last executing test programs:

1m7.098945647s ago: executing program 0 (id=48):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18)
r2 = socket(0x10, 0x3, 0x0)
connect$netlink(r2, &(0x7f0000000280)=@proc={0x10, 0x0, 0x1}, 0xc)
sendmsg$nl_route_sched(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001500)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4010}, 0x8084)

1m7.05362196s ago: executing program 0 (id=49):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x4002, 0x400252}, &(0x7f0000000340)=<r2=>0x0, &(0x7f0000000300)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000500)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x2000, @fd, 0x9, 0x0, 0x0, 0x2})
io_uring_enter(r1, 0x627, 0x26aa, 0x43, 0x0, 0x0)

1m6.172683262s ago: executing program 0 (id=68):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0})
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18)
r2 = syz_io_uring_setup(0x762f, &(0x7f0000000140)={0x0, 0x114dd, 0x10, 0xffffffff, 0x320}, &(0x7f0000000280)=<r3=>0x0, &(0x7f0000000200)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000380)='./file0/../file0\x00', 0xffffffffffffffff, 0x1000, 0x1})
io_uring_enter(r2, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f)

1m6.060135192s ago: executing program 0 (id=81):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001340)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x6}, 0x18)
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000e40)="$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")
open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x1c, "ef359f41e236ffc6234b02e86dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]})
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0)

1m5.686091972s ago: executing program 0 (id=76):
ioperm(0x0, 0x4, 0x8)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040), 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setresuid(0x0, 0x0, 0x0)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x8)

1m5.295101194s ago: executing program 0 (id=82):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r3}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r2}, 0x10)
listen(r1, 0x3)

1m5.204749931s ago: executing program 32 (id=82):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r3}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r2}, 0x10)
listen(r1, 0x3)

45.526750757s ago: executing program 1 (id=608):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r3}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa}, 0x50)

45.475969711s ago: executing program 1 (id=613):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c00000000000000000000001801000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$igmp6(0xa, 0x3, 0x2)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}})
write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72)

45.382040018s ago: executing program 1 (id=604):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @local}, {0x0, 0x17c1, 0x8}}}}}, 0x0)
close(r1)
socket(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x2a)

45.165815706s ago: executing program 1 (id=611):
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x804, &(0x7f0000000440)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64, @ANYRESOCT], 0x1, 0x36e, &(0x7f0000000c00)="$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")
open(0x0, 0x0, 0x40)
prlimit64(0x0, 0xe, 0x0, 0x0)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
madvise(&(0x7f0000ffe000/0x2000)=nil, 0xffffffffdf001fff, 0x18)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$setregs(0x1a, r0, 0xc, &(0x7f0000000000))

45.12324759s ago: executing program 1 (id=616):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000100))
timer_create(0x0, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, &(0x7f0000000140)=<r2=>0x0, &(0x7f0000000280))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4)
io_uring_enter(r1, 0x66a8, 0x4000, 0xc, 0x0, 0x0)

44.924221175s ago: executing program 1 (id=633):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x32c}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r3}, 0x10)
close(r1)

44.901050878s ago: executing program 33 (id=633):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x32c}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r3}, 0x10)
close(r1)

44.053818216s ago: executing program 4 (id=636):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0x7f, 0x0, 0x0, 0xb9ff, 0xa})
write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0))
r1 = syz_open_pts(r0, 0x101000)
r2 = dup3(r1, r0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x4, 0x5}, 0x2012, 0x0, 0x2, 0x2, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17)

43.469698424s ago: executing program 4 (id=641):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000000)=0x930d, 0x4)
r3 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'erspan0\x00', <r4=>0x0})
sendto$packet(r2, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14)

43.425818048s ago: executing program 4 (id=643):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0})
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18)
r2 = syz_io_uring_setup(0x762f, &(0x7f0000000140)={0x0, 0x114dd, 0x10, 0xffffffff, 0x320}, &(0x7f0000000280)=<r3=>0x0, &(0x7f0000000200)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000380)='./file0/../file0\x00', 0xffffffffffffffff, 0x1000, 0x1})
io_uring_enter(r2, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f)

43.365430173s ago: executing program 4 (id=644):
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x804, &(0x7f0000000440)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64, @ANYRESOCT], 0x1, 0x36e, &(0x7f0000000c00)="$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")
open(0x0, 0x0, 0x40)
prlimit64(0x0, 0xe, 0x0, 0x0)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
madvise(&(0x7f0000ffe000/0x2000)=nil, 0xffffffffdf001fff, 0x18)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$setregs(0x1a, r0, 0xc, &(0x7f0000000000))

43.261766661s ago: executing program 4 (id=645):
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc804f9fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe)

42.765631132s ago: executing program 4 (id=648):
r0 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd8, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0)

42.765468851s ago: executing program 3 (id=650):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r3}, 0x10)
close(r1)

42.732739044s ago: executing program 34 (id=648):
r0 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd8, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0)

42.645387701s ago: executing program 3 (id=654):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000040)=0xfffffffc, 0x4)
setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000180)=0x8, 0x4)
recvmmsg(r0, &(0x7f0000000980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=""/19, 0x13}, 0xa6e}], 0x1, 0x45833af92e4b39ff, 0x0)

42.448868048s ago: executing program 3 (id=655):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f00000005c0)={[{@errors_remount}, {}]}, 0x4, 0x4f3, &(0x7f00000012c0)="$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")
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0)
mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f00000001c0), 0x0, 0x0)
umount2(&(0x7f00000002c0)='./file0\x00', 0x0)

42.277685631s ago: executing program 3 (id=656):
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x804, &(0x7f0000000440)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64, @ANYRESOCT], 0x1, 0x36e, &(0x7f0000000c00)="$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")
open(0x0, 0x0, 0x40)
prlimit64(0x0, 0xe, 0x0, 0x0)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
madvise(&(0x7f0000ffe000/0x2000)=nil, 0xffffffffdf001fff, 0x18)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$setregs(0x1a, r0, 0xc, &(0x7f0000000000))

42.143386152s ago: executing program 3 (id=658):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000100000000000000000b000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

41.904071732s ago: executing program 3 (id=667):
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_GET_FEATURE(r0, 0x0, 0x4008000)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r1, 0x29, 0xcb, 0x0, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000380)={0x5, 0x7, 0x3, 0x4}, 0x10)
getpid()
ioctl$sock_SIOCGPGRP(r1, 0x8904, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000c40)={'ip6tnl0\x00', &(0x7f0000000bc0)={'syztnl1\x00', 0x0, 0x29, 0x2, 0x12, 0x9, 0x20, @empty, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x7fee, 0x8, 0x8, 0x100}})

41.903860072s ago: executing program 35 (id=667):
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_GET_FEATURE(r0, 0x0, 0x4008000)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r1, 0x29, 0xcb, 0x0, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000380)={0x5, 0x7, 0x3, 0x4}, 0x10)
getpid()
ioctl$sock_SIOCGPGRP(r1, 0x8904, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000c40)={'ip6tnl0\x00', &(0x7f0000000bc0)={'syztnl1\x00', 0x0, 0x29, 0x2, 0x12, 0x9, 0x20, @empty, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x7fee, 0x8, 0x8, 0x100}})

1.044064385s ago: executing program 6 (id=1724):
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
r1 = inotify_init1(0x0)
inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x52000775)

917.554145ms ago: executing program 5 (id=1737):
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r0 = eventfd2(0x8, 0x0)
write$eventfd(r0, &(0x7f0000000140)=0xfffffffffffffffc, 0x8)
read(r0, &(0x7f0000000180)=""/78, 0xfffffeab)

916.390735ms ago: executing program 6 (id=1738):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

814.402294ms ago: executing program 2 (id=1729):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000100000118110010", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
pipe2$9p(&(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r3}, 0x10)
mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

638.081337ms ago: executing program 5 (id=1730):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f00000004c0), 0x1, 0x57b, &(0x7f0000000640)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a)
fallocate(r0, 0x20, 0x0, 0x8000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xf0)
r2 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000140)=<r3=>0x0)
sendmsg$AUDIT_SET(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, 0x3e9, 0x6708848364b4a78e, 0x70bd27, 0x25dfdbff, {0x61, 0x0, 0x2, r3, 0x6, 0x10000, 0x4, 0x9, 0x0, 0x1, 0x6}, ["", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x8804}, 0x44080804)
pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0)

637.853418ms ago: executing program 6 (id=1731):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x3c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0xffffffffffffffff}, 0x13)
r2 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r0, &(0x7f0000001840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x14, 0x67, 0x0, 0xb, 0x6c, 0x0, @rand_addr=0x64010120, @broadcast}}}, 0x22)

637.736738ms ago: executing program 2 (id=1732):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c9042, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x226140, 0x0)
close(r2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f0000002280)={'syzkaller0\x00', @random="2d311e000008"})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a0, &(0x7f00000000c0)='%d\xf1\xfa\xbc$j\xfef;q1\x95\xf4\xe4\x13\x95k#Jz.F\xce\xfb\x9c\x19\xf3v\x88\x91\xbct\xb0\x1bLq\x15\x00\xad\t\x13\xf5U\x02\xc9*6q\xc3\xa5\xcf\x01t\r%\xad-\x13\xb0 U\xaaC\xc388\x13\xc6H\x0f \x03\x9e\xa98\xa1\xc3\xe9\x06C\xd4\xb5\x18}4\xa9yA8\x1fQ\xdfN\x8e\xd7m\xee\xb8N\x98\xef\xff\xddR\xec~c\xcb\x93\x84\x7f\\x6\xedZ\x82\xa0\x1by\x17\x1a\xc8\x98\x99\x0f')

570.607403ms ago: executing program 5 (id=1736):
r0 = epoll_create1(0x80000)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xe000001a})
read$char_usb(r1, &(0x7f0000001980)=""/179, 0xb3)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000000))

536.869936ms ago: executing program 8 (id=1742):
ioctl$SIOCGETLINKNAME(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={0x0, 0x2})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = syz_io_uring_setup(0x3380, &(0x7f0000000180)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='5'], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_LINKAT={0x27, 0x15, 0x0, r3, 0x0, 0x0, r3, 0x1400, 0x1})
io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

492.261469ms ago: executing program 8 (id=1743):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', <r1=>0x0})
sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, 0x0, 0xb, 0x401, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_COMPAT_NAME={0x9, 0x1, '\xaa\xaa\xaa\xaa\xaa'}, @NFTA_COMPAT_NAME={0x6, 0x1, '[\x00'}, @NFTA_COMPAT_NAME={0xa, 0x1, 'kfree\x00'}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0x8, 0x1, 'wg0\x00'}, @NFTA_COMPAT_NAME={0xc, 0x1, 'ethtool\x00'}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x8000)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$packet(0x11, 0x3, 0x300)
bind$packet(r3, &(0x7f00000001c0)={0x11, 0xc, r1, 0x1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}}, 0x14)

491.944619ms ago: executing program 8 (id=1744):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0xf5, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000)

491.39991ms ago: executing program 6 (id=1745):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
socket$igmp6(0xa, 0x3, 0x2)
r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000080)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345})
io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0)

451.964843ms ago: executing program 8 (id=1746):
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4)
bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10)
listen(r0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4)
setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4)
bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10)

451.692253ms ago: executing program 5 (id=1747):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x10, '\x00', 0x0, 0x2}, 0x94)
r0 = syz_io_uring_setup(0x44cd, &(0x7f00000004c0)={0x0, 0x5331, 0x10100, 0x4, 0xfffefffe}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(r0, 0xc3f1, 0xce97, 0x0, 0x0, 0x0)

451.013123ms ago: executing program 2 (id=1748):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10)
sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1)
r1 = dup(r0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0xffffffffffffffa1, 0xfa00, {0x1, 0x0, 0x111, 0xa}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x13f, 0x2}}, 0x20)
setsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000040)=0x1, 0x4)
sendmmsg$inet6(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="ab", 0x1}], 0x1}}], 0x1, 0x1)

396.109967ms ago: executing program 8 (id=1750):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000c3d8000000"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60e}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
io_setup(0x8, &(0x7f0000000540)=<r2=>0x0)
r3 = eventfd2(0x9b5, 0x0)
io_submit(r2, 0x1, &(0x7f0000000100)=[&(0x7f0000002f00)={0x0, 0x0, 0x0, 0x7, 0x8, r3, 0x0, 0x0, 0x1, 0x0, 0x2, r3}])

395.891888ms ago: executing program 5 (id=1751):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffddc, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='hrtimer_start\x00', r1}, 0x18)
timer_create(0x0, 0x0, &(0x7f0000000000))
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000500)='hrtimer_start\x00', r2}, 0x10)
timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)

395.654008ms ago: executing program 7 (id=1752):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800)
sendmsg$nl_route_sched(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x24, 0x66, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0x0, 0xffff}, {0x0, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0)

386.682268ms ago: executing program 2 (id=1753):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r2, 0x0, 0x8000000000000}, 0x18)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f00000012c0)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x290)
close_range(r0, 0xffffffffffffffff, 0x0)

356.55427ms ago: executing program 5 (id=1754):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10)
perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={0x0, 0x8}, 0x4010, 0x0, 0x0, 0x0, 0x3, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x1ff, 0x1a1301)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)

324.253203ms ago: executing program 6 (id=1755):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000d50000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a0011"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000)
sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010)

323.960793ms ago: executing program 8 (id=1756):
r0 = syz_io_uring_setup(0x3e, &(0x7f0000000640)={0x0, 0xaddc, 0x10100, 0x1, 0x203}, &(0x7f0000000380)=<r1=>0x0, &(0x7f00000003c0)=<r2=>0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x80002101})
io_uring_enter(r0, 0xd81, 0x0, 0x0, 0x0, 0x0)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x6}, 0x0, 0x2, 0x800000, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
ioctl$TIOCMIWAIT(r5, 0x545c, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r4)

323.633333ms ago: executing program 7 (id=1757):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00"], 0x48}}, 0x80)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000016c0)=@newqdisc={0x8a8, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x87c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0xa4217ef7479fa47b}, @TCA_TBF_RATE64={0xc, 0x4, 0x45771ba7657ca705}, @TCA_TBF_PTAB={0x404, 0x3, [0x7, 0x9, 0xa4b, 0xff, 0x8000, 0x0, 0x4, 0x3, 0x6, 0x6, 0xffffffff, 0x8, 0x9, 0x4, 0x7, 0x2, 0x7, 0x7, 0x3, 0x7, 0xb0, 0xf51, 0x23, 0x1, 0x4cf8, 0x7f, 0xf, 0xdca7, 0x0, 0x80000001, 0x1ff, 0x1, 0x5, 0x80, 0x3ff, 0x9, 0x5, 0x2, 0x0, 0xfff, 0x1, 0x3, 0x9, 0xfffffffa, 0x80000001, 0x3, 0x9, 0x9, 0xe0a9, 0x1, 0x10, 0x8, 0x7, 0x80000001, 0x9, 0xf1, 0x8d, 0xce, 0x10000, 0xff9, 0x7, 0x6, 0x1ff, 0x8, 0x8001, 0x1, 0x688e64b9, 0x8, 0x4, 0x5, 0x7, 0x2, 0x0, 0x3, 0x10001, 0x6, 0x80000001, 0xc2d7, 0x5, 0x7f379f35, 0x7, 0x1, 0x3ff, 0x2, 0xffffffff, 0x3, 0x5, 0xb0, 0x3, 0x9b, 0xffff, 0x1, 0x0, 0x4, 0x5, 0x28, 0x3, 0x5, 0xfffffffb, 0x0, 0x69, 0x100, 0x101, 0xb, 0xee5a, 0x2, 0x8013, 0x7, 0xd45, 0x6, 0x3, 0x4, 0x2b0, 0xb0, 0x200, 0x7, 0x7fffffff, 0x7fff, 0xfffffff7, 0x8, 0xa20, 0xffff, 0x442, 0xfffffffb, 0x7, 0x0, 0x1000, 0x5c2, 0x6, 0x9b, 0x1000, 0x9638, 0x8, 0x81, 0x6, 0x6, 0x1, 0x401, 0x8, 0x5, 0x6, 0x7fff, 0x6, 0x4, 0x7f, 0x9, 0x4, 0x9, 0x1000, 0x0, 0x1e, 0x2, 0x6, 0x8, 0xec, 0xe135, 0x0, 0x200, 0x5, 0x6, 0x7, 0xffffdccf, 0x5, 0x3ff, 0x6, 0x2, 0x4, 0x2, 0x1000, 0x8, 0x4, 0x9, 0x101, 0x2, 0x3, 0x81, 0x8, 0x6, 0x80000001, 0x8, 0x200, 0x800, 0x4, 0x7fff, 0xa696000, 0x790803d5, 0x800, 0x2, 0x80000001, 0x80000001, 0x6, 0x7, 0xffff, 0x1, 0x8000, 0x96e0, 0x8, 0x7, 0x2, 0x0, 0x3, 0x6e, 0x9, 0xaa, 0xd9, 0x5, 0x1000, 0x7, 0x8, 0xfffffff7, 0x0, 0x0, 0x6, 0x3, 0x10001, 0xeabb, 0x2, 0xc7e, 0x1, 0x9, 0x6d, 0xfffffff9, 0x2, 0x0, 0x4, 0x1, 0x400, 0x800, 0x9, 0x1, 0x4, 0x24, 0xf, 0x100, 0x8, 0xc00000, 0x9, 0x6, 0x2, 0x9, 0x2, 0x3, 0x3, 0x7fff, 0x2, 0x800, 0x4, 0x7f, 0x3c, 0x4, 0x8, 0x4, 0x5, 0x5, 0x4, 0xffff9008]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x100, 0xe61c, 0x8, 0x5}, {0x4, 0x0, 0x1fc0, 0x6, 0x7d, 0x6}, 0x2, 0x7, 0x1823}}, @TCA_TBF_PARMS={0x28, 0x1, {{0x57, 0x2, 0x8000, 0x81, 0x1, 0xaa}, {0xb7, 0x2, 0x8, 0x8, 0x7, 0x6}, 0x9, 0x8, 0x9ac}}, @TCA_TBF_BURST={0x8, 0x6, 0x1}, @TCA_TBF_RTAB={0x404, 0x2, [0x5e6d, 0x5, 0x1c0000, 0x2, 0xa, 0x8, 0xe, 0x0, 0x0, 0xc, 0xb, 0x9, 0x5, 0x6, 0x5, 0x6, 0x1, 0x95e9, 0x8, 0x7f, 0x4, 0x2, 0x9, 0x5, 0x1, 0x7fffffff, 0x800, 0x0, 0x8, 0x800, 0x9, 0x2, 0x0, 0x2, 0x8, 0x7, 0x4, 0xb5, 0x8, 0xfff, 0x8, 0x8, 0x8eaf, 0x1, 0xffff, 0x4, 0x100, 0x5ea, 0xf3a, 0x0, 0x4, 0x9, 0x5, 0x8, 0x40, 0x7, 0x75, 0x6, 0x6, 0xfffffff9, 0x8, 0x2, 0x9d, 0x1ac, 0x1, 0x781, 0xaa4, 0x7, 0xffffff01, 0x6, 0x5, 0x0, 0x9, 0x9, 0x1, 0x0, 0x40, 0x101, 0xffffffff, 0x4, 0x0, 0x7, 0xa2f, 0x6, 0x5, 0x1, 0x71a, 0x1, 0x5, 0x70000, 0x2, 0x9, 0xab, 0x6, 0x9, 0x0, 0x5, 0x4, 0xa3b4, 0x400, 0x6, 0x96d, 0x1ff, 0x1, 0x8, 0x3, 0x69, 0xfff, 0x0, 0xb0, 0x0, 0x3, 0x80000001, 0x9, 0xa4, 0x8, 0x5, 0x7, 0x7fffffff, 0x5, 0x3, 0x7f, 0x10000, 0x259dd177, 0x23e, 0x59, 0x1, 0x9, 0x8, 0x7f, 0x7, 0x1, 0x3, 0x3, 0xfffffff9, 0x0, 0x1018, 0x7, 0x4, 0x5, 0x4, 0x6a5, 0x1, 0x8, 0x8000, 0x31b0, 0x4, 0x5, 0x8, 0x1ff, 0x5, 0x9, 0xe7fd, 0xaaac, 0x65, 0x178, 0x8, 0x2, 0x6, 0x9c3, 0x4, 0x8001, 0x8, 0x8, 0x0, 0x9bc, 0x3, 0xbf, 0xf1, 0x8, 0xfc000000, 0x5, 0x101, 0x1, 0x7fffffff, 0x0, 0x2866, 0x2, 0xffff, 0xa74, 0x10000, 0x9, 0x0, 0x0, 0x3, 0x100, 0x4, 0x5, 0x3ff, 0x82, 0x5, 0x8, 0x7fff, 0xec2, 0x10001, 0x8, 0xf, 0x4, 0x2, 0x18000000, 0x3, 0x10001, 0x9fc, 0x3, 0x4, 0x3, 0x0, 0x10, 0x7fffffff, 0x80000001, 0x0, 0x80000000, 0xc509, 0x7, 0x1, 0x7, 0x800, 0x2, 0x3, 0xffff, 0x6, 0x3ae, 0x7f, 0xfffffffa, 0x5, 0x7, 0x3, 0x4, 0xa1, 0x40, 0x1, 0x0, 0x6, 0x5, 0xf, 0x2b, 0x6, 0x2, 0x1000, 0x1, 0x1, 0x4, 0x7, 0x9, 0x9, 0xfffff9dd, 0xeef, 0xfb, 0x4, 0x2, 0xec8d, 0x10, 0x9, 0x3, 0x5, 0x2]}]}}]}, 0x8a8}}, 0x4000800)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x29, &(0x7f0000000240)={&(0x7f0000000300)=@delchain={0x24, 0x66, 0xf31, 0x70bd2d, 0x1000000, {0x0, 0x0, 0x0, r3, {0xe, 0xfff1}, {0x9, 0xffff}, {0xd, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0)

323.356143ms ago: executing program 2 (id=1758):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2082)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0})

252.101239ms ago: executing program 6 (id=1759):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10, &(0x7f0000000040)={[{@usrjquota}]}, 0x1, 0x3e7, &(0x7f0000000480)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x3)
write(r1, &(0x7f0000000740)="cc", 0x1)
sendfile(r1, r0, 0x0, 0x3ffff)
sendfile(r1, r0, 0x0, 0x7fffeffd)

251.868119ms ago: executing program 2 (id=1760):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000970000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_enter\x00', r1}, 0x10)
timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1)
mlockall(0x4)

251.623799ms ago: executing program 7 (id=1761):
close(0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0xffffffffffffffde, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000003c0)='mm_page_alloc\x00', r1}, 0x18)
r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x35, 0x1, 0x0, 0x0, 0x0, 0x7, 0x50010, 0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x2, 0x8, 0x2a, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0xb)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000002, 0x28011, r2, 0x0)

224.404221ms ago: executing program 7 (id=1762):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10)
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x4)
pipe(&(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
splice(r4, 0x0, r3, 0x0, 0x1000, 0x0)
splice(r1, 0x0, r5, 0x0, 0x80, 0x0)
write$binfmt_aout(r2, &(0x7f00000004c0)=ANY=[], 0x120)

102.956882ms ago: executing program 7 (id=1763):
r0 = creat(&(0x7f0000000600)='./file0\x00', 0xe5)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94)
write$qrtrtun(r0, &(0x7f0000001880)="9d8d645e53b6183d874f9e93a18dd009a09560ff682bd07dc3d28385a8f3f9e18418950d4dfe49f13a19e24320444a7d6c121741ba3dc510dba4f980bbd9a315544fa0a1622d949faba79788908354e467989e84b928ecb96e0e4e781bfca4c928c956321dd51400000000000020011584a8bd051f13bad882bea021ffb5ce918a1f87f1d439ec93772d6ecaaf8891f7678f2037ccced78ea5c1aa805f1b9f5a2c3974c5124cac5e163d9b6f5b998c1c7263fa2331d1241523986dccbd4e1f32b2f521380a2ea4732132264de6d26cfbb2eb91e40177a780df98cbf94b96d900a2dfc5c877db675ebb1d7cbc398ca422ddbadc24ee6f3bf036f62cdb056502a63d070000930ea668649ad0003afe9a912179ce61631b3dab94642d2768f1f22299dea6c08073dd0c47b9eddb917fc0076b74406149024514d07417c6007e8cd4dc4e2295be71f412044b52b1ce32aac048cad9c413a8c19528dc1b432fe7f9fda7182a47243af427a76ede78aa5c6ef75ea1f48e2e9e9d203d4760a1ff6a0119b39a2458a050f9519d4bbd821684ef8303985e8f5b8d86346f428788fc374e7eaa0c2a2ef8478a13b4a56d0821201c37a0066fb9f5cc583005b9f71b67daa300311066bacbf43630a8388aff734a568a123a48ba1344a5500e5c6f8cef539617cd3970ffb873579a3b76bd529f1626d1f90543b2a0190df38bb1e8b6fc9bfc5c42693814665679e78ed8adce4d23b8725436101ae4113fee000cb92b32c6a74851a6c4af4625f28810ec16834a1589063af1bf0b29aa57e06dddc0fddf408fab63c536d5afd9ba5a71f9e534f99e5ea9c1eaaaad710ef30a37df0f87978894333850f4feac3740a3b010da7c250d060c8046cab40d0527234d4b4b28366bc7d5899948ddbfac66c848ef0f842eab95248e9d064c0ec4247483f0aa0cad7ca970365e474fe73cf79cf8c70fc7a015caa273ce41723453632cf5b809584d227f7e98e8ec41494518b0b8a8adbaf5ead6529451b116fab06529b653bffdd6d98f8322265305bdc0ff69f4a70dea414fcc63d149c564c834f24b8f7495cd9ccafa1e3f652cd3270935800ee0d5598afcaa41c150dac263408d77a61b5c77e2c3644dda1b8c333a36c30ce893140ce133827dde34d896d35cfe7d498bf6dda965a27cc77e2872fcedaf9dcb89614c758cf62ad769ac05a4fb9e27b421b82c17d15f7d2ffb6ed63c639cee97d9eea8f3934045e60b15eca5c13ebe002467c09815712165cee2af784f9e5db9f7227701ca9a3de588503c84c490f4986aa26e7b63d4c5a30157cdf82e433a1b64496392a1990b2a46b910d9a16429736308f71d8e78824a26f25f21829546b973c0905b20c2ef751eb0064eaf831874f0b58ef8779cafd02bcf075a212e79e07c73c49fc240d6845877fda649d1ab59ea06b907ec5031299a0e1fa2f8cbc241a8531ad241302b569d4581dcc944f27799f25593b97ea7681ba74d6cde9c8f58840ac4c4be3aa90e6273a64e549c47c7232f423406604c9c210eabe3d6a2343bd6c2ae72ab013ce2af32467bcfa8cbf0769f91", 0x45c)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000800018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10)
r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000003c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x40)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={r4, 0x0, 0x0}, 0x10)

0s ago: executing program 7 (id=1764):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)=r1}, 0x20)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0)
ioctl$TCSBRKP(r2, 0x5425, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x6a, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
ioctl$TCSETSW2(r2, 0x5425, 0x0)

kernel console output (not intermixed with test programs):

t=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[   41.989509][   T29] audit: type=1400 audit(1753979617.199:376): avc:  denied  { write } for  pid=4979 comm="syz.5.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[   42.008666][   T29] audit: type=1400 audit(1753979617.209:377): avc:  denied  { ioctl } for  pid=4979 comm="syz.5.282" path="socket:[8726]" dev="sockfs" ino=8726 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[   42.032967][   T29] audit: type=1400 audit(1753979617.219:378): avc:  denied  { write } for  pid=4979 comm="syz.5.282" name="kcm" dev="proc" ino=4026533263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[   42.074818][ T4990] loop4: detected capacity change from 0 to 1024
[   42.097087][ T4990] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[   42.105294][ T4990] System zones: 0-1, 3-36
[   42.114754][ T4990] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   42.157516][ T5000] Illegal XDP return value 4294967274 on prog  (id 226) dev N/A, expect packet loss!
[   42.190225][ T5002] loop5: detected capacity change from 0 to 1024
[   42.206948][ T5002] EXT4-fs: Ignoring removed orlov option
[   42.213308][   T29] audit: type=1400 audit(1753979617.439:379): avc:  denied  { cpu } for  pid=5003 comm="syz.2.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[   42.247091][ T5002] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   42.260664][   T29] audit: type=1326 audit(1753979617.499:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4953 comm="syz.1.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6d1abeb69 code=0x7fc00000
[   42.410697][   T29] audit: type=1400 audit(1753979617.649:381): avc:  denied  { execute } for  pid=5005 comm="syz.3.291" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=8782 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[   42.488729][ T3919] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.546068][   T29] audit: type=1326 audit(1753979617.779:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5029 comm="syz.5.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3278beb69 code=0x7ffc0000
[   42.650270][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.909500][ T5066] loop5: detected capacity change from 0 to 1024
[   42.929390][ T5066] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[   42.954288][ T5069] netlink: 'syz.3.312': attribute type 13 has an invalid length.
[   42.964379][ T5066] System zones: 0-1, 3-36
[   42.974644][ T5066] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   43.036424][ T5075] loop1: detected capacity change from 0 to 512
[   43.049449][ T5069] bridge0: port 3(dummy0) entered disabled state
[   43.055846][ T5069] bridge0: port 2(bridge_slave_1) entered disabled state
[   43.063064][ T5069] bridge0: port 1(bridge_slave_0) entered disabled state
[   43.099744][ T5075] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   43.130683][ T5075] ext4 filesystem being mounted at /83/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   43.178522][ T5069] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   43.188851][ T5069] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   43.216380][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.261675][   T41] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   43.270740][   T41] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   43.295915][   T41] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   43.357836][   T41] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   43.360959][ T3919] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.367915][ T5104] syzkaller1: entered promiscuous mode
[   43.381156][ T5104] syzkaller1: entered allmulticast mode
[   43.581980][ T5165] loop3: detected capacity change from 0 to 2048
[   43.610023][ T5165] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   43.635460][ T5165] EXT4-fs (loop3): shut down requested (0)
[   43.680116][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.710932][ T5177] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5177 comm=syz.5.336
[   43.723391][ T5177] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5177 comm=syz.5.336
[   43.814102][ T5183] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5183 comm=syz.5.337
[   43.923670][ T5190] netlink: 96 bytes leftover after parsing attributes in process `syz.3.341'.
[   43.935430][ T5192] capability: warning: `syz.5.342' uses deprecated v2 capabilities in a way that may be insecure
[   43.969058][ T5194] loop3: detected capacity change from 0 to 512
[   43.976349][ T5194] EXT4-fs: Ignoring removed nomblk_io_submit option
[   43.993516][ T5194] EXT4-fs: inline encryption not supported
[   43.999488][ T5194] EXT4-fs: Ignoring removed bh option
[   44.006755][ T5194] EXT4-fs: Ignoring removed nomblk_io_submit option
[   44.014937][ T5194] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   44.024598][ T5194] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal
[   44.218487][ T5217] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5217 comm=syz.2.354
[   44.306536][ T5227] netlink: 8 bytes leftover after parsing attributes in process `syz.2.359'.
[   44.400837][ T5237] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   44.472604][ T5241] batadv_slave_1: entered promiscuous mode
[   44.483995][ T5241] batadv_slave_1: left promiscuous mode
[   44.712419][ T5263] loop3: detected capacity change from 0 to 1024
[   44.767521][ T5231] Set syz1 is full, maxelem 65536 reached
[   44.773945][ T5263] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[   44.792820][ T5263] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   44.804897][ T5270] pim6reg1: entered promiscuous mode
[   44.810244][ T5270] pim6reg1: entered allmulticast mode
[   44.859405][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[   45.038674][ T5289] loop1: detected capacity change from 0 to 512
[   45.046182][ T5291] netlink: 16 bytes leftover after parsing attributes in process `syz.2.386'.
[   45.056149][ T5289] EXT4-fs: Ignoring removed nomblk_io_submit option
[   45.071623][ T5289] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   45.084692][ T5289] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   45.098350][ T5297] netlink: 24 bytes leftover after parsing attributes in process `syz.2.389'.
[   45.114097][ T5289] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[   45.133680][ T5289] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   45.184556][ T5289] EXT4-fs (loop1): 1 truncate cleaned up
[   45.223556][ T5310] netlink: 96 bytes leftover after parsing attributes in process `syz.5.395'.
[   45.230977][ T5289] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   45.298276][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.310390][ T5321] netlink: 12 bytes leftover after parsing attributes in process `syz.3.401'.
[   45.431677][ T5338] loop5: detected capacity change from 0 to 1024
[   45.464573][ T5338] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[   45.489022][ T5338] System zones: 0-1, 3-36
[   45.524540][ T5338] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   45.576928][ T5264] syz.4.376 (5264) used greatest stack depth: 10296 bytes left
[   45.699822][ T5362] syz_tun: entered promiscuous mode
[   45.707090][ T5362] batadv_slave_0: entered promiscuous mode
[   45.726282][ T5362] hsr1: entered allmulticast mode
[   45.731395][ T5362] syz_tun: entered allmulticast mode
[   45.736765][ T5362] batadv_slave_0: entered allmulticast mode
[   45.926967][ T5378] loop1: detected capacity change from 0 to 512
[   45.942858][ T5378] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   46.009261][ T5378] EXT4-fs (loop1): 1 truncate cleaned up
[   46.046400][ T5378] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   46.069689][ T5385] loop4: detected capacity change from 0 to 512
[   46.076560][ T5385] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   46.104308][ T5385] EXT4-fs (loop4): 1 orphan inode deleted
[   46.107613][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.110138][ T5385] EXT4-fs (loop4): 1 truncate cleaned up
[   46.115726][ T5385] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   46.121442][ T3919] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.170791][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.302808][ T5408] netlink: 4 bytes leftover after parsing attributes in process `syz.3.438'.
[   46.567631][ T5454] netlink: 8 bytes leftover after parsing attributes in process `syz.1.448'.
[   46.646313][ T5454] syz.1.448 (5454) used greatest stack depth: 10176 bytes left
[   46.741506][   T29] kauditd_printk_skb: 139 callbacks suppressed
[   46.741522][   T29] audit: type=1400 audit(1753979621.979:522): avc:  denied  { relabelfrom } for  pid=5475 comm="syz.5.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[   46.787345][   T29] audit: type=1400 audit(1753979621.979:523): avc:  denied  { relabelto } for  pid=5475 comm="syz.5.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[   46.887959][   T29] audit: type=1400 audit(1753979622.119:524): avc:  denied  { compute_member } for  pid=5491 comm="syz.3.457" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[   46.924763][ T5494] loop5: detected capacity change from 0 to 1024
[   46.949618][ T5498] SELinux: failed to load policy
[   46.958092][   T29] audit: type=1400 audit(1753979622.189:525): avc:  denied  { load_policy } for  pid=5497 comm="syz.3.460" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[   46.981885][ T5494] EXT4-fs: Ignoring removed orlov option
[   47.019528][ T5494] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   47.032172][ T5502] netlink: 4 bytes leftover after parsing attributes in process `syz.2.461'.
[   47.065857][ T5508] wg2: entered promiscuous mode
[   47.070751][ T5508] wg2: entered allmulticast mode
[   47.091323][ T3919] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.200662][ T5525] netlink: 'syz.2.466': attribute type 3 has an invalid length.
[   47.218737][ T5525] netlink: 'syz.2.466': attribute type 3 has an invalid length.
[   47.274692][ T5535] netlink: 24 bytes leftover after parsing attributes in process `syz.1.470'.
[   47.316212][   T29] audit: type=1400 audit(1753979622.549:526): avc:  denied  { write } for  pid=5528 comm="syz.3.468" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   47.318596][ T5541] hub 9-0:1.0: USB hub found
[   47.370205][ T5535] netlink: 'syz.1.470': attribute type 2 has an invalid length.
[   47.399864][ T5541] hub 9-0:1.0: 8 ports detected
[   47.493181][ T5561] loop4: detected capacity change from 0 to 512
[   47.531365][ T5561] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   47.566508][ T5561] EXT4-fs (loop4): 1 truncate cleaned up
[   47.578472][ T5561] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   47.624284][   T29] audit: type=1400 audit(1753979622.859:527): avc:  denied  { create } for  pid=5559 comm="syz.4.476" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1
[   47.728441][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.810834][   T29] audit: type=1400 audit(1753979623.049:528): avc:  denied  { write } for  pid=5595 comm="syz.4.485" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[   47.868212][   T29] audit: type=1326 audit(1753979623.079:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5600 comm="syz.3.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa51926eb69 code=0x7ffc0000
[   47.891485][   T29] audit: type=1326 audit(1753979623.079:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5600 comm="syz.3.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fa51926eb69 code=0x7ffc0000
[   47.902191][ T5604] syz.1.484 (5604) used greatest stack depth: 9856 bytes left
[   47.914732][   T29] audit: type=1326 audit(1753979623.079:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5600 comm="syz.3.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa51926eb69 code=0x7ffc0000
[   47.985476][ T5610] loop3: detected capacity change from 0 to 2048
[   48.008458][ T5610] EXT4-fs: Ignoring removed nobh option
[   48.039487][ T5610] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   48.114459][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.263417][ T5663] netlink: 'syz.3.500': attribute type 1 has an invalid length.
[   48.294873][ T5663] 8021q: adding VLAN 0 to HW filter on device bond1
[   48.338967][ T5663] bond1: (slave veth3): Enslaving as an active interface with a down link
[   48.353916][ T5663] dummy0: left allmulticast mode
[   48.359098][ T5663] dummy0: left promiscuous mode
[   48.364016][ T5663] bridge0: port 3(dummy0) entered disabled state
[   48.373254][ T5663] bond1: (slave dummy0): making interface the new active one
[   48.390317][ T5663] dummy0: entered promiscuous mode
[   48.395745][ T5663] bond1: (slave dummy0): Enslaving as an active interface with an up link
[   48.412940][ T5679] loop2: detected capacity change from 0 to 1024
[   48.460209][ T5679] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   48.492682][ T5679] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.507: Allocating blocks 497-513 which overlap fs metadata
[   48.519022][ T5678] EXT4-fs (loop2): pa ffff888106e02150: logic 64, phys. 193, len 20
[   48.527134][ T5678] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1
[   48.537396][ T5688] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2051 sclass=netlink_route_socket pid=5688 comm=syz.5.509
[   48.553879][ T5690] tipc: Started in network mode
[   48.558862][ T5690] tipc: Node identity ac14140f, cluster identity 4711
[   48.565711][ T5690] tipc: New replicast peer: 255.255.255.255
[   48.571728][ T5690] tipc: Enabled bearer <udp:syz2>, priority 10
[   48.595070][ T3717] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.765162][ T5712] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4)
[   48.771676][ T5712] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   48.779219][ T5712] vhci_hcd vhci_hcd.0: Device attached
[   48.786437][ T5713] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 0
[   48.794251][ T5133] vhci_hcd: stop threads
[   48.798535][ T5133] vhci_hcd: release socket
[   48.802939][ T5133] vhci_hcd: disconnect device
[   48.976958][ T5737] __nla_validate_parse: 1 callbacks suppressed
[   48.976970][ T5737] netlink: 24 bytes leftover after parsing attributes in process `syz.4.531'.
[   49.283567][ T5748] syzkaller0: entered promiscuous mode
[   49.289236][ T5748] syzkaller0: entered allmulticast mode
[   49.305274][ T5748] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487
[   49.317624][ T5751] capability: warning: `syz.4.534' uses 32-bit capabilities (legacy support in use)
[   49.360283][ T5755] syzkaller0: entered promiscuous mode
[   49.365741][ T5755] syzkaller0: entered allmulticast mode
[   49.568061][ T3406] tipc: Node number set to 2886997007
[   49.589050][ T5782] tipc: Started in network mode
[   49.593930][ T5782] tipc: Node identity ac14140f, cluster identity 4711
[   49.609481][ T5782] tipc: New replicast peer: 255.255.255.255
[   49.615480][ T5782] tipc: Enabled bearer <udp:syz2>, priority 10
[   49.788997][ T5794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   49.799520][ T5794] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   49.831797][ T5794] 9pnet: p9_errstr2errno: server reported unknown error �@00000000000000000000010
[   50.469646][ T5887] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2051 sclass=netlink_route_socket pid=5887 comm=syz.1.577
[   50.536144][ T5890] syzkaller0: entered promiscuous mode
[   50.541649][ T5890] syzkaller0: entered allmulticast mode
[   50.615130][ T5892] loop5: detected capacity change from 0 to 512
[   50.622345][ T5892] journal_path: Non-blockdev passed as './bus'
[   50.628551][ T5892] EXT4-fs: error: could not find journal device path
[   50.651920][ T5894] bond0: (slave dummy0): Releasing backup interface
[   50.661780][ T5894] batman_adv: batadv0: Adding interface: dummy0
[   50.668053][ T5894] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   50.693350][ T5894] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[   50.728078][ T3406] tipc: Node number set to 2886997007
[   50.784668][ T5907] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge0, syncid = 33554432, id = 0
[   50.863587][ T5911] serio: Serial port ptm0
[   50.891563][ T5913] netlink: 51 bytes leftover after parsing attributes in process `syz.2.592'.
[   51.732767][ T5935] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge0, syncid = 33554432, id = 0
[   51.814102][ T5938] 
: renamed from bond0
[   51.827432][ T5947] vlan2: entered allmulticast mode
[   51.907318][ T5954] loop2: detected capacity change from 0 to 512
[   51.921104][ T5954] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   51.978308][ T5954] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   51.990891][ T5954] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   52.007104][ T5965] serio: Serial port ptm0
[   52.014497][ T5954] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[   52.041866][ T3717] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.078363][ T5969] loop1: detected capacity change from 0 to 128
[   52.103868][ T5971] loop5: detected capacity change from 0 to 512
[   52.131314][ T5971] EXT4-fs (loop5): orphan cleanup on readonly fs
[   52.149687][ T5971] __quota_error: 69 callbacks suppressed
[   52.149701][ T5971] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0
[   52.165802][ T5971] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0
[   52.175200][ T5971] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.612: Failed to acquire dquot type 1
[   52.186995][ T5971] EXT4-fs (loop5): 1 truncate cleaned up
[   52.193634][ T5971] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   52.219064][ T5971] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended
[   52.244598][ T5971] EXT4-fs warning (device loop5): read_mmp_block:115: Error -117 while reading MMP block 8
[   52.276670][ T3919] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.315805][  T290] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   52.371735][ T5986] batman_adv: batadv0: Interface activated: dummy0
[   52.378337][ T5986] batadv0: mtu less than device minimum
[   52.384219][ T5986] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   52.394910][ T5986] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   52.405585][ T5986] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   52.416307][ T5986] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   52.426924][ T5986] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   52.437613][ T5986] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   52.448428][ T5986] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   52.458979][ T5986] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   52.469611][ T5986] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   52.491370][  T290] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   52.541589][  T290] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   52.559455][ T6001] loop5: detected capacity change from 0 to 512
[   52.567615][ T6001] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   52.582634][ T6001] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   52.595521][ T6001] ext4 filesystem being mounted at /112/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   52.610730][ T6001] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[   52.627612][ T5989] chnl_net:caif_netlink_parms(): no params data found
[   52.637387][ T3919] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.654894][  T290] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   52.684398][ T5989] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.691554][ T5989] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.698972][ T5989] bridge_slave_0: entered allmulticast mode
[   52.705406][ T5989] bridge_slave_0: entered promiscuous mode
[   52.712365][ T5989] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.719491][ T5989] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.726802][ T5989] bridge_slave_1: entered allmulticast mode
[   52.734267][ T5989] bridge_slave_1: entered promiscuous mode
[   52.765486][ T5989] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   52.787913][  T290] bridge_slave_1: left allmulticast mode
[   52.793647][  T290] bridge_slave_1: left promiscuous mode
[   52.799339][  T290] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.806988][  T290] bridge_slave_0: left allmulticast mode
[   52.812682][  T290] bridge_slave_0: left promiscuous mode
[   52.818444][  T290] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.990257][  T290] 
 (unregistering): (slave bond_slave_0): Releasing backup interface
[   53.000026][  T290] 
 (unregistering): (slave bond_slave_1): Releasing backup interface
[   53.009609][  T290] 
 (unregistering): (slave dummy0): Releasing backup interface
[   53.018259][  T290] 
 (unregistering): Released all slaves
[   53.026217][ T5989] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   53.069785][ T5989] team0: Port device team_slave_0 added
[   53.083879][  T290] hsr_slave_0: left promiscuous mode
[   53.093558][  T290] hsr_slave_1: left promiscuous mode
[   53.109894][  T290] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   53.117281][  T290] batman_adv: batadv0: Removing interface: batadv_slave_0
[   53.141826][  T290] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   53.149341][  T290] batman_adv: batadv0: Removing interface: batadv_slave_1
[   53.184102][  T290] veth1_macvtap: left promiscuous mode
[   53.190433][  T290] veth0_macvtap: left promiscuous mode
[   53.196001][  T290] veth1_vlan: left promiscuous mode
[   53.201650][  T290] veth0_vlan: left promiscuous mode
[   53.306489][  T290] team0 (unregistering): Port device team_slave_1 removed
[   53.317083][  T290] team0 (unregistering): Port device team_slave_0 removed
[   53.356338][ T5989] team0: Port device team_slave_1 added
[   53.432061][ T5989] batman_adv: batadv0: Adding interface: batadv_slave_0
[   53.439064][ T5989] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.465149][ T5989] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   53.486419][   T29] audit: type=1326 audit(1753979628.719:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6051 comm="syz.2.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff783c0eb69 code=0x7ffc0000
[   53.509992][   T29] audit: type=1326 audit(1753979628.719:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6051 comm="syz.2.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff783c0eb69 code=0x7ffc0000
[   53.516857][ T5989] batman_adv: batadv0: Adding interface: batadv_slave_1
[   53.540204][ T5989] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.566321][ T5989] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   53.606032][   T29] audit: type=1326 audit(1753979628.719:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6051 comm="syz.2.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff783c0eb69 code=0x7ffc0000
[   53.629382][   T29] audit: type=1326 audit(1753979628.779:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6051 comm="syz.2.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff783c0eb69 code=0x7ffc0000
[   53.652618][   T29] audit: type=1326 audit(1753979628.779:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6051 comm="syz.2.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff783c0eb69 code=0x7ffc0000
[   53.677630][   T29] audit: type=1326 audit(1753979628.909:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6051 comm="syz.2.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7ff783c0eb69 code=0x7ffc0000
[   53.700850][   T29] audit: type=1326 audit(1753979628.909:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6051 comm="syz.2.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff783c0eb69 code=0x7ffc0000
[   53.724104][   T29] audit: type=1326 audit(1753979628.909:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6051 comm="syz.2.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff783c0eb69 code=0x7ffc0000
[   53.757940][ T5989] hsr_slave_0: entered promiscuous mode
[   53.765824][ T5989] hsr_slave_1: entered promiscuous mode
[   53.782044][ T5989] debugfs: 'hsr0' already exists in 'hsr'
[   53.787797][ T5989] Cannot create hsr debugfs directory
[   53.880991][ T6076] loop4: detected capacity change from 0 to 128
[   53.925025][  T290] ------------[ cut here ]------------
[   53.930753][  T290] WARNING: CPU: 1 PID: 290 at net/xfrm/xfrm_state.c:3303 xfrm_state_fini+0x17c/0x1f0
[   53.940597][  T290] Modules linked in:
[   53.944488][  T290] CPU: 1 UID: 0 PID: 290 Comm: kworker/u8:5 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(voluntary) 
[   53.956858][  T290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   53.967381][  T290] Workqueue: netns cleanup_net
[   53.972172][  T290] RIP: 0010:xfrm_state_fini+0x17c/0x1f0
[   53.978072][  T290] Code: 48 8d bb 30 0e 00 00 e8 72 45 bf fc 48 8b bb 30 0e 00 00 e8 56 ae cb fc 5b 41 5e 41 5f 5d c3 cc cc cc cc cc e8 35 a4 a4 fc 90 <0f> 0b 90 e9 d9 fe ff ff e8 27 a4 a4 fc 90 0f 0b 90 4c 89 f7 e8 3b
[   53.997744][  T290] RSP: 0018:ffffc9000113bc60 EFLAGS: 00010293
[   54.003927][  T290] RAX: ffffffff84b333fb RBX: ffff88810c0b4740 RCX: ffff888102334200
[   54.012086][  T290] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88810c0b5540
[   54.020378][  T290] RBP: ffffffff86c7dfe0 R08: 0001ffff86847f7f R09: 0000000000000000
[   54.028375][  T290] R10: ffffc9000113bbe8 R11: 0001c9000113bbe8 R12: ffffffff86c7e000
[   54.036337][  T290] R13: ffff88810c0b4768 R14: ffff88810c0b5540 R15: ffff88810c0b4740
[   54.044334][  T290] FS:  0000000000000000(0000) GS:ffff8882aef62000(0000) knlGS:0000000000000000
[   54.053370][  T290] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   54.059957][  T290] CR2: 00007f808466e368 CR3: 000000011b550000 CR4: 00000000003506f0
[   54.067919][  T290] Call Trace:
[   54.071209][  T290]  <TASK>
[   54.074145][  T290]  xfrm_net_exit+0x2d/0x60
[   54.078709][  T290]  ops_undo_list+0x278/0x410
[   54.083305][  T290]  cleanup_net+0x2de/0x4d0
[   54.087768][  T290]  process_scheduled_works+0x4cb/0x9d0
[   54.093323][  T290]  worker_thread+0x582/0x770
[   54.098017][  T290]  ? _raw_spin_unlock_irqrestore+0x2b/0x60
[   54.103823][  T290]  kthread+0x486/0x510
[   54.107883][  T290]  ? __pfx_worker_thread+0x10/0x10
[   54.113026][  T290]  ? __pfx_kthread+0x10/0x10
[   54.117673][  T290]  ret_from_fork+0xdd/0x150
[   54.122208][  T290]  ? __pfx_kthread+0x10/0x10
[   54.126797][  T290]  ret_from_fork_asm+0x1a/0x30
[   54.131602][  T290]  </TASK>
[   54.134612][  T290] ---[ end trace 0000000000000000 ]---
[   54.196354][ T6080] syz_tun (unregistering): left promiscuous mode
[   54.257448][ T6091] loop2: detected capacity change from 0 to 128
[   54.272213][ T6091] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   54.303711][ T5989] netdevsim netdevsim6 netdevsim0: renamed from eth0
[   54.308241][ T6091] ext4 filesystem being mounted at /124/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   54.349555][ T5989] netdevsim netdevsim6 netdevsim1: renamed from eth1
[   54.359747][ T5989] netdevsim netdevsim6 netdevsim2: renamed from eth2
[   54.368545][ T5989] netdevsim netdevsim6 netdevsim3: renamed from eth3
[   54.388096][ T6091] loop2: detected capacity change from 128 to 64
[   54.396625][ T6091] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6250: Out of memory
[   54.409637][ T5989] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.422553][ T5989] 8021q: adding VLAN 0 to HW filter on device team0
[   54.431849][ T6091] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6250: Out of memory
[   54.441715][ T6091] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #13: comm syz.2.647: mark_inode_dirty error
[   54.453102][ T6091] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -12)
[   54.466051][ T5148] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   54.476356][ T5148] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   54.507515][ T3717] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6250: Out of memory
[   54.526852][  T290] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.533934][  T290] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.542515][ T3717] EXT4-fs error (device loop2): ext4_dirty_inode:6454: inode #2: comm syz-executor: mark_inode_dirty error
[   54.551887][  T290] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.561093][  T290] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.589797][ T5148] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   54.600130][ T5148] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   54.646339][ T5989] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   54.671233][ T5148] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   54.681604][ T5148] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   54.758481][ T5148] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   54.768861][ T5148] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   54.793879][ T6138] loop3: detected capacity change from 0 to 512
[   54.812205][ T5989] 8021q: adding VLAN 0 to HW filter on device batadv0
[   54.841748][ T6138] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   54.860108][ T3717] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   54.869332][ T6138] ext4 filesystem being mounted at /132/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   54.946261][ T5148] bridge_slave_1: left allmulticast mode
[   54.952134][ T5148] bridge_slave_1: left promiscuous mode
[   54.957837][ T5148] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.970663][ T3303] EXT4-fs error (device loop3): ext4_empty_dir:3075: inode #12: comm syz-executor: invalid size
[   54.982545][ T3303] EXT4-fs (loop3): Remounting filesystem read-only
[   54.989522][ T5148] bridge_slave_0: left promiscuous mode
[   54.995149][ T5148] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.004132][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.013238][ T5151] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   55.024008][ T5151] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   55.052851][ T6165] loop3: detected capacity change from 0 to 128
[   55.129859][ T5148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   55.139909][ T5148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   55.149722][ T5148] bond0 (unregistering): (slave dummy0): Releasing backup interface
[   55.158802][ T5148] bond0 (unregistering): Released all slaves
[   55.166949][ T6116] chnl_net:caif_netlink_parms(): no params data found
[   55.216835][ T5148] IPVS: stopping master sync thread 5935 ...
[   55.230230][ T5148] batadv_slave_0: left promiscuous mode
[   55.237777][ T5148] hsr_slave_0: left promiscuous mode
[   55.244057][ T5148] hsr_slave_1: left promiscuous mode
[   55.249903][ T5148] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   55.257279][ T5148] batman_adv: batadv0: Removing interface: batadv_slave_0
[   55.283811][ T5148] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   55.291300][ T5148] batman_adv: batadv0: Removing interface: batadv_slave_1
[   55.310165][ T5148] veth1_macvtap: left promiscuous mode
[   55.315703][ T5148] veth0_macvtap: left promiscuous mode
[   55.323066][ T5148] veth1_vlan: left promiscuous mode
[   55.328382][ T5148] veth0_vlan: left promiscuous mode
[   55.399701][ T5148] team0 (unregistering): Port device team_slave_1 removed
[   55.409136][ T5148] team0 (unregistering): Port device team_slave_0 removed
[   55.439224][ T6116] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.446285][ T6116] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.453426][ T6116] bridge_slave_0: entered allmulticast mode
[   55.460863][ T6116] bridge_slave_0: entered promiscuous mode
[   55.467797][ T6116] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.474879][ T6116] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.482256][ T6116] bridge_slave_1: entered allmulticast mode
[   55.488626][ T6116] bridge_slave_1: entered promiscuous mode
[   55.551082][ T6116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.574405][ T5989] veth0_vlan: entered promiscuous mode
[   55.590152][ T6116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.607391][ T5989] veth1_vlan: entered promiscuous mode
[   55.656174][ T6116] team0: Port device team_slave_0 added
[   55.662864][ T6116] team0: Port device team_slave_1 added
[   55.694991][ T6116] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.701998][ T6116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.727940][ T6116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.745763][ T5989] veth0_macvtap: entered promiscuous mode
[   55.754860][ T6116] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.761829][ T6116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.787802][ T6116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.805789][ T6159] chnl_net:caif_netlink_parms(): no params data found
[   55.817429][ T5989] veth1_macvtap: entered promiscuous mode
[   55.865887][ T6116] hsr_slave_0: entered promiscuous mode
[   55.871842][ T6116] hsr_slave_1: entered promiscuous mode
[   55.915672][ T6159] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.922786][ T6159] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.930015][ T6159] bridge_slave_0: entered allmulticast mode
[   55.936358][ T6159] bridge_slave_0: entered promiscuous mode
[   55.943463][ T6184] chnl_net:caif_netlink_parms(): no params data found
[   55.956233][ T5989] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.965300][ T5989] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.973167][ T6159] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.980305][ T6159] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.987503][ T6159] bridge_slave_1: entered allmulticast mode
[   55.993950][ T6159] bridge_slave_1: entered promiscuous mode
[   56.037694][ T5131] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.048419][ T5131] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.058740][ T6159] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.076293][ T5131] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.097031][ T6159] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.111132][ T5131] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.241875][ T6159] team0: Port device team_slave_0 added
[   56.276438][ T6184] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.283559][ T6184] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.293965][ T6184] bridge_slave_0: entered allmulticast mode
[   56.301185][ T6184] bridge_slave_0: entered promiscuous mode
[   56.308647][ T6159] team0: Port device team_slave_1 added
[   56.333223][ T6184] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.340318][ T6184] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.353651][ T6184] bridge_slave_1: entered allmulticast mode
[   56.366848][ T6184] bridge_slave_1: entered promiscuous mode
[   56.380636][ T6159] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.387567][ T6159] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.413569][ T6159] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.434336][ T6159] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.441310][ T6159] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.467301][ T6159] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.554587][ T6184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.564489][ T6116] netdevsim netdevsim7 netdevsim0: renamed from eth0
[   56.580379][ T5148] bridge_slave_1: left allmulticast mode
[   56.586061][ T5148] bridge_slave_1: left promiscuous mode
[   56.591796][ T5148] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.619005][ T5148] bridge_slave_0: left allmulticast mode
[   56.624658][ T5148] bridge_slave_0: left promiscuous mode
[   56.630345][ T5148] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.730000][ T5148] 
 (unregistering): (slave bond_slave_0): Releasing backup interface
[   56.738948][ T5148] 
 (unregistering): (slave bond_slave_1): Releasing backup interface
[   56.747550][ T5148] 
 (unregistering): Released all slaves
[   56.755694][ T5148] bond1 (unregistering): (slave veth3): Releasing active interface
[   56.764365][ T5148] bond1 (unregistering): (slave dummy0): Releasing active interface
[   56.773360][ T5148] bond1 (unregistering): Released all slaves
[   56.781462][ T6116] netdevsim netdevsim7 netdevsim1: renamed from eth1
[   56.790878][ T6184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.817846][ T6116] netdevsim netdevsim7 netdevsim2: renamed from eth2
[   56.826446][ T6116] netdevsim netdevsim7 netdevsim3: renamed from eth3
[   56.841935][ T5148] tipc: Disabling bearer <udp:syz2>
[   56.847193][ T5148] tipc: Left network mode
[   56.852766][ T5148] IPVS: stopping master sync thread 3543 ...
[   56.861024][ T6159] hsr_slave_0: entered promiscuous mode
[   56.867004][ T6159] hsr_slave_1: entered promiscuous mode
[   56.872997][ T6159] debugfs: 'hsr0' already exists in 'hsr'
[   56.878735][ T6159] Cannot create hsr debugfs directory
[   56.891042][ T6184] team0: Port device team_slave_0 added
[   56.897613][ T6184] team0: Port device team_slave_1 added
[   56.909419][ T5148] hsr_slave_0: left promiscuous mode
[   56.918007][ T5148] hsr_slave_1: left promiscuous mode
[   56.923548][ T5148] batman_adv: batadv0: Removing interface: batadv_slave_0
[   56.931119][ T5148] batman_adv: batadv0: Removing interface: batadv_slave_1
[   56.962048][ T5148] team0 (unregistering): Port device team_slave_1 removed
[   56.972899][ T5148] team0 (unregistering): Port device team_slave_0 removed
[   57.022681][ T6184] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.029703][ T6184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.055747][ T6184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.076199][ T6184] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.083180][ T6184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.109113][ T6184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.211401][ T6184] hsr_slave_0: entered promiscuous mode
[   57.217460][ T6184] hsr_slave_1: entered promiscuous mode
[   57.223916][ T6184] debugfs: 'hsr0' already exists in 'hsr'
[   57.229694][ T6184] Cannot create hsr debugfs directory
[   57.242116][ T6116] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.294579][ T6314] loop6: detected capacity change from 0 to 512
[   57.317231][ T6116] 8021q: adding VLAN 0 to HW filter on device team0
[   57.331654][ T6314] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   57.356922][ T6116] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   57.367376][ T6116] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   57.381333][ T6314] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   57.411550][ T5151] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.418707][ T5151] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.428723][ T5151] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.435782][ T5151] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.447125][ T5989] EXT4-fs error (device loop6): ext4_empty_dir:3075: inode #12: comm syz-executor: invalid size
[   57.465245][ T5989] EXT4-fs (loop6): Remounting filesystem read-only
[   57.473418][ T5989] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   57.484544][ T5133] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   57.495166][ T5133] __quota_error: 4 callbacks suppressed
[   57.495177][ T5133] Quota error (device loop6): write_blk: dquota write failed
[   57.508156][ T5133] Quota error (device loop6): free_dqentry: Can't write quota data block 5
[   57.517242][ T5133] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   57.527781][ T5133] Quota error (device loop6): write_blk: dquota write failed
[   57.535226][ T5133] Quota error (device loop6): free_dqentry: Can't write quota data block 5
[   57.544645][ T6159] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   57.603788][ T6159] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   57.626255][ T6116] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.679747][ T6159] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   57.771499][ T6159] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   57.870416][ T6159] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   57.908387][ T6159] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   57.931229][ T6159] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   57.952427][ T6159] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   57.961552][ T6184] netdevsim netdevsim8 netdevsim0: renamed from eth0
[   57.970453][ T6116] veth0_vlan: entered promiscuous mode
[   58.000466][ T6386] loop5: detected capacity change from 0 to 512
[   58.010139][ T6184] netdevsim netdevsim8 netdevsim1: renamed from eth1
[   58.019206][ T6184] netdevsim netdevsim8 netdevsim2: renamed from eth2
[   58.020600][ T6386] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   58.031704][ T6116] veth1_vlan: entered promiscuous mode
[   58.038736][ T6386] ext4 filesystem being mounted at /130/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   58.045870][ T6184] netdevsim netdevsim8 netdevsim3: renamed from eth3
[   58.106684][ T6116] veth0_macvtap: entered promiscuous mode
[   58.116867][ T6116] veth1_macvtap: entered promiscuous mode
[   58.153757][ T3919] EXT4-fs error (device loop5): ext4_empty_dir:3075: inode #12: comm syz-executor: invalid size
[   58.171731][ T6159] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.179204][ T3919] EXT4-fs (loop5): Remounting filesystem read-only
[   58.193698][ T6116] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.204757][ T6159] 8021q: adding VLAN 0 to HW filter on device team0
[   58.218723][ T5106] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   58.229396][ T5106] Quota error (device loop5): write_blk: dquota write failed
[   58.236758][ T5106] Quota error (device loop5): free_dqentry: Can't write quota data block 5
[   58.246315][ T5106] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   58.256906][ T5106] Quota error (device loop5): write_blk: dquota write failed
[   58.264525][ T5106] Quota error (device loop5): free_dqentry: Can't write quota data block 5
[   58.275234][ T6116] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.288577][ T5091] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.295688][ T5091] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.305680][ T5091] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.312783][ T5091] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.328536][ T6184] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.338326][  T290] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.360864][ T6184] 8021q: adding VLAN 0 to HW filter on device team0
[   58.371738][  T290] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.401625][ T5148] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.408745][ T5148] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.438454][  T290] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.452026][ T5148] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.459118][ T5148] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.483644][ T6159] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   58.498075][  T290] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.596004][ T6184] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.656322][ T6159] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.835260][ T6476] syzkaller0: entered promiscuous mode
[   58.840891][ T6476] syzkaller0: entered allmulticast mode
[   58.890558][ T6159] veth0_vlan: entered promiscuous mode
[   58.901113][ T6184] veth0_vlan: entered promiscuous mode
[   58.912414][ T6184] veth1_vlan: entered promiscuous mode
[   58.922979][ T6159] veth1_vlan: entered promiscuous mode
[   58.963694][ T6184] veth0_macvtap: entered promiscuous mode
[   58.982025][ T6184] veth1_macvtap: entered promiscuous mode
[   58.996872][ T6159] veth0_macvtap: entered promiscuous mode
[   59.000521][ T6499] netlink: 12 bytes leftover after parsing attributes in process `syz.6.704'.
[   59.009814][ T6184] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.023973][ T6495] netlink: 8 bytes leftover after parsing attributes in process `syz.5.703'.
[   59.028384][   T29] audit: type=1326 audit(1753979634.259:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6493 comm="syz.5.703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3278beb69 code=0x7ffc0000
[   59.056158][   T29] audit: type=1326 audit(1753979634.259:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6493 comm="syz.5.703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3278beb69 code=0x7ffc0000
[   59.084184][ T6495] netlink: 8 bytes leftover after parsing attributes in process `syz.5.703'.
[   59.100656][ T6495] netlink: 8 bytes leftover after parsing attributes in process `syz.5.703'.
[   59.119837][ T6184] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.127115][ T6495] netlink: 8 bytes leftover after parsing attributes in process `syz.5.703'.
[   59.144387][ T6159] veth1_macvtap: entered promiscuous mode
[   59.160018][  T290] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.169639][  T290] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.183608][  T290] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.199288][ T6159] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.207113][  T290] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.221994][ T6159] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.240835][ T5148] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.267004][ T5148] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.299668][ T5148] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.335557][ T5148] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.556830][ T6549] netlink: 4 bytes leftover after parsing attributes in process `syz.2.711'.
[   59.613629][ T6549] vxlan0: entered promiscuous mode
[   59.662795][ T5151] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   59.676638][ T5151] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   59.712494][ T5151] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   59.791243][ T5151] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   59.964029][ T6584] loop7: detected capacity change from 0 to 1024
[   60.024063][ T6584] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4113: comm syz.7.721: Allocating blocks 449-513 which overlap fs metadata
[   60.076448][ T6583] EXT4-fs (loop7): pa ffff888106e921c0: logic 48, phys. 177, len 21
[   60.084538][ T6583] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4
[   60.690436][ T6674] syzkaller0: entered promiscuous mode
[   60.695929][ T6674] syzkaller0: entered allmulticast mode
[   62.205179][ T6829] rdma_op ffff88811ffd1580 conn xmit_rdma 0000000000000000
[   62.301959][ T6844] netlink: 8 bytes leftover after parsing attributes in process `syz.6.757'.
[   62.345614][ T6844] netlink: 8 bytes leftover after parsing attributes in process `syz.6.757'.
[   62.372814][ T6844] netlink: 8 bytes leftover after parsing attributes in process `syz.6.757'.
[   62.402613][ T6844] netlink: 8 bytes leftover after parsing attributes in process `syz.6.757'.
[   62.463946][ T6866] loop2: detected capacity change from 0 to 1024
[   62.509164][ T6866] EXT4-fs: Ignoring removed orlov option
[   62.710233][   T29] kauditd_printk_skb: 30 callbacks suppressed
[   62.710304][   T29] audit: type=1326 audit(1753979637.949:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6905 comm="syz.6.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43db38eb69 code=0x7ffc0000
[   62.819571][   T29] audit: type=1326 audit(1753979637.979:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6905 comm="syz.6.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f43db38eb69 code=0x7ffc0000
[   62.843015][   T29] audit: type=1326 audit(1753979637.979:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6905 comm="syz.6.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43db38eb69 code=0x7ffc0000
[   62.866447][   T29] audit: type=1326 audit(1753979637.979:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6905 comm="syz.6.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f43db38eb69 code=0x7ffc0000
[   62.889972][   T29] audit: type=1326 audit(1753979637.979:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6908 comm="syz.6.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f43db3c1425 code=0x7ffc0000
[   62.913279][   T29] audit: type=1326 audit(1753979637.979:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6905 comm="syz.6.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43db38eb69 code=0x7ffc0000
[   62.936605][   T29] audit: type=1326 audit(1753979637.989:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6905 comm="syz.6.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43db38eb69 code=0x7ffc0000
[   62.960012][   T29] audit: type=1326 audit(1753979637.999:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6905 comm="syz.6.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f43db38eb69 code=0x7ffc0000
[   62.995582][   T29] audit: type=1326 audit(1753979637.999:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6905 comm="syz.6.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43db38eb69 code=0x7ffc0000
[   63.019261][   T29] audit: type=1326 audit(1753979637.999:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6905 comm="syz.6.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43db38eb69 code=0x7ffc0000
[   63.120970][ T6928] netlink: 'syz.7.771': attribute type 13 has an invalid length.
[   63.196398][ T6928] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.203621][ T6928] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.286164][ T6928] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   63.302235][ T6928] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   63.367322][ T6940] vxlan0: entered promiscuous mode
[   63.383938][ T5133] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   63.410600][ T5133] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   63.429223][ T5133] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   63.466027][ T6949] loop8: detected capacity change from 0 to 1024
[   63.467792][ T5133] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   63.479557][ T6949] EXT4-fs: Ignoring removed nobh option
[   63.486825][ T6949] EXT4-fs: inline encryption not supported
[   63.526956][ T5133] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   63.551871][ T5133] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   63.580364][ T6949] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4113: comm syz.8.786: Allocating blocks 385-513 which overlap fs metadata
[   63.588084][ T5133] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   63.613034][ T5133] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   63.621181][ T6949] EXT4-fs (loop8): pa ffff888106e92230: logic 16, phys. 129, len 24
[   63.629745][ T6949] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8
[   63.789227][ T6964] syzkaller0: entered promiscuous mode
[   63.794721][ T6964] syzkaller0: entered allmulticast mode
[   63.861327][ T6973] pim6reg1: entered promiscuous mode
[   63.866639][ T6973] pim6reg1: entered allmulticast mode
[   63.875532][ T6979] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6979 comm=syz.7.781
[   64.376546][ T7011] syzkaller0: entered promiscuous mode
[   64.382166][ T7011] syzkaller0: entered allmulticast mode
[   64.441879][ T7017] loop2: detected capacity change from 0 to 2048
[   64.470034][ T7017] EXT4-fs (loop2): shut down requested (0)
[   64.572038][ T7036] loop2: detected capacity change from 0 to 512
[   64.579956][ T7036] EXT4-fs: Ignoring removed nomblk_io_submit option
[   64.588739][ T7036] EXT4-fs: inline encryption not supported
[   64.594663][ T7036] EXT4-fs: Ignoring removed bh option
[   64.601047][ T7036] EXT4-fs: Ignoring removed nomblk_io_submit option
[   64.615764][ T7036] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   64.631187][ T7036] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal
[   64.926132][ T7068] __nla_validate_parse: 2 callbacks suppressed
[   64.926146][ T7068] netlink: 8 bytes leftover after parsing attributes in process `syz.8.821'.
[   65.398468][ T7058] net_ratelimit: 11 callbacks suppressed
[   65.398481][ T7058] Set syz1 is full, maxelem 65536 reached
[   65.701178][ T7105] loop2: detected capacity change from 0 to 1024
[   65.751923][ T7105] EXT4-fs mount: 9 callbacks suppressed
[   65.751993][ T7105] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[   65.828912][ T7105] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   65.887167][ T6159] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[   66.043866][ T7130] pim6reg1: entered promiscuous mode
[   66.049400][ T7130] pim6reg1: entered allmulticast mode
[   66.219225][ T7139] netlink: 16 bytes leftover after parsing attributes in process `syz.6.848'.
[   66.654048][ T7152] syz.6.856 (7152) used greatest stack depth: 9488 bytes left
[   66.743201][ T7161] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[   66.795346][ T7176] netlink: 24 bytes leftover after parsing attributes in process `syz.6.862'.
[   68.712515][ T7390] wg2: entered promiscuous mode
[   68.717503][ T7390] wg2: entered allmulticast mode
[   68.791063][ T7407] netlink: 'syz.5.901': attribute type 13 has an invalid length.
[   68.836946][ T7414] netlink: 8 bytes leftover after parsing attributes in process `syz.8.902'.
[   68.955947][ T7407] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.963237][ T7407] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.056059][ T7407] batman_adv: batadv0: Interface deactivated: dummy0
[   69.116034][ T7407] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   69.137011][ T7407] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   69.258902][ T5112] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   69.397639][ T5112] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   69.418397][ T5112] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   69.434222][ T5112] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   69.521565][ T7485] loop6: detected capacity change from 0 to 512
[   69.575368][ T7485] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   69.589231][ T7485] ext4 filesystem being mounted at /64/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   69.599455][   T29] kauditd_printk_skb: 51 callbacks suppressed
[   69.599468][   T29] audit: type=1326 audit(1753979644.829:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7490 comm="syz.5.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3278beb69 code=0x7ffc0000
[   69.629016][   T29] audit: type=1326 audit(1753979644.829:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7490 comm="syz.5.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3278beb69 code=0x7ffc0000
[   69.652363][   T29] audit: type=1326 audit(1753979644.829:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7490 comm="syz.5.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc3278beb69 code=0x7ffc0000
[   69.675760][   T29] audit: type=1326 audit(1753979644.829:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7490 comm="syz.5.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3278beb69 code=0x7ffc0000
[   69.699150][   T29] audit: type=1326 audit(1753979644.829:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7490 comm="syz.5.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fc3278beb69 code=0x7ffc0000
[   69.778100][   T29] audit: type=1326 audit(1753979644.919:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7490 comm="syz.5.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3278beb69 code=0x7ffc0000
[   69.801864][   T29] audit: type=1326 audit(1753979644.919:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7490 comm="syz.5.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3278beb69 code=0x7ffc0000
[   69.825309][   T29] audit: type=1326 audit(1753979644.919:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7496 comm="syz.5.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc3278f1425 code=0x7ffc0000
[   69.848596][   T29] audit: type=1326 audit(1753979644.939:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7490 comm="syz.5.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fc3278beb69 code=0x7ffc0000
[   69.871848][   T29] audit: type=1326 audit(1753979644.939:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7490 comm="syz.5.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc32785ad69 code=0x7ffc0000
[   69.899050][ T5989] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.154035][ T7536] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7536 comm=syz.8.934
[   70.283044][ T7547] syzkaller1: entered promiscuous mode
[   70.289148][ T7547] syzkaller1: entered allmulticast mode
[   70.440220][ T7568] netlink: 'syz.7.949': attribute type 1 has an invalid length.
[   70.467544][ T7571] loop8: detected capacity change from 0 to 1024
[   70.475343][ T7574] loop6: detected capacity change from 0 to 2048
[   70.480794][ T7568] 8021q: adding VLAN 0 to HW filter on device bond1
[   70.484561][ T7574] EXT4-fs: Ignoring removed nobh option
[   70.510568][ T7571] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   70.519895][ T7574] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   70.537040][ T7577] bond1: (slave veth3): Enslaving as an active interface with a down link
[   70.563224][ T7568] bond1: (slave dummy0): making interface the new active one
[   70.577637][ T7568] dummy0: entered promiscuous mode
[   70.583037][ T7571] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4113: comm syz.8.950: Allocating blocks 497-513 which overlap fs metadata
[   70.584381][ T7568] bond1: (slave dummy0): Enslaving as an active interface with an up link
[   70.639094][ T5989] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.655314][ T7570] EXT4-fs (loop8): pa ffff888106e92230: logic 64, phys. 193, len 20
[   70.663371][ T7570] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1
[   70.714442][ T6184] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.730848][ T7587] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7587 comm=syz.2.956
[   70.739842][ T7591] loop6: detected capacity change from 0 to 1024
[   70.754235][ T7591] EXT4-fs: Ignoring removed orlov option
[   70.757162][ T7593] syzkaller1: entered promiscuous mode
[   70.765411][ T7593] syzkaller1: entered allmulticast mode
[   70.778233][ T7591] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   70.943375][ T5989] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.958095][ T7621] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7621 comm=syz.2.964
[   70.970520][ T7621] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7621 comm=syz.2.964
[   71.051955][ T7622] netlink: 96 bytes leftover after parsing attributes in process `syz.7.966'.
[   71.126930][ T7640] loop6: detected capacity change from 0 to 2048
[   71.164953][ T7640] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   71.208955][ T7640] EXT4-fs (loop6): shut down requested (0)
[   71.227809][ T5989] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   71.415546][ T7665] syzkaller1: entered promiscuous mode
[   71.421067][ T7665] syzkaller1: entered allmulticast mode
[   71.664234][ T7729] loop8: detected capacity change from 0 to 1024
[   71.684495][ T7729] EXT4-fs: Ignoring removed orlov option
[   71.710360][ T7729] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   71.789937][ T7752] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7752 comm=syz.6.979
[   71.802331][ T7752] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7752 comm=syz.6.979
[   71.966689][ T6184] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.174934][ T7798] batadv_slave_1: entered promiscuous mode
[   72.302154][ T7798] batadv_slave_1: left promiscuous mode
[   72.396675][ T7836] loop7: detected capacity change from 0 to 1024
[   72.403691][ T7836] EXT4-fs: Ignoring removed orlov option
[   72.417965][ T7836] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   72.641035][ T6116] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.676540][ T7884] netlink: 8 bytes leftover after parsing attributes in process `syz.5.998'.
[   73.061420][ T7892] Set syz1 is full, maxelem 65536 reached
[   73.195162][ T7913] loop5: detected capacity change from 0 to 1024
[   73.265771][ T7913] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[   73.278435][ T7913] ext4 filesystem being mounted at /199/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   73.314965][ T3919] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[   73.526395][ T7938] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1022'.
[   73.620079][ T7907] Set syz1 is full, maxelem 65536 reached
[   73.679594][ T7954] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1030'.
[   73.731561][ T7958] pim6reg1: entered promiscuous mode
[   73.736960][ T7958] pim6reg1: entered allmulticast mode
[   73.814329][ T7970] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1036'.
[   73.875477][ T7979] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1039'.
[   73.920982][ T7985] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1044'.
[   73.972578][ T7991] loop7: detected capacity change from 0 to 2048
[   73.997201][ T7991] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   74.037855][ T7991] EXT4-fs (loop7): shut down requested (0)
[   74.044737][ T8002] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1051'.
[   74.092548][ T6116] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   74.160329][ T8018] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1058'.
[   74.174948][ T8021] loop6: detected capacity change from 0 to 512
[   74.181719][ T8021] EXT4-fs: Ignoring removed nomblk_io_submit option
[   74.208656][ T8021] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[   74.240448][ T8021] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[   74.261448][ T8021] EXT4-fs (loop6): 1 truncate cleaned up
[   74.287894][ T8021] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   74.434380][ T5989] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   74.437898][ T8036] syz_tun: entered promiscuous mode
[   74.450399][ T8036] batadv_slave_0: entered promiscuous mode
[   74.468487][ T8036] hsr1: entered allmulticast mode
[   74.473540][ T8036] syz_tun: entered allmulticast mode
[   74.478899][ T8036] batadv_slave_0: entered allmulticast mode
[   74.651557][ T8063] loop5: detected capacity change from 0 to 512
[   74.669196][ T8063] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   74.684889][ T8063] EXT4-fs (loop5): 1 truncate cleaned up
[   74.701621][ T8063] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   74.741909][ T8082] loop2: detected capacity change from 0 to 512
[   74.755830][ T8082] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   74.769734][ T3919] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   74.813232][ T8082] EXT4-fs (loop2): 1 orphan inode deleted
[   74.819007][ T8082] EXT4-fs (loop2): 1 truncate cleaned up
[   74.837562][ T8082] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   74.871967][   T29] kauditd_printk_skb: 88 callbacks suppressed
[   74.871978][   T29] audit: type=1326 audit(1753979650.109:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8079 comm="syz.2.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e44feb69 code=0x7ffc0000
[   74.929813][   T29] audit: type=1326 audit(1753979650.119:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8079 comm="syz.2.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd0e44feb69 code=0x7ffc0000
[   74.953157][   T29] audit: type=1326 audit(1753979650.119:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8079 comm="syz.2.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e44feb69 code=0x7ffc0000
[   74.976596][   T29] audit: type=1326 audit(1753979650.119:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8079 comm="syz.2.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e44feb69 code=0x7ffc0000
[   74.999887][   T29] audit: type=1326 audit(1753979650.119:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8079 comm="syz.2.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fd0e44feb69 code=0x7ffc0000
[   75.023333][   T29] audit: type=1326 audit(1753979650.119:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8079 comm="syz.2.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e44feb69 code=0x7ffc0000
[   75.046658][   T29] audit: type=1326 audit(1753979650.119:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8079 comm="syz.2.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e44feb69 code=0x7ffc0000
[   75.069931][   T29] audit: type=1326 audit(1753979650.119:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8079 comm="syz.2.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd0e44feb69 code=0x7ffc0000
[   75.093252][   T29] audit: type=1326 audit(1753979650.119:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8079 comm="syz.2.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e44feb69 code=0x7ffc0000
[   75.116582][   T29] audit: type=1326 audit(1753979650.119:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8079 comm="syz.2.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd0e44feb69 code=0x7ffc0000
[   75.210567][ T6159] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   75.496648][ T8145] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1088'.
[   75.599265][ T8154] loop2: detected capacity change from 0 to 1024
[   75.626135][ T8154] EXT4-fs: Ignoring removed orlov option
[   75.667037][ T8154] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   75.697640][ T8164] loop6: detected capacity change from 0 to 512
[   75.720845][ T8164] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[   75.731812][ T8164] EXT4-fs (loop6): 1 truncate cleaned up
[   75.737956][ T8164] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   75.763729][ T6159] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   75.781401][ T5989] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   75.822523][ T8172] wg2: entered promiscuous mode
[   75.827396][ T8172] wg2: entered allmulticast mode
[   76.128105][ T8198] __nla_validate_parse: 2 callbacks suppressed
[   76.128120][ T8198] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1112'.
[   76.253981][ T8211] netlink: 'syz.2.1112': attribute type 2 has an invalid length.
[   76.489874][ T8227] netlink: 'syz.2.1123': attribute type 1 has an invalid length.
[   76.533441][ T8227] 8021q: adding VLAN 0 to HW filter on device bond1
[   76.605892][ T8227] bond1: (slave veth7): Enslaving as an active interface with a down link
[   76.618939][ T8235] bond1: (slave dummy0): making interface the new active one
[   76.627390][ T8235] dummy0: entered promiscuous mode
[   76.630157][ T8234] loop8: detected capacity change from 0 to 512
[   76.651420][ T8234] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[   76.671840][ T8235] bond1: (slave dummy0): Enslaving as an active interface with an up link
[   76.693221][ T8234] EXT4-fs (loop8): 1 orphan inode deleted
[   76.699019][ T8234] EXT4-fs (loop8): 1 truncate cleaned up
[   76.737185][ T8208] Set syz1 is full, maxelem 65536 reached
[   76.749871][ T8234] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   76.769297][ T8242] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1128'.
[   76.813596][ T6184] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   76.901301][ T8252] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1130'.
[   76.932676][ T8252] netlink: 'syz.7.1130': attribute type 2 has an invalid length.
[   76.983260][ T8262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   77.002266][ T8266] loop6: detected capacity change from 0 to 1024
[   77.013198][ T8262] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   77.016329][ T8269] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(4)
[   77.026784][ T8262] 9pnet: p9_errstr2errno: server reported unknown error �@00000000000000000000010
[   77.027414][ T8269] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   77.044144][ T8269] vhci_hcd vhci_hcd.0: Device attached
[   77.071188][ T8266] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   77.083394][ T8270] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 0
[   77.097563][ T5148] vhci_hcd: stop threads
[   77.101831][ T5148] vhci_hcd: release socket
[   77.106228][ T5148] vhci_hcd: disconnect device
[   77.114486][ T8277] loop2: detected capacity change from 0 to 128
[   77.125767][ T8277] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   77.135586][ T8266] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4113: comm syz.6.1139: Allocating blocks 497-513 which overlap fs metadata
[   77.146153][ T8277] ext4 filesystem being mounted at /86/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   77.197659][ T8265] EXT4-fs (loop6): pa ffff888106e922a0: logic 64, phys. 193, len 20
[   77.205701][ T8265] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1
[   77.226731][ T6159] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   77.240928][ T5989] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   77.430999][ T8304] netlink: 'syz.5.1163': attribute type 1 has an invalid length.
[   77.444633][ T8304] 8021q: adding VLAN 0 to HW filter on device bond1
[   77.472218][ T8304] bond1: (slave veth5): Enslaving as an active interface with a down link
[   77.492954][ T8304] batman_adv: batadv0: Removing interface: dummy0
[   77.504641][ T8304] bond1: (slave dummy0): making interface the new active one
[   77.522081][ T8304] dummy0: entered promiscuous mode
[   77.527310][ T8304] bond1: (slave dummy0): Enslaving as an active interface with an up link
[   77.557583][ T8315] loop6: detected capacity change from 0 to 128
[   77.570139][ T8315] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   77.583010][ T8315] ext4 filesystem being mounted at /124/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   77.639291][ T8320] bond1: (slave dummy0): Releasing active interface
[   77.645957][ T8320] dummy0: left promiscuous mode
[   77.669981][ T8326] loop8: detected capacity change from 0 to 512
[   77.691815][ T8320] batman_adv: batadv0: Adding interface: dummy0
[   77.698118][ T8320] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.723346][ T8320] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[   77.751131][ T8326] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   77.764715][ T8326] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   77.783789][ T5989] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   77.797731][ T8326] EXT4-fs warning (device loop8): ext4_empty_dir:3095: inode #12: comm syz.8.1161: directory missing '..'
[   77.842757][ T6184] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   77.855089][ T8340] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1167'.
[   77.904544][ T8346] loop7: detected capacity change from 0 to 512
[   77.912620][ T8346] journal_path: Non-blockdev passed as './bus'
[   77.918904][ T8346] EXT4-fs: error: could not find journal device path
[   77.943893][ T8353] netlink: 'syz.8.1170': attribute type 1 has an invalid length.
[   77.978651][ T8353] 8021q: adding VLAN 0 to HW filter on device bond1
[   77.987543][ T8351] netlink: 'syz.5.1172': attribute type 1 has an invalid length.
[   77.995354][ T8351] netlink: 198116 bytes leftover after parsing attributes in process `syz.5.1172'.
[   78.013366][ T8355] bond1: (slave veth5): Enslaving as an active interface with a down link
[   78.048918][ T8360] loop7: detected capacity change from 0 to 128
[   78.076239][ T8353] bond1: (slave dummy0): making interface the new active one
[   78.093673][ T8360] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   78.107118][ T8353] dummy0: entered promiscuous mode
[   78.112596][ T8353] bond1: (slave dummy0): Enslaving as an active interface with an up link
[   78.137009][ T8360] ext4 filesystem being mounted at /101/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   78.193024][ T8367] batman_adv: batadv0: Adding interface: dummy0
[   78.199332][ T8367] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.226822][ T8367] batman_adv: batadv0: Interface activated: dummy0
[   78.251201][ T8371] loop2: detected capacity change from 0 to 512
[   78.263039][ T8367] batadv0: mtu less than device minimum
[   78.268990][ T8367] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   78.279678][ T8367] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   78.290357][ T8367] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   78.301168][ T8367] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   78.311754][ T8367] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   78.319575][ T8371] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   78.322413][ T8367] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   78.336501][ T8371] ext4 filesystem being mounted at /97/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   78.345223][ T8367] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   78.365825][ T8367] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   78.376995][ T8367] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   78.390675][ T8372] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1181'.
[   78.400980][ T6116] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   78.401127][ T8371] EXT4-fs warning (device loop2): ext4_empty_dir:3095: inode #12: comm syz.2.1180: directory missing '..'
[   78.414292][ T8373] vlan2: entered allmulticast mode
[   78.426515][ T8373] syz_tun: entered allmulticast mode
[   78.491843][ T6159] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   78.499035][ T8379] usb usb8: usbfs: process 8379 (syz.7.1184) did not claim interface 0 before use
[   78.643675][ T8403] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1196'.
[   78.645199][ T8405] loop6: detected capacity change from 0 to 512
[   78.677049][ T8409] netlink: 'syz.8.1198': attribute type 1 has an invalid length.
[   78.684866][ T8409] netlink: 198116 bytes leftover after parsing attributes in process `syz.8.1198'.
[   78.713289][ T8405] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   78.730657][ T8405] ext4 filesystem being mounted at /131/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   78.794516][ T8424] bond1: (slave dummy0): Releasing active interface
[   78.803582][ T8424] dummy0: left promiscuous mode
[   78.812155][ T8425] EXT4-fs warning (device loop6): ext4_empty_dir:3095: inode #12: comm syz.6.1195: directory missing '..'
[   78.832061][ T8424] batman_adv: batadv0: Adding interface: dummy0
[   78.838374][ T8424] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.863673][ T8424] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[   78.887342][ T5989] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   78.961105][ T8442] loop8: detected capacity change from 0 to 1024
[   78.976214][ T8442] EXT4-fs: Ignoring removed nobh option
[   78.981835][ T8442] EXT4-fs: Ignoring removed nobh option
[   78.987454][ T8442] EXT4-fs: Ignoring removed bh option
[   79.015423][ T8448] bond1: (slave dummy0): Releasing active interface
[   79.034999][ T8442] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   79.037176][ T8448] dummy0: left promiscuous mode
[   79.058709][ T8448] batman_adv: batadv0: Adding interface: dummy0
[   79.065023][ T8448] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.090319][ T8448] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[   79.124522][ T6184] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.160464][ T8460] loop7: detected capacity change from 0 to 512
[   79.199455][ T8460] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   79.213156][ T8460] ext4 filesystem being mounted at /111/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   79.252391][ T8460] EXT4-fs warning (device loop7): ext4_empty_dir:3095: inode #12: comm syz.7.1218: directory missing '..'
[   79.273183][ T6116] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.355253][ T8484] loop8: detected capacity change from 0 to 128
[   79.365338][ T8484] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   79.379156][ T8484] ext4 filesystem being mounted at /102/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   79.453666][ T6184] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   79.528867][ T8493] usb usb8: usbfs: process 8493 (syz.8.1227) did not claim interface 0 before use
[   79.641409][ T8509] vlan2: entered allmulticast mode
[   79.646564][ T8509] syz_tun: entered allmulticast mode
[   79.697258][ T8517] wg2: entered promiscuous mode
[   79.702192][ T8517] wg2: entered allmulticast mode
[   79.754904][ T8524] loop6: detected capacity change from 0 to 1024
[   79.765307][ T8524] EXT4-fs: Ignoring removed nobh option
[   79.771040][ T8524] EXT4-fs: Ignoring removed nobh option
[   79.776634][ T8524] EXT4-fs: Ignoring removed bh option
[   79.789490][ T8524] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   79.832381][ T5989] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.888984][ T8536] usb usb8: usbfs: process 8536 (syz.6.1247) did not claim interface 0 before use
[   79.967960][ T8550] vlan2: entered allmulticast mode
[   79.973288][ T8550] syz_tun: entered allmulticast mode
[   80.036916][   T29] kauditd_printk_skb: 80 callbacks suppressed
[   80.036996][   T29] audit: type=1400 audit(1753979655.269:890): avc:  denied  { connect } for  pid=8555 comm="syz.5.1258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[   80.070569][ T8557] netlink: 2036 bytes leftover after parsing attributes in process `syz.7.1256'.
[   80.071831][   T29] audit: type=1400 audit(1753979655.299:891): avc:  denied  { write } for  pid=8555 comm="syz.5.1258" path="socket:[19104]" dev="sockfs" ino=19104 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[   80.079728][ T8557] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1256'.
[   80.439897][ T8588] usb usb8: usbfs: process 8588 (syz.5.1268) did not claim interface 0 before use
[   80.893797][ T8611] wg2: left promiscuous mode
[   80.898551][ T8611] wg2: left allmulticast mode
[   80.905355][ T8611] wg2: entered promiscuous mode
[   80.910329][ T8611] wg2: entered allmulticast mode
[   80.955928][   T29] audit: type=1400 audit(1753979656.189:892): avc:  denied  { append } for  pid=8616 comm="syz.5.1285" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   81.011686][   T29] audit: type=1400 audit(1753979656.249:893): avc:  denied  { bind } for  pid=8618 comm="syz.8.1286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   81.047151][   T29] audit: type=1400 audit(1753979656.279:894): avc:  denied  { lock } for  pid=8622 comm="syz.6.1288" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=18291 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   81.080039][   T29] audit: type=1400 audit(1753979656.279:895): avc:  denied  { name_connect } for  pid=8625 comm="syz.5.1290" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1
[   81.101632][   T29] audit: type=1400 audit(1753979656.279:896): avc:  denied  { listen } for  pid=8625 comm="syz.5.1290" lport=50776 faddr=::ffff:172.20.255.187 fport=3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   81.125227][   T29] audit: type=1400 audit(1753979656.309:897): avc:  denied  { accept } for  pid=8625 comm="syz.5.1290" lport=50776 faddr=::ffff:172.20.255.187 fport=3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   81.160065][ T8629] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1289'.
[   81.168941][   T29] audit: type=1400 audit(1753979656.339:898): avc:  denied  { read } for  pid=8631 comm="syz.5.1292" name="ptp0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   81.191974][   T29] audit: type=1400 audit(1753979656.339:899): avc:  denied  { open } for  pid=8631 comm="syz.5.1292" path="/dev/ptp0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   81.272224][ T8647] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1298'.
[   81.348080][ T8653] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1298'.
[   81.521041][ T8659] loop7: detected capacity change from 0 to 8192
[   81.592474][ T3289]  loop7: p1 p2 p3 p4
[   81.596600][ T3289] loop7: p1 start 4294508288 is beyond EOD, truncated
[   81.603498][ T3289] loop7: p2 start 2936012800 is beyond EOD, truncated
[   81.610372][ T3289] loop7: p3 start 1912602624 is beyond EOD, truncated
[   81.617124][ T3289] loop7: p4 size 656640 extends beyond EOD, truncated
[   81.658162][ T8659]  loop7: p1 p2 p3 p4
[   81.662199][ T8659] loop7: p1 start 4294508288 is beyond EOD, truncated
[   81.668988][ T8659] loop7: p2 start 2936012800 is beyond EOD, truncated
[   81.675753][ T8659] loop7: p3 start 1912602624 is beyond EOD, truncated
[   81.682601][ T8659] loop7: p4 size 656640 extends beyond EOD, truncated
[   81.735176][ T8674] loop6: detected capacity change from 0 to 128
[   81.769159][ T8680] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1306'.
[   81.797199][ T8674] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100)
[   81.805123][ T8674] FAT-fs (loop6): Filesystem has been set read-only
[   81.854749][ T8674] syz.6.1308: attempt to access beyond end of device
[   81.854749][ T8674] loop6: rw=524288, sector=2065, nr_sectors = 8 limit=128
[   81.857206][ T3289] udevd[3289]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory
[   81.890810][ T8674] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100)
[   81.898680][ T8674] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100)
[   81.906943][ T8674] syz.6.1308: attempt to access beyond end of device
[   81.906943][ T8674] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128
[   81.921310][ T8674] syz.6.1308: attempt to access beyond end of device
[   81.921310][ T8674] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128
[   81.939793][ T8674] syz.6.1308: attempt to access beyond end of device
[   81.939793][ T8674] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128
[   81.953829][ T8674] syz.6.1308: attempt to access beyond end of device
[   81.953829][ T8674] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128
[   81.967848][ T8674] syz.6.1308: attempt to access beyond end of device
[   81.967848][ T8674] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128
[   81.990485][ T8674] syz.6.1308: attempt to access beyond end of device
[   81.990485][ T8674] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128
[   82.006335][ T8674] syz.6.1308: attempt to access beyond end of device
[   82.006335][ T8674] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128
[   82.020031][ T8674] syz.6.1308: attempt to access beyond end of device
[   82.020031][ T8674] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128
[   82.033445][ T8674] syz.6.1308: attempt to access beyond end of device
[   82.033445][ T8674] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128
[   82.063523][ T8698] syz_tun (unregistering): left promiscuous mode
[   82.285043][ T8712] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1324'.
[   82.294552][ T8712] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1324'.
[   82.721780][ T8747] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1338'.
[   82.797660][ T8747] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1338'.
[   82.877714][ T8745] loop7: detected capacity change from 0 to 32768
[   82.925739][ T8763] syzkaller0: entered promiscuous mode
[   82.931334][ T8763] syzkaller0: entered allmulticast mode
[   82.937651][ T8745]  loop7: p1 p2 p3 < >
[   82.949264][ T8745] loop7: p1 size 242222080 extends beyond EOD, truncated
[   82.956869][ T8745] loop7: p2 start 4294967295 is beyond EOD, truncated
[   83.100640][ T3487] udevd[3487]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory
[   83.101119][ T3289] udevd[3289]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory
[   83.196113][ T8788] loop7: detected capacity change from 0 to 128
[   83.206972][ T8788] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100)
[   83.215074][ T8788] FAT-fs (loop7): Filesystem has been set read-only
[   83.226824][ T8788] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100)
[   83.234741][ T8788] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100)
[   83.256501][ T8794] wireguard0: entered promiscuous mode
[   83.262067][ T8794] wireguard0: entered allmulticast mode
[   83.362480][ T8801] netlink: 'syz.8.1359': attribute type 1 has an invalid length.
[   83.362835][ T5148] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   83.370266][ T8801] netlink: 224 bytes leftover after parsing attributes in process `syz.8.1359'.
[   83.388230][ T5148] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   83.493532][ T8813] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1366'.
[   84.204125][ T8857] batadv1: entered promiscuous mode
[   84.209372][ T8857] batadv1: entered allmulticast mode
[   84.214899][ T8857] bridge0: port 3(batadv1) entered blocking state
[   84.221720][ T8857] bridge0: port 3(batadv1) entered disabled state
[   84.336940][ T8869] batadv1: entered promiscuous mode
[   84.342282][ T8869] batadv1: entered allmulticast mode
[   84.360036][ T8869] bridge0: port 3(batadv1) entered blocking state
[   84.366498][ T8869] bridge0: port 3(batadv1) entered disabled state
[   84.482295][ T8877] netlink: 'syz.5.1392': attribute type 1 has an invalid length.
[   84.491556][ T8881] wireguard0: entered promiscuous mode
[   84.497036][ T8881] wireguard0: entered allmulticast mode
[   84.514495][ T5091] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   84.682528][ T8901] syzkaller0: entered promiscuous mode
[   84.688130][ T8901] syzkaller0: entered allmulticast mode
[   84.709480][ T5092] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[   84.718795][ T5092] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[   84.838343][ T5091] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[   84.847644][ T5091] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[   84.943803][ T8921] netlink: 'syz.2.1408': attribute type 1 has an invalid length.
[   85.002224][ T8926] wireguard0: entered promiscuous mode
[   85.007687][ T8926] wireguard0: entered allmulticast mode
[   85.099904][ T8943] bridge: RTM_NEWNEIGH with invalid ether address
[   85.129053][ T8940] syzkaller0: entered promiscuous mode
[   85.134586][ T8940] syzkaller0: entered allmulticast mode
[   85.195064][ T8949] batadv1: entered promiscuous mode
[   85.200497][ T8949] batadv1: entered allmulticast mode
[   85.208154][ T8949] bridge0: port 3(batadv1) entered blocking state
[   85.214641][ T8949] bridge0: port 3(batadv1) entered disabled state
[   85.300558][ T8955] macvlan1: entered promiscuous mode
[   85.306878][ T8955] ipvlan0: entered promiscuous mode
[   85.326402][ T8955] ipvlan0: left promiscuous mode
[   85.357468][ T8955] macvlan1: left promiscuous mode
[   85.386113][ T8963] netlink: 'syz.7.1427': attribute type 1 has an invalid length.
[   85.440085][ T8946] loop6: detected capacity change from 0 to 32768
[   85.482058][ T3289]  loop6: p1 p2 p3 < >
[   85.491527][ T3289] loop6: p1 size 242222080 extends beyond EOD, truncated
[   85.509895][ T3289] loop6: p2 start 4294967295 is beyond EOD, truncated
[   85.524460][ T8946]  loop6: p1 p2 p3 < >
[   85.528830][ T8946] loop6: p1 size 242222080 extends beyond EOD, truncated
[   85.576848][ T8946] loop6: p2 start 4294967295 is beyond EOD, truncated
[   85.612260][ T8975] syzkaller0: entered promiscuous mode
[   85.617747][ T8975] syzkaller0: entered allmulticast mode
[   85.698907][ T5107] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[   85.708196][ T5107] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[   85.718897][ T8979] wireguard0: entered promiscuous mode
[   85.724374][ T8979] wireguard0: entered allmulticast mode
[   85.793911][ T8983] batadv1: entered promiscuous mode
[   85.799219][ T8983] batadv1: entered allmulticast mode
[   85.810631][ T3289] udevd[3289]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory
[   85.810895][ T3487] udevd[3487]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory
[   85.822192][ T8983] bridge0: port 3(batadv1) entered blocking state
[   85.836712][ T8983] bridge0: port 3(batadv1) entered disabled state
[   85.863742][ T3289] udevd[3289]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory
[   85.875963][ T3487] udevd[3487]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory
[   85.939287][ T8995] loop8: detected capacity change from 0 to 128
[   85.959178][ T8995] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100)
[   85.967093][ T8995] FAT-fs (loop8): Filesystem has been set read-only
[   85.991921][ T8995] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100)
[   85.999792][ T8995] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100)
[   86.310650][ T4912] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[   86.320001][ T4912] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[   86.821557][ T9024] loop7: detected capacity change from 0 to 128
[   86.859787][ T9031] batadv1: entered promiscuous mode
[   86.865008][ T9031] batadv1: entered allmulticast mode
[   86.878341][ T9031] bridge0: port 3(batadv1) entered blocking state
[   86.884840][ T9031] bridge0: port 3(batadv1) entered disabled state
[   86.885851][ T9024] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   86.907493][ T9024] ext4 filesystem being mounted at /163/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   86.928108][   T29] kauditd_printk_skb: 11 callbacks suppressed
[   86.928121][   T29] audit: type=1400 audit(1753979662.169:911): avc:  denied  { setattr } for  pid=9022 comm="syz.7.1456" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   87.011659][ T6116] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   87.026339][ T9041] __nla_validate_parse: 10 callbacks suppressed
[   87.026353][ T9041] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1462'.
[   87.043178][ T9041] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1462'.
[   87.111561][ T9051] serio: Serial port ptm0
[   87.119248][ T9055] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1469'.
[   87.142255][   T29] audit: type=1400 audit(1753979662.379:912): avc:  denied  { remount } for  pid=9056 comm="syz.7.1470" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   87.142636][ T9057] option changes via remount are deprecated (pid=9056 comm=syz.7.1470)
[   87.191824][ T9060] macvlan1: entered promiscuous mode
[   87.200710][ T9060] ipvlan0: entered promiscuous mode
[   87.207684][ T9060] ipvlan0: left promiscuous mode
[   87.225242][ T9060] macvlan1: left promiscuous mode
[   87.361803][ T9082] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1483'.
[   87.370806][ T5095] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[   87.380149][ T5095] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[   87.412118][ T9089] serio: Serial port ptm0
[   87.433027][ T9090] macvlan1: entered promiscuous mode
[   87.439035][ T9090] ipvlan0: entered promiscuous mode
[   87.444687][ T9090] ipvlan0: left promiscuous mode
[   87.450200][ T9090] macvlan1: left promiscuous mode
[   87.453551][ T9092] loop6: detected capacity change from 0 to 256
[   87.491684][ T9092] FAT-fs (loop6): Directory bread(block 64) failed
[   87.504949][ T9092] FAT-fs (loop6): Directory bread(block 65) failed
[   87.522061][ T9092] FAT-fs (loop6): Directory bread(block 66) failed
[   87.529583][ T9092] FAT-fs (loop6): Directory bread(block 67) failed
[   87.536108][ T9092] FAT-fs (loop6): Directory bread(block 68) failed
[   87.542679][ T9092] FAT-fs (loop6): Directory bread(block 69) failed
[   87.549403][ T9092] FAT-fs (loop6): Directory bread(block 70) failed
[   87.555899][ T9092] FAT-fs (loop6): Directory bread(block 71) failed
[   87.562409][ T9092] FAT-fs (loop6): Directory bread(block 72) failed
[   87.569264][ T9092] FAT-fs (loop6): Directory bread(block 73) failed
[   87.584184][ T9092] bio_check_eod: 62234 callbacks suppressed
[   87.584198][ T9092] syz.6.1487: attempt to access beyond end of device
[   87.584198][ T9092] loop6: rw=0, sector=1736, nr_sectors = 8 limit=256
[   87.632655][ T9103] loop8: detected capacity change from 0 to 128
[   87.645573][ T9103] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   87.657795][ T9103] ext4 filesystem being mounted at /159/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   87.704115][   T29] audit: type=1400 audit(1753979662.939:913): avc:  denied  { unmount } for  pid=6116 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   87.727509][ T6184] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   87.740764][ T9107] serio: Serial port ptm0
[   87.839493][ T9123] macvlan1: entered promiscuous mode
[   87.845892][ T9123] ipvlan0: entered promiscuous mode
[   87.852832][ T9123] ipvlan0: left promiscuous mode
[   87.858673][ T9123] macvlan1: left promiscuous mode
[   87.904342][ T9127] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1505'.
[   87.909192][ T9135] loop6: detected capacity change from 0 to 128
[   87.940302][ T9127] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1505'.
[   87.953283][ T9135] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   87.981574][   T29] audit: type=1326 audit(1753979663.209:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9139 comm="syz.5.1509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3278beb69 code=0x7ffc0000
[   88.004944][   T29] audit: type=1326 audit(1753979663.209:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9139 comm="syz.5.1509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3278beb69 code=0x7ffc0000
[   88.004998][ T9135] ext4 filesystem being mounted at /184/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   88.028278][   T29] audit: type=1326 audit(1753979663.209:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9139 comm="syz.5.1509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7fc3278beb69 code=0x7ffc0000
[   88.061787][   T29] audit: type=1326 audit(1753979663.209:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9139 comm="syz.5.1509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3278beb69 code=0x7ffc0000
[   88.085216][   T29] audit: type=1326 audit(1753979663.209:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9139 comm="syz.5.1509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fc3278beb69 code=0x7ffc0000
[   88.108509][   T29] audit: type=1326 audit(1753979663.209:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9139 comm="syz.5.1509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3278beb69 code=0x7ffc0000
[   88.143965][ T5989] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   88.203757][ T9152] serio: Serial port ptm0
[   88.220226][ T9153] can0: slcan on ttyS3.
[   88.244589][   T29] audit: type=1400 audit(1753979663.479:920): avc:  denied  { write } for  pid=9154 comm="syz.2.1515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   88.282462][ T9157] loop8: detected capacity change from 0 to 2048
[   88.293161][ T9153] can0 (unregistered): slcan off ttyS3.
[   88.309884][ T9157] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   88.573581][ T9177] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1523'.
[   88.583069][ T9177] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1523'.
[   88.783920][ T9172] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   88.799099][ T9172] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[   88.811550][ T9172] EXT4-fs (loop8): This should not happen!! Data will be lost
[   88.811550][ T9172] 
[   88.821216][ T9172] EXT4-fs (loop8): Total free blocks count 0
[   88.827186][ T9172] EXT4-fs (loop8): Free/Dirty block details
[   88.833117][ T9172] EXT4-fs (loop8): free_blocks=2415919104
[   88.838904][ T9172] EXT4-fs (loop8): dirty_blocks=8208
[   88.844171][ T9172] EXT4-fs (loop8): Block reservation details
[   88.850142][ T9172] EXT4-fs (loop8): i_reserved_data_blocks=513
[   88.880861][ T4912] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28
[   88.889220][ T5107] dummy0: left promiscuous mode
[   89.043752][ T9214] serio: Serial port ptm0
[   90.202952][ T9288] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1573'.
[   90.470535][ T9309] serio: Serial port ptm0
[   90.584561][ T9317] loop8: detected capacity change from 0 to 256
[   90.610238][ T9317] FAT-fs (loop8): Directory bread(block 64) failed
[   90.610259][ T9317] FAT-fs (loop8): Directory bread(block 65) failed
[   90.610289][ T9317] FAT-fs (loop8): Directory bread(block 66) failed
[   90.610304][ T9317] FAT-fs (loop8): Directory bread(block 67) failed
[   90.610323][ T9317] FAT-fs (loop8): Directory bread(block 68) failed
[   90.610338][ T9317] FAT-fs (loop8): Directory bread(block 69) failed
[   90.610357][ T9317] FAT-fs (loop8): Directory bread(block 70) failed
[   90.610375][ T9317] FAT-fs (loop8): Directory bread(block 71) failed
[   90.610452][ T9317] FAT-fs (loop8): Directory bread(block 72) failed
[   90.610468][ T9317] FAT-fs (loop8): Directory bread(block 73) failed
[   90.658074][ T9317] syz.8.1582: attempt to access beyond end of device
[   90.658074][ T9317] loop8: rw=0, sector=1736, nr_sectors = 8 limit=256
[   90.721603][ T9325] loop7: detected capacity change from 0 to 512
[   90.776686][ T9325] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   90.776753][ T9325] ext4 filesystem being mounted at /184/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   90.895574][ T6116] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   91.064955][ T9348] can0: slcan on ttyS3.
[   91.128601][ T9348] can0 (unregistered): slcan off ttyS3.
[   91.359808][ T9373] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1608'.
[   91.833894][ T9397] loop8: detected capacity change from 0 to 1024
[   91.861050][ T9397] ext4 filesystem being mounted at /181/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   91.870523][ T9397] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[   91.899974][ T9397] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 11 with error 28
[   91.900002][ T9397] EXT4-fs (loop8): This should not happen!! Data will be lost
[   91.900002][ T9397] 
[   91.900013][ T9397] EXT4-fs (loop8): Total free blocks count 0
[   91.900025][ T9397] EXT4-fs (loop8): Free/Dirty block details
[   91.900041][ T9397] EXT4-fs (loop8): free_blocks=4293918720
[   91.900054][ T9397] EXT4-fs (loop8): dirty_blocks=48
[   91.900067][ T9397] EXT4-fs (loop8): Block reservation details
[   91.900079][ T9397] EXT4-fs (loop8): i_reserved_data_blocks=3
[   91.945194][ T5091] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 48 with max blocks 17 with error 28
[   91.945269][ T5091] EXT4-fs (loop8): This should not happen!! Data will be lost
[   91.945269][ T5091] 
[   92.084187][ T9416] vlan2: entered allmulticast mode
[   92.112947][ T9419] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1625'.
[   92.202876][   T29] kauditd_printk_skb: 46 callbacks suppressed
[   92.202890][   T29] audit: type=1400 audit(1753979667.439:967): avc:  denied  { create } for  pid=9422 comm="syz.5.1639" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   92.203550][   T29] audit: type=1400 audit(1753979667.439:968): avc:  denied  { write } for  pid=9422 comm="syz.5.1639" name="file0" dev="tmpfs" ino=1690 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   92.203601][   T29] audit: type=1400 audit(1753979667.439:969): avc:  denied  { open } for  pid=9422 comm="syz.5.1639" path="/325/file0" dev="tmpfs" ino=1690 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   92.203987][   T29] audit: type=1400 audit(1753979667.439:970): avc:  denied  { ioctl } for  pid=9422 comm="syz.5.1639" path="/325/file0" dev="tmpfs" ino=1690 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   92.371373][   T29] audit: type=1400 audit(1753979667.609:971): avc:  denied  { unlink } for  pid=3919 comm="syz-executor" name="file0" dev="tmpfs" ino=1690 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   92.422799][   T29] audit: type=1326 audit(1753979667.649:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9432 comm="syz.7.1631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febd949eb69 code=0x7ffc0000
[   92.446194][   T29] audit: type=1326 audit(1753979667.649:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9432 comm="syz.7.1631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febd949eb69 code=0x7ffc0000
[   92.469598][   T29] audit: type=1326 audit(1753979667.659:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9432 comm="syz.7.1631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7febd949eb69 code=0x7ffc0000
[   92.492970][   T29] audit: type=1326 audit(1753979667.659:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9432 comm="syz.7.1631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febd949eb69 code=0x7ffc0000
[   92.516479][   T29] audit: type=1326 audit(1753979667.659:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9432 comm="syz.7.1631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febd949eb69 code=0x7ffc0000
[   92.759616][ T9455] vlan2: entered allmulticast mode
[   92.759669][ T9455] syz_tun: entered allmulticast mode
[   93.236242][ T9477] tipc: Started in network mode
[   93.236268][ T9477] tipc: Node identity ac14140f, cluster identity 4711
[   93.236337][ T9477] tipc: New replicast peer: 255.255.255.255
[   93.236439][ T9477] tipc: Enabled bearer <udp:syz2>, priority 10
[   93.236987][ T9477] netlink: 340 bytes leftover after parsing attributes in process `syz.6.1651'.
[   93.302833][ T9481] loop7: detected capacity change from 0 to 1024
[   93.322410][ T9481] ext4 filesystem being mounted at /196/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   93.326541][ T9481] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[   93.351149][ T9481] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 11 with error 28
[   93.351229][ T9481] EXT4-fs (loop7): This should not happen!! Data will be lost
[   93.351229][ T9481] 
[   93.351241][ T9481] EXT4-fs (loop7): Total free blocks count 0
[   93.351253][ T9481] EXT4-fs (loop7): Free/Dirty block details
[   93.351264][ T9481] EXT4-fs (loop7): free_blocks=4293918720
[   93.351275][ T9481] EXT4-fs (loop7): dirty_blocks=48
[   93.351286][ T9481] EXT4-fs (loop7): Block reservation details
[   93.351376][ T9481] EXT4-fs (loop7): i_reserved_data_blocks=3
[   93.381021][ T4912] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 48 with max blocks 17 with error 28
[   93.431615][ T4912] EXT4-fs (loop7): This should not happen!! Data will be lost
[   93.431615][ T4912] 
[   94.075183][ T9530] loop6: detected capacity change from 0 to 2048
[   94.228080][ T6745] tipc: Node number set to 2886997007
[   94.327949][ T9549] syzkaller1: entered promiscuous mode
[   94.327967][ T9549] syzkaller1: entered allmulticast mode
[   94.384856][ T9543] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   94.411542][ T9543] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[   94.411648][ T9543] EXT4-fs (loop6): This should not happen!! Data will be lost
[   94.411648][ T9543] 
[   94.411662][ T9543] EXT4-fs (loop6): Total free blocks count 0
[   94.411674][ T9543] EXT4-fs (loop6): Free/Dirty block details
[   94.411685][ T9543] EXT4-fs (loop6): free_blocks=2415919104
[   94.411699][ T9543] EXT4-fs (loop6): dirty_blocks=8208
[   94.411710][ T9543] EXT4-fs (loop6): Block reservation details
[   94.411721][ T9543] EXT4-fs (loop6): i_reserved_data_blocks=513
[   94.515969][ T5089] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28
[   94.516040][ T5089] EXT4-fs (loop6): This should not happen!! Data will be lost
[   94.516040][ T5089] 
[   94.685328][ T9573] loop6: detected capacity change from 0 to 1024
[   94.711477][ T9573] ext4 filesystem being mounted at /224/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   94.722351][ T9573] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[   94.724757][ T9573] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 11 with error 28
[   94.724785][ T9573] EXT4-fs (loop6): This should not happen!! Data will be lost
[   94.724785][ T9573] 
[   94.724797][ T9573] EXT4-fs (loop6): Total free blocks count 0
[   94.724879][ T9573] EXT4-fs (loop6): Free/Dirty block details
[   94.724892][ T9573] EXT4-fs (loop6): free_blocks=4293918720
[   94.724905][ T9573] EXT4-fs (loop6): dirty_blocks=48
[   94.724919][ T9573] EXT4-fs (loop6): Block reservation details
[   94.724931][ T9573] EXT4-fs (loop6): i_reserved_data_blocks=3
[   94.792891][ T5107] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 48 with max blocks 17 with error 28
[   94.792946][ T5107] EXT4-fs (loop6): This should not happen!! Data will be lost
[   94.792946][ T5107] 
[   94.888902][ T9583] loop7: detected capacity change from 0 to 2048
[   95.207913][ T9593] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   95.238110][ T9593] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[   95.250753][ T9593] EXT4-fs (loop7): This should not happen!! Data will be lost
[   95.250753][ T9593] 
[   95.260419][ T9593] EXT4-fs (loop7): Total free blocks count 0
[   95.266393][ T9593] EXT4-fs (loop7): Free/Dirty block details
[   95.272381][ T9593] EXT4-fs (loop7): free_blocks=2415919104
[   95.278143][ T9593] EXT4-fs (loop7): dirty_blocks=8208
[   95.283420][ T9593] EXT4-fs (loop7): Block reservation details
[   95.289425][ T9593] EXT4-fs (loop7): i_reserved_data_blocks=513
[   95.358728][ T9609] loop6: detected capacity change from 0 to 512
[   95.402583][ T9609] ext4 filesystem being mounted at /228/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   95.429868][ T5089] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28
[   95.442768][ T5089] EXT4-fs (loop7): This should not happen!! Data will be lost
[   95.442768][ T5089] 
[   95.488336][ T9617] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.595654][ T9617] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.659309][ T9617] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.759335][ T4912] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   95.776678][ T4912] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   95.776748][ T4912] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.793315][ T5107] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   96.209400][ T9661] loop7: detected capacity change from 0 to 128
[   96.209624][ T9661] EXT4-fs: Ignoring removed nobh option
[   96.227957][ T9661] EXT4-fs mount: 12 callbacks suppressed
[   96.228015][ T9661] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   96.247589][ T9661] ext4 filesystem being mounted at /211/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   96.384559][ T6116] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   96.609676][ T9684] -1: renamed from syzkaller0
[   96.628414][ T9685] syzkaller1: entered promiscuous mode
[   96.633919][ T9685] syzkaller1: entered allmulticast mode
[   96.841368][ T9717] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1752'.
[   96.904238][ T9722] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1755'.
[   96.939845][ T9733] loop6: detected capacity change from 0 to 512
[   96.948267][ T9733] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   97.289560][ T9733] ==================================================================
[   97.297665][ T9733] BUG: KCSAN: data-race in __writeback_single_inode / generic_buffers_fsync_noflush
[   97.307024][ T9733] 
[   97.309337][ T9733] read-write to 0xffff888119d44ea8 of 4 bytes by task 9742 on cpu 1:
[   97.317400][ T9733]  __writeback_single_inode+0x1e3/0x7c0
[   97.322959][ T9733]  writeback_single_inode+0x167/0x3e0
[   97.328336][ T9733]  sync_inode_metadata+0x5b/0x90
[   97.333276][ T9733]  generic_buffers_fsync_noflush+0xd9/0x120
[   97.339166][ T9733]  ext4_sync_file+0x1ab/0x690
[   97.343861][ T9733]  vfs_fsync_range+0x10a/0x130
[   97.348639][ T9733]  ext4_buffered_write_iter+0x34f/0x3c0
[   97.354191][ T9733]  ext4_file_write_iter+0xdbf/0xf00
[   97.359394][ T9733]  iter_file_splice_write+0x5f2/0x970
[   97.364780][ T9733]  direct_splice_actor+0x156/0x2a0
[   97.369907][ T9733]  splice_direct_to_actor+0x312/0x680
[   97.375290][ T9733]  do_splice_direct+0xda/0x150
[   97.380062][ T9733]  do_sendfile+0x380/0x650
[   97.384484][ T9733]  __x64_sys_sendfile64+0x105/0x150
[   97.389694][ T9733]  x64_sys_call+0x2bb0/0x2ff0
[   97.394377][ T9733]  do_syscall_64+0xd2/0x200
[   97.398893][ T9733]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   97.404778][ T9733] 
[   97.407180][ T9733] read to 0xffff888119d44ea8 of 4 bytes by task 9733 on cpu 0:
[   97.414718][ T9733]  generic_buffers_fsync_noflush+0x80/0x120
[   97.420617][ T9733]  ext4_sync_file+0x1ab/0x690
[   97.425304][ T9733]  vfs_fsync_range+0x10a/0x130
[   97.430067][ T9733]  ext4_buffered_write_iter+0x34f/0x3c0
[   97.435628][ T9733]  ext4_file_write_iter+0xdbf/0xf00
[   97.440828][ T9733]  iter_file_splice_write+0x5f2/0x970
[   97.446213][ T9733]  direct_splice_actor+0x156/0x2a0
[   97.451331][ T9733]  splice_direct_to_actor+0x312/0x680
[   97.456713][ T9733]  do_splice_direct+0xda/0x150
[   97.461491][ T9733]  do_sendfile+0x380/0x650
[   97.465912][ T9733]  __x64_sys_sendfile64+0x105/0x150
[   97.471120][ T9733]  x64_sys_call+0x2bb0/0x2ff0
[   97.475789][ T9733]  do_syscall_64+0xd2/0x200
[   97.480296][ T9733]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   97.486190][ T9733] 
[   97.488498][ T9733] value changed: 0x00000022 -> 0x00000000
[   97.494207][ T9733] 
[   97.496523][ T9733] Reported by Kernel Concurrency Sanitizer on:
[   97.502676][ T9733] CPU: 0 UID: 0 PID: 9733 Comm: syz.6.1759 Tainted: G        W           6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(voluntary) 
[   97.516310][ T9733] Tainted: [W]=WARN
[   97.520104][ T9733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   97.530157][ T9733] ==================================================================
[   97.796209][ T5989] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.