last executing test programs:

6.264054892s ago: executing program 3 (id=373):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='afs_cell\x00', r1, 0x0, 0x100000020}, 0x18)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x80, 0x80)
ioctl$SG_IO(r3, 0x2285, 0x0)
writev(r3, &(0x7f0000000400)=[{&(0x7f0000000000)="aefdda9d240300005a66000000000000000000bbee07cb010052f436dd2a00"/42, 0x2a}, {&(0x7f0000000040)="aa1d484ea0002000f747082f52a9d212fad09cdb0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e", 0x2a}], 0x2)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x7, 0x0, 0xfe, 0x3fc}]})
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10)
set_robust_list(0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x400c895}, 0x20008000)
r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r5)
r6 = socket$rds(0x15, 0x5, 0x0)
getsockopt(r6, 0x6, 0x9, &(0x7f0000000800)=""/227, &(0x7f0000000600)=0xe3)
bind$rds(r6, &(0x7f0000000380)={0x2, 0x4e24, @multicast2}, 0x10)
readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1)
ptrace$setregs(0xd, r5, 0x2, &(0x7f0000000180))
r7 = syz_open_procfs(0x0, &(0x7f0000000500)='net/ip6_flowlabel\x00')
read$ptp(r7, &(0x7f0000000280)=""/149, 0x95)
pread64(r7, &(0x7f0000000000)=""/99, 0x63, 0x4)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
r9 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0)
write$selinux_load(r9, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757813"], 0x65)
ptrace$cont(0x21, r5, 0x80000001, 0x4)

5.962926241s ago: executing program 3 (id=375):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x68}}, 0x800)
sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}]}]}]}], {0x14}}, 0x70}}, 0x24040884)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000020000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e64000000"], 0x10c}}, 0x0)

4.919339715s ago: executing program 3 (id=380):
r0 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0)
r3 = accept$inet(0xffffffffffffffff, &(0x7f00000004c0)={0x2, 0x0, @multicast2}, &(0x7f0000000740)=0x10)
connect$inet(r3, &(0x7f0000000780)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014})
pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000440)='/sys/power/image_size', 0x0, 0x12f)
io_setup(0x4fe, &(0x7f0000000240)=<r6=>0x0)
io_submit(r6, 0x1, &(0x7f0000000180)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0xf, r5, &(0x7f00000001c0)='FB', 0x2, 0x9, 0x0, 0x0, r5}])
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="000400"], &(0x7f0000000240)='GPL\x00', 0x0, 0xcd, &(0x7f0000000500)=""/205, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x9, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[r4, r1, r4, r4, r4], &(0x7f0000000340)=[{0x1, 0x5, 0xa, 0xc}]}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r4}, &(0x7f0000000380), &(0x7f0000000400)=r8}, 0x20)
socket$nl_route(0x10, 0x3, 0x0)

4.713723662s ago: executing program 4 (id=383):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x44}}, 0x0)

4.652709299s ago: executing program 0 (id=384):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
capset(&(0x7f0000000740)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200004, 0x0, 0x800, 0xffffffff, 0x7})
write$RDMA_USER_CM_CMD_BIND(r0, 0x0, 0x0)
r1 = socket(0x2b, 0x80000, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x54, 0x24, 0xd0f, 0x3, 0x3, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0x4, 0xe}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xa, 0x8, 0x5, 0x0, 0x7, 0x10000}}, {0x4}}]}, @qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x54}, 0x1, 0x0, 0x0, 0x401c4}, 0x8840)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
ioctl$FAT_IOCTL_GET_VOLUME_ID(r3, 0x80047213, &(0x7f0000001100))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001200)={&(0x7f0000001240)='xen_cpu_write_ldt_entry\x00', r3, 0x0, 0x100000000000005}, 0xfffffffffffffd69)
r4 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000001000)='/proc/self/attr/keycreate\x00', 0x64, 0x0)
setrlimit(0x9, 0x0)
pread64(r4, &(0x7f0000000000)=""/4096, 0x1000, 0x4)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000e40)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r5}, 0x10)
r6 = socket$netlink(0x10, 0x3, 0xb)
ioctl$sock_inet_SIOCGIFDSTADDR(r6, 0x8917, &(0x7f0000001140)={'bridge0\x00', {0x2, 0x0, @dev}})
socket$inet_smc(0x2b, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0xac5}, 0x18)
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x2800088, &(0x7f0000000240)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x95, 0x2be, &(0x7f0000000340)="$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")
r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81800)
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1b5b419, &(0x7f0000001780)=ANY=[@ANYRESOCT=r7, @ANYRES16=r2, @ANYRES32=r4, @ANYRES16=r7], 0xb, 0x0, &(0x7f0000000000))
renameat2(r7, &(0x7f0000000b40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r7, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)

4.586071608s ago: executing program 4 (id=385):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='afs_cell\x00', r1, 0x0, 0x100000020}, 0x18)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x80, 0x80)
ioctl$SG_IO(r3, 0x2285, 0x0)
writev(r3, &(0x7f0000000400)=[{&(0x7f0000000000)="aefdda9d240300005a66000000000000000000bbee07cb010052f436dd2a00"/42, 0x2a}, {&(0x7f0000000040)="aa1d484ea0002000f747082f52a9d212fad09cdb0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e", 0x2a}], 0x2)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x7, 0x0, 0xfe, 0x3fc}]})
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10)
set_robust_list(0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x400c895}, 0x20008000)
r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r5)
r6 = socket$rds(0x15, 0x5, 0x0)
getsockopt(r6, 0x6, 0x9, &(0x7f0000000800)=""/227, &(0x7f0000000600)=0xe3)
bind$rds(r6, &(0x7f0000000380)={0x2, 0x4e24, @multicast2}, 0x10)
readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1)
ptrace$setregs(0xd, r5, 0x2, &(0x7f0000000180))
r7 = syz_open_procfs(0x0, &(0x7f0000000500)='net/ip6_flowlabel\x00')
read$ptp(r7, &(0x7f0000000280)=""/149, 0x95)
pread64(r7, &(0x7f0000000000)=""/99, 0x63, 0x4)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
r9 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0)
write$selinux_load(r9, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757813"], 0x65)
ptrace$cont(0x21, r5, 0x80000001, 0x4)

4.450187556s ago: executing program 0 (id=387):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000"], 0x0, 0x7f, 0x0, 0x0, 0x628d1822d3bda9f9, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0xa82, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2)
io_setup(0x7, &(0x7f0000000380)=<r2=>0x0)
io_submit(r2, 0x2, &(0x7f0000000b40)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x7, 0x8655, r1, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x8, r1, 0x0, 0x0, 0x5, 0x0, 0x6}])

4.372811916s ago: executing program 4 (id=389):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20)
close(r0)

4.338461131s ago: executing program 4 (id=390):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r2}, 0x18)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
close(r0)

4.079844174s ago: executing program 4 (id=392):
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000003380), 0x8202, 0x0)
mmap(&(0x7f0000277000/0x4000)=nil, 0x4000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
getpid()
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000780)='kfree\x00', r1}, 0x18)
socket$inet6(0xa, 0x2, 0x0)
mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x6083, 0x3)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
setresgid(0xffffffffffffffff, 0xffffffffffffffff, 0xee00)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020025797a31000000000900010073797a3000000000080005400000001c"], 0xe8}}, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000080))
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
write$cgroup_devices(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360"], 0xffdd)

3.481805741s ago: executing program 2 (id=393):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000000), 0x2}, 0x20)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9)
prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd')
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x11, 0x8, &(0x7f0000001140)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYRESDEC=r0, @ANYRES16=r1], &(0x7f0000000100)='GPL\x00'}, 0x94)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000440)=@security={'security\x00', 0x4, 0x4, 0x3b8, 0xffffffff, 0xd0, 0x0, 0x1a8, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x7fffffe, 0x0, {[{{@ipv6={@dev, @ipv4={'\x00', '\xff\xff', @multicast1}, [], [], 'ipvlan1\x00', 'geneve0\x00', {}, {}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@private1, @mcast1, [], [], 'geneve1\x00', 'macvlan0\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'syz0\x00'}}, @common=@ipv6header={{0x28}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x5, 0x3, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a6970"], 0x60}}, 0x0)
ioperm(0x0, 0xd, 0x4000000000000020)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'veth1_vlan\x00', <r7=>0x0})
bind$packet(r6, &(0x7f0000000040)={0x11, 0x1, r7, 0x1, 0x9}, 0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x70bd2a, 0x2000001, {0x0, 0x0, 0x0, r7, {0x7, 0xa}, {0xd, 0xffe0}, {0x8, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054)

3.463640323s ago: executing program 0 (id=394):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
capset(&(0x7f0000000740)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200004, 0x0, 0x800, 0xffffffff, 0x7})
write$RDMA_USER_CM_CMD_BIND(r0, 0x0, 0x0)
r1 = socket(0x2b, 0x80000, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x54, 0x24, 0xd0f, 0x3, 0x3, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0x4, 0xe}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xa, 0x8, 0x5, 0x0, 0x7, 0x10000}}, {0x4}}]}, @qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x54}, 0x1, 0x0, 0x0, 0x401c4}, 0x8840)
prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='\x81\x00\x00\x00')
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
ioctl$FAT_IOCTL_GET_VOLUME_ID(r3, 0x80047213, &(0x7f0000001100))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001200)={&(0x7f0000001240)='xen_cpu_write_ldt_entry\x00', r3, 0x0, 0x100000000000005}, 0xfffffffffffffd69)
r4 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000001000)='/proc/self/attr/keycreate\x00', 0x64, 0x0)
setrlimit(0x9, 0x0)
pread64(r4, &(0x7f0000000000)=""/4096, 0x1000, 0x4)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000e40)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r5}, 0x10)
r6 = socket$netlink(0x10, 0x3, 0xb)
ioctl$sock_inet_SIOCGIFDSTADDR(r6, 0x8917, &(0x7f0000001140)={'bridge0\x00', {0x2, 0x0, @dev}})
r7 = socket$inet_smc(0x2b, 0x1, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0xac5}, 0x18)
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x2800088, &(0x7f0000000240)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x95, 0x2be, &(0x7f0000000340)="$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")
r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81800)
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1b5b419, &(0x7f0000001780)=ANY=[@ANYRESOCT=r9, @ANYRES16=r2, @ANYRES32=r4, @ANYRES16=r9], 0xb, 0x0, &(0x7f0000000000))
renameat2(r9, &(0x7f0000000b40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r9, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r8, 0x0, 0x44, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c0000000000000c548dc7914cb11ad63bf3707164aac031971c4be105eb953f86fbc6b204e076aa7a493e796123bbbd8e3b7e62d8fd097cf21d6d431a069ebc0aefd5fce80cc99fb38c771fa46e2c32a95fe99", 0x0, 0x86, 0x0, 0xffffffffffffff80, 0x0, &(0x7f0000000000)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36eb77dd0aaa2dbe567d168904cf0d5bce1771889c98ffc0abf", 0x0}, 0x15)
setsockopt$inet_mreqsrc(r7, 0x0, 0x26, &(0x7f0000000000)={@private=0xa010100, @multicast2, @remote}, 0xc)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000001180)={{0x1, 0x1, 0xe, 0x3, 0xfff}})

3.304176124s ago: executing program 2 (id=397):
unshare(0x68040200)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000)
socket$nl_generic(0x10, 0x3, 0x10)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x1022002, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="5800000002060108000000bca3000000000000400500010006000000050005000200000005000400000000000900020073797a31000000000c000780080012400000000211000300686173683a69702c6d61726b"], 0x58}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=r1, @ANYBLOB="b6c903f27000000014002b800c000800", @ANYRES32, @ANYBLOB="080003000200000008001b"], 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000000906010200000000000000000200ffff200007800c00018008000140a2fd4ebc08000a400000000205000300020000000900020073797a310000000005000100"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10)
fsopen(0x0, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f00000002c0)='wg\xc1\xd31\x00')
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000020000000000000000000003000000000300000002000000fdffffff00000000000000010500000010000001000000000000000902"], 0x0, 0x4e}, 0x28)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7c40280f}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}}], {0x14}}, 0xa4}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "a05c7b5d00008023e9c5bcf5ff7700"})
r5 = socket$packet(0x11, 0x3, 0x300)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
sendmmsg(r5, &(0x7f0000000880)=[{{&(0x7f0000000080)=@qipcrtr={0x2a, 0x3, 0x4000}, 0x80, 0x0}}], 0x1, 0x41)

3.297473185s ago: executing program 0 (id=398):
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x1}}, './file0\x00'})
ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000080)=0x8ee)
syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x8000, &(0x7f0000000180)={[{@resuid}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x519, &(0x7f00000009c0)="$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")

2.977756876s ago: executing program 0 (id=399):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='afs_cell\x00', r1, 0x0, 0x100000020}, 0x18)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x80, 0x80)
ioctl$SG_IO(r3, 0x2285, 0x0)
writev(r3, &(0x7f0000000400)=[{&(0x7f0000000000)="aefdda9d240300005a66000000000000000000bbee07cb010052f436dd2a00"/42, 0x2a}, {&(0x7f0000000040)="aa1d484ea0002000f747082f52a9d212fad09cdb0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e", 0x2a}], 0x2)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x7, 0x0, 0xfe, 0x3fc}]})
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10)
set_robust_list(0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x400c895}, 0x20008000)
r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r5)
r6 = socket$rds(0x15, 0x5, 0x0)
getsockopt(r6, 0x6, 0x9, &(0x7f0000000800)=""/227, &(0x7f0000000600)=0xe3)
bind$rds(r6, &(0x7f0000000380)={0x2, 0x4e24, @multicast2}, 0x10)
readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1)
ptrace$setregs(0xd, r5, 0x2, &(0x7f0000000180))
r7 = syz_open_procfs(0x0, &(0x7f0000000500)='net/ip6_flowlabel\x00')
read$ptp(r7, &(0x7f0000000280)=""/149, 0x95)
pread64(r7, &(0x7f0000000000)=""/99, 0x63, 0x4)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
r9 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0)
write$selinux_load(r9, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757813"], 0x65)
ptrace$cont(0x21, r5, 0x80000001, 0x4)

2.886723468s ago: executing program 1 (id=400):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20)
close(r0)

2.859071241s ago: executing program 3 (id=401):
ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000140)=0xc2)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x80b0, 0x4d, 0x800020, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, 0x0})
syz_usb_disconnect(0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0), r0)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYRES16=r1, @ANYBLOB="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"], 0x1c8}}, 0x0)

2.825464455s ago: executing program 1 (id=402):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x11, 0xb, &(0x7f0000001200)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001000)={&(0x7f00000002c0)='sched_switch\x00', r0}, 0x18)
add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
socket$rxrpc(0x21, 0x2, 0xa)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18)
r2 = inotify_init1(0x80800)
inotify_add_watch(r2, &(0x7f0000000240)='./file1\x00', 0x2000775)
open(&(0x7f0000000280)='.\x00', 0x40000, 0x101)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCFLSH(r5, 0x80045439, 0x40bea7b87a0000)
setsockopt$sock_attach_bpf(r4, 0x1, 0x4c, &(0x7f0000000000), 0x4)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r7}, 0x10)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', 0x0, 0x2})
sendmsg$unix(r3, 0x0, 0x4000010)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000340), 0x6}, 0x0, 0xa86, 0x8406, 0x5, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0xedd2}, 0x0, 0xffbdffffffffffff, 0xffffffffffffffff, 0x1)
r8 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r8, 0x0, 0xc8, &(0x7f0000000000), 0x4)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a00)=@newtaction={0x88c, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1000, 0xffff, 0xa, 0x81, 0x7, 0x6, 0x7, 0x9, 0x4, 0x4, 0x6, 0x3, 0x5, 0x3, 0x6, 0x6, 0xffff, 0x3, 0x4, 0x6, 0x0, 0x20, 0xb, 0x5, 0x5, 0x2, 0x62, 0x9, 0xfffffff8, 0x6338, 0x70, 0x7, 0x9, 0x8, 0x9, 0x9, 0x80000000, 0x7, 0xfff, 0x2, 0xffffff00, 0xfffffff9, 0x6, 0xfffffffe, 0x600000, 0x6, 0x1, 0x8, 0x1, 0xbc0, 0x9bf1, 0x8000005, 0x2, 0x0, 0xe, 0x9, 0x1ff, 0xb9, 0xc741, 0x800, 0x5, 0x1, 0xed, 0x1, 0x8001, 0xb, 0x5b96, 0xffff, 0x2, 0x20000000, 0xff, 0x1, 0x4, 0x9, 0x401, 0x2, 0x1000, 0x101, 0x50, 0x4, 0x2, 0x1, 0x5, 0x401, 0x7, 0x8a6b, 0xfffffbff, 0x4, 0x8000, 0x1, 0x5, 0x6, 0x2, 0x5, 0xffffffff, 0x80, 0x10000008, 0xff, 0x9, 0xfffffff2, 0x3b96, 0xfffff800, 0x8, 0x3, 0x2000f, 0xf8b, 0x10001, 0x3, 0x2, 0xa78, 0x3, 0xcb0, 0x6, 0x9, 0x9, 0x0, 0x7, 0x80000001, 0x7, 0x10, 0x3, 0x40, 0x8, 0x8, 0x5, 0x8c, 0xaa93, 0x800, 0x3, 0x9, 0x10001, 0x9, 0x1, 0xd12, 0x0, 0x23487474, 0x3cd2, 0x0, 0x7, 0x6, 0x5, 0xb1, 0x2, 0x7, 0x9, 0x2, 0xaa83, 0x40, 0xff, 0x9, 0x9, 0x1, 0x5, 0x0, 0x2, 0x1, 0x2, 0x9, 0x4, 0x2, 0x7, 0xffffffff, 0x1, 0xd76a, 0x6, 0xfffffff6, 0x4, 0x1, 0xfffffffd, 0xfffffffc, 0x50, 0x7359, 0x8, 0x7, 0x8, 0xa, 0x2d5, 0x6, 0xf, 0x1, 0x773a, 0x6b7b, 0x10001, 0x3, 0x4, 0x5, 0x7, 0x4, 0x1, 0x2, 0x5, 0x0, 0x6, 0x3ff, 0x9, 0x5, 0x5, 0xfffffffe, 0x7, 0x8, 0xffff, 0xfffffffa, 0x4, 0xa, 0xae2b, 0x1, 0x6, 0x1a71, 0x0, 0x10001000, 0x0, 0x3, 0x7, 0x1, 0x1, 0x3c34, 0x6, 0x10000, 0x5, 0x7fff, 0x0, 0x8, 0x3, 0x3, 0xc, 0x100, 0x0, 0x2, 0xb, 0x5, 0xc8, 0x557c, 0x9, 0x8, 0x0, 0x3, 0x80, 0x8000, 0x7bc, 0x1, 0x8, 0x6, 0xe, 0x1, 0x0, 0x9, 0x5, 0x279, 0x8000, 0x8, 0x1, 0x3, 0x80000000, 0x3, 0x9, 0x1ff]}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x9, 0xd, 0x7, 0x9, 0x6, 0x0, 0x4, 0x81, 0x1, 0x100, 0x7, 0x3f, 0x3, 0x8, 0x9, 0x2, 0x6, 0x6dc0, 0x8, 0x5, 0x12c, 0x3, 0x5, 0x5, 0x7, 0x100, 0x6, 0x8, 0x9, 0x0, 0x3, 0xffffffff, 0x200, 0xfffffffe, 0x328d, 0xfffffe01, 0x9, 0x8, 0x2, 0xffff7ffc, 0x4f, 0x0, 0x10, 0x3, 0x8000, 0x2, 0x17, 0xffff, 0x8, 0x9, 0xffff, 0x0, 0x3, 0x2, 0x42f, 0xffffff2c, 0x5, 0xbd, 0xe0, 0x6, 0xc26, 0x97, 0x6, 0x3, 0xe, 0x1, 0x800, 0x1bf, 0x4, 0x5, 0x4, 0x8, 0x7ce7c36c, 0x20a6, 0x1eb, 0x10001, 0xc, 0x5102, 0x6ce, 0x6, 0x3fe2fdbc, 0x2, 0x5, 0xfffffff9, 0x2, 0x4e30, 0x6, 0x6, 0x2, 0x90, 0x2, 0x0, 0xc80e, 0x4, 0x5, 0x450, 0xe0, 0x6, 0x5, 0x2, 0x5, 0x5, 0x9, 0x1045800, 0xfffffffd, 0xffffffde, 0x6a4, 0x5, 0x2000009, 0x6, 0x1f, 0xb89, 0x80000006, 0x7, 0x1ff, 0x6, 0xfffff77b, 0x3, 0xffffffff, 0xfffff400, 0x6, 0x6, 0x8, 0x9, 0x2, 0x7, 0x401, 0xa7d, 0x5, 0xfffff9f3, 0x1, 0x9, 0x1, 0xb4, 0x2, 0xffe00000, 0x8, 0x7, 0x0, 0x5891, 0x8, 0x7, 0xb, 0x0, 0x400008, 0xb, 0x0, 0xfe, 0x4f, 0x8, 0x33f, 0x70fc7f4f, 0x0, 0x4, 0x0, 0xc, 0x2, 0x5, 0x6, 0x3, 0x2, 0x1, 0x0, 0x2c46512a, 0x3, 0xffffffff, 0x0, 0x10000, 0x0, 0x9, 0x3, 0xc, 0x7fffffff, 0xdc, 0x80000000, 0x26, 0xbb16, 0x2, 0x9, 0xbd1, 0x44, 0xffffff7f, 0xa3, 0x1, 0x4, 0x0, 0x3, 0x1, 0x5, 0x0, 0x9, 0x4, 0x4b, 0x1, 0x8000, 0x2, 0x4, 0x2e4, 0xc7, 0x4, 0x4, 0x4, 0x81, 0xff, 0x40, 0x1, 0x10, 0x6, 0x9, 0x1, 0x4e2, 0x104, 0x7, 0x3ff, 0x10001, 0x4, 0x1, 0x101, 0x900, 0x101, 0x5, 0x6, 0xd, 0x4, 0x101, 0x9, 0x9, 0x6, 0x800, 0x101, 0xf07, 0x3, 0x2, 0x83, 0xfff, 0x80000001, 0x5, 0x2, 0xee8, 0x1ff, 0x81, 0x24000, 0x6, 0x2, 0x9, 0x2, 0x10, 0x8001, 0xa, 0x8, 0xb127, 0x6, 0x9, 0x7fff, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xb, 0x4, 0x4, 0xffffffff, 0x7, {0x3, 0x2, 0x4, 0x40, 0x6, 0x1ff}, {0x2, 0x1, 0x2, 0xcd4, 0x9, 0x8}, 0x0, 0x7ff}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88c}, 0x1, 0x0, 0x0, 0x8000}, 0x4)

2.808669118s ago: executing program 0 (id=403):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'sit0\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, &(0x7f0000000200), &(0x7f0000000280)=r3}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x4}, 0x18)
sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}, @TCA_RATE={0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x48801}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r4=>0xffffffffffffffff, {0x1}}, './file0\x00'})
ioctl$TUNSETSNDBUF(r4, 0x400454d4, &(0x7f0000000080)=0x8ee)
keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000240)=""/201, 0xffffff47)
r5 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000540)="1400000016000b63d224068520c6d0242d127212", 0x14}], 0x1}, 0x0)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8)
bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6)
syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x8000, &(0x7f0000000180)={[{@resuid}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x519, &(0x7f00000009c0)="$eJzs3cFvI1cZAPBvJvE2u5tiFxAqlSgVLcpWsHbS0DZCCMoFTpWA5b6ExImi2HEUO2UTVZCK/wAhgcSJExck/gCkqgfEGVWqBBfEAQECIdjCAQnoII/HJevYSaBJnI1/P+mt35sZz/e9ifw8M56dCWBiPRURL0XEVEQ8GxHlYnpalDjole5yb99/daVbksiyO39JIimm9dfVbU9HxM3ibTMR8ZUvRnw9ORq3vbe/udxo1HeKdq3T3K619/ZvbzSX1+vr9a3FxYUXll5cen5pPiu8p35W+pUffeGzr3/yG7+9+6db3+ym9ZkPRSkG+nGWel0v5duir7uNds4j2BhMFf0pjTsRAABOpbuP//6I+Fi+/1+OqXxvbsDUODIDAAAAzkr2udn4VxKRAQAAAFdWGhGzkaTV4lqA2UjTa8W5gQ/GjbTRanc+sdba3VrtzouoRCld22jU54trhStRSrrtheIa2377uYH2YkQ8FhHfLV/P29WVVmN1zOc+AAAAYFLcHDj+/3s5zesnG/L/BAAAAIDLqzKyAQAAAFwVDvkBAADg6hs8/n99THkAAAAA5+JLL7/cLVn/+derr+ztbrZeub1ab29Wm7sr1ZXWznZ1vdVaz+/Z1zxpfY1Wa/tTsbV7r9aptzu19t7+3WZrd6tzd+OBR2ADAAAAF+ixj77xqyQiDj59PS9R3AcQ4AG/H3cCwFmaGncCwNi4izdMrlK/cm28eQDjk5ww38U7AADw8Jv78NHf//unAkpjzQw4b671AYDJ4/d/mFwlVwDCREsj4n296iOjlhn5+/8vThslyyLeLB+e4vwiAABcrNm8JGm1OA6YjTStViMejUgrUUrWNhr1+eL44Jfl0iPd9kL+zuTEa4YBAAAAAAAAAAAAAAAAAAAAAAAAgJ4sSyIDAAAArrSI9I9Jfjf/iLnyM7OD5weuJf8oxx+Kxg/ufO/ecqezs9Cd/tf8WV7XIqLz/TulfPpzIx8fBgAAAJy15GDkrN5xevG6cKFZAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAB3r7/6kq/XGTcP38+IirD4k/HTP46E6WIuPG3JKYPvS+JiKkziH/wWkQ8Pix+Eu9kWVYpshgW//o5x6/km2Z4/DQibp5BfJhkb3THn5eGff7SeCp/Hf75my7KezV6/EuLyI/n49yw8efRI2trDo3xxFs/qY2M/1rEE9PDx5/++JuMiP/0kbX9M8uyozG+9tX9/VHxsx9GzA39/kkeiFXrNLdr7b392xvN5fX6en1rcXHhhaUXl55fmq+tbTTqxb9DY3znIz9957j+3xgS/ze/7o2/x/X/mVErHfDvt+7d/0CvWhoW/9bTQ79/Z2JE/LT47vt4Ue/On+vXD3r1w5788ZtPHtf/1RHb/6S//61T9v/ZL3/7d6dcFAC4AO29/c3lRqO+c0xl5hTLPIyVn81cijT+x0r2rd5f7rLk8/9Wunur/53S79UlSOxQJbuwWFNxSbr8bmWswxIAAHAOfv7uTv+4MwEAAAAAAAAAAAAAAAAAAIDJdRG3ExuMeTCergIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHOs/AQAA//9GB9/T")

2.807949158s ago: executing program 4 (id=404):
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x1}}, './file0\x00'})
ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000080)=0x8ee)
syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x8000, &(0x7f0000000180)={[{@resuid}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x519, &(0x7f00000009c0)="$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")

2.734489137s ago: executing program 1 (id=405):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
mmap(&(0x7f00008f5000/0x4000)=nil, 0x4000, 0x2, 0x4008032, 0xffffffffffffffff, 0xffffd000)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
eventfd2(0x1, 0x800)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff)
sendfile(r4, r3, 0x0, 0xfffa83)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000020000100ecc2000000000000020020000000000100000000140003006c6f0000000000000000000000000000080002"], 0x38}, 0x1, 0x0, 0x0, 0x40008c4}, 0x8000)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'syzkaller0\x00'})

1.028143857s ago: executing program 2 (id=406):
socket$packet(0x11, 0xa, 0x300)
socket$packet(0x11, 0xa, 0x300)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0xb}, 0x94)
socket$packet(0x11, 0xa, 0x300)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000500), 0x96b, r1}, 0x38)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0xfffffffffffffffe}, 0x18)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x11, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x3}, {}, {}, [@map_idx={0x18, 0x0, 0x5, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000680)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x58, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x94)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, 0x0, {0x7, 0xa}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054)

738.010605ms ago: executing program 3 (id=407):
socket$packet(0x11, 0xa, 0x300)
socket$packet(0x11, 0xa, 0x300)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0xb}, 0x94)
socket$packet(0x11, 0xa, 0x300)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000500), 0x96b, r2}, 0x38)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0xfffffffffffffffe}, 0x18)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
openat$pfkey(0xffffffffffffff9c, 0x0, 0x4040, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000780)=ANY=[@ANYBLOB="180000001c00000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='gpio_value\x00', r1}, 0x18)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9041, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'})
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth0\x00', <r6=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x11, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x3}, {}, {}, [@map_idx={0x18, 0x0, 0x5, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000680)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x58, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x94)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r6, {0x7, 0xa}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x200000, &(0x7f0000000000), 0xfe, 0x585, &(0x7f0000001500)="$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")

736.724995ms ago: executing program 1 (id=408):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000000), 0x2}, 0x20)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9)
prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd')
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x11, 0x8, &(0x7f0000001140)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYRESDEC=r0, @ANYRES16=r1], &(0x7f0000000100)='GPL\x00'}, 0x94)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000440)=@security={'security\x00', 0x4, 0x4, 0x3b8, 0xffffffff, 0xd0, 0x0, 0x1a8, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x7fffffe, 0x0, {[{{@ipv6={@dev, @ipv4={'\x00', '\xff\xff', @multicast1}, [], [], 'ipvlan1\x00', 'geneve0\x00', {}, {}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@private1, @mcast1, [], [], 'geneve1\x00', 'macvlan0\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'syz0\x00'}}, @common=@ipv6header={{0x28}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x5, 0x3, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a6970"], 0x60}}, 0x0)
ioperm(0x0, 0xd, 0x4000000000000020)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'veth1_vlan\x00', <r7=>0x0})
r8 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x70bd2a, 0x2000001, {0x0, 0x0, 0x0, r7, {0x7, 0xa}, {0xd, 0xffe0}, {0x8, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054)

387.42529ms ago: executing program 1 (id=409):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000000), 0x2}, 0x20)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9)
prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd')
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x11, 0x8, &(0x7f0000001140)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYRESDEC=r0, @ANYRES16=r1], &(0x7f0000000100)='GPL\x00'}, 0x94)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000440)=@security={'security\x00', 0x4, 0x4, 0x3b8, 0xffffffff, 0xd0, 0x0, 0x1a8, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x7fffffe, 0x0, {[{{@ipv6={@dev, @ipv4={'\x00', '\xff\xff', @multicast1}, [], [], 'ipvlan1\x00', 'geneve0\x00', {}, {}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@private1, @mcast1, [], [], 'geneve1\x00', 'macvlan0\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'syz0\x00'}}, @common=@ipv6header={{0x28}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x5, 0x3, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a6970"], 0x60}}, 0x0)
ioperm(0x0, 0xd, 0x4000000000000020)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'veth1_vlan\x00', <r7=>0x0})
bind$packet(r6, &(0x7f0000000040)={0x11, 0x1, r7, 0x1, 0x9}, 0x14)
r8 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x70bd2a, 0x2000001, {0x0, 0x0, 0x0, r7, {0x7, 0xa}, {0xd, 0xffe0}, {0x8, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054)

206.415623ms ago: executing program 1 (id=410):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$caif_stream(0x25, 0x1, 0x1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000"], 0x0, 0x7f, 0x0, 0x0, 0x628d1822d3bda9f9, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0xa82, 0x0)
timerfd_create(0x3, 0x80800)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x2)
io_setup(0x7, &(0x7f0000000380)=<r4=>0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00'}, 0x18)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000000000000080000009500000000000e00"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x14, 0x0, 0x14}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="a3cf15750e33c57e6e7f39fcfc749d6e3cc9c72889fd2a52c3621b64ff2d6d05786406d4ab6e88652cb6675e735e09bd4507ce2331d28f13654714c0713d4650eabe2e35af0d1dc6ebb3ccd38cb4013c6a51252dbdb6d302581146b258f6ccf3303bcc47bd55777bf2f5a640b44243abf3b628cb6a42c283229e3ecaadc37e32a8f1f4883ad31626b785750c67609dc14458a9a70f0504a90c3e92bf3860a89c86e672", @ANYRES16=r0], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000a00)=ANY=[@ANYBLOB="7b822f560be9a3f5de165df6b3361e2680e0b913c1bef1778503d622d33fa2170805629dabcde339f776e9e556daf1edb0eff33500ea24267409eff7a7eaa7e5af9efedff0c64b1fdcd94453085e84737c5e5770bce0014fcf46d5d6d3fea46509d65d95f00f8ad4c39fc1b76b930b81ae630d5bbfa09c23638f", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000480)='kfree\x00', r6, 0x0, 0x2}, 0x18)
syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0)
io_submit(r4, 0x2, &(0x7f0000000b40)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x7, 0x8655, r3, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x8, r3, 0x0, 0x0, 0x5, 0x0, 0x6}])

196.810164ms ago: executing program 2 (id=411):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r2 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000009c0)={r2})

152.289ms ago: executing program 2 (id=412):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r2 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000009c0)={r2})

102.513157ms ago: executing program 2 (id=413):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x80002, 0x0)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000004, 0xfa55e201a6dbdd, @perf_bp={&(0x7f0000000200)}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
socket$kcm(0x22, 0x2, 0x21)
sendfile(r0, r0, 0x0, 0x2000006)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000ac0)=@delchain={0x230, 0x65, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x4, 0x4}, {0x6, 0xfff2}, {0x1, 0xc}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_flow={{0x9}, {0x1e8, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0x23}, @TCA_FLOW_XOR={0x8, 0x7, 0x6}, @TCA_FLOW_KEYS={0x8, 0x1, 0x2aab}, @TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x40, 0x8, 0x1}, {0x4, 0x0, 0x5}}}]}]}, @TCA_FLOW_EMATCHES={0x1b0, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0xf8, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x28, 0x2, 0x0, 0x0, {{0x80, 0x9, 0x2}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0xb10728f083c9e853}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x1, 0x8, 0x5}, {0x2, 0x0, 0x2}}}, @TCF_EM_CONTAINER={0x80, 0x3, 0x0, 0x0, {{0x1, 0x0, 0x3}, "fea1e2a020e22f5c0f2064a434ba30c3aa30d13a472999fa46ab922e38f2b526db4ce1e8b94f68b4af760f01a3c000bfc0ca982d9c5731a37191611e5f991fce40bb046defdefaa8441471e6fe9a28646793f2ae984bdd40297f5dcf345c5c390fa26755a919dbc4af2a3e20a247dbb65120"}}, @TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{0x7, 0x9, 0x7ff}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}]}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x8, 0x7, 0x6cc5}, {{0x3, 0x1, 0x1, 0x1}, {0x1}}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x9, 0x7, 0x101}, {{0x1, 0x1, 0x0, 0x1}, {0x2, 0x0, 0x1}}}}]}, @TCA_EMATCH_TREE_LIST={0x68, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x0, 0x8, 0x401}, {0x3, 0x5, 0x4}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x4, 0x8, 0x6}, {0xffffffffffffffff, 0x2, 0x2}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x1, 0x1, 0x5}, {0x1, 0x80000001, 0x8, 0x2, 0x3, 0x1, 0x1}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x8, 0x3, 0x3}, {0xfffffffc, 0x5, 0x0, 0xfffff927}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x828b, 0x8, 0xd1}, {0x2, 0x3, 0x5}}}]}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x5, 0x1, 0xffff}, {0x6960, 0x7, 0xc3e, 0x2, 0x6, 0x1, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8000}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}]}]}}, @TCA_RATE={0x6, 0x5, {0x2}}, @TCA_RATE={0x6, 0x5, {0x6, 0x6}}]}, 0x230}, 0x1, 0x0, 0x0, 0x4004010}, 0xc001)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
r1 = socket$phonet_pipe(0x23, 0x5, 0x2)
r2 = mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x120, 0x0)
mq_timedreceive(r2, &(0x7f000001a600)=""/102385, 0x18ff1, 0x0, 0x0)
connect$phonet_pipe(r1, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=<r3=>0xffffffffffffffff, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$inet6(r4, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRESOCT=r3], 0x5c1}, 0x20008001)
sendmsg$inet6(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000680)}], 0x1}, 0x20000044)
r5 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00')
preadv(r5, &(0x7f0000000d00)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1, 0x2, 0x200)

0s ago: executing program 3 (id=414):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x3d, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYRES16=0x0, @ANYRESOCT=0x0], 0x9c}, 0x1, 0x0, 0x0, 0x24004144}, 0x20000050)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4616, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x3, 0xb, 0x1, 0x8, 0x2020001, 0xc, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0900000004000000040000000c"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18040000000000000000000000400000850000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r0}, &(0x7f0000000000), &(0x7f0000000200)=r1}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000001240)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x1b0, 0xc8, 0x8, 0x0, 0x5803, 0x310, 0x2e8, 0x2e8, 0x310, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x190, 0x1b0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67442c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x2}}, @common=@inet=@socket1={{0x28}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @mcast2, [], [], 'macvtap0\x00', 'syzkaller1\x00'}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r4, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000040)={'lo\x00'})
sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0xd}}, [@TCA_INGRESS_BLOCK={0xc0}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0)

kernel console output (not intermixed with test programs):

[   22.640082][   T29] audit: type=1400 audit(1768407500.575:62): avc:  denied  { search } for  pid=3198 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   22.662259][   T29] audit: type=1400 audit(1768407500.575:63): avc:  denied  { search } for  pid=3198 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=477 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   22.684939][   T29] audit: type=1400 audit(1768407500.575:64): avc:  denied  { search } for  pid=3198 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   22.707966][   T29] audit: type=1400 audit(1768407500.575:65): avc:  denied  { search } for  pid=3198 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   22.731052][   T29] audit: type=1400 audit(1768407500.575:66): avc:  denied  { read open } for  pid=3199 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
Warning: Permanently added '10.128.1.130' (ED25519) to the list of known hosts.
[   29.990743][   T29] kauditd_printk_skb: 3 callbacks suppressed
[   29.990760][   T29] audit: type=1400 audit(1768407507.925:70): avc:  denied  { mounton } for  pid=3303 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   30.020002][   T29] audit: type=1400 audit(1768407507.955:71): avc:  denied  { mount } for  pid=3303 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   30.022298][ T3303] cgroup: Unknown subsys name 'net'
[   30.047988][   T29] audit: type=1400 audit(1768407507.985:72): avc:  denied  { unmount } for  pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   30.168752][ T3303] cgroup: Unknown subsys name 'cpuset'
[   30.175037][ T3303] cgroup: Unknown subsys name 'rlimit'
[   30.325786][   T29] audit: type=1400 audit(1768407508.255:73): avc:  denied  { setattr } for  pid=3303 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   30.355923][   T29] audit: type=1400 audit(1768407508.255:74): avc:  denied  { create } for  pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   30.376692][   T29] audit: type=1400 audit(1768407508.255:75): avc:  denied  { write } for  pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   30.397140][   T29] audit: type=1400 audit(1768407508.255:76): avc:  denied  { read } for  pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   30.417445][   T29] audit: type=1400 audit(1768407508.255:77): avc:  denied  { mounton } for  pid=3303 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   30.436795][ T3307] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   30.442442][   T29] audit: type=1400 audit(1768407508.255:78): avc:  denied  { mount } for  pid=3303 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[   30.474335][   T29] audit: type=1400 audit(1768407508.285:79): avc:  denied  { read } for  pid=3045 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[   30.505228][ T3303] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   32.084328][ T3315] chnl_net:caif_netlink_parms(): no params data found
[   32.115963][ T3317] chnl_net:caif_netlink_parms(): no params data found
[   32.132981][ T3321] chnl_net:caif_netlink_parms(): no params data found
[   32.165119][ T3314] chnl_net:caif_netlink_parms(): no params data found
[   32.192936][ T3323] chnl_net:caif_netlink_parms(): no params data found
[   32.266213][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.273477][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state
[   32.280673][ T3315] bridge_slave_0: entered allmulticast mode
[   32.287192][ T3315] bridge_slave_0: entered promiscuous mode
[   32.295882][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.303191][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state
[   32.310489][ T3315] bridge_slave_1: entered allmulticast mode
[   32.316965][ T3315] bridge_slave_1: entered promiscuous mode
[   32.325772][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.333267][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state
[   32.340522][ T3321] bridge_slave_0: entered allmulticast mode
[   32.347220][ T3321] bridge_slave_0: entered promiscuous mode
[   32.369152][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.376243][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state
[   32.383423][ T3321] bridge_slave_1: entered allmulticast mode
[   32.389896][ T3321] bridge_slave_1: entered promiscuous mode
[   32.398469][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.405863][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state
[   32.413217][ T3317] bridge_slave_0: entered allmulticast mode
[   32.419860][ T3317] bridge_slave_0: entered promiscuous mode
[   32.446003][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.453486][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state
[   32.460923][ T3317] bridge_slave_1: entered allmulticast mode
[   32.467571][ T3317] bridge_slave_1: entered promiscuous mode
[   32.475151][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   32.505918][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   32.515159][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.522389][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state
[   32.529860][ T3314] bridge_slave_0: entered allmulticast mode
[   32.536201][ T3314] bridge_slave_0: entered promiscuous mode
[   32.543909][ T3321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   32.553119][ T3323] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.560261][ T3323] bridge0: port 1(bridge_slave_0) entered disabled state
[   32.567539][ T3323] bridge_slave_0: entered allmulticast mode
[   32.574200][ T3323] bridge_slave_0: entered promiscuous mode
[   32.591082][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.598236][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state
[   32.605419][ T3314] bridge_slave_1: entered allmulticast mode
[   32.612161][ T3314] bridge_slave_1: entered promiscuous mode
[   32.619337][ T3321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   32.628626][ T3323] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.635727][ T3323] bridge0: port 2(bridge_slave_1) entered disabled state
[   32.643020][ T3323] bridge_slave_1: entered allmulticast mode
[   32.649369][ T3323] bridge_slave_1: entered promiscuous mode
[   32.656831][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   32.688320][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   32.698186][ T3315] team0: Port device team_slave_0 added
[   32.725987][ T3315] team0: Port device team_slave_1 added
[   32.738365][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   32.748306][ T3321] team0: Port device team_slave_0 added
[   32.755436][ T3323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   32.765519][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   32.780030][ T3317] team0: Port device team_slave_0 added
[   32.786377][ T3321] team0: Port device team_slave_1 added
[   32.793123][ T3323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   32.812550][ T3317] team0: Port device team_slave_1 added
[   32.833265][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0
[   32.840266][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   32.866539][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   32.893155][ T3314] team0: Port device team_slave_0 added
[   32.899508][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1
[   32.906475][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   32.932448][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   32.948770][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_0
[   32.955740][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   32.981840][ T3321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   32.993286][ T3323] team0: Port device team_slave_0 added
[   32.999210][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_1
[   33.006308][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   33.032343][ T3321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   33.044043][ T3314] team0: Port device team_slave_1 added
[   33.052536][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0
[   33.059622][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   33.085730][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   33.097189][ T3323] team0: Port device team_slave_1 added
[   33.117005][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1
[   33.123987][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   33.150038][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   33.172001][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_0
[   33.179141][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   33.205252][ T3323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   33.216737][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_1
[   33.223902][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   33.250182][ T3323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   33.283909][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0
[   33.291089][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   33.317110][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   33.328886][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1
[   33.335880][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   33.361831][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   33.396036][ T3315] hsr_slave_0: entered promiscuous mode
[   33.402252][ T3315] hsr_slave_1: entered promiscuous mode
[   33.410369][ T3321] hsr_slave_0: entered promiscuous mode
[   33.416334][ T3321] hsr_slave_1: entered promiscuous mode
[   33.422471][ T3321] debugfs: 'hsr0' already exists in 'hsr'
[   33.428351][ T3321] Cannot create hsr debugfs directory
[   33.458101][ T3317] hsr_slave_0: entered promiscuous mode
[   33.464180][ T3317] hsr_slave_1: entered promiscuous mode
[   33.470124][ T3317] debugfs: 'hsr0' already exists in 'hsr'
[   33.475886][ T3317] Cannot create hsr debugfs directory
[   33.483783][ T3323] hsr_slave_0: entered promiscuous mode
[   33.489984][ T3323] hsr_slave_1: entered promiscuous mode
[   33.495898][ T3323] debugfs: 'hsr0' already exists in 'hsr'
[   33.501841][ T3323] Cannot create hsr debugfs directory
[   33.532198][ T3314] hsr_slave_0: entered promiscuous mode
[   33.538504][ T3314] hsr_slave_1: entered promiscuous mode
[   33.544624][ T3314] debugfs: 'hsr0' already exists in 'hsr'
[   33.550458][ T3314] Cannot create hsr debugfs directory
[   33.757090][ T3315] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   33.766222][ T3315] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   33.775194][ T3315] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   33.786671][ T3315] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   33.820387][ T3321] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   33.837584][ T3321] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   33.847046][ T3321] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   33.857909][ T3321] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   33.866761][ T3314] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   33.877166][ T3314] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   33.892999][ T3314] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   33.903839][ T3314] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   33.930484][ T3317] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   33.941246][ T3317] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   33.950516][ T3317] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   33.962603][ T3317] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   33.991683][ T3323] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   34.002214][ T3323] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   34.013123][ T3323] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   34.025396][ T3323] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   34.053895][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0
[   34.092722][ T3315] 8021q: adding VLAN 0 to HW filter on device team0
[   34.116480][ T1586] bridge0: port 1(bridge_slave_0) entered blocking state
[   34.123589][ T1586] bridge0: port 1(bridge_slave_0) entered forwarding state
[   34.140286][ T1586] bridge0: port 2(bridge_slave_1) entered blocking state
[   34.147412][ T1586] bridge0: port 2(bridge_slave_1) entered forwarding state
[   34.160366][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0
[   34.196669][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0
[   34.206555][ T3321] 8021q: adding VLAN 0 to HW filter on device team0
[   34.224350][ T3323] 8021q: adding VLAN 0 to HW filter on device bond0
[   34.233195][  T886] bridge0: port 1(bridge_slave_0) entered blocking state
[   34.240352][  T886] bridge0: port 1(bridge_slave_0) entered forwarding state
[   34.254501][ T3314] 8021q: adding VLAN 0 to HW filter on device team0
[   34.271212][  T886] bridge0: port 2(bridge_slave_1) entered blocking state
[   34.278332][  T886] bridge0: port 2(bridge_slave_1) entered forwarding state
[   34.291977][ T3323] 8021q: adding VLAN 0 to HW filter on device team0
[   34.302311][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0
[   34.311017][  T886] bridge0: port 1(bridge_slave_0) entered blocking state
[   34.318317][  T886] bridge0: port 1(bridge_slave_0) entered forwarding state
[   34.335181][  T886] bridge0: port 1(bridge_slave_0) entered blocking state
[   34.342300][  T886] bridge0: port 1(bridge_slave_0) entered forwarding state
[   34.352330][  T886] bridge0: port 2(bridge_slave_1) entered blocking state
[   34.359409][  T886] bridge0: port 2(bridge_slave_1) entered forwarding state
[   34.380226][  T886] bridge0: port 2(bridge_slave_1) entered blocking state
[   34.387373][  T886] bridge0: port 2(bridge_slave_1) entered forwarding state
[   34.413133][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0
[   34.422620][ T3317] 8021q: adding VLAN 0 to HW filter on device team0
[   34.441386][ T1586] bridge0: port 1(bridge_slave_0) entered blocking state
[   34.448591][ T1586] bridge0: port 1(bridge_slave_0) entered forwarding state
[   34.479528][ T1586] bridge0: port 2(bridge_slave_1) entered blocking state
[   34.486682][ T1586] bridge0: port 2(bridge_slave_1) entered forwarding state
[   34.552089][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0
[   34.602364][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0
[   34.653256][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0
[   34.681152][ T3323] 8021q: adding VLAN 0 to HW filter on device batadv0
[   34.758234][ T3315] veth0_vlan: entered promiscuous mode
[   34.769280][ T3314] veth0_vlan: entered promiscuous mode
[   34.797624][ T3315] veth1_vlan: entered promiscuous mode
[   34.813508][ T3314] veth1_vlan: entered promiscuous mode
[   34.842103][ T3317] veth0_vlan: entered promiscuous mode
[   34.852318][ T3321] veth0_vlan: entered promiscuous mode
[   34.865895][ T3317] veth1_vlan: entered promiscuous mode
[   34.873643][ T3321] veth1_vlan: entered promiscuous mode
[   34.890615][ T3315] veth0_macvtap: entered promiscuous mode
[   34.901975][ T3315] veth1_macvtap: entered promiscuous mode
[   34.913939][ T3314] veth0_macvtap: entered promiscuous mode
[   34.927666][ T3314] veth1_macvtap: entered promiscuous mode
[   34.943947][ T3317] veth0_macvtap: entered promiscuous mode
[   34.957020][ T3317] veth1_macvtap: entered promiscuous mode
[   34.978358][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0
[   34.987827][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1
[   34.999914][ T3321] veth0_macvtap: entered promiscuous mode
[   35.007146][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0
[   35.022935][  T886] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   35.032449][ T3321] veth1_macvtap: entered promiscuous mode
[   35.041117][  T886] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   35.051630][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1
[   35.060176][  T886] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   35.072041][  T886] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   35.082541][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0
[   35.098960][  T886] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   35.108004][  T886] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   35.121295][  T886] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   35.131218][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1
[   35.141068][ T3323] veth0_vlan: entered promiscuous mode
[   35.146888][  T886] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   35.165037][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0
[   35.172880][  T886] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   35.184017][ T3323] veth1_vlan: entered promiscuous mode
[   35.194897][   T29] kauditd_printk_skb: 10 callbacks suppressed
[   35.194910][   T29] audit: type=1400 audit(1768407513.125:90): avc:  denied  { mounton } for  pid=3314 comm="syz-executor" path="/root/syzkaller.FhiOLZ/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[   35.209279][  T886] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   35.231384][   T29] audit: type=1400 audit(1768407513.125:91): avc:  denied  { mount } for  pid=3314 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   35.256708][   T29] audit: type=1400 audit(1768407513.125:92): avc:  denied  { mounton } for  pid=3314 comm="syz-executor" path="/root/syzkaller.FhiOLZ/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   35.267021][  T886] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   35.282152][   T29] audit: type=1400 audit(1768407513.125:93): avc:  denied  { mount } for  pid=3314 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   35.282186][   T29] audit: type=1400 audit(1768407513.125:94): avc:  denied  { mounton } for  pid=3314 comm="syz-executor" path="/root/syzkaller.FhiOLZ/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   35.339574][   T29] audit: type=1400 audit(1768407513.125:95): avc:  denied  { mounton } for  pid=3314 comm="syz-executor" path="/root/syzkaller.FhiOLZ/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4603 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[   35.367234][   T29] audit: type=1400 audit(1768407513.135:96): avc:  denied  { unmount } for  pid=3314 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   35.387805][   T29] audit: type=1400 audit(1768407513.225:97): avc:  denied  { mounton } for  pid=3314 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[   35.391918][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1
[   35.410633][   T29] audit: type=1400 audit(1768407513.245:98): avc:  denied  { mount } for  pid=3314 comm="syz-executor" name="/" dev="gadgetfs" ino=4614 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[   35.442529][ T3314] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   35.460464][  T886] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   35.475715][  T886] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   35.488524][  T886] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   35.507584][ T3323] veth0_macvtap: entered promiscuous mode
[   35.515039][   T29] audit: type=1400 audit(1768407513.445:99): avc:  denied  { read write } for  pid=3314 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   35.566599][  T886] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   35.604128][ T3323] veth1_macvtap: entered promiscuous mode
[   35.621611][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_0
[   35.629515][ T3492] loop1: detected capacity change from 0 to 512
[   35.641221][  T886] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   35.667203][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_1
[   35.695365][   T37] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   35.735005][   T37] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   35.757822][   T37] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   35.781017][   T37] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   35.799464][ T3504] SELinux:  policydb table sizes (0,0) do not match mine (8,7)
[   35.816044][ T3504] SELinux: failed to load policy
[   35.876584][ T3508] syz.1.7 uses obsolete (PF_INET,SOCK_PACKET)
[   35.979227][ T3512] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'.
[   36.142784][ T3517] capability: warning: `syz.1.9' uses deprecated v2 capabilities in a way that may be insecure
[   36.166772][ T3500] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3'.
[   36.185687][ T3517] ucma_write: process 11 (syz.1.9) changed security contexts after opening file descriptor, this is not allowed.
[   36.225759][ T3517] loop1: detected capacity change from 0 to 256
[   36.354542][ T3519] SELinux: failed to load policy
[   36.529288][ T3529] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13'.
[   36.586220][ T3525] loop2: detected capacity change from 0 to 8192
[   36.838148][ T3537] loop3: detected capacity change from 0 to 1024
[   36.890758][ T3537] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   37.277539][ T3551] serio: Serial port ptm1
[   37.340221][ T3554] random: crng reseeded on system resumption
[   37.394214][ T3554] loop2: detected capacity change from 0 to 512
[   37.408679][ T3554] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   37.421908][ T3554] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   37.457698][ T3556] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   37.491373][ T3554] EXT4-fs error (device loop2): xattr_find_entry:337: inode #15: comm syz.2.18: corrupted xattr entries
[   37.548727][ T3554] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   37.584487][ T3554] EXT4-fs (loop2): 1 orphan inode deleted
[   37.590998][ T3554] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   37.660837][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.699466][ T3563] loop0: detected capacity change from 0 to 512
[   37.721640][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.731799][ T3563] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   37.772973][ T3563] EXT4-fs (loop0): too many log groups per flexible block group
[   37.791569][ T3563] EXT4-fs (loop0): failed to initialize mballoc (-12)
[   37.807513][ T3563] EXT4-fs (loop0): mount failed
[   37.814487][ T3565] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   37.851915][ T3556] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   37.892147][ T3556] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   37.942411][ T3556] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   37.955058][ T3573] loop1: detected capacity change from 0 to 512
[   38.009438][ T2075] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   38.030099][ T3569] netlink: 'syz.2.23': attribute type 8 has an invalid length.
[   38.037812][ T3569] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[   38.056288][ T3573] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #3: comm syz.1.24: corrupted inode contents
[   38.072576][   T37] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   38.108130][   T37] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   38.116443][   T37] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   38.158162][ T3573] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #3: comm syz.1.24: mark_inode_dirty error
[   38.188687][ T3573] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #3: comm syz.1.24: corrupted inode contents
[   38.228335][ T3573] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #3: comm syz.1.24: mark_inode_dirty error
[   38.278542][ T3573] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.24: Failed to acquire dquot type 0
[   38.290753][ T3573] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.24: corrupted inode contents
[   38.303665][ T3573] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #16: comm syz.1.24: mark_inode_dirty error
[   38.316089][ T3573] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.24: corrupted inode contents
[   38.338412][ T3573] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.24: mark_inode_dirty error
[   38.364083][ T3573] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.24: corrupted inode contents
[   38.397055][ T3573] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem
[   38.420582][ T3573] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.24: corrupted inode contents
[   38.453123][ T3573] EXT4-fs error (device loop1): ext4_truncate:4635: inode #16: comm syz.1.24: mark_inode_dirty error
[   38.536501][ T3562] delete_channel: no stack
[   38.569441][ T3573] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem
[   38.615399][ T3573] EXT4-fs (loop1): 1 truncate cleaned up
[   38.658031][ T3569] Set syz1 is full, maxelem 65536 reached
[   38.674975][ T3573] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   38.728400][ T3573] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   38.729534][ T3589] netlink: 'syz.3.29': attribute type 4 has an invalid length.
[   38.756130][ T3589] batadv_slave_0: entered promiscuous mode
[   38.762752][ T3589] netlink: 'syz.3.29': attribute type 4 has an invalid length.
[   38.780918][ T3589] IPv6: Can't replace route, no match found
[   38.812023][ T3588] batadv_slave_0: left promiscuous mode
[   38.851003][ T3592] loop0: detected capacity change from 0 to 256
[   38.877454][ T3589] syz.3.29 (3589) used greatest stack depth: 10464 bytes left
[   38.956184][ T3595] loop2: detected capacity change from 0 to 128
[   38.965387][ T3596] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   39.068045][ T3595] syz.2.31: attempt to access beyond end of device
[   39.068045][ T3595] loop2: rw=2049, sector=145, nr_sectors = 16 limit=128
[   39.088536][ T3595] syz.2.31: attempt to access beyond end of device
[   39.088536][ T3595] loop2: rw=2049, sector=169, nr_sectors = 8 limit=128
[   39.117876][ T3595] syz.2.31: attempt to access beyond end of device
[   39.117876][ T3595] loop2: rw=2049, sector=185, nr_sectors = 8 limit=128
[   39.134937][ T3595] syz.2.31: attempt to access beyond end of device
[   39.134937][ T3595] loop2: rw=2049, sector=201, nr_sectors = 8 limit=128
[   39.156568][ T3573] syz.1.24 (3573) used greatest stack depth: 9680 bytes left
[   39.168663][ T3601] netlink: 28 bytes leftover after parsing attributes in process `syz.0.33'.
[   39.178994][ T3595] syz.2.31: attempt to access beyond end of device
[   39.178994][ T3595] loop2: rw=2049, sector=217, nr_sectors = 8 limit=128
[   39.202171][ T3595] syz.2.31: attempt to access beyond end of device
[   39.202171][ T3595] loop2: rw=2049, sector=233, nr_sectors = 8 limit=128
[   39.220053][ T3595] syz.2.31: attempt to access beyond end of device
[   39.220053][ T3595] loop2: rw=2049, sector=249, nr_sectors = 8 limit=128
[   39.233859][ T3595] syz.2.31: attempt to access beyond end of device
[   39.233859][ T3595] loop2: rw=2049, sector=265, nr_sectors = 8 limit=128
[   39.248022][ T3595] syz.2.31: attempt to access beyond end of device
[   39.248022][ T3595] loop2: rw=2049, sector=281, nr_sectors = 8 limit=128
[   39.261811][ T3595] syz.2.31: attempt to access beyond end of device
[   39.261811][ T3595] loop2: rw=2049, sector=297, nr_sectors = 8 limit=128
[   39.282685][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.513542][ T3586] delete_channel: no stack
[   39.628530][    C0] hrtimer: interrupt took 35940 ns
[   39.827287][ T3615] xt_CT: You must specify a L4 protocol and not use inversions on it
[   39.910025][ T3615] netlink: 'syz.2.38': attribute type 13 has an invalid length.
[   39.989351][ T3615] gretap0: refused to change device tx_queue_len
[   40.010806][ T3615] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   40.100371][ T3606] Set syz1 is full, maxelem 65536 reached
[   40.175042][   T36] hid (null): unknown global tag 0xc
[   40.181589][   T36] hid-generic 0040:0008:0002.0001: unknown main item tag 0x0
[   40.189081][   T36] hid-generic 0040:0008:0002.0001: unknown global tag 0xc
[   40.196327][   T36] hid-generic 0040:0008:0002.0001: item 0 4 1 12 parsing failed
[   40.220109][   T36] hid-generic 0040:0008:0002.0001: probe with driver hid-generic failed with error -22
[   40.250982][ T3624] netlink: 16 bytes leftover after parsing attributes in process `syz.2.42'.
[   40.261066][   T29] kauditd_printk_skb: 1823 callbacks suppressed
[   40.261080][   T29] audit: type=1400 audit(1768407518.195:1921): avc:  denied  { read write } for  pid=3625 comm="syz.1.43" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[   40.310710][ T3624] netlink: 12 bytes leftover after parsing attributes in process `syz.2.42'.
[   40.318870][   T29] audit: type=1400 audit(1768407518.195:1922): avc:  denied  { open } for  pid=3625 comm="syz.1.43" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[   40.319684][ T3624] netlink: 12 bytes leftover after parsing attributes in process `syz.2.42'.
[   40.417403][   T29] audit: type=1400 audit(1768407518.285:1923): avc:  denied  { write } for  pid=3627 comm="syz.3.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   40.436712][   T29] audit: type=1400 audit(1768407518.285:1924): avc:  denied  { wake_alarm } for  pid=3627 comm="syz.3.44" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   40.457956][   T29] audit: type=1326 audit(1768407518.285:1925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3627 comm="syz.3.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f2381f749 code=0x7ffc0000
[   40.481723][   T29] audit: type=1326 audit(1768407518.285:1926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3627 comm="syz.3.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f2381f749 code=0x7ffc0000
[   40.505051][   T29] audit: type=1326 audit(1768407518.285:1927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3627 comm="syz.3.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f2381f749 code=0x7ffc0000
[   40.528398][   T29] audit: type=1326 audit(1768407518.285:1928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3627 comm="syz.3.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f2381f749 code=0x7ffc0000
[   40.552007][   T29] audit: type=1326 audit(1768407518.285:1929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3627 comm="syz.3.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f7f2381f749 code=0x7ffc0000
[   40.575450][   T29] audit: type=1326 audit(1768407518.285:1930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3627 comm="syz.3.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f2381f749 code=0x7ffc0000
[   40.612781][ T3624] loop2: detected capacity change from 0 to 128
[   40.623424][ T3626] netlink: 16 bytes leftover after parsing attributes in process `syz.1.43'.
[   40.671058][ T3636] loop3: detected capacity change from 0 to 512
[   40.678050][ T3636] EXT4-fs: Ignoring removed nomblk_io_submit option
[   40.685059][ T3636] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   40.697234][ T3636] EXT4-fs (loop3): 1 truncate cleaned up
[   40.704117][ T3636] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   40.725825][ T3635] loop0: detected capacity change from 0 to 8192
[   40.741220][ T3626] syzkaller0: entered promiscuous mode
[   40.746786][ T3626] syzkaller0: entered allmulticast mode
[   40.822349][ T3635] xt_time: invalid argument - start or stop time greater than 23:59:59
[   40.895511][ T3635] FAT-fs (loop0): error, corrupted directory (invalid entries)
[   40.903281][ T3635] FAT-fs (loop0): Filesystem has been set read-only
[   41.019423][ T3641] netlink: 4 bytes leftover after parsing attributes in process `wÞ£ÿ'.
[   41.098680][ T3645] loop2: detected capacity change from 0 to 512
[   41.112272][ T3643] loop0: detected capacity change from 0 to 512
[   41.121335][ T3645] =======================================================
[   41.121335][ T3645] WARNING: The mand mount option has been deprecated and
[   41.121335][ T3645]          and is ignored by this kernel. Remove the mand
[   41.121335][ T3645]          option from the mount to silence this warning.
[   41.121335][ T3645] =======================================================
[   41.163944][ T3643] EXT4-fs: Ignoring removed i_version option
[   41.170176][ T3643] EXT4-fs: Ignoring removed bh option
[   41.195990][ T3645] EXT4-fs (loop2): orphan cleanup on readonly fs
[   41.208647][ T3645] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.49: bad orphan inode 13
[   41.223557][ T3645] ext4_test_bit(bit=12, block=18) = 1
[   41.225121][ T3643] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   41.229008][ T3645] is_bad_inode(inode)=0
[   41.229065][ T3645] NEXT_ORPHAN(inode)=2130706432
[   41.229072][ T3645] max_ino=32
[   41.229078][ T3645] i_nlink=1
[   41.230247][ T3645] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   41.282572][ T3643] ext4 filesystem being mounted at /9/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   41.282807][ T3645] EXT4-fs error (device loop2): ext4_lookup:1789: inode #2: comm syz.2.49: deleted inode referenced: 12
[   41.308052][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.329791][ T3645] EXT4-fs error (device loop2): ext4_lookup:1789: inode #2: comm syz.2.49: deleted inode referenced: 12
[   41.374228][ T3645] process 'syz.2.49' launched '/dev/fd/4' with NULL argv: empty string added
[   41.392534][ T3645] EXT4-fs error (device loop2): ext4_lookup:1789: inode #2: comm syz.2.49: deleted inode referenced: 12
[   41.417856][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.429489][ T3652] SELinux:  policydb table sizes (1919248238,1886930208) do not match mine (8,7)
[   41.443522][ T3652] SELinux: failed to load policy
[   41.480412][ T3659] loop0: detected capacity change from 0 to 256
[   41.525340][ T3663] loop0: detected capacity change from 0 to 736
[   41.633851][ T3612] loop4: detected capacity change from 0 to 2048
[   41.722025][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.739239][ T3612] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal
[   41.870336][ T3685] loop2: detected capacity change from 0 to 2048
[   41.878758][ T3685] EXT4-fs: Ignoring removed mblk_io_submit option
[   41.878892][ T3683] netlink: 4 bytes leftover after parsing attributes in process `syz.1.57'.
[   41.906159][ T3686] netlink: 24 bytes leftover after parsing attributes in process `syz.4.37'.
[   41.923193][ T3685] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   41.954065][ T3690] loop1: detected capacity change from 0 to 1024
[   42.026724][ T3690] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   42.052308][ T3692] SELinux:  policydb table sizes (0,0) do not match mine (8,7)
[   42.063904][ T3692] SELinux: failed to load policy
[   42.126642][ T3685] netlink: 76 bytes leftover after parsing attributes in process `syz.2.58'.
[   42.138237][ T3699] loop4: detected capacity change from 0 to 256
[   42.161754][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.350202][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.506666][ T3673] delete_channel: no stack
[   43.289451][ T3718] netlink: 28 bytes leftover after parsing attributes in process `syz.0.67'.
[   43.776412][ T3712] netlink: 'syz.1.64': attribute type 8 has an invalid length.
[   43.841121][ T3712] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   43.870754][ T3728] SELinux:  policydb table sizes (0,0) do not match mine (8,7)
[   43.917770][ T3728] SELinux: failed to load policy
[   44.006725][ T3731] EXT4-fs: Ignoring removed mblk_io_submit option
[   44.092498][ T3731] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   44.137655][  T886] bio_check_eod: 7743 callbacks suppressed
[   44.137673][  T886] kworker/u8:7: attempt to access beyond end of device
[   44.137673][  T886] loop3: rw=8388609, sector=512, nr_sectors = 1 limit=128
[   44.157578][  T886] Buffer I/O error on dev loop3, logical block 512, lost async page write
[   44.314169][ T3731] netlink: 76 bytes leftover after parsing attributes in process `syz.0.71'.
[   44.339337][ T3755] netlink: 4 bytes leftover after parsing attributes in process `syz.3.75'.
[   44.366448][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.398266][ T3749] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   44.599878][ T3767] netlink: 4 bytes leftover after parsing attributes in process `syz.4.81'.
[   44.675916][ T3769] SELinux:  policydb table sizes (0,0) do not match mine (8,7)
[   44.708068][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.860158][ T3769] SELinux: failed to load policy
[   45.045368][ T3773] netlink: 28 bytes leftover after parsing attributes in process `syz.3.83'.
[   45.065951][ T3741] delete_channel: no stack
[   45.494325][ T3779] syz.1.85: attempt to access beyond end of device
[   45.494325][ T3779] loop1: rw=2049, sector=145, nr_sectors = 16 limit=128
[   45.665910][ T3779] syz.1.85: attempt to access beyond end of device
[   45.665910][ T3779] loop1: rw=2049, sector=169, nr_sectors = 8 limit=128
[   45.846775][ T3779] syz.1.85: attempt to access beyond end of device
[   45.846775][ T3779] loop1: rw=2049, sector=185, nr_sectors = 8 limit=128
[   45.866666][ T3789] set_capacity_and_notify: 7 callbacks suppressed
[   45.866680][ T3789] loop3: detected capacity change from 0 to 2048
[   45.887656][ T3779] syz.1.85: attempt to access beyond end of device
[   45.887656][ T3779] loop1: rw=2049, sector=201, nr_sectors = 8 limit=128
[   45.909407][ T3789] EXT4-fs: Ignoring removed mblk_io_submit option
[   45.946629][ T3779] syz.1.85: attempt to access beyond end of device
[   45.946629][ T3779] loop1: rw=2049, sector=217, nr_sectors = 8 limit=128
[   45.985247][ T3789] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   46.017469][ T3779] syz.1.85: attempt to access beyond end of device
[   46.017469][ T3779] loop1: rw=2049, sector=233, nr_sectors = 8 limit=128
[   46.078239][   T29] kauditd_printk_skb: 2050 callbacks suppressed
[   46.078257][   T29] audit: type=1326 audit(1768407524.015:3981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3796 comm="syz.0.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06d3d1f749 code=0x7ffc0000
[   46.111109][ T3779] syz.1.85: attempt to access beyond end of device
[   46.111109][ T3779] loop1: rw=2049, sector=249, nr_sectors = 8 limit=128
[   46.160477][ T3779] syz.1.85: attempt to access beyond end of device
[   46.160477][ T3779] loop1: rw=2049, sector=265, nr_sectors = 8 limit=128
[   46.184341][ T3799] netlink: 4 bytes leftover after parsing attributes in process `syz.0.93'.
[   46.193717][   T29] audit: type=1326 audit(1768407524.045:3982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3796 comm="syz.0.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f06d3d1f749 code=0x7ffc0000
[   46.217163][   T29] audit: type=1326 audit(1768407524.045:3983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3796 comm="syz.0.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06d3d1f749 code=0x7ffc0000
[   46.240533][   T29] audit: type=1326 audit(1768407524.045:3984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3796 comm="syz.0.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f06d3d1f749 code=0x7ffc0000
[   46.263802][   T29] audit: type=1326 audit(1768407524.045:3985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3796 comm="syz.0.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06d3d1f749 code=0x7ffc0000
[   46.287338][   T29] audit: type=1326 audit(1768407524.045:3986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3796 comm="syz.0.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f06d3d1f749 code=0x7ffc0000
[   46.311212][   T29] audit: type=1326 audit(1768407524.045:3987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3796 comm="syz.0.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06d3d1f749 code=0x7ffc0000
[   46.334568][   T29] audit: type=1326 audit(1768407524.045:3988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3796 comm="syz.0.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f06d3d1f749 code=0x7ffc0000
[   46.357785][   T29] audit: type=1326 audit(1768407524.045:3989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3796 comm="syz.0.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06d3d1f749 code=0x7ffc0000
[   46.381048][   T29] audit: type=1326 audit(1768407524.045:3990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3796 comm="syz.0.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f06d3d1f749 code=0x7ffc0000
[   46.409361][ T3779] syz.1.85: attempt to access beyond end of device
[   46.409361][ T3779] loop1: rw=2049, sector=281, nr_sectors = 8 limit=128
[   46.444803][ T3783] netlink: 'syz.2.87': attribute type 8 has an invalid length.
[   46.452551][ T3783] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[   46.478295][ T3789] netlink: 76 bytes leftover after parsing attributes in process `syz.3.89'.
[   46.535531][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.622382][ T3803] SELinux:  policydb table sizes (1919248238,1886930208) do not match mine (8,7)
[   46.635921][ T3803] SELinux: failed to load policy
[   46.692154][ T3807] netlink: 4 bytes leftover after parsing attributes in process `syz.0.95'.
[   46.763234][ T3808] loop0: detected capacity change from 0 to 1024
[   46.975086][ T3808] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   47.061473][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.082089][ T3818] netlink: 4 bytes leftover after parsing attributes in process `syz.4.98'.
[   47.155650][ T3822] loop0: detected capacity change from 0 to 256
[   47.269846][ T3783] Set syz1 is full, maxelem 65536 reached
[   47.502345][ T3832] loop0: detected capacity change from 0 to 128
[   47.518953][ T3834] netlink: 4 bytes leftover after parsing attributes in process `syz.2.106'.
[   47.580521][ T3809] delete_channel: no stack
[   47.608909][ T3836] SELinux:  policydb table sizes (1919248238,1886930208) do not match mine (8,7)
[   47.629919][ T3836] SELinux: failed to load policy
[   47.801871][ T3842] loop1: detected capacity change from 0 to 2048
[   47.822510][ T3842] EXT4-fs: Ignoring removed mblk_io_submit option
[   47.882850][ T3842] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   48.238860][ T3851] netlink: 4 bytes leftover after parsing attributes in process `syz.4.110'.
[   48.424194][ T3854] netlink: 'syz.3.112': attribute type 8 has an invalid length.
[   48.552322][ T3854] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[   48.599512][ T3855] loop4: detected capacity change from 0 to 1024
[   48.638855][ T3842] netlink: 76 bytes leftover after parsing attributes in process `syz.1.108'.
[   48.807050][ T3861] loop0: detected capacity change from 0 to 256
[   48.819555][ T3855] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   49.110771][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.218765][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.373331][ T3869] netlink: 4 bytes leftover after parsing attributes in process `syz.0.118'.
[   49.679315][ T3856] Set syz1 is full, maxelem 65536 reached
[   49.695871][ T3880] SELinux:  policydb table sizes (1919248238,1886930208) do not match mine (8,7)
[   49.727626][ T3880] SELinux: failed to load policy
[   49.781492][ T3890] loop3: detected capacity change from 0 to 128
[   49.810664][ T3891] netlink: 4 bytes leftover after parsing attributes in process `syz.1.122'.
[   49.830761][ T3892] loop2: detected capacity change from 0 to 256
[   49.845062][ T3893] bio_check_eod: 6094 callbacks suppressed
[   49.845076][ T3893] syz.3.125: attempt to access beyond end of device
[   49.845076][ T3893] loop3: rw=2049, sector=145, nr_sectors = 16 limit=128
[   49.947484][ T3893] syz.3.125: attempt to access beyond end of device
[   49.947484][ T3893] loop3: rw=2049, sector=169, nr_sectors = 8 limit=128
[   49.962555][ T3893] syz.3.125: attempt to access beyond end of device
[   49.962555][ T3893] loop3: rw=2049, sector=185, nr_sectors = 8 limit=128
[   49.978569][ T3893] syz.3.125: attempt to access beyond end of device
[   49.978569][ T3893] loop3: rw=2049, sector=201, nr_sectors = 8 limit=128
[   49.994041][ T3893] syz.3.125: attempt to access beyond end of device
[   49.994041][ T3893] loop3: rw=2049, sector=217, nr_sectors = 8 limit=128
[   50.013833][ T3893] syz.3.125: attempt to access beyond end of device
[   50.013833][ T3893] loop3: rw=2049, sector=233, nr_sectors = 8 limit=128
[   50.033441][ T3893] syz.3.125: attempt to access beyond end of device
[   50.033441][ T3893] loop3: rw=2049, sector=249, nr_sectors = 8 limit=128
[   50.050206][ T3893] syz.3.125: attempt to access beyond end of device
[   50.050206][ T3893] loop3: rw=2049, sector=265, nr_sectors = 8 limit=128
[   50.069476][ T3893] syz.3.125: attempt to access beyond end of device
[   50.069476][ T3893] loop3: rw=2049, sector=281, nr_sectors = 8 limit=128
[   50.070119][ T3896] loop2: detected capacity change from 0 to 2048
[   50.087586][ T3893] syz.3.125: attempt to access beyond end of device
[   50.087586][ T3893] loop3: rw=2049, sector=297, nr_sectors = 8 limit=128
[   50.120379][ T3896] EXT4-fs: Ignoring removed mblk_io_submit option
[   50.152330][ T3896] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   50.304694][ T3896] netlink: 76 bytes leftover after parsing attributes in process `syz.2.126'.
[   50.342613][ T3870] delete_channel: no stack
[   50.355676][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.652504][   T29] kauditd_printk_skb: 1126 callbacks suppressed
[   51.652531][   T29] audit: type=1400 audit(1768407528.695:5117): avc:  denied  { write } for  pid=3906 comm="syz.0.130" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1
[   51.955375][ T3926] SELinux:  policydb table sizes (1919248238,1886930208) do not match mine (8,7)
[   51.965047][ T3926] SELinux: failed to load policy
[   51.974647][ T3904] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   52.013356][   T29] audit: type=1326 audit(1768407529.875:5118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3924 comm="syz.3.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f2381f749 code=0x7ffc0000
[   52.036865][   T29] audit: type=1326 audit(1768407529.885:5119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3924 comm="syz.3.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f7f2381f749 code=0x7ffc0000
[   52.060244][   T29] audit: type=1326 audit(1768407529.885:5120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3924 comm="syz.3.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f2381f749 code=0x7ffc0000
[   52.083669][   T29] audit: type=1326 audit(1768407529.885:5121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3924 comm="syz.3.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f7f2381f749 code=0x7ffc0000
[   52.107088][   T29] audit: type=1326 audit(1768407529.885:5122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3927 comm="syz.3.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7f23852005 code=0x7ffc0000
[   52.130432][   T29] audit: type=1326 audit(1768407529.885:5123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3924 comm="syz.3.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f2381f749 code=0x7ffc0000
[   52.153751][   T29] audit: type=1326 audit(1768407529.885:5124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3924 comm="syz.3.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f7f2381f749 code=0x7ffc0000
[   52.177122][   T29] audit: type=1326 audit(1768407529.885:5125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3924 comm="syz.3.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7f237bb829 code=0x7ffc0000
[   52.200699][   T29] audit: type=1326 audit(1768407529.885:5126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3924 comm="syz.3.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f2381f749 code=0x7ffc0000
[   52.229302][ T3929] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 440: padding at end of block bitmap is not set
[   52.278527][ T3932] netlink: 'syz.1.134': attribute type 8 has an invalid length.
[   52.328849][ T3932] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[   52.407901][ T3937] set_capacity_and_notify: 1 callbacks suppressed
[   52.407918][ T3937] loop3: detected capacity change from 0 to 256
[   52.428164][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.450557][ T3936] loop2: detected capacity change from 0 to 2048
[   52.498069][ T3936] EXT4-fs: Ignoring removed mblk_io_submit option
[   52.751146][ T3936] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   53.084959][ T3936] __nla_validate_parse: 2 callbacks suppressed
[   53.084978][ T3936] netlink: 76 bytes leftover after parsing attributes in process `syz.2.138'.
[   53.199865][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   53.241591][ T3953] netlink: 4 bytes leftover after parsing attributes in process `syz.0.141'.
[   53.270434][ T3955] loop2: detected capacity change from 0 to 128
[   53.372862][ T3934] Set syz1 is full, maxelem 65536 reached
[   53.530467][ T3962] netlink: 4 bytes leftover after parsing attributes in process `syz.1.145'.
[   53.649738][ T3946] delete_channel: no stack
[   53.692875][ T3966] SELinux:  policydb table sizes (1919248238,1886930208) do not match mine (8,7)
[   53.752299][ T3966] SELinux: failed to load policy
[   53.853034][ T3975] loop3: detected capacity change from 0 to 256
[   53.963741][ T3980] loop3: detected capacity change from 0 to 2048
[   53.985588][ T3980] EXT4-fs: Ignoring removed mblk_io_submit option
[   54.064886][ T3983] netlink: 4 bytes leftover after parsing attributes in process `syz.1.150'.
[   54.128465][ T3978] loop1: detected capacity change from 0 to 1024
[   54.223913][ T3980] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   54.228018][ T3978] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   54.248441][ T3968] netlink: 12 bytes leftover after parsing attributes in process `syz.4.148'.
[   55.703103][ T3993] netlink: 'syz.2.154': attribute type 8 has an invalid length.
[   55.710915][ T3993] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[   55.817096][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.840352][ T3980] netlink: 76 bytes leftover after parsing attributes in process `syz.3.152'.
[   55.894058][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.938253][ T4009] SELinux:  policydb table sizes (1919248238,1886930208) do not match mine (8,7)
[   55.955342][ T4009] SELinux: failed to load policy
[   56.002823][ T4013] netlink: 4 bytes leftover after parsing attributes in process `syz.1.159'.
[   56.074413][ T4021] loop2: detected capacity change from 0 to 256
[   56.089060][ T4024] loop1: detected capacity change from 0 to 128
[   56.182509][ T4030] bio_check_eod: 4142 callbacks suppressed
[   56.182523][ T4030] syz.1.165: attempt to access beyond end of device
[   56.182523][ T4030] loop1: rw=2049, sector=145, nr_sectors = 16 limit=128
[   56.202700][ T4030] syz.1.165: attempt to access beyond end of device
[   56.202700][ T4030] loop1: rw=2049, sector=169, nr_sectors = 8 limit=128
[   56.216193][ T4030] syz.1.165: attempt to access beyond end of device
[   56.216193][ T4030] loop1: rw=2049, sector=185, nr_sectors = 8 limit=128
[   56.229892][ T4030] syz.1.165: attempt to access beyond end of device
[   56.229892][ T4030] loop1: rw=2049, sector=201, nr_sectors = 8 limit=128
[   56.258424][ T4030] syz.1.165: attempt to access beyond end of device
[   56.258424][ T4030] loop1: rw=2049, sector=217, nr_sectors = 8 limit=128
[   56.271920][ T4030] syz.1.165: attempt to access beyond end of device
[   56.271920][ T4030] loop1: rw=2049, sector=233, nr_sectors = 8 limit=128
[   56.285683][ T4030] syz.1.165: attempt to access beyond end of device
[   56.285683][ T4030] loop1: rw=2049, sector=249, nr_sectors = 8 limit=128
[   56.299653][ T4030] syz.1.165: attempt to access beyond end of device
[   56.299653][ T4030] loop1: rw=2049, sector=265, nr_sectors = 8 limit=128
[   56.316515][ T4030] syz.1.165: attempt to access beyond end of device
[   56.316515][ T4030] loop1: rw=2049, sector=281, nr_sectors = 8 limit=128
[   56.330935][ T4029] netlink: 12 bytes leftover after parsing attributes in process `syz.2.167'.
[   56.372517][ T4030] syz.1.165: attempt to access beyond end of device
[   56.372517][ T4030] loop1: rw=2049, sector=297, nr_sectors = 8 limit=128
[   56.658568][   T29] kauditd_printk_skb: 871 callbacks suppressed
[   56.658583][   T29] audit: type=1326 audit(1768407534.595:5998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4016 comm="syz.3.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7f23852005 code=0x7ffc0000
[   56.743449][   T29] audit: type=1326 audit(1768407534.625:5999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4016 comm="syz.3.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7f23852005 code=0x7ffc0000
[   56.767027][   T29] audit: type=1326 audit(1768407534.625:6000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4016 comm="syz.3.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7f23852005 code=0x7ffc0000
[   56.790668][   T29] audit: type=1326 audit(1768407534.625:6001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4016 comm="syz.3.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7f23852005 code=0x7ffc0000
[   56.814490][   T29] audit: type=1326 audit(1768407534.625:6002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4016 comm="syz.3.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7f23852005 code=0x7ffc0000
[   56.838057][   T29] audit: type=1326 audit(1768407534.655:6003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4016 comm="syz.3.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7f23852005 code=0x7ffc0000
[   56.861536][   T29] audit: type=1326 audit(1768407534.655:6004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4016 comm="syz.3.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7f23852005 code=0x7ffc0000
[   56.885088][   T29] audit: type=1326 audit(1768407534.655:6005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4016 comm="syz.3.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7f23852005 code=0x7ffc0000
[   56.908621][   T29] audit: type=1326 audit(1768407534.655:6006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4016 comm="syz.3.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7f23852005 code=0x7ffc0000
[   56.932013][   T29] audit: type=1326 audit(1768407534.655:6007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4016 comm="syz.3.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7f23852005 code=0x7ffc0000
[   56.955672][ T4016] delete_channel: no stack
[   57.061809][ T4038] loop0: detected capacity change from 0 to 2048
[   57.967047][ T4038] EXT4-fs: Ignoring removed mblk_io_submit option
[   58.277950][ T4038] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   58.369886][ T4053] netlink: 4 bytes leftover after parsing attributes in process `syz.1.171'.
[   58.463231][ T4056] loop1: detected capacity change from 0 to 1024
[   58.530316][ T4038] netlink: 76 bytes leftover after parsing attributes in process `syz.0.170'.
[   58.558276][ T4056] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   58.616391][ T4064] netlink: 4 bytes leftover after parsing attributes in process `syz.2.175'.
[   58.619731][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   58.637663][ T4059] SELinux:  policydb table sizes (1919248238,1886930208) do not match mine (8,7)
[   58.646831][ T4059] SELinux: failed to load policy
[   58.807911][ T4044] netlink: 'syz.4.172': attribute type 8 has an invalid length.
[   58.815645][ T4044] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[   58.957116][ T4076] loop2: detected capacity change from 0 to 256
[   58.964229][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   58.975798][ T4078] loop0: detected capacity change from 0 to 128
[   59.274664][ T4074] netlink: 12 bytes leftover after parsing attributes in process `syz.3.179'.
[   60.678619][ T4087] delete_channel: no stack
[   60.781145][ T4098] loop4: detected capacity change from 0 to 2048
[   60.838165][ T4098] EXT4-fs: Ignoring removed mblk_io_submit option
[   60.893816][ T4102] SELinux:  policydb table sizes (1919248238,1886930208) do not match mine (8,7)
[   60.923025][ T4098] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   60.937759][ T4102] SELinux: failed to load policy
[   60.982332][ T4111] netlink: 4 bytes leftover after parsing attributes in process `syz.2.190'.
[   61.132708][ T4098] netlink: 76 bytes leftover after parsing attributes in process `syz.4.186'.
[   61.183765][ T4114] netlink: 4 bytes leftover after parsing attributes in process `syz.0.191'.
[   61.215521][ T4126] loop3: detected capacity change from 0 to 256
[   61.252072][ T4122] loop0: detected capacity change from 0 to 1024
[   61.282505][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   61.378980][ T4136] loop4: detected capacity change from 0 to 128
[   61.389302][ T4122] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   61.508486][ T4115] netlink: 'syz.1.192': attribute type 8 has an invalid length.
[   61.516194][ T4115] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[   61.554715][ T4136] bio_check_eod: 7325 callbacks suppressed
[   61.554735][ T4136] syz.4.198: attempt to access beyond end of device
[   61.554735][ T4136] loop4: rw=2049, sector=145, nr_sectors = 16 limit=128
[   61.579224][ T4136] syz.4.198: attempt to access beyond end of device
[   61.579224][ T4136] loop4: rw=2049, sector=169, nr_sectors = 8 limit=128
[   61.594057][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   61.607666][ T4136] syz.4.198: attempt to access beyond end of device
[   61.607666][ T4136] loop4: rw=2049, sector=185, nr_sectors = 8 limit=128
[   61.670043][ T4136] syz.4.198: attempt to access beyond end of device
[   61.670043][ T4136] loop4: rw=2049, sector=201, nr_sectors = 8 limit=128
[   61.688665][ T4136] syz.4.198: attempt to access beyond end of device
[   61.688665][ T4136] loop4: rw=2049, sector=217, nr_sectors = 8 limit=128
[   61.714627][   T29] kauditd_printk_skb: 389 callbacks suppressed
[   61.714645][   T29] audit: type=1326 audit(1768407539.635:6397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4113 comm=7767C1D331 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8528df749 code=0x7ffc0000
[   61.744267][   T29] audit: type=1326 audit(1768407539.635:6398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4113 comm=7767C1D331 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8528df749 code=0x7ffc0000
[   61.767687][   T29] audit: type=1326 audit(1768407539.635:6399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4113 comm=7767C1D331 exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd8528df749 code=0x7ffc0000
[   61.790967][   T29] audit: type=1326 audit(1768407539.635:6400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4113 comm=7767C1D331 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8528df749 code=0x7ffc0000
[   61.814603][   T29] audit: type=1326 audit(1768407539.635:6401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4113 comm=7767C1D331 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8528df749 code=0x7ffc0000
[   61.838035][   T29] audit: type=1326 audit(1768407539.635:6402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4113 comm=7767C1D331 exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd8528df749 code=0x7ffc0000
[   61.861396][   T29] audit: type=1326 audit(1768407539.635:6403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4113 comm=7767C1D331 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8528df749 code=0x7ffc0000
[   61.885037][   T29] audit: type=1326 audit(1768407539.635:6404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4113 comm=7767C1D331 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8528df749 code=0x7ffc0000
[   61.908461][   T29] audit: type=1326 audit(1768407539.635:6405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4113 comm=7767C1D331 exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd8528e1667 code=0x7ffc0000
[   61.911108][ T4136] syz.4.198: attempt to access beyond end of device
[   61.911108][ T4136] loop4: rw=2049, sector=233, nr_sectors = 8 limit=128
[   61.932103][   T29] audit: type=1326 audit(1768407539.635:6406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4113 comm=7767C1D331 exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fd8528e15dc code=0x7ffc0000
[   61.945915][ T4136] syz.4.198: attempt to access beyond end of device
[   61.945915][ T4136] loop4: rw=2049, sector=249, nr_sectors = 8 limit=128
[   62.003607][ T4136] syz.4.198: attempt to access beyond end of device
[   62.003607][ T4136] loop4: rw=2049, sector=265, nr_sectors = 8 limit=128
[   62.027442][ T4136] syz.4.198: attempt to access beyond end of device
[   62.027442][ T4136] loop4: rw=2049, sector=281, nr_sectors = 8 limit=128
[   62.051353][ T4136] syz.4.198: attempt to access beyond end of device
[   62.051353][ T4136] loop4: rw=2049, sector=297, nr_sectors = 8 limit=128
[   62.247105][ T4115] Set syz1 is full, maxelem 65536 reached
[   62.334525][ T4151] netlink: 4 bytes leftover after parsing attributes in process `syz.2.204'.
[   62.354466][ T4148] SELinux:  policydb table sizes (1919248238,1886930208) do not match mine (8,7)
[   62.386004][ T4148] SELinux: failed to load policy
[   63.527528][ T4142] delete_channel: no stack
[   63.567552][ T4163] loop4: detected capacity change from 0 to 256
[   63.845179][ T4167] loop1: detected capacity change from 0 to 2048
[   63.924375][ T4167] EXT4-fs: Ignoring removed mblk_io_submit option
[   63.946411][ T4173] netlink: 4 bytes leftover after parsing attributes in process `syz.0.210'.
[   64.032201][ T4175] loop0: detected capacity change from 0 to 1024
[   64.095878][ T4167] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   64.222644][ T4182] loop4: detected capacity change from 0 to 128
[   64.254358][ T4175] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   64.482829][ T4167] netlink: 76 bytes leftover after parsing attributes in process `syz.1.209'.
[   64.503718][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   64.515754][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   64.762661][ T4197] netlink: 4 bytes leftover after parsing attributes in process `syz.3.216'.
[   64.780544][ T4193] netlink: 'syz.1.214': attribute type 8 has an invalid length.
[   64.788427][ T4193] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[   64.866524][ T4199] SELinux:  policydb table sizes (1919248238,1886930208) do not match mine (8,7)
[   64.896773][ T4199] SELinux: failed to load policy
[   65.249268][ T4216] loop3: detected capacity change from 0 to 2048
[   65.258433][ T4216] EXT4-fs: Ignoring removed mblk_io_submit option
[   65.304642][ T4218] loop1: detected capacity change from 0 to 256
[   65.588873][ T4226] netlink: 4 bytes leftover after parsing attributes in process `syz.1.226'.
[   65.683985][ T4223] loop1: detected capacity change from 0 to 1024
[   65.744170][ T4223] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   65.996653][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   66.052327][ T4216] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   66.067849][ T4212] delete_channel: no stack
[   66.081722][ T4236] netlink: 4 bytes leftover after parsing attributes in process `syz.1.228'.
[   66.102117][ T4237] netlink: 16 bytes leftover after parsing attributes in process `syz.2.229'.
[   66.182044][ T4239] SELinux:  policydb table sizes (1919248238,1886930208) do not match mine (8,7)
[   66.191503][ T4239] SELinux: failed to load policy
[   66.265655][ T4246] loop1: detected capacity change from 0 to 128
[   66.321703][ T4216] netlink: 76 bytes leftover after parsing attributes in process `syz.3.224'.
[   66.388895][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   66.526380][ T4257] loop3: detected capacity change from 0 to 256
[   66.564271][ T4246] bio_check_eod: 6597 callbacks suppressed
[   66.564287][ T4246] syz.1.233: attempt to access beyond end of device
[   66.564287][ T4246] loop1: rw=8388608, sector=145, nr_sectors = 8 limit=128
[   66.600100][ T4255] netlink: 'syz.2.236': attribute type 8 has an invalid length.
[   66.604953][ T4246] syz.1.233: attempt to access beyond end of device
[   66.604953][ T4246] loop1: rw=8388608, sector=145, nr_sectors = 8 limit=128
[   66.629125][ T4255] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[   66.630316][ T4246] syz.1.233: attempt to access beyond end of device
[   66.630316][ T4246] loop1: rw=8388608, sector=145, nr_sectors = 8 limit=128
[   66.668192][ T4246] syz.1.233: attempt to access beyond end of device
[   66.668192][ T4246] loop1: rw=8388608, sector=145, nr_sectors = 8 limit=128
[   66.717833][ T4246] syz.1.233: attempt to access beyond end of device
[   66.717833][ T4246] loop1: rw=8388608, sector=145, nr_sectors = 8 limit=128
[   66.753893][ T4246] syz.1.233: attempt to access beyond end of device
[   66.753893][ T4246] loop1: rw=8388608, sector=145, nr_sectors = 8 limit=128
[   66.771776][   T29] kauditd_printk_skb: 682 callbacks suppressed
[   66.771792][   T29] audit: type=1326 audit(1768407544.705:7089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4254 comm=7767C1D331 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92e070f749 code=0x7ffc0000
[   66.801682][   T29] audit: type=1326 audit(1768407544.705:7090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4254 comm=7767C1D331 exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f92e070f749 code=0x7ffc0000
[   66.825020][   T29] audit: type=1326 audit(1768407544.705:7091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4254 comm=7767C1D331 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92e070f749 code=0x7ffc0000
[   66.848306][   T29] audit: type=1326 audit(1768407544.705:7092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4254 comm=7767C1D331 exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f92e070f749 code=0x7ffc0000
[   66.898973][ T4266] netlink: 4 bytes leftover after parsing attributes in process `syz.0.239'.
[   66.908777][ T4246] syz.1.233: attempt to access beyond end of device
[   66.908777][ T4246] loop1: rw=8388608, sector=145, nr_sectors = 8 limit=128
[   66.943323][ T4263] loop0: detected capacity change from 0 to 1024
[   66.950030][ T4246] syz.1.233: attempt to access beyond end of device
[   66.950030][ T4246] loop1: rw=8388608, sector=145, nr_sectors = 8 limit=128
[   66.987533][ T4246] syz.1.233: attempt to access beyond end of device
[   66.987533][ T4246] loop1: rw=8388608, sector=145, nr_sectors = 8 limit=128
[   67.001313][ T4246] syz.1.233: attempt to access beyond end of device
[   67.001313][ T4246] loop1: rw=8388608, sector=145, nr_sectors = 8 limit=128
[   67.043859][   T29] audit: type=1326 audit(1768407544.705:7093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4254 comm=7767C1D331 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92e070f749 code=0x7ffc0000
[   67.067408][   T29] audit: type=1326 audit(1768407544.705:7094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4254 comm=7767C1D331 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92e070f749 code=0x7ffc0000
[   67.091095][   T29] audit: type=1326 audit(1768407544.705:7095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4254 comm=7767C1D331 exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f92e0711667 code=0x7ffc0000
[   67.114295][   T29] audit: type=1326 audit(1768407544.705:7096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4254 comm=7767C1D331 exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f92e07115dc code=0x7ffc0000
[   67.137561][   T29] audit: type=1326 audit(1768407544.705:7097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4254 comm=7767C1D331 exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f92e0711514 code=0x7ffc0000
[   67.160889][   T29] audit: type=1326 audit(1768407544.705:7098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4254 comm=7767C1D331 exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f92e0711514 code=0x7ffc0000
[   67.381029][ T4263] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   67.625418][ T4255] Set syz1 is full, maxelem 65536 reached
[   67.652052][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   67.761427][ T4279] netlink: 16 bytes leftover after parsing attributes in process `syz.2.243'.
[   67.847908][ T4284] SELinux:  policydb table sizes (1919248238,1886930208) do not match mine (8,7)
[   67.866674][ T4284] SELinux: failed to load policy
[   68.026107][ T4289] EXT4-fs: Ignoring removed mblk_io_submit option
[   68.068696][ T4289] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   68.327441][ T4270] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set
[   68.348955][ T4289] netlink: 76 bytes leftover after parsing attributes in process `syz.2.248'.
[   68.359921][ T4270] EXT4-fs (loop2): Remounting filesystem read-only
[   68.439312][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   68.454495][ T4273] delete_channel: no stack
[   68.682783][ T4309] set_capacity_and_notify: 3 callbacks suppressed
[   68.682803][ T4309] loop3: detected capacity change from 0 to 1024
[   68.739539][ T4309] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   69.075602][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   69.180133][ T4322] __nla_validate_parse: 2 callbacks suppressed
[   69.180147][ T4322] netlink: 16 bytes leftover after parsing attributes in process `syz.3.256'.
[   69.278819][ T4320] netlink: 'syz.2.255': attribute type 8 has an invalid length.
[   69.287228][ T4320] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[   69.362925][ T4327] SELinux:  policydb table sizes (1919248238,1886930208) do not match mine (8,7)
[   69.427377][ T4327] SELinux: failed to load policy
[   69.506168][ T4335] netlink: 4 bytes leftover after parsing attributes in process `syz.2.261'.
[   69.550534][ T4340] loop4: detected capacity change from 0 to 256
[   69.562144][ T4341] loop3: detected capacity change from 0 to 764
[   69.678197][ T4343] loop0: detected capacity change from 0 to 2048
[   69.758925][ T4343] EXT4-fs: Ignoring removed mblk_io_submit option
[   69.840792][ T4350] netlink: 4 bytes leftover after parsing attributes in process `syz.2.266'.
[   69.873170][ T4343] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   69.973711][ T4354] loop2: detected capacity change from 0 to 1024
[   70.139857][ T4354] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   70.255481][ T4338] netlink: 76 bytes leftover after parsing attributes in process `syz.0.263'.
[   70.386370][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.394023][ T4358] netlink: 8 bytes leftover after parsing attributes in process `syz.1.267'.
[   70.498646][ T4360] loop1: detected capacity change from 0 to 128
[   70.521238][ T4344] delete_channel: no stack
[   70.522343][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.663729][ T4372] SELinux:  policydb table sizes (1919248238,1886930208) do not match mine (8,7)
[   70.678049][ T4372] SELinux: failed to load policy
[   71.198844][ T4369] netlink: 'syz.2.271': attribute type 8 has an invalid length.
[   71.218726][ T4369] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[   71.432441][ T4387] netlink: 4 bytes leftover after parsing attributes in process `syz.0.278'.
[   71.475611][ T4389] loop0: detected capacity change from 0 to 2048
[   71.525479][ T4389] EXT4-fs: Ignoring removed mblk_io_submit option
[   71.547857][ T4389] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   71.577117][ T4395] netlink: 8 bytes leftover after parsing attributes in process `syz.2.280'.
[   71.782974][ T4401] loop3: detected capacity change from 0 to 764
[   71.794607][ T4389] netlink: 76 bytes leftover after parsing attributes in process `syz.0.279'.
[   71.944603][ T4408] netlink: 4 bytes leftover after parsing attributes in process `syz.2.282'.
[   71.997199][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.025802][ T4403] loop2: detected capacity change from 0 to 1024
[   72.082014][   T29] kauditd_printk_skb: 786 callbacks suppressed
[   72.082085][   T29] audit: type=1326 audit(1768407550.015:7885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4410 comm="syz.4.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9c1d5f749 code=0x7ffc0000
[   72.286617][   T29] audit: type=1326 audit(1768407550.055:7886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4410 comm="syz.4.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9c1d5f749 code=0x7ffc0000
[   72.291690][ T4403] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   72.310451][   T29] audit: type=1326 audit(1768407550.055:7887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4410 comm="syz.4.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9c1d5f749 code=0x7ffc0000
[   72.345614][   T29] audit: type=1326 audit(1768407550.055:7889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4410 comm="syz.4.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc9c1d5f749 code=0x7ffc0000
[   72.369422][   T29] audit: type=1326 audit(1768407550.055:7888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4410 comm="syz.4.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9c1d5f749 code=0x7ffc0000
[   72.393186][   T29] audit: type=1326 audit(1768407550.055:7890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4410 comm="syz.4.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9c1d5f749 code=0x7ffc0000
[   72.416693][   T29] audit: type=1326 audit(1768407550.055:7891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4410 comm="syz.4.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9c1d5f749 code=0x7ffc0000
[   72.440129][   T29] audit: type=1326 audit(1768407550.055:7892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4410 comm="syz.4.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9c1d5f749 code=0x7ffc0000
[   72.463590][   T29] audit: type=1326 audit(1768407550.055:7893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4410 comm="syz.4.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc9c1d5f749 code=0x7ffc0000
[   72.487117][   T29] audit: type=1326 audit(1768407550.065:7894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4410 comm="syz.4.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9c1d5f749 code=0x7ffc0000
[   72.595740][ T4415] SELinux:  policydb table sizes (1919248238,1886930208) do not match mine (8,7)
[   72.606155][ T4415] SELinux: failed to load policy
[   72.658915][ T4418] loop4: detected capacity change from 0 to 256
[   72.710980][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.740942][ T4427] bio_check_eod: 28102 callbacks suppressed
[   72.740961][ T4427] syz.3.288: attempt to access beyond end of device
[   72.740961][ T4427] loop3: rw=2049, sector=145, nr_sectors = 16 limit=128
[   72.781372][ T4430] netlink: 4 bytes leftover after parsing attributes in process `syz.2.290'.
[   72.797586][ T4427] syz.3.288: attempt to access beyond end of device
[   72.797586][ T4427] loop3: rw=2049, sector=169, nr_sectors = 8 limit=128
[   72.905641][ T4427] syz.3.288: attempt to access beyond end of device
[   72.905641][ T4427] loop3: rw=2049, sector=185, nr_sectors = 8 limit=128
[   73.027381][ T4427] syz.3.288: attempt to access beyond end of device
[   73.027381][ T4427] loop3: rw=2049, sector=201, nr_sectors = 8 limit=128
[   73.114599][ T4427] syz.3.288: attempt to access beyond end of device
[   73.114599][ T4427] loop3: rw=2049, sector=217, nr_sectors = 8 limit=128
[   73.191954][ T4427] syz.3.288: attempt to access beyond end of device
[   73.191954][ T4427] loop3: rw=2049, sector=233, nr_sectors = 8 limit=128
[   73.222036][ T4427] syz.3.288: attempt to access beyond end of device
[   73.222036][ T4427] loop3: rw=2049, sector=249, nr_sectors = 8 limit=128
[   73.254372][ T4427] syz.3.288: attempt to access beyond end of device
[   73.254372][ T4427] loop3: rw=2049, sector=265, nr_sectors = 8 limit=128
[   73.320122][ T4427] syz.3.288: attempt to access beyond end of device
[   73.320122][ T4427] loop3: rw=2049, sector=281, nr_sectors = 8 limit=128
[   73.349315][ T4427] syz.3.288: attempt to access beyond end of device
[   73.349315][ T4427] loop3: rw=2049, sector=297, nr_sectors = 8 limit=128
[   73.452774][ T4419] delete_channel: no stack
[   73.543017][ T4442] EXT4-fs: Ignoring removed mblk_io_submit option
[   73.707994][ T4442] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   73.752495][ T4455] set_capacity_and_notify: 2 callbacks suppressed
[   73.752511][ T4455] loop2: detected capacity change from 0 to 764
[   73.785242][ T4453] SELinux:  policydb table sizes (1919248238,1886930208) do not match mine (8,7)
[   73.805047][ T4453] SELinux: failed to load policy
[   73.946483][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   74.586414][ T4473] __nla_validate_parse: 2 callbacks suppressed
[   74.586433][ T4473] netlink: 8 bytes leftover after parsing attributes in process `syz.0.304'.
[   74.605219][ T4474] loop4: detected capacity change from 0 to 256
[   74.714378][ T4485] loop4: detected capacity change from 0 to 128
[   74.775973][ T4488] netlink: 4 bytes leftover after parsing attributes in process `wÞ£ÿ'.
[   74.932186][ T4494] SELinux:  policydb table sizes (1919248238,1886930208) do not match mine (8,7)
[   74.949439][ T4494] SELinux: failed to load policy
[   75.476877][ T4475] delete_channel: no stack
[   75.524070][ T4505] loop0: detected capacity change from 0 to 256
[   75.724854][ T4507] loop2: detected capacity change from 0 to 764
[   75.971260][ T4515] netlink: 8 bytes leftover after parsing attributes in process `syz.0.318'.
[   75.987224][ T4517] loop4: detected capacity change from 0 to 256
[   76.311562][ T4521] xt_CT: You must specify a L4 protocol and not use inversions on it
[   76.409048][ T4519] loop1: detected capacity change from 0 to 2048
[   76.450857][ T4521] netlink: 'syz.0.320': attribute type 13 has an invalid length.
[   76.511968][ T4519] EXT4-fs: Ignoring removed mblk_io_submit option
[   76.536895][ T4521] gretap0: refused to change device tx_queue_len
[   76.596222][ T4521] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   76.744734][ T4519] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   76.769058][ T4526] SELinux:  policydb table sizes (1919248238,1886930208) do not match mine (8,7)
[   76.797095][ T4526] SELinux: failed to load policy
[   76.835901][ T4532] loop0: detected capacity change from 0 to 256
[   76.980915][ T4540] loop0: detected capacity change from 0 to 128
[   77.098312][ T4541] netlink: 4 bytes leftover after parsing attributes in process `syz.3.323'.
[   77.115618][   T29] kauditd_printk_skb: 1659 callbacks suppressed
[   77.115660][   T29] audit: type=1326 audit(1768407555.035:9554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4536 comm="syz.2.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92e070f749 code=0x7ffc0000
[   77.145421][   T29] audit: type=1326 audit(1768407555.035:9555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4536 comm="syz.2.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92e070f749 code=0x7ffc0000
[   77.168828][   T29] audit: type=1326 audit(1768407555.035:9556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4536 comm="syz.2.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92e070f749 code=0x7ffc0000
[   77.192310][   T29] audit: type=1326 audit(1768407555.035:9557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4536 comm="syz.2.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f92e070f749 code=0x7ffc0000
[   77.204156][ T4548] netlink: 76 bytes leftover after parsing attributes in process `syz.1.319'.
[   77.215793][   T29] audit: type=1326 audit(1768407555.035:9558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4536 comm="syz.2.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92e070f749 code=0x7ffc0000
[   77.248039][   T29] audit: type=1326 audit(1768407555.035:9559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4536 comm="syz.2.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92e070f749 code=0x7ffc0000
[   77.271709][   T29] audit: type=1326 audit(1768407555.035:9560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4536 comm="syz.2.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92e070f749 code=0x7ffc0000
[   77.295140][   T29] audit: type=1326 audit(1768407555.035:9561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4536 comm="syz.2.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f92e070f749 code=0x7ffc0000
[   77.318536][   T29] audit: type=1326 audit(1768407555.035:9562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4536 comm="syz.2.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92e070f749 code=0x7ffc0000
[   77.341906][   T29] audit: type=1326 audit(1768407555.035:9563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4536 comm="syz.2.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92e070f749 code=0x7ffc0000
[   77.345091][ T4541] loop3: detected capacity change from 0 to 1024
[   77.495217][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   77.595840][ T4541] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   77.751171][ T4540] bio_check_eod: 13040 callbacks suppressed
[   77.751186][ T4540] syz.0.327: attempt to access beyond end of device
[   77.751186][ T4540] loop0: rw=8388608, sector=145, nr_sectors = 8 limit=128
[   77.797967][ T4536] delete_channel: no stack
[   77.848598][ T4540] syz.0.327: attempt to access beyond end of device
[   77.848598][ T4540] loop0: rw=8388608, sector=145, nr_sectors = 8 limit=128
[   79.018970][ T4529] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 440: padding at end of block bitmap is not set
[   79.103661][ T4566] loop0: detected capacity change from 0 to 764
[   79.271930][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.475358][ T4572] SELinux:  policydb table sizes (1919248238,1886930208) do not match mine (8,7)
[   79.549694][ T4575] loop2: detected capacity change from 0 to 256
[   79.574069][ T4572] SELinux: failed to load policy
[   79.927603][ T4582] loop4: detected capacity change from 0 to 2048
[   79.934723][ T4582] EXT4-fs: Ignoring removed mblk_io_submit option
[   80.056467][ T4590] loop3: detected capacity change from 0 to 256
[   80.190529][ T4582] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   80.228757][ T4592] netlink: 28 bytes leftover after parsing attributes in process `syz.0.342'.
[   80.238081][ T4592] netlink: 28 bytes leftover after parsing attributes in process `syz.0.342'.
[   80.530635][ T4582] netlink: 76 bytes leftover after parsing attributes in process `syz.4.338'.
[   80.604722][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   80.607902][ T4578] delete_channel: no stack
[   80.739213][ T4607] netlink: 4 bytes leftover after parsing attributes in process `syz.0.345'.
[   80.851728][ T4615] SELinux:  policydb table sizes (1919248238,1886930208) do not match mine (8,7)
[   80.869750][ T4615] SELinux: failed to load policy
[   80.912369][ T4604] loop0: detected capacity change from 0 to 1024
[   80.971624][ T4619] netlink: 4 bytes leftover after parsing attributes in process `syz.1.349'.
[   81.005142][ T4625] loop4: detected capacity change from 0 to 256
[   81.071693][ T4604] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   81.260451][ T4631] loop3: detected capacity change from 0 to 256
[   81.427741][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   81.463858][ T4639] loop1: detected capacity change from 0 to 256
[   81.734718][ T4643] loop4: detected capacity change from 0 to 256
[   82.004565][ T4650] netlink: 8 bytes leftover after parsing attributes in process `syz.2.360'.
[   82.132294][   T29] kauditd_printk_skb: 860 callbacks suppressed
[   82.132332][   T29] audit: type=1326 audit(1768407560.065:10424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4652 comm="syz.3.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f2381f749 code=0x7ffc0000
[   82.163213][   T29] audit: type=1326 audit(1768407560.065:10425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4655 comm="syz.3.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7f23852005 code=0x7ffc0000
[   82.186735][   T29] audit: type=1326 audit(1768407560.095:10426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4652 comm="syz.3.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f2381f749 code=0x7ffc0000
[   82.210909][   T29] audit: type=1326 audit(1768407560.145:10427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4652 comm="syz.3.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f7f2381f749 code=0x7ffc0000
[   82.234398][   T29] audit: type=1326 audit(1768407560.145:10428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4652 comm="syz.3.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f2381f749 code=0x7ffc0000
[   82.257949][   T29] audit: type=1326 audit(1768407560.145:10429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4652 comm="syz.3.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f2381f749 code=0x7ffc0000
[   82.262045][ T4654] SELinux:  policydb table sizes (1919248238,1886930208) do not match mine (8,7)
[   82.285414][   T29] audit: type=1326 audit(1768407560.165:10430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4652 comm="syz.3.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7f237bb829 code=0x7ffc0000
[   82.314296][   T29] audit: type=1326 audit(1768407560.165:10431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4652 comm="syz.3.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f2381f749 code=0x7ffc0000
[   82.337774][   T29] audit: type=1326 audit(1768407560.165:10432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4652 comm="syz.3.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7f2381f749 code=0x7ffc0000
[   82.361123][   T29] audit: type=1326 audit(1768407560.165:10433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4652 comm="syz.3.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f2381f749 code=0x7ffc0000
[   82.393231][ T4654] SELinux: failed to load policy
[   82.516625][ T4662] loop4: detected capacity change from 0 to 256
[   82.539213][ T4664] xt_CT: You must specify a L4 protocol and not use inversions on it
[   82.562099][ T4666] netlink: 'syz.2.367': attribute type 13 has an invalid length.
[   82.572827][ T4664] netlink: 'syz.3.363': attribute type 13 has an invalid length.
[   82.587791][ T4666] gretap0: refused to change device tx_queue_len
[   82.599669][ T4666] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   82.629758][ T4664] gretap0: refused to change device tx_queue_len
[   82.670557][ T4664] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   82.892848][ T4648] netlink: 'syz.1.362': attribute type 8 has an invalid length.
[   82.900657][ T4648] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[   82.964923][ T4680] SELinux:  policydb table sizes (1919248238,1886930208) do not match mine (8,7)
[   83.020818][ T4680] SELinux: failed to load policy
[   83.323524][ T4688] netlink: 8 bytes leftover after parsing attributes in process `syz.3.375'.
[   84.409312][ T4708] set_capacity_and_notify: 2 callbacks suppressed
[   84.409329][ T4708] loop0: detected capacity change from 0 to 256
[   84.458494][ T4672] netlink: 'syz.2.368': attribute type 8 has an invalid length.
[   84.466231][ T4672] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[   84.503944][ T4713] loop0: detected capacity change from 0 to 256
[   84.535447][ T4715] SELinux:  policydb table sizes (1919248238,1886930208) do not match mine (8,7)
[   84.545341][ T4715] SELinux: failed to load policy
[   84.686825][ T4720] serio: Serial port ptm0
[   85.080300][ T4732] netlink: 4 bytes leftover after parsing attributes in process `syz.1.391'.
[   85.557715][ T4733] netlink: 16 bytes leftover after parsing attributes in process `syz.4.392'.
[   85.669783][ T4736] loop0: detected capacity change from 0 to 256
[   85.820917][ T4742] serio: Serial port ptm0
[   85.831633][ T4746] loop0: detected capacity change from 0 to 512
[   85.873811][ T4731] syzkaller0: entered promiscuous mode
[   85.879389][ T4731] syzkaller0: entered allmulticast mode
[   85.896060][ T4746] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #3: comm syz.0.398: corrupted inode contents
[   85.910165][ T4746] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #3: comm syz.0.398: mark_inode_dirty error
[   85.922314][ T4746] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #3: comm syz.0.398: corrupted inode contents
[   85.934298][ T4746] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.398: mark_inode_dirty error
[   85.945874][ T4746] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.398: Failed to acquire dquot type 0
[   85.957668][ T4746] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.398: corrupted inode contents
[   85.969843][ T4746] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #16: comm syz.0.398: mark_inode_dirty error
[   85.981532][ T4746] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.398: corrupted inode contents
[   85.993698][ T4746] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.398: mark_inode_dirty error
[   86.005157][ T4746] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.398: corrupted inode contents
[   86.017310][ T4746] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem
[   86.026007][ T4746] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.398: corrupted inode contents
[   86.031542][ T4742] serio: Serial port ptm0
[   86.044502][ T4746] EXT4-fs error (device loop0): ext4_truncate:4635: inode #16: comm syz.0.398: mark_inode_dirty error
[   86.065850][ T4746] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem
[   86.075242][ T4746] EXT4-fs (loop0): 1 truncate cleaned up
[   86.081808][ T4746] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   86.100689][ T4746] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   86.128031][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   86.188652][ T4753] SELinux:  policydb table sizes (1919248238,1886930208) do not match mine (8,7)
[   86.202209][ T4753] SELinux: failed to load policy
[   87.359509][ T4767] loop4: detected capacity change from 0 to 512
[   87.508340][ T4747] netlink: 'syz.2.397': attribute type 8 has an invalid length.
[   87.516131][ T4747] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[   87.541065][ T4770] loop0: detected capacity change from 0 to 512
[   87.592557][   T29] kauditd_printk_skb: 395 callbacks suppressed
[   87.592575][   T29] audit: type=1326 audit(1768407565.525:10827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4743 comm=7767C1D331 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92e070f749 code=0x7ffc0000
[   87.653441][ T4767] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #3: comm syz.4.404: corrupted inode contents
[   87.717395][   T29] audit: type=1326 audit(1768407565.555:10828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4743 comm=7767C1D331 exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f92e070f749 code=0x7ffc0000
[   87.741221][   T29] audit: type=1326 audit(1768407565.555:10829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4743 comm=7767C1D331 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92e070f749 code=0x7ffc0000
[   87.764881][   T29] audit: type=1326 audit(1768407565.555:10830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4743 comm=7767C1D331 exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f92e070f749 code=0x7ffc0000
[   87.788489][   T29] audit: type=1326 audit(1768407565.555:10831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4743 comm=7767C1D331 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92e070f749 code=0x7ffc0000
[   87.812188][   T29] audit: type=1326 audit(1768407565.555:10832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4743 comm=7767C1D331 exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f92e0711667 code=0x7ffc0000
[   87.835534][   T29] audit: type=1326 audit(1768407565.555:10833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4743 comm=7767C1D331 exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f92e07115dc code=0x7ffc0000
[   87.858924][   T29] audit: type=1326 audit(1768407565.555:10834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4743 comm=7767C1D331 exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f92e0711514 code=0x7ffc0000
[   87.882261][   T29] audit: type=1326 audit(1768407565.555:10835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4743 comm=7767C1D331 exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f92e0711514 code=0x7ffc0000
[   87.905600][   T29] audit: type=1326 audit(1768407565.555:10836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4743 comm=7767C1D331 exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f92e070e3aa code=0x7ffc0000
[   88.049318][ T4770] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #3: comm syz.0.403: corrupted inode contents
[   88.089744][ T4767] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #3: comm syz.4.404: mark_inode_dirty error
[   88.144138][ T4779] netlink: 4 bytes leftover after parsing attributes in process `syz.2.406'.
[   88.211585][ T4770] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #3: comm syz.0.403: mark_inode_dirty error
[   88.314516][ T4767] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #3: comm syz.4.404: corrupted inode contents
[   88.354364][ T4770] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #3: comm syz.0.403: corrupted inode contents
[   88.391837][ T4767] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #3: comm syz.4.404: mark_inode_dirty error
[   88.455756][ T4767] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.404: Failed to acquire dquot type 0
[   88.495525][ T4767] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #16: comm syz.4.404: corrupted inode contents
[   88.517909][ T4767] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #16: comm syz.4.404: mark_inode_dirty error
[   88.530922][ T4767] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #16: comm syz.4.404: corrupted inode contents
[   88.543482][ T4767] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.404: mark_inode_dirty error
[   88.554915][ T4767] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #16: comm syz.4.404: corrupted inode contents
[   88.567423][ T4787] netlink: 4 bytes leftover after parsing attributes in process `syz.3.407'.
[   88.580851][ T4767] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem
[   88.580851][ T4770] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.403: mark_inode_dirty error
[   88.612500][ T4770] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.403: Failed to acquire dquot type 0
[   88.632487][ T4787] loop3: detected capacity change from 0 to 1024
[   88.652900][ T4790] netlink: 4 bytes leftover after parsing attributes in process `syz.1.408'.
[   88.670890][ T4770] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.403: corrupted inode contents
[   88.689106][ T4767] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #16: comm syz.4.404: corrupted inode contents
[   88.740570][ T4787] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   88.754206][ T4770] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #16: comm syz.0.403: mark_inode_dirty error
[   88.822234][ T4797] netlink: 4 bytes leftover after parsing attributes in process `syz.1.409'.
[   88.831414][ T4770] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.403: corrupted inode contents
[   88.843344][ T4767] EXT4-fs error (device loop4): ext4_truncate:4635: inode #16: comm syz.4.404: mark_inode_dirty error
[   88.924020][ T4770] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.403: mark_inode_dirty error
[   88.924367][ T4767] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem
[   88.980357][ T4802] serio: Serial port ptm1
[   89.021859][ T4770] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.403: corrupted inode contents
[   89.032213][ T4767] EXT4-fs (loop4): 1 truncate cleaned up
[   89.053731][ T4770] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem
[   89.058489][ T4767] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   89.090159][ T4767] ext4 filesystem being mounted at /78/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   89.105806][ T4770] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.403: corrupted inode contents
[   89.118236][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   89.144874][ T4802] serio: Serial port ptm1
[   89.150384][ T4045] ==================================================================
[   89.158514][ T4045] BUG: KCSAN: data-race in set_nlink / set_nlink
[   89.164866][ T4045] 
[   89.167210][ T4045] read to 0xffff888107c08518 of 4 bytes by task 3006 on cpu 0:
[   89.174786][ T4045]  set_nlink+0x29/0xb0
[   89.178975][ T4045]  kernfs_iop_permission+0x1e2/0x220
[   89.184290][ T4045]  inode_permission+0x2de/0x3c0
[   89.189166][ T4045]  link_path_walk+0x779/0xe30
[   89.193866][ T4045]  path_openat+0x1c0/0x23b0
[   89.198411][ T4045]  do_filp_open+0x109/0x230
[   89.202949][ T4045]  do_sys_openat2+0xa6/0x150
[   89.207570][ T4045]  __x64_sys_openat+0xf2/0x120
[   89.212367][ T4045]  x64_sys_call+0x2b07/0x3000
[   89.217065][ T4045]  do_syscall_64+0xca/0x2b0
[   89.221619][ T4045]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   89.227537][ T4045] 
[   89.229883][ T4045] write to 0xffff888107c08518 of 4 bytes by task 4045 on cpu 1:
[   89.237526][ T4045]  set_nlink+0x99/0xb0
[   89.241624][ T4045]  kernfs_iop_permission+0x1e2/0x220
[   89.246948][ T4045]  inode_permission+0x2de/0x3c0
[   89.251843][ T4045]  link_path_walk+0x779/0xe30
[   89.256554][ T4045]  path_lookupat+0x8c/0x500
[   89.261091][ T4045]  filename_lookup+0x147/0x340
[   89.265906][ T4045]  vfs_statx+0x9d/0x390
[   89.270109][ T4045]  vfs_fstatat+0x115/0x170
[   89.274641][ T4045]  __se_sys_newfstatat+0x55/0x260
[   89.279795][ T4045]  __x64_sys_newfstatat+0x55/0x70
[   89.284847][ T4045]  x64_sys_call+0x111f/0x3000
[   89.289549][ T4045]  do_syscall_64+0xca/0x2b0
[   89.294109][ T4045]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   89.300070][ T4045] 
[   89.302414][ T4045] value changed: 0x00000014 -> 0x00000015
[   89.308154][ T4045] 
[   89.310513][ T4045] Reported by Kernel Concurrency Sanitizer on:
[   89.316693][ T4045] CPU: 1 UID: 0 PID: 4045 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) 
[   89.326084][ T4045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   89.336161][ T4045] ==================================================================
[   89.348366][ T4770] EXT4-fs error (device loop0): ext4_truncate:4635: inode #16: comm syz.0.403: mark_inode_dirty error
[   89.363950][ T4810] xt_CT: You must specify a L4 protocol and not use inversions on it
[   89.399770][ T4809] netlink: 'syz.3.414': attribute type 13 has an invalid length.
[   89.407932][ T4770] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem
[   89.423595][ T4770] EXT4-fs (loop0): 1 truncate cleaned up
[   89.430396][ T4809] gretap0: refused to change device tx_queue_len
[   89.431387][ T4770] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   89.450584][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   89.456640][ T4809] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   89.476147][ T4770] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   89.563614][ T4770] syz.0.403 (4770) used greatest stack depth: 9664 bytes left
[   89.575605][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   89.853952][ T4805] delete_channel: no stack