last executing test programs:

1m12.387602977s ago: executing program 3 (id=430):
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000500)='hrtimer_start\x00', r1}, 0x10)
timer_create(0x0, 0x0, &(0x7f0000000000))
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000500)='hrtimer_start\x00', r2}, 0x10)
timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)

1m12.363901177s ago: executing program 3 (id=431):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000001c0), 0x5, r0}, 0x38)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3)
perf_event_open(0x0, 0x0, 0x0, r2, 0x3)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r4=>0x0})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

1m12.144092877s ago: executing program 3 (id=436):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e0b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket(0x1e, 0x4, 0x0)
r3 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x6, 0x0, 0xffffffff}, 0x10)
sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0), 0x1800}], 0x1}}], 0x1, 0x9200000000000000)
r4 = dup3(r3, r2, 0x0)
recvmmsg(r4, &(0x7f0000003280)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/175, 0xaf}], 0x1}, 0x1}], 0x1, 0x1, 0x0)

1m12.119495907s ago: executing program 3 (id=438):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0)
mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0)
umount2(&(0x7f0000000100)='./file0/file0\x00', 0xb)

1m12.051321006s ago: executing program 3 (id=439):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup3(r0, r1, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0)
shutdown(r1, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/187, 0xfffffffffffffcfb, 0x0, 0x0}, &(0x7f0000000280)=0x40)

1m11.900485276s ago: executing program 3 (id=441):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket(0x10, 0x3, 0x0)
bpf$ENABLE_STATS(0x20, &(0x7f00000001c0), 0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r3}, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}}, 0x0)

1m11.879744196s ago: executing program 32 (id=441):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket(0x10, 0x3, 0x0)
bpf$ENABLE_STATS(0x20, &(0x7f00000001c0), 0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r3}, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}}, 0x0)

1m4.580133976s ago: executing program 4 (id=613):
timer_create(0x0, 0x0, &(0x7f0000bbdffc))
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18)
timer_gettime(0x0, &(0x7f0000000840))

1m4.495163495s ago: executing program 4 (id=614):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10)
r2 = io_uring_setup(0x410d, &(0x7f0000000200)={0x0, 0x60a4, 0x0, 0xfffffffc})
r3 = eventfd2(0x0, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000000000)=r3, 0x1)
io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000001580)={0x3, 0x0, 0x0, &(0x7f00000014c0)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/4094, 0xffe}], &(0x7f0000001540)=[0x0, 0x0, 0x4]}, 0x20)
read$eventfd(r3, &(0x7f0000000040), 0x8)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}, {0x0}, {0x0}], 0x0, 0x3}, 0x20)

1m4.452555425s ago: executing program 4 (id=617):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x4}, 0x18)
connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r4, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2, 0x2}}, 0x26)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r5, 0xffffffffffffffff, 0x0)

1m4.385956195s ago: executing program 4 (id=619):
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x1000410, &(0x7f0000000040)={[{@barrier_val={'barrier', 0x3d, 0x7}}, {@i_version}]}, 0x4, 0x504, &(0x7f0000019940)="$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")
r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
mount$bind(0x0, &(0x7f0000000480)='./file2\x00', 0x0, 0x12081, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x2}}, './file0\x00'})
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)
write$binfmt_register(r0, &(0x7f0000000000)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x7, 0x3a, 'M', 0x3a, 'M', 0x3a, './file2', 0x3a, [0x46]}, 0x2a)
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000))

1m4.076506524s ago: executing program 4 (id=626):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180))
ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'})
r3 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)

1m3.667260944s ago: executing program 4 (id=632):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={0x0}, 0x18)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0xde02})
close(0xffffffffffffffff)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, 0x0)
preadv(r1, &(0x7f0000000400)=[{&(0x7f00000005c0)=""/257, 0x101}], 0x1, 0x8000, 0xc)

1m3.666877234s ago: executing program 33 (id=632):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={0x0}, 0x18)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0xde02})
close(0xffffffffffffffff)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, 0x0)
preadv(r1, &(0x7f0000000400)=[{&(0x7f00000005c0)=""/257, 0x101}], 0x1, 0x8000, 0xc)

44.754458967s ago: executing program 6 (id=1115):
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6f}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000580)={{0x84, @multicast2, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x181a}, {@private=0xa010102, 0x4e20, 0x2, 0xc5, 0x80012d58, 0x12d5c}}, 0x44)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/11], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0)

44.711690436s ago: executing program 6 (id=1116):
syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0xffff, 0x8}}}}}, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4)
shutdown(r0, 0x0)
recvmmsg(r0, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x1a}, 0x3}], 0x1, 0x0, 0x0)
r1 = syz_io_uring_setup(0x24fa, &(0x7f0000000180)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=<r2=>0x0, &(0x7f00000000c0)=<r3=>0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r4, &(0x7f0000000040)=ANY=[@ANYBLOB='5'], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_FADVISE)
io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

44.660878056s ago: executing program 6 (id=1117):
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, @void, @value}, 0x94)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r4}, 0x10)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa000000d})
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000400)={0xa})
epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0)

43.731324445s ago: executing program 6 (id=1134):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x400)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x161090, 0x0)
mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0)
open_tree(r0, &(0x7f0000000640)='\x00', 0x89901)

43.715973015s ago: executing program 6 (id=1135):
bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$PTRACE_SECCOMP_GET_FILTER(0x1a, r0, 0xfffffffffffffffe, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xffffffc1, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181014100000000010000000000000e000a000f00000002800200121f", 0x2e}], 0x1}, 0x0)

43.411276325s ago: executing program 6 (id=1142):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast})
close(r1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x8, &(0x7f00000002c0), &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

43.411143744s ago: executing program 34 (id=1142):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast})
close(r1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x8, &(0x7f00000002c0), &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

3.053366034s ago: executing program 7 (id=1976):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000005c0)='kfree\x00', r1, 0x0, 0x2}, 0x18)
r2 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='dE\x00', 0x0, r2)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000001800)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1<e\a\xa5\x8f\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\xd3K\xfa\xc8\x8d#\xce)\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^\x97\b\x14\xc5\xad\t\f\xdeg\x8d\x16wW\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fBy\x15\x83\xec(B4/#W\xc5\x05\x9d\xd6\x02\fU!a\xdc|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sa\xad\xa6\xb6P\xa3\xf7\xc3\x93\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^\v\xfbO\xf3\xff\x1bf\xedC\xbd\xd1\xf1#\xb3\xe5\t\x9a\xddk\x95\xd5N\xf3\x98\x1a\xa3\xca%N\xf8\xc6\xbcJw\xd8\x99f\xf1\xb5\x93^x|\x05\x00\x00\x00o*\xd3\xab\x05$<\xa3KQm\x00\xd3M\xb2\xd0,\xeeP\x1a\xd0 yI!\x17\x9b\xe7\xef\t\xba\xa0]\xf4\xb7\x00_g/\r\xd2\x06\xc5\x15\x1d\xcc\x0eB\x87\xe9 \x81P\"\xea\xd5#\xa4\xe5\xa1\x19Wp\x83\xf8tC\x10\xbe\xe3\xa9H\xc7\x89\x0eN\xd3\xc1\xd7\x99\xd8\x88\x1dZ\x91\r\xd1\x1c\xac\xe26b\x04\xecB[\xf3Lp\xfcQ\xf8\xec\xa0\x87\xd3\xde\x8bo\xd2\xbb~;\x8d\xc2\xf1\tP\xdfB\"VD\v\x90\xfb`\x8b\xfbr\x87B\xc3\x1c\x99\xe1ft\xd1\xdb\x0e\x86\xa3\xfc;y\x9d\xe6\xe25\x9f9\nj\x8a\xba\xb5\xc7\x92`\xed\x89\xf4\xbd\xc3\xe7l\xa9\xda\xde\xe0\xcf\tN\xb2~\x159\x92\xf60\x0e\xa0\xc2\x17\x8aC\xa5\xcf\xcd\x16\xdb\x83v\xe8\xf1\x82\xe2\xa5\xf0\xc7K\xe4?|\xc9\xdfx\xf0\xb1', &(0x7f0000001600)='\xb8\x8b\xadTd\xdcJ\x03\xf7\n\x11x\xf5\x93Q#\xfe\xb4\xeb\xd9/\x90\xad\xc5\xd0\a\xef\x06$*\xf0\v7>\xa8`\xf1)\xec\xba\xb7\x85\a\x92I\xbb\xfe2\xa0\xc1\xb3\x13p\xa2l', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r2, 0x2, &(0x7f0000000580)='\xa3\x04\x00', &(0x7f00000003c0)="c5", 0x1)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='}.&,[\'.\x00', &(0x7f0000000440)='\xb8\x8b\xadTd\xdcJ\x03\xf7\n\x11x\xf5\x93Q#\xfe\xb4\xeb\xd9/>\x10\xe7\x90\xad\xc5\xd0\a\xef\x06$K\xf0\v7>\xa8`\xf1)\xec\xba\xb7\x85\a\x92I\xbb\xfe2\xa0\xc1\xb3\x13p\x05r\n~\xc4\x03\xab\xda\xbf\x93\x15\xa0\x90a\'\xea\xd8\x8f\xbe$\xf2\xbf;(9jJ6\xf6\xa2\xdb\xfb\xfe\x8d/\xeb\xe6\xc3\xbfd|\xa6\x96\xbaj\x15\x83#\xc0I\x80\xe8\x80UE\x0e\x8e\xd9=\x82\a\xee\xd5\x89\xe4\tRl\x00xl#\\\xed\xd5\xba(tbc\x8bp>.,\xa1\xfb\xfeP\xc3\x94r6\xb6M\xc5a\x18\xeb\xf1[7:\xb8i\'q\xf4/r{8P\xa5\xa0\x97\x17\x06\x8f\xf2\xf6MX\xcc', 0x0)
close(r2)

2.864953544s ago: executing program 7 (id=1981):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0xde02})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r3)
ioctl$SIOCSIFHWADDR(r3, 0x8943, 0x0)
preadv(r2, &(0x7f0000000400)=[{&(0x7f00000005c0)=""/257, 0x101}], 0x1, 0x8000, 0xc)

2.756565824s ago: executing program 2 (id=1982):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000540), 0x84)
mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0)
perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x3, 0x82, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xf}, 0x8080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='mm_page_free\x00', r1, 0x0, 0x80000001}, 0x18)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)

2.672320284s ago: executing program 2 (id=1985):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000600)=""/236, 0xec}], 0x2}, 0x23)
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x20}, 0x1f00)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r3}, 0x18)
perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)

2.444763784s ago: executing program 0 (id=1989):
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'})
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240), 0xfe, 0x54b, &(0x7f0000000400)="$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")
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300), 0x111, 0x6}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x111}}, 0x20)
close_range(r0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

2.289953663s ago: executing program 0 (id=1995):
r0 = socket$nl_audit(0x10, 0x3, 0x9)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r1, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x182, 0x0, 0x27)
connect$netlink(r1, &(0x7f0000000000)=@unspec={0x0, 0xe803}, 0xc)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001c40)={'wlan0\x00', &(0x7f0000000140)=@ethtool_ringparam={0x10, 0x4, 0x7ff, 0x1, 0x1, 0x822c, 0x8, 0x6}})
r2 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f00000000c0)=0xc, 0x4)
sendmmsg$inet6(r2, &(0x7f0000004880)=[{{&(0x7f0000000380)={0xa, 0x4e22, 0x0, @mcast2={0xff, 0x2, '\x00', 0xa}, 0x9}, 0x1c, &(0x7f0000000540)=[{&(0x7f00000003c0)="a4de72125546e578", 0xdd86}, {&(0x7f0000000000)="5ccacfca73", 0x5}], 0x2}}], 0x1, 0x0)

2.258299453s ago: executing program 1 (id=1997):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103)
pipe2$9p(&(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r4 = dup(r3)
write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={0x0}}, 0x20)
write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4])

2.233744103s ago: executing program 1 (id=1998):
socket$inet6(0xa, 0x40000080806, 0x0)
io_setup(0x2, &(0x7f0000001700))
r0 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001})
epoll_wait(r3, &(0x7f0000000040)=[{}], 0x1, 0x400)

2.166845253s ago: executing program 0 (id=1999):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x200000000000002a, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000300)={0x0, 0x8000}, 0x4)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0xfffd, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

2.095193743s ago: executing program 5 (id=2000):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010325bd70000000000001"], 0x30}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

2.045348593s ago: executing program 5 (id=2001):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000080)={[{@nolazytime}, {}]}, 0x6, 0x4eb, &(0x7f0000000a40)="$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")
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x58d80, 0x0)
getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, 0x0, &(0x7f00000002c0))
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.idle_time\x00', 0x275a, 0x0)
socket(0x2, 0x80805, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, 0x0)
write$binfmt_script(r1, &(0x7f0000000380), 0x208e24b)
mkdir(0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioctl$EXT4_IOC_MIGRATE(r1, 0x6609)

1.970392773s ago: executing program 7 (id=2002):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000800000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000200180000000000000"], &(0x7f0000000400)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, 0x0, &(0x7f0000048000), 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r2=>0x0})
r3 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')

1.887153613s ago: executing program 0 (id=2003):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x1, 0x168, 0x1, 0x12, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000618110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
pipe2(&(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x800)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
splice(r3, 0x0, r2, 0x0, 0x6, 0x0)
writev(r2, &(0x7f0000000040)=[{&(0x7f0000000000)='5', 0xfdef}], 0x1)
dup3(r3, r2, 0x0)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000936c03"], 0x14}, 0x1, 0x0, 0x0, 0x8000000}, 0x4040)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

1.885548573s ago: executing program 5 (id=2004):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket(0x1, 0x803, 0x0)
unshare(0x62040200)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/stat\x00', 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010200000000000000000000000a20000000000a01010000000000000000010000000900010073797a300000000048000000030a01010000000000000000010000000900010073797a30000000000900030073797a3100000000080007006e617400140004800800014000000000080002"], 0xa4}, 0x1, 0x0, 0x0, 0x80}, 0x0)

1.759311052s ago: executing program 0 (id=2005):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = syz_io_uring_setup(0x1219, &(0x7f0000000480)={0x0, 0xfffffffd, 0x80, 0xffffffff, 0x34e}, &(0x7f0000000980)=<r1=>0x0, &(0x7f0000000080)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10)
r5 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1})
io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0)

1.678591172s ago: executing program 2 (id=2006):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001a40)=@base={0x9, 0x4, 0x3c16, 0x1, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r3}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast})

1.595135802s ago: executing program 5 (id=2007):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
socket$inet6(0xa, 0x40000080806, 0x0)
r1 = syz_io_uring_setup(0x3aec, &(0x7f0000000380)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000200)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffff86})
io_uring_enter(r1, 0x7a98, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$UHID_CREATE(r4, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x0, 0x0, 0x3}}, 0x120)
readv(r4, &(0x7f0000002980)=[{&(0x7f0000000700)=""/163, 0xa3}], 0x2)

1.594745822s ago: executing program 2 (id=2008):
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0xc8, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x7, 0x8000, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, <r1=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000020d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa32"], 0xfdef)

1.515575802s ago: executing program 2 (id=2009):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002040))
ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="0100"})
preadv2(r0, &(0x7f0000000340)=[{&(0x7f0000000100)=""/65, 0x41}], 0x1, 0x0, 0x0, 0x0)

1.505926262s ago: executing program 0 (id=2010):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file3\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_clone3(&(0x7f00000076c0)={0x40008080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

1.218795992s ago: executing program 5 (id=2011):
r0 = socket$key(0xf, 0x3, 0x2)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10)
sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300002095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='percpu_alloc_percpu\x00', r2}, 0x10)
r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f0000000440)={@pptp={0x18, 0x2, {0x1, @multicast2}}, {&(0x7f0000000380)=""/115, 0x73}, &(0x7f0000000400), 0x11}, 0xa0)
syz_io_uring_setup(0x3665, &(0x7f0000000100)={0x0, 0x0, 0x2, 0x0, 0xfffffffd}, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r4, &(0x7f00000000c0), 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0xffffff91}, 0x1c)

1.015278962s ago: executing program 7 (id=2012):
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000", @ANYRES16=r0, @ANYBLOB="09030000000000fdff072000adce04"], 0x18}, 0x1, 0xf000000}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000240), 0x3af4701e)
sendfile(r3, r1, 0x0, 0x10000a007)

823.237201ms ago: executing program 2 (id=2013):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000600)='./file2\x00', 0x404, &(0x7f0000000240), 0x3, 0x42f, &(0x7f0000000940)="$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")
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000000)='kmem_cache_free\x00', r0, 0x0, 0x8000}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0)
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0)
write(r2, &(0x7f0000004200)='t', 0x1)
sendfile(r2, r1, 0x0, 0x3ffff)
sendfile(r2, r1, 0x0, 0x7ffff000)

516.843711ms ago: executing program 1 (id=2014):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
getpid()
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)

323.06192ms ago: executing program 1 (id=2015):
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x1c1c41, 0x6)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001400)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, r2, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r3 = dup(r1)
creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca)
r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'})
write$P9_RLERRORu(r3, &(0x7f0000000300)=ANY=[@ANYBLOB='N'], 0x53)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000010c0)=@security={'security\x00', 0xe, 0x4, 0x2c0, 0xffffffff, 0x98, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x228, 0x228, 0x228, 0xffffffff, 0x4, &(0x7f0000001000), {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0xc, 0x3}}}, {{@ip={@remote, @dev={0xac, 0x14, 0x14, 0x2b}, 0xff000000, 0xff, 'ipvlan1\x00', 'team_slave_0\x00', {}, {}, 0x11, 0x2, 0x62}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, 0x40, 0x6, [0x23, 0x3b, 0xc, 0x1c, 0xb, 0xb, 0x2d, 0x3e, 0x29, 0x3f, 0x3b, 0x2e, 0x28, 0x21, 0x0, 0x8], 0x1, 0x9a37}}}, {{@ip={@broadcast, @broadcast, 0xffffff00, 0xffffff00, 'syz_tun\x00', 'dvmrp1\x00', {0xff}, {}, 0x0, 0x1, 0xc}, 0x0, 0x90, 0xc0, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0x4, 0x3}, {0x1, 0x4, 0x3}, 0x9, 0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x320)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}})

283.6467ms ago: executing program 7 (id=2016):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000000), &(0x7f00000003c0)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x2000000000000000, 0x0, 0x48)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

169.46968ms ago: executing program 1 (id=2017):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r2)
getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x1, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}, {0xc, 0x4}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000008b00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r5}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x1, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {0x0, 0x2}, {0xfff1, 0x9}}}, 0x24}}, 0x0)

40.74864ms ago: executing program 5 (id=2018):
clock_adjtime(0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_config_ext={0x8, 0x81}, 0x140, 0x1, 0x3, 0x5, 0x0, 0x8, 0x5d, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socket$inet_mptcp(0x2, 0x1, 0x106)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
syz_open_dev$sg(0x0, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)

15.33895ms ago: executing program 7 (id=2019):
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r0}, 0x10)
socket(0x10, 0x803, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000880), 0x151580, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f00000012c0)='sys_enter\x00', r3}, 0x10)
getgid()

0s ago: executing program 1 (id=2020):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff08000000"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1}, 0x10)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000540), 0x84)
mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0)
perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x200000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x9}, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1e, 0x12, r3, 0x0)

kernel console output (not intermixed with test programs):

available UDC or it's busy
[   76.027706][   T29] audit: type=1400 audit(1737241811.325:2197): avc:  denied  { read write } for  pid=5921 comm="syz.6.937" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   76.032635][ T5925] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   76.055847][   T29] audit: type=1400 audit(1737241811.325:2198): avc:  denied  { open } for  pid=5921 comm="syz.6.937" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   76.087101][   T29] audit: type=1400 audit(1737241811.325:2199): avc:  denied  { ioctl } for  pid=5921 comm="syz.6.937" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   76.132141][   T29] audit: type=1400 audit(1737241811.425:2200): avc:  denied  { unmount } for  pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[   76.194126][   T29] audit: type=1400 audit(1737241811.495:2201): avc:  denied  { create } for  pid=5928 comm="syz.5.941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   76.250368][   T29] audit: type=1400 audit(1737241811.545:2202): avc:  denied  { execmem } for  pid=5938 comm="syz.0.945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   76.256407][ T5937] loop1: detected capacity change from 0 to 2048
[   76.291553][ T5943] loop2: detected capacity change from 0 to 128
[   76.299969][ T5937]  loop1: p1 < > p4
[   76.308148][ T5937] loop1: p4 size 8388608 extends beyond EOD, truncated
[   76.371956][   T29] audit: type=1400 audit(1737241811.665:2203): avc:  denied  { mounton } for  pid=5942 comm="syz.2.947" path="/181/file0/file0" dev="loop2" ino=37 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1
[   76.395456][ T3502] udevd[3502]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[   76.408388][ T4094] udevd[4094]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[   76.460783][   T29] audit: type=1326 audit(1737241811.715:2204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5947 comm="syz.1.948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b72595d29 code=0x7ffc0000
[   76.484285][   T29] audit: type=1326 audit(1737241811.715:2205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5947 comm="syz.1.948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0b72595d29 code=0x7ffc0000
[   76.593816][ T5959] syz.2.953[5959] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   76.593896][ T5959] syz.2.953[5959] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   76.618189][ T5959] syz.2.953[5959] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   76.644744][ T5962] veth0_vlan: entered allmulticast mode
[   76.672137][ T5962] 
€Â: renamed from vlan0
[   76.803014][ T5974] loop6: detected capacity change from 0 to 512
[   76.882825][ T5977] loop6: detected capacity change from 0 to 512
[   76.895186][ T5977] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   76.907934][ T5977] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   77.023797][ T5173] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   77.044535][ T5983] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[   77.126457][ T5989] SELinux:  Context system_u:object_r:hald_log_t:s0 is not valid (left unmapped).
[   77.144125][ T5991] loop6: detected capacity change from 0 to 1024
[   77.167274][ T5991] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   77.180008][ T5991] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   77.212623][ T5173] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   77.281317][ T6002] bond1: entered promiscuous mode
[   77.286603][ T6002] bond1: entered allmulticast mode
[   77.292300][ T6002] 8021q: adding VLAN 0 to HW filter on device bond1
[   77.303843][ T6002] bond1 (unregistering): Released all slaves
[   77.331093][ T6008] loop6: detected capacity change from 0 to 164
[   77.420749][ T6012] loop6: detected capacity change from 0 to 8192
[   77.460640][ T6016] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   77.493109][ T6020] netlink: 'syz.1.976': attribute type 7 has an invalid length.
[   77.500906][ T6020] netlink: 8 bytes leftover after parsing attributes in process `syz.1.976'.
[   77.580496][ T6029] IPv4: Oversized IP packet from 172.20.20.24
[   77.586803][    C1] IPv4: Oversized IP packet from 172.20.20.24
[   77.593029][    C1] IPv4: Oversized IP packet from 172.20.20.24
[   77.701892][ T6040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   77.732909][ T6040] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   77.752441][ T6039] loop2: detected capacity change from 0 to 8192
[   77.768160][ T6039] +}[@: attempt to access beyond end of device
[   77.768160][ T6039] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192
[   77.782597][ T6039] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1)
[   77.790578][ T6039] FAT-fs (loop2): Filesystem has been set read-only
[   77.799643][ T6039] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1)
[   77.807741][ T6039] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1)
[   78.028016][ T6066] netlink: 76 bytes leftover after parsing attributes in process `syz.2.999'.
[   78.059879][ T6069] xfrm1: entered allmulticast mode
[   78.088568][ T6069] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1000'.
[   78.123586][ T6077] netlink: 'syz.5.1002': attribute type 7 has an invalid length.
[   78.131365][ T6077] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1002'.
[   78.246935][ T6085] loop5: detected capacity change from 0 to 512
[   78.253600][ T6081] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1001'.
[   78.284639][ T6085] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[   78.297300][ T6085] ext4 filesystem being mounted at /145/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   78.386011][ T4617] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[   78.393519][ T6105] loop6: detected capacity change from 0 to 1024
[   78.419092][ T6105] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   78.484963][ T5173] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   78.587972][ T6128] rdma_rxe: rxe_newlink: failed to add veth0_to_bond
[   78.879439][ T6147] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1028'.
[   78.894534][ T6147] netlink: 'syz.6.1028': attribute type 10 has an invalid length.
[   78.920053][ T6147] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   79.241552][ T6158] tipc: Started in network mode
[   79.246784][ T6158] tipc: Node identity b2fd55d4195a, cluster identity 4711
[   79.254064][ T6158] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   79.318345][ T6158] syzkaller0: entered promiscuous mode
[   79.323981][ T6158] syzkaller0: entered allmulticast mode
[   79.364510][ T6158] tipc: Resetting bearer <eth:syzkaller0>
[   79.489145][ T6157] tipc: Resetting bearer <eth:syzkaller0>
[   79.517445][ T6162] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1035'.
[   79.526754][ T6162] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1035'.
[   79.540737][ T6157] tipc: Disabling bearer <eth:syzkaller0>
[   79.570128][ T6162] geneve2: entered allmulticast mode
[   79.594113][    C1] IPv4: Oversized IP packet from 172.20.20.24
[   79.697356][ T6165] loop6: detected capacity change from 0 to 512
[   79.734204][ T6165] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   79.794902][ T6165] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   79.942634][ T5173] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   80.210848][ T6196] pim6reg1: entered promiscuous mode
[   80.216342][ T6196] pim6reg1: entered allmulticast mode
[   80.392110][ T6213] netlink: zone id is out of range
[   80.491057][ T6229] @: renamed from vlan0
[   80.892106][ T6253] syzkaller0: entered allmulticast mode
[   80.944300][ T6253] syzkaller0 (unregistering): left allmulticast mode
[   81.081810][ T6248] Set syz1 is full, maxelem 65536 reached
[   81.258079][ T6261] loop6: detected capacity change from 0 to 2048
[   81.271528][   T29] kauditd_printk_skb: 150 callbacks suppressed
[   81.271548][   T29] audit: type=1326 audit(1737241816.555:2356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6220 comm="syz.0.1057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dcb785d29 code=0x7fc00000
[   81.328596][ T6261] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   81.396143][ T6261] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 8 with max blocks 2 with error 28
[   81.408482][ T6261] EXT4-fs (loop6): This should not happen!! Data will be lost
[   81.408482][ T6261] 
[   81.418247][ T6261] EXT4-fs (loop6): Total free blocks count 0
[   81.424293][ T6261] EXT4-fs (loop6): Free/Dirty block details
[   81.430307][ T6261] EXT4-fs (loop6): free_blocks=0
[   81.435321][ T6261] EXT4-fs (loop6): dirty_blocks=0
[   81.440445][ T6261] EXT4-fs (loop6): Block reservation details
[   81.446512][ T6261] EXT4-fs (loop6): i_reserved_data_blocks=0
[   81.525106][   T29] audit: type=1326 audit(1737241816.825:2357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6280 comm="syz.2.1082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b134b5d29 code=0x7ffc0000
[   81.553370][   T29] audit: type=1326 audit(1737241816.845:2358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6280 comm="syz.2.1082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b134b5d29 code=0x7ffc0000
[   81.577126][   T29] audit: type=1326 audit(1737241816.845:2359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6280 comm="syz.2.1082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5b134b5d29 code=0x7ffc0000
[   81.600671][   T29] audit: type=1326 audit(1737241816.845:2360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6280 comm="syz.2.1082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b134b5d29 code=0x7ffc0000
[   81.624241][   T29] audit: type=1326 audit(1737241816.845:2361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6280 comm="syz.2.1082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b134b5d29 code=0x7ffc0000
[   81.647758][   T29] audit: type=1326 audit(1737241816.845:2362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6280 comm="syz.2.1082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5b134b5d29 code=0x7ffc0000
[   81.671211][   T29] audit: type=1326 audit(1737241816.845:2363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6280 comm="syz.2.1082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b134b5d29 code=0x7ffc0000
[   81.694641][   T29] audit: type=1326 audit(1737241816.845:2364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6280 comm="syz.2.1082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b134b5d29 code=0x7ffc0000
[   81.718168][   T29] audit: type=1326 audit(1737241816.845:2365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6280 comm="syz.2.1082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5b134b5d29 code=0x7ffc0000
[   81.745326][ T5173] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.157330][ T6292] Set syz1 is full, maxelem 65536 reached
[   82.249266][ T6308] pim6reg1: entered promiscuous mode
[   82.254989][ T6308] pim6reg1: entered allmulticast mode
[   82.407591][ T6316] loop1: detected capacity change from 0 to 1024
[   82.429438][ T6316] EXT4-fs: inline encryption not supported
[   82.445354][ T6316] EXT4-fs: inline encryption not supported
[   82.472534][ T6324] bond_slave_1: mtu less than device minimum
[   82.495019][ T6316] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   82.681819][ T6344] vlan2: entered promiscuous mode
[   82.688050][ T6344] bond0: entered promiscuous mode
[   82.698140][ T6344] bond0: left promiscuous mode
[   82.711773][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.920269][    T9] IPVS: starting estimator thread 0...
[   83.033486][ T6368] IPVS: using max 2016 ests per chain, 100800 per kthread
[   83.150871][ T6382] batman_adv: batadv0: Adding interface: dummy0
[   83.157191][ T6382] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   83.182931][ T6382] batman_adv: batadv0: Interface activated: dummy0
[   83.194878][ T6382] batadv0: mtu less than device minimum
[   83.200854][ T6382] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   83.211659][ T6382] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   83.222667][ T6382] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   83.233635][ T6382] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   83.244497][ T6382] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   83.255331][ T6382] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   83.266106][ T6382] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   83.277208][ T6382] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   83.288134][ T6382] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   83.358320][ T6387] syzkaller0: entered promiscuous mode
[   83.363900][ T6387] syzkaller0: entered allmulticast mode
[   83.374849][ T6394] ip6gre1: entered allmulticast mode
[   83.482262][ T6397] veth0_to_team: entered promiscuous mode
[   83.488222][ T6397] veth0_to_team: entered allmulticast mode
[   83.873662][ T6409] pim6reg1: entered promiscuous mode
[   83.879037][ T6409] pim6reg1: entered allmulticast mode
[   84.201373][ T6428] loop1: detected capacity change from 0 to 164
[   84.210715][ T6428] Unable to read rock-ridge attributes
[   84.218908][ T4870] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.232328][ T6428] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1141'.
[   84.278181][ T4870] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.344263][ T4870] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.415282][ T4870] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.543539][ T4870] bridge_slave_1: left allmulticast mode
[   84.549652][ T4870] bridge_slave_1: left promiscuous mode
[   84.555730][ T4870] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.602951][ T4870] bridge_slave_0: left allmulticast mode
[   84.608676][ T4870] bridge_slave_0: left promiscuous mode
[   84.614425][ T4870] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.778517][ T6468] selinux_netlink_send: 52 callbacks suppressed
[   84.778539][ T6468] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6468 comm=syz.5.1150
[   84.800060][ T4870] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   84.810979][ T4870] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   84.845313][ T4870] bond0 (unregistering): (slave dummy0): Releasing backup interface
[   84.861273][ T6468] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6468 comm=syz.5.1150
[   84.876295][ T4870] bond0 (unregistering): Released all slaves
[   84.894126][ T6468] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6468 comm=syz.5.1150
[   84.909616][ T6439] tipc: Started in network mode
[   84.914571][ T6439] tipc: Node identity ac14140f, cluster identity 4711
[   84.918815][ T6468] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6468 comm=syz.5.1150
[   84.934979][ T6468] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6468 comm=syz.5.1150
[   84.938688][ T6439] tipc: New replicast peer: 255.255.255.255
[   84.949480][ T6468] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6468 comm=syz.5.1150
[   84.953598][ T6439] tipc: Enabled bearer <udp:syz2>, priority 10
[   84.967237][ T6468] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6468 comm=syz.5.1150
[   84.986178][ T4870] tipc: Left network mode
[   85.012872][ T6474] tipc: Cannot configure node identity twice
[   85.033527][ T6468] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6468 comm=syz.5.1150
[   85.053234][ T6468] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6468 comm=syz.5.1150
[   85.076870][ T4870] hsr_slave_0: left promiscuous mode
[   85.083158][ T6468] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6468 comm=syz.5.1150
[   85.095874][ T4870] hsr_slave_1: left promiscuous mode
[   85.108114][ T4870] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   85.115681][ T4870] batman_adv: batadv0: Removing interface: batadv_slave_0
[   85.127251][ T6483] netlink: 'syz.1.1157': attribute type 3 has an invalid length.
[   85.135094][ T6479] loop2: detected capacity change from 0 to 4096
[   85.149476][ T4870] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   85.157102][ T4870] batman_adv: batadv0: Removing interface: batadv_slave_1
[   85.172096][ T6479] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   85.184893][ T4870] veth1_macvtap: left promiscuous mode
[   85.190435][ T4870] veth0_macvtap: left promiscuous mode
[   85.196218][ T4870] veth1_vlan: left promiscuous mode
[   85.234359][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.281765][ T6495] ref_ctr increment failed for inode: 0x45c offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff888117468000
[   85.293525][ T4870] team0 (unregistering): Port device team_slave_1 removed
[   85.310070][ T4870] team0 (unregistering): Port device team_slave_0 removed
[   85.318807][ T6494] uprobe: syz.0.1163:6494 failed to unregister, leaking uprobe
[   85.354516][ T6497] loop2: detected capacity change from 0 to 1024
[   85.363221][ T6497] EXT4-fs: inline encryption not supported
[   85.369251][ T6497] EXT4-fs: inline encryption not supported
[   85.389763][ T6499] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[   85.402551][ T6497] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   85.461430][ T6432] chnl_net:caif_netlink_parms(): no params data found
[   85.517325][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.606231][ T4870] IPVS: stop unused estimator thread 0...
[   85.607338][ T6432] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.619164][ T6432] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.638131][ T6432] bridge_slave_0: entered allmulticast mode
[   85.645526][ T6432] bridge_slave_0: entered promiscuous mode
[   85.652451][ T6432] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.659673][ T6432] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.667102][ T6432] bridge_slave_1: entered allmulticast mode
[   85.674291][ T6432] bridge_slave_1: entered promiscuous mode
[   85.717169][ T6432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   85.745896][ T6432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   85.769884][ T6540] syz.5.1173[6540] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   85.769970][ T6540] syz.5.1173[6540] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   85.790023][ T6540] syz.5.1173[6540] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   85.803465][ T6432] team0: Port device team_slave_0 added
[   85.833161][ T6432] team0: Port device team_slave_1 added
[   85.865778][ T6432] batman_adv: batadv0: Adding interface: batadv_slave_0
[   85.872873][ T6432] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   85.898848][ T6432] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   85.922487][ T6547] netlink: 'syz.5.1174': attribute type 1 has an invalid length.
[   85.981539][ T6547] 8021q: adding VLAN 0 to HW filter on device bond1
[   86.000716][ T6432] batman_adv: batadv0: Adding interface: batadv_slave_1
[   86.007739][ T6432] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.033709][ T6432] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.072762][    T9] tipc: Node number set to 2886997007
[   86.150812][ T6554] 8021q: adding VLAN 0 to HW filter on device batadv1
[   86.161235][ T6554] bond1: (slave batadv1): making interface the new active one
[   86.171540][ T6554] bond1: (slave batadv1): Enslaving as an active interface with an up link
[   86.241982][ T6432] hsr_slave_0: entered promiscuous mode
[   86.251452][ T6432] hsr_slave_1: entered promiscuous mode
[   86.279996][ T6432] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   86.287985][ T6432] Cannot create hsr debugfs directory
[   86.330398][   T29] kauditd_printk_skb: 201 callbacks suppressed
[   86.330413][   T29] audit: type=1400 audit(1737241821.625:2567): avc:  denied  { ioctl } for  pid=6560 comm="syz.5.1175" path="socket:[15032]" dev="sockfs" ino=15032 ioctlcmd=0x8923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   86.357154][ T6562] 
: renamed from bond0 (while UP)
[   86.513676][ T6577] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1178'.
[   86.529425][ T6577] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1178'.
[   86.544845][ T6576] syzkaller0: entered allmulticast mode
[   86.554422][ T6576] syzkaller0 (unregistering): left allmulticast mode
[   86.632824][   T29] audit: type=1400 audit(1737241821.905:2568): avc:  denied  { setopt } for  pid=6591 comm="syz.0.1183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   86.635718][ T6432] netdevsim netdevsim7 netdevsim0: renamed from eth0
[   86.681245][ T6432] netdevsim netdevsim7 netdevsim1: renamed from eth1
[   86.704800][   T29] audit: type=1400 audit(1737241821.995:2569): avc:  denied  { unlink } for  pid=2982 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   86.732668][ T6432] netdevsim netdevsim7 netdevsim2: renamed from eth2
[   86.746145][ T6432] netdevsim netdevsim7 netdevsim3: renamed from eth3
[   86.811491][ T6432] 8021q: adding VLAN 0 to HW filter on device bond0
[   86.827869][ T6432] 8021q: adding VLAN 0 to HW filter on device team0
[   86.837986][ T4859] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.845207][ T4859] bridge0: port 1(bridge_slave_0) entered forwarding state
[   86.867808][ T6432] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   86.878332][ T6432] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   86.898006][   T29] audit: type=1326 audit(1737241822.195:2570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6617 comm="syz.1.1189" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0b72595d29 code=0x0
[   86.899465][ T4859] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.928149][ T4859] bridge0: port 2(bridge_slave_1) entered forwarding state
[   87.014013][ T6432] 8021q: adding VLAN 0 to HW filter on device batadv0
[   87.309486][ T6432] veth0_vlan: entered promiscuous mode
[   87.326537][ T6432] veth1_vlan: entered promiscuous mode
[   87.347042][ T6432] veth0_macvtap: entered promiscuous mode
[   87.361819][ T6432] veth1_macvtap: entered promiscuous mode
[   87.387849][ T6432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   87.398440][ T6432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.408376][ T6432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   87.418863][ T6432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.481755][   T29] audit: type=1400 audit(1737241822.775:2571): avc:  denied  { write } for  pid=6683 comm="syz.2.1197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[   87.488439][ T6432] batman_adv: batadv0: Interface activated: batadv_slave_0
[   87.514123][ T6686] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1196'.
[   87.517352][ T6432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   87.533714][ T6432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.543804][ T6432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   87.554425][ T6432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.565706][ T6432] batman_adv: batadv0: Interface activated: batadv_slave_1
[   87.574801][ T6432] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.583627][ T6432] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   87.592453][ T6432] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.601258][ T6432] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   87.730999][    T8] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0
[   87.738679][    T8] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0
[   87.748861][    T8] hid-generic 0000:0003:0000.0004: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[   87.789342][   T29] audit: type=1326 audit(1737241823.085:2572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6703 comm="syz.7.1143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe61cc55d29 code=0x7ffc0000
[   87.813040][   T29] audit: type=1326 audit(1737241823.085:2573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6703 comm="syz.7.1143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe61cc55d29 code=0x7ffc0000
[   87.836717][   T29] audit: type=1326 audit(1737241823.085:2574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6703 comm="syz.7.1143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fe61cc55d29 code=0x7ffc0000
[   87.860279][   T29] audit: type=1326 audit(1737241823.085:2575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6703 comm="syz.7.1143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe61cc55d29 code=0x7ffc0000
[   87.883941][   T29] audit: type=1326 audit(1737241823.085:2576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6703 comm="syz.7.1143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe61cc55d29 code=0x7ffc0000
[   87.948703][ T6701] syzkaller0: entered promiscuous mode
[   87.954824][ T6701] syzkaller0: entered allmulticast mode
[   88.350604][ T6742] syzkaller0: entered allmulticast mode
[   88.571461][ T6769] xt_connbytes: Forcing CT accounting to be enabled
[   88.592833][ T6769] set match dimension is over the limit!
[   88.603180][ T6763] net_ratelimit: 11 callbacks suppressed
[   88.603195][ T6763] ebtables: ebtables: counters copy to user failed while replacing table
[   88.761433][ T6782] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   88.776014][ T6782] syzkaller0: MTU too low for tipc bearer
[   88.781801][ T6782] tipc: Disabling bearer <eth:syzkaller0>
[   88.912231][ T6800] bond_slave_1: mtu less than device minimum
[   88.927984][ T6803] loop2: detected capacity change from 0 to 256
[   88.963188][ T6803] vfat: Bad value for 'fmask'
[   89.024500][ T6811] loop2: detected capacity change from 0 to 256
[   89.031533][ T6811] vfat: Unknown parameter '
'
[   89.086141][ T6815] ip6gretap0: entered promiscuous mode
[   89.092469][ T6815] batadv_slave_0: entered promiscuous mode
[   89.100490][ T6815] ip6gretap0: left promiscuous mode
[   89.106895][ T6815] batadv_slave_0: left promiscuous mode
[   89.196111][ T6827] loop2: detected capacity change from 0 to 7
[   89.348401][ T6849] syz.7.1250[6849] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   89.348466][ T6849] syz.7.1250[6849] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   89.375285][ T6849] syz.7.1250[6849] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   89.406747][ T6857] 
: renamed from bond0
[   89.462818][ T6865] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1254'.
[   89.513961][ T6874] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1255'.
[   89.871698][ T6921] loop7: detected capacity change from 0 to 512
[   89.914012][ T6921] EXT4-fs error (device loop7): ext4_xattr_ibody_find:2240: inode #15: comm syz.7.1268: corrupted in-inode xattr: e_value size too large
[   89.946824][ T6921] EXT4-fs error (device loop7): ext4_orphan_get:1394: comm syz.7.1268: couldn't read orphan inode 15 (err -117)
[   89.968408][ T6935] loop5: detected capacity change from 0 to 512
[   89.984521][ T6935] EXT4-fs: Ignoring removed nobh option
[   90.011309][ T6921] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   90.056668][ T6921] EXT4-fs (loop7): shut down requested (2)
[   90.066545][ T6935] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   90.079694][ T6935] ext4 filesystem being mounted at /193/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   90.079829][ T6921] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop7 ino=12
[   90.102405][ T6935] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1271: bg 0: block 224: padding at end of block bitmap is not set
[   90.123033][ T6921] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop7 ino=12
[   90.143025][ T6935] EXT4-fs (loop5): Remounting filesystem read-only
[   90.150526][ T6941] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop7 ino=12
[   90.175914][ T6941] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop7 ino=12
[   90.185513][ T4617] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   90.192897][ T6941] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop7 ino=12
[   90.203613][ T6941] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop7 ino=12
[   90.212542][ T6941] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop7 ino=12
[   90.218834][ T6921] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop7 ino=12
[   90.240352][ T6921] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop7 ino=12
[   90.268448][ T6432] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   90.284210][ T6947] loop5: detected capacity change from 0 to 128
[   90.339310][ T6947] syz.5.1273: attempt to access beyond end of device
[   90.339310][ T6947] loop5: rw=0, sector=121, nr_sectors = 920 limit=128
[   90.506169][ T6960] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7)
[   90.512747][ T6960] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   90.520425][ T6960] vhci_hcd vhci_hcd.0: Device attached
[   90.535980][ T6961] vhci_hcd: connection closed
[   90.536508][ T4854] vhci_hcd: stop threads
[   90.545526][ T4854] vhci_hcd: release socket
[   90.549985][ T4854] vhci_hcd: disconnect device
[   90.649957][ T6967] syzkaller0: entered allmulticast mode
[   90.657554][ T6969] netlink: 'syz.1.1282': attribute type 3 has an invalid length.
[   90.666746][ T6967] syzkaller0 (unregistering): left allmulticast mode
[   90.723356][ T6927] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[   90.752328][ T6975] ip6gretap1: entered allmulticast mode
[   90.758945][ T6975] bridge0: port 3(ip6gretap1) entered blocking state
[   90.765776][ T6975] bridge0: port 3(ip6gretap1) entered disabled state
[   90.773367][ T6975] ip6gretap1: entered promiscuous mode
[   90.780722][ T6975] netlink: 'syz.2.1285': attribute type 10 has an invalid length.
[   90.789499][ T6975] bridge0: port 3(ip6gretap1) entered blocking state
[   90.796295][ T6975] bridge0: port 3(ip6gretap1) entered forwarding state
[   90.806179][ T6975] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   90.810139][ T6977] loop7: detected capacity change from 0 to 2048
[   90.822970][ T6977] EXT4-fs: inline encryption not supported
[   90.858796][ T6977] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   91.113671][ T6996] lo speed is unknown, defaulting to 1000
[   91.120172][ T6996] lo speed is unknown, defaulting to 1000
[   91.127819][ T6999] pim6reg1: entered promiscuous mode
[   91.133405][ T6999] pim6reg1: entered allmulticast mode
[   91.147820][ T6988] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   91.162829][ T6996] lo speed is unknown, defaulting to 1000
[   91.165465][ T6988] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[   91.181039][ T6988] EXT4-fs (loop7): This should not happen!! Data will be lost
[   91.181039][ T6988] 
[   91.190747][ T6988] EXT4-fs (loop7): Total free blocks count 0
[   91.196791][ T6988] EXT4-fs (loop7): Free/Dirty block details
[   91.202788][ T6988] EXT4-fs (loop7): free_blocks=2415919104
[   91.208531][ T6988] EXT4-fs (loop7): dirty_blocks=8192
[   91.213931][ T6988] EXT4-fs (loop7): Block reservation details
[   91.220062][ T6988] EXT4-fs (loop7): i_reserved_data_blocks=512
[   91.230576][ T6996] infiniband syz0: set active
[   91.235448][ T6996] infiniband syz0: added lo
[   91.240097][ T1034] lo speed is unknown, defaulting to 1000
[   91.270165][ T6996] RDS/IB: syz0: added
[   91.280620][ T6996] smc: adding ib device syz0 with port count 1
[   91.289078][ T6996] smc:    ib device syz0 port 1 has pnetid 
[   91.290798][ T4820] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28
[   91.295110][ T1034] lo speed is unknown, defaulting to 1000
[   91.314118][ T6996] lo speed is unknown, defaulting to 1000
[   91.371293][   T29] kauditd_printk_skb: 202 callbacks suppressed
[   91.371400][   T29] audit: type=1326 audit(1737241826.665:2777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7007 comm="syz.5.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f330c385d29 code=0x7ffc0000
[   91.424550][ T6996] lo speed is unknown, defaulting to 1000
[   91.444049][   T29] audit: type=1326 audit(1737241826.705:2778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7007 comm="syz.5.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f330c385d29 code=0x7ffc0000
[   91.467609][   T29] audit: type=1326 audit(1737241826.705:2779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7007 comm="syz.5.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f330c385d29 code=0x7ffc0000
[   91.491090][   T29] audit: type=1326 audit(1737241826.705:2780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7007 comm="syz.5.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f330c385d29 code=0x7ffc0000
[   91.496632][ T6996] lo speed is unknown, defaulting to 1000
[   91.514522][   T29] audit: type=1326 audit(1737241826.705:2781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7007 comm="syz.5.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f330c385d29 code=0x7ffc0000
[   91.514556][   T29] audit: type=1326 audit(1737241826.705:2782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7007 comm="syz.5.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f330c385d29 code=0x7ffc0000
[   91.514587][   T29] audit: type=1326 audit(1737241826.705:2783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7007 comm="syz.5.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f330c385d29 code=0x7ffc0000
[   91.590985][   T29] audit: type=1326 audit(1737241826.705:2784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7007 comm="syz.5.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f330c385d29 code=0x7ffc0000
[   91.614476][   T29] audit: type=1326 audit(1737241826.705:2785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7007 comm="syz.5.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f330c385d29 code=0x7ffc0000
[   91.637938][   T29] audit: type=1326 audit(1737241826.705:2786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7007 comm="syz.5.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f330c385d29 code=0x7ffc0000
[   91.672784][ T7013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   91.681297][ T7013] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   91.726665][ T6996] lo speed is unknown, defaulting to 1000
[   91.763549][ T7015] syzkaller0: entered promiscuous mode
[   91.769080][ T7015] syzkaller0: entered allmulticast mode
[   91.775157][ T6996] lo speed is unknown, defaulting to 1000
[   91.821233][ T6996] lo speed is unknown, defaulting to 1000
[   91.862070][ T6996] lo speed is unknown, defaulting to 1000
[   91.913260][ T6996] lo speed is unknown, defaulting to 1000
[   92.033619][ T7039] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1309'.
[   92.059188][ T7035] loop1: detected capacity change from 0 to 8192
[   92.068322][ T7035] vfat: Unknown parameter 'ÿÿÿÿ18446744073709551615'
[   92.137584][ T7043] loop2: detected capacity change from 0 to 256
[   92.167857][ T7044] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1313'.
[   92.180071][ T7043] FAT-fs (loop2): Directory bread(block 64) failed
[   92.191423][ T7043] FAT-fs (loop2): Directory bread(block 65) failed
[   92.241056][ T7043] FAT-fs (loop2): Directory bread(block 66) failed
[   92.257478][ T7043] FAT-fs (loop2): Directory bread(block 67) failed
[   92.264476][ T7043] FAT-fs (loop2): Directory bread(block 68) failed
[   92.271133][ T7043] FAT-fs (loop2): Directory bread(block 69) failed
[   92.279753][ T7043] FAT-fs (loop2): Directory bread(block 70) failed
[   92.286403][ T7043] FAT-fs (loop2): Directory bread(block 71) failed
[   92.299880][ T7043] FAT-fs (loop2): Directory bread(block 72) failed
[   92.306765][ T7043] FAT-fs (loop2): Directory bread(block 73) failed
[   92.316626][ T7050] program syz.5.1315 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   92.334721][ T7052] loop7: detected capacity change from 0 to 4096
[   92.351527][ T7052] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   92.373535][ T7043] syz.2.1312: attempt to access beyond end of device
[   92.373535][ T7043] loop2: rw=524288, sector=1800, nr_sectors = 20 limit=256
[   92.375810][ T7052] block device autoloading is deprecated and will be removed.
[   92.396525][ T7052] syz.7.1316: attempt to access beyond end of device
[   92.396525][ T7052] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0
[   92.407609][ T7043] syz.2.1312: attempt to access beyond end of device
[   92.407609][ T7043] loop2: rw=0, sector=1800, nr_sectors = 8 limit=256
[   92.487815][ T6432] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   92.506627][ T7058] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1318'.
[   92.636766][ T7066] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7)
[   92.643322][ T7066] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[   92.651077][ T7066] vhci_hcd vhci_hcd.0: Device attached
[   92.676020][ T7068] vhci_hcd: connection closed
[   92.678302][ T4820] vhci_hcd: stop threads
[   92.687357][ T4820] vhci_hcd: release socket
[   92.691863][ T4820] vhci_hcd: disconnect device
[   92.712257][ T7072] loop5: detected capacity change from 0 to 2048
[   92.738401][ T7072] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   92.759958][ T7063] lo speed is unknown, defaulting to 1000
[   92.789021][ T7078] ip6gre1: entered allmulticast mode
[   92.804644][ T7078] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   92.921240][ T4617] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   93.005156][ T7090] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1331'.
[   93.062374][ T7094] netlink: 'syz.5.1333': attribute type 27 has an invalid length.
[   93.113278][ T7094] bridge0: port 2(bridge_slave_1) entered disabled state
[   93.120597][ T7094] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.139667][ T7094] batman_adv: batadv0: Interface deactivated: dummy0
[   93.172005][ T7094] veth0_to_team: left promiscuous mode
[   93.177800][ T7094] veth0_to_team: left allmulticast mode
[   93.190785][ T7094] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   93.203961][ T7094] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   93.256236][ T7094] xfrm1: left allmulticast mode
[   93.262318][ T7094] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   93.271320][ T7094] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   93.280286][ T7094] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   93.289375][ T7094] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   93.298681][ T7094] geneve2: left allmulticast mode
[   93.304989][ T7094] ip6gre1: left allmulticast mode
[   93.332924][ T7097] 8021q: adding VLAN 0 to HW filter on device 

[   93.340995][ T7097] 8021q: adding VLAN 0 to HW filter on device team0
[   93.349849][ T7097] batman_adv: batadv0: Interface activated: dummy0
[   93.356699][ T7097] batadv0: mtu less than device minimum
[   93.363051][ T7097] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   93.373962][ T7097] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   93.384759][ T7097] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   93.395493][ T7097] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   93.406279][ T7097] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   93.417008][ T7097] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   93.427779][ T7097] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   93.578037][ T7119] loop5: detected capacity change from 0 to 8192
[   93.589727][ T7123] 
: renamed from bond0 (while UP)
[   93.633481][ T7125] loop0: detected capacity change from 0 to 164
[   93.640684][ T7125] rock: corrupted directory entry. extent=41, offset=65536, size=8
[   93.866280][ T7134] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.923979][ T7134] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.035884][ T7134] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.144806][ T7134] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.220931][ T7134] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   94.241525][ T7134] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   94.275087][ T7134] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   94.297372][ T7134] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   94.846265][ T7191] syz.5.1362[7191] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   94.846362][ T7191] syz.5.1362[7191] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   94.872934][ T7191] syz.5.1362[7191] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   94.951932][ T7203] loop5: detected capacity change from 0 to 164
[   94.972026][ T7203] rock: corrupted directory entry. extent=41, offset=65536, size=8
[   95.247977][ T7226] loop5: detected capacity change from 0 to 512
[   95.316848][ T7226] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   95.336248][ T7233] loop1: detected capacity change from 0 to 256
[   95.343035][ T7226] ext4 filesystem being mounted at /215/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   95.469117][ T7243] 9pnet: p9_errstr2errno: server reported unknown error œæç
[   95.470156][ T7249] loop7: detected capacity change from 0 to 1024
[   95.485899][ T7249] EXT4-fs: Ignoring removed mblk_io_submit option
[   95.497132][ T4617] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   95.533239][ T7249] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   95.690282][ T6432] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   95.737246][ T7270] netlink: 'syz.7.1389': attribute type 4 has an invalid length.
[   95.861816][ T7277] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1391'.
[   95.953179][ T7275] loop5: detected capacity change from 0 to 8192
[   95.967530][ T7275] vfat: Unknown parameter '0177777777777777777777718446744073709551615'
[   96.063010][ T7294] loop5: detected capacity change from 0 to 512
[   96.078470][ T7294] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   96.092757][ T7294] EXT4-fs (loop5): 1 truncate cleaned up
[   96.099227][ T7294] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   96.259490][ T7304] ref_ctr increment failed for inode: 0x57b offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff88810f391f80
[   96.275564][ T7306] loop1: detected capacity change from 0 to 764
[   96.278173][ T7303] uprobe: syz.0.1402:7303 failed to unregister, leaking uprobe
[   96.405605][ T7313] ref_ctr increment failed for inode: 0x553 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff88810f3924c0
[   96.416911][ T7313] ref_ctr increment failed for inode: 0x553 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff88810f3924c0
[   96.431622][   T29] kauditd_printk_skb: 265 callbacks suppressed
[   96.431636][   T29] audit: type=1400 audit(1737241831.725:3052): avc:  denied  { remove_name } for  pid=7292 comm="syz.5.1398" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   96.460935][   T29] audit: type=1400 audit(1737241831.725:3053): avc:  denied  { unlink } for  pid=7292 comm="syz.5.1398" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   96.483527][ T7312] uprobe: syz.2.1406:7312 failed to unregister, leaking uprobe
[   96.505124][   T29] audit: type=1400 audit(1737241831.805:3054): avc:  denied  { write } for  pid=7319 comm="syz.1.1408" name="route" dev="proc" ino=4026532540 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[   96.505552][ T7320] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1408'.
[   96.541808][ T7320] loop1: detected capacity change from 0 to 512
[   96.549369][ T7320] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[   96.557887][ T7320] EXT4-fs (loop1): invalid journal inode
[   96.564059][ T7312] uprobe: syz.2.1406:7312 failed to unregister, leaking uprobe
[   96.607738][   T29] audit: type=1400 audit(1737241831.905:3055): avc:  denied  { setopt } for  pid=7317 comm="syz.0.1409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[   96.614541][ T7325] delete_channel: no stack
[   96.627638][   T29] audit: type=1400 audit(1737241831.905:3056): avc:  denied  { create } for  pid=7325 comm="syz.1.1410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[   96.651448][   T29] audit: type=1400 audit(1737241831.905:3057): avc:  denied  { bind } for  pid=7325 comm="syz.1.1410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[   96.683520][   T29] audit: type=1400 audit(1737241831.985:3058): avc:  denied  { tracepoint } for  pid=7317 comm="syz.0.1409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[   96.741903][   T29] audit: type=1400 audit(1737241832.035:3059): avc:  denied  { ioctl } for  pid=7331 comm="syz.2.1413" path="socket:[18816]" dev="sockfs" ino=18816 ioctlcmd=0x89a0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   96.746133][ T7332] syzkaller0: entered allmulticast mode
[   96.777222][ T7332] syzkaller0 (unregistering): left allmulticast mode
[   96.978165][ T4617] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   97.154004][ T7349] net_ratelimit: 13 callbacks suppressed
[   97.154028][ T7349] bond_slave_1: mtu less than device minimum
[   97.227726][   T29] audit: type=1400 audit(1737241832.515:3060): avc:  denied  { create } for  pid=7352 comm="syz.7.1420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   97.248114][   T29] audit: type=1400 audit(1737241832.515:3061): avc:  denied  { ioctl } for  pid=7352 comm="syz.7.1420" path="socket:[17583]" dev="sockfs" ino=17583 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   97.351942][ T7361] pim6reg1: entered promiscuous mode
[   97.357335][ T7361] pim6reg1: entered allmulticast mode
[   97.475071][ T7358] lo speed is unknown, defaulting to 1000
[   97.949561][ T7368] loop0: detected capacity change from 0 to 2048
[   98.044518][ T7359] Set syz1 is full, maxelem 65536 reached
[   98.094789][ T7368]  loop0: p1 < > p4
[   98.163612][ T7368] loop0: p4 size 8388608 extends beyond EOD, truncated
[   98.341789][ T7387] udevd[7387]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[   98.341852][ T3502] udevd[3502]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[   98.409720][ T4094] udevd[4094]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[   98.421863][ T3502] udevd[3502]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[   98.519319][ T7416] hsr_slave_0: left promiscuous mode
[   98.548252][ T7416] hsr_slave_1: left promiscuous mode
[   98.590989][ T7426] tipc: Started in network mode
[   98.596020][ T7426] tipc: Node identity ce62fdfcce8b, cluster identity 4711
[   98.603359][ T7426] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   98.666914][ T7426] syzkaller0: entered promiscuous mode
[   98.672816][ T7426] syzkaller0: entered allmulticast mode
[   98.706991][ T7426] tipc: Resetting bearer <eth:syzkaller0>
[   98.714749][ T4859] tipc: Resetting bearer <eth:syzkaller0>
[   98.764187][ T7425] tipc: Resetting bearer <eth:syzkaller0>
[   98.819671][ T7425] tipc: Disabling bearer <eth:syzkaller0>
[   98.969064][ T7470] loop2: detected capacity change from 0 to 2048
[   99.023032][ T7470] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   99.053138][ T7470] netlink: 1100 bytes leftover after parsing attributes in process `syz.2.1449'.
[   99.078802][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   99.190503][ T7498] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1455'.
[   99.258403][ T7505] netlink: 96 bytes leftover after parsing attributes in process `syz.7.1458'.
[   99.281457][ T7507] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1459'.
[   99.348908][ T7507] gretap0: entered promiscuous mode
[   99.368332][ T7519] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1461'.
[   99.398384][ T7519] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1461'.
[   99.409706][ T7507] gretap0: left promiscuous mode
[   99.468042][ T7529] netlink: 'syz.1.1464': attribute type 7 has an invalid length.
[   99.475893][ T7529] netlink: 'syz.1.1464': attribute type 5 has an invalid length.
[   99.483795][ T7529] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1464'.
[   99.544339][ T7536] syzkaller0: entered promiscuous mode
[   99.550271][ T7536] syzkaller0: entered allmulticast mode
[   99.571317][ T7540] loop1: detected capacity change from 0 to 128
[   99.593961][ T7539] syz.7.1468[7539] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   99.594054][ T7539] syz.7.1468[7539] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   99.625309][ T7539] syz.7.1468[7539] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   99.656906][ T7543] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 65540, id = 0
[   99.660065][ T7540] syz.1.1467: attempt to access beyond end of device
[   99.660065][ T7540] loop1: rw=0, sector=121, nr_sectors = 920 limit=128
[   99.669355][ T7539] IPVS: stopping master sync thread 7543 ...
[   99.763717][ T7548] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1472'.
[   99.801069][ T7550] loop7: detected capacity change from 0 to 1024
[   99.822297][ T7548] batman_adv: batadv0: Removing interface: batadv_slave_0
[   99.844643][ T7548] batman_adv: batadv0: Removing interface: batadv_slave_1
[   99.853139][ T7550] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   99.864232][ T7550] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[   99.887376][ T7550] JBD2: no valid journal superblock found
[   99.893210][ T7550] EXT4-fs (loop7): Could not load journal inode
[   99.922395][ T7563] xt_hashlimit: size too large, truncated to 1048576
[  100.254225][ T7586] netlink: 'syz.7.1481': attribute type 27 has an invalid length.
[  100.389207][ T7586] bridge0: port 2(bridge_slave_1) entered disabled state
[  100.396527][ T7586] bridge0: port 1(bridge_slave_0) entered disabled state
[  100.511217][ T7607] syz.0.1484[7607] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  100.511295][ T7607] syz.0.1484[7607] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  100.541269][ T7607] syz.0.1484[7607] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  100.656954][ T7586] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  100.724622][ T7586] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  100.734947][ T7627] syz.1.1489[7627] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  100.735029][ T7627] syz.1.1489[7627] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  100.755223][ T7627] syz.1.1489[7627] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  100.959499][ T7636] syz.0.1493[7636] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  100.971073][ T7636] syz.0.1493[7636] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  100.984488][ T7586] netdevsim netdevsim7 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  101.004340][ T7586] netdevsim netdevsim7 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  101.012811][ T7586] netdevsim netdevsim7 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  101.021200][ T7586] netdevsim netdevsim7 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  101.041267][ T7636] syz.0.1493[7636] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  101.060507][ T7636] syz.0.1493[7636] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  101.103355][ T7590] 8021q: adding VLAN 0 to HW filter on device bond0
[  101.123606][ T7590] 8021q: adding VLAN 0 to HW filter on device team0
[  101.170559][ T7590] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  101.215126][ T7639] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1494'.
[  101.234701][ T7639] gretap0: entered promiscuous mode
[  101.244614][ T7639] gretap0: left promiscuous mode
[  101.354531][ T7655] futex_wake_op: syz.5.1496 tries to shift op by -1; fix this program
[  101.441302][   T29] kauditd_printk_skb: 107 callbacks suppressed
[  101.441367][   T29] audit: type=1326 audit(1737241836.735:3169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7664 comm="syz.5.1499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f330c385d29 code=0x7ffc0000
[  101.454509][ T7663] selinux_netlink_send: 119 callbacks suppressed
[  101.454527][ T7663] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7663 comm=syz.0.1498
[  101.510106][   T29] audit: type=1326 audit(1737241836.765:3170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7664 comm="syz.5.1499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f330c385d29 code=0x7ffc0000
[  101.531296][ T7663] netlink: 'syz.0.1498': attribute type 1 has an invalid length.
[  101.533780][   T29] audit: type=1326 audit(1737241836.765:3171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7664 comm="syz.5.1499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f330c385d29 code=0x7ffc0000
[  101.552245][ T7666] loop7: detected capacity change from 0 to 2048
[  101.564949][   T29] audit: type=1326 audit(1737241836.765:3172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7664 comm="syz.5.1499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f330c385d29 code=0x7ffc0000
[  101.594702][   T29] audit: type=1326 audit(1737241836.765:3173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7664 comm="syz.5.1499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f330c385d29 code=0x7ffc0000
[  101.618219][   T29] audit: type=1326 audit(1737241836.765:3174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7664 comm="syz.5.1499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f330c385d29 code=0x7ffc0000
[  101.641990][   T29] audit: type=1326 audit(1737241836.775:3175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7664 comm="syz.5.1499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f330c385d29 code=0x7ffc0000
[  101.665800][   T29] audit: type=1326 audit(1737241836.775:3176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7664 comm="syz.5.1499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f330c385d29 code=0x7ffc0000
[  101.689551][   T29] audit: type=1326 audit(1737241836.775:3177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7664 comm="syz.5.1499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f330c385d29 code=0x7ffc0000
[  101.698592][ T7663] 8021q: adding VLAN 0 to HW filter on device bond0
[  101.713036][   T29] audit: type=1326 audit(1737241836.775:3178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7664 comm="syz.5.1499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f330c385d29 code=0x7ffc0000
[  101.747681][ T7667] loop5: detected capacity change from 0 to 512
[  101.753934][ T7666] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  101.793966][ T7667] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  101.805344][ T7674] vlan2: entered promiscuous mode
[  101.811854][ T7674] bond0: entered promiscuous mode
[  101.817105][ T7674] vlan2: entered allmulticast mode
[  101.822243][ T7674] bond0: entered allmulticast mode
[  101.833201][ T7672] bond0: (slave bridge0): making interface the new active one
[  101.840757][ T7672] bridge0: entered promiscuous mode
[  101.846085][ T7672] bridge0: entered allmulticast mode
[  101.852208][ T7672] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  101.863735][ T7667] ext4 filesystem being mounted at /234/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  101.887579][ T7685] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1502'.
[  101.892888][ T7666] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1500: bg 0: block 234: padding at end of block bitmap is not set
[  101.902941][ T7685] ip6gretap1: left promiscuous mode
[  101.916362][ T7685] bridge0: port 3(ip6gretap1) entered disabled state
[  101.930561][ T7666] EXT4-fs (loop7): Remounting filesystem read-only
[  101.947394][ T7694] netlink: 'syz.0.1506': attribute type 3 has an invalid length.
[  102.007996][ T7685] bridge_slave_1: left allmulticast mode
[  102.008387][ T6432] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  102.013752][ T7685] bridge_slave_1: left promiscuous mode
[  102.013918][ T7685] bridge0: port 2(bridge_slave_1) entered disabled state
[  102.043898][ T4617] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  102.107838][ T7685] bridge_slave_0: left allmulticast mode
[  102.113625][ T7685] bridge_slave_0: left promiscuous mode
[  102.119387][ T7685] bridge0: port 1(bridge_slave_0) entered disabled state
[  102.153323][ T7717] loop1: detected capacity change from 0 to 512
[  102.173220][ T7685] bond0: (slave bridge0): Releasing backup interface
[  102.184256][ T7717] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  102.193555][ T7717] EXT4-fs (loop1): orphan cleanup on readonly fs
[  102.200529][ T7717] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1513: bg 0: block 248: padding at end of block bitmap is not set
[  102.215441][ T7717] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.1513: Failed to acquire dquot type 1
[  102.227335][ T7717] EXT4-fs (loop1): 1 truncate cleaned up
[  102.233960][ T7717] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  102.265876][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  102.306263][ T7732] netlink: 'syz.1.1516': attribute type 27 has an invalid length.
[  102.320092][ T7732] veth0_to_team: left promiscuous mode
[  102.325790][ T7732] veth0_to_team: left allmulticast mode
[  102.362550][ T7732] 8021q: adding VLAN 0 to HW filter on device 

[  102.371590][ T7732] 8021q: adding VLAN 0 to HW filter on device team0
[  102.382229][ T7732] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  102.869469][ T7745] loop5: detected capacity change from 0 to 512
[  102.884721][ T7745] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  102.897611][ T7745] ext4 filesystem being mounted at /238/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  102.954821][ T4617] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.031529][ T7765] loop5: detected capacity change from 0 to 512
[  103.041531][ T7765] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #12: comm syz.5.1530: corrupted in-inode xattr: invalid ea_ino
[  103.053805][ T7767] syzkaller1: entered promiscuous mode
[  103.056936][ T7765] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.1530: couldn't read orphan inode 12 (err -117)
[  103.060484][ T7767] syzkaller1: entered allmulticast mode
[  103.079884][ T7765] EXT4-fs (loop5): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  103.095552][ T7765] EXT4-fs error (device loop5): ext4_add_entry:2444: inode #2: comm syz.5.1530: Directory hole found for htree leaf block 0
[  103.100238][ T7767] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40
[  103.286605][ T4617] EXT4-fs (loop5): unmounting filesystem 00000005-0000-0000-0000-000000000000.
[  103.329920][ T7777] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1534'.
[  103.353519][ T7777] gretap0: entered promiscuous mode
[  103.360171][ T7777] gretap0: left promiscuous mode
[  103.520978][ T7786] pim6reg1: entered promiscuous mode
[  103.526398][ T7786] pim6reg1: entered allmulticast mode
[  103.560716][ T7788] veth2: entered allmulticast mode
[  103.602757][ T7790] loop1: detected capacity change from 0 to 512
[  103.625741][ T7790] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  103.639694][ T7790] ext4 filesystem being mounted at /338/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  103.665702][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.686456][ T7796] loop1: detected capacity change from 0 to 256
[  103.696157][ T7796] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  103.716317][ T7796] msdos: Unknown parameter '18446744073709551615ÿÿÿÿÿÿÿÿ01777777777777777777777ÿÿ0xffffffffffffffff18446744073709551615ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ'
[  103.788079][ T7801] loop0: detected capacity change from 0 to 256
[  103.846950][ T7806] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7806 comm=syz.1.1544
[  103.860165][ T7806] netlink: 'syz.1.1544': attribute type 1 has an invalid length.
[  103.875241][ T7806] 8021q: adding VLAN 0 to HW filter on device bond0
[  103.895695][ T7806] bond0: (slave bridge3): making interface the new active one
[  103.904083][ T7806] bond0: (slave bridge3): Enslaving as an active interface with an up link
[  103.928148][ T7806] vlan0: entered promiscuous mode
[  103.933317][ T7806] bond0: entered promiscuous mode
[  103.938427][ T7806] bridge3: entered promiscuous mode
[  103.944103][ T7806] vlan0: entered allmulticast mode
[  103.949352][ T7806] bond0: entered allmulticast mode
[  103.954558][ T7806] bridge3: entered allmulticast mode
[  103.992887][ T7815] loop0: detected capacity change from 0 to 128
[  104.025184][ T7815] syz.0.1547: attempt to access beyond end of device
[  104.025184][ T7815] loop0: rw=2049, sector=145, nr_sectors = 896 limit=128
[  104.046478][ T7815] syz.0.1547: attempt to access beyond end of device
[  104.046478][ T7815] loop0: rw=524288, sector=145, nr_sectors = 224 limit=128
[  104.060699][ T7815] syz.0.1547: attempt to access beyond end of device
[  104.060699][ T7815] loop0: rw=0, sector=145, nr_sectors = 8 limit=128
[  104.074104][ T7815] syz.0.1547: attempt to access beyond end of device
[  104.074104][ T7815] loop0: rw=0, sector=145, nr_sectors = 8 limit=128
[  104.087594][ T7815] syz.0.1547: attempt to access beyond end of device
[  104.087594][ T7815] loop0: rw=0, sector=145, nr_sectors = 8 limit=128
[  104.100949][ T7815] syz.0.1547: attempt to access beyond end of device
[  104.100949][ T7815] loop0: rw=0, sector=145, nr_sectors = 8 limit=128
[  104.114787][ T7815] syz.0.1547: attempt to access beyond end of device
[  104.114787][ T7815] loop0: rw=0, sector=145, nr_sectors = 8 limit=128
[  104.128116][ T7815] syz.0.1547: attempt to access beyond end of device
[  104.128116][ T7815] loop0: rw=0, sector=145, nr_sectors = 8 limit=128
[  104.141398][ T7815] syz.0.1547: attempt to access beyond end of device
[  104.141398][ T7815] loop0: rw=0, sector=145, nr_sectors = 8 limit=128
[  104.290813][ T7819] loop7: detected capacity change from 0 to 764
[  104.552405][ T7828] ref_ctr going negative. vaddr: 0x20ffc002, curr val: -29824, delta: 1
[  104.560865][ T7828] ref_ctr increment failed for inode: 0x723 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88810a206a00
[  104.649234][ T7836] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1559'.
[  104.662914][ T7815] bio_check_eod: 16011 callbacks suppressed
[  104.662932][ T7815] syz.0.1547: attempt to access beyond end of device
[  104.662932][ T7815] loop0: rw=0, sector=145, nr_sectors = 8 limit=128
[  104.697483][ T7838] syzkaller0: entered allmulticast mode
[  104.700498][ T7815] syz.0.1547: attempt to access beyond end of device
[  104.700498][ T7815] loop0: rw=0, sector=145, nr_sectors = 8 limit=128
[  104.716830][ T7815] syz.0.1547: attempt to access beyond end of device
[  104.716830][ T7815] loop0: rw=0, sector=145, nr_sectors = 8 limit=128
[  104.730308][ T7815] syz.0.1547: attempt to access beyond end of device
[  104.730308][ T7815] loop0: rw=0, sector=145, nr_sectors = 8 limit=128
[  104.745136][ T7838] syzkaller0 (unregistering): left allmulticast mode
[  104.750316][ T7815] syz.0.1547: attempt to access beyond end of device
[  104.750316][ T7815] loop0: rw=0, sector=145, nr_sectors = 8 limit=128
[  104.765591][ T7815] syz.0.1547: attempt to access beyond end of device
[  104.765591][ T7815] loop0: rw=0, sector=145, nr_sectors = 8 limit=128
[  104.781757][ T7815] syz.0.1547: attempt to access beyond end of device
[  104.781757][ T7815] loop0: rw=0, sector=145, nr_sectors = 8 limit=128
[  104.795349][ T7815] syz.0.1547: attempt to access beyond end of device
[  104.795349][ T7815] loop0: rw=0, sector=145, nr_sectors = 8 limit=128
[  104.808665][ T7815] syz.0.1547: attempt to access beyond end of device
[  104.808665][ T7815] loop0: rw=0, sector=145, nr_sectors = 8 limit=128
[  104.822064][ T7815] syz.0.1547: attempt to access beyond end of device
[  104.822064][ T7815] loop0: rw=0, sector=145, nr_sectors = 8 limit=128
[  105.353924][ T7594] hid-generic 0000:0000:0000.0005: unknown main item tag 0x1
[  105.361417][ T7594] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  105.369574][ T7594] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  105.377050][ T7594] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  105.384861][ T7594] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  105.392266][ T7594] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  105.399799][ T7594] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  105.407350][ T7594] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  105.414909][ T7594] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  105.422455][ T7594] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  105.429914][ T7594] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  105.437395][ T7594] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  105.444820][ T7594] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  105.452232][ T7594] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  105.459703][ T7594] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  105.467151][ T7594] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  105.474641][ T7594] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  105.482097][ T7594] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  105.484797][ T7891] loop7: detected capacity change from 0 to 1024
[  105.489578][ T7594] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  105.498557][ T7891] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  105.503277][ T7594] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  105.521030][ T7594] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  105.526296][ T7891] EXT4-fs (loop7): revision level too high, forcing read-only mode
[  105.528473][ T7594] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  105.538262][ T7891] EXT4-fs (loop7): orphan cleanup on readonly fs
[  105.543951][ T7594] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  105.543982][ T7594] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  105.544007][ T7594] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  105.552596][ T7891] EXT4-fs warning (device loop7): ext4_enable_quotas:7156: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix.
[  105.557738][ T7594] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  105.557765][ T7594] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  105.565173][ T7891] EXT4-fs (loop7): Cannot turn on quotas: error -5
[  105.572527][ T7594] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  105.588381][ T7891] EXT4-fs (loop7): 1 truncate cleaned up
[  105.594472][ T7594] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  105.603381][ T7891] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  105.608376][ T7594] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  105.649053][ T7594] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  105.656466][ T7594] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  105.664159][ T7594] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  105.671562][ T7594] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  105.678996][ T7594] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  105.686526][ T7594] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  105.693937][ T7594] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  105.701325][ T7594] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  105.709418][ T7594] hid-generic 0000:0000:0000.0005: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  105.747859][ T6432] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.850051][ T7906] xt_CT: You must specify a L4 protocol and not use inversions on it
[  105.889906][ T7908] loop0: detected capacity change from 0 to 1024
[  105.912494][ T7912] loop7: detected capacity change from 0 to 164
[  105.926500][ T7915] loop1: detected capacity change from 0 to 128
[  105.944333][ T7908] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  106.068803][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.560722][   T29] kauditd_printk_skb: 508 callbacks suppressed
[  106.560739][   T29] audit: type=1326 audit(1737241841.855:3684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7960 comm="syz.5.1613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f330c385d29 code=0x7ffc0000
[  106.629459][   T29] audit: type=1326 audit(1737241841.885:3685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7960 comm="syz.5.1613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f330c385d29 code=0x7ffc0000
[  106.652964][   T29] audit: type=1326 audit(1737241841.885:3686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7960 comm="syz.5.1613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f330c385d29 code=0x7ffc0000
[  106.676470][   T29] audit: type=1326 audit(1737241841.885:3687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7960 comm="syz.5.1613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f330c385d29 code=0x7ffc0000
[  106.700078][   T29] audit: type=1326 audit(1737241841.885:3688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7960 comm="syz.5.1613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f330c385d29 code=0x7ffc0000
[  106.723614][   T29] audit: type=1326 audit(1737241841.895:3689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7960 comm="syz.5.1613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f330c385d29 code=0x7ffc0000
[  106.747224][   T29] audit: type=1326 audit(1737241841.895:3690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7960 comm="syz.5.1613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f330c385d29 code=0x7ffc0000
[  106.770823][   T29] audit: type=1326 audit(1737241841.895:3691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7960 comm="syz.5.1613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f330c385d29 code=0x7ffc0000
[  106.794347][   T29] audit: type=1326 audit(1737241841.895:3692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7960 comm="syz.5.1613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f330c385d29 code=0x7ffc0000
[  106.817803][   T29] audit: type=1326 audit(1737241841.895:3693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7960 comm="syz.5.1613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f330c385d29 code=0x7ffc0000
[  107.018073][ T7968] bpf_get_probe_write_proto: 5 callbacks suppressed
[  107.018131][ T7968] syz.1.1615[7968] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  107.051202][ T7968] syz.1.1615[7968] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  107.104088][ T7968] syz.1.1615[7968] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  107.465087][ T7990] veth0_vlan: entered allmulticast mode
[  107.526359][ T7990] ªªªªª: renamed from vlan1
[  107.626178][ T7995] syz.7.1625[7995] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  107.626267][ T7995] syz.7.1625[7995] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  107.638321][ T7995] syz.7.1625[7995] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  107.814033][ T8003] loop1: detected capacity change from 0 to 2048
[  107.884166][ T8003]  loop1: p1 < > p4
[  107.888834][ T8003] loop1: p4 size 8388608 extends beyond EOD, truncated
[  108.251118][ T8036] infiniband syz0: set active
[  108.274242][ T8036] bond0: (slave bond_slave_0): Releasing backup interface
[  108.303693][ T8036] bond0: (slave bond_slave_1): Releasing backup interface
[  108.315104][ T8036] team0: Port device team_slave_0 removed
[  108.321799][ T8036] team0: Port device team_slave_1 removed
[  108.334860][ T7602] lo speed is unknown, defaulting to 1000
[  108.625455][ T8051] loop7: detected capacity change from 0 to 8192
[  108.637503][ T8070] loop1: detected capacity change from 0 to 164
[  108.665047][ T8051] Buffer I/O error on dev loop7, logical block 57847, async page read
[  108.695482][ T8051] Buffer I/O error on dev loop7, logical block 57847, async page read
[  108.718668][ T8051] Buffer I/O error on dev loop7, logical block 57847, async page read
[  108.742616][ T7602] hid-generic 0000:0000:0000.0006: unknown main item tag 0x1
[  108.750312][ T7602] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  108.757823][ T7602] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  108.765423][ T7602] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  108.772846][ T7602] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  108.780362][ T7602] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  108.784176][ T8051] Buffer I/O error on dev loop7, logical block 57847, async page read
[  108.795343][ T7602] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  108.803496][ T7602] hid-generic 0000:0000:0000.0006: unknown main item tag 0x2
[  108.810911][ T7602] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  108.818633][ T7602] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  108.826245][ T7602] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  108.834987][ T7602] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  108.842985][ T7602] hid-generic 0000:0000:0000.0006: unknown main item tag 0x4
[  108.851549][ T7602] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  108.859031][ T7602] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  108.866560][ T7602] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  108.874002][ T7602] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  108.881704][ T7602] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  108.889219][ T7602] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  108.896731][ T7602] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  108.904183][ T7602] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  108.911823][ T7602] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  108.919255][ T7602] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  108.926694][ T7602] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  108.934273][ T7602] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  108.941711][ T7602] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  108.949152][ T7602] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  108.956587][ T7602] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  108.964087][ T7602] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  108.972009][ T7602] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  108.979574][ T7602] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  108.987089][ T7602] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  108.994686][ T7602] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  109.002313][ T7602] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  109.009934][ T7602] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  109.017441][ T7602] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  109.020580][ T8081] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1662'.
[  109.024852][ T7602] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  109.041514][ T7602] hid-generic 0000:0000:0000.0006: hidraw0: <UNKNOWN> HID v0.03 Device [syz0] on syz0
[  109.149468][ T8089] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1665'.
[  109.204417][ T8091] loop5: detected capacity change from 0 to 8192
[  109.235223][ T8091] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  109.263438][ T8088] lo speed is unknown, defaulting to 1000
[  109.574273][ T8116] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1675'.
[  109.636563][ T8120] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1676'.
[  109.654072][ T8120] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1676'.
[  109.726234][ T8131] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1679'.
[  109.806050][ T8125] lo speed is unknown, defaulting to 1000
[  109.846205][ T8142] program syz.7.1683 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  109.914202][ T8148] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1685'.
[  109.917274][ T8149] loop7: detected capacity change from 0 to 512
[  109.923218][ T8148] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1685'.
[  109.923464][ T8148] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1685'.
[  109.929865][ T8149] EXT4-fs: Ignoring removed mblk_io_submit option
[  109.964657][ T8148] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1685'.
[  109.990521][ T8149] EXT4-fs error (device loop7): ext4_xattr_ibody_find:2240: inode #15: comm syz.7.1687: corrupted in-inode xattr: e_value out of bounds
[  110.005219][ T8149] EXT4-fs error (device loop7): ext4_orphan_get:1394: comm syz.7.1687: couldn't read orphan inode 15 (err -117)
[  110.017861][ T8149] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  110.018063][ T8156] netlink: 'syz.2.1688': attribute type 4 has an invalid length.
[  110.039086][ T8156] infiniband syz0: set down
[  110.044683][ T7602] lo speed is unknown, defaulting to 1000
[  110.050548][ T7602] lo speed is unknown, defaulting to 1000
[  110.059119][ T6432] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  110.155338][ T8167] smc: net device bond0 applied user defined pnetid SYZ0
[  110.162944][ T8167] smc: net device bond0 erased user defined pnetid SYZ0
[  110.427228][ T8184] syz.5.1701[8184] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  110.427289][ T8184] syz.5.1701[8184] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  110.439001][ T8184] syz.5.1701[8184] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  110.475686][ T8186] veth0_vlan: entered allmulticast mode
[  110.496640][ T8186] veth0_vlan: left promiscuous mode
[  110.502548][ T8186] veth0_vlan: entered promiscuous mode
[  110.532285][ T8188] loop0: detected capacity change from 0 to 256
[  110.546694][ T8190] loop5: detected capacity change from 0 to 764
[  110.550351][ T8188] FAT-fs (loop0): Directory bread(block 64) failed
[  110.553688][ T8190] iso9660: Unknown parameter 'GPL'
[  110.561602][ T8188] FAT-fs (loop0): Directory bread(block 65) failed
[  110.572073][ T8188] FAT-fs (loop0): Directory bread(block 66) failed
[  110.578922][ T8188] FAT-fs (loop0): Directory bread(block 67) failed
[  110.586421][ T8188] FAT-fs (loop0): Directory bread(block 68) failed
[  110.593356][ T8188] FAT-fs (loop0): Directory bread(block 69) failed
[  110.600037][ T8188] FAT-fs (loop0): Directory bread(block 70) failed
[  110.607140][ T8188] FAT-fs (loop0): Directory bread(block 71) failed
[  110.614374][ T8188] FAT-fs (loop0): Directory bread(block 72) failed
[  110.621581][ T8188] FAT-fs (loop0): Directory bread(block 73) failed
[  110.792072][ T8211] IPv6: Can't replace route, no match found
[  110.799440][ T8206] lo speed is unknown, defaulting to 1000
[  110.814142][ T8213] loop1: detected capacity change from 0 to 128
[  110.822098][ T8213] FAT-fs (loop1): Directory bread(block 162) failed
[  110.830384][ T8213] FAT-fs (loop1): Directory bread(block 163) failed
[  110.837477][ T8213] FAT-fs (loop1): Directory bread(block 164) failed
[  110.846533][ T8213] FAT-fs (loop1): Directory bread(block 165) failed
[  110.855932][ T8213] FAT-fs (loop1): Directory bread(block 166) failed
[  110.866158][ T8213] FAT-fs (loop1): Directory bread(block 167) failed
[  110.873397][ T8213] FAT-fs (loop1): Directory bread(block 168) failed
[  110.880194][ T8213] FAT-fs (loop1): Directory bread(block 169) failed
[  110.896204][ T8213] FAT-fs (loop1): Directory bread(block 162) failed
[  110.905074][ T8213] FAT-fs (loop1): Directory bread(block 163) failed
[  110.912551][ T8213] bio_check_eod: 1486 callbacks suppressed
[  110.912567][ T8213] syz.1.1715: attempt to access beyond end of device
[  110.912567][ T8213] loop1: rw=3, sector=226, nr_sectors = 6 limit=128
[  110.932203][ T8213] syz.1.1715: attempt to access beyond end of device
[  110.932203][ T8213] loop1: rw=2051, sector=232, nr_sectors = 2 limit=128
[  111.067754][ T8222] 9pnet: p9_errstr2errno: server reported unknown error 
[  111.173827][ T8235] syzkaller1: entered promiscuous mode
[  111.179408][ T8235] syzkaller1: entered allmulticast mode
[  111.335774][ T8250] loop7: detected capacity change from 0 to 512
[  111.356370][ T8250] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  111.369152][ T8250] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  111.375460][ T8251] lo speed is unknown, defaulting to 1000
[  111.398099][ T6432] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  111.493004][ T8261] loop7: detected capacity change from 0 to 512
[  111.514632][ T8261] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  111.535042][ T8263] loop1: detected capacity change from 0 to 512
[  111.542605][ T8263] ext4: Unknown parameter 'appraise_type'
[  111.551603][ T8263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  111.562215][ T8261] EXT4-fs (loop7): 1 truncate cleaned up
[  111.565345][ T8263] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  111.576971][ T8261] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  111.593326][   T29] kauditd_printk_skb: 594 callbacks suppressed
[  111.593343][   T29] audit: type=1326 audit(1737241846.895:4288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8262 comm="syz.1.1734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b72595d29 code=0x7ffc0000
[  111.623437][   T29] audit: type=1326 audit(1737241846.895:4289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8262 comm="syz.1.1734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f0b72595d29 code=0x7ffc0000
[  111.647015][   T29] audit: type=1326 audit(1737241846.895:4290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8262 comm="syz.1.1734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b72595d29 code=0x7ffc0000
[  111.670813][   T29] audit: type=1326 audit(1737241846.895:4291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8262 comm="syz.1.1734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b72595d29 code=0x7ffc0000
[  111.694320][   T29] audit: type=1400 audit(1737241846.925:4292): avc:  denied  { read write } for  pid=8258 comm="syz.7.1731" path="/107/file2/bus" dev="loop7" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  111.808953][   T29] audit: type=1326 audit(1737241847.105:4293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8280 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b134b5d29 code=0x7ffc0000
[  111.832117][   T29] audit: type=1326 audit(1737241847.105:4294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8280 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b134b5d29 code=0x7ffc0000
[  111.857166][   T29] audit: type=1326 audit(1737241847.105:4295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8280 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5b134b5d29 code=0x7ffc0000
[  111.858367][ T8279] lo speed is unknown, defaulting to 1000
[  111.880223][   T29] audit: type=1326 audit(1737241847.105:4296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8280 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b134b5d29 code=0x7ffc0000
[  111.909252][   T29] audit: type=1326 audit(1737241847.105:4297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8280 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f5b134b5d29 code=0x7ffc0000
[  112.044801][ T8287] loop5: detected capacity change from 0 to 128
[  112.099392][ T8287] syz.5.1742: attempt to access beyond end of device
[  112.099392][ T8287] loop5: rw=0, sector=121, nr_sectors = 920 limit=128
[  112.502807][ T6432] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  112.533474][ T8312] syzkaller0: entered allmulticast mode
[  112.552207][ T8315] loop7: detected capacity change from 0 to 1024
[  112.553401][ T8317] loop2: detected capacity change from 0 to 1024
[  112.559422][ T8315] EXT4-fs: Ignoring removed nobh option
[  112.570836][ T8315] EXT4-fs: Ignoring removed bh option
[  112.577685][ T8312] syzkaller0 (unregistering): left allmulticast mode
[  112.598348][ T8317] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  112.614273][ T8315] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  112.650367][ T8325] loop5: detected capacity change from 0 to 2048
[  112.659679][ T6432] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  112.669421][ T8326] EXT4-fs (loop2): shut down requested (0)
[  112.684608][ T8325] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  112.734548][ T4879] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  112.751743][ T4879] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  112.764430][ T4879] EXT4-fs (loop2): This should not happen!! Data will be lost
[  112.764430][ T4879] 
[  112.774201][ T4879] EXT4-fs (loop2): Total free blocks count 0
[  112.780224][ T4879] EXT4-fs (loop2): Free/Dirty block details
[  112.786174][ T4879] EXT4-fs (loop2): free_blocks=68451041280
[  112.791994][ T4879] EXT4-fs (loop2): dirty_blocks=3456
[  112.797404][ T4879] EXT4-fs (loop2): Block reservation details
[  112.803848][ T4879] EXT4-fs (loop2): i_reserved_data_blocks=216
[  112.875689][ T8339] bridge_slave_1: left allmulticast mode
[  112.877148][ T4617] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  112.881404][ T8339] bridge_slave_1: left promiscuous mode
[  112.896728][ T8339] bridge0: port 2(bridge_slave_1) entered disabled state
[  112.905496][ T8339] bridge1: port 1(bridge_slave_1) entered blocking state
[  112.913176][ T8339] bridge1: port 1(bridge_slave_1) entered disabled state
[  112.921978][ T8339] bridge_slave_1: entered allmulticast mode
[  112.930873][ T8339] bridge_slave_1: entered promiscuous mode
[  112.979437][ T8350] netlink: 'syz.0.1763': attribute type 3 has an invalid length.
[  112.988938][ T8350] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  112.997903][ T8350] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  113.078397][ T8362] IPv4: Oversized IP packet from 127.202.26.0
[  113.081212][ T8363] loop2: detected capacity change from 0 to 512
[  113.091412][ T8363] EXT4-fs: Ignoring removed oldalloc option
[  113.099139][ T8363] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  113.134569][ T8363] EXT4-fs (loop2): 1 truncate cleaned up
[  113.140670][ T8363] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  113.233439][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  113.833501][ T8429] syz.2.1798[8429] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  113.833554][ T8429] syz.2.1798[8429] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  113.845365][ T8429] syz.2.1798[8429] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  113.923970][ T8431] loop2: detected capacity change from 0 to 512
[  113.944059][ T8431] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  113.956628][ T8431] EXT4-fs (loop2): 1 truncate cleaned up
[  113.962869][ T8431] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  113.987737][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  114.310379][ T8450] loop1: detected capacity change from 0 to 2048
[  114.324305][ T8450] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  114.447544][ T8463] tipc: Started in network mode
[  114.452486][ T8463] tipc: Node identity b25295421896, cluster identity 4711
[  114.460023][ T8463] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  114.504436][ T8463] syzkaller0: MTU too low for tipc bearer
[  114.510254][ T8463] tipc: Disabling bearer <eth:syzkaller0>
[  114.787162][ T8469] lo speed is unknown, defaulting to 1000
[  114.894688][ T8461] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  115.003931][ T8461] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  115.016644][ T8461] EXT4-fs (loop1): This should not happen!! Data will be lost
[  115.016644][ T8461] 
[  115.026558][ T8461] EXT4-fs (loop1): Total free blocks count 0
[  115.033257][ T8461] EXT4-fs (loop1): Free/Dirty block details
[  115.039214][ T8461] EXT4-fs (loop1): free_blocks=2415919104
[  115.045125][ T8461] EXT4-fs (loop1): dirty_blocks=8192
[  115.050498][ T8461] EXT4-fs (loop1): Block reservation details
[  115.056603][ T8461] EXT4-fs (loop1): i_reserved_data_blocks=512
[  115.134265][ T8450] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28
[  115.533063][ T8488] Falling back ldisc for ttyS3.
[  115.595978][ T8504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  115.614932][ T8504] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  115.903905][ T8518] syz.0.1829[8518] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  115.904021][ T8518] syz.0.1829[8518] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  115.915621][ T8518] syz.0.1829[8518] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  116.218921][ T8525] syz.7.1832[8525] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  116.230764][ T8525] syz.7.1832[8525] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  116.242750][ T8525] syz.7.1832[8525] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  116.409743][ T8544] __nla_validate_parse: 10 callbacks suppressed
[  116.409790][ T8544] netlink: 56 bytes leftover after parsing attributes in process `syz.7.1841'.
[  116.437927][ T8544] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1841'.
[  116.447898][ T8544] netlink: 31 bytes leftover after parsing attributes in process `syz.7.1841'.
[  116.457268][ T8544] netlink: 'syz.7.1841': attribute type 2 has an invalid length.
[  116.465590][ T8544] netlink: 31 bytes leftover after parsing attributes in process `syz.7.1841'.
[  116.534498][ T8551] loop1: detected capacity change from 0 to 512
[  116.541778][ T8551] EXT4-fs: Ignoring removed oldalloc option
[  116.548971][ T8551] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  116.571815][ T8551] EXT4-fs (loop1): 1 truncate cleaned up
[  116.579795][ T8551] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  116.584753][ T8556] loop7: detected capacity change from 0 to 512
[  116.601110][ T8556] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  116.614023][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  116.625419][ T8556] EXT4-fs (loop7): 1 truncate cleaned up
[  116.631917][ T8556] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  116.646420][   T29] kauditd_printk_skb: 237 callbacks suppressed
[  116.646486][   T29] audit: type=1326 audit(1737241851.945:4535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8555 comm="syz.7.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe61cc54690 code=0x7ffc0000
[  116.678705][   T29] audit: type=1326 audit(1737241851.945:4536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8555 comm="syz.7.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fe61cc54a77 code=0x7ffc0000
[  116.702061][   T29] audit: type=1326 audit(1737241851.945:4537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8555 comm="syz.7.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe61cc54690 code=0x7ffc0000
[  116.725649][   T29] audit: type=1326 audit(1737241851.945:4538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8555 comm="syz.7.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe61cc55d29 code=0x7ffc0000
[  116.749425][   T29] audit: type=1326 audit(1737241851.945:4539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8555 comm="syz.7.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe61cc55d29 code=0x7ffc0000
[  116.773230][   T29] audit: type=1326 audit(1737241851.945:4540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8555 comm="syz.7.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7fe61cc55d29 code=0x7ffc0000
[  116.796929][   T29] audit: type=1326 audit(1737241851.945:4541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8555 comm="syz.7.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe61cc55d29 code=0x7ffc0000
[  116.818922][ T8564] loop1: detected capacity change from 0 to 1024
[  116.820947][   T29] audit: type=1326 audit(1737241851.945:4542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8555 comm="syz.7.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe61cc55d29 code=0x7ffc0000
[  116.835901][ T8564] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  116.851098][   T29] audit: type=1326 audit(1737241851.945:4543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8555 comm="syz.7.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7fe61cc55d29 code=0x7ffc0000
[  116.851138][   T29] audit: type=1326 audit(1737241851.945:4544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8555 comm="syz.7.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe61cc55d29 code=0x7ffc0000
[  116.911112][ T6432] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  116.936004][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  117.008568][ T8578] loop1: detected capacity change from 0 to 512
[  117.095738][ T8578] EXT4-fs (loop1): 1 orphan inode deleted
[  117.102093][ T8578] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  117.114758][ T4878] EXT4-fs error (device loop1): ext4_release_dquot:6961: comm kworker/u8:58: Failed to release dquot type 1
[  117.127260][ T8578] ext4 filesystem being mounted at /399/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  117.163341][ T8589] loop7: detected capacity change from 0 to 512
[  117.171299][ T8589] EXT4-fs: Ignoring removed oldalloc option
[  117.178052][ T8589] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  117.189505][ T8589] EXT4-fs (loop7): 1 truncate cleaned up
[  117.195756][ T8589] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  117.225571][ T6432] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  117.275337][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  117.296172][ T8596] syz.1.1860[8596] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  117.732235][ T8611] loop0: detected capacity change from 0 to 512
[  117.772814][ T8611] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  117.818744][ T8611] EXT4-fs (loop0): 1 truncate cleaned up
[  117.825046][ T8611] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  118.278088][ T8626] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1872'.
[  118.454181][ T8629] loop7: detected capacity change from 0 to 8192
[  118.661290][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  118.735938][ T8640] ÿÿÿÿÿÿ: renamed from vlan1
[  118.767657][ T8642] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  118.858310][ T8653] loop2: detected capacity change from 0 to 1024
[  118.926699][ T8655] lo speed is unknown, defaulting to 1000
[  119.408589][ T8681] loop5: detected capacity change from 0 to 764
[  120.084560][ T8697] loop2: detected capacity change from 0 to 128
[  120.140654][ T8697] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  120.149102][ T8697] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  120.157415][ T8697] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  120.165728][ T8697] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  120.227821][ T8703] loop1: detected capacity change from 0 to 512
[  120.272969][ T8703] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  120.280932][ T8703] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c019, mo2=0002]
[  120.292899][ T8703] System zones: 0-2, 18-18, 34-35
[  120.311281][ T8707] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  120.321468][ T8703] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  120.336829][ T8703] EXT4-fs (loop1): shut down requested (0)
[  120.383795][ T8707] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  120.453814][ T8707] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  120.513833][ T8707] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  120.575314][ T8707] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  120.603127][ T8707] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  120.615567][ T8707] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  120.627725][ T8707] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  120.822354][ T8722] loop2: detected capacity change from 0 to 8192
[  120.841155][ T8722] syz.2.1913: attempt to access beyond end of device
[  120.841155][ T8722] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  120.854646][ T8722] Buffer I/O error on dev loop2, logical block 57847, async page read
[  120.864674][ T8722] syz.2.1913: attempt to access beyond end of device
[  120.864674][ T8722] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  120.878152][ T8722] Buffer I/O error on dev loop2, logical block 57847, async page read
[  120.888077][ T8722] syz.2.1913: attempt to access beyond end of device
[  120.888077][ T8722] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  120.901608][ T8722] Buffer I/O error on dev loop2, logical block 57847, async page read
[  120.911620][ T8722] syz.2.1913: attempt to access beyond end of device
[  120.911620][ T8722] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  120.925157][ T8722] Buffer I/O error on dev loop2, logical block 57847, async page read
[  121.010289][ T8726] lo speed is unknown, defaulting to 1000
[  121.016020][ T8732] loop7: detected capacity change from 0 to 512
[  121.048617][ T8732] EXT4-fs (loop7): 1 orphan inode deleted
[  121.063315][ T8732] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  121.077046][ T4879] EXT4-fs error (device loop7): ext4_release_dquot:6961: comm kworker/u8:59: Failed to release dquot type 1
[  121.078590][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  121.098330][ T8732] ext4 filesystem being mounted at /151/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  121.243825][ T6432] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  121.322887][ T8740] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8740 comm=syz.1.1918
[  121.350653][ T8740] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1918'.
[  121.359771][ T8740] netlink: 'syz.1.1918': attribute type 30 has an invalid length.
[  121.435895][ T8749] loop7: detected capacity change from 0 to 512
[  121.537534][ T8749] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  121.550574][ T8749] ext4 filesystem being mounted at /152/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  121.613885][ T6432] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  122.007986][ T8759] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1927'.
[  122.038649][ T8767] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1929'.
[  122.254303][   T29] kauditd_printk_skb: 157 callbacks suppressed
[  122.254318][   T29] audit: type=1326 audit(1737241857.555:4700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8789 comm="syz.5.1936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f330c385d29 code=0x7ffc0000
[  122.266275][ T8790] loop5: detected capacity change from 0 to 512
[  122.313469][ T8790] EXT4-fs: inline encryption not supported
[  122.322589][   T29] audit: type=1326 audit(1737241857.555:4701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8789 comm="syz.5.1936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f330c385d29 code=0x7ffc0000
[  122.346169][   T29] audit: type=1326 audit(1737241857.555:4702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8789 comm="syz.5.1936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f330c385d29 code=0x7ffc0000
[  122.369619][   T29] audit: type=1326 audit(1737241857.555:4703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8789 comm="syz.5.1936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f330c385d29 code=0x7ffc0000
[  122.393238][   T29] audit: type=1326 audit(1737241857.555:4704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8789 comm="syz.5.1936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f330c385d29 code=0x7ffc0000
[  122.416734][   T29] audit: type=1326 audit(1737241857.565:4705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8789 comm="syz.5.1936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7f330c385d29 code=0x7ffc0000
[  122.440156][   T29] audit: type=1326 audit(1737241857.565:4706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8789 comm="syz.5.1936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f330c385d29 code=0x7ffc0000
[  122.463670][   T29] audit: type=1326 audit(1737241857.565:4707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8789 comm="syz.5.1936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f330c385d29 code=0x7ffc0000
[  122.487455][   T29] audit: type=1326 audit(1737241857.565:4708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8789 comm="syz.5.1936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f330c385d29 code=0x7ffc0000
[  122.511009][   T29] audit: type=1326 audit(1737241857.565:4709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8789 comm="syz.5.1936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f330c385d63 code=0x7ffc0000
[  122.557605][ T8790] EXT4-fs warning (device loop5): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  122.569199][ T8790] EXT4-fs warning (device loop5): dx_probe:881: Enable large directory feature to access it
[  122.579350][ T8790] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.1936: Corrupt directory, running e2fsck is recommended
[  122.614006][ T8790] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117
[  122.631386][ T8790] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.1936: corrupted in-inode xattr: invalid ea_ino
[  122.649627][ T8790] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.1936: couldn't read orphan inode 15 (err -117)
[  122.689538][ T8790] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  122.716124][ T8796] wg2: entered promiscuous mode
[  122.721117][ T8796] wg2: entered allmulticast mode
[  122.744372][ T8790] EXT4-fs warning (device loop5): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  122.756048][ T8790] EXT4-fs warning (device loop5): dx_probe:881: Enable large directory feature to access it
[  122.766319][ T8790] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.1936: Corrupt directory, running e2fsck is recommended
[  122.793845][ T8790] EXT4-fs warning (device loop5): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  122.805440][ T8790] EXT4-fs warning (device loop5): dx_probe:881: Enable large directory feature to access it
[  122.815569][ T8790] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.1936: Corrupt directory, running e2fsck is recommended
[  122.867468][ T4617] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  122.963272][ T8806] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  123.439377][ T8832] loop5: detected capacity change from 0 to 128
[  123.550582][ T8848] loop5: detected capacity change from 0 to 512
[  123.557593][ T8848] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  123.573081][ T8848] EXT4-fs (loop5): 1 truncate cleaned up
[  123.579167][ T8848] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  123.586060][ T8846] loop0: detected capacity change from 0 to 8192
[  123.606639][ T8846] syz.0.1961: attempt to access beyond end of device
[  123.606639][ T8846] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  123.620342][ T8846] Buffer I/O error on dev loop0, logical block 57847, async page read
[  123.631734][ T8846] syz.0.1961: attempt to access beyond end of device
[  123.631734][ T8846] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  123.645237][ T8846] Buffer I/O error on dev loop0, logical block 57847, async page read
[  123.655097][ T8846] syz.0.1961: attempt to access beyond end of device
[  123.655097][ T8846] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  123.668599][ T8846] Buffer I/O error on dev loop0, logical block 57847, async page read
[  123.677857][ T8846] syz.0.1961: attempt to access beyond end of device
[  123.677857][ T8846] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  123.691332][ T8846] Buffer I/O error on dev loop0, logical block 57847, async page read
[  123.745595][ T8855] loop1: detected capacity change from 0 to 128
[  123.755053][ T8855] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  124.376267][ T8875] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1973'.
[  124.385239][ T8875] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1973'.
[  124.412871][ T8875] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1973'.
[  124.512213][ T8875] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1973'.
[  124.521331][ T8875] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1973'.
[  124.546196][ T8875] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1973'.
[  124.570524][ T4617] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  124.626843][ T8884] bpf_get_probe_write_proto: 2 callbacks suppressed
[  124.626864][ T8884] syz.5.1975[8884] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  124.633635][ T8884] syz.5.1975[8884] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  124.635392][ T8875] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1973'.
[  124.645188][ T8884] syz.5.1975[8884] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  124.656697][ T8875] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1973'.
[  124.767846][ T8886] smc: net device bond0 applied user defined pnetid SYZ0
[  124.775682][ T8886] smc: net device bond0 erased user defined pnetid SYZ0
[  124.842340][ T8888] loop5: detected capacity change from 0 to 8192
[  124.856969][ T8888] syz.5.1978: attempt to access beyond end of device
[  124.856969][ T8888] loop5: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  124.870464][ T8888] Buffer I/O error on dev loop5, logical block 57847, async page read
[  124.879978][ T8888] syz.5.1978: attempt to access beyond end of device
[  124.879978][ T8888] loop5: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  124.893562][ T8888] Buffer I/O error on dev loop5, logical block 57847, async page read
[  124.943299][ T8899] loop0: detected capacity change from 0 to 1024
[  125.001587][ T8899] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  125.018086][ T8905] pim6reg1: entered promiscuous mode
[  125.023646][ T8905] pim6reg1: entered allmulticast mode
[  125.044289][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  125.076832][ T8909] loop0: detected capacity change from 0 to 512
[  125.106311][ T8909] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  125.123882][ T8909] ext4 filesystem being mounted at /361/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  125.219859][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  125.249378][ T8917] pim6reg1: entered promiscuous mode
[  125.254790][ T8917] pim6reg1: entered allmulticast mode
[  125.261742][ T8919] 
@ÿ: renamed from vlan0 (while UP)
[  125.297746][ T8921] loop0: detected capacity change from 0 to 1024
[  125.340656][ T8921] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  125.369873][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  125.389946][ T8934] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  125.640651][ T8951] loop5: detected capacity change from 0 to 512
[  125.693966][ T8951] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  125.714059][ T8951] ext4 filesystem being mounted at /350/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  125.778077][ T4617] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  125.844153][ T8961] lo speed is unknown, defaulting to 1000
[  125.993306][ T8968] pim6reg1: entered promiscuous mode
[  125.998741][ T8968] pim6reg1: entered allmulticast mode
[  126.086840][ T2963] hid-generic 0000:0000:0000.0007: unknown main item tag 0x1
[  126.094318][ T2963] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  126.101796][ T2963] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  126.109286][ T2963] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  126.116731][ T2963] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  126.124168][ T2963] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  126.164579][ T2963] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  126.172024][ T2963] hid-generic 0000:0000:0000.0007: unknown main item tag 0x2
[  126.179577][ T2963] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  126.187148][ T2963] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  126.194623][ T2963] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  126.202063][ T2963] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  126.209497][ T2963] hid-generic 0000:0000:0000.0007: unknown main item tag 0x4
[  126.217052][ T2963] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  126.224493][ T2963] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  126.231898][ T2963] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  126.239438][ T2963] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  126.246886][ T2963] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  126.254411][ T2963] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  126.261824][ T2963] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  126.269316][ T2963] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  126.276813][ T2963] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  126.284337][ T2963] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  126.291832][ T2963] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  126.299310][ T2963] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  126.306757][ T2963] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  126.314275][ T2963] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  126.321725][ T2963] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  126.329187][ T2963] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  126.336626][ T2963] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  126.344175][ T2963] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  126.351609][ T2963] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  126.359063][ T2963] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  126.366504][ T2963] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  126.374009][ T2963] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  126.381497][ T2963] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  126.388932][ T2963] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  126.402862][ T2963] hid-generic 0000:0000:0000.0007: hidraw0: <UNKNOWN> HID v0.03 Device [syz0] on syz0
[  126.845179][ T8989] loop2: detected capacity change from 0 to 512
[  126.873030][ T8989] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  126.888609][ T8979] lo speed is unknown, defaulting to 1000
[  126.933802][ T8989] EXT4-fs (loop2): 1 truncate cleaned up
[  126.940018][ T8989] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  127.214980][ T8995] bond0: (slave bridge3): Releasing active interface
[  127.235332][ T8995] bridge3: left promiscuous mode
[  127.240468][ T8995] bridge3: left allmulticast mode
[  127.333945][   T29] kauditd_printk_skb: 267 callbacks suppressed
[  127.333964][   T29] audit: type=1400 audit(1737241862.635:4977): avc:  denied  { read } for  pid=8996 comm="syz.1.2015" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  127.388367][   T29] audit: type=1400 audit(1737241862.665:4978): avc:  denied  { open } for  pid=8996 comm="syz.1.2015" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  127.412073][   T29] audit: type=1400 audit(1737241862.665:4979): avc:  denied  { ioctl } for  pid=8996 comm="syz.1.2015" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  127.497682][ T8999] __nla_validate_parse: 4 callbacks suppressed
[  127.497699][ T8999] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2017'.
[  127.692101][ T9009] ref_ctr increment failed for inode: 0x8c4 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff888130be5f80
[  127.719865][ T8993] ==================================================================
[  127.728011][ T8993] BUG: KCSAN: data-race in __xa_set_mark / xas_find_marked
[  127.735257][ T8993] 
[  127.737591][ T8993] write to 0xffff8881065d2fa4 of 4 bytes by task 8989 on cpu 1:
[  127.745242][ T8993]  __xa_set_mark+0x182/0x1b0
[  127.749874][ T8993]  __folio_mark_dirty+0x3b5/0x4e0
[  127.754942][ T8993]  mark_buffer_dirty+0x134/0x230
[  127.759923][ T8993]  block_write_end+0x123/0x210
[  127.764723][ T8993]  ext4_write_end+0x148/0x770
[  127.769426][ T8993]  generic_perform_write+0x33c/0x4a0
[  127.774744][ T8993]  ext4_buffered_write_iter+0x1ea/0x370
[  127.780334][ T8993]  ext4_file_write_iter+0x383/0xf20
[  127.785614][ T8993]  iter_file_splice_write+0x5f1/0x980
[  127.791024][ T8993]  direct_splice_actor+0x160/0x2c0
[  127.796156][ T8993]  splice_direct_to_actor+0x302/0x670
[  127.801548][ T8993]  do_splice_direct+0xd7/0x150
[  127.806347][ T8993]  do_sendfile+0x398/0x660
[  127.810779][ T8993]  __x64_sys_sendfile64+0x110/0x150
[  127.816014][ T8993]  x64_sys_call+0xfbd/0x2dc0
[  127.820650][ T8993]  do_syscall_64+0xc9/0x1c0
[  127.825173][ T8993]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  127.831086][ T8993] 
[  127.833414][ T8993] read to 0xffff8881065d2fa4 of 4 bytes by task 8993 on cpu 0:
[  127.840967][ T8993]  xas_find_marked+0x60a/0x660
[  127.845745][ T8993]  find_get_entry+0x54/0x390
[  127.850366][ T8993]  filemap_get_folios_tag+0x9e/0x210
[  127.855686][ T8993]  filemap_fdatawait_range+0x89/0x1f0
[  127.861079][ T8993]  __writeback_single_inode+0xe8/0x850
[  127.866559][ T8993]  writeback_single_inode+0x16c/0x3f0
[  127.871944][ T8993]  sync_inode_metadata+0x5c/0x90
[  127.876888][ T8993]  generic_buffers_fsync_noflush+0xd8/0x120
[  127.882809][ T8993]  ext4_sync_file+0x1ff/0x6c0
[  127.887531][ T8993]  vfs_fsync_range+0x116/0x130
[  127.892577][ T8993]  ext4_buffered_write_iter+0x326/0x370
[  127.898141][ T8993]  ext4_file_write_iter+0x383/0xf20
[  127.903355][ T8993]  iter_file_splice_write+0x5f1/0x980
[  127.908741][ T8993]  direct_splice_actor+0x160/0x2c0
[  127.913891][ T8993]  splice_direct_to_actor+0x302/0x670
[  127.919282][ T8993]  do_splice_direct+0xd7/0x150
[  127.924057][ T8993]  do_sendfile+0x398/0x660
[  127.928479][ T8993]  __x64_sys_sendfile64+0x110/0x150
[  127.933697][ T8993]  x64_sys_call+0xfbd/0x2dc0
[  127.938301][ T8993]  do_syscall_64+0xc9/0x1c0
[  127.942813][ T8993]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  127.948714][ T8993] 
[  127.951049][ T8993] value changed: 0x00000021 -> 0x0a000021
[  127.956764][ T8993] 
[  127.959084][ T8993] Reported by Kernel Concurrency Sanitizer on:
[  127.965244][ T8993] CPU: 0 UID: 0 PID: 8993 Comm: syz.2.2013 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0
[  127.975931][ T8993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  127.985993][ T8993] ==================================================================
[  127.994589][ T9008] uprobe: syz.1.2020:9008 failed to unregister, leaking uprobe
[  128.014899][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.