last executing test programs:

3.661094298s ago: executing program 0 (id=245):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r1 = epoll_create1(0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r2, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0x10007ffffffff}, 0x18)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x20000002})

3.547941529s ago: executing program 0 (id=250):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x5464fadc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x9, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
getpid()
gettid()
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
openat$nci(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)

3.423141122s ago: executing program 0 (id=255):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
prlimit64(0x0, 0xe, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000f0000000000000c0000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10)
unshare(0x64000600)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000780)=@newlink={0x44, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4982, 0x50080}, [@IFLA_LINKINFO={0x1c, 0x37, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_ACTIVE={0x5, 0x1d, 0x6}]}}}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000c10}, 0x8000)
r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
writev(r6, &(0x7f0000000040)=[{&(0x7f0000000240)='4', 0x1}], 0x1)

2.846489099s ago: executing program 4 (id=262):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="2e0000001000818807b62aa73f72cc9f0ba1f8483a0000005e120602000300000e000a0010000000028000001294", 0x2e}], 0x1}, 0x20008800)

2.584097264s ago: executing program 4 (id=264):
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r0}, 0x18)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000340)={[{@errors_remount}, {@nodioread_nolock}]}, 0x1, 0x512, &(0x7f0000000380)="$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")

2.067985076s ago: executing program 4 (id=269):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES64, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020100008500000043000000951cd60c8e0ee19dce5aff969fa4dc20ce29e67adb1ac76de079ee3c98ed22cf1ec761dcb1e0bfdfcc126779e0ec62f56e08eeca740343f9076b7bb7eb2907a371525bb8b9f66868d50db4fdfe1df35d43ef48c40bfb35ebfc87b7b45ef0442a826bcbf3827a728af79c9c5b112d4799bbdecde08523515ecafba270cddb7c3883f2eed79239f98d8e44893dcfa881ec367164d8348e3d300e55165d89892ce944b7c8cfd4309ab3abf1e5a45b5a6b522439db266aad"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x10)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
socket$nl_netfilter(0x10, 0x3, 0xc)
faccessat2(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x2, 0x1000)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_tables_matches\x00')
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000001c0), 0x1, 0x5d8, &(0x7f0000000c00)="$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")
r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0)
write(r5, &(0x7f0000004200)='t', 0x1)
sendfile(r5, r4, 0x0, 0x3ffff)
bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a300000000070000000060a010400000000000000000100000048000480240001800b00010072656a65637400001400028008000140000000000500020000000000200001800700010072740000140002800800014000000009080002400000000008000b40000000000900010073797a300000000014000000110001"], 0xf8}, 0x1, 0x0, 0x0, 0x2040441}, 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2008896, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000bb7641c7cb9447f282f902abdadfe7dea09a116ca6d72ba1cb212b96113c6c82d707"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000180)='mem_connect\x00', r8}, 0x18)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000280)={'pimreg\x00', 0x5dcf70ef8daa5d0e})

1.462600025s ago: executing program 1 (id=280):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x18)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000340)={[{@errors_remount}, {@nodioread_nolock}]}, 0x1, 0x512, &(0x7f0000000380)="$eJzs3d9rY1kdAPDvvW1mOzNdk1WRdcF1cVc6i07Sbt3dIqLriz4tqOv7WNu0lCZNadJ1Whbt4H8ggoJPPvki+AcIwzz4B8jAgL6ID6KiiM7og6DOlSQ3TidN2rrTNp3m84HTnHPvzf2ec0NO7o/TewMYWy9FxFsRMRERr0ZEMZ+e5in2uqm93IP77y21UxJZ9s5fk0jyab11tdcxGRFX87dNRcTXvhzxzeRg3ObO7vpirVbdysuVVn2z0tzZvb5WX1ytrlY35ufn3lh4c+H1hdks90TtLPUyP/nS529/+lu/u/Hna99uV+tzH4lC9LXjJHWbXuhsi572Nto6jWAj0PvMC6OuCAAAx9Lex/9gRHyis/9fjInO3lyfiVHUDAAAADgp2Rem499JRAYAAABcWGlETEeSlvOxANORppfycwMfjitprdFsfWqlsb2x3J4XUYpCurJWq87mY4VLUUja5bl8jG2v/FpfeT4inouI7xcvd8rlpUZtecTnPgAAAGBcXO07/v9HMe3kjzbg/wQAAACA86s0tAAAAABcFA75AQAA4OLrP/6/PaJ6AAAAAKfiK2+/3U5Z7/nXy+/ubK833r2+XG2ul+vbS+WlxtZmebXRWO3cs69+1PpqjcbmZ2Jj+2alVW22Ks2d3Rv1xvZG68baY4/ABgAAAM7Qcx+/8+skIvY+e7mTIr8PIMBj/jDqCgAnaWLUFQBGxl28YXwVRl0BYOSSI+YbvAMAAE+/mY8evP7fe/6/cwNwsRnrAwDjx/V/GF8FIwBhrKUR8YFu9plhywy9/v/L40bJsoi7xf1TnF8EAICzNd1JSVrOjwOmI03L5YhnI9JSFJKVtVp1Nj8++FWx8Ey7PNd5Z3LkmGEAAAAAAAAAAAAAAAAAAAAAAAAAoCvLksgAAACACy0i/VPSuZt/xEzxlen+8wOXkn8W44954Ufv/ODmYqu1Ndee/rfOs7wuRUTrh/n014Y+PgwAAAA4acne0Fnd4/T8de5MawUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAGHhw/72lXjrLuH/5YkSUBsWfjKnO61QUIuLK35OY3Pe+JCImTiD+3q2IeH5Q/CQeZllWymvRHz+NiMunHL/U2TTD4189gfgwzu60+5+3Bn3/0nip8zr4+zeZpyc1vP9L88jPd/q5Qf3fswfWVh8Y44V7P6sMjX8r4oXJwf1Pr/9NhsR/+cDa/pVl2cEY3/j67u6w+NmPI2YG/v4kj8WqtOqblebO7vW1+uJqdbW6MT8/98bCmwuvL8xWVtZq1fzvwBjf+9jPHx7W/isD4v/2N93+97D2vzJspX3+c+/m/Q91s4VB8a+9PPD3dyqGxE/z375P5vn2/Jlefq+b3+/Fn9598bD2Lw/Z/kd9/teO2f5Xv/rd3x9zUQDgDDR3dtcXa7Xq1iGZqWMs8zRmfjF1Lqrxf2ay73Q/ufNSn/ebae+tPprSa9U5qNi+THZmsSbinDT5f5mRdksAAMApeLTTP+qaAAAAAAAAAAAAAAAAAAAAwPg6i9uJ9cfcG01TAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO9d8AAAD//yLg4A8=")

1.166949125s ago: executing program 4 (id=281):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0xe, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, [@alu={0x7, 0x0, 0xc, 0xa, 0x0, 0x98, 0xffffffffffffffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x1, 0x0, 0x6, 0x2, 0x0, 0xfffffffffffffff0, 0x10}, @map_fd={0x18, 0x8, 0x1, 0x0, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x423}]}, &(0x7f00000002c0)='GPL\x00', 0x7, 0xcf, &(0x7f0000000680)=""/207, 0x40f00, 0x62, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000480)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000580)=[{0x4, 0x3, 0x2, 0x9}], 0x10, 0xb}, 0x94)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000500008d"], 0x0, 0x4e, 0x0, 0x1, 0x8}, 0x28)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
getpid()
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080)={[{@nobh}, {@auto_da_alloc}, {@data_err_ignore}]}, 0x3, 0x4cd, &(0x7f0000000c80)="$eJzs3M9vFGUfAPDvbHdpgZfXioiCKAU0Nia2UFA4eMHExIMmRjzIsWkrQRYwtAchREpi8Ezi3Xg03jTxqkfjyT8ADx5MDAkxXABPa2Z3pt3ur+7CtqXs55Ns+zwzz8zzPDPzzD77PDsbwMAaS/8kEf+LiFsR8VQtujLBWO3f/btXZx7cvToTi5XKqX+Sarp7aTyTb7c9i4wXIgpfJg07rJm/fOXcdLk8dymLTy6c/2xy/vKV18+enz4zd2buwtSJE8eOHjn+5tQbvVeqRX5pve7t/eLivj3vnr75/kwxXz6S/a+vR1vF3oox1mHdK73t6rG3oy6cNB+na+taGLo2kl3WpbT9Xy0fPL3RBQLWTaVSqQy3X71YaXS9aQmwaSWx0SUANkb+Rp9+/s1f69T1eCzcOVn7AJTW+372qq0pRiFLU2r4fNtPYxHx8eK/36Sv6DQO8ecaFQAAGDi/nMx7go39v0Lsrkv3/2wOZTQino6InRHxTETsiohnI6ppn4uI5xszSCIqHfLf1RBfzv/HbBahcPuRK9lB2v97K5vbWtn/y3t/MTqUxXZE5B3mucPZMRmP0vAnZ8tzR9rsf8sq+df3/9JXmn/eF8zKcbvYMEA3O70w/XC1bXbnesTeYmP9k2J64vJpnCQi9kTE3h72O1oXPvvad/uWIqWV6Vavf1WlxZRez/NxrVS+jXi1dv4XY8X5X84x6Tw/OTkS5bnDk+lVcLhlHr/9fuODdvmvWv+f/mrc5J3jP5961GovSc//trrrP/L52+X6jyYRydJ87XxEZai3PG788VV1v2OHmtc97PW/JfmoGs7b1+fTCwuXjkRsSd5rXj61vG0ez9On9R8/1Lr978y2SY/ECxGRXsQvRsRLEbE/K/uBiDgYES2qtuTXt1/+tN26Lq//NZPWf7bl/W/F+V+er+8ykG+cLhk6d+DWgzY3j+7O/7FqaDxb0vr+l6y4RXRb0kc7egAAALA5FKL63f/CxFK4UJiYqI0B7YpthfLF+YX9EXFhtvaMwGiUCvlIV208uJTk45+jdfGphvjRbNz466Gt1fjEzMXy7EZXHgbc9mqbT5raf+rvHsd5gU2oD/NowCa1WvvffXOdCgKsO+//MLjq2v9imySLvikDTybv/zC4WrX/a/F9x2cX3DNg86toyzDQtH8YXMX4cClcfey55dO2wJPI+z8MpF6f6+8tUBluvWokWvxiwMjaFGNri7w2JJD2rPq4w1JEdJd468NkkXcB2//CQ6G3HQ5H86qh6LRV0sPvOOSB9KismvjM7r5f/PlvovT7svlhuZ2WujzdfQpsyO0IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg7/4LAAD///QJ1ng=")

1.039703817s ago: executing program 4 (id=283):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x5464fadc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x9, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
getpid()
r0 = gettid()
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$nci(r3, 0x0, 0xfffffeea)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYRES64=r3, @ANYRES64], 0x48)
socket$inet6(0xa, 0x3, 0xffffff1a)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]})
connect$inet(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
pipe(&(0x7f0000000400))

1.036517677s ago: executing program 1 (id=284):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x9}, 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
write$evdev(r2, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffffffffffff001}, 0x18)
syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000540)='./file1\x00', 0x0, &(0x7f0000000580), 0x1, 0x4db, &(0x7f00000005c0)="$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")
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2060, 0x0)
fsetxattr$trusted_overlay_redirect(r4, &(0x7f0000000040), 0x0, 0x0, 0x0)
fremovexattr(r4, &(0x7f00000000c0)=@known='trusted.overlay.redirect\x00')

933.476148ms ago: executing program 1 (id=286):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000bb00551a0000000000000000181200", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ec0)={&(0x7f0000000bc0)='kfree\x00', r1, 0x0, 0x5}, 0x18)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close_range(r3, 0xffffffffffffffff, 0x0)

922.428128ms ago: executing program 0 (id=287):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r1 = epoll_create1(0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r2, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0x10007ffffffff}, 0x18)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x20000002})

875.575873ms ago: executing program 3 (id=289):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="2e0000001000818807b62aa73f72cc9f0ba1f8483a0000005e120602000300000e000a0010000000028000001294", 0x2e}], 0x1}, 0x20008800)

860.923365ms ago: executing program 2 (id=290):
futex_waitv(&(0x7f0000001b00), 0x0, 0x0, 0x0, 0x1)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x2, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="00000000000057b6b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffaa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r3, &(0x7f0000000040)=ANY=[], 0x6)
r4 = socket$kcm(0x10, 0x2, 0x0)
r5 = socket$nl_sock_diag(0x10, 0x3, 0x4)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0x2, &(0x7f0000000040)=0x14, 0x4)
sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="2e0000001000818807b62aa73f72cc9f0ba1f8483a0000005e120602000300000e000a0010000000028000001294", 0x2e}], 0x1}, 0x20008800)

860.321605ms ago: executing program 1 (id=291):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x5464fadc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x9, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
getpid()
gettid()
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
openat$nci(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)

852.210696ms ago: executing program 0 (id=292):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES64, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020100008500000043000000951cd60c8e0ee19dce5aff969fa4dc20ce29e67adb1ac76de079ee3c98ed22cf1ec761dcb1e0bfdfcc126779e0ec62f56e08eeca740343f9076b7bb7eb2907a371525bb8b9f66868d50db4fdfe1df35d43ef48c40bfb35ebfc87b7b45ef0442a826bcbf3827a728af79c9c5b112d4799bbdecde08523515ecafba270cddb7c3883f2eed79239f98d8e44893dcfa881ec367164d8348e3d300e55165d89892ce944b7c8cfd4309ab3abf1e5a45b5a6b522439db266aad"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x10)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
socket$nl_netfilter(0x10, 0x3, 0xc)
faccessat2(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x2, 0x1000)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_tables_matches\x00')
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000001c0), 0x1, 0x5d8, &(0x7f0000000c00)="$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")
r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0)
write(r5, &(0x7f0000004200)='t', 0x1)
sendfile(r5, r4, 0x0, 0x3ffff)
bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a300000000070000000060a010400000000000000000100000048000480240001800b00010072656a65637400001400028008000140000000000500020000000000200001800700010072740000140002800800014000000009080002400000000008000b40000000000900010073797a300000000014000000110001"], 0xf8}, 0x1, 0x0, 0x0, 0x2040441}, 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2008896, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000bb7641c7cb9447f282f902abdadfe7dea09a116ca6d72ba1cb212b96113c6c82d707"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000180)='mem_connect\x00', r8}, 0x18)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000280)={'pimreg\x00', 0x5dcf70ef8daa5d0e})

819.124859ms ago: executing program 2 (id=293):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800"/15, @ANYRES64, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020100008500000043000000951cd60c8e0ee19dce5aff969fa4dc20ce29e67adb1ac76de079ee3c98ed22cf1ec761dcb1e0bfdfcc126779e0ec62f56e08eeca740343f9076b7bb7eb2907a371525bb8b9f66868d50db4fdfe1df35d43ef48c40bfb35ebfc87b7b45ef0442a826bcbf3827a728af79c9c5b112d4799bbdecde08523515ecafba270cddb7c3883f2eed79239f98d8e44893dcfa881ec367164d8348e3d300e55165d89892ce944b7c8cfd4309ab3abf1e5a45b5a6b522439db266aad"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x10)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
socket$nl_netfilter(0x10, 0x3, 0xc)
faccessat2(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x2, 0x1000)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000001c0), 0x1, 0x5d8, &(0x7f0000000c00)="$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")
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0)
write(r4, &(0x7f0000004200)='t', 0x1)
sendfile(r4, r3, 0x0, 0x3ffff)
socket$nl_netfilter(0x10, 0x3, 0xc)
mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2008896, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000180)='mem_connect\x00'}, 0x18)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'pimreg\x00', 0x5dcf70ef8daa5d0e})

769.075964ms ago: executing program 1 (id=294):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0xe, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, [@alu={0x7, 0x0, 0xc, 0xa, 0x0, 0x98, 0xffffffffffffffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x1, 0x0, 0x6, 0x2, 0x0, 0xfffffffffffffff0, 0x10}, @map_fd={0x18, 0x8, 0x1, 0x0, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x423}]}, &(0x7f00000002c0)='GPL\x00', 0x7, 0xcf, &(0x7f0000000680)=""/207, 0x40f00, 0x62, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000480)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000580)=[{0x4, 0x3, 0x2, 0x9}], 0x10, 0xb}, 0x94)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000500008d"], 0x0, 0x4e, 0x0, 0x1, 0x8}, 0x28)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
getpid()
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080)={[{@nobh}, {@auto_da_alloc}, {@data_err_ignore}]}, 0x3, 0x4cd, &(0x7f0000000c80)="$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")

763.739264ms ago: executing program 3 (id=295):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x18)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000340)={[{@errors_remount}, {@nodioread_nolock}]}, 0x1, 0x512, &(0x7f0000000380)="$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")

626.776078ms ago: executing program 1 (id=296):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES64, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020100008500000043000000951cd60c8e0ee19dce5aff969fa4dc20ce29e67adb1ac76de079ee3c98ed22cf1ec761dcb1e0bfdfcc126779e0ec62f56e08eeca740343f9076b7bb7eb2907a371525bb8b9f66868d50db4fdfe1df35d43ef48c40bfb35ebfc87b7b45ef0442a826bcbf3827a728af79c9c5b112d4799bbdecde08523515ecafba270cddb7c3883f2eed79239f98d8e44893dcfa881ec367164d8348e3d300e55165d89892ce944b7c8cfd4309ab3abf1e5a45b5a6b522439db266aad"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r0}, 0x10)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
socket$nl_netfilter(0x10, 0x3, 0xc)
faccessat2(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x2, 0x1000)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_tables_matches\x00')
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000001c0), 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=")
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0)
write(r4, &(0x7f0000004200)='t', 0x1)
sendfile(r4, r3, 0x0, 0x3ffff)
bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a300000000070000000060a010400000000000000000100000048000480240001800b00010072656a65637400001400028008000140000000000500020000000000200001800700010072740000140002800800014000000009080002400000000008000b40000000000900010073797a300000000014000000110001"], 0xf8}, 0x1, 0x0, 0x0, 0x2040441}, 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2008896, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000bb7641c7cb9447f282f902abdadfe7dea09a116ca6d72ba1cb212b96113c6c82d707669c2d111f20ad40"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000180)='mem_connect\x00', r7}, 0x18)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000280)={'pimreg\x00', 0x5dcf70ef8daa5d0e})

435.367557ms ago: executing program 3 (id=297):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x9}, 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
write$evdev(r2, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffffffffffff001}, 0x18)
syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000540)='./file1\x00', 0x0, &(0x7f0000000580), 0x1, 0x4db, &(0x7f00000005c0)="$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")
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2060, 0x0)
fsetxattr$trusted_overlay_redirect(r4, &(0x7f0000000040), 0x0, 0x0, 0x0)
fremovexattr(r4, &(0x7f00000000c0)=@known='trusted.overlay.redirect\x00')

398.12424ms ago: executing program 4 (id=298):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
prlimit64(0x0, 0xe, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000f0000000000000c0000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10)
unshare(0x64000600)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000780)=@newlink={0x44, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4982, 0x50080}, [@IFLA_LINKINFO={0x1c, 0x37, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_ACTIVE={0x5, 0x1d, 0x6}]}}}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000c10}, 0x8000)
r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
writev(r6, &(0x7f0000000040)=[{&(0x7f0000000240)='4', 0x1}], 0x1)

310.443949ms ago: executing program 3 (id=299):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18)
r2 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1)
sendto$inet6(r2, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]})
r3 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000240)={'batadv0\x00', <r4=>0x0})
sendto$packet(0xffffffffffffffff, &(0x7f0000000000)="00060800", 0x4, 0x0, &(0x7f0000000080)={0x11, 0x8100, r4}, 0x14)
socket$kcm(0x21, 0x1, 0x2)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
r6 = socket$unix(0x1, 0x1, 0x0)
r7 = socket$xdp(0x2c, 0x3, 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x8012, r7, 0x22b14000)
r8 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$bt_hci(r8, &(0x7f0000000000)={0x27}, 0x74)
sendmmsg$unix(r8, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0/file0\x00'}, 0x60, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0xfdef}, {0x0, 0x2c}], 0x2, 0x0, 0x0, 0x1}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)='z', 0xfdef}], 0x1}}], 0x3, 0x0)
setsockopt$SO_TIMESTAMP(r6, 0x1, 0x23, &(0x7f0000000080)=0x3, 0x4)
getsockopt$SO_TIMESTAMP(r6, 0x1, 0x40, 0x0, &(0x7f0000000000))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10)
r9 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c095, 0x2, @perf_config_ext={0x9, 0x200006}, 0x0, 0x0, 0x800000, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
mount(0x0, 0x0, 0x0, 0x1000, 0x0)
perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$USBDEVFS_IOCTL(r9, 0x80045505, &(0x7f0000000040)=@usbdevfs_disconnect={0xffffffff})

238.451416ms ago: executing program 2 (id=300):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006000000"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f0000000340), 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000500)={'dummy0\x00', <r4=>0x0})
setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000040)={0x2, 0x0, 0x10, r4, 0x80000001}, 0xc)
setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4)

211.661949ms ago: executing program 2 (id=301):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18)
r2 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1)
sendto$inet6(r2, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]})
r3 = socket(0x10, 0x3, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000240)={'batadv0\x00', <r5=>0x0})
sendto$packet(r4, &(0x7f0000000000)="00060800", 0x4, 0x0, &(0x7f0000000080)={0x11, 0x8100, r5}, 0x14)
socket$kcm(0x21, 0x1, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
r6 = socket$unix(0x1, 0x1, 0x0)
r7 = socket$xdp(0x2c, 0x3, 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x8012, r7, 0x22b14000)
r8 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$bt_hci(r8, &(0x7f0000000000)={0x27}, 0x74)
sendmmsg$unix(r8, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0/file0\x00'}, 0x60, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0xfdef}, {0x0, 0x2c}], 0x2, 0x0, 0x0, 0x1}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)='z', 0xfdef}], 0x1}}], 0x3, 0x0)
setsockopt$SO_TIMESTAMP(r6, 0x1, 0x23, &(0x7f0000000080)=0x3, 0x4)
getsockopt$SO_TIMESTAMP(r6, 0x1, 0x40, 0x0, &(0x7f0000000000))
syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301)
perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

165.976733ms ago: executing program 3 (id=302):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ec0)={&(0x7f0000000bc0)='kfree\x00', r1, 0x0, 0x5}, 0x18)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close_range(r3, 0xffffffffffffffff, 0x0)

148.667545ms ago: executing program 2 (id=303):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r1 = epoll_create1(0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r2, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0x10007ffffffff}, 0x18)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x20000002})

124.521117ms ago: executing program 2 (id=304):
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {<r0=>0xffffffffffffffff}}, './file0\x00'})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="8b332ebd30000000000015"], 0x28}}, 0x40000)
sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r2, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x34000845}, 0x400c004)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31}, 0x94)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="31832abd70000000000004000000180001801400020065727370616e30"], 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4886)
move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180), 0x3001, 0x0)
ioctl$RTC_UIE_OFF(r6, 0x7004)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10)
r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r7)
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb77, &(0x7f0000000c40)="$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")
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0)
r9 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCXONC(r9, 0x540a, 0x0)
ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000140)=0x13)
lseek(r8, 0x2000, 0x4)
ptrace$poke(0x1, r7, &(0x7f0000000040), 0x200000000000008)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x103, 0x3)
mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil)
add_key$fscrypt_v1(&(0x7f0000000140), &(0x7f0000000280)={'fscrypt:', @desc4}, &(0x7f00000003c0)={0x0, "f56d51a6069776470d17b2af185fec43c6de009ae1aaed4baedb6c2349e8fc7495ff52a0adb5ad881c54070ad41923e54218990ea3af290fe8a06ecc0741a8d6", 0x21}, 0x48, 0xfffffffffffffffa)

92.535761ms ago: executing program 3 (id=305):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b0000000700000008000000a6ad6a1a05"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRESOCT=r0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x3c}}, 0x0)
setregid(0x0, 0xffffffffffffffff)
r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x1f9}, &(0x7f0000000000)=<r4=>0x0, &(0x7f0000000300)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000003680)='sched_switch\x00', r6}, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r3, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x12345})
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002)
accept4$unix(r2, 0x0, &(0x7f0000000240), 0x0)
io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="5c0100001000130780fffffffcdbdf252001000000000000000000000000000020010000000000000000000000000001000000004e210002000000006c000000", @ANYRES32=0x0, @ANYBLOB="fc010000000000000000000000000000000000fe32000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000090000000000000001000000ffffffff0000000000000000010000800000000043050000000000000400000000000000ffffffffffffff7f000000000000000001000000000000000000000000000000000000002cbd7000003500000a000000500000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000060000000210466d38547aa140db9a200000000c538c7cb7a0c001c00", @ANYRESOCT], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2000)

0s ago: executing program 0 (id=306):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.90' (ED25519) to the list of known hosts.
[   36.168691][   T29] audit: type=1400 audit(1760794623.827:62): avc:  denied  { mounton } for  pid=3303 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   36.191694][   T29] audit: type=1400 audit(1760794623.847:63): avc:  denied  { mount } for  pid=3303 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   36.199225][ T3303] cgroup: Unknown subsys name 'net'
[   36.219559][   T29] audit: type=1400 audit(1760794623.877:64): avc:  denied  { unmount } for  pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   36.358654][ T3303] cgroup: Unknown subsys name 'cpuset'
[   36.364920][ T3303] cgroup: Unknown subsys name 'rlimit'
[   36.478054][   T29] audit: type=1400 audit(1760794624.127:65): avc:  denied  { setattr } for  pid=3303 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   36.501457][   T29] audit: type=1400 audit(1760794624.137:66): avc:  denied  { create } for  pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   36.521985][   T29] audit: type=1400 audit(1760794624.137:67): avc:  denied  { write } for  pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   36.533833][ T3307] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   36.542419][   T29] audit: type=1400 audit(1760794624.137:68): avc:  denied  { read } for  pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[   36.571367][   T29] audit: type=1400 audit(1760794624.147:69): avc:  denied  { mounton } for  pid=3303 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   36.588676][ T3303] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   36.596227][   T29] audit: type=1400 audit(1760794624.147:70): avc:  denied  { mount } for  pid=3303 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   36.628388][   T29] audit: type=1400 audit(1760794624.207:71): avc:  denied  { relabelto } for  pid=3307 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   38.454072][ T3314] chnl_net:caif_netlink_parms(): no params data found
[   38.493677][ T3319] chnl_net:caif_netlink_parms(): no params data found
[   38.540177][ T3313] chnl_net:caif_netlink_parms(): no params data found
[   38.576545][ T3315] chnl_net:caif_netlink_parms(): no params data found
[   38.609706][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.616790][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.623986][ T3314] bridge_slave_0: entered allmulticast mode
[   38.630441][ T3314] bridge_slave_0: entered promiscuous mode
[   38.655858][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.662995][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.670203][ T3314] bridge_slave_1: entered allmulticast mode
[   38.676741][ T3314] bridge_slave_1: entered promiscuous mode
[   38.712835][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.719967][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.727232][ T3319] bridge_slave_0: entered allmulticast mode
[   38.733938][ T3319] bridge_slave_0: entered promiscuous mode
[   38.740487][ T3320] chnl_net:caif_netlink_parms(): no params data found
[   38.761890][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.769036][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.776228][ T3319] bridge_slave_1: entered allmulticast mode
[   38.782747][ T3319] bridge_slave_1: entered promiscuous mode
[   38.792989][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   38.805551][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   38.814759][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.821984][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.829215][ T3313] bridge_slave_0: entered allmulticast mode
[   38.835790][ T3313] bridge_slave_0: entered promiscuous mode
[   38.860912][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.868032][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.875284][ T3313] bridge_slave_1: entered allmulticast mode
[   38.881836][ T3313] bridge_slave_1: entered promiscuous mode
[   38.909284][ T3314] team0: Port device team_slave_0 added
[   38.915855][ T3314] team0: Port device team_slave_1 added
[   38.927146][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   38.938867][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.946086][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.953393][ T3315] bridge_slave_0: entered allmulticast mode
[   38.959867][ T3315] bridge_slave_0: entered promiscuous mode
[   38.978763][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   38.990505][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.997660][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state
[   39.005234][ T3315] bridge_slave_1: entered allmulticast mode
[   39.011811][ T3315] bridge_slave_1: entered promiscuous mode
[   39.023934][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   39.033248][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0
[   39.040244][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   39.066356][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   39.094095][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   39.108563][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1
[   39.115633][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   39.141650][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   39.168276][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   39.180615][ T3319] team0: Port device team_slave_0 added
[   39.187165][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state
[   39.194302][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state
[   39.201514][ T3320] bridge_slave_0: entered allmulticast mode
[   39.208141][ T3320] bridge_slave_0: entered promiscuous mode
[   39.220672][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   39.230519][ T3313] team0: Port device team_slave_0 added
[   39.237497][ T3313] team0: Port device team_slave_1 added
[   39.244030][ T3319] team0: Port device team_slave_1 added
[   39.249986][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state
[   39.257125][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state
[   39.264339][ T3320] bridge_slave_1: entered allmulticast mode
[   39.270752][ T3320] bridge_slave_1: entered promiscuous mode
[   39.312667][ T3315] team0: Port device team_slave_0 added
[   39.333626][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0
[   39.340630][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   39.366611][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   39.378191][ T3315] team0: Port device team_slave_1 added
[   39.386204][ T3314] hsr_slave_0: entered promiscuous mode
[   39.392372][ T3314] hsr_slave_1: entered promiscuous mode
[   39.398750][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0
[   39.405706][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   39.431773][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   39.444192][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   39.459198][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1
[   39.466222][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   39.492171][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   39.513500][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1
[   39.520527][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   39.546488][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   39.558567][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   39.580113][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0
[   39.587134][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   39.613184][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   39.624688][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1
[   39.631682][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   39.657692][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   39.703632][ T3319] hsr_slave_0: entered promiscuous mode
[   39.709698][ T3319] hsr_slave_1: entered promiscuous mode
[   39.715596][ T3319] debugfs: 'hsr0' already exists in 'hsr'
[   39.721441][ T3319] Cannot create hsr debugfs directory
[   39.732774][ T3320] team0: Port device team_slave_0 added
[   39.740058][ T3320] team0: Port device team_slave_1 added
[   39.753517][ T3313] hsr_slave_0: entered promiscuous mode
[   39.759661][ T3313] hsr_slave_1: entered promiscuous mode
[   39.765542][ T3313] debugfs: 'hsr0' already exists in 'hsr'
[   39.771338][ T3313] Cannot create hsr debugfs directory
[   39.820167][ T3315] hsr_slave_0: entered promiscuous mode
[   39.826295][ T3315] hsr_slave_1: entered promiscuous mode
[   39.832287][ T3315] debugfs: 'hsr0' already exists in 'hsr'
[   39.838049][ T3315] Cannot create hsr debugfs directory
[   39.843706][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0
[   39.850696][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   39.876658][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   39.890544][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1
[   39.897548][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   39.923630][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   40.025632][ T3320] hsr_slave_0: entered promiscuous mode
[   40.031738][ T3320] hsr_slave_1: entered promiscuous mode
[   40.037561][ T3320] debugfs: 'hsr0' already exists in 'hsr'
[   40.043331][ T3320] Cannot create hsr debugfs directory
[   40.129589][ T3314] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   40.138273][ T3314] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   40.157626][ T3314] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   40.171688][ T3314] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   40.209154][ T3319] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   40.219750][ T3319] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   40.234532][ T3319] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   40.249343][ T3319] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   40.258534][ T3315] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   40.271223][ T3315] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   40.284262][ T3315] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   40.293884][ T3315] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   40.320427][ T3320] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   40.338518][ T3320] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   40.353895][ T3320] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   40.363730][ T3320] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   40.389342][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0
[   40.403354][ T3313] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   40.413360][ T3313] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   40.422930][ T3313] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   40.432155][ T3313] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   40.466738][ T3314] 8021q: adding VLAN 0 to HW filter on device team0
[   40.487373][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   40.494717][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   40.507160][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0
[   40.520944][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   40.528074][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   40.557630][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0
[   40.566059][ T3319] 8021q: adding VLAN 0 to HW filter on device team0
[   40.581438][  T296] bridge0: port 1(bridge_slave_0) entered blocking state
[   40.588552][  T296] bridge0: port 1(bridge_slave_0) entered forwarding state
[   40.597468][  T296] bridge0: port 2(bridge_slave_1) entered blocking state
[   40.604679][  T296] bridge0: port 2(bridge_slave_1) entered forwarding state
[   40.646264][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0
[   40.661022][ T3315] 8021q: adding VLAN 0 to HW filter on device team0
[   40.686270][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0
[   40.694711][  T296] bridge0: port 1(bridge_slave_0) entered blocking state
[   40.701888][  T296] bridge0: port 1(bridge_slave_0) entered forwarding state
[   40.717860][ T1860] bridge0: port 2(bridge_slave_1) entered blocking state
[   40.724987][ T1860] bridge0: port 2(bridge_slave_1) entered forwarding state
[   40.734755][ T3320] 8021q: adding VLAN 0 to HW filter on device team0
[   40.754179][ T3313] 8021q: adding VLAN 0 to HW filter on device team0
[   40.771269][ T1860] bridge0: port 1(bridge_slave_0) entered blocking state
[   40.778422][ T1860] bridge0: port 1(bridge_slave_0) entered forwarding state
[   40.787518][ T1860] bridge0: port 2(bridge_slave_1) entered blocking state
[   40.794728][ T1860] bridge0: port 2(bridge_slave_1) entered forwarding state
[   40.815614][ T1860] bridge0: port 1(bridge_slave_0) entered blocking state
[   40.822724][ T1860] bridge0: port 1(bridge_slave_0) entered forwarding state
[   40.841713][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0
[   40.862268][ T3320] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   40.872761][ T3320] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   40.889152][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0
[   40.911120][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   40.918253][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   40.963832][ T3313] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   40.995735][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0
[   41.005026][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0
[   41.107741][ T3319] veth0_vlan: entered promiscuous mode
[   41.125585][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0
[   41.166724][ T3319] veth1_vlan: entered promiscuous mode
[   41.196947][ T3320] veth0_vlan: entered promiscuous mode
[   41.214967][ T3319] veth0_macvtap: entered promiscuous mode
[   41.226747][ T3320] veth1_vlan: entered promiscuous mode
[   41.242947][ T3319] veth1_macvtap: entered promiscuous mode
[   41.255580][ T3314] veth0_vlan: entered promiscuous mode
[   41.264282][ T3314] veth1_vlan: entered promiscuous mode
[   41.277711][ T3313] veth0_vlan: entered promiscuous mode
[   41.297718][ T3315] veth0_vlan: entered promiscuous mode
[   41.304796][ T3313] veth1_vlan: entered promiscuous mode
[   41.316052][ T3320] veth0_macvtap: entered promiscuous mode
[   41.323633][ T3320] veth1_macvtap: entered promiscuous mode
[   41.334245][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0
[   41.345226][ T3315] veth1_vlan: entered promiscuous mode
[   41.358707][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1
[   41.366690][ T3314] veth0_macvtap: entered promiscuous mode
[   41.374203][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0
[   41.394837][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1
[   41.402499][ T3314] veth1_macvtap: entered promiscuous mode
[   41.413948][ T3313] veth0_macvtap: entered promiscuous mode
[   41.420851][   T37] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   41.437676][  T296] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   41.447495][ T3313] veth1_macvtap: entered promiscuous mode
[   41.461379][   T29] kauditd_printk_skb: 9 callbacks suppressed
[   41.461396][   T29] audit: type=1400 audit(1760794629.117:81): avc:  denied  { mounton } for  pid=3319 comm="syz-executor" path="/root/syzkaller.QGWO20/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[   41.497516][   T29] audit: type=1400 audit(1760794629.147:82): avc:  denied  { mount } for  pid=3319 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   41.519526][   T29] audit: type=1400 audit(1760794629.147:83): avc:  denied  { mounton } for  pid=3319 comm="syz-executor" path="/root/syzkaller.QGWO20/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   41.544757][   T29] audit: type=1400 audit(1760794629.147:84): avc:  denied  { mount } for  pid=3319 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   41.566537][   T29] audit: type=1400 audit(1760794629.147:85): avc:  denied  { mounton } for  pid=3319 comm="syz-executor" path="/root/syzkaller.QGWO20/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   41.593161][   T29] audit: type=1400 audit(1760794629.147:86): avc:  denied  { mounton } for  pid=3319 comm="syz-executor" path="/root/syzkaller.QGWO20/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4587 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[   41.620600][   T29] audit: type=1400 audit(1760794629.147:87): avc:  denied  { unmount } for  pid=3319 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   41.641259][   T29] audit: type=1400 audit(1760794629.147:88): avc:  denied  { mounton } for  pid=3319 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[   41.644427][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0
[   41.664398][   T29] audit: type=1400 audit(1760794629.147:89): avc:  denied  { mount } for  pid=3319 comm="syz-executor" name="/" dev="gadgetfs" ino=3968 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[   41.677411][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1
[   41.701932][  T296] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   41.711012][  T296] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   41.720667][ T3315] veth0_macvtap: entered promiscuous mode
[   41.730880][ T3319] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   41.750385][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0
[   41.758298][ T3315] veth1_macvtap: entered promiscuous mode
[   41.766176][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1
[   41.783602][   T29] audit: type=1400 audit(1760794629.437:90): avc:  denied  { read write } for  pid=3319 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   41.808653][ T3483] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3'.
[   41.824583][  T296] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   41.836224][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0
[   41.853271][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1
[   41.872137][  T296] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   41.899708][  T296] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   41.933494][  T296] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   41.957454][  T296] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   41.993814][  T296] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   42.005260][    C1] hrtimer: interrupt took 56316 ns
[   42.026445][ T3483] loop2: detected capacity change from 0 to 4096
[   42.042397][  T296] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   42.073699][  T296] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   42.083377][ T3483] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   42.097757][ T3488] loop4: detected capacity change from 0 to 128
[   42.106002][  T296] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   42.127081][  T296] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   42.144296][  T296] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   42.154016][ T3496] loop1: detected capacity change from 0 to 128
[   42.169071][  T296] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   42.177858][  T296] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   42.188140][  T296] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   42.188733][  T296] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   42.189060][  T296] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   42.292760][ T3488] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100)
[   42.293128][ T3488] FAT-fs (loop4): Filesystem has been set read-only
[   42.295009][ T3488] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100)
[   42.297339][ T3488] syz.4.5: attempt to access beyond end of device
[   42.297339][ T3488] loop4: rw=2049, sector=2065, nr_sectors = 8 limit=128
[   42.300201][ T3505] netlink: 'syz.3.7': attribute type 27 has an invalid length.
[   42.316666][ T3505] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   42.363108][ T3496] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100)
[   42.363152][ T3496] FAT-fs (loop1): Filesystem has been set read-only
[   42.363860][ T3496] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100)
[   42.364889][ T3496] syz.1.2: attempt to access beyond end of device
[   42.364889][ T3496] loop1: rw=2049, sector=2065, nr_sectors = 8 limit=128
[   42.369433][ T3507] loop0: detected capacity change from 0 to 512
[   42.390155][ T3512] loop3: detected capacity change from 0 to 512
[   42.394023][ T3507] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   42.417251][ T3512] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   42.427736][ T3507] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   42.450137][ T3512] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   42.549088][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.566419][ T3512] capability: warning: `syz.3.8' uses 32-bit capabilities (legacy support in use)
[   42.622821][ T3517] loop1: detected capacity change from 0 to 128
[   42.693917][ T3517] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100)
[   42.703830][ T3517] FAT-fs (loop1): Filesystem has been set read-only
[   42.712644][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.717989][ T3517] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100)
[   42.734790][ T3517] syz.1.10: attempt to access beyond end of device
[   42.734790][ T3517] loop1: rw=2049, sector=2065, nr_sectors = 8 limit=128
[   42.779154][ T3524] loop4: detected capacity change from 0 to 1024
[   42.811139][ T3524] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   42.850285][ T3523] loop2: detected capacity change from 0 to 1024
[   42.858000][ T3527] loop0: detected capacity change from 0 to 1024
[   42.878198][ T3523] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   42.896496][ T3527] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   43.016460][ T3532] loop1: detected capacity change from 0 to 1024
[   43.040892][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.083536][ T3532] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   43.188537][ T3540] loop0: detected capacity change from 0 to 512
[   43.247020][ T3540] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   43.298136][ T3540] EXT4-fs (loop0): revision level too high, forcing read-only mode
[   43.316419][ T3540] EXT4-fs (loop0): orphan cleanup on readonly fs
[   43.324606][ T3540] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.14: corrupted inode contents
[   43.338074][ T3540] EXT4-fs (loop0): Remounting filesystem read-only
[   43.344849][ T3540] EXT4-fs (loop0): 1 truncate cleaned up
[   43.359218][   T37] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   43.369864][   T37] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   43.465433][   T37] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started
[   43.497483][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.508637][ T3540] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   43.562590][ T3546] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15'.
[   43.585361][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.600103][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.603173][ T3546] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   43.616797][ T3546] batman_adv: batadv0: Removing interface: batadv_slave_0
[   43.653725][ T3546] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   43.661367][ T3546] batman_adv: batadv0: Removing interface: batadv_slave_1
[   43.852041][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.900750][ T3555] loop0: detected capacity change from 0 to 1024
[   43.916993][ T3557] loop1: detected capacity change from 0 to 512
[   43.968394][ T3557] EXT4-fs (loop1): revision level too high, forcing read-only mode
[   44.002429][ T3555] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   44.019275][ T3557] EXT4-fs (loop1): orphan cleanup on readonly fs
[   44.058974][ T3557] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm syz.1.19: corrupted inode contents
[   44.077626][ T3557] EXT4-fs (loop1): Remounting filesystem read-only
[   44.097689][ T3557] EXT4-fs (loop1): 1 truncate cleaned up
[   44.103798][ T1795] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   44.114353][ T1795] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   44.147414][ T1795] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started
[   44.168336][ T3557] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   44.208783][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.553295][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.597533][ T3566] loop1: detected capacity change from 0 to 1024
[   44.612549][ T3566] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   44.810831][ T3576] tipc: Started in network mode
[   44.815755][ T3576] tipc: Node identity 7ff, cluster identity 4711
[   44.822154][ T3576] tipc: Node number set to 2047
[   44.841134][ T3575] loop0: detected capacity change from 0 to 128
[   44.862001][ T3581] netlink: 'syz.2.25': attribute type 10 has an invalid length.
[   44.869940][ T3581] netlink: 40 bytes leftover after parsing attributes in process `syz.2.25'.
[   44.918484][ T3581] dummy0: entered promiscuous mode
[   44.923672][ T3581] dummy0: entered allmulticast mode
[   44.931943][ T3575] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100)
[   44.940664][ T3575] FAT-fs (loop0): Filesystem has been set read-only
[   44.949513][ T3581] bridge0: port 3(dummy0) entered blocking state
[   44.955908][ T3581] bridge0: port 3(dummy0) entered disabled state
[   44.963150][ T3575] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100)
[   44.974142][ T3581] bridge0: port 3(dummy0) entered blocking state
[   44.980572][ T3581] bridge0: port 3(dummy0) entered forwarding state
[   44.984286][ T3580] loop4: detected capacity change from 0 to 1024
[   44.991053][ T3575] syz.0.21: attempt to access beyond end of device
[   44.991053][ T3575] loop0: rw=2049, sector=2065, nr_sectors = 8 limit=128
[   45.009542][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.039266][ T3580] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   45.146051][ T3593] loop0: detected capacity change from 0 to 128
[   45.217934][ T3593] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100)
[   45.226546][ T3593] FAT-fs (loop0): Filesystem has been set read-only
[   45.247538][ T3593] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100)
[   45.267408][ T3593] syz.0.29: attempt to access beyond end of device
[   45.267408][ T3593] loop0: rw=2049, sector=2065, nr_sectors = 8 limit=128
[   45.356561][ T3605] loop2: detected capacity change from 0 to 8192
[   45.390156][ T3605]  loop2: p1 p2 < > p3 p4 < p5 >
[   45.395145][ T3605] loop2: partition table partially beyond EOD, truncated
[   45.405202][ T3608] netlink: 4 bytes leftover after parsing attributes in process `syz.0.31'.
[   45.414073][ T3608] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   45.415203][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.421547][ T3608] batman_adv: batadv0: Removing interface: batadv_slave_0
[   45.435834][ T3605] loop2: p1 size 100663296 extends beyond EOD, truncated
[   45.445456][ T3608] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   45.452986][ T3608] batman_adv: batadv0: Removing interface: batadv_slave_1
[   45.471675][ T3605] loop2: p2 start 591104 is beyond EOD, truncated
[   45.478167][ T3605] loop2: p3 start 33572980 is beyond EOD, truncated
[   45.504327][ T3610] bridge0: port 3(erspan0) entered blocking state
[   45.505131][ T3605] loop2: p5 size 100663296 extends beyond EOD, truncated
[   45.510880][ T3610] bridge0: port 3(erspan0) entered disabled state
[   45.511167][ T3610] erspan0: entered allmulticast mode
[   45.544172][ T3610] erspan0: entered promiscuous mode
[   45.554348][ T3610] bridge0: port 3(erspan0) entered blocking state
[   45.558210][ T3605] netlink: 72 bytes leftover after parsing attributes in process `syz.2.30'.
[   45.560945][ T3610] bridge0: port 3(erspan0) entered forwarding state
[   45.692913][ T3617] loop4: detected capacity change from 0 to 512
[   45.700871][ T3620] netlink: 'syz.0.35': attribute type 10 has an invalid length.
[   45.718720][ T3620] ipvlan0: entered allmulticast mode
[   45.724068][ T3620] veth0_vlan: entered allmulticast mode
[   45.748421][ T3620] team0: Device ipvlan0 failed to register rx_handler
[   45.779916][ T3620] syz.0.35 (3620) used greatest stack depth: 10632 bytes left
[   45.789683][ T3617] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   45.808137][ T3617] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   45.867281][ T3628] dummy0: entered allmulticast mode
[   45.872941][ T3628] dummy0: left allmulticast mode
[   45.911507][ T3632] netlink: 20 bytes leftover after parsing attributes in process `syz.0.38'.
[   46.111489][ T3633] loop0: detected capacity change from 0 to 4096
[   46.142911][ T3633] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   46.482556][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.679025][ T3647] dummy0: entered allmulticast mode
[   46.703214][ T3647] dummy0: left allmulticast mode
[   46.735009][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.782099][   T29] kauditd_printk_skb: 677 callbacks suppressed
[   46.782114][   T29] audit: type=1326 audit(1760794634.437:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3654 comm="syz.1.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb6210efc9 code=0x7ffc0000
[   46.815752][ T3656] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 6
[   46.835839][ T3652] loop0: detected capacity change from 0 to 8192
[   46.855334][ T3656] capability: warning: `syz.1.45' uses deprecated v2 capabilities in a way that may be insecure
[   46.876080][   T29] audit: type=1326 audit(1760794634.467:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3654 comm="syz.1.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcb6210efc9 code=0x7ffc0000
[   46.900216][   T29] audit: type=1326 audit(1760794634.467:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3654 comm="syz.1.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb6210efc9 code=0x7ffc0000
[   46.923934][   T29] audit: type=1326 audit(1760794634.467:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3654 comm="syz.1.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcb6210efc9 code=0x7ffc0000
[   46.924935][ T3658] loop3: detected capacity change from 0 to 1024
[   46.947029][   T29] audit: type=1326 audit(1760794634.467:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3654 comm="syz.1.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb6210efc9 code=0x7ffc0000
[   46.960318][ T3652]  loop0: p1 p2 < > p3 p4 < p5 >
[   46.976827][   T29] audit: type=1326 audit(1760794634.467:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3654 comm="syz.1.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcb6210efc9 code=0x7ffc0000
[   46.981861][ T3652] loop0: partition table partially beyond EOD, truncated
[   47.011964][   T29] audit: type=1326 audit(1760794634.467:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3654 comm="syz.1.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb6210efc9 code=0x7ffc0000
[   47.012343][ T3652] loop0: p1 size 100663296 extends beyond EOD, truncated
[   47.035240][   T29] audit: type=1326 audit(1760794634.467:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3654 comm="syz.1.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fcb6210efc9 code=0x7ffc0000
[   47.065608][   T29] audit: type=1326 audit(1760794634.487:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3654 comm="syz.1.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb6210efc9 code=0x7ffc0000
[   47.078066][ T3658] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   47.088903][   T29] audit: type=1326 audit(1760794634.487:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3654 comm="syz.1.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcb6210efc9 code=0x7ffc0000
[   47.136428][ T3652] loop0: p2 start 591104 is beyond EOD, truncated
[   47.143040][ T3652] loop0: p3 start 33572980 is beyond EOD, truncated
[   47.150604][ T3652] loop0: p5 size 100663296 extends beyond EOD, truncated
[   47.246838][ T3664] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 6
[   47.300412][ T3665] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.48' sets config #-1
[   47.312714][ T3667] netlink: 'syz.0.49': attribute type 10 has an invalid length.
[   47.327478][ T3668] loop2: detected capacity change from 0 to 1024
[   47.363781][ T3667] team0: Device ipvlan0 failed to register rx_handler
[   47.375768][ T3668] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   47.481566][ T3672] loop1: detected capacity change from 0 to 1024
[   47.509727][ T3672] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   47.551160][ T3675] loop0: detected capacity change from 0 to 128
[   47.568110][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.606791][ T3675] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100)
[   47.626839][ T3675] FAT-fs (loop0): Filesystem has been set read-only
[   47.635632][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.645124][ T3675] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100)
[   47.672331][ T3680] loop1: detected capacity change from 0 to 512
[   47.686726][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.687846][ T3675] syz.0.51: attempt to access beyond end of device
[   47.687846][ T3675] loop0: rw=2049, sector=2065, nr_sectors = 8 limit=128
[   47.732201][ T3680] EXT4-fs (loop1): revision level too high, forcing read-only mode
[   47.740327][ T3680] EXT4-fs (loop1): orphan cleanup on readonly fs
[   47.761699][ T3680] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm syz.1.52: corrupted inode contents
[   47.794652][ T3680] EXT4-fs (loop1): Remounting filesystem read-only
[   47.835188][ T3680] EXT4-fs (loop1): 1 truncate cleaned up
[   47.842948][ T1795] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   47.853706][ T1795] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   47.905714][ T3691] netlink: 'syz.0.56': attribute type 10 has an invalid length.
[   47.913529][ T3691] netlink: 40 bytes leftover after parsing attributes in process `syz.0.56'.
[   47.927949][ T1795] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started
[   47.939153][ T3691] dummy0: entered promiscuous mode
[   47.944363][ T3691] dummy0: entered allmulticast mode
[   47.951350][ T3680] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   47.995127][ T3691] bridge0: port 3(dummy0) entered blocking state
[   48.001583][ T3691] bridge0: port 3(dummy0) entered disabled state
[   48.020132][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.020145][ T3691] bridge0: port 3(dummy0) entered blocking state
[   48.020182][ T3691] bridge0: port 3(dummy0) entered forwarding state
[   48.265049][ T3705] loop1: detected capacity change from 0 to 1024
[   48.374837][ T3705] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   48.609077][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.718212][ T3712] netlink: 'syz.3.60': attribute type 10 has an invalid length.
[   48.736221][ T3712] ipvlan0: entered allmulticast mode
[   48.741699][ T3712] veth0_vlan: entered allmulticast mode
[   48.760871][ T3712] team0: Device ipvlan0 failed to register rx_handler
[   48.822214][ T3714] bridge0: port 3(erspan0) entered blocking state
[   48.828787][ T3714] bridge0: port 3(erspan0) entered disabled state
[   48.849774][ T3714] erspan0: entered allmulticast mode
[   48.861826][ T3715] loop1: detected capacity change from 0 to 512
[   48.862587][ T3714] erspan0: entered promiscuous mode
[   48.868633][ T3715] EXT4-fs: Ignoring removed nobh option
[   48.885953][ T3714] bridge0: port 3(erspan0) entered blocking state
[   48.892490][ T3714] bridge0: port 3(erspan0) entered forwarding state
[   48.899452][ T3715] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.59: iget: bad i_size value: 38620345925642
[   48.929045][ T3715] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.59: couldn't read orphan inode 15 (err -117)
[   48.984790][ T3719] loop0: detected capacity change from 0 to 1024
[   49.017467][ T3715] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   49.048956][ T3719] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   49.077867][ T3715] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.110099][ T3724] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 6
[   49.130893][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.166952][ T3724] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.64' sets config #-1
[   49.280989][ T3732] loop3: detected capacity change from 0 to 512
[   49.348250][ T3732] EXT4-fs (loop3): revision level too high, forcing read-only mode
[   49.356329][ T3732] EXT4-fs (loop3): orphan cleanup on readonly fs
[   49.385681][ T3732] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm syz.3.68: corrupted inode contents
[   49.397749][ T3735] loop0: detected capacity change from 0 to 1024
[   49.406197][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.416729][ T3735] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   49.429539][ T3732] EXT4-fs (loop3): Remounting filesystem read-only
[   49.436198][ T3732] EXT4-fs (loop3): 1 truncate cleaned up
[   49.449368][ T1795] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   49.459948][ T1795] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   49.478941][ T3736] loop1: detected capacity change from 0 to 1024
[   49.526712][ T1795] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started
[   49.591393][ T3732] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   49.602445][ T3736] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   49.665154][ T3744] loop4: detected capacity change from 0 to 1024
[   49.713870][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.792080][ T3747] netlink: 'syz.3.70': attribute type 10 has an invalid length.
[   49.799877][ T3747] netlink: 40 bytes leftover after parsing attributes in process `syz.3.70'.
[   49.820797][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.918500][ T3744] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   49.941381][ T3747] dummy0: entered promiscuous mode
[   49.946552][ T3747] dummy0: entered allmulticast mode
[   49.961782][ T3747] bridge0: port 4(dummy0) entered blocking state
[   49.968283][ T3747] bridge0: port 4(dummy0) entered disabled state
[   50.035374][ T3747] bridge0: port 4(dummy0) entered blocking state
[   50.041869][ T3747] bridge0: port 4(dummy0) entered forwarding state
[   50.055256][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.093958][ T3758] netlink: 'syz.0.73': attribute type 10 has an invalid length.
[   50.114769][ T3758] team0: Device ipvlan0 failed to register rx_handler
[   50.153643][ T3760] netlink: 'syz.3.74': attribute type 10 has an invalid length.
[   50.179184][ T3760] team0: Device ipvlan0 failed to register rx_handler
[   50.282818][ T3764] loop0: detected capacity change from 0 to 1024
[   50.300426][ T3764] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   50.339716][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.349130][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.361535][ T3767] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 6
[   50.382964][ T3767] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.77' sets config #-1
[   50.411545][ T3774] loop2: detected capacity change from 0 to 512
[   50.436698][ T3776] dummy0: entered allmulticast mode
[   50.449936][ T3776] dummy0: left allmulticast mode
[   50.460094][ T3774] EXT4-fs (loop2): revision level too high, forcing read-only mode
[   50.471693][ T3774] EXT4-fs (loop2): orphan cleanup on readonly fs
[   50.499141][ T3774] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.81: corrupted inode contents
[   50.548010][ T3774] EXT4-fs (loop2): Remounting filesystem read-only
[   50.554851][ T3774] EXT4-fs (loop2): 1 truncate cleaned up
[   50.568854][   T12] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   50.579455][   T12] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   50.606981][ T3785] loop3: detected capacity change from 0 to 1024
[   50.631177][ T3773] loop0: detected capacity change from 0 to 512
[   50.633402][   T12] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started
[   50.667778][ T3785] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   50.678449][ T3773] EXT4-fs: Ignoring removed nobh option
[   50.689937][ T3773] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.78: iget: bad i_size value: 38620345925642
[   50.698450][ T3774] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   50.725763][ T3773] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.78: couldn't read orphan inode 15 (err -117)
[   50.738770][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.754126][ T3796] loop4: detected capacity change from 0 to 1024
[   50.772117][ T3773] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   50.788611][ T3798] netlink: 'syz.2.85': attribute type 10 has an invalid length.
[   50.795136][ T3773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.796323][ T3798] netlink: 40 bytes leftover after parsing attributes in process `syz.2.85'.
[   50.841546][ T3802] netlink: 'syz.2.86': attribute type 10 has an invalid length.
[   50.859354][ T3796] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   50.885496][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.897072][ T3802] ipvlan0: entered allmulticast mode
[   50.902569][ T3802] veth0_vlan: entered allmulticast mode
[   50.923533][ T3802] team0: Device ipvlan0 failed to register rx_handler
[   50.951586][ T3805] netlink: 'syz.0.88': attribute type 10 has an invalid length.
[   50.965946][ T3805] team0: Device ipvlan0 failed to register rx_handler
[   50.983372][ T3810] loop2: detected capacity change from 0 to 1024
[   51.025079][ T3810] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   51.075215][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.123864][ T3812] loop3: detected capacity change from 0 to 1024
[   51.148638][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.150538][ T3812] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   51.170657][ T3822] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 6
[   51.187087][ T3822] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.93' sets config #-1
[   51.364309][ T3833] netlink: 'syz.2.97': attribute type 10 has an invalid length.
[   51.372037][ T3833] netlink: 40 bytes leftover after parsing attributes in process `syz.2.97'.
[   51.472577][ T3838] loop0: detected capacity change from 0 to 1024
[   51.479947][ T3839] loop4: detected capacity change from 0 to 512
[   51.509312][ T3838] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   51.642282][ T3837] loop2: detected capacity change from 0 to 512
[   51.649032][ T3837] EXT4-fs: Ignoring removed nobh option
[   51.655980][ T3837] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.99: iget: bad i_size value: 38620345925642
[   51.679855][ T3837] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.99: couldn't read orphan inode 15 (err -117)
[   51.696632][ T3839] EXT4-fs (loop4): revision level too high, forcing read-only mode
[   51.752027][ T3839] EXT4-fs (loop4): orphan cleanup on readonly fs
[   51.778666][ T3847] team0: Device ipvlan0 failed to register rx_handler
[   51.787525][ T3839] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #16: comm syz.4.96: corrupted inode contents
[   51.809944][ T3839] EXT4-fs (loop4): Remounting filesystem read-only
[   51.829370][   T29] kauditd_printk_skb: 350 callbacks suppressed
[   51.829385][   T29] audit: type=1326 audit(1760794639.487:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3850 comm="syz.2.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e64b6efc9 code=0x7ffc0000
[   51.865941][ T3839] EXT4-fs (loop4): 1 truncate cleaned up
[   51.886954][ T1795] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   51.897597][ T1795] Quota error (device loop4): write_blk: dquota write failed
[   51.905067][ T1795] Quota error (device loop4): remove_free_dqentry: Can't write block (5) with free entries
[   51.915131][ T1795] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   51.925739][ T1795] Quota error (device loop4): write_blk: dquota write failed
[   51.933231][ T1795] Quota error (device loop4): free_dqentry: Can't move quota data block (5) to free list
[   51.964209][   T29] audit: type=1326 audit(1760794639.517:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3850 comm="syz.2.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e64b6efc9 code=0x7ffc0000
[   51.982491][ T3857] team0: Device ipvlan0 failed to register rx_handler
[   51.987685][   T29] audit: type=1326 audit(1760794639.517:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3850 comm="syz.2.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5e64b6efc9 code=0x7ffc0000
[   52.017794][   T29] audit: type=1326 audit(1760794639.517:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3850 comm="syz.2.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e64b6efc9 code=0x7ffc0000
[   52.041193][   T29] audit: type=1326 audit(1760794639.517:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3850 comm="syz.2.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e64b6efc9 code=0x7ffc0000
[   52.064555][   T29] audit: type=1326 audit(1760794639.517:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3850 comm="syz.2.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5e64b6efc9 code=0x7ffc0000
[   52.094449][ T3855] loop0: detected capacity change from 0 to 1024
[   52.107949][ T1795] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started
[   52.243549][ T3863] loop4: detected capacity change from 0 to 1024
[   52.320311][ T3865] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.107' sets config #-1
[   52.367386][ T3871] dummy0: entered allmulticast mode
[   52.372884][ T3871] dummy0: left allmulticast mode
[   52.553009][ T3884] validate_nla: 2 callbacks suppressed
[   52.553027][ T3884] netlink: 'syz.4.111': attribute type 10 has an invalid length.
[   52.566316][ T3884] netlink: 40 bytes leftover after parsing attributes in process `syz.4.111'.
[   52.589911][ T3887] loop3: detected capacity change from 0 to 512
[   52.592114][ T3884] dummy0: entered promiscuous mode
[   52.601879][ T3884] dummy0: entered allmulticast mode
[   52.605522][ T3887] EXT4-fs: Ignoring removed nobh option
[   52.613093][ T3885] loop2: detected capacity change from 0 to 1024
[   52.622340][ T3884] bridge0: port 4(dummy0) entered blocking state
[   52.628753][ T3884] bridge0: port 4(dummy0) entered disabled state
[   52.629132][ T3887] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.112: iget: bad i_size value: 38620345925642
[   52.638879][ T3884] bridge0: port 4(dummy0) entered blocking state
[   52.654159][ T3884] bridge0: port 4(dummy0) entered forwarding state
[   52.661016][ T3887] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.112: couldn't read orphan inode 15 (err -117)
[   52.777674][ T3893] netlink: 'syz.4.113': attribute type 10 has an invalid length.
[   52.785836][ T3893] ipvlan0: entered allmulticast mode
[   52.791428][ T3893] veth0_vlan: entered allmulticast mode
[   52.821387][ T3893] team0: Device ipvlan0 failed to register rx_handler
[   52.868468][ T3899] netlink: 'syz.3.116': attribute type 10 has an invalid length.
[   52.891748][ T3899] team0: Device ipvlan0 failed to register rx_handler
[   52.902155][ T3901] loop4: detected capacity change from 0 to 512
[   52.924119][ T3901] EXT4-fs (loop4): revision level too high, forcing read-only mode
[   52.944293][ T3904] loop0: detected capacity change from 0 to 1024
[   52.966554][ T3901] EXT4-fs (loop4): orphan cleanup on readonly fs
[   53.062274][ T3901] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #16: comm syz.4.117: corrupted inode contents
[   53.089881][ T3901] EXT4-fs (loop4): Remounting filesystem read-only
[   53.128463][ T3901] EXT4-fs (loop4): 1 truncate cleaned up
[   53.137979][  T296] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   53.148616][  T296] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   53.160825][ T3911] loop3: detected capacity change from 0 to 1024
[   53.167814][  T296] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started
[   53.273979][ T3924] netlink: 'syz.0.124': attribute type 10 has an invalid length.
[   53.281789][ T3924] netlink: 40 bytes leftover after parsing attributes in process `syz.0.124'.
[   53.294661][ T3915] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.121' sets config #-1
[   53.365821][ T3933] loop4: detected capacity change from 0 to 512
[   53.375261][ T3933] EXT4-fs: Ignoring removed nobh option
[   53.403715][ T3933] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.127: iget: bad i_size value: 38620345925642
[   53.404353][ T3936] netlink: 'syz.2.128': attribute type 10 has an invalid length.
[   53.436936][ T3933] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.127: couldn't read orphan inode 15 (err -117)
[   53.509573][ T3936] team0: Device ipvlan0 failed to register rx_handler
[   53.537089][ T3938] loop0: detected capacity change from 0 to 1024
[   53.584031][ T3942] netlink: 'syz.2.129': attribute type 10 has an invalid length.
[   53.604499][ T3942] team0: Device ipvlan0 failed to register rx_handler
[   53.858200][ T3953] loop4: detected capacity change from 0 to 1024
[   53.904426][ T3952] loop2: detected capacity change from 0 to 1024
[   53.961423][ T3957] loop3: detected capacity change from 0 to 512
[   54.001364][ T3957] EXT4-fs (loop3): revision level too high, forcing read-only mode
[   54.013461][ T3957] EXT4-fs (loop3): orphan cleanup on readonly fs
[   54.025204][ T3957] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm syz.3.133: corrupted inode contents
[   54.037459][ T3957] EXT4-fs (loop3): Remounting filesystem read-only
[   54.065693][ T3965] dummy0: entered allmulticast mode
[   54.071381][ T3965] dummy0: left allmulticast mode
[   54.090406][ T3964] loop0: detected capacity change from 0 to 1024
[   54.101679][ T3957] EXT4-fs (loop3): 1 truncate cleaned up
[   54.107812][ T1860] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   54.109992][ T3967] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 6
[   54.118424][ T1860] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   54.141817][ T1860] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started
[   54.143111][ T3969] netlink: 'syz.4.136': attribute type 10 has an invalid length.
[   54.152555][ T3967] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.137' sets config #-1
[   54.159761][ T3969] netlink: 40 bytes leftover after parsing attributes in process `syz.4.136'.
[   54.233065][ T3974] netlink: 'syz.4.140': attribute type 10 has an invalid length.
[   54.241992][ T3974] team0: Device ipvlan0 failed to register rx_handler
[   54.291705][ T3974] syz.4.140 (3974) used greatest stack depth: 10616 bytes left
[   54.294004][ T3981] loop1: detected capacity change from 0 to 512
[   54.305816][ T3981] EXT4-fs: Ignoring removed nobh option
[   54.327580][ T3985] netlink: 'syz.4.143': attribute type 10 has an invalid length.
[   54.337503][ T3985] team0: Device ipvlan0 failed to register rx_handler
[   54.341156][ T3981] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.141: iget: bad i_size value: 38620345925642
[   54.363338][ T3981] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.141: couldn't read orphan inode 15 (err -117)
[   54.546567][ T3996] loop4: detected capacity change from 0 to 1024
[   54.661478][ T4002] loop1: detected capacity change from 0 to 1024
[   54.770230][ T4010] loop2: detected capacity change from 0 to 1024
[   55.054133][ T4015] loop1: detected capacity change from 0 to 512
[   55.105625][ T4017] netlink: 'syz.2.151': attribute type 10 has an invalid length.
[   55.113450][ T4017] netlink: 40 bytes leftover after parsing attributes in process `syz.2.151'.
[   55.135484][ T4015] EXT4-fs (loop1): revision level too high, forcing read-only mode
[   55.145612][ T4015] EXT4-fs (loop1): orphan cleanup on readonly fs
[   55.155318][ T4015] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm syz.1.150: corrupted inode contents
[   55.167593][ T4015] EXT4-fs (loop1): Remounting filesystem read-only
[   55.174687][ T4015] EXT4-fs (loop1): 1 truncate cleaned up
[   55.184087][ T1860] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   55.194789][ T1860] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   55.220546][ T1860] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started
[   55.234148][ T4025] team0: Device ipvlan0 failed to register rx_handler
[   55.282030][ T4023] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.153' sets config #-1
[   55.337489][ T4037] loop2: detected capacity change from 0 to 512
[   55.348796][ T4034] ipvlan0: entered allmulticast mode
[   55.354201][ T4034] veth0_vlan: entered allmulticast mode
[   55.361984][ T4037] EXT4-fs: Ignoring removed nobh option
[   55.371145][ T4034] team0: Device ipvlan0 failed to register rx_handler
[   55.388650][ T4037] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.159: iget: bad i_size value: 38620345925642
[   55.438519][ T4037] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.159: couldn't read orphan inode 15 (err -117)
[   55.462359][ T4042] loop0: detected capacity change from 0 to 1024
[   55.482729][ T4046] dummy0: entered allmulticast mode
[   55.488178][ T4046] dummy0: left allmulticast mode
[   55.538810][ T4048] loop1: detected capacity change from 0 to 1024
[   55.654054][ T4044] loop4: detected capacity change from 0 to 1024
[   55.687814][ T4056] netlink: 40 bytes leftover after parsing attributes in process `syz.1.164'.
[   55.730647][ T4058] loop2: detected capacity change from 0 to 1024
[   55.744348][ T4056] dummy0: entered promiscuous mode
[   55.749564][ T4056] dummy0: entered allmulticast mode
[   55.756859][ T4056] bridge0: port 3(dummy0) entered blocking state
[   55.763321][ T4056] bridge0: port 3(dummy0) entered disabled state
[   55.808842][ T4056] bridge0: port 3(dummy0) entered blocking state
[   55.815324][ T4056] bridge0: port 3(dummy0) entered forwarding state
[   56.087367][ T4068] loop4: detected capacity change from 0 to 512
[   56.120107][ T4068] EXT4-fs (loop4): revision level too high, forcing read-only mode
[   56.165106][ T4068] EXT4-fs (loop4): orphan cleanup on readonly fs
[   56.179681][ T4074] team0: Device ipvlan0 failed to register rx_handler
[   56.201531][ T4068] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #16: comm syz.4.167: corrupted inode contents
[   56.246222][ T4068] EXT4-fs (loop4): Remounting filesystem read-only
[   56.277352][ T4077] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.170' sets config #-1
[   56.291047][ T4068] EXT4-fs (loop4): 1 truncate cleaned up
[   56.296896][   T37] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   56.307524][   T37] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   56.338764][   T37] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started
[   56.380205][ T4087] team0: Device ipvlan0 failed to register rx_handler
[   56.448876][ T4094] loop0: detected capacity change from 0 to 512
[   56.476495][ T4094] EXT4-fs: Ignoring removed nobh option
[   56.494494][ T4096] loop4: detected capacity change from 0 to 1024
[   56.522187][ T4094] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.174: iget: bad i_size value: 38620345925642
[   56.551822][ T4094] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.174: couldn't read orphan inode 15 (err -117)
[   56.566945][ T4100] netlink: 40 bytes leftover after parsing attributes in process `syz.2.176'.
[   56.707850][ T4111] team0: Device ipvlan0 failed to register rx_handler
[   56.726027][ T4113] loop1: detected capacity change from 0 to 1024
[   56.771640][ T4118] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.182' sets config #-1
[   56.864835][ T4123] loop2: detected capacity change from 0 to 512
[   56.951884][ T4123] EXT4-fs (loop2): revision level too high, forcing read-only mode
[   57.059710][ T4123] EXT4-fs (loop2): orphan cleanup on readonly fs
[   57.067428][ T4123] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.183: corrupted inode contents
[   57.080518][ T4123] EXT4-fs (loop2): Remounting filesystem read-only
[   57.118155][ T4123] EXT4-fs (loop2): 1 truncate cleaned up
[   57.123950][  T296] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   57.134677][  T296] __quota_error: 457 callbacks suppressed
[   57.134692][  T296] Quota error (device loop2): write_blk: dquota write failed
[   57.147834][  T296] Quota error (device loop2): remove_free_dqentry: Can't write block (5) with free entries
[   57.157912][  T296] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   57.168471][  T296] Quota error (device loop2): write_blk: dquota write failed
[   57.175860][  T296] Quota error (device loop2): free_dqentry: Can't move quota data block (5) to free list
[   57.188229][  T296] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started
[   57.198509][  T296] Quota error (device loop2): v2_write_file_info: Can't write info structure
[   57.207458][  T296] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14
[   57.218835][ T4136] team0: Device ipvlan0 failed to register rx_handler
[   57.296978][ T4140] netlink: 40 bytes leftover after parsing attributes in process `syz.0.189'.
[   57.321633][ T4143] loop2: detected capacity change from 0 to 1024
[   57.397330][ T4149] loop1: detected capacity change from 0 to 1024
[   57.413533][ T4151] loop2: detected capacity change from 0 to 512
[   57.433379][   T29] audit: type=1326 audit(1760794645.087:1535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4152 comm="syz.0.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb74e8efc9 code=0x7ffc0000
[   57.456382][ T4151] EXT4-fs: Ignoring removed nobh option
[   57.457001][   T29] audit: type=1326 audit(1760794645.087:1536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4152 comm="syz.0.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb74e8efc9 code=0x7ffc0000
[   57.485754][   T29] audit: type=1326 audit(1760794645.087:1537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4152 comm="syz.0.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffb74e8efc9 code=0x7ffc0000
[   57.509690][   T29] audit: type=1326 audit(1760794645.087:1538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4152 comm="syz.0.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb74e8efc9 code=0x7ffc0000
[   57.598210][ T4159] validate_nla: 9 callbacks suppressed
[   57.598226][ T4159] netlink: 'syz.0.194': attribute type 10 has an invalid length.
[   57.650850][ T4151] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.191: iget: bad i_size value: 38620345925642
[   57.671044][ T4151] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.191: couldn't read orphan inode 15 (err -117)
[   57.689718][ T4159] team0: Device ipvlan0 failed to register rx_handler
[   57.795798][ T4162] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 6
[   57.853112][ T4162] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.195' sets config #-1
[   57.886817][ T4173] loop2: detected capacity change from 0 to 512
[   57.919577][ T4173] EXT4-fs (loop2): revision level too high, forcing read-only mode
[   57.941345][ T4180] netlink: 'syz.4.200': attribute type 10 has an invalid length.
[   57.950573][ T4180] team0: Device ipvlan0 failed to register rx_handler
[   57.977963][ T4173] EXT4-fs (loop2): orphan cleanup on readonly fs
[   58.002591][ T4173] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.199: corrupted inode contents
[   58.043527][ T4181] loop0: detected capacity change from 0 to 1024
[   58.052403][ T4173] EXT4-fs (loop2): Remounting filesystem read-only
[   58.059264][ T4173] EXT4-fs (loop2): 1 truncate cleaned up
[   58.065489][   T52] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   58.076121][   T52] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   58.087726][   T52] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started
[   58.129707][ T4186] loop1: detected capacity change from 0 to 1024
[   58.156692][ T4192] netlink: 'syz.2.203': attribute type 10 has an invalid length.
[   58.164522][ T4192] netlink: 40 bytes leftover after parsing attributes in process `syz.2.203'.
[   58.243517][ T4197] loop2: detected capacity change from 0 to 512
[   58.268241][ T4197] EXT4-fs: Ignoring removed nobh option
[   58.283197][ T4201] netlink: 'syz.1.208': attribute type 10 has an invalid length.
[   58.285447][ T4197] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.207: iget: bad i_size value: 38620345925642
[   58.292888][ T4201] team0: Device ipvlan0 failed to register rx_handler
[   58.330584][ T4197] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.207: couldn't read orphan inode 15 (err -117)
[   58.882230][ T4224] netlink: 'syz.1.214': attribute type 10 has an invalid length.
[   58.901785][ T4224] team0: Device ipvlan0 failed to register rx_handler
[   58.911775][ T4221] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.211' sets config #-1
[   58.970680][ T4226] loop2: detected capacity change from 0 to 1024
[   58.990112][ T4230] loop1: detected capacity change from 0 to 512
[   59.060087][ T4230] EXT4-fs (loop1): revision level too high, forcing read-only mode
[   59.092586][ T4230] EXT4-fs (loop1): orphan cleanup on readonly fs
[   59.109597][ T4230] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm syz.1.215: corrupted inode contents
[   59.165361][ T4230] EXT4-fs (loop1): Remounting filesystem read-only
[   59.182238][ T4230] EXT4-fs (loop1): 1 truncate cleaned up
[   59.188326][ T1795] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   59.198912][ T1795] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   59.210328][ T1795] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started
[   59.328844][ T4238] loop3: detected capacity change from 0 to 1024
[   59.447180][ T4251] netlink: 'syz.1.221': attribute type 10 has an invalid length.
[   59.497996][ T4251] team0: Device ipvlan0 failed to register rx_handler
[   59.526887][ T4251] syz.1.221 (4251) used greatest stack depth: 10392 bytes left
[   59.563056][ T4254] loop3: detected capacity change from 0 to 1024
[   59.591661][ T4256] loop1: detected capacity change from 0 to 512
[   59.620054][ T4256] EXT4-fs: Ignoring removed nobh option
[   59.659186][ T4256] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.223: iget: bad i_size value: 38620345925642
[   59.691961][ T4270] netlink: 'syz.2.226': attribute type 10 has an invalid length.
[   59.701928][ T4270] team0: Device ipvlan0 failed to register rx_handler
[   59.716291][ T4256] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.223: couldn't read orphan inode 15 (err -117)
[   59.859222][ T4272] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.227' sets config #-1
[   59.897613][ T4278] loop1: detected capacity change from 0 to 512
[   59.977782][ T4278] EXT4-fs (loop1): revision level too high, forcing read-only mode
[   59.989004][ T4278] EXT4-fs (loop1): orphan cleanup on readonly fs
[   60.017077][ T4278] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm syz.1.229: corrupted inode contents
[   60.054468][ T4278] EXT4-fs (loop1): Remounting filesystem read-only
[   60.077730][ T4285] loop3: detected capacity change from 0 to 1024
[   60.110893][ T4278] EXT4-fs (loop1): 1 truncate cleaned up
[   60.116727][ T1795] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   60.127375][ T1795] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   60.158200][ T1795] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started
[   60.232593][ T4294] netlink: 'syz.0.234': attribute type 10 has an invalid length.
[   60.262305][ T4294] team0: Device ipvlan0 failed to register rx_handler
[   60.383437][ T4301] loop1: detected capacity change from 0 to 1024
[   60.630445][ T4310] netlink: 'syz.0.239': attribute type 10 has an invalid length.
[   60.669825][ T4310] team0: Device ipvlan0 failed to register rx_handler
[   60.786456][ T4313] loop0: detected capacity change from 0 to 512
[   60.792950][ T4313] EXT4-fs: Ignoring removed nobh option
[   60.817772][ T4313] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.240: iget: bad i_size value: 38620345925642
[   60.836094][ T4313] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.240: couldn't read orphan inode 15 (err -117)
[   60.986284][ T4325] loop2: detected capacity change from 0 to 1024
[   61.015848][ T4326] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.242' sets config #-1
[   61.110290][ T4330] loop0: detected capacity change from 0 to 1024
[   61.195369][ T4335] loop4: detected capacity change from 0 to 512
[   61.219035][ T4335] EXT4-fs (loop4): revision level too high, forcing read-only mode
[   61.233813][ T4335] EXT4-fs (loop4): orphan cleanup on readonly fs
[   61.254977][ T4335] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #16: comm syz.4.246: corrupted inode contents
[   61.255165][ T4343] netlink: 'syz.1.248': attribute type 10 has an invalid length.
[   61.276273][ T4343] team0: Device ipvlan0 failed to register rx_handler
[   61.287313][ T4335] EXT4-fs (loop4): Remounting filesystem read-only
[   61.294165][ T4335] EXT4-fs (loop4): 1 truncate cleaned up
[   61.300721][ T1795] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   61.311358][ T1795] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   61.323959][ T1795] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started
[   61.364185][ T4353] team0: Device ipvlan0 failed to register rx_handler
[   61.386344][ T4357] loop4: detected capacity change from 0 to 512
[   61.397166][ T4357] EXT4-fs: Ignoring removed nobh option
[   61.416207][ T4357] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.253: iget: bad i_size value: 38620345925642
[   61.439013][ T4357] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.253: couldn't read orphan inode 15 (err -117)
[   61.469387][ T4363] loop3: detected capacity change from 0 to 1024
[   61.505229][ T4361] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.254' sets config #-1
[   61.551874][ T4366] loop4: detected capacity change from 0 to 1024
[   61.600844][ T4369] Zero length message leads to an empty skb
[   62.006232][ T4382] loop1: detected capacity change from 0 to 1024
[   62.057320][ T4386] team0: Device ipvlan0 failed to register rx_handler
[   62.172088][   T29] kauditd_printk_skb: 387 callbacks suppressed
[   62.172107][   T29] audit: type=1400 audit(1760794649.827:1902): avc:  denied  { bind } for  pid=4374 comm="syz.1.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   62.223210][   T29] audit: type=1400 audit(1760794649.877:1903): avc:  denied  { write } for  pid=4374 comm="syz.1.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   62.262219][   T29] audit: type=1400 audit(1760794649.907:1904): avc:  denied  { mounton } for  pid=4374 comm="syz.1.259" path="/49/bus/file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   62.285393][   T29] audit: type=1400 audit(1760794649.907:1905): avc:  denied  { prog_run } for  pid=4374 comm="syz.1.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   62.312820][ T4390] loop4: detected capacity change from 0 to 512
[   62.334951][   T29] audit: type=1400 audit(1760794649.987:1906): avc:  denied  { read write } for  pid=4372 comm="syz.2.258" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   62.358640][   T29] audit: type=1400 audit(1760794649.987:1907): avc:  denied  { open } for  pid=4372 comm="syz.2.258" path="/dev/virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   62.411469][ T4390] EXT4-fs (loop4): revision level too high, forcing read-only mode
[   62.441133][   T29] audit: type=1400 audit(1760794650.087:1908): avc:  denied  { create } for  pid=4394 comm="syz.3.263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   62.460746][   T29] audit: type=1400 audit(1760794650.087:1909): avc:  denied  { setopt } for  pid=4394 comm="syz.3.263" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   62.495769][ T4390] EXT4-fs (loop4): orphan cleanup on readonly fs
[   62.541447][ T4399] team0: Device ipvlan0 failed to register rx_handler
[   62.558161][ T4390] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #16: comm syz.4.264: corrupted inode contents
[   62.597939][   T29] audit: type=1400 audit(1760794650.167:1910): avc:  denied  { read write } for  pid=4398 comm="syz.3.265" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[   62.598253][ T4390] EXT4-fs (loop4): Remounting filesystem read-only
[   62.622261][   T29] audit: type=1400 audit(1760794650.167:1911): avc:  denied  { open } for  pid=4398 comm="syz.3.265" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[   62.654260][ T4390] EXT4-fs (loop4): 1 truncate cleaned up
[   62.660089][   T12] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   62.670703][   T12] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   62.697413][   T12] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started
[   62.733457][ T4407] loop3: detected capacity change from 0 to 512
[   62.742112][ T4407] EXT4-fs: Ignoring removed nobh option
[   62.749204][ T4407] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.267: iget: bad i_size value: 38620345925642
[   62.763110][ T4407] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.267: couldn't read orphan inode 15 (err -117)
[   62.794574][ T4409] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.268' sets config #-1
[   62.843103][ T4416] loop1: detected capacity change from 0 to 1024
[   62.853470][ T4414] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 6
[   62.948338][ T4421] loop4: detected capacity change from 0 to 1024
[   62.983257][ T4427] validate_nla: 3 callbacks suppressed
[   62.983276][ T4427] netlink: 'syz.1.275': attribute type 10 has an invalid length.
[   63.078404][ T4427] team0: Device ipvlan0 failed to register rx_handler
[   63.099704][ T4433] loop3: detected capacity change from 0 to 1024
[   63.213056][ T4436] loop2: detected capacity change from 0 to 1024
[   63.220195][ T4438] netlink: 'syz.1.278': attribute type 10 has an invalid length.
[   63.253354][ T4438] team0: Device ipvlan0 failed to register rx_handler
[   63.385972][ T4447] loop1: detected capacity change from 0 to 512
[   63.409415][ T4447] EXT4-fs (loop1): revision level too high, forcing read-only mode
[   63.475171][ T4447] EXT4-fs (loop1): orphan cleanup on readonly fs
[   63.625029][ T4447] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm syz.1.280: corrupted inode contents
[   63.660045][ T4447] EXT4-fs (loop1): Remounting filesystem read-only
[   63.675793][ T4447] EXT4-fs (loop1): 1 truncate cleaned up
[   63.681675][ T1795] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   63.692287][ T1795] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   63.708217][ T4452] loop4: detected capacity change from 0 to 512
[   63.714797][ T4452] EXT4-fs: Ignoring removed nobh option
[   63.722910][ T1795] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started
[   63.733240][ T4452] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.281: iget: bad i_size value: 38620345925642
[   63.747179][ T4452] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.281: couldn't read orphan inode 15 (err -117)
[   63.823162][ T4455] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.282' sets config #-1
[   63.860052][ T4459] loop1: detected capacity change from 0 to 1024
[   63.981228][ T4470] netlink: 'syz.2.290': attribute type 10 has an invalid length.
[   63.990370][ T4470] team0: Device ipvlan0 failed to register rx_handler
[   64.013100][ T4473] netlink: 'syz.3.289': attribute type 10 has an invalid length.
[   64.034154][ T4473] team0: Device ipvlan0 failed to register rx_handler
[   64.079157][ T4484] loop1: detected capacity change from 0 to 512
[   64.085335][ T4486] loop3: detected capacity change from 0 to 512
[   64.085745][ T4484] EXT4-fs: Ignoring removed nobh option
[   64.099896][ T4484] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.294: iget: bad i_size value: 38620345925642
[   64.123022][ T4484] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.294: couldn't read orphan inode 15 (err -117)
[   64.143815][ T4486] EXT4-fs (loop3): revision level too high, forcing read-only mode
[   64.166775][ T4486] EXT4-fs (loop3): orphan cleanup on readonly fs
[   64.204806][ T4490] loop0: detected capacity change from 0 to 1024
[   64.222041][ T4486] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm syz.3.295: corrupted inode contents
[   64.256655][ T4486] EXT4-fs (loop3): Remounting filesystem read-only
[   64.263444][ T4491] loop2: detected capacity change from 0 to 1024
[   64.285650][ T4486] EXT4-fs (loop3): 1 truncate cleaned up
[   64.293070][   T52] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   64.303823][   T52] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   64.320009][   T52] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started
[   64.374233][ T4502] loop1: detected capacity change from 0 to 1024
[   64.418415][ T4504] loop3: detected capacity change from 0 to 1024
[   64.574003][ T4511] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.299' sets config #-1
[   64.715725][ T4524] netlink: 20 bytes leftover after parsing attributes in process `syz.2.304'.
[   64.832105][ T4528] ==================================================================
[   64.840254][ T4528] BUG: KCSAN: data-race in selinux_inode_permission / selinux_inode_permission
[   64.849234][ T4528] 
[   64.851568][ T4528] write to 0xffff88811a05faa0 of 4 bytes by task 4530 on cpu 1:
[   64.859214][ T4528]  selinux_inode_permission+0x3ac/0x740
[   64.864797][ T4528]  security_inode_permission+0x6d/0xb0
[   64.870275][ T4528]  inode_permission+0x106/0x310
[   64.875186][ T4528]  link_path_walk+0x162/0x900
[   64.879904][ T4528]  path_openat+0x1de/0x2170
[   64.884435][ T4528]  do_filp_open+0x109/0x230
[   64.888965][ T4528]  io_openat2+0x272/0x390
[   64.893324][ T4528]  io_openat+0x1b/0x30
[   64.897411][ T4528]  __io_issue_sqe+0xfe/0x2e0
[   64.902023][ T4528]  io_issue_sqe+0x56/0xa80
[   64.906467][ T4528]  io_wq_submit_work+0x3f7/0x5f0
[   64.911435][ T4528]  io_worker_handle_work+0x44e/0x9b0
[   64.916747][ T4528]  io_wq_worker+0x22e/0x860
[   64.921279][ T4528]  ret_from_fork+0x122/0x1b0
[   64.925890][ T4528]  ret_from_fork_asm+0x1a/0x30
[   64.930673][ T4528] 
[   64.933005][ T4528] read to 0xffff88811a05faa0 of 4 bytes by task 4528 on cpu 0:
[   64.940560][ T4528]  selinux_inode_permission+0x334/0x740
[   64.946124][ T4528]  security_inode_permission+0x6d/0xb0
[   64.951603][ T4528]  inode_permission+0x106/0x310
[   64.956480][ T4528]  link_path_walk+0x162/0x900
[   64.961173][ T4528]  path_openat+0x1de/0x2170
[   64.965683][ T4528]  do_filp_open+0x109/0x230
[   64.970214][ T4528]  io_openat2+0x272/0x390
[   64.974560][ T4528]  io_openat+0x1b/0x30
[   64.978644][ T4528]  __io_issue_sqe+0xfe/0x2e0
[   64.983257][ T4528]  io_issue_sqe+0x56/0xa80
[   64.987698][ T4528]  io_submit_sqes+0x675/0x1060
[   64.992483][ T4528]  __se_sys_io_uring_enter+0x1c1/0x1b70
[   64.998055][ T4528]  __x64_sys_io_uring_enter+0x78/0x90
[   65.003452][ T4528]  x64_sys_call+0x2df0/0x3000
[   65.008141][ T4528]  do_syscall_64+0xd2/0x200
[   65.012660][ T4528]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   65.018566][ T4528] 
[   65.020897][ T4528] value changed: 0x00000000 -> 0x00000001
[   65.026617][ T4528] 
[   65.028946][ T4528] Reported by Kernel Concurrency Sanitizer on:
[   65.035113][ T4528] CPU: 0 UID: 0 PID: 4528 Comm: syz.3.305 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   65.044760][ T4528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   65.054820][ T4528] ==================================================================
[   65.106378][ T4524] loop2: detected capacity change from 0 to 4096
[   65.151376][ T4534] netlink: 108 bytes leftover after parsing attributes in process `syz.3.305'.