)
sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="230200000000000000000300000008000200050000001400010000edff"], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0xa800)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x4000, &(0x7f0000000300)={[{@resuid}, {@dioread_nolock}, {@noblock_validity}, {@norecovery}, {@resuid}, {@quota}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./bus\x00', 0x555083, 0x51)
write(r3, &(0x7f00000009c0)=';', 0x1)
sendfile(r3, r2, 0x0, 0x3ffff)
clock_gettime(0x0, &(0x7f0000000800)={<r4=>0x0, <r5=>0x0})
recvmmsg(r3, &(0x7f00000007c0)=[{{&(0x7f0000000240)=@nfc, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000380)=""/113, 0x71}, {&(0x7f00000001c0)}, {&(0x7f0000000440)=""/171, 0xab}, {&(0x7f0000000500)=""/39, 0x27}, {&(0x7f0000000540)=""/54, 0x36}, {&(0x7f0000000580)=""/47, 0x2f}, {&(0x7f00000005c0)=""/218, 0xda}], 0x7, &(0x7f0000000740)=""/88, 0x58}, 0x6}], 0x1, 0x40002000, &(0x7f0000000840)={r4, r5+10000000})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12)
sendfile(r7, r6, 0x0, 0x3ffff)
mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000940)='thermal_temperature\x00', r9, 0x0, 0xfffffffffffffffc}, 0x18)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="5800000002060102000034e40000000000000003050001000600000005000400000000000900020073797a3100000000050005000200000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0xc5dff1b4c279acea}, 0x2)
syz_open_dev$usbfs(0x0, 0xb, 0x101301)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x80)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r12=>0xffffffffffffffff, {0xcf6}}, './file0\x00'})
ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r12, 0x8010671f, &(0x7f0000000140)={&(0x7f00000000c0)=""/78, 0x4e})

788.510355ms ago: executing program 1 (id=434):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x4}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xfffffffffbffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020703400000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4)
bind$inet(r1, &(0x7f0000000040)={0x2, 0xe20, @empty}, 0x10)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4)
bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10)

609.910118ms ago: executing program 1 (id=435):
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x60008082, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'})
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000c40)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000002300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x6f)
syz_open_dev$tty20(0xc, 0x4, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00', r7}, 0x10)
close(0xffffffffffffffff)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', <r8=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}, 0x1, 0x0, 0x0, 0x810}, 0x140)
sendto$packet(r4, &(0x7f0000000180)="a6bea8a120e5f8320c30ce5086dda5e986f34c10d8c39c3002de8ec445ae083a4b7fc08a086fc691", 0x28, 0x0, &(0x7f0000000140)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @random="ad446050e878"}, 0x14)

601.743738ms ago: executing program 1 (id=436):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket(0x2, 0x80805, 0x0)
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f0000000e40)='./file2\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/NvrWjPA7HcPQ1UwDAP9nrEbEKAPSYRPsPAD0m/x3g5spyOZ+6+4vE3rr+XETsX4s/v765tqQ/u2a3v3kddOhmcteVkSQiRnag/NGI+PjLVz9Np9il65AA7bxxOSLOjoyuP/8n68YsbNUTGyzbl72O3jPf+Q/2zldp/+fpdv2/wu3+T7Tp/wy2OXa3477H/4EdKGQDaf/v2Zaxbbda4s+M9GW5fzX7fAPJufPVSnpu+3dEjMXAYJqf2KCMsRt/3ui0rLX/9+v7r32Slp++3lmj8FP/4N3vmSo1Sg8Sc6vrlyMe6W8Xf3J7+ycd+r+nN1nGi8+8/VGnZWn8abz5tD7+yEYn7Y7VKxGPtd3+d0a0JRuOTxxv7g7j+U7Rxhc/fDjUqfzW7Z9Oafn5d4G9kG7/oY3jH0lax2vWt17Gd1eGv+607P7xt9//9yWvNNN5P+JSqdGYn4jYl7y0fv6xO+/N8/n6afxjj7Y//jfa/9PvhGc3GX//tZ8/2378uyuNf2pL23/riau3Zvo6lb+57T/ZTI1lczZz/ttsBR/kswMAAAAAAAAAAAAAAAAAAAAAAACAzSpExKFICsXb6UKhWFx7hvd/Y6hQrdUbR87VFuamovms7JEYKOS3uhxuuR/qRHY//Dx/7J78kxHxn4j4YPBAkt9HcarLsQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7mCH5/+nfhzsdu0AgF2zv9sVAAD2nPYfAHqP9h8Aeo/2HwB6j/YfAHqP9h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/X1luZzmpy4uLszULh6dqtRnirML5WK5Nn+hOF2rTVcrxXJt9n7/r1qrXZiMuYVL441KvTFeX1w6M1tbmGucOT9bmq6cqQzsSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1xaWZUrVamZfYRmL14ahG9xN92e70sNRnTxPJw1GNHU50+cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DfxVwAAAP//02Ii/w==")
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r3}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000002700)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRESHEX=r1, @ANYRES32=r3, @ANYRES64=r2], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x52, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r4}, 0x18)
r5 = syz_io_uring_setup(0x10b, &(0x7f0000000580)={0x0, 0xd736, 0x8, 0x3, 0xbffffffa}, &(0x7f00000003c0)=<r6=>0x0, &(0x7f0000000340))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f00000002c0)=0x9, 0x0, 0x4)
syz_io_uring_submit(r6, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0xa, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80, 0x400})
io_uring_enter(r5, 0x1c3a, 0xe176, 0x22, 0x0, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0)
pwrite64(r7, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x404c844, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r8 = io_uring_setup(0x1694, &(0x7f0000000080))
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0)
close(r9)
r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0)
ioctl$TUNSETOFFLOAD(r10, 0xc004743e, 0x110c23003f)
write$cgroup_devices(r9, 0x0, 0x5)
io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x12, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

594.181069ms ago: executing program 0 (id=437):
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0)
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r2, 0x0, 0xfffffffffffffffe}, 0x18)
r3 = socket$netlink(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
r5 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
r6 = openat2(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280)={0x1, 0x14, 0x1d}, 0x18)
sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x60, r4, 0x20, 0x70bd25, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r5}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20040000}, 0x2d8868b1a470dbe6)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x408040, 0x0)
ioctl$PPPIOCSFLAGS1(r7, 0x40047459, &(0x7f00000000c0)=0x4000)
r8 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r8, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc)
ppoll(&(0x7f00000004c0)=[{r2, 0x4022}, {0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x4400}], 0x3, &(0x7f0000000500), &(0x7f0000000540)={[0x2]}, 0x8)
setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f"], 0x57)
setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc)

442.861051ms ago: executing program 3 (id=438):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0)
io_uring_setup(0x5387, &(0x7f00000000c0)={0x0, 0xacbb, 0x200, 0x2, 0x158})
write$binfmt_script(r1, &(0x7f0000001400), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18)
r3 = socket$netlink(0x10, 0x3, 0x0)
writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c90020052feffff0300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"])

281.336785ms ago: executing program 4 (id=439):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a00000004000000040000000500000002000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000800000000000000000000000000000002000000000000000000"], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%ps    \x00'}, 0x20)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYRES8=r1], 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000005c0)={&(0x7f0000000700)="a70d21593a05c40474c97f11580e489acd6ba67cb54ce43efddfc0c66d619b7c28576ab0e352e901c9d5bfc241a851bd326929ed2bd1cd4b84e369a4c42e3e216b89b391bfc7c60a7aaeb23c3e5c2979a23cebb0ee8633239fb167eca7bfc419c6cdd744fc82d8b2f411e7d9c1715b6625fef0907296ae36afd05b674718c5b6e6e8b558f288b3ce65f3d0cee716291ed50e8618bdbd920825bee45fe4412b97d62eb662727a01f74df40d159f9bd7df9d2b0d1cec37b65c90f7ec33e897dfaabf6a55ffe0d1e11306f794ebac05e6df1cfa2f317cf3690581cc11893846e12f60ecdac708d6410f69e72c09", &(0x7f0000000580)=""/20, &(0x7f0000000800)="5f143a044927b8c6ec472215817e06d5f7043327e31abe9316ac2e5a8fbd8aee6bd68af2eba352ad08ab38e93cd864cc50e945b403bacffe513ac06139fa7c35e405f3794d5eef535379d56418dc8716c36dc3c701af9f0049f1dfef2481a0226c2d14d9e7b0ebdabe2ada4d0720df604085eebb9354594385cdec0f0b16bead717db98f5ff93429ed2812e13270fc8e042e1e62eb793b58", &(0x7f00000008c0)="d726fdaf0d84fef94f7075341d2907f57b28e13d944e3b444fbf66d9685bbe4ffe818b831c549651cacdd14ba404e1afde5d9994973d5831b1bb3255e33719525f1b6a5251b85245b7c6050a9249b5c04b4ff6b84adefaeaf289d32f6aeed38d2dd8a438b3efec750eac112688265371b6916fcffe96aa94b75acc3a53e0c736f45cf678da3c4bdc6db690a1aab1e9c6b3117c38392c582285b625f7c62528e27ec6b9a88d04d170a93957bc2fc9bd34bda4612e817c08a23a", 0x10, r2, 0x4}, 0x38)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x100800004, 0x30118, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffcb7, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x110000, 0x0, 0x0, 0x8, 0x20004, 0xeffc, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r3, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000980)=ANY=[@ANYBLOB="30000000051400012dbd7000fedbde250800010002000000085d54d0a29129cff4eb2ed0639e65da0003000000000008000100010000000800030003000000"], 0x30}, 0x1, 0x0, 0x0, 0x6000c8c0}, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x3, 0x17, 0xd, 0x8, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x1f}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x3a8}}, 0x0)
r7 = socket(0x10, 0x2, 0x0)
r8 = open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x102)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r8, 0x0, 0x0)
pipe2$9p(&(0x7f0000000500)={<r9=>0xffffffffffffffff}, 0x4000)
sendfile(r4, r9, &(0x7f0000000540)=0x4, 0x2)
io_uring_setup(0x2c11, &(0x7f0000000100)={0x0, 0x81e0, 0x20, 0xb, 0x3d3, 0x0, r8})
r10 = io_uring_setup(0x6cf8, &(0x7f0000000640)={0x0, 0x0, 0x2, 0x0, 0x10d})
io_uring_register$IORING_REGISTER_FILES(r10, 0x2, &(0x7f00000003c0)=[0xffffffffffffffff], 0x1)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r10, 0x18, &(0x7f0000000000), 0x1)
getsockopt$WPAN_SECURITY(r8, 0x0, 0x1, &(0x7f0000000480), &(0x7f00000004c0)=0x4)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x2900}})
r11 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/time\x00')
ioctl$BTRFS_IOC_ADD_DEV(r11, 0x8004b706, 0x0)
r12 = socket$inet6(0xa, 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r12, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0})

84.438158ms ago: executing program 4 (id=440):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4)
r3 = dup2(r2, r2)
write$tun(r3, &(0x7f0000000040)=ANY=[], 0x46)
recvmmsg(r3, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0}, 0x3ff}], 0x1, 0x2000, 0x0)

2.75564ms ago: executing program 4 (id=441):
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15)
pipe2$9p(0x0, 0x0)
r0 = dup(0xffffffffffffffff)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x20000023896)
close(r1)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000402000028000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x110, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0xdc, 0x2, [@TCA_BPF_NAME={0x6, 0x7, '.\x00'}, @TCA_BPF_FD={0x0, 0x6, r0}, @TCA_BPF_ACT={0xbc, 0x1, [@m_skbmod={0xb8, 0xa, 0x0, 0x0, {{0xb}, {0x8c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x80}, @TCA_SKBMOD_DMAC={0x0, 0x3, @local}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x0, 0x4, 0x4, 0x5}, 0x4}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x1, 0x10000, 0x7, 0x8, 0x16}, 0x10}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_ETYPE={0xffffffffffffffd6, 0x5, 0x1}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x5, 0x1}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}]}}]}, 0x110}, 0x1, 0x0, 0x0, 0x81}, 0x20000080)
r5 = socket(0x10, 0x803, 0x0)
sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), r0)
recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x18)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0])
stat(&(0x7f0000000240)='./file0\x00', 0x0)

2.44267ms ago: executing program 3 (id=442):
mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15)
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15)
r2 = dup(r1)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
creat(0x0, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
sendfile(r3, r4, 0x0, 0x20000023896)
close(r3)
r5 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=<r6=>0x0)
timer_settime(r6, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x110, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0xdc, 0x2, [@TCA_BPF_NAME={0x6, 0x7, '.\x00'}, @TCA_BPF_FD={0x0, 0x6, r2}, @TCA_BPF_ACT={0xbc, 0x1, [@m_skbmod={0xb8, 0xa, 0x0, 0x0, {{0xb}, {0x8c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x80}, @TCA_SKBMOD_DMAC={0x0, 0x3, @local}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x0, 0x4, 0x4, 0x5}, 0x4}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x1, 0x10000, 0x7, 0x8, 0x16}, 0x10}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_ETYPE={0xffffffffffffffd6, 0x5, 0x1}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x5, 0x1}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}]}}]}, 0x110}, 0x1, 0x0, 0x0, 0x81}, 0x20000080)
r7 = socket(0x10, 0x803, 0x0)
sendto(r7, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r7, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])

0s ago: executing program 1 (id=443):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x114, 0x4, 0xff, 0x0, 0x0, 0x6}}, 0x1c}}, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x10, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) (async, rerun: 32)
r4 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52e, &(0x7f0000000640)="$eJzs3cFvI1cZAPBvnDib7GabFDhApZZCi7IVrJ00tI04lCIhOFVClPsSEieK4sRR7LSbqILsX4CEECBxggsXJP4AJLQSF44IqRKcQSoCIdiCBAfoINvjJDjjxFuceNf5/aTZeW/GM9/3vHnjGc/TOIAr69mIeC0i3k/T9IWImMmWF7IpDttT83XvPXh7pTklkaZv/DWJJFvW2VeSzW9km01GxFe/HPGN5HTc+v7B5nK1WtnN6uXG1k65vn9we2Nreb2yXtleXFx4eemVpZeW5gfSzpsR8eoX//i9b//kS6/+4jNv/eHOn299s5nWdLb+ZDse0vhZK9tNL16b7Npg9wMGexQ121PsVKb62+beBeYDAEBvzXP8D0XEJyPihZiJsbNPZwEAAIDHUPr56fh3EpHmm+ixHAAAAHiMFFpjYJNCKRsLMB2FQqnUHsP7kbheqNbqjU+v1fa2V9tjZWejWFjbqFbms7HCs1FMmvWFVvm4/mJXfTEinoyI785MteqllVp1ddhffgAAAMAVcaPr+v8fM+3rfwAAAGDEzA47AQAAAODCuf4HAACA0ef6HwAAAEbaV15/vTmlnd+/Xn1zf2+z9ubt1Up9s7S1t1Jaqe3ulNZrtfXWM/u2zttftVbb+Wxs790tNyr1Rrm+f3Bnq7a33bizEZOX0iAAAADglCc/fv93SUQcfm6qNTVNDDsp4FKMH5WSbJ7T+3//RHv+7iUlBVyKsT5e8+61/OXOE+DxNt69oEdfB0ZPcdgJAEOXnLO+5+CdX2fzTww2HwAAYPDmPpZ///+864GIw8IlpAdcIJ0Yrq6u+//pzLASAS5d6/5/vwN5nCzASCn2NQIQGGX/9/3/c6XpQyUEAAAM3HRrSgql7Ou96SgUSqWIm62fBSgmaxvVynxEPBERv50pXmvWF1pbJn2MEQAAAAAAAAAAAAAAAAAAAAAAAAAAovVU7iRSAAAAYKRFFP6U/LL9LP+5meenu78fmEj+1fpJ4ImIeOuHb3z/7nKjsbvQXP63o+WNH2TLXxzGNxgAAABAt851emv+z2FnAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCoee/B2yudqY+XTw0q7l++EBGzefHHY7I1n4xiRFz/exLjJ7ZLImJsAPEP70XER/PiJ820jkLmxR/Em3BO/JjN3oW8+DcGEB+usvvN489ref2vEM+25vn9bzzif+ofVO/jXxwd/8Z69P+bfcZ46p2flXvGvxfx1Hj+8acTP+kR/7k+43/9awcHvdalP4qY63z+tI54JyMcl8qNrZ1yff/g9sbW8nplvbK9uLjw8tIrSy8tzZfXNqqV7N/cGN95+ufvn9X+67mff0mWTe/2P5+zv7zPpP+8c/fBhzuVw9Pxbz2XE/9XP85ecTp+IYvzqazcXD/XKR+2yyc989PfPHNW+1eP2198mP//W7122u1UR3m63z8dAOAC1PcPNper1cruyBaaV+mPQBoKj2DhWwPdYZqmabNP5ay6HxH97CeJAbe0kJ/PcaHnEWDYRyYAAGDQjk/6h50JAAAAAAAAAAAAAAAAAAAAXF2X8ZS17pjHj0BOBvEIbQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAgfhvAAAA//89e9P5") (rerun: 32)
r5 = syz_open_dev$hidraw(&(0x7f0000000300), 0xfffffffffffffffe, 0x200800)
ioctl$HIDIOCGRDESCSIZE(r5, 0x80044801, &(0x7f0000000340)) (async)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x24)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
lseek(r4, 0xfffffffffffff800, 0x2)
r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff)
r10 = gettid()
io_uring_register$IORING_REGISTER_CLONE_BUFFERS(0xffffffffffffffff, 0x1e, &(0x7f0000000440), 0x1) (async)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="014028bd7a00ffdbdf251400000004e4ffff7ae3a44719957cd82d03d7665fd457a5603e273d7f42459f916fa26b15365b983cdf7800c0738bbcdd7c5750da6107c0555743577b6388e67328d4a53657d7c0f0d9621cd5edba95771b5e4191e47b85288da3749729096aaaf653a994e0b45a628d0882ef446893", @ANYRES32=r10, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000)
sendmsg$NL802154_CMD_NEW_INTERFACE(r7, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f00000005c0)={0x64, r9, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0002}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}, @NL802154_ATTR_IFTYPE={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x4040004}, 0x4000096) (async, rerun: 64)
chmod(&(0x7f0000000a00)='./file0\x00', 0x0) (rerun: 64)
r11 = socket$nl_generic(0x10, 0x3, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='afs_make_fs_call\x00', r6, 0x0, 0x4}, 0x18)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r11)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r12, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) (async)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @private}})
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x70bd26, 0x0, {0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2900}}, 0x1c}}, 0x8c0) (async)
r13 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)
writev(r13, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d48", 0x3}], 0x2) (async, rerun: 64)
mkdir(&(0x7f0000000000)='./file0\x00', 0xe6) (async, rerun: 64)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) (async, rerun: 64)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0) (rerun: 64)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.62' (ED25519) to the list of known hosts.
[   23.175046][   T29] audit: type=1400 audit(1757753422.314:62): avc:  denied  { mounton } for  pid=3292 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   23.175922][ T3292] cgroup: Unknown subsys name 'net'
[   23.197854][   T29] audit: type=1400 audit(1757753422.314:63): avc:  denied  { mount } for  pid=3292 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   23.225289][   T29] audit: type=1400 audit(1757753422.344:64): avc:  denied  { unmount } for  pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   23.381794][ T3292] cgroup: Unknown subsys name 'cpuset'
[   23.387898][ T3292] cgroup: Unknown subsys name 'rlimit'
[   23.516940][   T29] audit: type=1400 audit(1757753422.654:65): avc:  denied  { setattr } for  pid=3292 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   23.540214][   T29] audit: type=1400 audit(1757753422.654:66): avc:  denied  { create } for  pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   23.561551][   T29] audit: type=1400 audit(1757753422.654:67): avc:  denied  { write } for  pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   23.582239][   T29] audit: type=1400 audit(1757753422.654:68): avc:  denied  { read } for  pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   23.589146][ T3295] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   23.602790][   T29] audit: type=1400 audit(1757753422.664:69): avc:  denied  { mounton } for  pid=3292 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   23.636404][   T29] audit: type=1400 audit(1757753422.664:70): avc:  denied  { mount } for  pid=3292 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[   23.659716][   T29] audit: type=1400 audit(1757753422.754:71): avc:  denied  { relabelto } for  pid=3295 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   23.706432][ T3292] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   24.935400][ T3309] chnl_net:caif_netlink_parms(): no params data found
[   24.972546][ T3313] chnl_net:caif_netlink_parms(): no params data found
[   25.002761][ T3304] chnl_net:caif_netlink_parms(): no params data found
[   25.011705][ T3302] chnl_net:caif_netlink_parms(): no params data found
[   25.062924][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.070073][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state
[   25.077499][ T3309] bridge_slave_0: entered allmulticast mode
[   25.084080][ T3309] bridge_slave_0: entered promiscuous mode
[   25.103759][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.110840][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state
[   25.118162][ T3309] bridge_slave_1: entered allmulticast mode
[   25.124619][ T3309] bridge_slave_1: entered promiscuous mode
[   25.139151][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.146248][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state
[   25.153476][ T3313] bridge_slave_0: entered allmulticast mode
[   25.160108][ T3313] bridge_slave_0: entered promiscuous mode
[   25.170616][ T3305] chnl_net:caif_netlink_parms(): no params data found
[   25.183377][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.190435][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state
[   25.197641][ T3313] bridge_slave_1: entered allmulticast mode
[   25.204089][ T3313] bridge_slave_1: entered promiscuous mode
[   25.237489][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   25.261284][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   25.271797][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   25.283234][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.290453][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state
[   25.298763][ T3304] bridge_slave_0: entered allmulticast mode
[   25.305141][ T3304] bridge_slave_0: entered promiscuous mode
[   25.311803][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.318910][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state
[   25.326071][ T3304] bridge_slave_1: entered allmulticast mode
[   25.332565][ T3304] bridge_slave_1: entered promiscuous mode
[   25.348319][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   25.367953][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.375035][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state
[   25.383358][ T3302] bridge_slave_0: entered allmulticast mode
[   25.389710][ T3302] bridge_slave_0: entered promiscuous mode
[   25.401675][ T3309] team0: Port device team_slave_0 added
[   25.416249][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.423456][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state
[   25.430770][ T3302] bridge_slave_1: entered allmulticast mode
[   25.437204][ T3302] bridge_slave_1: entered promiscuous mode
[   25.448531][ T3309] team0: Port device team_slave_1 added
[   25.464216][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   25.478707][ T3313] team0: Port device team_slave_0 added
[   25.485560][ T3313] team0: Port device team_slave_1 added
[   25.496571][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.503657][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state
[   25.510880][ T3305] bridge_slave_0: entered allmulticast mode
[   25.517211][ T3305] bridge_slave_0: entered promiscuous mode
[   25.524408][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   25.533648][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.540689][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state
[   25.547832][ T3305] bridge_slave_1: entered allmulticast mode
[   25.554283][ T3305] bridge_slave_1: entered promiscuous mode
[   25.569783][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0
[   25.576767][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   25.602819][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   25.627588][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   25.637630][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   25.651483][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0
[   25.658591][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   25.684547][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   25.695446][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1
[   25.702490][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   25.728431][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   25.746327][ T3304] team0: Port device team_slave_0 added
[   25.752966][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   25.762836][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   25.776938][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1
[   25.783979][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   25.809924][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   25.828967][ T3304] team0: Port device team_slave_1 added
[   25.858905][ T3302] team0: Port device team_slave_0 added
[   25.869243][ T3305] team0: Port device team_slave_0 added
[   25.876006][ T3305] team0: Port device team_slave_1 added
[   25.892098][ T3302] team0: Port device team_slave_1 added
[   25.900336][ T3309] hsr_slave_0: entered promiscuous mode
[   25.906415][ T3309] hsr_slave_1: entered promiscuous mode
[   25.917517][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0
[   25.924481][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   25.950431][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   25.969802][ T3313] hsr_slave_0: entered promiscuous mode
[   25.975785][ T3313] hsr_slave_1: entered promiscuous mode
[   25.981628][ T3313] debugfs: 'hsr0' already exists in 'hsr'
[   25.987347][ T3313] Cannot create hsr debugfs directory
[   26.006972][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1
[   26.014048][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   26.039967][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   26.064353][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0
[   26.071334][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   26.097356][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   26.108680][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0
[   26.115646][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   26.141537][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   26.162724][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1
[   26.169750][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   26.195687][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   26.206579][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1
[   26.213574][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   26.239500][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   26.265622][ T3304] hsr_slave_0: entered promiscuous mode
[   26.271706][ T3304] hsr_slave_1: entered promiscuous mode
[   26.277580][ T3304] debugfs: 'hsr0' already exists in 'hsr'
[   26.283381][ T3304] Cannot create hsr debugfs directory
[   26.328507][ T3305] hsr_slave_0: entered promiscuous mode
[   26.334722][ T3305] hsr_slave_1: entered promiscuous mode
[   26.340447][ T3305] debugfs: 'hsr0' already exists in 'hsr'
[   26.346195][ T3305] Cannot create hsr debugfs directory
[   26.360489][ T3302] hsr_slave_0: entered promiscuous mode
[   26.366498][ T3302] hsr_slave_1: entered promiscuous mode
[   26.372376][ T3302] debugfs: 'hsr0' already exists in 'hsr'
[   26.378075][ T3302] Cannot create hsr debugfs directory
[   26.527356][ T3313] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   26.536255][ T3313] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   26.546974][ T3313] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   26.557874][ T3313] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   26.575514][ T3309] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   26.588958][ T3309] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   26.598126][ T3309] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   26.607079][ T3309] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   26.633648][ T3304] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   26.647455][ T3304] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   26.656345][ T3304] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   26.665647][ T3304] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   26.693462][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0
[   26.716781][ T3313] 8021q: adding VLAN 0 to HW filter on device team0
[   26.735353][ T2192] bridge0: port 1(bridge_slave_0) entered blocking state
[   26.742490][ T2192] bridge0: port 1(bridge_slave_0) entered forwarding state
[   26.752817][ T2192] bridge0: port 2(bridge_slave_1) entered blocking state
[   26.759906][ T2192] bridge0: port 2(bridge_slave_1) entered forwarding state
[   26.771025][ T3302] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   26.780681][ T3302] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   26.797963][ T3302] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   26.807472][ T3302] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   26.837943][ T3305] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   26.846595][ T3305] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   26.856885][ T3305] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   26.870110][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0
[   26.877623][ T3305] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   26.918019][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0
[   26.927430][ T3309] 8021q: adding VLAN 0 to HW filter on device team0
[   26.941043][ T2192] bridge0: port 1(bridge_slave_0) entered blocking state
[   26.948128][ T2192] bridge0: port 1(bridge_slave_0) entered forwarding state
[   26.966720][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   26.973973][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   26.987511][ T3304] 8021q: adding VLAN 0 to HW filter on device team0
[   27.011640][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0
[   27.019663][ T2192] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.027253][ T2192] bridge0: port 1(bridge_slave_0) entered forwarding state
[   27.046869][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.053942][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   27.082549][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0
[   27.107332][ T3302] 8021q: adding VLAN 0 to HW filter on device team0
[   27.118058][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0
[   27.139625][ T2192] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.146724][ T2192] bridge0: port 1(bridge_slave_0) entered forwarding state
[   27.166229][ T2192] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.173503][ T2192] bridge0: port 2(bridge_slave_1) entered forwarding state
[   27.193908][ T3305] 8021q: adding VLAN 0 to HW filter on device team0
[   27.219644][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0
[   27.230265][ T2192] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.237437][ T2192] bridge0: port 1(bridge_slave_0) entered forwarding state
[   27.254794][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0
[   27.269848][  T556] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.276944][  T556] bridge0: port 2(bridge_slave_1) entered forwarding state
[   27.287939][ T3313] veth0_vlan: entered promiscuous mode
[   27.303552][ T3313] veth1_vlan: entered promiscuous mode
[   27.328780][ T3313] veth0_macvtap: entered promiscuous mode
[   27.360299][ T3313] veth1_macvtap: entered promiscuous mode
[   27.387930][ T3309] veth0_vlan: entered promiscuous mode
[   27.409678][ T3309] veth1_vlan: entered promiscuous mode
[   27.417856][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0
[   27.437614][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1
[   27.451088][ T3309] veth0_macvtap: entered promiscuous mode
[   27.466151][   T41] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   27.476253][ T3309] veth1_macvtap: entered promiscuous mode
[   27.490705][   T41] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   27.506880][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0
[   27.517259][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0
[   27.529596][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0
[   27.538640][   T41] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   27.538699][ T3313] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   27.559676][ T2157] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   27.577948][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1
[   27.601811][ T2157] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   27.610596][ T2157] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   27.645584][ T3304] veth0_vlan: entered promiscuous mode
[   27.661060][ T2157] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   27.671932][ T2157] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   27.689907][ T3304] veth1_vlan: entered promiscuous mode
[   27.728703][ T3302] veth0_vlan: entered promiscuous mode
[   27.735462][ T3304] veth0_macvtap: entered promiscuous mode
[   27.745442][ T3305] veth0_vlan: entered promiscuous mode
[   27.757328][ T3302] veth1_vlan: entered promiscuous mode
[   27.767318][ T3305] veth1_vlan: entered promiscuous mode
[   27.775930][ T3304] veth1_macvtap: entered promiscuous mode
[   27.795774][ T3302] veth0_macvtap: entered promiscuous mode
[   27.806014][ T3302] veth1_macvtap: entered promiscuous mode
[   27.820646][ T3305] veth0_macvtap: entered promiscuous mode
[   27.828048][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0
[   27.837143][ T3305] veth1_macvtap: entered promiscuous mode
[   27.846944][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1
[   27.855994][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0
[   27.868561][  T556] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   27.877323][  T556] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   27.890406][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1
[   27.898207][  T556] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   27.907301][  T556] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   27.917332][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0
[   27.928742][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1
[   27.943760][  T556] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   27.952940][  T556] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   27.963065][  T556] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   27.984282][  T556] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   27.997306][  T556] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   28.015015][  T556] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   28.033603][  T556] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   28.043404][  T556] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   28.109798][ T3391] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   28.128323][ T3487] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5'.
[   28.137550][ T3487] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5'.
[   28.154172][ T3391] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   28.207895][ T3487] loop4: detected capacity change from 0 to 512
[   28.224578][   T29] kauditd_printk_skb: 47 callbacks suppressed
[   28.224592][   T29] audit: type=1400 audit(1757753427.364:119): avc:  denied  { create } for  pid=3488 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   28.264420][   T29] audit: type=1400 audit(1757753427.394:120): avc:  denied  { write } for  pid=3489 comm="syz.1.2" name="hidraw0" dev="devtmpfs" ino=538 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   28.267704][ T3487] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   28.300182][ T3487] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   28.313777][ T3503] random: crng reseeded on system resumption
[   28.318689][   T29] audit: type=1400 audit(1757753427.454:121): avc:  denied  { write } for  pid=3488 comm="syz.0.1" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[   28.342535][   T29] audit: type=1400 audit(1757753427.454:122): avc:  denied  { open } for  pid=3488 comm="syz.0.1" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[   28.376659][ T3487] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.5: bg 0: block 4: invalid block bitmap
[   28.402793][ T3487] EXT4-fs (loop4): Remounting filesystem read-only
[   28.410143][ T3487] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   28.424889][   T29] audit: type=1400 audit(1757753427.504:123): avc:  denied  { write } for  pid=3488 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   28.444985][   T29] audit: type=1400 audit(1757753427.504:124): avc:  denied  { read } for  pid=3488 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   28.455091][ T3487] EXT4-fs (loop4): 1 truncate cleaned up
[   28.464981][   T29] audit: type=1400 audit(1757753427.504:125): avc:  denied  { ioctl } for  pid=3488 comm="syz.0.1" path="socket:[5241]" dev="sockfs" ino=5241 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   28.474747][ T3487] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   28.495733][   T29] audit: type=1400 audit(1757753427.504:126): avc:  denied  { write } for  pid=3488 comm="syz.0.1" name="igmp" dev="proc" ino=4026532746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[   28.495759][   T29] audit: type=1400 audit(1757753427.554:127): avc:  denied  { unlink } for  pid=3309 comm="syz-executor" name="file0" dev="tmpfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   28.555392][   T29] audit: type=1400 audit(1757753427.694:128): avc:  denied  { mount } for  pid=3486 comm="syz.4.5" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   28.615091][ T3512] random: crng reseeded on system resumption
[   28.736189][ T3487] syz.4.5 (3487) used greatest stack depth: 10632 bytes left
[   28.749801][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   28.769517][   T23] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   28.910681][ T3531] loop1: detected capacity change from 0 to 512
[   28.921053][ T3531] =======================================================
[   28.921053][ T3531] WARNING: The mand mount option has been deprecated and
[   28.921053][ T3531]          and is ignored by this kernel. Remove the mand
[   28.921053][ T3531]          option from the mount to silence this warning.
[   28.921053][ T3531] =======================================================
[   29.141188][   T23] hid-generic 0000:0000:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   29.178496][ T3531] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   29.206439][ T3531] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   29.247823][    C1] hrtimer: interrupt took 67747 ns
[   29.395170][ T3548] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14'.
[   29.405430][ T3548] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14'.
[   29.427163][ T3548] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14'.
[   29.443197][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   29.589711][ T3556] syz.0.18 uses obsolete (PF_INET,SOCK_PACKET)
[   29.613309][ T3560] netlink: 'syz.2.19': attribute type 1 has an invalid length.
[   29.693373][ T3560] ip6erspan0: entered promiscuous mode
[   29.743154][ T3564] infiniband syz!: set active
[   29.747935][ T3564] infiniband syz!: added team_slave_0
[   29.759436][ T3560] capability: warning: `syz.2.19' uses 32-bit capabilities (legacy support in use)
[   29.772126][ T3564] RDS/IB: syz!: added
[   29.781242][ T3564] smc: adding ib device syz! with port count 1
[   29.817640][ T3573] loop2: detected capacity change from 0 to 1024
[   29.826190][ T3573] EXT4-fs: Ignoring removed orlov option
[   29.832174][ T3564] smc:    ib device syz! port 1 has pnetid 
[   30.057708][ T3573] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   30.303435][ T3564] syz.4.21 (3564) used greatest stack depth: 10616 bytes left
[   30.367920][ T3581] process 'syz.4.25' launched './file1' with NULL argv: empty string added
[   30.382810][ T3583] geneve2: entered promiscuous mode
[   30.388041][ T3583] geneve2: entered allmulticast mode
[   30.400775][ T3581] capability: warning: `syz.4.25' uses deprecated v2 capabilities in a way that may be insecure
[   30.862846][ T3600] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4)
[   30.869380][ T3600] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[   30.877013][ T3600] vhci_hcd vhci_hcd.0: Device attached
[   31.002362][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   31.071155][ T3363] vhci_hcd: vhci_device speed not set
[   31.133416][ T3363] usb 9-1: new full-speed USB device number 2 using vhci_hcd
[   31.325285][ T3623] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[   31.334040][ T3623] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[   31.340764][ T3623] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[   31.347597][ T3623] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[   31.354328][ T3623] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[   31.361042][ T3623] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[   31.367795][ T3623] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[   31.374532][ T3623] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[   31.381276][ T3623] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[   31.388013][ T3623] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[   31.666858][ T3634] mmap: syz.3.38 (3634) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   31.679927][ T3601] vhci_hcd: connection reset by peer
[   31.692231][   T12] vhci_hcd: stop threads
[   31.696630][   T12] vhci_hcd: release socket
[   31.701157][   T12] vhci_hcd: disconnect device
[   31.701501][ T3636] loop1: detected capacity change from 0 to 512
[   31.723416][ T3636] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   31.736437][ T3636] ext4 filesystem being mounted at /7/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   31.958905][ T3652] loop3: detected capacity change from 0 to 512
[   31.986368][ T3652] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[   32.011982][ T3652] EXT4-fs (loop3): 1 truncate cleaned up
[   32.017977][ T3652] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   32.033832][ T3651] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000.
[   32.066085][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   32.247749][ T3680] loop2: detected capacity change from 0 to 512
[   32.267807][ T3680] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #13: comm syz.2.52: iget: bad i_size value: 12154757448730
[   32.280793][ T3680] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.52: couldn't read orphan inode 13 (err -117)
[   32.294929][ T3683] 9pnet_fd: Insufficient options for proto=fd
[   32.297959][ T3680] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   32.326898][ T3680] IPv6: Can't replace route, no match found
[   32.360633][ T3690] loop0: detected capacity change from 0 to 512
[   32.368887][ T3690] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 4)!
[   32.379653][ T3690] EXT4-fs (loop0): group descriptors corrupted!
[   32.438373][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   32.457285][ T3694] loop2: detected capacity change from 0 to 128
[   32.553428][ T3645] syz.1.39 (3645) used greatest stack depth: 10352 bytes left
[   32.590616][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   32.698292][ T3726] netlink: 12 bytes leftover after parsing attributes in process `syz.0.61'.
[   32.741958][ T3732] loop4: detected capacity change from 0 to 512
[   32.757210][ T3726] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   32.774126][ T3737] loop1: detected capacity change from 0 to 512
[   32.782496][ T3732] EXT4-fs (loop4): orphan cleanup on readonly fs
[   32.794919][ T3732] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.63: bg 0: block 248: padding at end of block bitmap is not set
[   32.810040][ T3732] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.63: Failed to acquire dquot type 1
[   32.823294][ T3732] EXT4-fs (loop4): 1 truncate cleaned up
[   32.829797][ T3732] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   32.846083][ T3726] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   32.862310][ T3732] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended
[   32.878883][ T3737] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[   32.906461][ T3726] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   32.906914][ T3732] EXT4-fs warning (device loop4): read_mmp_block:115: Error -117 while reading MMP block 0
[   32.937324][ T3737] EXT4-fs (loop1): invalid journal inode
[   32.948369][ T3737] EXT4-fs (loop1): can't get journal size
[   32.971395][ T3737] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e056c118, mo2=0002]
[   32.979373][ T3737] System zones: 1-12, 13-13
[   32.992031][ T3732] netlink: 'syz.4.63': attribute type 13 has an invalid length.
[   33.000905][ T3726] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   33.047871][ T3737] EXT4-fs (loop1): 1 truncate cleaned up
[   33.057332][ T3737] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   33.094651][ T3746] loop3: detected capacity change from 0 to 1024
[   33.118755][ T3732] bridge0: port 2(bridge_slave_1) entered disabled state
[   33.126008][ T3732] bridge0: port 1(bridge_slave_0) entered disabled state
[   33.132852][ T3762] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8)
[   33.139555][ T3762] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   33.141255][ T3737] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.64' sets config #1
[   33.147105][ T3762] vhci_hcd vhci_hcd.0: Device attached
[   33.162601][ T3746] ext4: Unknown parameter 'nouser_xattr'
[   33.178531][ T3763] vhci_hcd: connection closed
[   33.178692][ T2192] vhci_hcd: stop threads
[   33.187806][ T2192] vhci_hcd: release socket
[   33.192275][ T2192] vhci_hcd: disconnect device
[   33.237976][ T3732] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   33.249612][ T3732] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   33.308114][  T556] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   33.317382][  T556] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   33.338331][ T2192] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   33.348491][ T3732] syz.4.63 (3732) used greatest stack depth: 9280 bytes left
[   33.349251][ T2192] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   33.365373][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   33.370862][ T2192] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   33.393710][ T2192] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   33.405898][ T2192] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   33.407890][ T3787] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3787 comm=syz.4.67
[   33.414457][   T29] kauditd_printk_skb: 230 callbacks suppressed
[   33.414469][   T29] audit: type=1400 audit(1757753432.544:357): avc:  denied  { mount } for  pid=3786 comm="syz.4.67" name="/" dev="configfs" ino=1429 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[   33.414491][   T29] audit: type=1400 audit(1757753432.544:358): avc:  denied  { setattr } for  pid=3786 comm="syz.4.67" name="/" dev="configfs" ino=1429 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   33.424238][ T2192] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   33.506994][   T29] audit: type=1400 audit(1757753432.644:359): avc:  denied  { execmem } for  pid=3794 comm="syz.0.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   33.528345][   T29] audit: type=1400 audit(1757753432.664:360): avc:  denied  { unmount } for  pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[   33.630712][ T3809] loop4: detected capacity change from 0 to 512
[   33.638730][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   33.678088][   T29] audit: type=1326 audit(1757753432.814:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3811 comm="syz.0.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81e825eba9 code=0x7ffc0000
[   33.701348][   T29] audit: type=1326 audit(1757753432.814:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3811 comm="syz.0.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f81e825eba9 code=0x7ffc0000
[   33.724549][   T29] audit: type=1326 audit(1757753432.814:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3815 comm="syz.1.71" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcff4a5eba9 code=0x0
[   33.774083][   T29] audit: type=1326 audit(1757753432.814:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3811 comm="syz.0.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81e825eba9 code=0x7ffc0000
[   33.775125][ T3809] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   33.797342][   T29] audit: type=1326 audit(1757753432.814:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3811 comm="syz.0.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81e825eba9 code=0x7ffc0000
[   33.832905][   T29] audit: type=1326 audit(1757753432.824:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3811 comm="syz.0.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f81e825eba9 code=0x7ffc0000
[   33.862137][ T3809] ext4 filesystem being mounted at /11/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   33.893424][ T3826] netlink: 4 bytes leftover after parsing attributes in process `syz.1.71'.
[   33.904969][ T3826] loop1: detected capacity change from 0 to 128
[   33.912460][ T3826] vfat: Unknown parameter 'À'
[   33.974412][ T3840] 9pnet_fd: Insufficient options for proto=fd
[   34.061556][ T3843] loop0: detected capacity change from 0 to 2048
[   34.291202][ T3400] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   34.298688][ T3400] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   34.306215][ T3400] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   34.313711][ T3400] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   34.321196][ T3400] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   34.328591][ T3400] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   34.336160][ T3400] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   34.343562][ T3400] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   34.351014][ T3400] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   34.358453][ T3400] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   34.396974][ T3400] hid-generic 0000:0000:0000.0003: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[   34.514838][ T3862] netlink: 12 bytes leftover after parsing attributes in process `syz.3.83'.
[   34.618500][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   34.644375][ T3879] loop2: detected capacity change from 0 to 512
[   34.659961][ T3879] EXT4-fs: Ignoring removed nobh option
[   34.678541][ T3879] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   34.699680][ T3877] infiniband !yz!: set active
[   34.699699][ T3877] infiniband !yz!: added team_slave_0
[   34.713048][ T3893] random: crng reseeded on system resumption
[   34.717545][ T3893] Restarting kernel threads ...
[   34.725873][ T3893] Done restarting kernel threads.
[   34.727436][ T3877] RDS/IB: !yz!: added
[   34.753492][ T3877] smc: adding ib device !yz! with port count 1
[   34.753505][ T3877] smc:    ib device !yz! port 1 has pnetid 
[   34.777763][ T3889] loop1: detected capacity change from 0 to 256
[   34.795590][ T3889] vfat: Unknown parameter ''
[   34.807580][ T3897] 9pnet_fd: Insufficient options for proto=fd
[   34.857191][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   34.914786][ T3899] loop4: detected capacity change from 0 to 512
[   34.939366][ T3899] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   34.953179][ T3899] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   35.125117][ T3907] blktrace: Concurrent blktraces are not allowed on loop8
[   35.220539][ T3918] netlink: 'syz.0.99': attribute type 8 has an invalid length.
[   35.234749][ T3920] loop2: detected capacity change from 0 to 512
[   35.255334][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.267295][ T3920] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   35.284190][ T3920] ext4 filesystem being mounted at /22/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   35.330810][ T3927] loop1: detected capacity change from 0 to 1024
[   35.341497][ T3927] ext4: Unknown parameter '¿¤'
[   35.726328][ T3955] netlink: 32 bytes leftover after parsing attributes in process `syz.1.112'.
[   35.773238][ T3957] sd 0:0:1:0: device reset
[   36.174779][ T3963] netlink: 14 bytes leftover after parsing attributes in process `syz.4.115'.
[   36.184754][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.212014][ T3363] usb 9-1: enqueue for inactive port 0
[   36.217810][ T3965] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.116'.
[   36.227132][ T3363] usb 9-1: enqueue for inactive port 0
[   36.249639][ T3971] netlink: 4 bytes leftover after parsing attributes in process `syz.2.118'.
[   36.265307][ T3971] loop2: detected capacity change from 0 to 512
[   36.273169][ T3971] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   36.289487][ T3971] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[   36.311152][ T3971] EXT4-fs (loop2): 1 truncate cleaned up
[   36.315543][ T3363] vhci_hcd: vhci_device speed not set
[   36.325317][ T3971] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   36.356969][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.365042][ T3984] netlink: 36 bytes leftover after parsing attributes in process `syz.4.124'.
[   36.374828][ T3984] netlink: 36 bytes leftover after parsing attributes in process `syz.4.124'.
[   36.384331][ T3984] netlink: 36 bytes leftover after parsing attributes in process `syz.4.124'.
[   36.411881][ T3984] netlink: 36 bytes leftover after parsing attributes in process `syz.4.124'.
[   36.470880][ T3992] pim6reg: entered allmulticast mode
[   36.478483][ T3984] pim6reg: left allmulticast mode
[   36.514677][ T4002] loop0: detected capacity change from 0 to 512
[   36.524232][ T3984] loop4: detected capacity change from 0 to 164
[   36.539727][ T3984] iso9660: Unknown parameter '01777777777777777777777ÿ'
[   36.572734][ T4002] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   36.587302][ T4002] ext4 filesystem being mounted at /29/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   36.656366][ T4018] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   36.676112][ T4018] batman_adv: batadv0: Removing interface: batadv_slave_1
[   36.702432][ T4021] loop1: detected capacity change from 0 to 4096
[   36.709350][ T4021] EXT4-fs: Ignoring removed nomblk_io_submit option
[   36.731081][ T4021] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities
[   36.879905][ T4023] batman_adv: batadv0: Removing interface: batadv_slave_0
[   36.896029][ T4023] batman_adv: batadv0: Removing interface: batadv_slave_1
[   36.918070][ T4034] loop3: detected capacity change from 0 to 2048
[   36.945112][ T4034] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   36.985530][ T3309] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set
[   37.002790][ T3309] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem
[   37.032055][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.082903][ T4048] all: renamed from bridge_slave_0 (while UP)
[   37.105986][ T4048] loop1: detected capacity change from 0 to 512
[   37.115641][ T4048] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: inode #11: comm syz.1.145: missing EA_INODE flag
[   37.130853][ T4048] EXT4-fs error (device loop1): ext4_xattr_inode_iget:442: comm syz.1.145: error while reading EA inode 11 err=-117
[   37.149818][ T4048] EXT4-fs (loop1): 1 orphan inode deleted
[   37.156055][ T4048] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   37.228753][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.239882][ T4067] netlink: 'syz.4.151': attribute type 21 has an invalid length.
[   37.284361][ T4072] loop1: detected capacity change from 0 to 512
[   37.299236][ T4072] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   37.314046][ T4072] EXT4-fs (loop1): 1 truncate cleaned up
[   37.314388][ T4072] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   37.450270][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.265528][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.283636][ T4111] netlink: 'syz.4.168': attribute type 20 has an invalid length.
[   38.296748][ T4111] loop4: detected capacity change from 0 to 512
[   38.359025][ T4111] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   38.370224][ T4113] Zero length message leads to an empty skb
[   38.398503][ T4111] EXT4-fs (loop4): 1 truncate cleaned up
[   38.406212][ T4117] loop2: detected capacity change from 0 to 512
[   38.430800][ T4111] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   38.450165][   T29] kauditd_printk_skb: 192 callbacks suppressed
[   38.450222][   T29] audit: type=1326 audit(1757753437.584:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4119 comm="syz.3.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f715cadd65f code=0x7ffc0000
[   38.456664][ T4117] EXT4-fs (loop2): orphan cleanup on readonly fs
[   38.501576][ T4120] loop3: detected capacity change from 0 to 8192
[   38.508831][   T29] audit: type=1326 audit(1757753437.634:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4119 comm="syz.3.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f715cadec37 code=0x7ffc0000
[   38.531991][   T29] audit: type=1326 audit(1757753437.644:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4119 comm="syz.3.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f715cadd510 code=0x7ffc0000
[   38.555228][   T29] audit: type=1326 audit(1757753437.644:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4119 comm="syz.3.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f715cade7ab code=0x7ffc0000
[   38.578406][   T29] audit: type=1326 audit(1757753437.644:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4119 comm="syz.3.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f715cadd80a code=0x7ffc0000
[   38.601729][   T29] audit: type=1326 audit(1757753437.644:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4119 comm="syz.3.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f715cadd80a code=0x7ffc0000
[   38.624961][   T29] audit: type=1326 audit(1757753437.644:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4119 comm="syz.3.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f715cadd417 code=0x7ffc0000
[   38.648491][   T29] audit: type=1326 audit(1757753437.644:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4119 comm="syz.3.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f715cae034a code=0x7ffc0000
[   38.674353][   T29] audit: type=1400 audit(1757753437.664:567): avc:  denied  { mount } for  pid=4119 comm="syz.3.170" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[   38.685908][ T4117] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.166: bg 0: block 248: padding at end of block bitmap is not set
[   38.696273][   T29] audit: type=1326 audit(1757753437.664:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4119 comm="syz.3.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f715cadd510 code=0x7ffc0000
[   38.696917][ T4127] loop0: detected capacity change from 0 to 128
[   38.713204][ T4117] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.166: Failed to acquire dquot type 1
[   38.737874][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.751291][ T4117] EXT4-fs (loop2): 1 truncate cleaned up
[   38.773389][ T4117] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   38.804318][ T4135] veth0_to_team: entered promiscuous mode
[   38.810207][ T4135] veth0_to_team: entered allmulticast mode
[   38.819662][ T4127] EXT4-fs: Ignoring removed nobh option
[   38.842517][ T4127] ext4: Unknown parameter 'uid<00000000000000000000'
[   38.884323][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.012694][ T4147] loop2: detected capacity change from 0 to 8192
[   39.013143][ T4151] loop1: detected capacity change from 0 to 512
[   39.048605][ T4153] __nla_validate_parse: 11 callbacks suppressed
[   39.048621][ T4153] netlink: 40 bytes leftover after parsing attributes in process `syz.3.179'.
[   39.064053][ T4153] net_ratelimit: 3321 callbacks suppressed
[   39.064067][ T4153] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[   39.090872][ T2994] udevd[2994]: worker [3538] terminated by signal 33 (Unknown signal 33)
[   39.109263][ T2994] udevd[2994]: worker [3538] failed while handling '/devices/virtual/block/loop2'
[   39.140753][ T4151] EXT4-fs (loop1): 1 orphan inode deleted
[   39.148113][ T4151] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   39.161166][ T2192] EXT4-fs error (device loop1): ext4_release_dquot:6973: comm kworker/u8:7: Failed to release dquot type 1
[   39.165703][ T4153] loop3: detected capacity change from 0 to 1024
[   39.181259][ T4153] EXT4-fs (loop3): Can't support bigalloc feature without extents feature
[   39.181259][ T4153] 
[   39.181970][ T4151] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   39.192146][ T4153] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities
[   39.307944][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.417062][ T4163] netlink: 8 bytes leftover after parsing attributes in process `syz.3.183'.
[   39.458831][ T2994] udevd[2994]: worker [3285] terminated by signal 33 (Unknown signal 33)
[   39.472339][ T2994] udevd[2994]: worker [3285] failed while handling '/devices/virtual/block/loop1'
[   39.705423][ T4172] sctp: [Deprecated]: syz.1.185 (pid 4172) Use of int in max_burst socket option deprecated.
[   39.705423][ T4172] Use struct sctp_assoc_value instead
[   40.086174][ T4202] hub 9-0:1.0: USB hub found
[   40.090997][ T4202] hub 9-0:1.0: 8 ports detected
[   40.433461][ T4239] loop3: detected capacity change from 0 to 512
[   40.447268][ T4241] syz.1.205 (4241): /proc/4240/oom_adj is deprecated, please use /proc/4240/oom_score_adj instead.
[   40.562419][ T4239] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   40.581522][ T4239] ext4 filesystem being mounted at /48/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   41.207131][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.258483][ T4262] netlink: 8 bytes leftover after parsing attributes in process `syz.2.209'.
[   41.342851][ T4268] netlink: 256 bytes leftover after parsing attributes in process `syz.1.210'.
[   41.381317][ T4272] FAULT_INJECTION: forcing a failure.
[   41.381317][ T4272] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   41.394440][ T4272] CPU: 1 UID: 0 PID: 4272 Comm: syz.3.211 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   41.394463][ T4272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   41.394472][ T4272] Call Trace:
[   41.394477][ T4272]  <TASK>
[   41.394483][ T4272]  __dump_stack+0x1d/0x30
[   41.394500][ T4272]  dump_stack_lvl+0xe8/0x140
[   41.394515][ T4272]  dump_stack+0x15/0x1b
[   41.394572][ T4272]  should_fail_ex+0x265/0x280
[   41.394591][ T4272]  should_fail+0xb/0x20
[   41.394606][ T4272]  should_fail_usercopy+0x1a/0x20
[   41.394624][ T4272]  _copy_from_user+0x1c/0xb0
[   41.394657][ T4272]  memdup_user+0x5e/0xd0
[   41.394678][ T4272]  __snd_timer_user_ioctl+0x278/0x2470
[   41.394696][ T4272]  ? do_vfs_ioctl+0x866/0xe10
[   41.394784][ T4272]  ? selinux_file_ioctl+0x308/0x3a0
[   41.394802][ T4272]  ? __pfx_snd_timer_user_ioctl+0x10/0x10
[   41.394818][ T4272]  snd_timer_user_ioctl+0x45/0x90
[   41.394833][ T4272]  __se_sys_ioctl+0xce/0x140
[   41.394870][ T4272]  __x64_sys_ioctl+0x43/0x50
[   41.394883][ T4272]  x64_sys_call+0x1816/0x2ff0
[   41.394900][ T4272]  do_syscall_64+0xd2/0x200
[   41.394976][ T4272]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   41.395000][ T4272]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   41.395056][ T4272]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   41.395073][ T4272] RIP: 0033:0x7f715cadeba9
[   41.395086][ T4272] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   41.395099][ T4272] RSP: 002b:00007f715b547038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   41.395146][ T4272] RAX: ffffffffffffffda RBX: 00007f715cd25fa0 RCX: 00007f715cadeba9
[   41.395156][ T4272] RDX: 0000200000000040 RSI: 00000000c0f85403 RDI: 0000000000000004
[   41.395166][ T4272] RBP: 00007f715b547090 R08: 0000000000000000 R09: 0000000000000000
[   41.395175][ T4272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   41.395215][ T4272] R13: 00007f715cd26038 R14: 00007f715cd25fa0 R15: 00007ffffea98c58
[   41.395230][ T4272]  </TASK>
[   41.405640][ T4274] loop2: detected capacity change from 0 to 2048
[   41.645767][ T4285] @: renamed from vlan0 (while UP)
[   41.668618][ T4291] loop0: detected capacity change from 0 to 512
[   41.684235][ T4274] EXT4-fs (loop2): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   41.701147][ T4291] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   41.716809][ T4274] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   41.735444][ T4291] ext4 filesystem being mounted at /36/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   41.923000][ T3313] EXT4-fs (loop2): unmounting filesystem 00000800-0000-0000-0000-000000000000.
[   42.736857][ T4314] loop2: detected capacity change from 0 to 164
[   42.767353][ T4314] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   42.817622][ T4314] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   42.875399][ T4325] FAULT_INJECTION: forcing a failure.
[   42.875399][ T4325] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   42.888631][ T4325] CPU: 0 UID: 0 PID: 4325 Comm: syz.4.227 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   42.888685][ T4325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   42.888695][ T4325] Call Trace:
[   42.888701][ T4325]  <TASK>
[   42.888709][ T4325]  __dump_stack+0x1d/0x30
[   42.888730][ T4325]  dump_stack_lvl+0xe8/0x140
[   42.888750][ T4325]  dump_stack+0x15/0x1b
[   42.888768][ T4325]  should_fail_ex+0x265/0x280
[   42.888839][ T4325]  should_fail+0xb/0x20
[   42.888855][ T4325]  should_fail_usercopy+0x1a/0x20
[   42.888875][ T4325]  _copy_to_user+0x20/0xa0
[   42.888952][ T4325]  __snd_timer_user_ioctl+0x1c27/0x2470
[   42.888976][ T4325]  ? do_vfs_ioctl+0x866/0xe10
[   42.888997][ T4325]  ? selinux_file_ioctl+0x308/0x3a0
[   42.889086][ T4325]  ? __pfx_snd_timer_user_ioctl+0x10/0x10
[   42.889107][ T4325]  snd_timer_user_ioctl+0x45/0x90
[   42.889127][ T4325]  __se_sys_ioctl+0xce/0x140
[   42.889147][ T4325]  __x64_sys_ioctl+0x43/0x50
[   42.889220][ T4325]  x64_sys_call+0x1816/0x2ff0
[   42.889238][ T4325]  do_syscall_64+0xd2/0x200
[   42.889343][ T4325]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   42.889362][ T4325]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   42.889506][ T4325]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   42.889528][ T4325] RIP: 0033:0x7f76821aeba9
[   42.889542][ T4325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   42.889556][ T4325] RSP: 002b:00007f7680c17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   42.889652][ T4325] RAX: ffffffffffffffda RBX: 00007f76823f5fa0 RCX: 00007f76821aeba9
[   42.889663][ T4325] RDX: 0000200000000040 RSI: 00000000c0f85403 RDI: 0000000000000004
[   42.889736][ T4325] RBP: 00007f7680c17090 R08: 0000000000000000 R09: 0000000000000000
[   42.889746][ T4325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   42.889756][ T4325] R13: 00007f76823f6038 R14: 00007f76823f5fa0 R15: 00007ffd98bc31e8
[   42.889772][ T4325]  </TASK>
[   43.104137][ T4314] rock: directory entry would overflow storage
[   43.110462][ T4314] rock: sig=0x4f50, size=4, remaining=3
[   43.116228][ T4314] iso9660: Corrupted directory entry in block 4 of inode 1792
[   43.216912][ T4331] pim6reg: entered allmulticast mode
[   43.232857][ T4331] pim6reg: left allmulticast mode
[   43.261419][ T4333] syz_tun: entered allmulticast mode
[   43.267995][ T4333] netlink: 60 bytes leftover after parsing attributes in process `syz.2.230'.
[   43.277506][ T4333] unsupported nlmsg_type 40
[   43.286071][ T4334] loop4: detected capacity change from 0 to 164
[   43.295368][ T4334] iso9660: Unknown parameter '01777777777777777777777ÿ'
[   43.318804][ T4334] netlink: 'syz.4.229': attribute type 83 has an invalid length.
[   43.338510][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.358684][ T4334] netlink: 20 bytes leftover after parsing attributes in process `syz.4.229'.
[   43.484481][ T4341] ip6gretap0: entered allmulticast mode
[   43.569377][   T29] kauditd_printk_skb: 197 callbacks suppressed
[   43.569392][   T29] audit: type=1400 audit(1757753442.704:763): avc:  denied  { mount } for  pid=4344 comm="syz.0.234" name="/" dev="ramfs" ino=6963 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[   43.628174][ T4347] netlink: 8 bytes leftover after parsing attributes in process `syz.1.235'.
[   43.744535][   T29] audit: type=1400 audit(1757753442.754:764): avc:  denied  { create } for  pid=4346 comm="syz.1.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   43.774156][ T4347] IPVS: set_ctl: invalid protocol: 64 0.0.0.0:0
[   44.412936][   T29] audit: type=1400 audit(1757753442.914:765): avc:  denied  { setopt } for  pid=4346 comm="syz.1.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   44.459699][   T29] audit: type=1326 audit(1757753443.594:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4356 comm="syz.1.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcff4a5eba9 code=0x7ffc0000
[   44.577307][   T29] audit: type=1326 audit(1757753443.674:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4356 comm="syz.1.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcff4a5eba9 code=0x7ffc0000
[   44.600774][   T29] audit: type=1326 audit(1757753443.674:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4356 comm="syz.1.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcff4a5eba9 code=0x7ffc0000
[   44.624102][   T29] audit: type=1326 audit(1757753443.674:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4356 comm="syz.1.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcff4a5eba9 code=0x7ffc0000
[   44.647338][   T29] audit: type=1326 audit(1757753443.674:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4356 comm="syz.1.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcff4a5eba9 code=0x7ffc0000
[   44.670696][   T29] audit: type=1326 audit(1757753443.674:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4356 comm="syz.1.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcff4a5eba9 code=0x7ffc0000
[   44.694001][   T29] audit: type=1326 audit(1757753443.674:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4356 comm="syz.1.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7fcff4a5eba9 code=0x7ffc0000
[   44.731543][ T4341] syz_tun: left allmulticast mode
[   44.884043][ T4380] netlink: 8 bytes leftover after parsing attributes in process `syz.3.244'.
[   44.894141][ T4377] netlink: 'syz.1.245': attribute type 1 has an invalid length.
[   44.894642][ T4380] netlink: 'syz.3.244': attribute type 21 has an invalid length.
[   44.910290][ T4377] loop1: detected capacity change from 0 to 1024
[   44.966044][ T4380] loop3: detected capacity change from 0 to 1024
[   44.972885][ T4377] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   45.004970][ T4377] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   45.028531][ T4380] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[   45.189205][ T4392] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: block 1: comm syz.1.245: lblock 1 mapped to illegal pblock 1 (length 15)
[   45.204357][ T4392] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117
[   45.216975][ T4392] EXT4-fs (loop1): This should not happen!! Data will be lost
[   45.216975][ T4392] 
[   45.389393][ T4398] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 1: comm syz.1.245: lblock 1 mapped to illegal pblock 1 (length 3)
[   45.405251][ T4392] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[   45.421650][ T4398] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 1: comm syz.1.245: lblock 1 mapped to illegal pblock 1 (length 3)
[   45.443287][ T4376] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 1: comm syz.1.245: lblock 1 mapped to illegal pblock 1 (length 3)
[   45.459783][ T4398] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 1: comm syz.1.245: lblock 1 mapped to illegal pblock 1 (length 3)
[   45.475202][ T4376] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 1: comm syz.1.245: lblock 1 mapped to illegal pblock 1 (length 3)
[   45.498624][ T4398] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 1: comm syz.1.245: lblock 1 mapped to illegal pblock 1 (length 3)
[   45.513925][ T4376] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 1: comm syz.1.245: lblock 1 mapped to illegal pblock 1 (length 3)
[   45.528625][ T4398] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 1: comm syz.1.245: lblock 1 mapped to illegal pblock 1 (length 3)
[   45.760524][   T51] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 192 with max blocks 128 with error 28
[   45.773115][   T51] EXT4-fs (loop1): This should not happen!! Data will be lost
[   45.773115][   T51] 
[   45.782777][   T51] EXT4-fs (loop1): Total free blocks count 0
[   45.788741][   T51] EXT4-fs (loop1): Free/Dirty block details
[   45.794689][   T51] EXT4-fs (loop1): free_blocks=4293918720
[   45.800458][   T51] EXT4-fs (loop1): dirty_blocks=128
[   45.805774][   T51] EXT4-fs (loop1): Block reservation details
[   45.852557][ T4404] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   45.999220][ T4421] loop0: detected capacity change from 0 to 128
[   46.135831][ T4447] sg_write: process 162 (syz.2.263) changed security contexts after opening file descriptor, this is not allowed.
[   46.228732][ T4456] infiniband syz1: set active
[   46.233684][ T4456] infiniband syz1: added veth1_macvtap
[   46.247911][ T4456] RDS/IB: syz1: added
[   46.255268][ T4456] smc: adding ib device syz1 with port count 1
[   46.261523][ T4456] smc:    ib device syz1 port 1 has pnetid 
[   46.389227][ T4465] cgroup: Invalid name
[   46.813005][ T4479] netlink: 4 bytes leftover after parsing attributes in process `syz.0.279'.
[   47.008855][ T4482] loop4: detected capacity change from 0 to 2048
[   47.048164][ T4491] loop0: detected capacity change from 0 to 512
[   47.058025][ T4482] EXT4-fs (loop4): failed to initialize system zone (-117)
[   47.071165][ T4482] EXT4-fs (loop4): mount failed
[   47.093806][ T4482] 9pnet_fd: Insufficient options for proto=fd
[   47.109336][ T4491] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   47.136394][ T4491] ext4 filesystem being mounted at /51/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   47.930610][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.200895][ T4558] loop1: detected capacity change from 0 to 8192
[   48.210566][ T4558] vfat: Unknown parameter '8'
[   48.305168][ T4571] loop2: detected capacity change from 0 to 512
[   48.343175][ T4571] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   48.355952][ T4571] ext4 filesystem being mounted at /65/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   48.373954][ T4581] syz.0.314 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   48.384820][ T4582] netlink: 8 bytes leftover after parsing attributes in process `syz.1.312'.
[   48.395589][ T4581] loop0: detected capacity change from 0 to 2048
[   48.438201][ T4587] loop3: detected capacity change from 0 to 512
[   48.445015][ T4587] journal_path: Non-blockdev passed as './bus'
[   48.451226][ T4587] EXT4-fs: error: could not find journal device path
[   48.458499][ T4573] tipc: Started in network mode
[   48.463470][ T4573] tipc: Node identity ac141413, cluster identity 4711
[   48.470842][ T4581]  loop0: p1 < > p4
[   48.470950][ T4573] tipc: New replicast peer: 10.1.1.2
[   48.480104][ T4573] tipc: Enabled bearer <udp:syz2>, priority 10
[   48.483781][ T4581] loop0: p4 size 8388608 extends beyond EOD, truncated
[   48.487124][ T4587] netlink: 'syz.3.316': attribute type 27 has an invalid length.
[   48.509027][ T4573] loop1: detected capacity change from 0 to 1024
[   48.532656][ T4573] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   48.556675][ T4573] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   48.575534][   T29] kauditd_printk_skb: 203 callbacks suppressed
[   48.575549][   T29] audit: type=1326 audit(1757753447.714:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4572 comm="syz.1.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcff4a5d510 code=0x7ffc0000
[   48.605025][   T29] audit: type=1326 audit(1757753447.714:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4572 comm="syz.1.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fcff4a5d8f7 code=0x7ffc0000
[   48.628326][   T29] audit: type=1326 audit(1757753447.714:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4572 comm="syz.1.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcff4a5d510 code=0x7ffc0000
[   48.628352][   T29] audit: type=1326 audit(1757753447.714:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4572 comm="syz.1.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcff4a5eba9 code=0x7ffc0000
[   48.628421][   T29] audit: type=1326 audit(1757753447.714:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4572 comm="syz.1.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcff4a5eba9 code=0x7ffc0000
[   48.690524][ T4587] bridge0: port 2(bridge_slave_1) entered disabled state
[   48.718888][ T4587] bridge0: port 1(bridge_slave_0) entered disabled state
[   48.868341][ T4587] veth0_to_team: left promiscuous mode
[   48.873943][ T4587] veth0_to_team: left allmulticast mode
[   48.883882][ T4587] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   48.894134][ T4587] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   49.051571][ T2192] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   49.060740][ T2192] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   49.086809][ T2192] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   49.118449][ T2192] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   49.172293][ T4579] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 393: padding at end of block bitmap is not set
[   49.255326][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.286252][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.369231][ T4605] batadv1: entered promiscuous mode
[   49.381587][ T4606] batadv1: entered promiscuous mode
[   49.491726][   T36] tipc: Node number set to 2886997011
[   49.528446][ T3398] hid_parser_main: 16 callbacks suppressed
[   49.528464][ T3398] hid-generic 0000:0000:0000.0004: unknown main item tag 0x1
[   49.541853][ T3398] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   49.549239][ T3398] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   49.556667][ T3398] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   49.564165][ T3398] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   49.574344][   T29] audit: type=1326 audit(1757753448.664:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4620 comm="syz.1.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcff4a5eba9 code=0x7ffc0000
[   49.597845][   T29] audit: type=1326 audit(1757753448.664:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4620 comm="syz.1.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcff4a5eba9 code=0x7ffc0000
[   49.621229][   T29] audit: type=1326 audit(1757753448.664:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4620 comm="syz.1.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcff4a5eba9 code=0x7ffc0000
[   49.644676][   T29] audit: type=1326 audit(1757753448.664:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4620 comm="syz.1.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcff4a5eba9 code=0x7ffc0000
[   49.667909][   T29] audit: type=1326 audit(1757753448.664:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4620 comm="syz.1.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcff4a5eba9 code=0x7ffc0000
[   49.725360][ T4624] netlink: 100 bytes leftover after parsing attributes in process `syz.3.327'.
[   49.738113][ T3398] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   49.745559][ T3398] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   49.753027][ T3398] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   49.758644][ T4629] random: crng reseeded on system resumption
[   49.760426][ T3398] hid-generic 0000:0000:0000.0004: unknown main item tag 0x2
[   49.773814][ T3398] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   49.782150][ T3398] hid-generic 0000:0000:0000.0004: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[   49.900647][ T4632] fido_id[4632]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   50.028220][ T4639] loop1: detected capacity change from 0 to 512
[   50.062897][ T4639] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   50.291981][ T4639] ext4 filesystem being mounted at /67/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   50.985743][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.013079][ T4664] netlink: 'syz.2.339': attribute type 10 has an invalid length.
[   51.021904][ T4666] loop3: detected capacity change from 0 to 128
[   51.080409][ T4664] bridge0: port 2(bridge_slave_1) entered disabled state
[   51.087717][ T4664] bridge0: port 1(bridge_slave_0) entered disabled state
[   51.166316][ T4671] netlink: 4 bytes leftover after parsing attributes in process `syz.2.339'.
[   51.198698][ T4664] bridge0: port 2(bridge_slave_1) entered blocking state
[   51.205850][ T4664] bridge0: port 2(bridge_slave_1) entered forwarding state
[   51.213212][ T4664] bridge0: port 1(bridge_slave_0) entered blocking state
[   51.220253][ T4664] bridge0: port 1(bridge_slave_0) entered forwarding state
[   51.236776][ T4664] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   51.246697][ T4671] bridge_slave_1: left allmulticast mode
[   51.252394][ T4671] bridge_slave_1: left promiscuous mode
[   51.258128][ T4671] bridge0: port 2(bridge_slave_1) entered disabled state
[   51.268907][ T4671] bridge_slave_0: left allmulticast mode
[   51.274693][ T4671] bridge_slave_0: left promiscuous mode
[   51.280424][ T4671] bridge0: port 1(bridge_slave_0) entered disabled state
[   51.322609][ T4671] bond0: (slave bridge0): Releasing backup interface
[   51.504997][ T4678] loop1: detected capacity change from 0 to 512
[   51.522613][ T4678] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   51.536782][ T4682] loop0: detected capacity change from 0 to 128
[   51.543824][ T4664] syz.2.339 (4664) used greatest stack depth: 9016 bytes left
[   51.553177][ T4678] EXT4-fs (loop1): 1 truncate cleaned up
[   51.561143][ T4678] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   51.684792][ T4698] loop4: detected capacity change from 0 to 512
[   51.694538][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.706041][ T4701] netlink: 16 bytes leftover after parsing attributes in process `syz.0.351'.
[   51.760058][ T4706] loop1: detected capacity change from 0 to 512
[   51.810720][ T4706] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   51.828511][ T4698] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   51.843461][ T4706] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   51.931569][ T4698] ext4 filesystem being mounted at /70/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   52.043045][ T4698] EXT4-fs error (device loop4): ext4_lookup:1787: inode #12: comm syz.4.352: iget: bad i_size value: 2533274857506816
[   52.527891][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.608606][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.665360][ T4739] netlink: 24 bytes leftover after parsing attributes in process `syz.2.363'.
[   52.846293][ T4756] loop2: detected capacity change from 0 to 512
[   52.865360][ T4756] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   52.905769][ T4756] ext4 filesystem being mounted at /79/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   52.940954][ T4765] loop0: detected capacity change from 0 to 512
[   52.963932][ T4765] EXT4-fs: Ignoring removed mblk_io_submit option
[   52.976395][ T4765] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   52.988823][ T4765] EXT4-fs (loop0): 1 truncate cleaned up
[   52.995126][ T4765] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   53.158482][ T4770] loop4: detected capacity change from 0 to 4096
[   53.172089][ T4770] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   53.192859][ T4770] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   53.234563][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   53.264754][ T4773] loop4: detected capacity change from 0 to 4096
[   53.275259][ T4773] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   53.307055][ T4773] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   53.410277][ T4781] loop0: detected capacity change from 0 to 512
[   53.426192][ T4781] EXT4-fs: Ignoring removed oldalloc option
[   53.440550][ T4781] EXT4-fs error (device loop0): ext4_xattr_inode_iget:433: comm syz.0.375: Parent and EA inode have the same ino 15
[   53.461378][ T4781] EXT4-fs (loop0): 1 orphan inode deleted
[   53.481398][ T4781] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   53.508498][ T4781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   53.658937][ T4801] loop1: detected capacity change from 0 to 8192
[   53.715046][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   53.770480][   T29] kauditd_printk_skb: 226 callbacks suppressed
[   53.770536][   T29] audit: type=1400 audit(1757753452.904:1212): avc:  denied  { execute } for  pid=4824 comm="syz.4.389" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8823 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   53.823965][   T29] audit: type=1400 audit(1757753452.964:1213): avc:  denied  { firmware_load } for  pid=4806 comm="syz.3.383" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1
[   53.911054][ T4818] cgroup: fork rejected by pids controller in /syz0
[   54.002395][   T29] audit: type=1326 audit(1757753453.114:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4834 comm="syz.4.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76821aeba9 code=0x7ffc0000
[   54.026192][   T29] audit: type=1326 audit(1757753453.114:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4834 comm="syz.4.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f76821aeba9 code=0x7ffc0000
[   54.049899][   T29] audit: type=1326 audit(1757753453.114:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4834 comm="syz.4.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76821aeba9 code=0x7ffc0000
[   54.074280][   T29] audit: type=1326 audit(1757753453.114:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4834 comm="syz.4.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f76821aeba9 code=0x7ffc0000
[   54.097948][   T29] audit: type=1326 audit(1757753453.114:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4834 comm="syz.4.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76821aeba9 code=0x7ffc0000
[   54.121445][   T29] audit: type=1326 audit(1757753453.114:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4834 comm="syz.4.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f76821aeba9 code=0x7ffc0000
[   54.144684][   T29] audit: type=1326 audit(1757753453.114:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4834 comm="syz.4.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76821aeba9 code=0x7ffc0000
[   54.168145][   T29] audit: type=1326 audit(1757753453.114:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4834 comm="syz.4.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f76821aeba9 code=0x7ffc0000
[   54.221702][ T4865] loop4: detected capacity change from 0 to 164
[   54.262703][ T4801] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 1043)
[   54.262727][ T4801] FAT-fs (loop1): Filesystem has been set read-only
[   54.262744][ T4801] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 1043)
[   54.262815][ T4801] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 1043)
[   54.264533][ T4801] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 1043)
[   54.322528][ T4801] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 1043)
[   54.322649][ T4801] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 1043)
[   54.322666][ T4801] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 1043)
[   54.323148][ T4801] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 1043)
[   54.382177][ T4801] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 1043)
[   54.468856][ T4869] netlink: 16 bytes leftover after parsing attributes in process `syz.4.393'.
[   54.487263][ T4871] netlink: 56 bytes leftover after parsing attributes in process `syz.1.392'.
[   54.555908][ T4879] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3)
[   54.562495][ T4879] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   54.569925][ T4879] vhci_hcd vhci_hcd.0: Device attached
[   54.611874][ T4871] loop1: detected capacity change from 0 to 2048
[   54.629917][ T4884] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4884 comm=syz.2.397
[   54.657394][ T4889] loop4: detected capacity change from 0 to 512
[   54.660812][ T4871] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   54.689994][ T4879] netlink: 100 bytes leftover after parsing attributes in process `syz.3.396'.
[   54.718084][ T4889] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   54.731864][ T4881] vhci_hcd: connection closed
[   54.732084][   T41] vhci_hcd: stop threads
[   54.732219][ T4889] ext4 filesystem being mounted at /81/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   54.736776][   T41] vhci_hcd: release socket
[   54.736793][   T41] vhci_hcd: disconnect device
[   54.751149][ T3398] vhci_hcd: vhci_device speed not set
[   54.775315][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   54.840714][ T4910] netlink: 'syz.1.404': attribute type 13 has an invalid length.
[   54.884340][ T4910] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.891705][ T4910] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.932121][ T4910] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   54.944566][ T4910] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   55.012319][ T2192] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   55.024001][ T2192] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   55.024092][ T4915] netlink: 16 bytes leftover after parsing attributes in process `syz.0.405'.
[   55.033727][ T2192] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   55.041854][ T4915] netlink: 48 bytes leftover after parsing attributes in process `syz.0.405'.
[   55.106521][ T2192] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   55.259331][ T4917] cgroup: fork rejected by pids controller in /syz1
[   55.282505][ T4956] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4956 comm=syz.3.410
[   55.307475][ T4956] netlink: 'syz.3.410': attribute type 1 has an invalid length.
[   55.363336][ T4956] bond1: (slave bridge1): making interface the new active one
[   55.480663][ T4956] bond1: (slave bridge1): Enslaving as an active interface with an up link
[   55.501471][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.524628][ T4968] loop1: detected capacity change from 0 to 128
[   55.552378][ T4968] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   55.592954][ T4968] netlink: 8 bytes leftover after parsing attributes in process `syz.1.411'.
[   55.733970][ T4989] loop0: detected capacity change from 0 to 512
[   55.763296][ T4989] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   55.803024][ T4989] ext4 filesystem being mounted at /84/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   55.855099][ T2192] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   55.856175][ T4995] loop4: detected capacity change from 0 to 764
[   55.871500][ T4995] iso9660: Unknown parameter 'mounts'
[   55.884113][ T4998] loop1: detected capacity change from 0 to 512
[   55.912830][ T4998] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   55.928885][ T5001] netlink: 'syz.3.423': attribute type 13 has an invalid length.
[   55.947106][ T4998] ext4 filesystem being mounted at /80/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   55.978537][ T5001] gretap0: refused to change device tx_queue_len
[   55.989327][ T5001] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   56.020385][ T5005] SELinux:  Context system_u:object_r:fsa is not valid (left unmapped).
[   56.071739][ T5001] bond2: entered promiscuous mode
[   56.076873][ T5001] bond2: entered allmulticast mode
[   56.082361][ T5001] 8021q: adding VLAN 0 to HW filter on device bond2
[   56.091922][ T5001] bond2 (unregistering): Released all slaves
[   56.432724][ T5021] 9pnet: Could not find request transport: D
[   56.588843][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   56.598198][ T5030] netlink: 'syz.3.433': attribute type 1 has an invalid length.
[   56.619207][ T5030] loop3: detected capacity change from 0 to 512
[   56.630033][ T5030] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   56.644796][ T5034] loop0: detected capacity change from 0 to 512
[   56.652742][ T5030] EXT4-fs (loop3): 1 truncate cleaned up
[   56.661512][ T5030] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   56.678453][ T5030] netlink: 12 bytes leftover after parsing attributes in process `syz.3.433'.
[   56.699709][ T5034] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   56.714168][ T5034] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   56.740128][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   56.757881][ T5034] netlink: 44 bytes leftover after parsing attributes in process `syz.0.432'.
[   56.766964][ T5034] netlink: 8 bytes leftover after parsing attributes in process `syz.0.432'.
[   56.844762][ T5034] SELinux:  Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped).
[   56.954092][ T5046] loop1: detected capacity change from 0 to 2048
[   56.982734][ T5046] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   57.015915][ T3305] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[   57.049439][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   57.172350][ T5051] loop3: detected capacity change from 0 to 512
[   57.303907][ T5051] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   57.318604][ T5051] ext4 filesystem being mounted at /92/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   57.453975][ T5058] netlink: 'syz.3.438': attribute type 4 has an invalid length.
[   57.561643][ T3302] ==================================================================
[   57.569732][ T3302] BUG: KCSAN: data-race in has_bh_in_lru / invalidate_bh_lru
[   57.577105][ T3302] 
[   57.579437][ T3302] write to 0xffff888237c26f50 of 8 bytes by task 5042 on cpu 0:
[   57.587063][ T3302]  invalidate_bh_lru+0x8f/0xf0
[   57.591818][ T3302]  smp_call_function_many_cond+0x88f/0xc60
[   57.597612][ T3302]  on_each_cpu_cond_mask+0x3c/0x80
[   57.602726][ T3302]  invalidate_bh_lrus+0x2a/0x30
[   57.607567][ T3302]  invalidate_bdev+0x42/0x70
[   57.612157][ T3302]  ext4_put_super+0x624/0x7d0
[   57.616824][ T3302]  generic_shutdown_super+0xe6/0x210
[   57.622100][ T3302]  kill_block_super+0x2a/0x70
[   57.626851][ T3302]  ext4_kill_sb+0x42/0x80
[   57.631184][ T3302]  deactivate_locked_super+0x72/0x1c0
[   57.636554][ T3302]  deactivate_super+0x97/0xa0
[   57.641233][ T3302]  cleanup_mnt+0x269/0x2e0
[   57.645637][ T3302]  __cleanup_mnt+0x19/0x20
[   57.650041][ T3302]  task_work_run+0x12e/0x1a0
[   57.654623][ T3302]  do_exit+0x483/0x15c0
[   57.658779][ T3302]  do_group_exit+0xff/0x140
[   57.663288][ T3302]  get_signal+0xe59/0xf70
[   57.667602][ T3302]  arch_do_signal_or_restart+0x96/0x480
[   57.673132][ T3302]  exit_to_user_mode_loop+0x7a/0x100
[   57.678403][ T3302]  do_syscall_64+0x1d6/0x200
[   57.682987][ T3302]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   57.688864][ T3302] 
[   57.691173][ T3302] read to 0xffff888237c26f50 of 8 bytes by task 3302 on cpu 1:
[   57.698700][ T3302]  has_bh_in_lru+0x35/0x1f0
[   57.703193][ T3302]  smp_call_function_many_cond+0x2a6/0xc60
[   57.708996][ T3302]  on_each_cpu_cond_mask+0x3c/0x80
[   57.714091][ T3302]  invalidate_bh_lrus+0x2a/0x30
[   57.718929][ T3302]  invalidate_bdev+0x42/0x70
[   57.723506][ T3302]  ext4_put_super+0x624/0x7d0
[   57.728175][ T3302]  generic_shutdown_super+0xe6/0x210
[   57.733450][ T3302]  kill_block_super+0x2a/0x70
[   57.738116][ T3302]  ext4_kill_sb+0x42/0x80
[   57.742441][ T3302]  deactivate_locked_super+0x72/0x1c0
[   57.747810][ T3302]  deactivate_super+0x97/0xa0
[   57.752571][ T3302]  cleanup_mnt+0x269/0x2e0
[   57.756982][ T3302]  __cleanup_mnt+0x19/0x20
[   57.761388][ T3302]  task_work_run+0x12e/0x1a0
[   57.766055][ T3302]  exit_to_user_mode_loop+0xe4/0x100
[   57.771333][ T3302]  do_syscall_64+0x1d6/0x200
[   57.775924][ T3302]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   57.781811][ T3302] 
[   57.784119][ T3302] value changed: 0xffff888119ccf548 -> 0x0000000000000000
[   57.791205][ T3302] 
[   57.793515][ T3302] Reported by Kernel Concurrency Sanitizer on:
[   57.799644][ T3302] CPU: 1 UID: 0 PID: 3302 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) 
[   57.809520][ T3302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   57.819562][ T3302] ==================================================================
[   57.900962][ T2192] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   57.958562][ T5069] loop1: detected capacity change from 0 to 512
[   58.022641][ T2192] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   58.047343][ T5069] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   58.086863][ T2192] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   58.112843][ T5069] EXT4-fs (loop1): mount failed
[   58.130658][ T5069] loop1: detected capacity change from 0 to 512
[   58.143712][ T2192] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   58.168656][ T5069] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   58.222056][ T5069] EXT4-fs (loop1): mount failed
[   58.247488][ T5069] loop1: detected capacity change from 0 to 512
[   58.261974][ T2192] bridge_slave_1: left allmulticast mode
[   58.267651][ T2192] bridge_slave_1: left promiscuous mode
[   58.273426][ T2192] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.293362][ T2192] bridge_slave_0: left allmulticast mode
[   58.299107][ T2192] bridge_slave_0: left promiscuous mode
[   58.304938][ T2192] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.313602][ T5069] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   58.342089][ T5069] EXT4-fs (loop1): mount failed
[   58.358731][ T5069] loop1: detected capacity change from 0 to 512
[   58.392382][ T5069] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   58.463293][ T5069] EXT4-fs (loop1): mount failed
[   58.498928][ T5069] loop1: detected capacity change from 0 to 512
[   58.572317][ T5069] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   58.621412][ T5069] EXT4-fs (loop1): mount failed
[   58.646403][ T5069] loop1: detected capacity change from 0 to 512
[   58.683675][ T2192] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   58.694890][ T5069] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   58.716602][ T2192] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   58.726724][ T2192] bond0 (unregistering): Released all slaves
[   58.743398][ T5069] EXT4-fs (loop1): mount failed
[   58.755264][ T5069] loop1: detected capacity change from 0 to 512
[   58.801564][ T5069] __quota_error: 274 callbacks suppressed
[   58.801579][ T5069] Quota error (device loop1): v2_read_file_info: Free block number 1 out of range (1, 6).
[   58.898961][ T5069] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   58.957946][ T5069] EXT4-fs (loop1): mount failed
[   58.985940][ T5069] loop1: detected capacity change from 0 to 512
[   59.011155][ T2192] hsr_slave_0: left promiscuous mode
[   59.020885][ T2192] hsr_slave_1: left promiscuous mode
[   59.037850][ T5069] Quota error (device loop1): v2_read_file_info: Free block number 1 out of range (1, 6).
[   59.041640][ T2192] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   59.055184][ T2192] batman_adv: batadv0: Removing interface: batadv_slave_0
[   59.062427][ T5069] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   59.077645][ T2192] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   59.085121][ T2192] batman_adv: batadv0: Removing interface: batadv_slave_1
[   59.095761][ T5069] EXT4-fs (loop1): mount failed
[   59.103957][ T2192] veth1_macvtap: left promiscuous mode
[   59.109439][ T2192] veth0_macvtap: left promiscuous mode
[   59.114979][ T2192] veth1_vlan: left promiscuous mode
[   59.120214][ T2192] veth0_vlan: left promiscuous mode
[   59.129879][ T5069] loop1: detected capacity change from 0 to 512
[   59.198714][ T5069] Quota error (device loop1): v2_read_file_info: Free block number 1 out of range (1, 6).
[   59.221002][   T12] smc: removing ib device syz1
[   59.248666][ T5069] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   59.287697][ T2192] team0 (unregistering): Port device team_slave_1 removed
[   59.301826][ T5069] EXT4-fs (loop1): mount failed
[   59.314671][ T2192] team0 (unregistering): Port device team_slave_0 removed
[   59.335891][ T5069] loop1: detected capacity change from 0 to 512
[   59.396523][ T1029] syz1: Port: 1 Link DOWN
[   59.435297][ T5069] Quota error (device loop1): v2_read_file_info: Free block number 1 out of range (1, 6).
[   59.451536][ T5069] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   59.522373][ T5069] EXT4-fs (loop1): mount failed
[   59.571210][ T5069] loop1: detected capacity change from 0 to 512
[   59.647480][ T5069] Quota error (device loop1): v2_read_file_info: Free block number 1 out of range (1, 6).
[   59.691753][ T5069] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   59.712425][ T5069] EXT4-fs (loop1): mount failed
[   59.745219][ T5069] loop1: detected capacity change from 0 to 512
[   59.823035][ T5069] Quota error (device loop1): v2_read_file_info: Free block number 1 out of range (1, 6).
[   59.851344][ T5069] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   59.880907][ T5069] EXT4-fs (loop1): mount failed
[   59.902221][ T5069] loop1: detected capacity change from 0 to 512
[   59.956650][ T5069] Quota error (device loop1): v2_read_file_info: Free block number 1 out of range (1, 6).
[   59.992201][ T5069] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   60.035542][ T5069] EXT4-fs (loop1): mount failed
[   60.062298][ T5069] loop1: detected capacity change from 0 to 512
[   60.120852][ T5069] Quota error (device loop1): v2_read_file_info: Free block number 1 out of range (1, 6).
[   60.154367][ T5069] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   60.191876][ T5069] EXT4-fs (loop1): mount failed
[   60.214258][ T5069] loop1: detected capacity change from 0 to 512
[   60.266572][ T5069] Quota error (device loop1): v2_read_file_info: Free block number 1 out of range (1, 6).
[   60.292264][ T5069] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   60.322176][ T5069] EXT4-fs (loop1): mount failed
[   60.341954][ T5069] loop1: detected capacity change from 0 to 512
[   60.381235][ T5069] Quota error (device loop1): v2_read_file_info: Free block number 1 out of range (1, 6).
[   60.395750][ T5069] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   60.421369][ T5069] EXT4-fs (loop1): mount failed
[   60.445180][ T5069] loop1: detected capacity change from 0 to 512
[   60.482985][ T5069] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   60.531364][ T5069] EXT4-fs (loop1): mount failed
[   60.547935][ T5069] loop1: detected capacity change from 0 to 512
[   60.573350][ T5069] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   60.601397][ T5069] EXT4-fs (loop1): mount failed
[   60.610161][ T5069] loop1: detected capacity change from 0 to 512
[   60.676348][ T5069] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   60.711616][ T5069] EXT4-fs (loop1): mount failed
[   60.725435][ T5069] loop1: detected capacity change from 0 to 512
[   60.762081][ T5069] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   60.792385][ T5069] EXT4-fs (loop1): mount failed
[   60.811987][ T5069] loop1: detected capacity change from 0 to 512
[   60.851976][ T5069] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   60.881570][ T5069] EXT4-fs (loop1): mount failed
[   60.890329][ T5069] loop1: detected capacity change from 0 to 512
[   60.927198][ T5069] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   60.962578][ T5069] EXT4-fs (loop1): mount failed