last executing test programs:

1m3.834850662s ago: executing program 1 (id=861):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850001008200000095000000000000009d7d3608d6096514c5b263f5945a9e0a350a90838eacfb5dae42b81b6a7c17ef2fbb959284c63be0efe3a59aa9a9dd9ad28c9793100c052afd66e931c120f3dc5e0afa0d64ce5588d3fffbd76d4b9fba696b4a2000ff4c3741a82de2fb6eaf38ebcb6aa493f4b0adaa1b06644b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1})
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x8000)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f00000002c0)={{0x53, 0x25}, 'port1\x00', 0x6, 0x1a0403, 0x9aa, 0x7, 0x0, 0x7f, 0x200, 0x0, 0x0, 0x7})

1m3.572856907s ago: executing program 1 (id=869):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0xf)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r1, &(0x7f00000003c0)=ANY=[], 0xdc)

1m3.327254532s ago: executing program 1 (id=879):
semop(0x0, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000885000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x43, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9)
r2 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xfe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x4}, 0x40db, 0x0, 0x4, 0x8, 0xa, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='cpu<=0||!')

1m3.242156064s ago: executing program 1 (id=881):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f00000006c0)={[{@stripe={'stripe', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@oldalloc}, {@noquota}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@delalloc}, {@errors_continue}, {@orlov}, {@errors_continue}, {@quota}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x553, &(0x7f0000001080)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]})
pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)

1m2.638564755s ago: executing program 1 (id=887):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r0, 0x0, 0x44, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c0000000000000c548dc7914cb11ad63bf3707164aac031971c4be105eb953f86fbc6b204e076aa7a493e796123bbbd8e3b7e62d8fd097cf21d6d431a069ebc0aefd5fce80cc99fb38c771fa46e2c32a95fe99", 0x0, 0x86, 0x0, 0xffffffffffffff80, 0x0, &(0x7f0000000000)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36eb77dd0aaa2dbe567d168904cf0d5bce1771889c98ffc0abf", 0x0}, 0x15)

1m2.366151091s ago: executing program 1 (id=895):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f00000002c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000004c0)='kmem_cache_free\x00', r0, 0x0, 0x803}, 0x69)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, &(0x7f00000002c0)="9e", 0xffd4, 0x41, &(0x7f0000000200)={0xa, 0x4e23, 0x10003, @loopback, 0x7}, 0x1c)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close_range(r2, 0xffffffffffffffff, 0x0)

1m2.323951381s ago: executing program 32 (id=895):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f00000002c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000004c0)='kmem_cache_free\x00', r0, 0x0, 0x803}, 0x69)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, &(0x7f00000002c0)="9e", 0xffd4, 0x41, &(0x7f0000000200)={0xa, 0x4e23, 0x10003, @loopback, 0x7}, 0x1c)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close_range(r2, 0xffffffffffffffff, 0x0)

48.131456889s ago: executing program 3 (id=1269):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0))
ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000080)=0x4)
ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000100)=0x2000004)
pwritev(r2, &(0x7f0000000280)=[{&(0x7f00000002c0)='\x00!', 0x2}], 0x1, 0x8, 0x49d)

48.06369588s ago: executing program 3 (id=1274):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02})
socket$netlink(0x10, 0x3, 0x0)
ioperm(0x1, 0x9, 0xfffffffffffffff8)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000140)=""/4, 0x4}, {0x0}], 0x2, 0x0, 0x0)

47.186115467s ago: executing program 3 (id=1308):
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='sched_switch\x00', r0, 0x0, 0x2}, 0x18)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000001580), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="74010000", @ANYRES16=r2, @ANYBLOB="11060000000000000000010000000800050001000000200108803c0000801400040002000000ac1e00010000000000000000240001000000000000000000000000000000000000000000000000000000000000000000e0000080a400098028000080060001000a0000001400020020010000000000000000000000000001050003000100000028000080060001000a00000014000200ff010000000000000000000000000001050003002aea091428000080060001000a00000014000200ff010000000000000000000000000001050003000300000028020080060001000a00000014000200ff0100000000000000000000000000010500030000000000240001000000000000000000000000000000000000000000000000000000000000000000140004000200000000000000000000000000000024000300000000000000000000000000000000000000000000000000000000000000000014000200776731"], 0x174}}, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x0)

47.134672418s ago: executing program 3 (id=1310):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x80000, 0x0)

47.07338482s ago: executing program 3 (id=1311):
openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
socket$tipc(0x1e, 0x5, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x18)
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000))
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0)
umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0x0)

46.871203303s ago: executing program 3 (id=1317):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10)
r1 = socket(0x11, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'gre0\x00', <r3=>0x0})
bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r3}, 0x14)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4)
sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="020108dd012918000e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0aba61f6304a80500ffffca88faca"], 0xdd12}], 0x1}, 0x0)

46.803800324s ago: executing program 33 (id=1317):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10)
r1 = socket(0x11, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'gre0\x00', <r3=>0x0})
bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r3}, 0x14)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4)
sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="020108dd012918000e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0aba61f6304a80500ffffca88faca"], 0xdd12}], 0x1}, 0x0)

33.571658783s ago: executing program 5 (id=1662):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
capset(&(0x7f0000000500)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3})
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r1, 0x0, 0x100000000}, 0x18)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8f0, &(0x7f0000002400)=<r3=>0x0)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10)
io_submit(r3, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r2, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}])

33.429042776s ago: executing program 5 (id=1668):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000180)={0x2, 'vlan1\x00', {0x7fffffff}, 0x9})
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e1d, 0x9, @local, 0x2}, 0x1c)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x2007f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}, 0x1c)
syz_emit_ethernet(0x4e, &(0x7f0000000180)={@random="5b685c7e778f", @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x18, 0x11, 0x0, @local, @mcast2, {[], {0x4e1d, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x4, 0x1}}}}}}}, 0x0)

33.397396477s ago: executing program 5 (id=1670):
socket$nl_netfilter(0x10, 0x3, 0xc)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000cc0), &(0x7f0000000c80)='./file1\x00', 0x0, &(0x7f0000000d00)=ANY=[], 0x7, 0x364, &(0x7f0000000900)="$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")
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
r1 = open(&(0x7f00000001c0)='./file2\x00', 0x86442, 0x0)
dup3(r1, r0, 0x0)
io_setup(0x2, &(0x7f0000000400)=<r2=>0x0)
io_submit(r2, 0x3f0a, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}])

33.23185608s ago: executing program 5 (id=1679):
syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000c80)='./file0\x00', 0x1004491, &(0x7f0000000000)=ANY=[], 0x2, 0x838, &(0x7f0000000cc0)="$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")
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_pidfd_open(r2, 0x0)
setns(r3, 0x24020000)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
mount_setattr(r4, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0x85, 0x20000}, 0x20)

33.179051071s ago: executing program 5 (id=1680):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000100)=0x4, 0x4)
bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, 0x1c)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x40800)

32.869037627s ago: executing program 5 (id=1684):
mknodat$loop(0xffffffffffffff9c, 0x0, 0x6004, 0x1)
creat(0x0, 0xf4)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
r1 = memfd_create(&(0x7f0000000180)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\xfa\x8b\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x845n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\xfey\bJ\x86\x8d\xdf\x16\xbb3\x85\xf5\xe0zYe\xc2\n\x0f\x87\xc4\x8f\x8e\xec\xee\xcd\f\xe9\xc8\xbc\x97,\xb7!\xf2\x93\xd3\t\xd9=\x93\x1d\x945\x97\x1e\x9d\xa6\xe9\xa6\xf9p,\xf7v>\xcd\xd9\xc4\x1b\x9c(\xb8\x90\xdeg\xbf[n\x82\x96\xaev\xd4\xac \x14\xf0\x18@\xc3\xf1\xe2\x14\x1c\x0f\xa4-\xde\xae\xfa;\xaf\xae\x06\x9ag\x02\x98\xd0C2\xe7?\xfb\xb01\x9d\xf8\xd3Q\xb3\xb2\x18V\xe8\x8c\x87\xf4\t\x1c\x85\xa4\xc1\xb1\xf4k!G\xf5\xbb\xbbs&\xeac\xb3\xafW\x846\v\xb3\xca\xeb\xb7\x9e\x9e#]\x10lj\xaf\xaf\xd1\'{\x11\xaa,\x0f\xc5OY\"\x82\x84\xb6:J\x8c\xf37\x1d\xca\xf1\xef\x9f\xcf\a\xcf\xcb', 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1)
prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1)

32.857132237s ago: executing program 34 (id=1684):
mknodat$loop(0xffffffffffffff9c, 0x0, 0x6004, 0x1)
creat(0x0, 0xf4)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
r1 = memfd_create(&(0x7f0000000180)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\xfa\x8b\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x845n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\xfey\bJ\x86\x8d\xdf\x16\xbb3\x85\xf5\xe0zYe\xc2\n\x0f\x87\xc4\x8f\x8e\xec\xee\xcd\f\xe9\xc8\xbc\x97,\xb7!\xf2\x93\xd3\t\xd9=\x93\x1d\x945\x97\x1e\x9d\xa6\xe9\xa6\xf9p,\xf7v>\xcd\xd9\xc4\x1b\x9c(\xb8\x90\xdeg\xbf[n\x82\x96\xaev\xd4\xac \x14\xf0\x18@\xc3\xf1\xe2\x14\x1c\x0f\xa4-\xde\xae\xfa;\xaf\xae\x06\x9ag\x02\x98\xd0C2\xe7?\xfb\xb01\x9d\xf8\xd3Q\xb3\xb2\x18V\xe8\x8c\x87\xf4\t\x1c\x85\xa4\xc1\xb1\xf4k!G\xf5\xbb\xbbs&\xeac\xb3\xafW\x846\v\xb3\xca\xeb\xb7\x9e\x9e#]\x10lj\xaf\xaf\xd1\'{\x11\xaa,\x0f\xc5OY\"\x82\x84\xb6:J\x8c\xf37\x1d\xca\xf1\xef\x9f\xcf\a\xcf\xcb', 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1)
prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1)

23.420694892s ago: executing program 7 (id=1922):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r1, 0x0, 0x2000000005}, 0x18)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCMIWAIT(r2, 0x545c, 0x200000000000000)

23.251019955s ago: executing program 7 (id=1927):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = dup(r0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x20000006, @loopback, 0x3}], 0x1c)
sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043)
r2 = dup(r0)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8000, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e24, 0x5, @loopback, 0x1}}, 0x4, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e5d, 0xfffffff2, @empty, 0x1}}, 0x1000000, 0x31, 0xffff1897, 0x4, 0x16, 0x0, 0x78}, 0x9c)

23.230433776s ago: executing program 7 (id=1928):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
recvmsg(r2, 0x0, 0x2000)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)

23.182411517s ago: executing program 7 (id=1929):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x221)

23.105897358s ago: executing program 7 (id=1931):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
r2 = syz_io_uring_setup(0x88e, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x2, 0x1b9}, &(0x7f0000000000)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r2, 0x47f6, 0x0, 0x2, 0x0, 0x0)
ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000180)={0x38000, 0x8, 0x0, 0x2, 0x5, "aa32b73986bbee6bd231334cbfa0b758261a93"})

22.938925811s ago: executing program 7 (id=1934):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', <r3=>0x0})
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004081}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x8}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x8, 0xb}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)

22.887850692s ago: executing program 35 (id=1934):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', <r3=>0x0})
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004081}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x8}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x8, 0xb}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)

4.306183935s ago: executing program 6 (id=2355):
r0 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0xad6, 0x0, 0x1, 0x292}, &(0x7f00000003c0)=<r1=>0x0, &(0x7f0000000200)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1b96aadc3618c72}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10)
unshare(0x2c020400)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780})
io_uring_enter(r0, 0x3518, 0xaddf, 0x2, 0x0, 0x0)

4.264291356s ago: executing program 6 (id=2356):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0)
vmsplice(r2, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8", 0x4}], 0x1, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x19, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = io_uring_setup(0x1694, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
write(r0, 0x0, 0x0)

3.865100154s ago: executing program 6 (id=2363):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000380)={[{@noauto_da_alloc}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$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")
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20)
r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x182)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148)
pwrite64(r3, &(0x7f0000000140)='2', 0xfcd1, 0xfecc)
fallocate(r2, 0x0, 0xbf5, 0x2000402)
r4 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20)
fallocate(r4, 0x0, 0x0, 0x1001f0)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0xc, r2, 0x0, 0x0, 0x0, 0xfffffffffdffffff})

3.747784896s ago: executing program 8 (id=2366):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000300b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='fib6_table_lookup\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x6, 0x8, 0x8, 0x40}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0xffffffb9, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r4}, 0x10)
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x9)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080))

3.696116987s ago: executing program 8 (id=2367):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
r0 = socket$netlink(0x10, 0x3, 0xf)
bind$netlink(r0, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
r1 = socket$netlink(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x3, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0)
write$cgroup_int(r3, &(0x7f0000000040)=0x900, 0x12)

3.58670482s ago: executing program 2 (id=2368):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r3}, 0x18)
socket$packet(0x11, 0x3, 0x300)
socket$packet(0x11, 0xa, 0x300)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', <r5=>0x0})
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4)
sendto$packet(r4, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14)

3.497881891s ago: executing program 2 (id=2370):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440), 0x10)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10)
connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
writev(r1, &(0x7f0000000580)=[{&(0x7f0000001180)="15a2da46d8347a6de4c4ef6d820c79ef4d95aec6f2c3cf29b24add008a8375f0c3d446d094ef791620e3013906350558495a4255af5695cc962310321a7004b802d6f79a44e7", 0x46}], 0x1)
r4 = accept4$unix(r0, 0x0, 0x0, 0x0)
recvmsg(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000740)=""/70, 0x46}], 0x1}, 0x4c2103a0)

3.497438121s ago: executing program 6 (id=2371):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r0}, 0x18)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15)
pipe2$9p(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[], 0x15)
r3 = dup(r2)
write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20)
write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3])
lchown(&(0x7f0000000700)='./file0\x00', 0x0, 0x0)

3.486229752s ago: executing program 2 (id=2372):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r3 = socket$unix(0x1, 0x2, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000)
sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x8000004)

3.278585796s ago: executing program 6 (id=2373):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r1}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast})

3.204302347s ago: executing program 2 (id=2375):
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount(&(0x7f0000000080)=@sg0, 0x0, 0x0, 0x200000, 0x0)
socket$inet6(0xa, 0x2, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$cgroup2(0x0, 0x0, 0x0, 0x81, 0x0)
pread64(r0, &(0x7f0000002280)=""/4096, 0x1000, 0xd33)

3.141378098s ago: executing program 2 (id=2377):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff})
r4 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x842b, 0x80, 0x2000000, 0x3a6}, &(0x7f0000000ac0)=<r5=>0x0, &(0x7f00000005c0)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r3, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000100000001"], 0x18}, 0x0, 0x40858, 0x1})
io_uring_enter(r4, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)

2.880634613s ago: executing program 2 (id=2380):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0xecf86c37d53049cc)
write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c46fdc30003070000000000000002000300030000000903000038000000fcffffff0e000000000020000100050000000000000000000300000008000000f30000007f00000004"], 0x58)
close(r1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x0, 0x20000000000002b8, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x8000, 0x0, 0x0, 0x40f00, 0x14}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
r3 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0<Q8\xbeX\xde\xd6 \xef\x0e\xc2.\x9c=1\x15d\xddIv\x0fh\xe6M(D\xad\xeb\xcfX8\xb9\x8d\xbe(\xd3\x16?x\xbd@\x0f\xf5\xdb\xeb\xd7i*\xea\x86JX\xff;\x96\xbb\xa7\xa8u5R\xa2,\xba\xbc\x01\x12\xb3q,\x9d\xf8\xbdb`\xb3\xc6\x0f\xb3\xac\xc7\xa4O@\x81\xfc\x1a4$\x885\x97\xa9|\x99\x86*.\xda\x96RQ\xe5\xb1\xef\xb7\x10\x99\xd4\xa7\b\xcd\xe9\xa5\xf6wR\xc1\xdfH).\a\x9a\xab\x9e&+\xc4#\x90\xc9%\xb9\xd7o\x86\x13\a\xc0\x01w9u6\xdd\x9fJ^o\x1d\xda\x11?\xc1\xf5\xf7\xff\xec\x916\xceQ\xcfU\x035\x96\x8f\xc7\x84\"2\xef\x02\xcf\a+\x8a\xd1\x11\xb5\xa8\x92\f\xb3R\",\xfc!_&pD\xeb5\xc6\xc8\xff2\xee\x14\x83\x14l\x04\x80\xaa7\x80\xf1\x18\xf5\xa5\xd23\xe5\b\x00\xe8\x9c\xd4\xd0\a\x93#\xb9Z\xc0y\x97<\xe5i\xe9\xe4\xb02Cu\xe1d\r\x0e\xc1\xf1\x81^\xa7\xffz)\x19U\xe5\xd4\xf5@O#W\x8a\xbb3c+\n\x97\xa6\xf7\x90$\xd6*\xd0\x1b\x10\xe4HM:XO\x1b\rx\xc7\x12|\x7fN\xc9\xf9i\xe4\xe5-\x9b\xe407\x9d\xe8\xc6\x90\x9f_Jf\x05\r\x1b\x9af\v\xbcv\x83\xf3j\xaf\xd0F91 ^x\x85\x80[\xa3B\n#!\xc2R\xdd\xf4)\xba\x1e\xfb6U\xabc\xda\x9a)\xc3\x9a\x06\xc5\xccP)\xdf.\xa7-\x84\xdf8\xbf\xfc1^}B\xee\xccR/z\x1e\xe8\x1e\x99\x99\n\xf4u\xd4\xbd^L\xb2j\xda\xff\x1d\x10\xc8\xad\xbd_OI\xb1\xe8y\x003\a\x06\x92\x8e\n\x8b\xf3\xd4G\x85\xbd\x1a\x81+3\x99jq\xd1\xacK^\xef\xb6!8\xcd?\x1e\\\x16W2\xbd4$zn\xa9\x7f\x9dE\xaf\x0f\xdb\xe0\xfa\x10\xc3\xb2\xf8\x80\x8c\xec$\xda\xc0\x94y1\t\xc5`\xda\xca\xd1\xab:\x18\x10\x9b\xd0w', 0x0)
write$binfmt_misc(r3, &(0x7f0000000180)="e502", 0x2)
syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRESHEX], 0x2, 0x699, &(0x7f0000000140)="$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")
execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

2.853539654s ago: executing program 36 (id=2380):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0xecf86c37d53049cc)
write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c46fdc30003070000000000000002000300030000000903000038000000fcffffff0e000000000020000100050000000000000000000300000008000000f30000007f00000004"], 0x58)
close(r1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x0, 0x20000000000002b8, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x8000, 0x0, 0x0, 0x40f00, 0x14}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
r3 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0<Q8\xbeX\xde\xd6 \xef\x0e\xc2.\x9c=1\x15d\xddIv\x0fh\xe6M(D\xad\xeb\xcfX8\xb9\x8d\xbe(\xd3\x16?x\xbd@\x0f\xf5\xdb\xeb\xd7i*\xea\x86JX\xff;\x96\xbb\xa7\xa8u5R\xa2,\xba\xbc\x01\x12\xb3q,\x9d\xf8\xbdb`\xb3\xc6\x0f\xb3\xac\xc7\xa4O@\x81\xfc\x1a4$\x885\x97\xa9|\x99\x86*.\xda\x96RQ\xe5\xb1\xef\xb7\x10\x99\xd4\xa7\b\xcd\xe9\xa5\xf6wR\xc1\xdfH).\a\x9a\xab\x9e&+\xc4#\x90\xc9%\xb9\xd7o\x86\x13\a\xc0\x01w9u6\xdd\x9fJ^o\x1d\xda\x11?\xc1\xf5\xf7\xff\xec\x916\xceQ\xcfU\x035\x96\x8f\xc7\x84\"2\xef\x02\xcf\a+\x8a\xd1\x11\xb5\xa8\x92\f\xb3R\",\xfc!_&pD\xeb5\xc6\xc8\xff2\xee\x14\x83\x14l\x04\x80\xaa7\x80\xf1\x18\xf5\xa5\xd23\xe5\b\x00\xe8\x9c\xd4\xd0\a\x93#\xb9Z\xc0y\x97<\xe5i\xe9\xe4\xb02Cu\xe1d\r\x0e\xc1\xf1\x81^\xa7\xffz)\x19U\xe5\xd4\xf5@O#W\x8a\xbb3c+\n\x97\xa6\xf7\x90$\xd6*\xd0\x1b\x10\xe4HM:XO\x1b\rx\xc7\x12|\x7fN\xc9\xf9i\xe4\xe5-\x9b\xe407\x9d\xe8\xc6\x90\x9f_Jf\x05\r\x1b\x9af\v\xbcv\x83\xf3j\xaf\xd0F91 ^x\x85\x80[\xa3B\n#!\xc2R\xdd\xf4)\xba\x1e\xfb6U\xabc\xda\x9a)\xc3\x9a\x06\xc5\xccP)\xdf.\xa7-\x84\xdf8\xbf\xfc1^}B\xee\xccR/z\x1e\xe8\x1e\x99\x99\n\xf4u\xd4\xbd^L\xb2j\xda\xff\x1d\x10\xc8\xad\xbd_OI\xb1\xe8y\x003\a\x06\x92\x8e\n\x8b\xf3\xd4G\x85\xbd\x1a\x81+3\x99jq\xd1\xacK^\xef\xb6!8\xcd?\x1e\\\x16W2\xbd4$zn\xa9\x7f\x9dE\xaf\x0f\xdb\xe0\xfa\x10\xc3\xb2\xf8\x80\x8c\xec$\xda\xc0\x94y1\t\xc5`\xda\xca\xd1\xab:\x18\x10\x9b\xd0w', 0x0)
write$binfmt_misc(r3, &(0x7f0000000180)="e502", 0x2)
syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRESHEX], 0x2, 0x699, &(0x7f0000000140)="$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")
execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

2.742143246s ago: executing program 8 (id=2386):
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x50)
r0 = syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0)
ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r0, 0x0, 0x4004)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, 0x0, 0x0)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_ro(r3, &(0x7f0000000280)='cgroup.kill\x00', 0x275a, 0x0)
socket(0x1e, 0x4, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)=ANY=[@ANYRESHEX], 0x0, 0x0)

2.660930347s ago: executing program 8 (id=2387):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
syz_emit_ethernet(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0)
sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x40)
pipe2$9p(0x0, 0x0)
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15)
socket$packet(0x11, 0x3, 0x300)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}, 0x1, 0x0, 0x0, 0x4083}, 0x2)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010006000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0xc4)

2.319193554s ago: executing program 8 (id=2392):
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00\x00\a\x00\x00\x00'], 0x50)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10)
pipe(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
writev(r2, &(0x7f0000000400)=[{&(0x7f0000000100)='|', 0x1}], 0x1)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0)
splice(r1, 0x0, r5, 0x0, 0xc, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000001140)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x13f, 0xa}}, 0x20)
write(r3, 0x0, 0x0)

2.03740782s ago: executing program 8 (id=2394):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'pim6reg1\x00', 0x1})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000040000000000000000008500000007799387536fbc2630756c2500000000002020207b1af8ff00000000bfa100000000000017010000f8ffffffb702000008000000b70300000000a5df850000002d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local})
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r3}, 0x10)
close(r0)

1.206252376s ago: executing program 0 (id=2401):
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x5}, 0x38)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0x5, &(0x7f0000000000)={0x60, 0x14, 0x8, 0x2}, 0x8, 0x4, 0x200, 0x0, 0x1, 0x20000, 0x0})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8)
bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback, 0xfffffff7}, 0x1c)
sendmmsg$inet6(r0, &(0x7f00000020c0)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x800)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000600), 0x4)

904.665322ms ago: executing program 0 (id=2403):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15)
remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40081)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
preadv(r2, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/215, 0xd7}], 0x1, 0xfffffffd, 0x8)

891.628882ms ago: executing program 9 (id=2382):
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS    \x00'}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[], 0xb0}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000880)={[{@nomblk_io_submit}, {@debug}, {@errors_continue}, {@sysvgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@jqfmt_vfsv1}, {@acl}, {@jqfmt_vfsv1}]}, 0xfc, 0x587, &(0x7f0000002100)="$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")

737.429645ms ago: executing program 9 (id=2405):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c)
shutdown(r0, 0x0)

612.306118ms ago: executing program 4 (id=2408):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bdbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffc5d, 0x0, 0x0, 0x10, 0x1}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff73}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x4}, 0x18)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

594.208208ms ago: executing program 9 (id=2409):
r0 = socket(0xa, 0x2, 0x88)
mkdir(&(0x7f0000000580)='./file0\x00', 0x92)
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
r1 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r1, 0x402)
connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r2 = shmget(0x1, 0x2000, 0x400, &(0x7f0000dcc000/0x2000)=nil)
shmctl$SHM_STAT(r2, 0xd, &(0x7f00000008c0)=""/25)
shmdt(0x0)
setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f0000000000)="8639c74d1b79334265bb32c86463f0040000000000000056585aa950b1a21434ab000000000000002900000039000000e095570298ca7e533db68d3cf48ce5c4cbfb0c2da9205417b60c213c4b2809bf3dcbf4f5662c05e98f4f2d278050dad6ef9b034574fcb13ffd0fe89930618587c7245de25dce8dd3d46fcb8ef459716ce1db3c837f7ba6054553308435b52e99ea868fb05cdf56c931cd79a71c33274b4bf11f303011a29c4154b9411cba89db7b65ea1a6187fb44c094e0d5f2fbd77922aed695a7986a835bcdfb", 0xcb)
bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)

503.2247ms ago: executing program 9 (id=2410):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000300), 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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")
r2 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x1000)
fallocate(r2, 0x0, 0x0, 0x8800000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x105042, 0x1db)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006280)={0x0, 0x0, 0x0}, 0x0)
writev(r3, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1)

502.99799ms ago: executing program 6 (id=2412):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a300000000074000000060a010400000000e5000000010000004c000480240001800b00010072656a656374000014000280"], 0xfc}}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="2400000076001f03000000000000000008000000ffffffff0c000d80080003"], 0x24}], 0x1}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0xffff}, 0x18)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
pipe2(&(0x7f0000001040)={<r1=>0xffffffffffffffff}, 0x0)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
tee(r1, r3, 0xfffffffffffffc01, 0x0)

485.76518ms ago: executing program 0 (id=2413):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$netlink(0x10, 0x3, 0xa)
r1 = dup(r0)
r2 = open(&(0x7f0000000140)='./file1\x00', 0x109cc2, 0x5c)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='oom_adj\x00')
fchdir(r3)
r4 = inotify_init()
inotify_add_watch(r4, &(0x7f0000000000)='./file1\x00', 0x80)
ftruncate(r2, 0x200004)
sendfile(r1, r2, 0x0, 0x80001d00c0d1)

447.395171ms ago: executing program 0 (id=2414):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)

308.220433ms ago: executing program 4 (id=2415):
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0)
r1 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x5eab, 0x8, 0x2, 0x400250}, &(0x7f0000000300)=<r2=>0x0, &(0x7f0000000400)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x2007, @fd=r0, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1})
r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10)
io_uring_enter(r1, 0x74d1, 0x4c3, 0x43, 0x0, 0xfffffffffffffd1d)

300.233014ms ago: executing program 0 (id=2416):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TCSBRKP(r2, 0x5425, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sys_enter\x00'}, 0x65)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x3)
ioctl$TCSETSW2(r3, 0x5408, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x2, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf"})
ioctl$TIOCGPGRP(r2, 0x5437, 0x0)

257.355255ms ago: executing program 9 (id=2417):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==")
r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x1000)
fallocate(r0, 0x0, 0x0, 0x8800000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x105042, 0x1db)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006280)={0x0, 0x0, 0x0}, 0x0)
writev(r1, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r2}, 0x38)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r3, 0x0, 0x115}, 0x18)
setxattr$incfs_metadata(&(0x7f0000000f80)='./file0\x00', 0x0, 0x0, 0x0, 0x0)

246.161394ms ago: executing program 4 (id=2418):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = dup(r0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c)
sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043)
r2 = dup(r0)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c)
writev(r1, &(0x7f0000000180)=[{&(0x7f0000000100)="a696", 0x2}], 0x1)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e24, 0x5, @loopback, 0xac7}}, 0x4, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2000c800}, 0x2400c800)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x8, 0x1b}, 0x9c)

210.070475ms ago: executing program 4 (id=2419):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x22d00, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6)
close(r0)
socket$inet_sctp(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000000, 0x3, 0x4, 0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
close(0x4)

122.180197ms ago: executing program 9 (id=2420):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x334b, 0x1000, 0x20000003, 0x800}, &(0x7f00000003c0)=<r2=>0x0, &(0x7f0000000300)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000540)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185500, 0x12345})
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
io_uring_enter(r1, 0x3d94, 0x0, 0x0, 0x0, 0x0)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
close_range(r4, r4, 0x200000000000000)

29.379099ms ago: executing program 4 (id=2421):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94)
prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
r2 = syz_open_procfs$userns(0xffffffffffffffff, 0x0)
setns(r2, 0x10000000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffff53a2513743897e44000d0001007564703aa3"], 0x54}}, 0x0)

29.197929ms ago: executing program 4 (id=2422):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$eJzs3T9oJFUcB/DvzO565m6RUxtB/AMiooFwdoJNbBQCEoKIoEJExEZJhJhgl1jZWGitksomiJ3RUtIEG0WwipoiNoIGC4OFFiu7k0hMVqNu3Dkynw9MZibz3vzesPN9u83sBmisq0mmk7SSTCbpJCmON7i7Wq4e7q5PbM8nvd4TPxWDdtV+5ajflSRrSR5KslUWeamdrGw+s/fLzmP3vbncuff9zacnxnqRh/b3dh8/eG/2jY9mHlz54qsfZotMp/un6zp/xZD/tYvklv+j2HWiaNc9Av6Judc+/Lqf+1uT3DPIfydlqhfvraUbtjp54N2/6vv2j1/ePs6xAuev1+v03wPXekDjlEm6KcqpJNV2WU5NVZ/hv2ldLl9eXHp18sXF5YUX6p6pgPPSTXYf/eTSx1dO5P/7VpV/4OLq5//JuY1v+9sHrbpHA4zFHdWqn//J51bvj/xD48g/NJf8Q3PJPzSX/ENzyT80l/zDBdb5+8PyD80l/9Bc8g/NdTz/AECz9C7V/QQyUJe65x8AAAAAAAAAAAAAAAAAAOC09Ynt+aNlXDU/eyfZfyRJe1j91uD3iJMbB38v/1z0m/2hqLqN5Nm7RjzBiD6o+enrm76rt/7nd9Zbf3UhWXs9ybV2+/T9Vxzef//dzWcc7zw/YoF/qTix//BT461/0m8b9daf2Uk+7c8/14bNP2VuG6yHzz/ds79i+Uyv/DriCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABib3wMAAP//+kBtTA==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x11)
pwritev2(r0, &(0x7f0000000cc0)=[{&(0x7f0000000240)=';', 0xffffffbc}], 0x1, 0xfff, 0xc, 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
write$P9_RREAD(r1, 0x0, 0xdd)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4010, &(0x7f0000000300)={[{@nodioread_nolock}, {@barrier_val={'barrier', 0x3d, 0x3ff}}, {@acl}, {@stripe={'stripe', 0x3d, 0x9}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8001}}, {@test_dummy_encryption}, {@max_batch_time}, {@test_dummy_encryption}]}, 0xd, 0x5fd, &(0x7f00000009c0)="$eJzs3c1rHOUfAPDvbF6aNP39khZR68EGRFrQJk3aShEP7VVKqC948WJs0lq7bUMT0VShKdSLIF5EBE+CVvCP0GKvPSkIHrx4kkJR6VFwZTYzaTb7kmSbZGPn84FtZp5nZp5nuvnmmXn2eWYDKKzh9J9SxN6ImEkiBpOFpbzuyDKHF7e799cHp9NXEpXKK38kkWRp+fZJ9nMg27kvIn78IYk9XfXlzs5fOT9ZLk9fztZH5y7MjM7OXzl47sLk2emz0xfHnxs/dvTI0WNjh9o6r6sN0k5ef/vdwY8mXv/6i7+TsW9+nUjieLyYbbj8PCLi51JbpdYajuHq/0lSnzVwbAOOvx10Zb8ny9/ipLuDFWJd8vevJyIei8Hoivtv3mB8+FJHKwdsqkoSUQEKKhH/UFD5dUB+b7/iPjg24j4Y2J7unljsAKiP/+7FvsHoq/YN7LyXxPJunSQi2uuZq7UrIm7fmrh+5tbE9ajvhwM20cK1iHi8Ufwn1fgfir4YqsZ/qSb+0+uCU9nPNP3lNstf2VVcH/+H2zwysJrF+O9rGf/RJP7fWBb/b7ZZ/vD9xbf6a+K/v91TAgAAAAAAgMK6eSIinm30+X9pafxPNBj/MxARxzeg/OEV6/Wf/5fubEAxQAN3T0S80HD8bykf/TvUlS39rzoeoCc5c648fSgi/h8RB6JnR7o+1qKMgx/v+bxZ3nA2/i9/peXfzsYCZvW4072jdp+pybnJBz1vIOLutYgnGo7/TZba/6RB+5/+PZhZYxl7nr5xqlne6vEPbJbKlxH7G7b/959akbR+Psdo9XpgNL8qqPfk+59816z8duPfIybgwaXt/87W8T+ULH9ez+z6yzg8311pltfu9X9v8mr1kTO9Wdp7k3Nzl8ciepOTXWlqTfr4+usMD6M8HvJ4SeP/wFOt+/8aXf/3R8TCimMnf9bOKc49+s/Ab83q4/ofOieN/6l1tf/rXxi/MfR9s/LX1v4fqbb1B7IU/X+w6LM8THtr0+ujcCmga7K2ur4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DAoRcSuSEojS8ul0shIxEBEPBI7S+VLs3PPnLn0zsWpNK/6/f+l/Jt+BxfXk/z7/4eWrY+vWD8cEbsj4tOu/ur6yOlL5alOnzwAAAAAAAAAAAAAAAAAAABsEwNN5v+nfu/qdO2ATdfd6QoAHdMg/n/qRD2Araf9h+IS/1Bc4h+KS/xDcYl/KC7xD8Ul/qG4xD8AAAAAADxUdu+7+UsSEQvP91dfqd4sr6ejNQM2W6nTFQA6xiN+oLgM/YHico8PJKvk9zXdabU9W5k5/QA7AwAAAAAAAAAAAEDh7N9r/j8Ulfn/UFzm/0Nx5fP/93W4HsDWc48PxCoz+RvO/191LwAAAAAAAAAAAABgI83OXzk/WS5PX177wlcR0XqbHbHGA367/tI3b+G17VGNrVyoVCpX09+C7VKf//hCPhR+i0vvjrVtnM/1W9uRO/c3CQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAqPVvAAAA//90ViLR")
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r2, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
ftruncate(r2, 0x9)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)=0x4000)

0s ago: executing program 0 (id=2423):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x5, 0xfffffffc, 0xb95b5ec032cc8e84, 0x0, 0xe6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10)
sendmmsg$unix(r1, &(0x7f0000003580)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="0000000014"], 0x30, 0x40400d1}}], 0x1, 0x810)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
splice(r0, 0x0, r5, 0x0, 0xa86, 0x0)

kernel console output (not intermixed with test programs):

ock 64, lost sync page write
[   64.377178][ T4802] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.457771][ T4802] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.517991][ T4802] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.558799][ T5721] serio: Serial port ptm0
[   64.598708][ T4802] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.717690][ T5732] isofs_fill_super: bread failed, dev=loop4, iso_blknum=16, block=32
[   64.738642][ T4802] bridge_slave_1: left allmulticast mode
[   64.744347][ T4802] bridge_slave_1: left promiscuous mode
[   64.750036][ T4802] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.753269][   T29] kauditd_printk_skb: 129 callbacks suppressed
[   64.753287][   T29] audit: type=1400 audit(1757984697.439:1155): avc:  denied  { map } for  pid=5733 comm="syz.4.902" path="socket:[11535]" dev="sockfs" ino=11535 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[   64.787137][ T4802] bridge_slave_0: left allmulticast mode
[   64.792932][ T4802] bridge_slave_0: left promiscuous mode
[   64.798743][ T4802] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.830868][   T29] audit: type=1400 audit(1757984697.519:1156): avc:  denied  { write } for  pid=5735 comm="syz.0.903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   64.868545][   T29] audit: type=1326 audit(1757984697.559:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5738 comm="syz.0.904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a20d2eba9 code=0x7ffc0000
[   64.891979][   T29] audit: type=1326 audit(1757984697.559:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5738 comm="syz.0.904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a20d2eba9 code=0x7ffc0000
[   64.933456][   T29] audit: type=1326 audit(1757984697.609:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5738 comm="syz.0.904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1a20d2eba9 code=0x7ffc0000
[   64.956973][   T29] audit: type=1326 audit(1757984697.609:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5738 comm="syz.0.904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a20d2eba9 code=0x7ffc0000
[   64.980479][   T29] audit: type=1326 audit(1757984697.609:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5738 comm="syz.0.904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a20d2eba9 code=0x7ffc0000
[   65.004048][   T29] audit: type=1326 audit(1757984697.609:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5738 comm="syz.0.904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1a20d2eba9 code=0x7ffc0000
[   65.027776][   T29] audit: type=1326 audit(1757984697.609:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5738 comm="syz.0.904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a20d2eba9 code=0x7ffc0000
[   65.051308][   T29] audit: type=1326 audit(1757984697.609:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5738 comm="syz.0.904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1a20d2eba9 code=0x7ffc0000
[   65.079793][ T4802] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   65.135749][ T4802] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   65.167675][ T4802] bond0 (unregistering): Released all slaves
[   65.218484][ T4802] tipc: Disabling bearer <udp:syz1>
[   65.223773][ T4802] tipc: Left network mode
[   65.355725][ T4802] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   65.363199][ T4802] batman_adv: batadv0: Removing interface: batadv_slave_0
[   65.378351][ T4802] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   65.385820][ T4802] batman_adv: batadv0: Removing interface: batadv_slave_1
[   65.399890][ T4802] veth1_macvtap: left promiscuous mode
[   65.405699][ T4802] veth0_macvtap: left promiscuous mode
[   65.411292][ T4802] veth1_vlan: left promiscuous mode
[   65.417552][ T4802] veth0_vlan: left promiscuous mode
[   65.517359][ T4802] team0 (unregistering): Port device team_slave_1 removed
[   65.527863][ T4802] team0 (unregistering): Port device team_slave_0 removed
[   65.574288][ T5715] chnl_net:caif_netlink_parms(): no params data found
[   65.676583][ T5715] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.683787][ T5715] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.692086][ T5764] vhci_hcd: invalid port number 96
[   65.697547][ T5764] vhci_hcd: default hub control req: 0300 vfffa i0060 l0
[   65.728798][ T5715] bridge_slave_0: entered allmulticast mode
[   65.744873][ T5715] bridge_slave_0: entered promiscuous mode
[   65.765955][ T5715] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.773066][ T5715] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.801540][ T5715] bridge_slave_1: entered allmulticast mode
[   65.811083][ T5715] bridge_slave_1: entered promiscuous mode
[   65.842953][ T5715] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.853988][ T5715] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.877453][ T5715] team0: Port device team_slave_0 added
[   65.887211][ T5715] team0: Port device team_slave_1 added
[   65.912181][ T5715] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.919219][ T5715] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.945174][ T5715] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.967879][ T5715] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.974944][ T5715] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.000908][ T5715] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.035506][ T5715] hsr_slave_0: entered promiscuous mode
[   66.041672][ T5715] hsr_slave_1: entered promiscuous mode
[   66.047850][ T5715] debugfs: 'hsr0' already exists in 'hsr'
[   66.053687][ T5715] Cannot create hsr debugfs directory
[   66.222157][ T5715] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   66.246885][ T5715] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   66.259122][ T5715] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   66.271907][ T5715] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   66.349723][ T5715] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.384999][ T5715] 8021q: adding VLAN 0 to HW filter on device team0
[   66.410019][ T4783] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.417171][ T4783] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.457488][ T4783] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.464623][ T4783] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.563200][ T5715] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.786543][ T5804] SELinux: failed to load policy
[   66.839973][ T5715] veth0_vlan: entered promiscuous mode
[   66.855684][ T5715] veth1_vlan: entered promiscuous mode
[   66.884608][ T5715] veth0_macvtap: entered promiscuous mode
[   66.899962][ T5715] veth1_macvtap: entered promiscuous mode
[   66.923470][ T5715] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.932743][ T5715] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.947991][ T4756] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.967375][ T4756] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.969062][ T5812] deleting an unspecified loop device is not supported.
[   67.000295][ T5812] 9pnet_fd: Insufficient options for proto=fd
[   67.006596][ T4756] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.029791][ T5815] netlink: 32 bytes leftover after parsing attributes in process `syz.0.924'.
[   67.038959][ T3378] IPVS: starting estimator thread 0...
[   67.038971][ T4756] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.146469][ T5818] IPVS: using max 2352 ests per chain, 117600 per kthread
[   67.380559][ T5837] syzkaller0: entered allmulticast mode
[   67.391476][ T5837] syzkaller0 (unregistering): left allmulticast mode
[   67.681637][ T5857] netlink: 168 bytes leftover after parsing attributes in process `syz.2.941'.
[   67.785517][ T5861] macvlan1: entered promiscuous mode
[   67.793857][ T5861] ipvlan0: entered promiscuous mode
[   67.801656][ T5861] ipvlan0: left promiscuous mode
[   67.816210][ T5861] macvlan1: left promiscuous mode
[   68.115118][ T5895] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   68.174194][ T5906] netlink: 664 bytes leftover after parsing attributes in process `syz.3.960'.
[   68.193111][ T5903] netlink: 12 bytes leftover after parsing attributes in process `syz.5.961'.
[   68.545312][ T5938] loop4: detected capacity change from 0 to 1024
[   68.692117][ T5951] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.699386][ T5951] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.714587][ T5951] team0: left promiscuous mode
[   68.719433][ T5951] team_slave_0: left promiscuous mode
[   68.725039][ T5951] team_slave_1: left promiscuous mode
[   68.764017][ T5951] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   68.774603][ T5951] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   68.812897][ T3416] syz1: Port: 1 Link DOWN
[   68.812981][ T4756] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.827460][ T4756] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.836685][ T4756] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.847660][ T4756] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.913605][ T5967] random: crng reseeded on system resumption
[   68.979862][ T5977] netlink: 68 bytes leftover after parsing attributes in process `syz.3.990'.
[   69.290402][ T5991] loop5: detected capacity change from 0 to 2048
[   69.305728][ T5991] EXT4-fs (loop5): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   69.331506][ T5715] EXT4-fs (loop5): unmounting filesystem 00000800-0000-0000-0000-000000000000.
[   69.519393][ T6001] random: crng reseeded on system resumption
[   69.565174][ T6005] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1000'.
[   69.628698][ T6009] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.635955][ T6009] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.674767][ T6009] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   69.684752][ T6009] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   69.716839][ T4780] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   69.739483][ T4780] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   69.751110][ T4780] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   69.760653][ T4780] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   69.813703][   T29] kauditd_printk_skb: 391 callbacks suppressed
[   69.813721][   T29] audit: type=1400 audit(1757984702.499:1556): avc:  denied  { listen } for  pid=6018 comm="syz.4.1006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   69.839663][   T29] audit: type=1400 audit(1757984702.499:1557): avc:  denied  { read } for  pid=6018 comm="syz.4.1006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   69.898870][   T29] audit: type=1400 audit(1757984702.589:1558): avc:  denied  { read write } for  pid=6025 comm="syz.3.1009" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   69.922447][   T29] audit: type=1400 audit(1757984702.589:1559): avc:  denied  { open } for  pid=6025 comm="syz.3.1009" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   69.958151][   T29] audit: type=1400 audit(1757984702.649:1560): avc:  denied  { ioctl } for  pid=6025 comm="syz.3.1009" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   70.221820][ T6039] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1015'.
[   70.246133][ T6039] IPVS: Error joining to the multicast group
[   70.308100][ T6043] syzkaller1: entered promiscuous mode
[   70.313665][ T6043] syzkaller1: entered allmulticast mode
[   70.589124][   T29] audit: type=1400 audit(1757984703.279:1561): avc:  denied  { ioctl } for  pid=6054 comm="syz.2.1023" path="socket:[13378]" dev="sockfs" ino=13378 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   70.620415][ T6055] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1023'.
[   70.663673][ T6055] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   70.719762][ T6055] batman_adv: batadv0: Removing interface: batadv_slave_1
[   70.737487][   T29] audit: type=1400 audit(1757984703.429:1562): avc:  denied  { ioctl } for  pid=6058 comm="syz.5.1025" path="/dev/input/event2" dev="devtmpfs" ino=245 ioctlcmd=0x4590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   70.805853][   T29] audit: type=1400 audit(1757984703.479:1563): avc:  denied  { ioctl } for  pid=6064 comm="syz.3.1027" path="socket:[12151]" dev="sockfs" ino=12151 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   70.862359][ T6067] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1028'.
[   70.893663][   T29] audit: type=1400 audit(1757984703.579:1564): avc:  denied  { read } for  pid=6077 comm="syz.5.1032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   70.963614][   T29] audit: type=1400 audit(1757984703.649:1565): avc:  denied  { write } for  pid=6086 comm="syz.5.1036" name="file0" dev="tmpfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   71.013483][ T6089] rdma_op ffff88811a75ed80 conn xmit_rdma 0000000000000000
[   71.037533][ T6094] syzkaller1: entered promiscuous mode
[   71.043126][ T6094] syzkaller1: entered allmulticast mode
[   71.320811][ T6122] vhci_hcd: invalid port number 96
[   71.326139][ T6122] vhci_hcd: default hub control req: 0300 vfffa i0060 l0
[   71.480636][ T6145] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1061'.
[   72.055271][ T6176] loop4: detected capacity change from 0 to 8192
[   73.703633][ T6257] SELinux: failed to load policy
[   73.955087][ T6279] loop4: detected capacity change from 0 to 256
[   74.081290][ T6287] SELinux: failed to load policy
[   74.139836][ T6291] loop4: detected capacity change from 0 to 512
[   74.153299][ T6291] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[   74.200621][ T6291] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002]
[   74.231780][ T6291] System zones: 1-12
[   74.242974][ T6296] loop5: detected capacity change from 0 to 8192
[   74.250429][ T6291] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.1123: corrupted in-inode xattr: e_value size too large
[   74.331787][ T6291] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.1123: couldn't read orphan inode 15 (err -117)
[   74.350084][ T6291] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   74.463762][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   74.852182][   T29] kauditd_printk_skb: 171 callbacks suppressed
[   74.852251][   T29] audit: type=1326 audit(1757984707.539:1737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6324 comm="syz.4.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf9bd3eba9 code=0x7ffc0000
[   74.886353][ T6325] loop4: detected capacity change from 0 to 512
[   74.907043][   T29] audit: type=1326 audit(1757984707.579:1738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6324 comm="syz.4.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf9bd3eba9 code=0x7ffc0000
[   74.930716][   T29] audit: type=1326 audit(1757984707.579:1739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6324 comm="syz.4.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fcf9bd3eba9 code=0x7ffc0000
[   74.954270][   T29] audit: type=1326 audit(1757984707.579:1740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6324 comm="syz.4.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf9bd3eba9 code=0x7ffc0000
[   74.977876][   T29] audit: type=1326 audit(1757984707.579:1741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6324 comm="syz.4.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf9bd3eba9 code=0x7ffc0000
[   75.001317][   T29] audit: type=1326 audit(1757984707.579:1742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6324 comm="syz.4.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7fcf9bd3eba9 code=0x7ffc0000
[   75.024757][   T29] audit: type=1326 audit(1757984707.579:1743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6324 comm="syz.4.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf9bd3eba9 code=0x7ffc0000
[   75.048186][   T29] audit: type=1326 audit(1757984707.579:1744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6324 comm="syz.4.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf9bd3eba9 code=0x7ffc0000
[   75.071799][   T29] audit: type=1326 audit(1757984707.579:1745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6324 comm="syz.4.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fcf9bd3eba9 code=0x7ffc0000
[   75.095241][   T29] audit: type=1326 audit(1757984707.579:1746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6324 comm="syz.4.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fcf9bd3ebe3 code=0x7ffc0000
[   75.311562][ T6343] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[   75.321667][ T6343] SELinux: failed to load policy
[   75.600818][ T6372] netlink: 'syz.5.1156': attribute type 2 has an invalid length.
[   75.731957][ T6392] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1159'.
[   75.885559][ T6406] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22
[   75.893801][ T6406] netdevsim netdevsim5: Direct firmware load for . failed with error -22
[   75.920696][ T6409] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1167'.
[   75.929880][ T6409] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1167'.
[   75.939023][ T6409] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1167'.
[   75.948177][ T6409] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1167'.
[   75.957383][ T6409] netlink: 'syz.5.1167': attribute type 6 has an invalid length.
[   75.989244][ T6411] netlink: 'syz.5.1168': attribute type 5 has an invalid length.
[   76.057307][ T6421] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.1172'.
[   76.083569][ T6426] loop4: detected capacity change from 0 to 164
[   76.098444][ T6426] iso9660: Corrupted directory entry in block 2 of inode 1792
[   76.632334][ T6459] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1187'.
[   76.677462][ T6467] sg_write: data in/out 75715714/1670 bytes for SCSI command 0x19-- guessing data in;
[   76.677462][ T6467]    program syz.3.1191 not setting count and/or reply_len properly
[   76.721565][ T6471] loop4: detected capacity change from 0 to 128
[   76.739481][ T6471] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   76.756863][ T6471] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   76.778562][ T6479] syzkaller1: entered promiscuous mode
[   76.784192][ T6479] syzkaller1: entered allmulticast mode
[   76.791639][ T4813] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   77.019140][ T6509] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1211'.
[   77.028203][ T6509] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1211'.
[   77.037265][ T6509] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1211'.
[   77.048245][ T6509] netlink: 'syz.4.1211': attribute type 6 has an invalid length.
[   77.116989][ T6517] loop4: detected capacity change from 0 to 512
[   77.126226][ T6517] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   77.166861][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   77.320428][ T6530] syzkaller0: entered promiscuous mode
[   77.325992][ T6530] syzkaller0: entered allmulticast mode
[   77.663334][ T6552] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22
[   77.671611][ T6552] netdevsim netdevsim4: Direct firmware load for . failed with error -22
[   77.749046][ T6557] loop4: detected capacity change from 0 to 512
[   77.769258][ T6557] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   77.793018][ T6557] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   77.816268][ T6557] EXT4-fs (loop4): 1 truncate cleaned up
[   77.836148][ T6557] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   77.891074][ T6560] infiniband !yz!: set active
[   77.895870][ T6560] infiniband !yz!: added team_slave_0
[   77.911888][ T6560] RDS/IB: !yz!: added
[   77.916744][ T6560] smc: adding ib device !yz! with port count 1
[   77.922999][ T6560] smc:    ib device !yz! port 1 has pnetid 
[   77.960464][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   78.008675][ T6582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   78.048728][ T6582] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   78.270931][ T6604] SELinux: failed to load policy
[   78.496286][ T6627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   78.505588][ T6627] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   78.559241][   T10] hid_parser_main: 55 callbacks suppressed
[   78.559264][   T10] hid-generic 0000:0004:0000.0007: unknown main item tag 0x0
[   78.572581][   T10] hid-generic 0000:0004:0000.0007: unknown main item tag 0x0
[   78.580043][   T10] hid-generic 0000:0004:0000.0007: unknown main item tag 0x0
[   78.597616][   T10] hid-generic 0000:0004:0000.0007: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[   78.629929][ T6641] syzkaller0: entered promiscuous mode
[   78.635627][ T6641] syzkaller0: entered allmulticast mode
[   78.643889][ T6641] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487
[   78.803515][ T6664] loop4: detected capacity change from 0 to 1024
[   78.817819][ T6664] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   78.831911][ T6664] ext4 filesystem being mounted at /268/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   78.863620][ T6664] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: block 3: comm syz.4.1280: lblock 3 mapped to illegal pblock 3 (length 13)
[   78.879283][ T6664] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117
[   78.891694][ T6664] EXT4-fs (loop4): This should not happen!! Data will be lost
[   78.891694][ T6664] 
[   78.902509][ T6664] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: block 1: comm syz.4.1280: lblock 1 mapped to illegal pblock 1 (length 2)
[   78.928378][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.321833][ T6709] smc: net device bond0 erased user defined pnetid SYZ0
[   79.332943][ T6709] smc: ib device syz1 ibport 1 erased user defined pnetid SYZ0
[   79.414885][ T3378] hid-generic 0000:0000:0000.0008: unknown main item tag 0x1
[   79.422350][ T3378] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[   79.429777][ T3378] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[   79.437238][ T3378] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[   79.444766][ T3378] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[   79.452202][ T3378] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[   79.478551][ T3378] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[   79.503691][ T3378] hid-generic 0000:0000:0000.0008: hidraw0: <UNKNOWN> HID v8.00 Device [syz0] on syz1
[   79.867734][ T4783] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.994926][ T4783] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.006344][ T6747] loop4: detected capacity change from 0 to 512
[   80.016671][ T6747] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   80.037339][ T6747] EXT4-fs (loop4): 1 orphan inode deleted
[   80.043207][ T6747] EXT4-fs (loop4): 1 truncate cleaned up
[   80.051053][ T6747] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   80.067583][ T4783] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.086871][ T6747] EXT4-fs error (device loop4): ext4_inlinedir_to_tree:1314: inode #12: block 7: comm syz.4.1320: path /274/file0/file0: bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0
[   80.098293][ T6753] rdma_rxe: rxe_newlink: failed to add team_slave_0
[   80.125979][ T6747] EXT4-fs (loop4): Remounting filesystem read-only
[   80.146664][ T4783] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.167208][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   80.182586][   T29] kauditd_printk_skb: 225 callbacks suppressed
[   80.182605][   T29] audit: type=1326 audit(1757984712.859:1972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6743 comm="syz.0.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a20d2eba9 code=0x7ffc0000
[   80.212548][   T29] audit: type=1326 audit(1757984712.859:1973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6743 comm="syz.0.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a20d2eba9 code=0x7ffc0000
[   80.247101][ T6759] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3)
[   80.253682][ T6759] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   80.261338][ T6759] vhci_hcd vhci_hcd.0: Device attached
[   80.273840][ T6766] program syz.4.1324 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   80.313442][   T29] audit: type=1400 audit(1757984712.999:1974): avc:  denied  { connect } for  pid=6771 comm="syz.5.1327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   80.314148][ T6766] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[   80.360303][ T4783] bridge_slave_1: left allmulticast mode
[   80.366148][ T4783] bridge_slave_1: left promiscuous mode
[   80.371995][ T4783] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.390788][ T6760] vhci_hcd: connection closed
[   80.390954][ T4813] vhci_hcd: stop threads
[   80.400036][ T4813] vhci_hcd: release socket
[   80.404578][ T4813] vhci_hcd: disconnect device
[   80.410574][ T4783] bridge_slave_0: left allmulticast mode
[   80.416931][ T4783] bridge_slave_0: left promiscuous mode
[   80.422652][ T4783] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.444183][   T10] vhci_hcd: vhci_device speed not set
[   80.458418][ T6779] loop4: detected capacity change from 0 to 512
[   80.471442][ T6779] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   80.484525][ T6779] ext4 filesystem being mounted at /276/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   80.507258][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   80.535502][ T4783] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   80.546312][ T4783] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   80.556248][ T4783] bond0 (unregistering): Released all slaves
[   80.690051][ T4783] hsr_slave_0: left promiscuous mode
[   80.699217][ T4783] hsr_slave_1: left promiscuous mode
[   80.709092][ T4783] veth1_macvtap: left promiscuous mode
[   80.723988][ T4783] veth0_macvtap: left promiscuous mode
[   80.734019][ T4783] veth1_vlan: left promiscuous mode
[   80.739434][ T4783] veth0_vlan: left promiscuous mode
[   80.883752][ T4783] team0 (unregistering): Port device team_slave_1 removed
[   80.914077][ T4783] team0 (unregistering): Port device team_slave_0 removed
[   80.992208][ T6802] rdma_rxe: rxe_newlink: failed to add team_slave_0
[   81.025730][   T29] audit: type=1400 audit(1757984713.719:1975): avc:  denied  { create } for  pid=6806 comm="syz.0.1338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[   81.068046][   T29] audit: type=1400 audit(1757984713.739:1976): avc:  denied  { sys_admin } for  pid=6806 comm="syz.0.1338" capability=21  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[   81.111746][ T6750] chnl_net:caif_netlink_parms(): no params data found
[   81.186178][ T6819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   81.219996][ T6750] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.227296][ T6750] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.246089][ T6819] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   81.276242][ T6750] bridge_slave_0: entered allmulticast mode
[   81.304638][ T6750] bridge_slave_0: entered promiscuous mode
[   81.315861][ T6750] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.322952][ T6750] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.335218][ T6750] bridge_slave_1: entered allmulticast mode
[   81.515644][ T6750] bridge_slave_1: entered promiscuous mode
[   81.554380][ T6750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   81.579116][ T6750] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   81.615547][ T6750] team0: Port device team_slave_0 added
[   81.626577][ T6750] team0: Port device team_slave_1 added
[   81.656328][ T6750] batman_adv: batadv0: Adding interface: batadv_slave_0
[   81.663430][ T6750] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.689403][ T6750] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   81.704509][ T6750] batman_adv: batadv0: Adding interface: batadv_slave_1
[   81.711485][ T6750] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.737613][ T6750] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   81.787020][ T6750] hsr_slave_0: entered promiscuous mode
[   81.797939][ T6750] hsr_slave_1: entered promiscuous mode
[   81.811844][ T6750] debugfs: 'hsr0' already exists in 'hsr'
[   81.817768][ T6750] Cannot create hsr debugfs directory
[   81.968830][ T6750] netdevsim netdevsim6 netdevsim0: renamed from eth0
[   81.982529][ T6750] netdevsim netdevsim6 netdevsim1: renamed from eth1
[   81.992529][   T29] audit: type=1400 audit(1757984714.679:1977): avc:  denied  { read } for  pid=6864 comm="syz.5.1352" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[   82.015707][   T29] audit: type=1400 audit(1757984714.679:1978): avc:  denied  { open } for  pid=6864 comm="syz.5.1352" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[   82.018103][ T6750] netdevsim netdevsim6 netdevsim2: renamed from eth2
[   82.067944][ T6750] netdevsim netdevsim6 netdevsim3: renamed from eth3
[   82.163273][ T6750] 8021q: adding VLAN 0 to HW filter on device bond0
[   82.209365][ T6750] 8021q: adding VLAN 0 to HW filter on device team0
[   82.221389][ T4801] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.228670][ T4801] bridge0: port 1(bridge_slave_0) entered forwarding state
[   82.231951][ T6887] SELinux: ebitmap: truncated map
[   82.245867][ T6887] SELinux: failed to load policy
[   82.270679][ T6750] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   82.281330][ T6750] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   82.293292][   T29] audit: type=1400 audit(1757984714.979:1979): avc:  denied  { ioctl } for  pid=6892 comm="syz.5.1363" path="socket:[16501]" dev="sockfs" ino=16501 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   82.297716][ T4801] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.325303][ T4801] bridge0: port 2(bridge_slave_1) entered forwarding state
[   82.389574][ T6902] geneve2: entered promiscuous mode
[   82.395000][ T6902] geneve2: entered allmulticast mode
[   82.414555][ T6904] usb usb8: usbfs: process 6904 (syz.0.1368) did not claim interface 0 before use
[   82.441227][ T6750] 8021q: adding VLAN 0 to HW filter on device batadv0
[   82.459962][ T6913] loop5: detected capacity change from 0 to 1024
[   82.467494][ T6908] netlink: zone id is out of range
[   82.474625][ T6908] netlink: zone id is out of range
[   82.482800][ T6908] netlink: zone id is out of range
[   82.488163][ T6908] netlink: zone id is out of range
[   82.501282][ T6913] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   82.501880][ T6908] netlink: zone id is out of range
[   82.518907][ T6908] netlink: zone id is out of range
[   82.524562][ T6908] netlink: zone id is out of range
[   82.529848][ T6908] netlink: zone id is out of range
[   82.535070][ T6908] netlink: zone id is out of range
[   82.535083][ T6908] netlink: zone id is out of range
[   82.542482][ T6916] SELinux: ebitmap: truncated map
[   82.543042][ T6916] SELinux: failed to load policy
[   82.592192][ T5715] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.608650][   T29] audit: type=1400 audit(1757984715.299:1980): avc:  denied  { read } for  pid=6924 comm="syz.0.1372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[   82.654334][ T6934] loop5: detected capacity change from 0 to 512
[   82.682468][ T6934] EXT4-fs (loop5): orphan cleanup on readonly fs
[   82.710236][ T6750] veth0_vlan: entered promiscuous mode
[   82.719678][ T6750] veth1_vlan: entered promiscuous mode
[   82.736144][ T6934] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.1374: iget: bad extended attribute block 1
[   82.750736][ T6750] veth0_macvtap: entered promiscuous mode
[   82.758567][ T6750] veth1_macvtap: entered promiscuous mode
[   82.767780][ T6934] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.1374: couldn't read orphan inode 15 (err -117)
[   82.781089][ T6934] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[   82.796199][ T6750] batman_adv: batadv0: Interface activated: batadv_slave_0
[   82.807618][ T6750] batman_adv: batadv0: Interface activated: batadv_slave_1
[   82.830083][ T4756] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.848394][ T4756] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.858346][ T4756] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   82.867555][ T5715] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.868820][ T4756] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.895692][   T29] audit: type=1326 audit(1757984715.579:1981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6950 comm="syz.0.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a20d2eba9 code=0x7ffc0000
[   82.999254][ T6963] syzkaller0: entered promiscuous mode
[   83.004888][ T6963] syzkaller0: entered allmulticast mode
[   83.032348][ T6961] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[   83.064797][ T6961] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[   83.689079][ T7050] loop6: detected capacity change from 0 to 1024
[   83.712830][ T7050] EXT4-fs: Ignoring removed bh option
[   83.722596][ T7050] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   83.758974][ T7050] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e84ce018, mo2=0000]
[   83.772370][ T7050] System zones: 0-1, 3-12
[   83.781411][ T7050] EXT4-fs error (device loop6): ext4_map_blocks:814: inode #3: block 1: comm syz.6.1412: lblock 1 mapped to illegal pblock 1 (length 1)
[   83.803655][ T7050] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm syz.6.1412: Failed to acquire dquot type 0
[   83.825991][ T7050] EXT4-fs error (device loop6): ext4_free_blocks:6696: comm syz.6.1412: Freeing blocks not in datazone - block = 0, count = 4096
[   83.850039][ T7050] EXT4-fs error (device loop6): ext4_read_inode_bitmap:139: comm syz.6.1412: Invalid inode bitmap blk 0 in block_group 0
[   83.865103][ T4780] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:31: lblock 1 mapped to illegal pblock 1 (length 1)
[   83.881861][ T7050] EXT4-fs error (device loop6) in ext4_free_inode:361: Corrupt filesystem
[   83.889953][ T7064] loop4: detected capacity change from 0 to 128
[   83.897813][ T7050] EXT4-fs (loop6): 1 orphan inode deleted
[   83.901862][ T7064] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100)
[   83.911503][ T7064] FAT-fs (loop4): Filesystem has been set read-only
[   83.913789][ T7050] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   83.918614][ T4780] EXT4-fs error (device loop6): ext4_release_dquot:6973: comm kworker/u8:31: Failed to release dquot type 0
[   83.941422][ T7064] syz.4.1418: attempt to access beyond end of device
[   83.941422][ T7064] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128
[   83.964175][ T7064] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100)
[   83.965595][ T7066] geneve2: entered promiscuous mode
[   83.972060][ T7064] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100)
[   83.977272][ T7066] geneve2: entered allmulticast mode
[   83.985553][ T7050] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000.
[   84.006348][ T7064] syz.4.1418: attempt to access beyond end of device
[   84.006348][ T7064] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128
[   84.023721][ T7064] syz.4.1418: attempt to access beyond end of device
[   84.023721][ T7064] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128
[   84.037308][ T7064] syz.4.1418: attempt to access beyond end of device
[   84.037308][ T7064] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128
[   84.062489][ T7063] syz.4.1418: attempt to access beyond end of device
[   84.062489][ T7063] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128
[   84.083185][ T6750] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   84.094064][ T7064] syz.4.1418: attempt to access beyond end of device
[   84.094064][ T7064] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128
[   84.096259][ T7068] macsec1: entered promiscuous mode
[   84.112896][ T7068] bridge0: entered promiscuous mode
[   84.118616][ T7064] syz.4.1418: attempt to access beyond end of device
[   84.118616][ T7064] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128
[   84.139231][ T7068] bridge0: port 3(macsec1) entered blocking state
[   84.146300][ T7068] bridge0: port 3(macsec1) entered disabled state
[   84.149398][ T7063] syz.4.1418: attempt to access beyond end of device
[   84.149398][ T7063] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128
[   84.158779][ T7068] macsec1: entered allmulticast mode
[   84.171379][ T7068] bridge0: entered allmulticast mode
[   84.178211][ T7068] macsec1: left allmulticast mode
[   84.183267][ T7068] bridge0: left allmulticast mode
[   84.193638][ T7068] bridge0: left promiscuous mode
[   84.199899][ T7064] syz.4.1418: attempt to access beyond end of device
[   84.199899][ T7064] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128
[   84.220818][ T7064] syz.4.1418: attempt to access beyond end of device
[   84.220818][ T7064] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128
[   84.225165][ T7081] program syz.5.1425 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   84.243640][ T7081] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[   84.374280][ T7098] loop5: detected capacity change from 0 to 512
[   84.386117][ T7098] EXT4-fs (loop5): orphan cleanup on readonly fs
[   84.392772][ T7098] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.1433: iget: bad extended attribute block 1
[   84.405984][ T7098] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.1433: couldn't read orphan inode 15 (err -117)
[   84.421183][ T7098] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[   84.472839][ T5715] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   84.520682][ T7111] loop6: detected capacity change from 0 to 128
[   84.529893][ T7111] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   84.544515][ T7111] ext4 filesystem being mounted at /mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   84.565969][ T7111] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   84.618081][ T7118] loop6: detected capacity change from 0 to 128
[   84.647683][ T7118] FAT-fs (loop6): error, invalid FAT chain (i_pos 548, last_block 8)
[   84.656087][ T7118] FAT-fs (loop6): Filesystem has been set read-only
[   84.673238][ T7118] FAT-fs (loop6): error, corrupted file size (i_pos 548, 522)
[   84.738652][ T7126] vhci_hcd: invalid port number 96
[   84.743843][ T7126] vhci_hcd: default hub control req: 0300 vfffa i0060 l0
[   84.858592][ T7137] loop5: detected capacity change from 0 to 1024
[   84.877155][ T7137] EXT4-fs: Ignoring removed bh option
[   84.884848][ T7137] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   84.919677][ T7137] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e84ce018, mo2=0000]
[   84.938248][ T7137] System zones: 0-1, 3-12
[   84.948531][ T7137] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #3: block 1: comm syz.5.1450: lblock 1 mapped to illegal pblock 1 (length 1)
[   85.166942][ T7137] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.1450: Failed to acquire dquot type 0
[   85.208139][ T7137] EXT4-fs error (device loop5): ext4_free_blocks:6696: comm syz.5.1450: Freeing blocks not in datazone - block = 0, count = 4096
[   85.247659][ T7137] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.1450: Invalid inode bitmap blk 0 in block_group 0
[   85.264090][ T4783] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:34: lblock 1 mapped to illegal pblock 1 (length 1)
[   85.294576][   T29] kauditd_printk_skb: 45 callbacks suppressed
[   85.294590][   T29] audit: type=1326 audit(1757984717.989:2022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7147 comm="syz.4.1455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf9bd3eba9 code=0x7ffc0000
[   85.333486][ T7137] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem
[   85.342367][ T4783] Quota error (device loop5): remove_tree: Can't read quota data block 1
[   85.350981][ T4783] EXT4-fs error (device loop5): ext4_release_dquot:6973: comm kworker/u8:34: Failed to release dquot type 0
[   85.372980][ T7137] EXT4-fs (loop5): 1 orphan inode deleted
[   85.386473][ T7137] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   85.402531][   T29] audit: type=1326 audit(1757984718.019:2023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7147 comm="syz.4.1455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf9bd3eba9 code=0x7ffc0000
[   85.527263][ T7137] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000.
[   85.539894][ T7158] macsec0: entered promiscuous mode
[   85.578771][ T5715] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.823968][ T7202] $H�: renamed from bond0 (while UP)
[   85.831370][ T7202] $H�: entered promiscuous mode
[   85.836546][ T7202] bond_slave_0: entered promiscuous mode
[   85.842406][ T7202] bond_slave_1: entered promiscuous mode
[   85.869780][   T29] audit: type=1400 audit(1757984718.559:2024): avc:  denied  { ioctl } for  pid=7207 comm="syz.5.1473" path="socket:[16991]" dev="sockfs" ino=16991 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   85.895802][   T29] audit: type=1400 audit(1757984718.559:2025): avc:  denied  { bind } for  pid=7207 comm="syz.5.1473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   85.965883][ T7216] syz_tun: entered allmulticast mode
[   85.983781][ T7215] syz_tun: left allmulticast mode
[   86.007472][ T7221] loop5: detected capacity change from 0 to 1024
[   86.018723][   T29] audit: type=1400 audit(1757984718.709:2026): avc:  denied  { listen } for  pid=7223 comm="syz.6.1480" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   86.061638][ T7221] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   86.096639][   T29] audit: type=1400 audit(1757984718.789:2027): avc:  denied  { map } for  pid=7220 comm="syz.5.1479" path="/120/file1/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   86.097770][ T7221] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4183: comm syz.5.1479: Allocating blocks 385-513 which overlap fs metadata
[   86.120247][   T29] audit: type=1400 audit(1757984718.789:2028): avc:  denied  { execute } for  pid=7220 comm="syz.5.1479" path="/120/file1/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   86.163036][ T7221] EXT4-fs (loop5): pa ffff8881054bf5b0: logic 16, phys. 129, len 24
[   86.171266][ T7221] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8
[   86.186695][ T7221] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 28 with max blocks 4 with error 28
[   86.199031][ T7221] EXT4-fs (loop5): This should not happen!! Data will be lost
[   86.199031][ T7221] 
[   86.209019][ T7221] EXT4-fs (loop5): Total free blocks count 0
[   86.215145][ T7221] EXT4-fs (loop5): Free/Dirty block details
[   86.221347][ T7221] EXT4-fs (loop5): free_blocks=128
[   86.222193][ T7235] pim6reg1: entered promiscuous mode
[   86.226642][ T7221] EXT4-fs (loop5): dirty_blocks=0
[   86.231851][ T7235] pim6reg1: entered allmulticast mode
[   86.237042][ T7221] EXT4-fs (loop5): Block reservation details
[   86.248393][ T7221] EXT4-fs (loop5): i_reserved_data_blocks=0
[   86.283002][   T29] audit: type=1400 audit(1757984718.969:2029): avc:  denied  { read } for  pid=7236 comm="syz.0.1484" path="socket:[17044]" dev="sockfs" ino=17044 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[   86.308277][ T7221] syz.5.1479 (7221) used greatest stack depth: 9128 bytes left
[   86.338178][ T7240] loop5: detected capacity change from 0 to 256
[   86.436937][ T7246] __nla_validate_parse: 4 callbacks suppressed
[   86.436959][ T7246] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1484'.
[   86.537604][ T7254] SELinux: failed to load policy
[   86.647252][ T7270] loop5: detected capacity change from 0 to 512
[   86.666630][ T7270] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   86.681163][ T7274] syzkaller1: entered promiscuous mode
[   86.686723][ T7274] syzkaller1: entered allmulticast mode
[   86.695177][ T7270] ext4 filesystem being mounted at /127/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   86.721549][ T7281] loop6: detected capacity change from 0 to 1024
[   86.728837][ T7281] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   86.744253][ T7281] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   86.757115][ T7281] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000]
[   86.767833][   T29] audit: type=1400 audit(1757984719.449:2030): avc:  denied  { ioctl } for  pid=7269 comm="syz.5.1498" path="/127/bus/file1" dev="loop5" ino=15 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   86.792863][ T7281] EXT4-fs error (device loop6): ext4_free_blocks:6696: comm syz.6.1502: Freeing blocks not in datazone - block = 0, count = 4096
[   86.815291][ T7281] EXT4-fs (loop6): Remounting filesystem read-only
[   86.829492][ T5715] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   86.839170][ T7281] EXT4-fs (loop6): 1 orphan inode deleted
[   86.845430][ T7281] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   86.859925][ T4780] EXT4-fs (loop6): Quota write (off=3072, len=1024) cancelled because transaction is not started
[   86.916351][ T7294] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000.
[   86.925981][ T7290] vhci_hcd: invalid port number 254
[   86.931213][ T7290] vhci_hcd: invalid port number 254
[   86.978372][ T7300] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1511'.
[   86.994915][ T7301] netlink: 'syz.0.1510': attribute type 10 has an invalid length.
[   86.999556][ T7300] hub 9-0:1.0: USB hub found
[   87.007925][ T7300] hub 9-0:1.0: 8 ports detected
[   87.012895][ T7301] team0: Port device dummy0 added
[   87.040167][ T7301] netlink: 'syz.0.1510': attribute type 10 has an invalid length.
[   87.062039][ T7301] team0: Failed to send port change of device dummy0 via netlink (err -105)
[   87.072037][ T7301] team0: Failed to send options change via netlink (err -105)
[   87.082366][ T7301] team0: Failed to send port change of device dummy0 via netlink (err -105)
[   87.097678][ T7301] team0: Port device dummy0 removed
[   87.104508][ T7301] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   87.127227][ T7307] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1513'.
[   87.166022][ T6750] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   87.308941][ T7324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   87.318597][ T7324] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   87.846674][ T7339] smc: net device bond0 applied user defined pnetid SYZ0
[   87.855650][ T7339] smc: net device bond0 erased user defined pnetid SYZ0
[   87.885822][ T7343] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1528'.
[   88.011489][ T7351] netlink: 2028 bytes leftover after parsing attributes in process `syz.5.1532'.
[   88.020888][ T7351] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1532'.
[   88.063699][ T7357] syzkaller0: entered promiscuous mode
[   88.069364][ T7357] syzkaller0: entered allmulticast mode
[   88.230394][ T7369] loop6: detected capacity change from 0 to 2048
[   88.295310][ T7369]  loop6: p1 < > p4
[   88.300801][ T7369] loop6: p4 size 8388608 extends beyond EOD, truncated
[   88.364507][ T1035] hid_parser_main: 30 callbacks suppressed
[   88.364589][ T1035] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[   88.377996][ T1035] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[   88.385494][ T1035] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[   88.392966][ T1035] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[   88.400403][ T1035] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[   88.407813][ T1035] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[   88.415316][ T1035] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[   88.422789][ T1035] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[   88.430369][ T1035] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[   88.437833][ T1035] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[   88.467897][ T7377] loop6: detected capacity change from 0 to 1024
[   88.476076][ T1035] hid-generic 0000:0000:0000.0009: hidraw0: <UNKNOWN> HID v8.00 Device [syz0] on syz0
[   88.496068][ T7377] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   88.512005][ T7377] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4183: comm syz.6.1544: Allocating blocks 465-513 which overlap fs metadata
[   88.528354][ T7377] EXT4-fs (loop6): pa ffff8881054bf620: logic 256, phys. 369, len 9
[   88.536574][ T7377] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 3
[   88.548208][ T7377] EXT4-fs error (device loop6): mb_free_blocks:2017: group 0, inode 18: block 113:freeing already freed block (bit 7); block bitmap corrupt.
[   88.578038][ T6750] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   88.696973][ T7394] loop6: detected capacity change from 0 to 8192
[   88.803051][ T7401] loop6: detected capacity change from 0 to 512
[   88.811381][ T7401] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[   88.825894][ T7401] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #16: comm syz.6.1551: invalid indirect mapped block 4294967295 (level 0)
[   88.840364][ T7401] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #16: comm syz.6.1551: invalid indirect mapped block 4294967295 (level 1)
[   88.858039][ T7401] EXT4-fs (loop6): 1 orphan inode deleted
[   88.863819][ T7401] EXT4-fs (loop6): 1 truncate cleaned up
[   88.870804][ T7401] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   88.905564][ T6750] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   89.327290][ T7437] loop5: detected capacity change from 0 to 2048
[   89.346796][ T7441] loop6: detected capacity change from 0 to 1024
[   89.354531][ T7437] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   89.368130][ T7441] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   89.391611][ T7437] EXT4-fs error (device loop5): ext4_ext_precache:632: inode #2: comm syz.5.1564: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5)
[   89.392146][ T7441] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   89.446397][ T7437] EXT4-fs (loop5): Remounting filesystem read-only
[   89.479296][ T4754] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm kworker/u8:10: bg 0: block 393: padding at end of block bitmap is not set
[   89.498255][ T5715] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   89.508196][ T4754] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 117
[   89.520836][ T4754] EXT4-fs (loop6): This should not happen!! Data will be lost
[   89.520836][ T4754] 
[   89.545587][ T6750] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   89.657366][ T7467] loop6: detected capacity change from 0 to 512
[   89.666318][ T7467] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended
[   89.667397][ T7469] netlink: 'syz.4.1578': attribute type 10 has an invalid length.
[   89.685758][ T7469] team0: Port device dummy0 added
[   89.697807][ T7467] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1128: updating to rev 1 because of new feature flag, running e2fsck is recommended
[   89.698727][ T7469] netlink: 'syz.4.1578': attribute type 10 has an invalid length.
[   89.714362][ T7467] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1577: bg 0: block 248: padding at end of block bitmap is not set
[   89.721002][ T7469] team0: Failed to send port change of device dummy0 via netlink (err -105)
[   89.744589][ T7469] team0: Failed to send options change via netlink (err -105)
[   89.752348][ T7469] team0: Failed to send port change of device dummy0 via netlink (err -105)
[   89.761643][ T7467] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm syz.6.1577: Failed to acquire dquot type 1
[   89.773299][ T7469] team0: Port device dummy0 removed
[   89.775635][ T7467] EXT4-fs (loop6): 1 truncate cleaned up
[   89.780686][ T7469] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   89.787996][ T7467] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[   89.851902][ T6750] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[   89.862031][ T4801] EXT4-fs error (device loop6): ext4_release_dquot:6973: comm kworker/u8:52: Failed to release dquot type 1
[   89.899558][ T7480] loop6: detected capacity change from 0 to 1024
[   89.916773][ T7480] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   89.929043][ T7480] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   89.960880][ T7480] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1582: bg 0: block 393: padding at end of block bitmap is not set
[   89.977788][ T7480] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 117
[   89.990374][ T7480] EXT4-fs (loop6): This should not happen!! Data will be lost
[   89.990374][ T7480] 
[   90.028881][ T6750] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   90.054345][ T2957] hid-generic 0000:0000:0000.000A: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   90.097392][ T7496] loop5: detected capacity change from 0 to 512
[   90.117058][ T7496] EXT4-fs error (device loop5): ext4_xattr_inode_iget:442: comm +}[@: error while reading EA inode 32 err=-116
[   90.129202][ T7496] EXT4-fs (loop5): Remounting filesystem read-only
[   90.135930][ T7496] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -30)
[   90.147418][ T7496] EXT4-fs (loop5): 1 orphan inode deleted
[   90.153625][ T7496] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   90.167822][ T7496] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   90.795551][ T7513] netlink: 'syz.6.1593': attribute type 10 has an invalid length.
[   90.808864][ T7513] team0: Port device dummy0 added
[   90.818778][ T7513] netlink: 'syz.6.1593': attribute type 10 has an invalid length.
[   90.827371][ T7513] team0: Failed to send port change of device dummy0 via netlink (err -105)
[   90.838592][ T7513] team0: Failed to send options change via netlink (err -105)
[   90.846675][ T7513] team0: Failed to send port change of device dummy0 via netlink (err -105)
[   90.855792][ T7513] team0: Port device dummy0 removed
[   90.863607][ T7513] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   91.139042][ T7527] loop5: detected capacity change from 0 to 8192
[   91.282499][ T7531] loop5: detected capacity change from 0 to 512
[   91.289685][ T7531] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   91.301417][ T7531] EXT4-fs (loop5): 1 truncate cleaned up
[   91.308018][ T7531] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   91.321977][ T7531] EXT4-fs (loop5): shut down requested (2)
[   91.338031][ T5715] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   91.665072][   T29] kauditd_printk_skb: 147 callbacks suppressed
[   91.665090][   T29] audit: type=1400 audit(1757984724.359:2173): avc:  denied  { watch watch_reads } for  pid=7555 comm="syz.2.1613" path="/proc/736" dev="proc" ino=18585 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[   91.861187][   T29] audit: type=1326 audit(1757984724.549:2174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7577 comm="syz.6.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f688deba9 code=0x7ffc0000
[   91.885014][   T29] audit: type=1326 audit(1757984724.549:2175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7577 comm="syz.6.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f688deba9 code=0x7ffc0000
[   91.921785][   T29] audit: type=1326 audit(1757984724.609:2176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7577 comm="syz.6.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f688deba9 code=0x7ffc0000
[   91.945449][   T29] audit: type=1326 audit(1757984724.609:2177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7577 comm="syz.6.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f688deba9 code=0x7ffc0000
[   91.969183][   T29] audit: type=1326 audit(1757984724.609:2178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7577 comm="syz.6.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f688deba9 code=0x7ffc0000
[   91.992847][   T29] audit: type=1326 audit(1757984724.609:2179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7577 comm="syz.6.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f688deba9 code=0x7ffc0000
[   92.016867][   T29] audit: type=1326 audit(1757984724.609:2180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7577 comm="syz.6.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f688deba9 code=0x7ffc0000
[   92.040285][   T29] audit: type=1326 audit(1757984724.609:2181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7577 comm="syz.6.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f688deba9 code=0x7ffc0000
[   92.064317][   T29] audit: type=1326 audit(1757984724.609:2182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7577 comm="syz.6.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f9f688deba9 code=0x7ffc0000
[   92.115986][ T7590] loop5: detected capacity change from 0 to 256
[   92.122891][ T7590] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   92.135407][ T7590] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   92.162118][ T7587] loop4: detected capacity change from 0 to 8192
[   92.279497][ T7612] netlink: 'syz.0.1634': attribute type 12 has an invalid length.
[   92.406967][ T7625] tipc: Started in network mode
[   92.412117][ T7625] tipc: Node identity 76b0efac4bcf, cluster identity 4711
[   92.419526][ T7625] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   92.427776][ T7627] loop6: detected capacity change from 0 to 128
[   92.459822][ T7627] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   92.473756][ T7627] ext4 filesystem being mounted at /56/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   92.506091][ T7625] tipc: Disabling bearer <eth:syzkaller0>
[   92.535719][ T6750] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   92.602541][ T7639] loop6: detected capacity change from 0 to 512
[   92.610629][ T7639] EXT4-fs: Ignoring removed nobh option
[   92.616589][ T7639] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   92.629383][ T7639] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #15: comm syz.6.1644: iget: bad i_size value: 38620345925642
[   92.646893][ T7639] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.1644: couldn't read orphan inode 15 (err -117)
[   92.660253][ T7639] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   92.754190][ T7651] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.1644: bg 0: block 5: invalid block bitmap
[   92.790627][ T4801] EXT4-fs (loop6): Delayed block allocation failed for inode 21 at logical offset 0 with max blocks 2048 with error 28
[   92.803195][ T4801] EXT4-fs (loop6): This should not happen!! Data will be lost
[   92.803195][ T4801] 
[   92.812886][ T4801] EXT4-fs (loop6): Total free blocks count 0
[   92.819156][ T4801] EXT4-fs (loop6): Free/Dirty block details
[   92.825186][ T4801] EXT4-fs (loop6): free_blocks=0
[   92.830144][ T4801] EXT4-fs (loop6): dirty_blocks=4628
[   92.835491][ T4801] EXT4-fs (loop6): Block reservation details
[   92.841563][ T4801] EXT4-fs (loop6): i_reserved_data_blocks=4628
[   92.857470][ T4780] EXT4-fs (loop6): Delayed block allocation failed for inode 21 at logical offset 2052 with max blocks 2048 with error 28
[   92.944398][ T7666] loop6: detected capacity change from 0 to 512
[   92.977698][ T7666] Invalid ELF header magic: != ELF
[   93.001979][ T7672] loop6: detected capacity change from 0 to 128
[   93.062457][ T7676] bio_check_eod: 10786 callbacks suppressed
[   93.062552][ T7676] syz.6.1660: attempt to access beyond end of device
[   93.062552][ T7676] loop6: rw=2049, sector=145, nr_sectors = 32 limit=128
[   93.090606][ T7676] syz.6.1660: attempt to access beyond end of device
[   93.090606][ T7676] loop6: rw=2049, sector=185, nr_sectors = 8 limit=128
[   93.113650][ T7676] syz.6.1660: attempt to access beyond end of device
[   93.113650][ T7676] loop6: rw=2049, sector=201, nr_sectors = 8 limit=128
[   93.128740][ T7676] syz.6.1660: attempt to access beyond end of device
[   93.128740][ T7676] loop6: rw=2049, sector=217, nr_sectors = 8 limit=128
[   93.142385][ T7676] syz.6.1660: attempt to access beyond end of device
[   93.142385][ T7676] loop6: rw=2049, sector=233, nr_sectors = 8 limit=128
[   93.160164][ T7676] syz.6.1660: attempt to access beyond end of device
[   93.160164][ T7676] loop6: rw=2049, sector=249, nr_sectors = 8 limit=128
[   93.173858][ T7676] syz.6.1660: attempt to access beyond end of device
[   93.173858][ T7676] loop6: rw=2049, sector=265, nr_sectors = 8 limit=128
[   93.201275][ T7676] syz.6.1660: attempt to access beyond end of device
[   93.201275][ T7676] loop6: rw=2049, sector=281, nr_sectors = 8 limit=128
[   93.219403][ T7676] syz.6.1660: attempt to access beyond end of device
[   93.219403][ T7676] loop6: rw=2049, sector=297, nr_sectors = 8 limit=128
[   93.226526][ T7684] netlink: 'syz.4.1665': attribute type 12 has an invalid length.
[   93.234661][ T7676] syz.6.1660: attempt to access beyond end of device
[   93.234661][ T7676] loop6: rw=2049, sector=313, nr_sectors = 8 limit=128
[   93.344726][ T7693] loop5: detected capacity change from 0 to 128
[   93.380126][ T7693] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100)
[   93.388261][ T7693] FAT-fs (loop5): Filesystem has been set read-only
[   93.462847][ T7709] pim6reg1: entered promiscuous mode
[   93.468261][ T7709] pim6reg1: entered allmulticast mode
[   93.509956][ T7714] loop5: detected capacity change from 0 to 764
[   93.583511][ T7718] netlink: 'syz.4.1678': attribute type 10 has an invalid length.
[   93.592671][ T7718] ipvlan0: entered allmulticast mode
[   93.598130][ T7718] veth0_vlan: entered allmulticast mode
[   93.605933][ T7718] team0: Device ipvlan0 failed to register rx_handler
[   93.722037][ T7721] netlink: 'syz.2.1682': attribute type 12 has an invalid length.
[   93.849402][ T4801] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.901515][ T4801] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.944644][ T4801] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.987203][ T4801] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.125881][ T4801] bridge_slave_1: left allmulticast mode
[   94.131646][ T4801] bridge_slave_1: left promiscuous mode
[   94.137370][ T4801] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.145880][ T4801] bridge_slave_0: left allmulticast mode
[   94.151571][ T4801] bridge_slave_0: left promiscuous mode
[   94.157346][ T4801] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.278569][ T4801] $H� (unregistering): (slave bond_slave_0): Releasing backup interface
[   94.288939][ T4801] bond_slave_0: left promiscuous mode
[   94.295861][ T4801] $H� (unregistering): (slave bond_slave_1): Releasing backup interface
[   94.306462][ T4801] bond_slave_1: left promiscuous mode
[   94.313396][ T4801] $H� (unregistering): Released all slaves
[   94.462924][ T7735] chnl_net:caif_netlink_parms(): no params data found
[   94.512445][ T4801] hsr_slave_0: left promiscuous mode
[   94.521707][ T4801] hsr_slave_1: left promiscuous mode
[   94.529480][ T4801] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   94.537041][ T4801] batman_adv: batadv0: Removing interface: batadv_slave_0
[   94.562228][ T4801] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   94.569783][ T4801] batman_adv: batadv0: Removing interface: batadv_slave_1
[   94.582949][ T4801] veth1_macvtap: left promiscuous mode
[   94.588819][ T4801] veth0_macvtap: left promiscuous mode
[   94.595940][ T4801] veth1_vlan: left promiscuous mode
[   94.601477][ T4801] veth0_vlan: left promiscuous mode
[   94.691458][ T4801] team0 (unregistering): Port device team_slave_1 removed
[   94.701780][ T4801] team0 (unregistering): Port device team_slave_0 removed
[   94.768362][ T7735] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.775855][ T7735] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.786257][ T7735] bridge_slave_0: entered allmulticast mode
[   94.792906][ T7735] bridge_slave_0: entered promiscuous mode
[   94.800036][ T7735] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.807355][ T7735] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.814931][ T7735] bridge_slave_1: entered allmulticast mode
[   94.821656][ T7735] bridge_slave_1: entered promiscuous mode
[   94.841882][ T7735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   94.852995][ T7735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   94.875185][ T7735] team0: Port device team_slave_0 added
[   94.882201][ T7735] team0: Port device team_slave_1 added
[   94.903051][ T7735] batman_adv: batadv0: Adding interface: batadv_slave_0
[   94.910170][ T7735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   94.936648][ T7735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   94.967553][ T7735] batman_adv: batadv0: Adding interface: batadv_slave_1
[   94.974597][ T7735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   95.000760][ T7735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   95.044230][ T7773] syzkaller0: entered promiscuous mode
[   95.049768][ T7773] syzkaller0: entered allmulticast mode
[   95.081745][ T7777] -1: renamed from syzkaller0
[   95.098727][ T7735] hsr_slave_0: entered promiscuous mode
[   95.108285][ T7735] hsr_slave_1: entered promiscuous mode
[   95.114750][ T7735] debugfs: 'hsr0' already exists in 'hsr'
[   95.120523][ T7735] Cannot create hsr debugfs directory
[   95.245490][ T7735] netdevsim netdevsim7 netdevsim0: renamed from eth0
[   95.270117][ T7735] netdevsim netdevsim7 netdevsim1: renamed from eth1
[   95.300161][ T7735] netdevsim netdevsim7 netdevsim2: renamed from eth2
[   95.313974][ T7735] netdevsim netdevsim7 netdevsim3: renamed from eth3
[   95.343072][ T7735] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.350220][ T7735] bridge0: port 2(bridge_slave_1) entered forwarding state
[   95.357650][ T7735] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.364733][ T7735] bridge0: port 1(bridge_slave_0) entered forwarding state
[   95.376430][ T4801] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.384683][ T4801] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.415322][ T7803] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in;
[   95.415322][ T7803]    program syz.0.1709 not setting count and/or reply_len properly
[   95.437304][ T7735] 8021q: adding VLAN 0 to HW filter on device bond0
[   95.447040][ T7799] pim6reg1: entered promiscuous mode
[   95.452443][ T7799] pim6reg1: entered allmulticast mode
[   95.470326][ T7735] 8021q: adding VLAN 0 to HW filter on device team0
[   95.483080][ T4801] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.490219][ T4801] bridge0: port 1(bridge_slave_0) entered forwarding state
[   95.501480][ T7807] veth1_to_bond: entered allmulticast mode
[   95.507564][ T7807] veth1_to_bond: entered promiscuous mode
[   95.513587][ T7807] veth1_to_bond: left promiscuous mode
[   95.519325][ T7807] veth1_to_bond: left allmulticast mode
[   95.527034][ T4801] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.534236][ T4801] bridge0: port 2(bridge_slave_1) entered forwarding state
[   95.578723][ T7811] loop6: detected capacity change from 0 to 512
[   95.586045][ T7811] EXT4-fs: Ignoring removed bh option
[   95.592103][ T7811] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem
[   95.609606][ T7811] EXT4-fs (loop6): 1 truncate cleaned up
[   95.616187][ T7811] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   95.650420][ T6750] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   95.682394][ T7820] syz_tun: entered allmulticast mode
[   95.691306][ T7820] pimreg: entered allmulticast mode
[   95.699724][ T7819] syz_tun: left allmulticast mode
[   95.711854][ T7735] 8021q: adding VLAN 0 to HW filter on device batadv0
[   95.731149][ T7825] sd 0:0:1:0: device reset
[   95.834247][ T7735] veth0_vlan: entered promiscuous mode
[   95.842450][ T7735] veth1_vlan: entered promiscuous mode
[   95.858165][ T7735] veth0_macvtap: entered promiscuous mode
[   95.866145][ T7735] veth1_macvtap: entered promiscuous mode
[   95.876718][ T7735] batman_adv: batadv0: Interface activated: batadv_slave_0
[   95.887749][ T7735] batman_adv: batadv0: Interface activated: batadv_slave_1
[   95.898502][ T4756] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   95.907380][ T4756] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   95.916387][ T4756] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.926480][ T4756] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.989152][ T7841] tipc: Started in network mode
[   95.994093][ T7841] tipc: Node identity 1a1e0ba9254e, cluster identity 4711
[   96.001287][ T7841] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   96.010045][ T7841] tipc: Disabling bearer <eth:syzkaller0>
[   96.547026][ T7873] syzkaller0: entered promiscuous mode
[   96.552614][ T7873] syzkaller0: entered allmulticast mode
[   96.559508][ T4756] syzkaller0: tun_net_xmit 48
[   96.568652][ T7873] syzkaller0: tun_net_xmit 1280
[   96.573606][ T7873] syzkaller0: create flow: hash 3395792987 index 1
[   96.582501][ T7872] syzkaller0: delete flow: hash 3395792987 index 1
[   96.803052][ T7891] SELinux: failed to load policy
[   96.879178][   T29] kauditd_printk_skb: 62 callbacks suppressed
[   96.879195][   T29] audit: type=1400 audit(1757984729.569:2245): avc:  denied  { read } for  pid=7894 comm="syz.0.1740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   96.910857][ T7896] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1739'.
[   96.919870][ T7896] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1739'.
[   96.948415][ T7900] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1742'.
[   96.988201][   T29] audit: type=1326 audit(1757984729.669:2246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7902 comm="syz.2.1743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5876b0eba9 code=0x7ffc0000
[   97.011877][   T29] audit: type=1326 audit(1757984729.679:2247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7902 comm="syz.2.1743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f5876b0eba9 code=0x7ffc0000
[   97.035483][   T29] audit: type=1326 audit(1757984729.679:2248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7902 comm="syz.2.1743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5876b0ebe3 code=0x7ffc0000
[   97.085955][   T29] audit: type=1326 audit(1757984729.679:2249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7902 comm="syz.2.1743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5876b0d65f code=0x7ffc0000
[   97.110065][   T29] audit: type=1326 audit(1757984729.709:2250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7902 comm="syz.2.1743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f5876b0ec37 code=0x7ffc0000
[   97.133489][   T29] audit: type=1326 audit(1757984729.729:2251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7902 comm="syz.2.1743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5876b0d510 code=0x7ffc0000
[   97.156950][   T29] audit: type=1326 audit(1757984729.729:2252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7902 comm="syz.2.1743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f5876b0d80a code=0x7ffc0000
[   97.180232][   T29] audit: type=1326 audit(1757984729.729:2253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7902 comm="syz.2.1743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5876b0eba9 code=0x7ffc0000
[   97.203752][   T29] audit: type=1326 audit(1757984729.729:2254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7902 comm="syz.2.1743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5876b0eba9 code=0x7ffc0000
[   97.338880][ T7922] veth0_to_team: entered promiscuous mode
[   97.462629][ T7931] veth1_to_bond: entered allmulticast mode
[   97.473958][ T7932] bond0: (slave dummy0): Releasing backup interface
[   97.495607][ T7932] bridge_slave_0: left allmulticast mode
[   97.501382][ T7932] bridge_slave_0: left promiscuous mode
[   97.507773][ T7932] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.522578][ T7932] bridge_slave_1: left allmulticast mode
[   97.528451][ T7932] bridge_slave_1: left promiscuous mode
[   97.534437][ T7932] bridge0: port 2(bridge_slave_1) entered disabled state
[   97.543342][ T7932] bond0: (slave bond_slave_0): Releasing backup interface
[   97.555271][ T7932] bond0: (slave bond_slave_1): Releasing backup interface
[   97.565926][ T7932] team0: Port device team_slave_0 removed
[   97.573768][ T7932] team0: Port device team_slave_1 removed
[   97.579880][ T7932] batman_adv: batadv0: Removing interface: batadv_slave_0
[   97.596477][ T7932] batman_adv: batadv0: Removing interface: batadv_slave_1
[   97.606653][ T7931] veth1_to_bond: entered promiscuous mode
[   97.614515][ T7931] veth1_to_bond: left promiscuous mode
[   97.620155][ T7931] veth1_to_bond: left allmulticast mode
[   97.715778][ T7959] syzkaller0: entered promiscuous mode
[   97.721334][ T7959] syzkaller0: entered allmulticast mode
[   98.019392][ T7990] netlink: 332 bytes leftover after parsing attributes in process `syz.0.1781'.
[   98.029124][ T7990] netlink: 'syz.0.1781': attribute type 9 has an invalid length.
[   98.037022][ T7990] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1781'.
[   98.046269][ T7990] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1781'.
[   98.523513][ T8004] tmpfs: Bad value for 'mpol'
[   98.692532][ T8013] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   98.720187][ T8013] syzkaller0: entered promiscuous mode
[   98.725859][ T8013] syzkaller0: entered allmulticast mode
[   98.733850][ T8013] tipc: Resetting bearer <eth:syzkaller0>
[   98.742857][ T8012] tipc: Resetting bearer <eth:syzkaller0>
[   98.778834][ T8012] tipc: Disabling bearer <eth:syzkaller0>
[   99.067882][ T8031] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1800'.
[   99.143857][ T8041] pim6reg1: entered promiscuous mode
[   99.149266][ T8041] pim6reg1: entered allmulticast mode
[   99.359975][ T8063] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1814'.
[   99.374261][ T8061] Falling back ldisc for ttyS3.
[   99.677987][ T8093] pim6reg1: entered promiscuous mode
[   99.683329][ T8093] pim6reg1: entered allmulticast mode
[  100.010830][ T8123] netlink: 'syz.4.1837': attribute type 1 has an invalid length.
[  100.018731][ T8123] netlink: 161700 bytes leftover after parsing attributes in process `syz.4.1837'.
[  100.666500][ T8155] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1849'.
[  101.949488][   T29] kauditd_printk_skb: 217 callbacks suppressed
[  101.949504][   T29] audit: type=1400 audit(1757984734.639:2472): avc:  denied  { create } for  pid=8234 comm="syz.2.1882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  101.997560][   T29] audit: type=1400 audit(1757984734.639:2473): avc:  denied  { connect } for  pid=8234 comm="syz.2.1882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  102.017515][   T29] audit: type=1400 audit(1757984734.639:2474): avc:  denied  { ioctl } for  pid=8234 comm="syz.2.1882" path="socket:[21821]" dev="sockfs" ino=21821 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  102.042632][   T29] audit: type=1400 audit(1757984734.639:2475): avc:  denied  { create } for  pid=8234 comm="syz.2.1882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  102.062396][   T29] audit: type=1400 audit(1757984734.639:2476): avc:  denied  { connect } for  pid=8234 comm="syz.2.1882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  102.097590][   T29] audit: type=1400 audit(1757984734.789:2477): avc:  denied  { block_suspend } for  pid=8236 comm="syz.2.1883" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  102.129718][   T29] audit: type=1400 audit(1757984734.819:2478): avc:  denied  { create } for  pid=8238 comm="syz.0.1893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  102.149235][   T29] audit: type=1400 audit(1757984734.819:2479): avc:  denied  { mounton } for  pid=8238 comm="syz.0.1893" path="/397/file0" dev="tmpfs" ino=2068 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  102.272305][ T8240] syzkaller0: entered promiscuous mode
[  102.277922][ T8240] syzkaller0: entered allmulticast mode
[  102.286643][ T8243] Driver unsupported XDP return value 0 on prog  (id 1314) dev N/A, expect packet loss!
[  102.364262][   T29] audit: type=1400 audit(1757984735.049:2480): avc:  denied  { ioctl } for  pid=8244 comm="syz.7.1886" path="socket:[21842]" dev="sockfs" ino=21842 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  102.419565][   T29] audit: type=1400 audit(1757984735.109:2481): avc:  denied  { create } for  pid=8248 comm="syz.7.1888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  102.468514][ T8249] SELinux: failed to load policy
[  102.727641][ T8286] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  102.736519][ T8286] tipc: Disabling bearer <eth:syzkaller0>
[  102.782017][ T8288] syzkaller0: entered promiscuous mode
[  102.787726][ T8288] syzkaller0: entered allmulticast mode
[  103.034145][ T8313] sit0: entered promiscuous mode
[  103.039183][ T8313] sit0: entered allmulticast mode
[  103.079875][ T8297] netlink: 'syz.2.1918': attribute type 10 has an invalid length.
[  103.105228][ T8297] ipvlan0: entered allmulticast mode
[  103.110579][ T8297] veth0_vlan: entered allmulticast mode
[  103.129904][ T8297] team0: Device ipvlan0 failed to register rx_handler
[  103.791925][ T4756] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.887328][ T4756] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.970502][ T4756] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.060073][ T4756] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.169536][ T4756] bridge_slave_1: left allmulticast mode
[  104.175393][ T4756] bridge_slave_1: left promiscuous mode
[  104.181130][ T4756] bridge0: port 2(bridge_slave_1) entered disabled state
[  104.215081][ T4756] bridge_slave_0: left allmulticast mode
[  104.220785][ T4756] bridge_slave_0: left promiscuous mode
[  104.226476][ T4756] bridge0: port 1(bridge_slave_0) entered disabled state
[  104.358848][ T4756] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  104.375551][ T4756] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  104.395112][ T4756] bond0 (unregistering): Released all slaves
[  104.417545][ T8375] smc: net device bond0 applied user defined pnetid SYZ0
[  104.426234][ T8378] smc: net device bond0 erased user defined pnetid SYZ0
[  104.563289][ T4756] hsr_slave_0: left promiscuous mode
[  104.572610][ T4756] hsr_slave_1: left promiscuous mode
[  104.582540][ T4756] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  104.590103][ T4756] batman_adv: batadv0: Removing interface: batadv_slave_0
[  104.604272][ T4756] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  104.611705][ T4756] batman_adv: batadv0: Removing interface: batadv_slave_1
[  104.634086][ T4756] veth1_macvtap: left promiscuous mode
[  104.642873][ T4756] veth0_macvtap: left promiscuous mode
[  104.654154][ T4756] veth1_vlan: left promiscuous mode
[  104.659441][ T4756] veth0_vlan: left promiscuous mode
[  104.820407][ T4756] team0 (unregistering): Port device team_slave_1 removed
[  104.849845][ T4756] team0 (unregistering): Port device team_slave_0 removed
[  104.856982][ T8400] SELinux: failed to load policy
[  104.970917][ T8352] chnl_net:caif_netlink_parms(): no params data found
[  105.038050][ T8352] bridge0: port 1(bridge_slave_0) entered blocking state
[  105.045257][ T8352] bridge0: port 1(bridge_slave_0) entered disabled state
[  105.065671][ T8352] bridge_slave_0: entered allmulticast mode
[  105.072879][ T8352] bridge_slave_0: entered promiscuous mode
[  105.080025][ T8352] bridge0: port 2(bridge_slave_1) entered blocking state
[  105.087230][ T8352] bridge0: port 2(bridge_slave_1) entered disabled state
[  105.095199][ T8352] bridge_slave_1: entered allmulticast mode
[  105.104043][ T8352] bridge_slave_1: entered promiscuous mode
[  105.128561][ T8352] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  105.147699][ T8352] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  105.199900][ T8352] team0: Port device team_slave_0 added
[  105.214400][ T8352] team0: Port device team_slave_1 added
[  105.248869][ T8428] __nla_validate_parse: 1 callbacks suppressed
[  105.248919][ T8428] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1962'.
[  105.274957][ T8352] batman_adv: batadv0: Adding interface: batadv_slave_0
[  105.282065][ T8352] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  105.308177][ T8352] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  105.368499][ T8352] batman_adv: batadv0: Adding interface: batadv_slave_1
[  105.375566][ T8352] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  105.401646][ T8352] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  105.478657][ T8432] SELinux: failed to load policy
[  105.478873][ T8352] hsr_slave_0: entered promiscuous mode
[  105.499719][ T8352] hsr_slave_1: entered promiscuous mode
[  105.510007][ T8352] debugfs: 'hsr0' already exists in 'hsr'
[  105.515868][ T8352] Cannot create hsr debugfs directory
[  105.601224][ T8352] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  105.611315][ T8352] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  105.624419][ T8352] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  105.633159][ T8446] syzkaller0: entered allmulticast mode
[  105.639061][ T8352] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  105.648140][ T8446] syzkaller0: entered promiscuous mode
[  105.657987][ T8446] syzkaller0 (unregistering): left allmulticast mode
[  105.664819][ T8446] syzkaller0 (unregistering): left promiscuous mode
[  105.742616][ T8450] bridge_slave_0: left allmulticast mode
[  105.748422][ T8450] bridge_slave_0: left promiscuous mode
[  105.754191][ T8450] bridge0: port 1(bridge_slave_0) entered disabled state
[  105.763325][ T8450] bridge_slave_1: left allmulticast mode
[  105.769140][ T8450] bridge_slave_1: left promiscuous mode
[  105.774829][ T8450] bridge0: port 2(bridge_slave_1) entered disabled state
[  105.789261][ T8450] bond0: (slave bond_slave_0): Releasing backup interface
[  105.810116][ T8450] bond0: (slave bond_slave_1): Releasing backup interface
[  105.835405][ T8450] team0: Port device team_slave_0 removed
[  105.847382][ T8450] team0: Port device team_slave_1 removed
[  105.855456][ T8450] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  105.862901][ T8450] batman_adv: batadv0: Removing interface: batadv_slave_0
[  105.920425][ T3378] !yz!: Port: 1 Link DOWN
[  105.929138][ T8459] lo speed is unknown, defaulting to 1000
[  105.943551][ T8459] lo speed is unknown, defaulting to 1000
[  105.956289][ T8459] lo speed is unknown, defaulting to 1000
[  105.975295][ T8459] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  105.979514][ T8463] netlink: 'syz.2.1972': attribute type 1 has an invalid length.
[  105.990362][ T8463] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1972'.
[  105.997299][ T8352] 8021q: adding VLAN 0 to HW filter on device bond0
[  106.015474][ T8459] lo speed is unknown, defaulting to 1000
[  106.031729][ T8459] lo speed is unknown, defaulting to 1000
[  106.039174][ T8352] 8021q: adding VLAN 0 to HW filter on device team0
[  106.055491][ T8459] lo speed is unknown, defaulting to 1000
[  106.063424][ T4756] bridge0: port 1(bridge_slave_0) entered blocking state
[  106.070525][ T4756] bridge0: port 1(bridge_slave_0) entered forwarding state
[  106.104325][ T8459] lo speed is unknown, defaulting to 1000
[  106.114417][ T4756] bridge0: port 2(bridge_slave_1) entered blocking state
[  106.121569][ T4756] bridge0: port 2(bridge_slave_1) entered forwarding state
[  106.157036][ T8459] lo speed is unknown, defaulting to 1000
[  106.277700][ T8352] 8021q: adding VLAN 0 to HW filter on device batadv0
[  106.475810][ T8487] syzkaller0: entered promiscuous mode
[  106.481339][ T8487] syzkaller0: entered allmulticast mode
[  106.590313][ T8352] veth0_vlan: entered promiscuous mode
[  106.600114][ T8352] veth1_vlan: entered promiscuous mode
[  106.640040][ T8352] veth0_macvtap: entered promiscuous mode
[  106.648335][ T8352] veth1_macvtap: entered promiscuous mode
[  106.674175][ T8352] batman_adv: batadv0: Interface activated: batadv_slave_0
[  106.683732][ T8352] batman_adv: batadv0: Interface activated: batadv_slave_1
[  106.697790][ T4783] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  106.706866][ T4783] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  106.733624][ T4783] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  106.753122][ T4783] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  106.880915][ T8521] syzkaller0: entered allmulticast mode
[  106.894521][ T8521] syzkaller0: entered promiscuous mode
[  106.913748][ T8521] syzkaller0 (unregistering): left allmulticast mode
[  106.920671][ T8521] syzkaller0 (unregistering): left promiscuous mode
[  107.010643][ T8529] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1991'.
[  107.100644][ T8533] smc: net device bond0 applied user defined pnetid SYZ0
[  107.108283][   T29] kauditd_printk_skb: 163 callbacks suppressed
[  107.108300][   T29] audit: type=1400 audit(1757984739.799:2645): avc:  denied  { write } for  pid=8530 comm="syz.6.1992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  107.134595][ T8533] smc: net device bond0 erased user defined pnetid SYZ0
[  107.233400][   T29] audit: type=1400 audit(1757984739.919:2646): avc:  denied  { relabelfrom } for  pid=8538 comm="syz.2.1996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  107.253421][   T29] audit: type=1400 audit(1757984739.919:2647): avc:  denied  { relabelto } for  pid=8538 comm="syz.2.1996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  107.372586][ T8546] can0: slcan on ptm0.
[  107.696201][ T8545] can0 (unregistered): slcan off ptm0.
[  108.213462][   T29] audit: type=1400 audit(1757984740.899:2648): avc:  denied  { append } for  pid=8570 comm="syz.6.2009" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  108.325243][   T29] audit: type=1400 audit(1757984741.019:2649): avc:  denied  { kexec_image_load } for  pid=8577 comm="syz.6.2012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1
[  108.366790][ T8574] SELinux: failed to load policy
[  108.447460][   T29] audit: type=1400 audit(1757984741.139:2650): avc:  denied  { read } for  pid=8581 comm="syz.8.2014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  108.516396][   T29] audit: type=1400 audit(1757984741.209:2651): avc:  denied  { write } for  pid=8581 comm="syz.8.2014" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1
[  108.576166][ T8592] loop8: detected capacity change from 0 to 512
[  108.617463][ T8592] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  108.648415][ T8592] EXT4-fs (loop8): 1 truncate cleaned up
[  108.656055][ T8592] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  108.678867][   T29] audit: type=1400 audit(1757984741.369:2652): avc:  denied  { mount } for  pid=8591 comm="syz.8.2018" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  108.707992][   T29] audit: type=1400 audit(1757984741.399:2653): avc:  denied  { add_name } for  pid=8591 comm="syz.8.2018" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  108.728902][   T29] audit: type=1400 audit(1757984741.399:2654): avc:  denied  { create } for  pid=8591 comm="syz.8.2018" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  108.926199][ T8352] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  109.004073][ T8602] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8602 comm=syz.8.2020
[  109.040469][ T8603] netlink: 'syz.8.2020': attribute type 1 has an invalid length.
[  109.081711][ T8602] team0: Port device bridge1 added
[  109.588095][ T8635] ������: renamed from vlan1
[  109.602519][ T8637] netlink: 'syz.6.2032': attribute type 12 has an invalid length.
[  109.643195][ T8642] pim6reg1: entered promiscuous mode
[  109.648611][ T8642] pim6reg1: entered allmulticast mode
[  109.788915][ T8652] tipc: Started in network mode
[  109.793859][ T8652] tipc: Node identity 46a96f028803, cluster identity 4711
[  109.801092][ T8652] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  109.813123][ T8652] tipc: Disabling bearer <eth:syzkaller0>
[  110.034095][ T8658] loop8: detected capacity change from 0 to 164
[  110.043490][ T8658] bio_check_eod: 100 callbacks suppressed
[  110.043504][ T8658] syz.8.2043: attempt to access beyond end of device
[  110.043504][ T8658] loop8: rw=524288, sector=263328, nr_sectors = 4 limit=164
[  110.110005][ T8658] syz.8.2043: attempt to access beyond end of device
[  110.110005][ T8658] loop8: rw=0, sector=263328, nr_sectors = 4 limit=164
[  110.568232][ T8696] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2058'.
[  110.724237][ T8707] Falling back ldisc for ttyS3.
[  110.743350][ T8712] siw: device registration error -23
[  111.146122][ T2957] kernel write not supported for file /986/attr/exec (pid: 2957 comm: kworker/0:2)
[  111.528342][ T8758] siw: device registration error -23
[  111.781975][ T8765] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2084'.
[  112.289926][   T29] kauditd_printk_skb: 94 callbacks suppressed
[  112.289944][   T29] audit: type=1400 audit(1757984744.979:2749): avc:  denied  { mounton } for  pid=8780 comm="syz.4.2088" path="/427/file0" dev="tmpfs" ino=2209 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  112.353973][   T29] audit: type=1400 audit(1757984745.019:2750): avc:  denied  { mount } for  pid=8780 comm="syz.4.2088" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  112.376146][   T29] audit: type=1400 audit(1757984745.029:2751): avc:  denied  { unmount } for  pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  112.396686][   T29] audit: type=1400 audit(1757984745.079:2752): avc:  denied  { ioctl } for  pid=8782 comm="syz.0.2091" path="socket:[23064]" dev="sockfs" ino=23064 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  112.467947][ T8789] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1
[  112.476744][ T8789] ref_ctr increment failed for inode: 0x7d offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888103f305c0
[  112.487967][   T29] audit: type=1400 audit(1757984745.159:2753): avc:  denied  { execute } for  pid=8788 comm="syz.8.2093" path="/20/file0" dev="tmpfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  112.510632][   T29] audit: type=1400 audit(1757984745.169:2754): avc:  denied  { name_bind } for  pid=8790 comm="syz.6.2094" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  112.532385][   T29] audit: type=1400 audit(1757984745.169:2755): avc:  denied  { node_bind } for  pid=8790 comm="syz.6.2094" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[  112.603433][   T29] audit: type=1400 audit(1757984745.289:2756): avc:  denied  { tracepoint } for  pid=8794 comm="syz.0.2096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  112.632620][ T8797] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2096'.
[  112.641764][ T8797] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2096'.
[  112.657386][   T29] audit: type=1400 audit(1757984745.349:2757): avc:  denied  { create } for  pid=8784 comm="syz.4.2090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  112.677973][   T29] audit: type=1400 audit(1757984745.379:2758): avc:  denied  { read } for  pid=8784 comm="syz.4.2090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  112.769853][ T8803] infiniband syz1: set active
[  112.774799][ T8803] infiniband syz1: added syz_tun
[  112.806978][ T8803] RDS/IB: syz1: added
[  112.814180][ T8803] smc: adding ib device syz1 with port count 1
[  112.820435][ T8803] smc:    ib device syz1 port 1 has pnetid 
[  112.886005][ T8815] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  112.955450][ T8821] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  113.006855][ T8826] sd 0:0:1:0: device reset
[  113.111624][ T8834] pim6reg1: entered promiscuous mode
[  113.117129][ T8834] pim6reg1: entered allmulticast mode
[  113.310517][ T8854] sch_tbf: burst 88 is lower than device ipvlan0 mtu (1514) !
[  113.366979][ T8858] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  114.095570][ T8893] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2146'.
[  114.131285][ T8900] vxcan1: entered allmulticast mode
[  114.357121][ T8930] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2153'.
[  114.366339][ T8930] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2153'.
[  114.453212][ T8938] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2157'.
[  114.490297][ T8938] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2157'.
[  114.522449][ T8943] netlink: 'syz.8.2158': attribute type 13 has an invalid length.
[  114.545812][ T8943] gretap0: refused to change device tx_queue_len
[  114.562530][ T8943] net_ratelimit: 1 callbacks suppressed
[  114.562550][ T8943] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  114.619531][ T8949] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2160'.
[  114.862987][ T8973] netlink: 'syz.6.2180': attribute type 4 has an invalid length.
[  114.898893][ T8973] netlink: 'syz.6.2180': attribute type 4 has an invalid length.
[  114.930700][ T1035] lo speed is unknown, defaulting to 1000
[  114.945811][ T1035] lo speed is unknown, defaulting to 1000
[  115.338938][ T9010] rdma_rxe: rxe_newlink: failed to add syz_tun
[  115.688692][ T9033] SELinux: failed to load policy
[  116.061167][ T1035] hid_parser_main: 34 callbacks suppressed
[  116.061224][ T1035] hid-generic 0000:0000:0000.000B: unknown main item tag 0x1
[  116.074593][ T1035] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  116.082066][ T1035] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  116.089506][ T1035] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  116.096953][ T1035] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  116.104510][ T1035] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  116.111956][ T1035] hid-generic 0000:0000:0000.000B: unknown main item tag 0x4
[  116.119520][ T1035] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  116.127062][ T1035] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  116.134600][ T1035] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  116.142215][ T1035] hid-generic 0000:0000:0000.000B: item fetching failed at offset 41/43
[  116.156360][ T1035] hid-generic 0000:0000:0000.000B: probe with driver hid-generic failed with error -22
[  116.419081][ T9078] pim6reg1: entered promiscuous mode
[  116.424594][ T9078] pim6reg1: entered allmulticast mode
[  116.505621][ T9081] loop9: detected capacity change from 0 to 7
[  116.512365][ T9081] Buffer I/O error on dev loop9, logical block 0, async page read
[  116.520587][ T9081] Buffer I/O error on dev loop9, logical block 0, async page read
[  116.528504][ T9081]  loop9: unable to read partition table
[  116.534565][ T9081] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[  116.534565][ T9081] 
) failed (rc=-5)
[  116.538121][ T9083] syzkaller0: entered allmulticast mode
[  116.559367][ T9083] syzkaller0: entered promiscuous mode
[  116.567628][ T9083] syzkaller0 (unregistering): left allmulticast mode
[  116.574518][ T9083] syzkaller0 (unregistering): left promiscuous mode
[  116.747789][ T9097] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2224'.
[  116.767406][ T9095] syzkaller0: entered promiscuous mode
[  116.773002][ T9095] syzkaller0: entered allmulticast mode
[  116.837747][ T9091] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.883805][ T9098] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  116.896187][ T9098] block device autoloading is deprecated and will be removed.
[  116.913145][ T9091] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.974991][ T9091] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.027959][ T9091] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.111168][ T4783] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  117.122770][ T4754] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  117.133504][ T4754] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  117.146293][ T4783] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  117.420595][   T29] kauditd_printk_skb: 187 callbacks suppressed
[  117.420612][   T29] audit: type=1400 audit(1757984750.109:2946): avc:  denied  { write } for  pid=9136 comm="syz.2.2240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  117.447238][   T29] audit: type=1400 audit(1757984750.109:2947): avc:  denied  { nlmsg_write } for  pid=9136 comm="syz.2.2240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  117.632475][   T29] audit: type=1400 audit(1757984750.319:2948): avc:  denied  { create } for  pid=9141 comm="syz.4.2241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  117.658140][   T29] audit: type=1400 audit(1757984750.349:2949): avc:  denied  { accept } for  pid=9141 comm="syz.4.2241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  117.706577][   T29] audit: type=1400 audit(1757984750.389:2950): avc:  denied  { cpu } for  pid=9144 comm="syz.0.2243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  117.790087][ T9152] syzkaller0: entered promiscuous mode
[  117.795716][ T9152] syzkaller0: entered allmulticast mode
[  118.030982][   T29] audit: type=1400 audit(1757984750.719:2951): avc:  denied  { write } for  pid=9169 comm="syz.8.2250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  118.049097][ T9168] syzkaller0: entered promiscuous mode
[  118.056096][ T9168] syzkaller0: entered allmulticast mode
[  118.373950][ T9178] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2253'.
[  118.429153][   T29] audit: type=1400 audit(1757984751.119:2952): avc:  denied  { remount } for  pid=9181 comm="syz.2.2254" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  118.540406][   T29] audit: type=1400 audit(1757984751.229:2953): avc:  denied  { bind } for  pid=9187 comm="syz.8.2257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  118.572958][   T29] audit: type=1400 audit(1757984751.259:2954): avc:  denied  { setopt } for  pid=9187 comm="syz.8.2257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  118.593110][   T29] audit: type=1400 audit(1757984751.259:2955): avc:  denied  { write } for  pid=9187 comm="syz.8.2257" path="socket:[24892]" dev="sockfs" ino=24892 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  118.641010][ T9190] batman_adv: batadv0: Removing interface: batadv_slave_0
[  118.651278][ T9190] batman_adv: batadv0: Removing interface: batadv_slave_1
[  118.670497][ T9192] netlink: 360 bytes leftover after parsing attributes in process `syz.2.2259'.
[  118.730810][ T9196] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2262'.
[  118.850912][ T9201] -1: renamed from syzkaller0
[  118.876977][ T9205] netlink: 'syz.0.2266': attribute type 10 has an invalid length.
[  118.904944][ T9205] 8021q: adding VLAN 0 to HW filter on device bond0
[  118.937608][ T9205] team0: Port device bond0 added
[  118.960031][ T9207] SELinux: failed to load policy
[  118.971788][ T9210] netlink: 'syz.8.2267': attribute type 1 has an invalid length.
[  118.979640][ T9210] netlink: 224 bytes leftover after parsing attributes in process `syz.8.2267'.
[  119.020158][ T9212] syzkaller0: entered promiscuous mode
[  119.025978][ T9212] syzkaller0: entered allmulticast mode
[  119.225862][ T9230] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2276'.
[  119.409094][    T9] hid-generic 0000:0000:0000.000C: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  119.613826][ T9275] syzkaller1: entered promiscuous mode
[  119.619570][ T9275] syzkaller1: entered allmulticast mode
[  119.649373][ T9266] lo speed is unknown, defaulting to 1000
[  119.750612][ T9282] netlink: 'syz.6.2297': attribute type 1 has an invalid length.
[  120.105920][ T9304] binfmt_misc: register: failed to install interpreter file ./file2
[  120.269627][ T9318] netlink: 'syz.6.2311': attribute type 1 has an invalid length.
[  120.277474][ T9318] netlink: 161700 bytes leftover after parsing attributes in process `syz.6.2311'.
[  120.594156][ T9329] smc: net device bond0 applied user defined pnetid SYZ0
[  120.607292][ T9329] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0
[  120.636292][ T9329] smc: net device bond0 erased user defined pnetid SYZ0
[  120.643699][ T9329] smc: ib device syz1 ibport 1 erased user defined pnetid SYZ0
[  120.769584][ T9339] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2320'.
[  121.422025][ T9376] loop9: detected capacity change from 0 to 7
[  121.441453][ T9376] Buffer I/O error on dev loop9, logical block 0, async page read
[  121.460381][ T9376] Buffer I/O error on dev loop9, logical block 0, async page read
[  121.468414][ T9376]  loop9: unable to read partition table
[  121.501051][ T9376] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[  121.501051][ T9376] 
) failed (rc=-5)
[  121.623216][ T9390] netlink: 'syz.4.2338': attribute type 10 has an invalid length.
[  121.633408][ T9390] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2338'.
[  121.660379][ T9390] dummy0: entered promiscuous mode
[  121.692147][ T9390] bridge0: port 1(dummy0) entered blocking state
[  121.700157][ T9390] bridge0: port 1(dummy0) entered disabled state
[  121.736620][ T9390] dummy0: entered allmulticast mode
[  121.847491][ T9398] syz_tun: entered allmulticast mode
[  121.863603][ T9397] syz_tun: left allmulticast mode
[  121.925821][ T9392] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.996790][ T9415] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2347'.
[  122.007453][ T9392] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.093415][ T9423] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2350'.
[  122.117116][ T9392] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.180191][ T9392] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.271316][ T4802] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  122.289822][ T4802] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  122.289859][ T4802] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  122.300325][ T4802] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  122.519812][   T29] kauditd_printk_skb: 73 callbacks suppressed
[  122.519826][   T29] audit: type=1400 audit(1757984755.209:3029): avc:  denied  { bind } for  pid=9444 comm="syz.4.2359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  122.569108][   T29] audit: type=1326 audit(1757984755.259:3030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9447 comm="syz.4.2360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf9bd3eba9 code=0x7ffc0000
[  122.598419][   T29] audit: type=1326 audit(1757984755.259:3031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9447 comm="syz.4.2360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf9bd3eba9 code=0x7ffc0000
[  122.598453][   T29] audit: type=1326 audit(1757984755.259:3032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9447 comm="syz.4.2360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcf9bd3d510 code=0x7ffc0000
[  122.598483][   T29] audit: type=1326 audit(1757984755.259:3033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9447 comm="syz.4.2360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcf9bd3d510 code=0x7ffc0000
[  122.598516][   T29] audit: type=1326 audit(1757984755.259:3034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9447 comm="syz.4.2360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf9bd3eba9 code=0x7ffc0000
[  122.598550][   T29] audit: type=1326 audit(1757984755.259:3035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9447 comm="syz.4.2360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcf9bd3eba9 code=0x7ffc0000
[  122.598578][   T29] audit: type=1326 audit(1757984755.259:3036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9447 comm="syz.4.2360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf9bd3eba9 code=0x7ffc0000
[  122.598610][   T29] audit: type=1326 audit(1757984755.259:3037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9447 comm="syz.4.2360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7fcf9bd3eba9 code=0x7ffc0000
[  122.598711][   T29] audit: type=1326 audit(1757984755.259:3038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9447 comm="syz.4.2360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf9bd3eba9 code=0x7ffc0000
[  122.848303][ T9456] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  122.857893][ T9455] tipc: Resetting bearer <eth:syzkaller0>
[  122.875634][ T9455] tipc: Disabling bearer <eth:syzkaller0>
[  123.195008][ T9470] netlink: 4 bytes leftover after parsing attributes in process `+}[@'.
[  123.260534][ T9474] syzkaller0: entered promiscuous mode
[  123.266200][ T9474] syzkaller0: entered allmulticast mode
[  123.310640][ T9475] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.476895][ T9479] tipc: New replicast peer: 10.1.1.2
[  123.482341][ T9479] tipc: Enabled bearer <udp:syz2>, priority 10
[  123.503862][ T9475] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.554736][ T9481] pim6reg1: entered promiscuous mode
[  123.560091][ T9481] pim6reg1: entered allmulticast mode
[  123.598826][ T9475] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.661138][ T9475] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.717884][ T9487] macsec0: entered allmulticast mode
[  123.766998][ T4783] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  123.781990][ T4783] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  123.820694][ T4783] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  123.854110][ T4783] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  124.025050][ T9507] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2385'.
[  124.205360][ T9497] lo speed is unknown, defaulting to 1000
[  124.419383][ T9497] chnl_net:caif_netlink_parms(): no params data found
[  124.523371][ T9497] bridge0: port 1(bridge_slave_0) entered blocking state
[  124.530531][ T9497] bridge0: port 1(bridge_slave_0) entered disabled state
[  124.539364][ T9497] bridge_slave_0: entered allmulticast mode
[  124.546198][ T9497] bridge_slave_0: entered promiscuous mode
[  124.553264][ T9497] bridge0: port 2(bridge_slave_1) entered blocking state
[  124.560385][ T9497] bridge0: port 2(bridge_slave_1) entered disabled state
[  124.568950][ T9497] bridge_slave_1: entered allmulticast mode
[  124.575644][ T9497] bridge_slave_1: entered promiscuous mode
[  124.595052][ T2957] tipc: Node number set to 3467276034
[  124.609328][ T9497] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  124.630360][ T9497] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  124.673142][ T9497] team0: Port device team_slave_0 added
[  124.682600][ T9497] team0: Port device team_slave_1 added
[  124.719327][ T9536] rdma_rxe: rxe_newlink: failed to add syz_tun
[  124.741282][ T9497] batman_adv: batadv0: Adding interface: batadv_slave_0
[  124.748314][ T9497] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  124.774345][ T9497] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  124.834814][ T9497] batman_adv: batadv0: Adding interface: batadv_slave_1
[  124.841815][ T9497] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  124.867970][ T9497] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  124.965780][ T9497] hsr_slave_0: entered promiscuous mode
[  124.982124][ T9497] hsr_slave_1: entered promiscuous mode
[  124.992051][ T9497] debugfs: 'hsr0' already exists in 'hsr'
[  124.997865][ T9497] Cannot create hsr debugfs directory
[  125.188887][ T9497] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  125.226569][ T9497] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  125.245876][ T9497] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  125.266539][ T9497] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  125.356771][ T9556] netlink: 'syz.0.2398': attribute type 4 has an invalid length.
[  125.369639][ T9556] netlink: 'syz.0.2398': attribute type 4 has an invalid length.
[  125.375975][ T9497] 8021q: adding VLAN 0 to HW filter on device bond0
[  125.393975][ T9497] 8021q: adding VLAN 0 to HW filter on device team0
[  125.411141][ T4813] bridge0: port 1(bridge_slave_0) entered blocking state
[  125.418366][ T4813] bridge0: port 1(bridge_slave_0) entered forwarding state
[  125.432457][ T4780] bridge0: port 2(bridge_slave_1) entered blocking state
[  125.439688][ T4780] bridge0: port 2(bridge_slave_1) entered forwarding state
[  125.458699][ T9497] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  125.469263][ T9497] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  125.546327][ T9497] 8021q: adding VLAN 0 to HW filter on device batadv0
[  125.680960][ T9497] veth0_vlan: entered promiscuous mode
[  125.690756][ T9497] veth1_vlan: entered promiscuous mode
[  125.710973][ T9497] veth0_macvtap: entered promiscuous mode
[  125.719287][ T9497] veth1_macvtap: entered promiscuous mode
[  125.732662][ T9497] batman_adv: batadv0: Interface activated: batadv_slave_0
[  125.746321][ T9497] batman_adv: batadv0: Interface activated: batadv_slave_1
[  125.758023][ T4813] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  125.767433][ T4813] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  125.778978][ T4813] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  125.788438][ T4813] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  125.852461][ T9589] loop9: detected capacity change from 0 to 1024
[  125.874373][ T9589] EXT4-fs: Ignoring removed nomblk_io_submit option
[  125.896842][ T9589] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002]
[  125.914091][ T9589] System zones: 0-1, 3-12
[  125.924772][ T9589] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  125.954610][ T9497] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  126.211507][ T9611] loop9: detected capacity change from 0 to 1024
[  126.282711][ T9611] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  126.300242][ T9611] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4183: comm syz.9.2410: Allocating blocks 385-513 which overlap fs metadata
[  126.319118][ T9611] EXT4-fs (loop9): pa ffff8881054bf7e0: logic 16, phys. 129, len 24
[  126.327335][ T9611] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8
[  126.341047][ T9611] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 28 with max blocks 4 with error 28
[  126.353463][ T9611] EXT4-fs (loop9): This should not happen!! Data will be lost
[  126.353463][ T9611] 
[  126.363180][ T9611] EXT4-fs (loop9): Total free blocks count 0
[  126.369306][ T9611] EXT4-fs (loop9): Free/Dirty block details
[  126.375330][ T9611] EXT4-fs (loop9): free_blocks=128
[  126.380467][ T9611] EXT4-fs (loop9): dirty_blocks=0
[  126.385569][ T9611] EXT4-fs (loop9): Block reservation details
[  126.391575][ T9611] EXT4-fs (loop9): i_reserved_data_blocks=0
[  126.444231][ T9624] loop9: detected capacity change from 0 to 1024
[  126.456754][ T9624] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  126.472876][ T9624] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4183: comm syz.9.2417: Allocating blocks 385-513 which overlap fs metadata
[  126.498212][ T9624] EXT4-fs (loop9): pa ffff8881054bf7e0: logic 16, phys. 129, len 24
[  126.506276][ T9624] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8
[  126.518676][ T9624] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 28 with max blocks 4 with error 28
[  126.531082][ T9624] EXT4-fs (loop9): This should not happen!! Data will be lost
[  126.531082][ T9624] 
[  126.541130][ T9624] EXT4-fs (loop9): Total free blocks count 0
[  126.547157][ T9624] EXT4-fs (loop9): Free/Dirty block details
[  126.553075][ T9624] EXT4-fs (loop9): free_blocks=128
[  126.558224][ T9624] EXT4-fs (loop9): dirty_blocks=0
[  126.563276][ T9624] EXT4-fs (loop9): Block reservation details
[  126.569366][ T9624] EXT4-fs (loop9): i_reserved_data_blocks=0
[  126.664826][ T9640] tipc: New replicast peer: 255.255.255.83
[  126.670904][ T9640] tipc: Enabled bearer <udp:�>, priority 10
[  126.744118][ T2957] ==================================================================
[  126.752257][ T2957] BUG: KCSAN: data-race in kick_pool / wq_worker_running
[  126.759301][ T2957] 
[  126.761616][ T2957] read-write to 0xffff888237d29d64 of 4 bytes by task 3398 on cpu 1:
[  126.769851][ T2957]  wq_worker_running+0x95/0x120
[  126.774711][ T2957]  schedule_timeout+0xb7/0x170
[  126.779480][ T2957]  msleep+0x50/0x90
[  126.783300][ T2957]  nsim_fib_event_work+0x1ebc/0x21a0
[  126.788771][ T2957]  process_scheduled_works+0x4cb/0x9d0
[  126.794255][ T2957]  worker_thread+0x582/0x770
[  126.798945][ T2957]  kthread+0x489/0x510
[  126.803021][ T2957]  ret_from_fork+0x11f/0x1b0
[  126.807612][ T2957]  ret_from_fork_asm+0x1a/0x30
[  126.812380][ T2957] 
[  126.814697][ T2957] read to 0xffff888237d29d64 of 4 bytes by task 2957 on cpu 0:
[  126.822250][ T2957]  kick_pool+0x49/0x2d0
[  126.826402][ T2957]  __queue_work+0x8cb/0xb50
[  126.830899][ T2957]  queue_work_on+0xd1/0x160
[  126.835399][ T2957]  wg_queue_enqueue_per_peer_tx+0x119/0x270
[  126.841291][ T2957]  wg_packet_encrypt_worker+0x9e1/0xb80
[  126.846839][ T2957]  process_scheduled_works+0x4cb/0x9d0
[  126.852317][ T2957]  worker_thread+0x582/0x770
[  126.856928][ T2957]  kthread+0x489/0x510
[  126.861018][ T2957]  ret_from_fork+0x11f/0x1b0
[  126.865626][ T2957]  ret_from_fork_asm+0x1a/0x30
[  126.870396][ T2957] 
[  126.872716][ T2957] value changed: 0x00000000 -> 0x00000001
[  126.878606][ T2957] 
[  126.880928][ T2957] Reported by Kernel Concurrency Sanitizer on:
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  126.887084][ T2957] CPU: 0 UID: 0 PID: 2957 Comm: kworker/0:2 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  126.898543][ T2957] Tainted: [W]=WARN
[  126.902348][ T2957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  126.912407][ T2957] Workqueue: wg-crypt-wg0 wg_packet_encrypt_worker
[  126.918930][ T2957] ==================================================================
[  127.477992][ T4802] dummy0: left allmulticast mode
[  127.483085][ T4802] bridge0: port 1(dummy0) entered disabled state
[  127.615435][ T4802] bond0 (unregistering): Released all slaves
[  127.623518][ T4802] bond1 (unregistering): Released all slaves
[  127.636163][ T4813] smc: removing ib device syz1
[  127.642376][   T10] syz1: Port: 1 Link DOWN
[  127.698761][ T4802] tipc: Disabling bearer <udp:�>
[  127.703822][ T4802] tipc: Left network mode
[  127.803645][ T4802] hsr_slave_0: left promiscuous mode
[  127.810620][ T4802] hsr_slave_1: left promiscuous mode
[  127.817219][ T4802] pimreg (unregistering): left allmulticast mode
[  127.830230][ T4756] smc: removing ib device syz0
[  128.166275][ T4802] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.235622][ T4802] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.315456][ T4802] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.355368][ T4802] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.597974][ T4802] bridge_slave_1: left allmulticast mode
[  128.603654][ T4802] bridge_slave_1: left promiscuous mode
[  128.609495][ T4802] bridge0: port 2(bridge_slave_1) entered disabled state
[  128.617425][ T4802] bridge_slave_0: left allmulticast mode
[  128.623072][ T4802] bridge_slave_0: left promiscuous mode
[  128.628870][ T4802] bridge0: port 1(bridge_slave_0) entered disabled state
[  128.637394][ T4802] bridge_slave_1: left allmulticast mode
[  128.643086][ T4802] bridge_slave_1: left promiscuous mode
[  128.648766][ T4802] bridge0: port 2(bridge_slave_1) entered disabled state
[  128.656826][ T4802] bridge_slave_0: left allmulticast mode
[  128.662496][ T4802] bridge_slave_0: left promiscuous mode
[  128.668351][ T4802] bridge0: port 1(bridge_slave_0) entered disabled state
[  128.736022][ T4802] team0: Port device bridge1 removed
[  128.795933][ T4802] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  128.805678][ T4802] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  128.815329][ T4802] bond0 (unregistering): Released all slaves
[  128.866389][ T4802] team0: Port device bond0 removed
[  128.872466][ T4802] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  128.881866][ T4802] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  128.891102][ T4802] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  128.899935][ T4802] bond0 (unregistering): Released all slaves
[  128.908113][ T4802] bond1 (unregistering): Released all slaves
[  128.916859][ T4802] bond2 (unregistering): Released all slaves
[  128.957373][ T4802] tipc: Disabling bearer <udp:syz2>
[  128.962621][ T4802] tipc: Left network mode
[  129.000939][ T4802] hsr_slave_0: left promiscuous mode
[  129.006740][ T4802] hsr_slave_1: left promiscuous mode
[  129.012482][ T4802] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  129.019917][ T4802] batman_adv: batadv0: Removing interface: batadv_slave_0
[  129.027526][ T4802] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  129.035024][ T4802] batman_adv: batadv0: Removing interface: batadv_slave_1
[  129.045489][ T4802] hsr_slave_0: left promiscuous mode
[  129.051105][ T4802] hsr_slave_1: left promiscuous mode
[  129.059462][ T4802] veth1_macvtap: left promiscuous mode
[  129.065044][ T4802] veth0_macvtap: left promiscuous mode
[  129.070602][ T4802] veth1_vlan: left promiscuous mode
[  129.075996][ T4802] veth0_vlan: left promiscuous mode
[  129.138942][ T4802] team0 (unregistering): Port device team_slave_1 removed
[  129.148354][ T4802] team0 (unregistering): Port device team_slave_0 removed
[  129.199256][ T4802] team0 (unregistering): Port device team_slave_1 removed
[  129.208805][ T4802] team0 (unregistering): Port device team_slave_0 removed
[  129.616748][ T4802] IPVS: stop unused estimator thread 0...
[  129.667339][ T4802] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  129.716893][ T4802] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  129.776359][ T4802] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  129.826753][ T4802] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  129.877870][ T4802] bridge_slave_1: left allmulticast mode
[  129.883537][ T4802] bridge_slave_1: left promiscuous mode
[  129.889345][ T4802] bridge0: port 2(bridge_slave_1) entered disabled state
[  129.897178][ T4802] bridge_slave_0: left allmulticast mode
[  129.902832][ T4802] bridge_slave_0: left promiscuous mode
[  129.908712][ T4802] bridge0: port 1(bridge_slave_0) entered disabled state
[  129.978197][ T4802] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  129.988181][ T4802] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  129.997779][ T4802] bond0 (unregistering): Released all slaves
[  130.062645][ T4802] hsr_slave_0: left promiscuous mode
[  130.068733][ T4802] hsr_slave_1: left promiscuous mode
[  130.074651][ T4802] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  130.082031][ T4802] batman_adv: batadv0: Removing interface: batadv_slave_0
[  130.089702][ T4802] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  130.097194][ T4802] batman_adv: batadv0: Removing interface: batadv_slave_1
[  130.107665][ T4802] veth1_macvtap: left promiscuous mode
[  130.113145][ T4802] veth0_macvtap: left promiscuous mode
[  130.118684][ T4802] veth1_vlan: left promiscuous mode
[  130.123984][ T4802] veth0_vlan: left promiscuous mode
[  130.186178][ T4802] team0 (unregistering): Port device team_slave_1 removed
[  130.197622][ T4802] team0 (unregistering): Port device team_slave_0 removed