last executing test programs:

3m31.427361396s ago: executing program 32 (id=135):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009e602206d0414c3400000000001090224"], 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x2, 0x4, 0x388, 0xffffffff, 0x1e8, 0x0, 0x1e8, 0xfeffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [0xff000000], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x0, 0x0, 0x2}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "ddabf53d9b1435965491f6531877000001e770b667f10900000000000000e3121114449fd20ba2be6e45cae72a972f25170163232ed996b4789b9d00"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8)

3m22.654243015s ago: executing program 33 (id=372):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x6, 0xffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x3, 0x141, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x2, r2}, 0x27)

2m42.789179756s ago: executing program 34 (id=1058):
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0)
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r1 = dup2(r0, r0)
ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000000)={'\x00', 0x6, 0x4034, 0x401, 0xfe, 0x7fffffffffffffff, 0xffffffffffffffff})
ioctl$BLKTRACESTOP(r1, 0x1275, 0x0)

1m55.087796653s ago: executing program 35 (id=2960):
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000040000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000100)='kfree\x00', r1}, 0x18)
r2 = inotify_init1(0x0)
inotify_add_watch(r2, &(0x7f0000000440)='.\x00', 0x12000021)
r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
close_range(r0, r3, 0x0)

1m52.833870615s ago: executing program 36 (id=3034):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r1}, 0x10)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000005, 0x31, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)

1m41.328973606s ago: executing program 37 (id=3385):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000001600008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x248, &(0x7f0000000100), 0xfd, 0x48f, &(0x7f0000000940)="$eJzs3M1rHOUfAPDvzG6SX1+TX60vrdVGq1h8SZq0akHBFxA8KAh6qCeJSVpq00aaCLYEG6XUi6AF7yJ4EfwLPHkS9SR41bsUivTS6mllMrPrJtnNSzfJptnPB6aZJ/vMPt/vzDwzz8xkGkDH6s/+SSJ2RsTvEdEbEWl9hW35lNW7dWNm9O8bM6NJVCpv/pVki8XNGzOj1apJ8XNHXihnX5ReTuLFBu1OXbh4ZmRiYvx8UR6cPvv+4NSFi0+dPjtyavzU+Lnh48ePHR169pnhp9ckzyymm/s/mjyw79W3r74+euLquz9/l9QFXZ9Hi57rrc3O1NbJQo+uUWObxa66+aTcxkBYlZ6IyDZX11z/743S5d21z3rjlU/aGhywriqVSmW4+cezFWALS6LdEQDtUT3RZ9e/1WmDhh6bwvWX8gugLO9bxZR/Us7vg/Tk10a71qn9/og4MfvPV9kUq74P0bVOUQEAW9kP2fjnyQbjv3LEPXX1dhfPhvoi4v8RsSci7oqIvRFxd+R1742I+xo30/9Ok/b7F5QXj3/Say2kt6xs/Pd88Wxr/viv9hSsr1SUds3l35WcPD0xfqRYJ4ejqycrDzX89iRiNvv52+fN2q8f/2VT1n51LFjEca3cM3+ZsZHpkZYTL1z/OGJ/uVH+SZT/yyL2RcT+22zj9OPfHpj/m1Jtbvn8l7AGz5kqX0c8lm//2ViQf1Wy9PPJwf/FxPiRwepesdgvv155o1n7ef5pLJ3/ttYTbSLb/tsb7f8v1PLvS+qf104t+oru5dq48senTa9pbnf/707emtf4hyPT0+eHIrqT1xb/vu4Gd7VcrZ/lf/hQ4/6/p1gmy//+iMh24gci4sGIOFjE/lBEPBwRh5bI/6eXH3mvaf4HW9j/10CW/1jD41+z7b/6mdKZH79v1v7Ktv+xamEuqJUc/1YaYCvrDgAAAO4UaUTsjCQdqM2n6cBA/vfye2N7OjE5Nf3EyckPzo3l7wj0RVdavdPVW3c/dKi4N1wtDxflS0X5aHHf+MvStrnywOjkxFi7k4cOt6NJ/8/8WWp3dMC6874WdC79HzrX7fd/Rw640y3Ti9ONigPYeM7i0Lka9f9L9YUk8r+SB7Yc53/oXLX+/8UKKte97rXw5U3gzrPU+b/Su4GBABvO+B86Uivv9W+KmfgmYuk6yWYJdVUzn7WyeHkDIoy0jeunuy0bZbgU0cZdorzS/9UiLlQutdxou49MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAa+PfAAAA///67uRi")
mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
umount2(&(0x7f0000002140)='./file0\x00', 0x0)

1m23.743160456s ago: executing program 1 (id=3855):
r0 = socket(0x2a, 0x2, 0x0)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0)
getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xfffa, 0xfff3}, {}, {0x10, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @ipv4={'\x00', '\xff\xff', @remote}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1m23.741092266s ago: executing program 1 (id=3864):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)="89e7eed9b4", 0x5}, {&(0x7f0000000280)="c2c10b270d61040000", 0x9}], 0x2)

1m23.612814835s ago: executing program 1 (id=3862):
r0 = syz_io_uring_setup(0x16d2, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000240)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[@ANYBLOB='+'], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

1m23.568194595s ago: executing program 1 (id=3863):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0/../file0\x00', 0x89901)
move_mount(r0, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)

1m23.567255575s ago: executing program 1 (id=3866):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
prlimit64(0x0, 0xe, 0x0, 0x0)

1m23.359599194s ago: executing program 1 (id=3870):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590)

1m23.359411964s ago: executing program 38 (id=3870):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590)

1m19.690412172s ago: executing program 9 (id=3941):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4)
bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x932, 0x4)
sendto$inet(r0, 0x0, 0x0, 0x20000f3d, &(0x7f0000000000)={0x2, 0x24e23, @empty}, 0x10)
sendmsg$inet(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)='/', 0x1}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000001780)=[{{0x0, 0x0, 0x0}, 0xe2}], 0x1, 0x2, 0x0)

1m19.489402471s ago: executing program 9 (id=3957):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r3}, &(0x7f0000000a00), &(0x7f0000000a40)=r2}, 0x20)

1m19.399806031s ago: executing program 9 (id=3947):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x2, &(0x7f00000000c0), 0x7, 0x4be, &(0x7f00000005c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x101)
getdents64(r0, 0x0, 0x0)
lseek(r0, 0x2000000003, 0x1)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000003b810100850000006d000000850000005000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x1}, 0x18)
getdents64(r0, 0x0, 0x0)

1m18.755106939s ago: executing program 9 (id=3959):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0)
umount2(&(0x7f00000000c0)='./file0/file0\x00', 0x8)

1m18.651517938s ago: executing program 9 (id=3965):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002800)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xf2ff}, {}, {0x3}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008020}, 0x800)

1m18.568868588s ago: executing program 9 (id=3968):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xffff, 0xfffe}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x7}}, [@filter_kind_options=@f_fw={{0x7}, {0xfffffdf1, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'pimreg1\x00'}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x10)

1m18.520015388s ago: executing program 39 (id=3968):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xffff, 0xfffe}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x7}}, [@filter_kind_options=@f_fw={{0x7}, {0xfffffdf1, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'pimreg1\x00'}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x10)

45.440325775s ago: executing program 7 (id=4722):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x200000, &(0x7f00000000c0)={[{@dioread_lock}, {@noblock_validity}, {@lazytime}, {@noblock_validity}]}, 0xfc, 0x564, &(0x7f00000008c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0x8004587d, &(0x7f00000003c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)

44.257101731s ago: executing program 7 (id=4747):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x10, &(0x7f0000000180)={0x0, 0x3660, 0x2, 0x1, 0x34b})
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000080)=""/28, 0x1c}], 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x41180, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1, 0x0, 0x80000}, 0x18)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)

43.98727469s ago: executing program 7 (id=4754):
r0 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xc}}}, 0x24}}, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x10, 0xd}, {}, {0xffe0, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x3}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x48}}, 0x40000)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

43.90436652s ago: executing program 7 (id=4757):
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="009f587a31d53b5cb6077bd11087bb6e13aac56feecaaae0b009cee43814e80646ff2772abedb27f35c706ba7c624afb75f473956061ae41834d27270063fa18a3515f9ac6cd6f15a042b1edcd60bdeb55446beed1014aa13d43d399fb4f716b8a24502a8e3e697642b172841c89aecefe0cfb3c32d7c28955601f41fb90d51951d91a35a5abeb4ffceef5cf6e190ec9eb6f91a0d06882039b54dd4485b823414e06691b0244ca11ac0baeaeec1a96861d358464329c64b77e6ff2e2d8a6bb29268be3e7c46750210270d79e1054add6c2ef3f0373", @ANYRES32, @ANYRES64=0x0], 0x1, 0x1282, &(0x7f0000002880)="$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")
open(&(0x7f00000003c0)='./bus\x00', 0x143142, 0x1a0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2009, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000f37ff0edf110ff411760900eb4b78c66ee677df701905b9aafab4afaaf755a3f6a00400", "cba3d625780820d3cbf7db71038259ca171cc2a311ef97e4298d1e14ef01060000e9009600fdffe0ff00000000008000000000000000000004000000c9ca4360", "d300e6d6ae9ef30bea2a004000", [0x1]})
newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x100)
mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x2012024, 0x0)

43.136295357s ago: executing program 7 (id=4772):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f0000000680)='./file0/../file0/../file0/../file0\x00', 0x0, 0x1333404, 0x0)
chroot(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00')
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
pivot_root(&(0x7f0000000240)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00')
chroot(&(0x7f00000002c0)='./file0/../file0/../file0/../file0\x00')

42.949512567s ago: executing program 7 (id=4778):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, {}, 0x0, 0x0, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x2b}, 0x0, @in6=@private1}}, 0xe8)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001c00ff"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

42.869433536s ago: executing program 40 (id=4778):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, {}, 0x0, 0x0, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x2b}, 0x0, @in6=@private1}}, 0xe8)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001c00ff"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

40.816070789s ago: executing program 6 (id=4832):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x10)
setns(r1, 0x24020000)
syz_clone(0xd5ba2180, 0x0, 0x0, 0x0, 0x0, 0x0)

40.399549727s ago: executing program 6 (id=4848):
r0 = perf_event_open$cgroup(&(0x7f0000000080)={0x2, 0x80, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x480}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r1 = dup(r0)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}})
r2 = syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x4f5e, 0x10100}, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27})
io_uring_enter(r2, 0x567, 0x0, 0x0, 0x0, 0x0)

39.467315384s ago: executing program 6 (id=4857):
r0 = socket$xdp(0x2c, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x1, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/59, 0x232000, 0x1000}, 0x20)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xa, 0x2)

39.067691493s ago: executing program 6 (id=4861):
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="009f587a31d53b5cb6077bd11087bb6e13aac56feecaaae0b009cee43814e80646ff2772abedb27f35c706ba7c624afb75f473956061ae41834d27270063fa18a3515f9ac6cd6f15a042b1edcd60bdeb55446beed1014aa13d43d399fb4f716b8a24502a8e3e697642b172841c89aecefe0cfb3c32d7c28955601f41fb90d51951d91a35a5abeb4ffceef5cf6e190ec9eb6f91a0d06882039b54dd4485b823414e06691b0244ca11ac0baeaeec1a96861d358464329c64b77e6ff2e2d8a6bb29268be3e7c46750210270d79e1054add6c2ef3f0373", @ANYRES32, @ANYRES64=0x0], 0x1, 0x1282, &(0x7f0000002880)="$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")
open(&(0x7f00000003c0)='./bus\x00', 0x143142, 0x1a0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2009, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000f37ff0edf110ff411760900eb4b78c66ee677df701905b9aafab4afaaf755a3f6a00400", "cba3d625780820d3cbf7db71038259ca171cc2a311ef97e4298d1e14ef01060000e9009600fdffe0ff00000000008000000000000000000004000000c9ca4360", "d300e6d6ae9ef30bea2a004000", [0x1]})
newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x100)
mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x2012024, 0x0)

38.732738532s ago: executing program 6 (id=4864):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c)
listen(r0, 0x80080400)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @local}, 0x10)
getsockopt$inet_int(r1, 0x10d, 0xd7, &(0x7f0000000000), &(0x7f0000000080)=0x4)

37.364785477s ago: executing program 6 (id=4895):
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff0200000000000000000000000000010000000000000000000000ffffff88"], 0xfdef)

37.292828167s ago: executing program 41 (id=4895):
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff0200000000000000000000000000010000000000000000000000ffffff88"], 0xfdef)

13.781062767s ago: executing program 4 (id=5485):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x13)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8)
sendto$inet6(r1, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
close_range(r1, r1, 0x0)

13.700768497s ago: executing program 4 (id=5490):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xa6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10)
syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000000)='./file1\x00', 0x21000e, &(0x7f0000000380), 0xde, 0x529, &(0x7f00000008c0)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)

13.479626806s ago: executing program 4 (id=5493):
socket$unix(0x1, 0x5, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="580000000206030000000000000000000000000011000300686173683a69702c706f7274000000000900020073797a31000000000c0007800800124004000000050005000a10000005000400010000000500010007"], 0x58}}, 0x0)

12.323614542s ago: executing program 4 (id=5518):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0xfe, 0x25b, &(0x7f0000000840)="$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")
open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0xa, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "9300e6d6a89ef30bea2a0092000010000000aff571ec3199bde400"})
mkdir(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x44)

12.095080771s ago: executing program 4 (id=5523):
r0 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24, 0x24, 0x4, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x3, 0xe}}}, 0x24}}, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x50, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x1, 0x2, 0x2, 0x0, {0x9, 0x1, 0x759, 0x7, 0x1}, {0x70, 0x2, 0x5, 0x9, 0x4, 0x4}, 0x80000001, 0x5, 0x9}}]}]}}, @TCA_RATE={0x6, 0x5, {0x7, 0xb}}]}, 0x84}}, 0x801)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

11.959286331s ago: executing program 4 (id=5526):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18)
unshare(0x22020600)
r1 = getpid()
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040))
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x2000000)

11.953342491s ago: executing program 42 (id=5526):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18)
unshare(0x22020600)
r1 = getpid()
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040))
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x2000000)

998.978743ms ago: executing program 2 (id=5743):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000f1ff007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
creat(&(0x7f0000000040)='./file0/file1\x00', 0x49)
unlink(&(0x7f00000003c0)='./file0/file1\x00')

960.800923ms ago: executing program 8 (id=5745):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4)
recvmmsg(r0, &(0x7f0000003d80)=[{{0xfffffffffffffffe, 0x0, 0x0, 0x0, &(0x7f0000000b00)=""/126, 0x7e}, 0xf1e1}], 0x1, 0x0, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000100)={0x87}, 0x8)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

907.503873ms ago: executing program 2 (id=5746):
r0 = io_uring_setup(0x70f8, &(0x7f00000005c0))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='mm_page_free\x00', r1}, 0x18)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x2, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xa)
close_range(r0, 0xffffffffffffffff, 0x0)

847.448932ms ago: executing program 8 (id=5748):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x18)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdir(0x0, 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
mount$bind(0x0, &(0x7f00000004c0)='./control\x00', 0x0, 0x2000, 0x0)

737.881962ms ago: executing program 8 (id=5751):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/seq/clients\x00', 0x0, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)

737.749782ms ago: executing program 2 (id=5752):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = syz_io_uring_setup(0x466c, &(0x7f0000000280)={0x0, 0x0, 0x10100}, &(0x7f0000001340)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

737.661792ms ago: executing program 5 (id=5753):
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @random="ab6b0ead351e", 'veth0\x00'}}, 0x1e)
r1 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'veth1_to_batadv\x00'}}, 0x1e)
r2 = socket(0x18, 0x0, 0x0)
connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 'geneve1\x00'}}, 0x1e)
close(r0)

667.822902ms ago: executing program 8 (id=5754):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000005000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
recvmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

667.440462ms ago: executing program 2 (id=5755):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000015000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0)

575.704161ms ago: executing program 8 (id=5757):
r0 = socket$unix(0x1, 0x5, 0x0)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r2=>0x0})
connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10)
sendmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
sendmsg$can_bcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0)

575.423782ms ago: executing program 5 (id=5758):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1}, 0x8002, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
flock(r0, 0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
flock(r1, 0x2)
dup3(r1, r0, 0x0)

537.974091ms ago: executing program 0 (id=5761):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10)

513.499211ms ago: executing program 0 (id=5762):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10)
r2 = socket$unix(0x1, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400038008000500", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x80c4}, 0x0)

512.954991ms ago: executing program 3 (id=5763):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$unix(0x1, 0x5, 0x0)
writev(r1, 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000980), r0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x2c, r2, 0x9, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x2}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200488c4}, 0x0)

488.603881ms ago: executing program 3 (id=5764):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x18)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)

435.706721ms ago: executing program 8 (id=5765):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x400e, &(0x7f00000001c0), 0x1, 0x42f, &(0x7f0000000940)="$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")
open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x12)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./bus\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0)
write(r1, &(0x7f0000004200)="a6", 0x1)
sendfile(r1, r0, 0x0, 0x3ffff)
sendfile(r1, r0, 0x0, 0x7ffff000)

417.039181ms ago: executing program 0 (id=5766):
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000001000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a5c000000060a0b0400000000000000000200000030000480200001800e000100636f6e6e6c696d69740000000c00028008000140000000000c000180080001006f7366000900010073797a30000000000900020073797a3200"], 0x1f4}}, 0x0)

404.073771ms ago: executing program 2 (id=5767):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10)
syz_clone(0xd5ba2180, 0x0, 0x0, 0x0, 0x0, 0x0)

378.541001ms ago: executing program 5 (id=5768):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8fe00000000bfa200000000000007020000f8ffffffb703000008000000b70400008f2000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x201000, 0x1000}, 0x20)

323.66537ms ago: executing program 3 (id=5769):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="050000000600000008000000ae00000000000000", @ANYBLOB='\x00'/12, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000055002f03020000000000000007000000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x40840)

323.158931ms ago: executing program 0 (id=5779):
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x2041, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffede, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x37, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r3, 0x14, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)

322.584881ms ago: executing program 5 (id=5780):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xa8}, 0x18)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1)
r3 = socket$inet6_dccp(0xa, 0x6, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000400)={'batadv0\x00', <r4=>0x0})
sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="fd8d00000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="0a0009000180c2000000fdff08000b"], 0x30}}, 0x0)

289.622101ms ago: executing program 3 (id=5770):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r2}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)

277.49276ms ago: executing program 5 (id=5771):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f0000000200)={[{@i_version}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@discard}, {@data_err_abort}], [{@seclabel}]}, 0x1, 0x43d, &(0x7f0000000900)="$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")
lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x1001, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0)

231.23481ms ago: executing program 3 (id=5772):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10)
sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27)

218.84159ms ago: executing program 0 (id=5773):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
r2 = add_key(&(0x7f0000000080)='user\x00', &(0x7f0000000000)={'syz', 0x2}, &(0x7f0000000040)='9', 0x1, 0xfffffffffffffffc)
keyctl$chown(0x4, r2, 0xee00, 0xffffffffffffffff)
keyctl$chown(0x4, r2, 0x0, 0x0)

3.557869ms ago: executing program 2 (id=5774):
r0 = gettid()
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
read(r1, &(0x7f0000000200)=""/202, 0xca)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x4058534c, &(0x7f00000000c0)={0x80, 0x0, {0x3}})
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f0000000140)={{0x8, 0x9}, 'port0\x00', 0x8, 0x20020, 0x6, 0x3, 0x64, 0x0, 0x80, 0x0, 0x4, 0x66})
syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff)
tkill(r0, 0x7)

3.44346ms ago: executing program 5 (id=5775):
r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
fchdir(r1)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x0)
getdents64(r2, &(0x7f0000000f80)=""/4096, 0x1000)

3.36812ms ago: executing program 0 (id=5776):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa}, 0x1c)
close(r2)

0s ago: executing program 3 (id=5786):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r2}, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff)

kernel console output (not intermixed with test programs):

rch=c000003e syscall=202 compat=0 ip=0x7f03b699cd29 code=0x7ffc0000
[  182.011237][   T29] audit: type=1326 audit(1737781003.607:4660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15436 comm="syz.4.4278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03b699cd29 code=0x7ffc0000
[  182.034813][   T29] audit: type=1326 audit(1737781003.607:4661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15436 comm="syz.4.4278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f03b699cd29 code=0x7ffc0000
[  182.095170][T15447] ipvlan2: entered promiscuous mode
[  182.119573][T15447] bridge0: port 3(ipvlan2) entered blocking state
[  182.126153][T15447] bridge0: port 3(ipvlan2) entered disabled state
[  182.134767][T15447] ipvlan2: entered allmulticast mode
[  182.140113][T15447] bridge0: entered allmulticast mode
[  182.155980][T15447] ipvlan2: left allmulticast mode
[  182.161182][T15447] bridge0: left allmulticast mode
[  182.175443][T15454] Process accounting resumed
[  182.504279][T15483] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4296'.
[  182.531105][T15485] loop4: detected capacity change from 0 to 1024
[  182.541297][T15487] ip6gretap0: entered promiscuous mode
[  182.557102][T15487] batadv_slave_0: entered promiscuous mode
[  182.567498][T15489] loop7: detected capacity change from 0 to 512
[  182.576898][T15487] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[  182.587762][T15485] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  182.604390][T15489] EXT4-fs: Ignoring removed i_version option
[  182.610538][T15489] EXT4-fs: Ignoring removed mblk_io_submit option
[  182.623247][T15487] Cannot create hsr debugfs directory
[  182.631070][T15489] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  182.643040][T15487] ip6gretap0: left promiscuous mode
[  182.645570][T15485] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2793: inode #12: comm syz.4.4297: corrupted in-inode xattr: bad magic number in in-inode xattr
[  182.663992][T15487] batadv_slave_0: left promiscuous mode
[  182.707857][T15489] EXT4-fs (loop7): 1 truncate cleaned up
[  182.718169][T15498] netlink: 'syz.6.4301': attribute type 1 has an invalid length.
[  182.743326][T15489] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  182.758688][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  182.845733][T15504] netlink: 'syz.4.4303': attribute type 1 has an invalid length.
[  182.915450][T15508] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4307'.
[  182.922751][T15504] bond1: entered allmulticast mode
[  182.951808][T15504] 8021q: adding VLAN 0 to HW filter on device bond1
[  182.980564][T15508] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  182.994793][T15510] bond1: entered promiscuous mode
[  183.019301][T15510] batadv0: entered promiscuous mode
[  183.078703][T15510] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[  183.106598][T15510] Cannot create hsr debugfs directory
[  183.122276][T15510] hsr1: Slave A (bond1) is not up; please bring it up to get a fully working HSR network
[  183.132186][T15510] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  183.180655][T15510] 8021q: adding VLAN 0 to HW filter on device hsr1
[  183.288060][T15516] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4310'.
[  183.310330][ T6940] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  183.403344][T15522] loop7: detected capacity change from 0 to 2048
[  183.409439][T15525] xt_hashlimit: size too large, truncated to 1048576
[  183.523608][T15522] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  183.726349][T15543] loop6: detected capacity change from 0 to 512
[  183.790705][T15550] loop3: detected capacity change from 0 to 128
[  183.807151][T15543] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  183.928618][T15543] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  183.966868][T15557] loop8: detected capacity change from 0 to 1024
[  183.984103][ T6940] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  184.014676][T15557] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  184.103422][T14426] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  184.129294][T15568] EXT4-fs (loop8): shut down requested (0)
[  184.253295][T13266] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  184.291938][T13266] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  184.304467][T13266] EXT4-fs (loop8): This should not happen!! Data will be lost
[  184.304467][T13266] 
[  184.314138][T13266] EXT4-fs (loop8): Total free blocks count 0
[  184.320152][T13266] EXT4-fs (loop8): Free/Dirty block details
[  184.326053][T13266] EXT4-fs (loop8): free_blocks=68451041280
[  184.332012][T13266] EXT4-fs (loop8): dirty_blocks=9616
[  184.337304][T13266] EXT4-fs (loop8): Block reservation details
[  184.343403][T13266] EXT4-fs (loop8): i_reserved_data_blocks=601
[  184.460180][T15584] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4337'.
[  184.866811][T15611] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4349'.
[  185.055961][T15616] pim6reg1: entered promiscuous mode
[  185.061361][T15616] pim6reg1: entered allmulticast mode
[  185.311079][T15632] loop6: detected capacity change from 0 to 128
[  185.338911][T15632] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1)
[  185.402320][T13287] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1)
[  185.655544][T15650] bond_slave_1: entered promiscuous mode
[  185.686727][T15650] bond_slave_1: left promiscuous mode
[  185.771069][T15654] loop8: detected capacity change from 0 to 256
[  185.932230][T15670] SELinux: syz.8.4377 (15670) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[  185.997479][T15673] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4379'.
[  186.006764][T15675] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.4376'.
[  186.041425][T15669] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.4376'.
[  186.205136][T15689] netlink: 'syz.3.4385': attribute type 1 has an invalid length.
[  186.303346][T15698] sch_tbf: peakrate 8 is lower than or equals to rate 12 !
[  186.322266][T15702] netlink: 'syz.3.4392': attribute type 1 has an invalid length.
[  186.414981][T15714] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4398'.
[  186.443881][T15714] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  186.548694][T15718] netem: change failed
[  186.643747][T15729] netlink: 'syz.4.4404': attribute type 1 has an invalid length.
[  186.736727][T15732] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4406'.
[  186.816231][   T29] kauditd_printk_skb: 254 callbacks suppressed
[  186.816247][   T29] audit: type=1400 audit(1737781008.617:4916): avc:  denied  { create } for  pid=15741 comm="syz.7.4411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  186.874011][   T29] audit: type=1400 audit(1737781008.677:4917): avc:  denied  { connect } for  pid=15745 comm="syz.6.4413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  186.893918][   T29] audit: type=1400 audit(1737781008.677:4918): avc:  denied  { name_connect } for  pid=15745 comm="syz.6.4413" dest=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1
[  186.921025][T15744] wireguard0: entered promiscuous mode
[  186.926547][T15744] wireguard0: entered allmulticast mode
[  186.965979][   T29] audit: type=1400 audit(1737781008.707:4919): avc:  denied  { listen } for  pid=15741 comm="syz.7.4411" path=2F3630302FE91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[  186.989329][   T29] audit: type=1400 audit(1737781008.747:4920): avc:  denied  { create } for  pid=15745 comm="syz.6.4413" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  187.010938][   T29] audit: type=1400 audit(1737781008.747:4921): avc:  denied  { map } for  pid=15745 comm="syz.6.4413" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=42424 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  187.035318][   T29] audit: type=1400 audit(1737781008.747:4922): avc:  denied  { read write } for  pid=15745 comm="syz.6.4413" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=42424 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  187.060721][   T29] audit: type=1400 audit(1737781008.747:4923): avc:  denied  { write } for  pid=15745 comm="syz.6.4413" laddr=fe80::f lport=38836 faddr=fe80::bb fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  187.200970][T15760] ip6gretap0: entered promiscuous mode
[  187.206987][T15760] batadv_slave_0: entered promiscuous mode
[  187.229306][T15760] ip6gretap0: left promiscuous mode
[  187.270845][T15760] batadv_slave_0: left promiscuous mode
[  187.286294][   T29] audit: type=1400 audit(1737781009.087:4924): avc:  denied  { mount } for  pid=15761 comm="syz.3.4428" name="/" dev="configfs" ino=975 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[  187.312863][   T29] audit: type=1400 audit(1737781009.117:4925): avc:  denied  { search } for  pid=15761 comm="syz.3.4428" name="/" dev="configfs" ino=975 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  187.511531][T15773] netlink: 'syz.7.4421': attribute type 1 has an invalid length.
[  187.627406][T15783] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4426'.
[  187.770150][T15789] hub 6-0:1.0: USB hub found
[  187.784307][T15789] hub 6-0:1.0: 8 ports detected
[  187.890452][T15804] loop3: detected capacity change from 0 to 512
[  187.912582][T15804] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  187.943938][T15804] ext4 filesystem being mounted at /111/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  188.022280][T14000] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  188.177050][T15817] netlink: 'syz.8.4437': attribute type 1 has an invalid length.
[  188.303487][T15828] loop6: detected capacity change from 0 to 2048
[  188.378673][T15828]  loop6: p1 < > p4
[  188.392509][T15828] loop6: p4 size 8388608 extends beyond EOD, truncated
[  188.553955][T15842] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4455'.
[  188.563105][T15842] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4455'.
[  188.651078][T15842] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check.
[  188.802645][T15849] ipip1: entered promiscuous mode
[  189.523737][T15876] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4471'.
[  189.630800][T15883] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4474'.
[  189.750839][T15893] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  190.031418][T15917] loop4: detected capacity change from 0 to 512
[  190.037966][T15917] EXT4-fs: Ignoring removed nobh option
[  190.126898][T15917] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  190.135705][T15917] EXT4-fs (loop4): blocks per group (71) and clusters per group (20800) inconsistent
[  190.162923][T15928] loop6: detected capacity change from 0 to 512
[  190.194078][T15928] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  190.245893][T15928] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  190.348166][T14426] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  190.376199][T15939] loop8: detected capacity change from 0 to 512
[  190.398632][T15939] EXT4-fs: Ignoring removed oldalloc option
[  190.418353][T15939] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  190.456245][T15939] EXT4-fs (loop8): 1 truncate cleaned up
[  190.482048][T15939] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  190.593898][T11228] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  191.362084][T15951] syzkaller0: entered promiscuous mode
[  191.367595][T15951] syzkaller0: entered allmulticast mode
[  191.466274][T15961] loop8: detected capacity change from 0 to 8192
[  191.506462][T15961] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  191.670920][T15982] loop6: detected capacity change from 0 to 512
[  191.688545][T15982] EXT4-fs: Ignoring removed i_version option
[  191.694572][T15982] EXT4-fs: Ignoring removed mblk_io_submit option
[  191.737072][T15984] loop8: detected capacity change from 0 to 512
[  191.763050][T15986] __nla_validate_parse: 2 callbacks suppressed
[  191.763068][T15986] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4523'.
[  191.789811][T15982] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  191.798753][T15988] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  191.811702][T15984] EXT4-fs (loop8): orphan cleanup on readonly fs
[  191.818199][T15984] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -13
[  191.820344][   T29] kauditd_printk_skb: 168 callbacks suppressed
[  191.820360][   T29] audit: type=1400 audit(1737781013.627:5094): avc:  denied  { write } for  pid=15987 comm="syz.7.4522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  191.852033][   T29] audit: type=1400 audit(1737781013.627:5095): avc:  denied  { connect } for  pid=15987 comm="syz.7.4522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  191.872037][   T29] audit: type=1400 audit(1737781013.627:5096): avc:  denied  { name_connect } for  pid=15987 comm="syz.7.4522" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  191.895082][T15984] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  191.938629][T15984] EXT4-fs error (device loop8): ext4_clear_blocks:876: inode #13: comm syz.8.4521: attempt to clear invalid blocks 2 len 1
[  191.970946][T15984] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.4521: invalid indirect mapped block 1819239214 (level 0)
[  191.985092][T15982] EXT4-fs (loop6): 1 truncate cleaned up
[  191.997366][T15982] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  192.037820][T15984] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.4521: invalid indirect mapped block 1819239214 (level 1)
[  192.066118][   T29] audit: type=1400 audit(1737781013.867:5097): avc:  denied  { mac_admin } for  pid=15979 comm="syz.6.4519" capability=33  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  192.087410][   T29] audit: type=1400 audit(1737781013.867:5098): avc:  denied  { relabelto } for  pid=15979 comm="syz.6.4519" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0"
[  192.113968][   T29] audit: type=1400 audit(1737781013.887:5099): avc:  denied  { write } for  pid=15979 comm="syz.6.4519" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0"
[  192.133783][T15984] EXT4-fs (loop8): 1 truncate cleaned up
[  192.139583][   T29] audit: type=1400 audit(1737781013.887:5100): avc:  denied  { remove_name } for  pid=15979 comm="syz.6.4519" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0"
[  192.171907][   T29] audit: type=1400 audit(1737781013.887:5101): avc:  denied  { rename } for  pid=15979 comm="syz.6.4519" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  192.184830][T15984] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  192.194268][   T29] audit: type=1400 audit(1737781013.887:5102): avc:  denied  { add_name } for  pid=15979 comm="syz.6.4519" name="file5" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0"
[  192.316593][T11228] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  192.342919][T14426] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  192.411129][T16000] loop8: detected capacity change from 0 to 2048
[  192.441503][T16000] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  192.467763][T16000] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none.
[  192.509935][T11228] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  192.542634][T16010] bridge1: entered promiscuous mode
[  192.547872][T16010] bridge1: entered allmulticast mode
[  192.560287][T16010] team0: Port device bridge1 added
[  192.651625][   T29] audit: type=1400 audit(1737781014.457:5103): avc:  denied  { read } for  pid=16016 comm="syz.4.4534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  193.287940][T16031] Set syz1 is full, maxelem 65536 reached
[  193.444741][T16047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  193.455078][T16047] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  193.489474][T16057] bridge0: port 3(batadv1) entered blocking state
[  193.495970][T16057] bridge0: port 3(batadv1) entered disabled state
[  193.504042][T16057] batadv1: entered allmulticast mode
[  193.511888][T16057] batadv1: entered promiscuous mode
[  193.669030][T16068] Cannot find set identified by id 632 to match
[  193.749306][T16071] SELinux:  policydb version 0 does not match my version range 15-34
[  193.770344][T16071] SELinux: failed to load policy
[  193.995778][T13287] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[  194.005092][T13287] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[  194.047513][T16077] loop4: detected capacity change from 0 to 2048
[  194.109469][T16077]  loop4: p1 < > p4
[  194.122243][T16077] loop4: p4 size 8388608 extends beyond EOD, truncated
[  194.323998][T16090] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  194.689003][T16108] loop6: detected capacity change from 0 to 7
[  194.705903][T16108] Buffer I/O error on dev loop6, logical block 0, async page read
[  194.726733][T16108] Buffer I/O error on dev loop6, logical block 0, async page read
[  194.734751][T16108]  loop6: unable to read partition table
[  194.758393][T16108] loop_reread_partitions: partition scan of loop6 (�被x������ڬ��dƤ����ݡ�����
[  194.758393][T16108] 
) failed (rc=-5)
[  195.145381][T16125] loop7: detected capacity change from 0 to 2048
[  195.175946][T16127] SELinux:  Context u:r:untrusted_app:s0:c512,c768 is not valid (left unmapped).
[  195.210451][T16125]  loop7: p1 < > p4
[  195.219413][T16125] loop7: p4 size 8388608 extends beyond EOD, truncated
[  195.474628][T16141] serio: Serial port ptm1
[  195.637279][T16162] program syz.3.4600 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  195.807696][T16171] loop8: detected capacity change from 0 to 256
[  195.834892][T16171] FAT-fs (loop8): Directory bread(block 64) failed
[  195.841896][T16171] FAT-fs (loop8): Directory bread(block 65) failed
[  195.855968][T16171] FAT-fs (loop8): Directory bread(block 66) failed
[  195.874673][T16171] FAT-fs (loop8): Directory bread(block 67) failed
[  195.890760][T16171] FAT-fs (loop8): Directory bread(block 68) failed
[  195.914592][T16171] FAT-fs (loop8): Directory bread(block 69) failed
[  195.938324][T16171] FAT-fs (loop8): Directory bread(block 70) failed
[  195.949091][T16178] xt_hashlimit: max too large, truncated to 1048576
[  195.960503][T16171] FAT-fs (loop8): Directory bread(block 71) failed
[  195.980692][T16171] FAT-fs (loop8): Directory bread(block 72) failed
[  195.996186][T16171] FAT-fs (loop8): Directory bread(block 73) failed
[  196.124182][T13266] kworker/u8:19: attempt to access beyond end of device
[  196.124182][T13266] loop8: rw=1, sector=1224, nr_sectors = 4 limit=256
[  196.191290][T16199] bridge0: entered promiscuous mode
[  196.215842][T16199] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4615'.
[  196.243924][T16199] bridge_slave_1: left allmulticast mode
[  196.249655][T16199] bridge_slave_1: left promiscuous mode
[  196.255350][T16199] bridge0: port 2(bridge_slave_1) entered disabled state
[  196.295612][T16199] bridge_slave_0: left allmulticast mode
[  196.301390][T16199] bridge_slave_0: left promiscuous mode
[  196.307118][T16199] bridge0: port 1(bridge_slave_0) entered disabled state
[  196.345363][T16199] bridge0 (unregistering): left promiscuous mode
[  196.681671][T16231] loop6: detected capacity change from 0 to 128
[  197.104202][T16255] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4643'.
[  197.123530][   T29] kauditd_printk_skb: 111 callbacks suppressed
[  197.123547][   T29] audit: type=1400 audit(1737781018.927:5215): avc:  denied  { read } for  pid=16257 comm="syz.4.4645" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  197.202481][   T29] audit: type=1400 audit(1737781018.927:5216): avc:  denied  { open } for  pid=16257 comm="syz.4.4645" path="/dev/ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  197.226122][   T29] audit: type=1400 audit(1737781018.927:5217): avc:  denied  { ioctl } for  pid=16257 comm="syz.4.4645" path="/dev/ptp0" dev="devtmpfs" ino=246 ioctlcmd=0x3d05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  197.251149][   T29] audit: type=1326 audit(1737781018.987:5218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16260 comm="syz.8.4646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89dfadcd29 code=0x7ffc0000
[  197.274779][   T29] audit: type=1326 audit(1737781018.987:5219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16260 comm="syz.8.4646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89dfadcd29 code=0x7ffc0000
[  197.298411][   T29] audit: type=1326 audit(1737781018.997:5220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16260 comm="syz.8.4646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f89dfadcd29 code=0x7ffc0000
[  197.322046][   T29] audit: type=1326 audit(1737781018.997:5221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16260 comm="syz.8.4646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89dfadcd29 code=0x7ffc0000
[  197.345558][   T29] audit: type=1326 audit(1737781018.997:5222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16260 comm="syz.8.4646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89dfadcd29 code=0x7ffc0000
[  197.369148][   T29] audit: type=1326 audit(1737781018.997:5223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16260 comm="syz.8.4646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f89dfadcd29 code=0x7ffc0000
[  197.392696][   T29] audit: type=1326 audit(1737781018.997:5224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16260 comm="syz.8.4646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89dfadcd29 code=0x7ffc0000
[  197.423240][T16262] netlink: 'syz.3.4647': attribute type 5 has an invalid length.
[  197.429293][T16268] netlink: 'syz.4.4649': attribute type 1 has an invalid length.
[  197.492201][T16268] bond2: (slave ip6erspan0): making interface the new active one
[  197.546434][T16268] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link
[  197.558032][T16275] pimreg: entered allmulticast mode
[  197.567830][T16275] pimreg: left allmulticast mode
[  197.719208][T16282] loop6: detected capacity change from 0 to 1024
[  197.744021][T16282] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  197.755075][T16282] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869)
[  197.792091][T16282] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  197.828752][T16282] EXT4-fs (loop6): invalid journal inode
[  197.848434][T16282] EXT4-fs (loop6): can't get journal size
[  197.854516][T16282] EXT4-fs error (device loop6): ext4_protect_reserved_inode:182: inode #3: comm syz.6.4656: blocks 2-2 from inode overlap system zone
[  197.919467][T16282] EXT4-fs (loop6): failed to initialize system zone (-117)
[  197.946437][T16282] EXT4-fs (loop6): mount failed
[  197.986263][T16294] netlink: 'syz.7.4661': attribute type 1 has an invalid length.
[  197.994058][T16294] netlink: 'syz.7.4661': attribute type 2 has an invalid length.
[  198.133793][T16308] loop7: detected capacity change from 0 to 128
[  198.140904][T16306] veth0_vlan: entered allmulticast mode
[  198.156544][T16308] vfat: Unknown parameter '18446744073709551615'
[  198.211979][T16306] ������: renamed from vlan0
[  198.466601][T16326] loop7: detected capacity change from 0 to 2048
[  198.488117][T16326] EXT4-fs: Ignoring removed mblk_io_submit option
[  198.494713][T16326] EXT4-fs: Ignoring removed i_version option
[  198.533099][T16326] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  198.726975][T16348] vlan2: entered allmulticast mode
[  198.732303][T16348] bridge_slave_0: entered allmulticast mode
[  198.754067][T16348] bridge_slave_0: left allmulticast mode
[  198.777058][ T6940] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  198.850273][T16352] sd 0:0:1:0: device reset
[  198.940345][T16360] loop8: detected capacity change from 0 to 512
[  198.973349][T16360] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  198.989727][T16360] ext4 filesystem being mounted at /359/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  199.063873][T16365] EXT4-fs error (device loop8): ext4_empty_dir:3103: inode #12: block 32: comm syz.8.4691: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[  199.105776][T16365] EXT4-fs warning (device loop8): ext4_empty_dir:3105: inode #12: comm syz.8.4691: directory missing '.'
[  199.138196][T16371] Falling back ldisc for ttyS3.
[  199.332649][T16386] loop7: detected capacity change from 0 to 2048
[  199.349865][T16386] EXT4-fs: Ignoring removed nobh option
[  199.382916][T16386] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  199.525000][T16406] netlink: 'syz.4.4709': attribute type 10 has an invalid length.
[  199.543931][T16408] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4708'.
[  199.628800][T16386] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.4702: bg 0: block 234: padding at end of block bitmap is not set
[  199.653389][T16386] EXT4-fs (loop7): Remounting filesystem read-only
[  199.662664][T16386] EXT4-fs (loop7): error restoring inline_data for inode -- potential data loss! (inode 12, error -5)
[  199.688166][T16415] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4710'.
[  199.705006][T16386] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop7 ino=15
[  199.714267][T16386] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop7 ino=15
[  199.765452][ T6940] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  199.796701][T11228] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  199.822498][T16432] loop4: detected capacity change from 0 to 128
[  199.944518][T16450] team0 (unregistering): Port device bridge1 removed
[  200.371493][T16515] netlink: 'syz.3.4724': attribute type 12 has an invalid length.
[  200.380434][T16513] sch_tbf: peakrate 8 is lower than or equals to rate 12 !
[  200.389522][T16511] loop7: detected capacity change from 0 to 1024
[  200.420265][T16511] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  200.556358][T16525] usb usb7: usbfs: process 16525 (syz.6.4728) did not claim interface 0 before use
[  200.727222][T16538] 9pnet_fd: Insufficient options for proto=fd
[  200.855852][T16544] EXT4-fs (loop7): shut down requested (0)
[  200.999267][T13281] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  201.027597][T13281] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  201.040145][T13281] EXT4-fs (loop7): This should not happen!! Data will be lost
[  201.040145][T13281] 
[  201.049803][T13281] EXT4-fs (loop7): Total free blocks count 0
[  201.055865][T13281] EXT4-fs (loop7): Free/Dirty block details
[  201.061821][T13281] EXT4-fs (loop7): free_blocks=68451041280
[  201.067648][T13281] EXT4-fs (loop7): dirty_blocks=3872
[  201.072997][T13281] EXT4-fs (loop7): Block reservation details
[  201.079192][T13281] EXT4-fs (loop7): i_reserved_data_blocks=242
[  201.104868][T16562] tun0: tun_chr_ioctl cmd 1074812118
[  201.222963][T16565] loop3: detected capacity change from 0 to 2048
[  201.250171][T16565] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  201.527317][T16559] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4744'.
[  201.873441][T16568] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  201.894872][T16568] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  201.907433][T16568] EXT4-fs (loop3): This should not happen!! Data will be lost
[  201.907433][T16568] 
[  201.917157][T16568] EXT4-fs (loop3): Total free blocks count 0
[  201.923315][T16568] EXT4-fs (loop3): Free/Dirty block details
[  201.929475][T16568] EXT4-fs (loop3): free_blocks=2415919104
[  201.935389][T16568] EXT4-fs (loop3): dirty_blocks=8192
[  201.940873][T16568] EXT4-fs (loop3): Block reservation details
[  201.946889][T16568] EXT4-fs (loop3): i_reserved_data_blocks=512
[  201.999445][T16565] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28
[  202.018487][T16593] loop7: detected capacity change from 0 to 8192
[  202.032068][T16595] ebtables: ebtables: counters copy to user failed while replacing table
[  202.151815][   T29] kauditd_printk_skb: 168 callbacks suppressed
[  202.151920][   T29] audit: type=1400 audit(1737781023.957:5393): avc:  denied  { write } for  pid=16606 comm="syz.6.4762" path="socket:[45819]" dev="sockfs" ino=45819 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  202.288715][   T29] audit: type=1400 audit(1737781024.087:5394): avc:  denied  { mounton } for  pid=16592 comm="syz.7.4757" path="/667/bus/bus" dev="loop7" ino=66 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1
[  202.351364][T16615] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[  202.360033][T16615] FAT-fs (loop7): Filesystem has been set read-only
[  202.412594][   T29] audit: type=1326 audit(1737781024.217:5395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16619 comm="syz.3.4763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce8f14cd29 code=0x7ffc0000
[  202.436207][   T29] audit: type=1326 audit(1737781024.217:5396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16619 comm="syz.3.4763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce8f14cd29 code=0x7ffc0000
[  202.533395][   T29] audit: type=1326 audit(1737781024.277:5397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16619 comm="syz.3.4763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fce8f14cd29 code=0x7ffc0000
[  202.556957][   T29] audit: type=1326 audit(1737781024.277:5398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16619 comm="syz.3.4763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce8f14cd29 code=0x7ffc0000
[  202.580593][   T29] audit: type=1326 audit(1737781024.277:5399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16619 comm="syz.3.4763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce8f14cd29 code=0x7ffc0000
[  202.604486][T16622] netlink: '+}[@': attribute type 10 has an invalid length.
[  202.641456][T16622] veth0_macvtap: left promiscuous mode
[  202.659987][ T6940] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[  202.668634][ T6940] FAT-fs (loop7): Filesystem has been set read-only
[  202.683214][T16622] veth0_macvtap: entered promiscuous mode
[  202.690308][   T29] audit: type=1400 audit(1737781024.367:5400): avc:  denied  { remount } for  pid=16592 comm="syz.7.4757" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[  202.708062][ T6940] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[  202.720579][T16622] team0: Device macvtap0 failed to register rx_handler
[  202.747356][T16622] veth0_macvtap: left promiscuous mode
[  202.954329][   T29] audit: type=1400 audit(1737781024.757:5401): avc:  denied  { watch } for  pid=16653 comm="syz.8.4782" path="/370/file0" dev="tmpfs" ino=1936 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  202.992997][T16658] vhci_hcd: invalid port number 15
[  203.018709][   T29] audit: type=1400 audit(1737781024.817:5402): avc:  denied  { mounton } for  pid=16659 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[  203.187127][T13281] bond0 (unregistering): Released all slaves
[  203.214304][T13281] bond1 (unregistering): left promiscuous mode
[  203.225551][T13281] bond1 (unregistering): Released all slaves
[  203.431219][T13281] batadv0: left promiscuous mode
[  203.449420][T13281] hsr_slave_0: left promiscuous mode
[  203.470420][T13281] hsr_slave_1: left promiscuous mode
[  203.594227][T16723] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4800'.
[  203.656528][T16720] netlink: 100 bytes leftover after parsing attributes in process `syz.3.4799'.
[  203.683186][T16723] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  203.692047][T16723] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  203.700886][T16723] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  203.709612][T16723] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  203.742318][T16723] vxlan0: entered promiscuous mode
[  203.747552][T16723] vxlan0: entered allmulticast mode
[  203.761812][T16730] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4803'.
[  203.834271][T16659] chnl_net:caif_netlink_parms(): no params data found
[  203.938209][T16659] bridge0: port 1(bridge_slave_0) entered blocking state
[  203.945444][T16659] bridge0: port 1(bridge_slave_0) entered disabled state
[  204.015508][T16659] bridge_slave_0: entered allmulticast mode
[  204.044518][T16659] bridge_slave_0: entered promiscuous mode
[  204.099971][T16659] bridge0: port 2(bridge_slave_1) entered blocking state
[  204.107103][T16659] bridge0: port 2(bridge_slave_1) entered disabled state
[  204.123277][T16753] xt_hashlimit: max too large, truncated to 1048576
[  204.140827][T16659] bridge_slave_1: entered allmulticast mode
[  204.158255][T16659] bridge_slave_1: entered promiscuous mode
[  204.179919][T13281] IPVS: stop unused estimator thread 0...
[  204.204252][T16659] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  204.217240][T16659] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  204.275864][T16765] loop6: detected capacity change from 0 to 256
[  204.283955][T16659] team0: Port device team_slave_0 added
[  204.299042][T16767] loop3: detected capacity change from 0 to 256
[  204.302583][T16659] team0: Port device team_slave_1 added
[  204.317784][T16767] FAT-fs (loop3): bogus number of FAT sectors
[  204.323947][T16767] FAT-fs (loop3): Can't find a valid FAT filesystem
[  204.336441][T16659] batman_adv: batadv0: Adding interface: batadv_slave_0
[  204.343587][T16659] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  204.369839][T16659] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  204.415466][T16659] batman_adv: batadv0: Adding interface: batadv_slave_1
[  204.422491][T16659] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  204.448438][T16659] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  204.470557][T16771] netlink: 48 bytes leftover after parsing attributes in process `syz.8.4829'.
[  204.498379][T16659] hsr_slave_0: entered promiscuous mode
[  204.514304][T16659] hsr_slave_1: entered promiscuous mode
[  204.536443][T16776] sd 0:0:1:0: device reset
[  204.547088][T16659] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  204.581519][T16659] Cannot create hsr debugfs directory
[  204.743126][T16659] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.824964][T16659] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.884924][T16793] syzkaller0: entered promiscuous mode
[  204.890494][T16793] syzkaller0: entered allmulticast mode
[  204.902853][T16659] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  205.007061][T16659] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  205.117205][T16802] loop8: detected capacity change from 0 to 8192
[  205.119356][T16659] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  205.140424][T16802] vfat: Unknown parameter '����00000000000000000004'
[  205.152155][T16659] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  205.176395][T16659] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  205.195414][T16659] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  205.304612][T16659] 8021q: adding VLAN 0 to HW filter on device bond0
[  205.338835][T16659] 8021q: adding VLAN 0 to HW filter on device team0
[  205.389379][T13871] bridge0: port 1(bridge_slave_0) entered blocking state
[  205.396478][T13871] bridge0: port 1(bridge_slave_0) entered forwarding state
[  205.438898][T13871] bridge0: port 2(bridge_slave_1) entered blocking state
[  205.446007][T13871] bridge0: port 2(bridge_slave_1) entered forwarding state
[  205.635539][T16659] 8021q: adding VLAN 0 to HW filter on device batadv0
[  206.208632][T16659] veth0_vlan: entered promiscuous mode
[  206.217154][T16659] veth1_vlan: entered promiscuous mode
[  206.257910][T16659] veth0_macvtap: entered promiscuous mode
[  206.284755][T16659] veth1_macvtap: entered promiscuous mode
[  206.320869][T16659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  206.331360][T16659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  206.341317][T16659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  206.351859][T16659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  206.361699][T16659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  206.372157][T16659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  206.441791][T16659] batman_adv: batadv0: Interface activated: batadv_slave_0
[  206.500578][T16659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  206.511079][T16659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  206.520938][T16659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  206.531390][T16659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  206.541235][T16659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  206.551707][T16659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  206.617042][T16659] batman_adv: batadv0: Interface activated: batadv_slave_1
[  206.643773][T16659] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  206.652593][T16659] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  206.661316][T16659] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  206.670134][T16659] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  206.843219][T16896] loop6: detected capacity change from 0 to 8192
[  206.847556][T16906] loop5: detected capacity change from 0 to 512
[  206.875724][T16906] EXT4-fs: Ignoring removed nobh option
[  206.892291][T16906] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  206.901545][T16906] EXT4-fs (loop5): blocks per group (71) and clusters per group (20800) inconsistent
[  206.959148][T16896] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[  206.967938][T16896] FAT-fs (loop6): Filesystem has been set read-only
[  207.062813][T14426] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[  207.071500][T14426] FAT-fs (loop6): Filesystem has been set read-only
[  207.095796][T14426] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[  207.216645][T16925] bond_slave_1: entered promiscuous mode
[  207.250920][T16925] bond_slave_1: left promiscuous mode
[  207.256495][T16930] loop5: detected capacity change from 0 to 1024
[  207.275009][   T29] kauditd_printk_skb: 40 callbacks suppressed
[  207.275026][   T29] audit: type=1326 audit(1737781029.077:5443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16956 comm="syz.4.4870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03b699cd29 code=0x7ffc0000
[  207.311441][T16930] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869)
[  207.326710][T16930] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  207.338076][   T29] audit: type=1326 audit(1737781029.077:5444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16956 comm="syz.4.4870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03b699cd29 code=0x7ffc0000
[  207.361701][   T29] audit: type=1326 audit(1737781029.077:5445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16956 comm="syz.4.4870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f03b699cd29 code=0x7ffc0000
[  207.385396][   T29] audit: type=1326 audit(1737781029.077:5446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16956 comm="syz.4.4870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03b699cd29 code=0x7ffc0000
[  207.408906][   T29] audit: type=1326 audit(1737781029.077:5447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16956 comm="syz.4.4870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03b699cd29 code=0x7ffc0000
[  207.418484][T16930] EXT4-fs error (device loop5): ext4_get_journal_inode:5798: comm syz.5.4866: inode #1: comm syz.5.4866: iget: illegal inode #
[  207.432519][   T29] audit: type=1326 audit(1737781029.087:5448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16956 comm="syz.4.4870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f03b699cd29 code=0x7ffc0000
[  207.469246][   T29] audit: type=1326 audit(1737781029.087:5449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16956 comm="syz.4.4870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03b699cd29 code=0x7ffc0000
[  207.491745][T16930] EXT4-fs (loop5): no journal found
[  207.492854][   T29] audit: type=1326 audit(1737781029.087:5450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16956 comm="syz.4.4870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f03b699cd29 code=0x7ffc0000
[  207.497914][T16930] EXT4-fs (loop5): can't get journal size
[  207.521468][   T29] audit: type=1326 audit(1737781029.087:5451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16956 comm="syz.4.4870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03b699cd29 code=0x7ffc0000
[  207.550724][   T29] audit: type=1326 audit(1737781029.087:5452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16956 comm="syz.4.4870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f03b699cd29 code=0x7ffc0000
[  207.586725][T16930] EXT4-fs (loop5): failed to initialize system zone (-22)
[  207.605007][T16930] EXT4-fs (loop5): mount failed
[  207.810077][T12161] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  207.855860][T16982] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  207.951232][T12161] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.011675][T12161] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.081308][T12161] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.117720][T16997] loop4: detected capacity change from 0 to 512
[  208.137201][T17000] SELinux:  Context @ is not valid (left unmapped).
[  208.152299][T16997] EXT4-fs: Ignoring removed nobh option
[  208.197242][T12161] bridge_slave_1: left allmulticast mode
[  208.203003][T12161] bridge_slave_1: left promiscuous mode
[  208.208760][T12161] bridge0: port 2(bridge_slave_1) entered disabled state
[  208.269273][T16997] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  208.288642][T12161] bridge_slave_0: left allmulticast mode
[  208.294360][T12161] bridge_slave_0: left promiscuous mode
[  208.300078][T12161] bridge0: port 1(bridge_slave_0) entered disabled state
[  208.300228][T16997] ext4 filesystem being mounted at /990/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  208.333314][T17011] loop3: detected capacity change from 0 to 1024
[  208.378331][T17011] EXT4-fs: Ignoring removed nomblk_io_submit option
[  208.389462][T17015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  208.404706][T17015] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  208.430566][T17011] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  208.431754][T16997] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4887: bg 0: block 224: padding at end of block bitmap is not set
[  208.472677][T12161] 
 (unregistering): (slave bond_slave_0): Releasing backup interface
[  208.503127][T12161] 
 (unregistering): (slave bond_slave_1): Releasing backup interface
[  208.524142][T16997] EXT4-fs (loop4): Remounting filesystem read-only
[  208.536700][T14000] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  208.561437][T12161] 
 (unregistering): Released all slaves
[  208.624849][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  208.692237][T12161] hsr_slave_0: left promiscuous mode
[  208.700109][T12161] hsr_slave_1: left promiscuous mode
[  208.715954][T12161] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  208.723555][T12161] batman_adv: batadv0: Removing interface: batadv_slave_0
[  208.735895][T12161] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  208.743493][T12161] batman_adv: batadv0: Removing interface: batadv_slave_1
[  208.763777][T12161] veth1_macvtap: left promiscuous mode
[  208.772062][T12161] veth1_vlan: left promiscuous mode
[  208.916288][T17047] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  208.931176][T12161] team0 (unregistering): Port device team_slave_1 removed
[  208.945443][T12161] team0 (unregistering): Port device team_slave_0 removed
[  209.121680][T17064] loop5: detected capacity change from 0 to 1764
[  209.151751][T17064] iso9660: Unknown parameter 'hidemxide'
[  209.245825][T17072] atomic_op ffff8881172cbd28 conn xmit_atomic 0000000000000000
[  209.309706][T17028] chnl_net:caif_netlink_parms(): no params data found
[  209.384891][T17028] bridge0: port 1(bridge_slave_0) entered blocking state
[  209.392092][T17028] bridge0: port 1(bridge_slave_0) entered disabled state
[  209.410558][T17028] bridge_slave_0: entered allmulticast mode
[  209.429412][T17028] bridge_slave_0: entered promiscuous mode
[  209.446506][T17028] bridge0: port 2(bridge_slave_1) entered blocking state
[  209.453689][T17028] bridge0: port 2(bridge_slave_1) entered disabled state
[  209.465909][T17081] loop3: detected capacity change from 0 to 4096
[  209.480337][T17028] bridge_slave_1: entered allmulticast mode
[  209.490825][T17081] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  209.492735][T17028] bridge_slave_1: entered promiscuous mode
[  209.573772][T17028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  209.593441][T17028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  209.606472][T17086] loop5: detected capacity change from 0 to 2048
[  209.640421][T17086] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  209.655935][T17028] team0: Port device team_slave_0 added
[  209.668392][T17028] team0: Port device team_slave_1 added
[  209.710731][T17028] batman_adv: batadv0: Adding interface: batadv_slave_0
[  209.717720][T17028] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  209.743720][T17028] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  209.839154][T17096] bond0: (slave macvlan2): Error -98 calling set_mac_address
[  209.850586][T17028] batman_adv: batadv0: Adding interface: batadv_slave_1
[  209.857570][T17028] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  209.883598][T17028] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  209.997589][T17028] hsr_slave_0: entered promiscuous mode
[  210.015454][T17028] hsr_slave_1: entered promiscuous mode
[  210.036392][T17028] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  210.059185][T17028] Cannot create hsr debugfs directory
[  210.136956][T14000] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  210.195303][T17086] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  210.219393][T17086] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  210.232032][T17086] EXT4-fs (loop5): This should not happen!! Data will be lost
[  210.232032][T17086] 
[  210.241721][T17086] EXT4-fs (loop5): Total free blocks count 0
[  210.247734][T17086] EXT4-fs (loop5): Free/Dirty block details
[  210.253728][T17086] EXT4-fs (loop5): free_blocks=2415919104
[  210.259525][T17086] EXT4-fs (loop5): dirty_blocks=8192
[  210.264869][T17086] EXT4-fs (loop5): Block reservation details
[  210.270930][T17086] EXT4-fs (loop5): i_reserved_data_blocks=512
[  210.316752][T17028] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  210.326781][T17028] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  210.351654][T17090] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28
[  210.451766][T17028] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  210.461647][T17028] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  210.536054][T17122] loop8: detected capacity change from 0 to 2048
[  210.545315][T17122] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  210.559910][T17028] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  210.559946][T17028] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  210.600086][T17028] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  210.600164][T17028] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  210.684019][T17028] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  210.692149][T17028] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  210.694444][T17028] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  210.696504][T17028] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  210.791243][T17028] 8021q: adding VLAN 0 to HW filter on device bond0
[  210.804263][T17028] 8021q: adding VLAN 0 to HW filter on device team0
[  210.815096][T13266] bridge0: port 1(bridge_slave_0) entered blocking state
[  210.815133][T13266] bridge0: port 1(bridge_slave_0) entered forwarding state
[  210.821324][T13266] bridge0: port 2(bridge_slave_1) entered blocking state
[  210.821425][T13266] bridge0: port 2(bridge_slave_1) entered forwarding state
[  210.977061][T17028] 8021q: adding VLAN 0 to HW filter on device batadv0
[  211.065874][T17145] loop5: detected capacity change from 0 to 8192
[  211.074813][T17145] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  211.176879][T17028] veth0_vlan: entered promiscuous mode
[  211.185849][T17028] veth1_vlan: entered promiscuous mode
[  211.229609][T17028] veth0_macvtap: entered promiscuous mode
[  211.230943][T17028] veth1_macvtap: entered promiscuous mode
[  211.250000][T17028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  211.261388][T17028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  211.271267][T17028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  211.271287][T17028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  211.271305][T17028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  211.302172][T17028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  211.358746][T17122] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  211.359039][T17122] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  211.359070][T17122] EXT4-fs (loop8): This should not happen!! Data will be lost
[  211.359070][T17122] 
[  211.359086][T17122] EXT4-fs (loop8): Total free blocks count 0
[  211.359099][T17122] EXT4-fs (loop8): Free/Dirty block details
[  211.359113][T17122] EXT4-fs (loop8): free_blocks=2415919104
[  211.359128][T17122] EXT4-fs (loop8): dirty_blocks=8192
[  211.359143][T17122] EXT4-fs (loop8): Block reservation details
[  211.359205][T17122] EXT4-fs (loop8): i_reserved_data_blocks=512
[  211.367825][T17028] batman_adv: batadv0: Interface activated: batadv_slave_0
[  211.395194][T17128] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28
[  211.400480][T17028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  211.462770][T17028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  211.472721][T17028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  211.483211][T17028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  211.493103][T17028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  211.503685][T17028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  211.520355][T17169] loop3: detected capacity change from 0 to 1024
[  211.582011][T17169] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  211.612127][T17169] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none.
[  211.654648][T17028] batman_adv: batadv0: Interface activated: batadv_slave_1
[  211.670695][T14000] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  211.712689][T17028] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  211.721445][T17028] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  211.730253][T17028] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  211.738993][T17028] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  212.055334][T17203] netlink: 'syz.3.4960': attribute type 21 has an invalid length.
[  212.078019][T17203] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4960'.
[  212.230942][T17212] netlink: 'syz.8.4964': attribute type 1 has an invalid length.
[  212.324199][   T29] kauditd_printk_skb: 222 callbacks suppressed
[  212.324214][   T29] audit: type=1400 audit(1737781034.127:5673): avc:  denied  { read } for  pid=17214 comm="syz.2.4966" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  212.360584][T17212] bond0: (slave ip6erspan0): making interface the new active one
[  212.392347][T17212] bond0: (slave ip6erspan0): Enslaving as an active interface with an up link
[  212.445499][   T29] audit: type=1400 audit(1737781034.157:5674): avc:  denied  { open } for  pid=17214 comm="syz.2.4966" path="/dev/usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  212.469636][   T29] audit: type=1400 audit(1737781034.157:5675): avc:  denied  { ioctl } for  pid=17214 comm="syz.2.4966" path="/dev/usbmon7" dev="devtmpfs" ino=163 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  212.551138][   T29] audit: type=1400 audit(1737781034.337:5676): avc:  denied  { setopt } for  pid=17227 comm="syz.5.4971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  212.570878][   T29] audit: type=1400 audit(1737781034.337:5677): avc:  denied  { read } for  pid=17227 comm="syz.5.4971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  212.706603][   T29] audit: type=1326 audit(1737781034.397:5678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17223 comm="syz.3.4969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce8f14cd29 code=0x7fc00000
[  212.730460][   T29] audit: type=1326 audit(1737781034.397:5679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17223 comm="syz.3.4969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fce8f14cd29 code=0x7fc00000
[  212.754055][   T29] audit: type=1326 audit(1737781034.397:5680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17223 comm="syz.3.4969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce8f14cd29 code=0x7fc00000
[  212.777714][   T29] audit: type=1326 audit(1737781034.397:5681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17223 comm="syz.3.4969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce8f14cd29 code=0x7fc00000
[  212.794336][T17245] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  212.801223][   T29] audit: type=1326 audit(1737781034.397:5682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17223 comm="syz.3.4969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce8f14cd29 code=0x7fc00000
[  212.976646][T17252] loop3: detected capacity change from 0 to 512
[  213.005516][    T9] kernel write not supported for file [eventfd] (pid: 9 comm: kworker/0:1)
[  213.058525][T17252] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  213.075870][T17260] loop8: detected capacity change from 0 to 1024
[  213.078423][T17252] ext4 filesystem being mounted at /236/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  213.107603][T17260] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  213.120253][T17260] EXT4-fs (loop8): revision level too high, forcing read-only mode
[  213.128887][T17260] EXT4-fs (loop8): orphan cleanup on readonly fs
[  213.143287][T17260] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5838: Corrupt filesystem
[  213.161160][T17260] EXT4-fs (loop8): Remounting filesystem read-only
[  213.167801][T17260] EXT4-fs (loop8): 1 orphan inode deleted
[  213.175682][T17260] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  213.187964][T17260] SELinux: (dev loop8, type ext4) getxattr errno 5
[  213.195517][T17260] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  213.232191][T14000] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  213.281746][T17276] netlink: 100 bytes leftover after parsing attributes in process `syz.3.4988'.
[  213.377915][T17283] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  213.513355][T17292] loop5: detected capacity change from 0 to 2048
[  213.521509][T17296] loop8: detected capacity change from 0 to 1024
[  213.549586][T17296] EXT4-fs: Ignoring removed nobh option
[  213.561197][T17292] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  213.574928][T17296] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  213.617560][T17296] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  213.748380][T17309] netlink: 92 bytes leftover after parsing attributes in process `syz.2.5003'.
[  213.812911][T11228] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  213.924247][T17320] netlink: 'syz.3.5008': attribute type 1 has an invalid length.
[  213.932178][T17320] netlink: 'syz.3.5008': attribute type 2 has an invalid length.
[  213.941432][T17322] netlink: 'syz.2.5007': attribute type 3 has an invalid length.
[  214.033066][T17328] loop8: detected capacity change from 0 to 1024
[  214.062385][T17328] EXT4-fs: Ignoring removed nomblk_io_submit option
[  214.104385][T17328] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  214.259245][T11228] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  214.359224][T17345] netlink: 'syz.8.5018': attribute type 21 has an invalid length.
[  214.391715][T17345] netlink: 132 bytes leftover after parsing attributes in process `syz.8.5018'.
[  214.669307][T17305] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  214.708234][T17305] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  214.720910][T17305] EXT4-fs (loop5): This should not happen!! Data will be lost
[  214.720910][T17305] 
[  214.730569][T17305] EXT4-fs (loop5): Total free blocks count 0
[  214.736624][T17305] EXT4-fs (loop5): Free/Dirty block details
[  214.742723][T17305] EXT4-fs (loop5): free_blocks=2415919104
[  214.748630][T17305] EXT4-fs (loop5): dirty_blocks=5520
[  214.753940][T17305] EXT4-fs (loop5): Block reservation details
[  214.759984][T17305] EXT4-fs (loop5): i_reserved_data_blocks=345
[  214.793533][T17370] hub 9-0:1.0: USB hub found
[  214.798416][T17370] hub 9-0:1.0: 8 ports detected
[  214.830466][T17292] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28
[  214.894433][T17375] wireguard0: entered promiscuous mode
[  214.900270][T17375] wireguard0: entered allmulticast mode
[  214.984322][T17381] loop4: detected capacity change from 0 to 128
[  214.994451][T17381] vfat: Unknown parameter 'sched_switch'
[  215.050984][T17383] sit0: entered promiscuous mode
[  215.071305][T17383] netlink: 'syz.2.5037': attribute type 1 has an invalid length.
[  215.079238][T17383] netlink: 1 bytes leftover after parsing attributes in process `syz.2.5037'.
[  215.200704][T17390] loop5: detected capacity change from 0 to 512
[  215.247609][T17395] loop8: detected capacity change from 0 to 2048
[  215.280879][T17390] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  215.307630][T17390] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  215.347681][T17395] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  215.384525][T17412] loop4: detected capacity change from 0 to 1024
[  215.444428][T17412] EXT4-fs: Ignoring removed nomblk_io_submit option
[  215.484821][T17417] EXT4-fs error (device loop5): ext4_empty_dir:3103: inode #12: block 32: comm syz.5.5034: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[  215.528495][T17417] EXT4-fs warning (device loop5): ext4_empty_dir:3105: inode #12: comm syz.5.5034: directory missing '.'
[  215.540162][T17412] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  215.540217][T17423] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  215.720932][T17395] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  215.738442][T17395] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  215.742134][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  215.750986][T17395] EXT4-fs (loop8): This should not happen!! Data will be lost
[  215.750986][T17395] 
[  215.769585][T17395] EXT4-fs (loop8): Total free blocks count 0
[  215.775613][T17395] EXT4-fs (loop8): Free/Dirty block details
[  215.781744][T17395] EXT4-fs (loop8): free_blocks=2415919104
[  215.787484][T17395] EXT4-fs (loop8): dirty_blocks=8192
[  215.792924][T17395] EXT4-fs (loop8): Block reservation details
[  215.799055][T17395] EXT4-fs (loop8): i_reserved_data_blocks=512
[  215.872481][T17419] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28
[  216.014683][T16659] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  216.140760][T17450] netlink: 'syz.3.5063': attribute type 1 has an invalid length.
[  216.205854][ T1050] kernel write not supported for file [eventfd] (pid: 1050 comm: kworker/0:2)
[  216.224726][T17450] bond1: (slave ip6erspan0): making interface the new active one
[  216.249273][T17461] loop8: detected capacity change from 0 to 128
[  216.256347][T17450] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link
[  216.298847][T17463] usb usb7: usbfs: process 17463 (syz.4.5069) did not claim interface 0 before use
[  216.427657][T17477] loop4: detected capacity change from 0 to 2048
[  216.470334][T17477] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  216.830977][T17507] loop3: detected capacity change from 0 to 2048
[  216.873503][T17507] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  216.941935][T17518] sg_write: data in/out 768/4 bytes for SCSI command 0x7d-- guessing data in;
[  216.941935][T17518]    program syz.2.5092 not setting count and/or reply_len properly
[  216.998370][T17507] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none.
[  217.032746][T17477] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  217.078423][T17477] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  217.082968][T17520] loop8: detected capacity change from 0 to 2048
[  217.091032][T17477] EXT4-fs (loop4): This should not happen!! Data will be lost
[  217.091032][T17477] 
[  217.091050][T17477] EXT4-fs (loop4): Total free blocks count 0
[  217.091065][T17477] EXT4-fs (loop4): Free/Dirty block details
[  217.091090][T17477] EXT4-fs (loop4): free_blocks=2415919104
[  217.124811][T17477] EXT4-fs (loop4): dirty_blocks=8192
[  217.130137][T17477] EXT4-fs (loop4): Block reservation details
[  217.136254][T17477] EXT4-fs (loop4): i_reserved_data_blocks=512
[  217.146735][T17520] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  217.174158][T14000] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  217.201745][T17498] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28
[  217.285195][T17535] netlink: 'syz.5.5096': attribute type 1 has an invalid length.
[  217.293097][T17535] netlink: 'syz.5.5096': attribute type 2 has an invalid length.
[  217.354204][T13266] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  217.397517][   T29] kauditd_printk_skb: 180 callbacks suppressed
[  217.397531][   T29] audit: type=1326 audit(1737781039.197:5859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17539 comm="syz.5.5102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff68c80cd29 code=0x7ffc0000
[  217.398559][T13266] EXT4-fs (loop8): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 5 with error 28
[  217.405941][   T29] audit: type=1326 audit(1737781039.217:5860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17539 comm="syz.5.5102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff68c80cd29 code=0x7ffc0000
[  217.427197][T13266] EXT4-fs (loop8): This should not happen!! Data will be lost
[  217.427197][T13266] 
[  217.427222][T13266] EXT4-fs (loop8): Total free blocks count 0
[  217.427255][T13266] EXT4-fs (loop8): Free/Dirty block details
[  217.485129][T13266] EXT4-fs (loop8): free_blocks=2415919104
[  217.491026][T13266] EXT4-fs (loop8): dirty_blocks=16
[  217.496066][   T29] audit: type=1326 audit(1737781039.247:5861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17539 comm="syz.5.5102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff68c80cd29 code=0x7ffc0000
[  217.496189][T13266] EXT4-fs (loop8): Block reservation details
[  217.519810][   T29] audit: type=1326 audit(1737781039.247:5862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17539 comm="syz.5.5102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff68c80cd29 code=0x7ffc0000
[  217.525693][T13266] EXT4-fs (loop8): i_reserved_data_blocks=1
[  217.549435][   T29] audit: type=1326 audit(1737781039.247:5863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17539 comm="syz.5.5102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff68c80cd29 code=0x7ffc0000
[  217.556537][T11228] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  217.578934][   T29] audit: type=1326 audit(1737781039.247:5864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17539 comm="syz.5.5102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff68c80cd29 code=0x7ffc0000
[  217.611439][   T29] audit: type=1326 audit(1737781039.247:5865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17539 comm="syz.5.5102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff68c80cd29 code=0x7ffc0000
[  217.634975][   T29] audit: type=1326 audit(1737781039.247:5866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17539 comm="syz.5.5102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff68c80cd29 code=0x7ffc0000
[  217.658528][   T29] audit: type=1326 audit(1737781039.247:5867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17539 comm="syz.5.5102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff68c80cd29 code=0x7ffc0000
[  217.682070][   T29] audit: type=1326 audit(1737781039.247:5868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17539 comm="syz.5.5102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff68c80cd29 code=0x7ffc0000
[  217.734916][T17544] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5104'.
[  217.743952][T17544] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5104'.
[  217.817851][T17550] vhci_hcd: invalid port number 15
[  217.915033][T17557] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5110'.
[  217.959751][T17555] Falling back ldisc for ttyS3.
[  218.458950][T17605] xt_hashlimit: max too large, truncated to 1048576
[  218.698326][T17617] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5136'.
[  218.806650][T17624] loop5: detected capacity change from 0 to 164
[  218.831847][T17624] +}[@: attempt to access beyond end of device
[  218.831847][T17624] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164
[  218.883576][T17624] +}[@: attempt to access beyond end of device
[  218.883576][T17624] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164
[  218.941923][T17626] loop4: detected capacity change from 0 to 1024
[  218.967658][T17626] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  218.978654][T17626] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869)
[  218.997326][T17628] loop5: detected capacity change from 0 to 1024
[  219.015945][T17630] batadv_slave_1: entered promiscuous mode
[  219.018115][T17628] EXT4-fs: Ignoring removed nobh option
[  219.041661][T17626] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  219.057019][T17626] EXT4-fs (loop4): invalid journal inode
[  219.064756][T17626] EXT4-fs (loop4): can't get journal size
[  219.073722][T17628] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  219.107839][T17628] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4115: comm syz.5.5140: Allocating blocks 497-513 which overlap fs metadata
[  219.138447][T17629] batadv_slave_1: left promiscuous mode
[  219.149311][T17636] loop8: detected capacity change from 0 to 512
[  219.155830][T17636] EXT4-fs: Ignoring removed orlov option
[  219.161601][T17636] EXT4-fs: Ignoring removed oldalloc option
[  219.187420][T17628] EXT4-fs (loop5): pa ffff88810684e770: logic 256, phys. 369, len 9
[  219.195579][T17628] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 1
[  219.207772][T17626] EXT4-fs error (device loop4): ext4_protect_reserved_inode:182: inode #3: comm syz.4.5138: blocks 2-2 from inode overlap system zone
[  219.252683][T17636] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  219.266550][T17640] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  219.287271][T17626] EXT4-fs (loop4): failed to initialize system zone (-117)
[  219.311054][T17636] ext4 filesystem being mounted at /449/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  219.322298][T17626] EXT4-fs (loop4): mount failed
[  219.345188][T16659] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  219.367532][T17636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  219.380431][T17640] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  219.408471][T17636] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  219.431517][T17636] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5142'.
[  219.476179][T17647] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5146'.
[  219.488706][T17647] netlink: 5044 bytes leftover after parsing attributes in process `syz.2.5146'.
[  219.507819][T17640] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  219.576014][T17640] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  219.625449][T17655] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5151'.
[  219.657735][T17640] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  219.684942][T17659] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5152'.
[  219.692824][T17640] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  219.721924][T17640] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  219.790164][T17640] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  219.825889][T17668] netlink: 96 bytes leftover after parsing attributes in process `syz.5.5156'.
[  220.003427][T17675] loop3: detected capacity change from 0 to 2048
[  220.029891][T11228] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  220.052173][T17675] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  220.118746][T17675] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none.
[  220.153510][T14000] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  220.919426][T17728] relay: one or more items not logged [item size (56) > sub-buffer size (10)]
[  221.242482][T17756] batadv_slave_1: entered promiscuous mode
[  221.265010][T17756] batadv_slave_1: left promiscuous mode
[  221.366850][T17764] loop8: detected capacity change from 0 to 2048
[  221.403431][T17771] loop3: detected capacity change from 0 to 256
[  221.432023][T17764] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  221.452873][T17771] SELinux:  policydb version 946238581 does not match my version range 15-34
[  221.482075][T17771] SELinux: failed to load policy
[  221.511286][T17764] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none.
[  221.575583][T11228] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  221.607019][T17779] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  222.412429][   T29] kauditd_printk_skb: 86 callbacks suppressed
[  222.412446][   T29] audit: type=1326 audit(1737781044.217:5955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17821 comm="syz.8.5222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89dfadcd29 code=0x7ffc0000
[  222.479753][   T29] audit: type=1326 audit(1737781044.247:5956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17821 comm="syz.8.5222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=204 compat=0 ip=0x7f89dfadcd29 code=0x7ffc0000
[  222.503954][   T29] audit: type=1326 audit(1737781044.247:5957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17821 comm="syz.8.5222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89dfadcd29 code=0x7ffc0000
[  222.527498][   T29] audit: type=1400 audit(1737781044.267:5958): avc:  denied  { bind } for  pid=17823 comm="syz.4.5223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  222.547133][   T29] audit: type=1400 audit(1737781044.267:5959): avc:  denied  { name_bind } for  pid=17823 comm="syz.4.5223" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  222.569136][   T29] audit: type=1400 audit(1737781044.267:5960): avc:  denied  { node_bind } for  pid=17823 comm="syz.4.5223" saddr=127.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1
[  222.674516][   T29] audit: type=1326 audit(1737781044.477:5961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17830 comm="syz.8.5226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89dfadcd29 code=0x7ffc0000
[  222.698183][   T29] audit: type=1326 audit(1737781044.477:5962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17830 comm="syz.8.5226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f89dfadcd29 code=0x7ffc0000
[  222.721816][   T29] audit: type=1326 audit(1737781044.477:5963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17830 comm="syz.8.5226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89dfadcd29 code=0x7ffc0000
[  222.721851][   T29] audit: type=1326 audit(1737781044.477:5964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17830 comm="syz.8.5226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f89dfadcd29 code=0x7ffc0000
[  223.031946][T17851] loop8: detected capacity change from 0 to 164
[  223.074457][T17851] syz.8.5236: attempt to access beyond end of device
[  223.074457][T17851] loop8: rw=524288, sector=263328, nr_sectors = 4 limit=164
[  223.093141][T17851] syz.8.5236: attempt to access beyond end of device
[  223.093141][T17851] loop8: rw=0, sector=263328, nr_sectors = 4 limit=164
[  223.117051][T17855] sg_write: data in/out 475/14 bytes for SCSI command 0x2-- guessing data in;
[  223.117051][T17855]    program syz.2.5238 not setting count and/or reply_len properly
[  223.210981][T17863] atomic_op ffff88810414d928 conn xmit_atomic 0000000000000000
[  223.281459][T17868] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  223.327574][T17874] batadv_slave_1: entered promiscuous mode
[  223.336409][T17875] __nla_validate_parse: 6 callbacks suppressed
[  223.336427][T17875] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5247'.
[  223.381400][T17875] netlink: 5044 bytes leftover after parsing attributes in process `syz.3.5247'.
[  223.415454][T17882] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  223.423015][T17882] batman_adv: batadv0: Removing interface: batadv_slave_0
[  223.440979][T17882] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  223.448498][T17882] batman_adv: batadv0: Removing interface: batadv_slave_1
[  223.495577][T17894] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5256'.
[  223.505329][T17894] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5256'.
[  223.556661][T17901] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5259'.
[  223.565137][T17898] bond0: (slave macvlan2): Error -98 calling set_mac_address
[  223.594498][T17894] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5256'.
[  223.622470][T17894] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5256'.
[  223.663001][T17894] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5256'.
[  223.686704][T17894] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5256'.
[  223.750226][T17907] siw: device registration error -23
[  223.768438][T17914] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5274'.
[  223.806442][T17922] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  223.882530][T17927] loop3: detected capacity change from 0 to 1764
[  223.897561][T17927] iso9660: Unknown parameter 'hidemxide'
[  224.026220][T17936] IPVS: Error connecting to the multicast addr
[  224.110124][T17942] loop4: detected capacity change from 0 to 1024
[  224.153422][T17942] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  224.173640][T17950] xt_hashlimit: size too large, truncated to 1048576
[  224.193467][T17942] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none.
[  224.347381][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  224.832730][T17997] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  224.840378][T17997] vhci_hcd: invalid port number 23
[  225.073987][T18026] loop3: detected capacity change from 0 to 512
[  225.093062][T18024] loop8: detected capacity change from 0 to 4096
[  225.107054][T18026] EXT4-fs: Ignoring removed i_version option
[  225.113212][T18026] EXT4-fs: Ignoring removed mblk_io_submit option
[  225.132870][T18024] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  225.145746][T18026] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  225.181147][T18026] EXT4-fs (loop3): 1 truncate cleaned up
[  225.194856][T18026] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  225.241043][T14000] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  225.356055][T18051] loop3: detected capacity change from 0 to 2048
[  225.412382][T18056] vlan2: entered allmulticast mode
[  225.420494][T18051] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  225.675002][T18051] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  225.690066][T18051] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  225.702753][T18051] EXT4-fs (loop3): This should not happen!! Data will be lost
[  225.702753][T18051] 
[  225.712427][T18051] EXT4-fs (loop3): Total free blocks count 0
[  225.718686][T18051] EXT4-fs (loop3): Free/Dirty block details
[  225.724767][T18051] EXT4-fs (loop3): free_blocks=2415919104
[  225.730609][T18051] EXT4-fs (loop3): dirty_blocks=8192
[  225.735955][T18051] EXT4-fs (loop3): Block reservation details
[  225.742128][T18051] EXT4-fs (loop3): i_reserved_data_blocks=512
[  225.760508][T11228] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  225.784304][T18067] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28
[  225.831734][T18081] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18081 comm=syz.5.5331
[  226.185020][T18108] pimreg: entered allmulticast mode
[  226.218973][T18108] pimreg: left allmulticast mode
[  226.983129][T18199] loop5: detected capacity change from 0 to 1024
[  227.003685][T18201] loop4: detected capacity change from 0 to 128
[  227.033505][T18199] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  227.061993][T18201] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  227.081270][T18199] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  227.106836][T18208] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  227.116208][T18199] EXT4-fs (loop5): orphan cleanup on readonly fs
[  227.128577][T18201] ext4 filesystem being mounted at /1079/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  227.152448][T18199] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5838: Corrupt filesystem
[  227.176415][T18199] EXT4-fs (loop5): Remounting filesystem read-only
[  227.200612][T18199] EXT4-fs (loop5): 1 orphan inode deleted
[  227.222574][ T3299] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  227.232157][T18199] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  227.268401][T18199] SELinux: (dev loop5, type ext4) getxattr errno 5
[  227.296717][T18199] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  227.410338][T18224] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  227.420874][T18224] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  227.494697][T18224] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  227.505085][T18224] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  227.565609][T18224] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  227.576060][T18224] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  227.641082][T18224] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  227.651479][T18224] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  227.662528][T18243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  227.708111][T18243] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  227.765807][T18224] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  227.774142][T18224] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  227.824661][T18224] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  227.832918][T18224] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  227.851452][T18224] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  227.859751][T18224] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  227.915429][T18224] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  227.923735][T18224] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  227.997318][T18257] loop5: detected capacity change from 0 to 2048
[  228.034992][   T29] kauditd_printk_skb: 127 callbacks suppressed
[  228.035009][   T29] audit: type=1400 audit(1737781049.837:6088): avc:  denied  { map } for  pid=18256 comm="syz.5.5390" path="/104/file1/bus" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  228.064153][   T29] audit: type=1400 audit(1737781049.837:6089): avc:  denied  { execute } for  pid=18256 comm="syz.5.5390" path="/104/file1/bus" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  228.184809][T18269] xt_hashlimit: max too large, truncated to 1048576
[  228.233239][T18272] loop5: detected capacity change from 0 to 1024
[  228.250793][T18269] Cannot find set identified by id 0 to match
[  228.281736][T18274] rdma_op ffff8881173a6180 conn xmit_rdma 0000000000000000
[  228.288790][T18272] EXT4-fs: Ignoring removed nobh option
[  228.312365][T18272] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  228.459223][T18285] ipip0: entered promiscuous mode
[  228.581154][T18294] __nla_validate_parse: 4 callbacks suppressed
[  228.581247][T18294] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5406'.
[  228.600227][T18296] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  228.619030][T16659] EXT4-fs unmount: 3 callbacks suppressed
[  228.619048][T16659] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  228.672417][T18296] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  228.713086][T18296] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  228.728990][   T29] audit: type=1400 audit(1737781050.537:6090): avc:  denied  { mount } for  pid=18299 comm="syz.5.5407" name="/" dev="rpc_pipefs" ino=52602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1
[  228.792081][T18296] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  228.811315][T18304] msdos: Unknown parameter '18446744073709551615��������01777777777777777777777��0xffffffffffffffff18446744073709551615������������������'
[  228.880521][T18296] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  228.922046][T18296] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  228.935308][   T29] audit: type=1400 audit(1737781050.747:6091): avc:  denied  { audit_write } for  pid=18309 comm="syz.8.5412" capability=29  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  228.949596][T18296] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  229.004726][T18296] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  229.017922][   T29] audit: type=1107 audit(1737781050.757:6092): pid=18309 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg=''
[  229.174500][T18319] loop8: detected capacity change from 0 to 2048
[  229.244679][T18319] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  230.194154][T18319] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  230.228059][T18319] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  230.240577][T18319] EXT4-fs (loop8): This should not happen!! Data will be lost
[  230.240577][T18319] 
[  230.250258][T18319] EXT4-fs (loop8): Total free blocks count 0
[  230.256356][T18319] EXT4-fs (loop8): Free/Dirty block details
[  230.262332][T18319] EXT4-fs (loop8): free_blocks=2415919104
[  230.268070][T18319] EXT4-fs (loop8): dirty_blocks=8192
[  230.273444][T18319] EXT4-fs (loop8): Block reservation details
[  230.279473][T18319] EXT4-fs (loop8): i_reserved_data_blocks=512
[  230.304455][T18327] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28
[  230.422361][T18355] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=18355 comm=syz.4.5432
[  230.454290][   T29] audit: type=1400 audit(1737781052.257:6093): avc:  denied  { unmount } for  pid=11228 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  230.529257][   T29] audit: type=1400 audit(1737781052.287:6094): avc:  denied  { audit_write } for  pid=18354 comm="syz.4.5432" capability=29  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  230.550580][   T29] audit: type=1107 audit(1737781052.287:6095): pid=18354 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='
[  230.550580][   T29] '
[  230.566232][   T29] audit: type=1400 audit(1737781052.307:6096): avc:  denied  { prog_load } for  pid=18356 comm="syz.3.5433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  230.585519][   T29] audit: type=1400 audit(1737781052.307:6097): avc:  denied  { bpf } for  pid=18356 comm="syz.3.5433" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  231.110894][T18396] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5451'.
[  231.119935][T18396] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5451'.
[  231.170530][T18402] 9pnet: p9_errstr2errno: server reported unknown error ���٫��á]���>.��1��S�@����|�iu�Yef�t�%�^
[  231.271424][T18413] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5459'.
[  231.364140][T18422] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  231.393269][T18416] bridge0: port 2(bridge_slave_1) entered disabled state
[  231.400521][T18416] bridge0: port 1(bridge_slave_0) entered disabled state
[  231.494028][T18416] bridge_slave_0: left allmulticast mode
[  231.500031][T18416] bridge_slave_0: left promiscuous mode
[  231.505701][T18416] bridge0: port 1(bridge_slave_0) entered disabled state
[  231.537412][T18416] bridge_slave_1: left allmulticast mode
[  231.543195][T18416] bridge_slave_1: left promiscuous mode
[  231.548990][T18416] bridge0: port 2(bridge_slave_1) entered disabled state
[  231.576719][T18416] bond0: (slave bond_slave_0): Releasing backup interface
[  231.594657][T18435] binfmt_misc: register: failed to install interpreter file ./file2
[  231.607643][T18416] bond0: (slave bond_slave_1): Releasing backup interface
[  231.642697][T18416] team0: Port device team_slave_0 removed
[  231.657473][T18416] team0: Port device team_slave_1 removed
[  231.715191][T18416] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  231.724325][T18416] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  231.733448][T18416] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  231.742688][T18416] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  231.808454][T18431] Falling back ldisc for ttyS3.
[  232.097193][T18476] loop4: detected capacity change from 0 to 512
[  232.118619][T18476] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  232.127737][T18476] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[  232.143247][T18476] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended
[  232.152805][T18476] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[  232.162504][T18476] System zones: 0-2, 18-18, 34-34
[  232.168229][T18476] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  232.186252][T18476] EXT4-fs (loop4): 1 truncate cleaned up
[  232.192501][T18476] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  232.210243][T18476] EXT4-fs error (device loop4): ext4_find_dest_de:2079: inode #2: block 3: comm syz.4.5490: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1
[  232.252919][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  232.596784][T18494] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5498'.
[  233.091698][   T29] kauditd_printk_skb: 121 callbacks suppressed
[  233.091716][   T29] audit: type=1400 audit(1737781054.897:6219): avc:  denied  { create } for  pid=18529 comm="syz.8.5511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  233.126522][T18532] ref_ctr_offset mismatch. inode: 0x2a5 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x82
[  233.166854][   T29] audit: type=1400 audit(1737781054.927:6220): avc:  denied  { bind } for  pid=18529 comm="syz.8.5511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  233.186374][   T29] audit: type=1400 audit(1737781054.927:6221): avc:  denied  { name_bind } for  pid=18529 comm="syz.8.5511" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1
[  233.207539][   T29] audit: type=1400 audit(1737781054.927:6222): avc:  denied  { node_bind } for  pid=18529 comm="syz.8.5511" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1
[  233.228522][   T29] audit: type=1400 audit(1737781054.927:6223): avc:  denied  { listen } for  pid=18529 comm="syz.8.5511" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  233.249269][   T29] audit: type=1400 audit(1737781054.927:6224): avc:  denied  { setopt } for  pid=18529 comm="syz.8.5511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  233.268910][   T29] audit: type=1400 audit(1737781054.927:6225): avc:  denied  { connect } for  pid=18529 comm="syz.8.5511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  233.288799][   T29] audit: type=1400 audit(1737781054.927:6226): avc:  denied  { name_connect } for  pid=18529 comm="syz.8.5511" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1
[  233.368702][   T29] audit: type=1400 audit(1737781054.967:6227): avc:  denied  { write } for  pid=18529 comm="syz.8.5511" laddr=172.20.20.170 lport=37726 faddr=172.20.20.170 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  233.429923][T18546] loop4: detected capacity change from 0 to 128
[  233.448358][   T29] audit: type=1400 audit(1737781055.247:6228): avc:  denied  { sys_module } for  pid=18547 comm="syz.5.5520" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  233.473600][T18546] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  233.487376][T18546] ext4 filesystem being mounted at /1092/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  233.549239][T18546] loop4: detected capacity change from 128 to 64
[  233.558922][T18546] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5838: Out of memory
[  233.568201][T18546] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5838: Out of memory
[  233.596253][T18546] EXT4-fs error (device loop4): ext4_evict_inode:256: inode #13: comm syz.4.5518: mark_inode_dirty error
[  233.623749][T18546] EXT4-fs warning (device loop4): ext4_evict_inode:259: couldn't mark inode dirty (err -12)
[  233.656960][ T3299] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5838: Out of memory
[  233.685479][ T3299] EXT4-fs error (device loop4): ext4_dirty_inode:6042: inode #2: comm syz-executor: mark_inode_dirty error
[  233.754523][T18563] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  233.755322][ T8732] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  233.930941][T18574] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in;
[  233.930941][T18574]    program syz.2.5530 not setting count and/or reply_len properly
[  233.978222][T18579] loop8: detected capacity change from 0 to 1024
[  234.038909][T18583] vxcan0: entered promiscuous mode
[  234.047787][T18583] vlan2: entered promiscuous mode
[  234.053062][T18583] vlan2: entered allmulticast mode
[  234.058327][T18583] vxcan0: entered allmulticast mode
[  234.074227][T18583] vxcan0: left allmulticast mode
[  234.079282][T18583] vxcan0: left promiscuous mode
[  234.086650][T18579] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  234.145967][T18579] EXT4-fs (loop8): shut down requested (0)
[  234.191222][T18579] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop8 ino=16
[  234.229336][T18590] batadv_slave_1: entered promiscuous mode
[  234.268938][T18590] batadv_slave_1: left promiscuous mode
[  234.284263][T18592] loop5: detected capacity change from 0 to 2048
[  234.298098][T11228] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  234.333902][T18592] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  234.472175][T18600] ip6gretap0: entered promiscuous mode
[  234.477793][T18600] ip6gretap0: entered allmulticast mode
[  234.542990][T18571] chnl_net:caif_netlink_parms(): no params data found
[  234.565699][T13296] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  234.608007][T13296] EXT4-fs (loop5): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 5 with error 28
[  234.620495][T13296] EXT4-fs (loop5): This should not happen!! Data will be lost
[  234.620495][T13296] 
[  234.630216][T13296] EXT4-fs (loop5): Total free blocks count 0
[  234.636368][T13296] EXT4-fs (loop5): Free/Dirty block details
[  234.642404][T13296] EXT4-fs (loop5): free_blocks=2415919104
[  234.648214][T13296] EXT4-fs (loop5): dirty_blocks=16
[  234.653371][T13296] EXT4-fs (loop5): Block reservation details
[  234.659441][T13296] EXT4-fs (loop5): i_reserved_data_blocks=1
[  234.684128][T16659] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  234.756005][T18623] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5545'.
[  234.775228][T18571] bridge0: port 1(bridge_slave_0) entered blocking state
[  234.782363][T18571] bridge0: port 1(bridge_slave_0) entered disabled state
[  234.806641][T18571] bridge_slave_0: entered allmulticast mode
[  234.822655][T18628] loop5: detected capacity change from 0 to 1024
[  234.829754][T18571] bridge_slave_0: entered promiscuous mode
[  234.851259][T18571] bridge0: port 2(bridge_slave_1) entered blocking state
[  234.853208][T18628] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  234.858373][T18571] bridge0: port 2(bridge_slave_1) entered disabled state
[  234.871934][T18571] bridge_slave_1: entered allmulticast mode
[  234.904590][T18571] bridge_slave_1: entered promiscuous mode
[  234.913555][T18628] EXT4-fs (loop5): shut down requested (0)
[  234.923425][T18628] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop5 ino=16
[  234.953919][T16659] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  234.973807][T18571] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  234.991982][T18571] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  235.071394][T18571] team0: Port device team_slave_0 added
[  235.085129][T18571] team0: Port device team_slave_1 added
[  235.106285][T18571] batman_adv: batadv0: Adding interface: batadv_slave_0
[  235.113427][T18571] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  235.139407][T18571] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  235.210179][T18656] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5559'.
[  235.232272][T18652] loop5: detected capacity change from 0 to 512
[  235.239493][T18652] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  235.252410][T18571] batman_adv: batadv0: Adding interface: batadv_slave_1
[  235.259523][T18571] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  235.285471][T18571] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  235.314219][T18652] EXT4-fs (loop5): 1 truncate cleaned up
[  235.320813][T18652] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  235.490052][T18571] hsr_slave_0: entered promiscuous mode
[  235.501970][T18571] hsr_slave_1: entered promiscuous mode
[  235.508512][T18571] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  235.516494][T18571] Cannot create hsr debugfs directory
[  235.525111][T18666] vlan0: entered allmulticast mode
[  235.881639][T18571] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  235.891109][T18571] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  235.901038][T18571] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  235.913086][T18571] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  235.989538][T18571] 8021q: adding VLAN 0 to HW filter on device bond0
[  236.022457][T18571] 8021q: adding VLAN 0 to HW filter on device team0
[  236.042388][T13296] bridge0: port 1(bridge_slave_0) entered blocking state
[  236.049488][T13296] bridge0: port 1(bridge_slave_0) entered forwarding state
[  236.069474][T13296] bridge0: port 2(bridge_slave_1) entered blocking state
[  236.076555][T13296] bridge0: port 2(bridge_slave_1) entered forwarding state
[  236.183133][T18571] 8021q: adding VLAN 0 to HW filter on device batadv0
[  236.202604][T18695] xt_hashlimit: max too large, truncated to 1048576
[  236.326287][T18571] veth0_vlan: entered promiscuous mode
[  236.343334][T18571] veth1_vlan: entered promiscuous mode
[  236.351149][T16659] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  236.401989][T18708] syz_tun: entered allmulticast mode
[  236.412894][T18571] veth0_macvtap: entered promiscuous mode
[  236.425865][T18707] syz_tun: left allmulticast mode
[  236.432201][T18571] veth1_macvtap: entered promiscuous mode
[  236.469102][T18571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  236.479726][T18571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  236.489681][T18571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  236.500180][T18571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  236.510067][T18571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  236.520668][T18571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  236.582231][T18571] batman_adv: batadv0: Interface activated: batadv_slave_0
[  236.617535][T18571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  236.628049][T18571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  236.638013][T18571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  236.648562][T18571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  236.658518][T18571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  236.669143][T18571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  236.680215][T18571] batman_adv: batadv0: Interface activated: batadv_slave_1
[  236.688616][T18571] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  236.697326][T18571] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  236.706071][T18571] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  236.714885][T18571] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  237.042699][T18712] Set syz1 is full, maxelem 65536 reached
[  237.098503][T18738] @: renamed from vlan0 (while UP)
[  237.124696][T18739] ref_ctr_offset mismatch. inode: 0x7ad offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x82
[  237.488545][T18766] netlink: 64 bytes leftover after parsing attributes in process `syz.5.5598'.
[  238.150516][   T29] kauditd_printk_skb: 91 callbacks suppressed
[  238.150533][   T29] audit: type=1326 audit(1737781059.957:6320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18828 comm="syz.0.5612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74fc16cd29 code=0x7ffc0000
[  238.234929][   T29] audit: type=1326 audit(1737781059.997:6321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18828 comm="syz.0.5612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7f74fc16cd29 code=0x7ffc0000
[  238.258605][   T29] audit: type=1326 audit(1737781059.997:6322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18828 comm="syz.0.5612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74fc16cd29 code=0x7ffc0000
[  238.282189][   T29] audit: type=1326 audit(1737781059.997:6323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18828 comm="syz.0.5612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74fc16cd29 code=0x7ffc0000
[  238.305866][   T29] audit: type=1400 audit(1737781059.997:6324): avc:  denied  { ioctl } for  pid=18830 comm="syz.8.5613" path="socket:[55121]" dev="sockfs" ino=55121 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  238.330741][   T29] audit: type=1400 audit(1737781060.027:6325): avc:  denied  { mount } for  pid=18834 comm="syz.5.5615" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  238.353749][T18843] sg_write: data in/out 475/14 bytes for SCSI command 0x2-- guessing data in;
[  238.353749][T18843]    program syz.3.5618 not setting count and/or reply_len properly
[  238.497024][   T29] audit: type=1326 audit(1737781060.197:6326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18846 comm="syz.0.5619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74fc16cd29 code=0x7ffc0000
[  238.520647][   T29] audit: type=1326 audit(1737781060.197:6327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18846 comm="syz.0.5619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74fc16cd29 code=0x7ffc0000
[  238.544170][   T29] audit: type=1326 audit(1737781060.207:6328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18846 comm="syz.0.5619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f74fc16cd29 code=0x7ffc0000
[  238.567830][   T29] audit: type=1326 audit(1737781060.207:6329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18846 comm="syz.0.5619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74fc16cd29 code=0x7ffc0000
[  238.835447][T18871] dummy0: entered promiscuous mode
[  238.849489][T18871] macvtap1: entered promiscuous mode
[  238.854984][T18871] macvtap1: entered allmulticast mode
[  238.860539][T18871] dummy0: entered allmulticast mode
[  238.883511][T18871] dummy0: left allmulticast mode
[  238.888579][T18871] dummy0: left promiscuous mode
[  239.250245][T18893] ref_ctr_offset mismatch. inode: 0x36c offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x82
[  239.451219][T18902] syz_tun: entered promiscuous mode
[  239.471872][T18902] batadv_slave_0: entered promiscuous mode
[  239.491154][T18902] hsr1: Slave A (syz_tun) is not up; please bring it up to get a fully working HSR network
[  239.501229][T18902] hsr1: Slave B (batadv_slave_0) is not up; please bring it up to get a fully working HSR network
[  239.528394][T18902] hsr1: entered allmulticast mode
[  239.533519][T18902] syz_tun: entered allmulticast mode
[  239.538946][T18902] batadv_slave_0: entered allmulticast mode
[  239.794485][T18921] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  239.802086][T18921] batman_adv: batadv0: Removing interface: batadv_slave_0
[  239.837548][T18921] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  239.845189][T18921] batman_adv: batadv0: Removing interface: batadv_slave_1
[  239.969611][T18927] wireguard0: entered promiscuous mode
[  239.975207][T18927] wireguard0: entered allmulticast mode
[  240.731635][T18967] xt_hashlimit: size too large, truncated to 1048576
[  240.793618][T18974] cgroup: Name too long
[  241.187616][T18988] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  241.206287][T18988] vhci_hcd: invalid port number 23
[  241.270870][T19000] loop5: detected capacity change from 0 to 512
[  241.296039][T19000] EXT4-fs: Ignoring removed i_version option
[  241.302386][T19000] EXT4-fs: Ignoring removed mblk_io_submit option
[  241.323817][T19000] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  241.405238][T19000] EXT4-fs (loop5): 1 truncate cleaned up
[  241.418701][T19000] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  241.463472][T16659] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  241.495862][T19011] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  241.504246][T19011] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  241.512505][T19011] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  241.520819][T19011] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  241.573557][T19011] vxlan0: entered promiscuous mode
[  241.578804][T19011] vxlan0: entered allmulticast mode
[  241.589939][T19011] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  241.598473][T19011] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  241.606879][T19011] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  241.615346][T19011] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  241.679532][T19020] vhci_hcd: default hub control req: 0000 v0000 i0000 l65535
[  241.756989][T19027] loop8: detected capacity change from 0 to 512
[  241.767626][T19028] raw_sendmsg: syz.3.5677 forgot to set AF_INET. Fix it!
[  241.811450][T19027] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  241.813593][T19030] wireguard0: entered promiscuous mode
[  241.826882][T19030] wireguard0: entered allmulticast mode
[  241.840814][T19027] EXT4-fs (loop8): 1 truncate cleaned up
[  241.847037][T19027] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  242.376989][T19051] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5688'.
[  242.474750][T19057] IPv6: NLM_F_CREATE should be specified when creating new route
[  242.568305][T19065] wireguard0: entered promiscuous mode
[  242.573810][T19065] wireguard0: entered allmulticast mode
[  242.599274][T19070] netlink: 3 bytes leftover after parsing attributes in process `syz.3.5697'.
[  242.655847][T19070] 0�X���: renamed from caif0
[  242.666115][T19070] 0�X���: entered allmulticast mode
[  242.671474][T19070] A link change request failed with some changes committed already. Interface 
60�X��� may have been left with an inconsistent configuration, please check.
[  243.420003][T11228] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  243.443974][T19106] vlan0: entered allmulticast mode
[  243.509820][   T29] kauditd_printk_skb: 115 callbacks suppressed
[  243.509835][   T29] audit: type=1326 audit(1737781065.317:6445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19107 comm="syz.8.5712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89dfadcd29 code=0x7ffc0000
[  243.604552][   T29] audit: type=1326 audit(1737781065.347:6446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19107 comm="syz.8.5712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7f89dfadcd29 code=0x7ffc0000
[  243.628327][   T29] audit: type=1326 audit(1737781065.347:6447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19107 comm="syz.8.5712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89dfadcd29 code=0x7ffc0000
[  243.778116][T19123] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5720'.
[  243.787752][T19123] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5720'.
[  243.805822][   T29] audit: type=1400 audit(1737781065.607:6448): avc:  denied  { write } for  pid=19124 comm="syz.3.5719" name="fd" dev="proc" ino=55653 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[  243.843292][T19123] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5720'.
[  243.853879][T19123] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5720'.
[  243.880278][T19123] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5720'.
[  243.889592][T19123] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5720'.
[  244.004043][   T29] audit: type=1326 audit(1737781065.807:6449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19137 comm="syz.8.5734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89dfadcd29 code=0x7ffc0000
[  244.027669][   T29] audit: type=1326 audit(1737781065.807:6450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19137 comm="syz.8.5734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89dfadcd29 code=0x7ffc0000
[  244.180923][   T29] audit: type=1326 audit(1737781065.857:6451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19137 comm="syz.8.5734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f89dfadcd29 code=0x7ffc0000
[  244.204455][   T29] audit: type=1326 audit(1737781065.857:6452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19137 comm="syz.8.5734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89dfadcd29 code=0x7ffc0000
[  244.228054][   T29] audit: type=1326 audit(1737781065.857:6453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19137 comm="syz.8.5734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89dfadcd29 code=0x7ffc0000
[  244.251590][   T29] audit: type=1326 audit(1737781065.857:6454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19137 comm="syz.8.5734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f89dfadcd29 code=0x7ffc0000
[  244.282257][T19146] loop8: detected capacity change from 0 to 512
[  244.289187][T19146] EXT4-fs: Ignoring removed i_version option
[  244.295219][T19146] EXT4-fs: Ignoring removed mblk_io_submit option
[  244.302165][T19146] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  244.313739][T19146] EXT4-fs (loop8): 1 truncate cleaned up
[  244.321674][T19146] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  244.377921][T11228] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  244.476059][T19153] loop5: detected capacity change from 0 to 512
[  244.492819][T19155] ref_ctr_offset mismatch. inode: 0xb62 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x82
[  244.510121][T19153] EXT4-fs: Ignoring removed oldalloc option
[  244.528336][T19153] EXT4-fs error (device loop5): ext4_xattr_inode_iget:436: comm syz.5.5727: Parent and EA inode have the same ino 15
[  244.551371][T19153] EXT4-fs error (device loop5): ext4_xattr_inode_iget:436: comm syz.5.5727: Parent and EA inode have the same ino 15
[  244.571120][T19153] EXT4-fs (loop5): 1 orphan inode deleted
[  244.612703][T19153] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  244.640237][T16659] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  244.834665][T19186] geneve2: entered promiscuous mode
[  244.840003][T19186] geneve2: entered allmulticast mode
[  245.078122][T19206] ref_ctr_offset mismatch. inode: 0xaa offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x82
[  245.345166][T19232] loop8: detected capacity change from 0 to 512
[  245.382769][T19232] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  245.440686][T19232] EXT4-fs (loop8): 1 truncate cleaned up
[  245.446672][T19232] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  245.858518][T19232] ==================================================================
[  245.866658][T19232] BUG: KCSAN: data-race in __xa_set_mark / xas_find_marked
[  245.874170][T19232] 
[  245.876511][T19232] write to 0xffff88810690b8a4 of 4 bytes by task 19258 on cpu 0:
[  245.884499][T19232]  __xa_set_mark+0x182/0x1b0
[  245.889120][T19232]  __folio_mark_dirty+0x3b5/0x4e0
[  245.894181][T19232]  mark_buffer_dirty+0x134/0x230
[  245.899139][T19232]  block_write_end+0x123/0x210
[  245.903929][T19232]  ext4_write_end+0x148/0x770
[  245.908641][T19232]  generic_perform_write+0x33c/0x4a0
[  245.913956][T19232]  ext4_buffered_write_iter+0x1ea/0x370
[  245.919537][T19232]  ext4_file_write_iter+0x383/0xf20
[  245.924761][T19232]  iter_file_splice_write+0x5f1/0x980
[  245.930142][T19232]  direct_splice_actor+0x160/0x2c0
[  245.935353][T19232]  splice_direct_to_actor+0x302/0x670
[  245.940749][T19232]  do_splice_direct+0xd7/0x150
[  245.945527][T19232]  do_sendfile+0x398/0x660
[  245.949971][T19232]  __x64_sys_sendfile64+0x110/0x150
[  245.955202][T19232]  x64_sys_call+0xfbd/0x2dc0
[  245.959819][T19232]  do_syscall_64+0xc9/0x1c0
[  245.964357][T19232]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  245.970285][T19232] 
[  245.972621][T19232] read to 0xffff88810690b8a4 of 4 bytes by task 19232 on cpu 1:
[  245.980275][T19232]  xas_find_marked+0x60a/0x660
[  245.985065][T19232]  find_get_entry+0x54/0x390
[  245.989703][T19232]  filemap_get_folios_tag+0x9e/0x210
[  245.995030][T19232]  file_write_and_wait_range+0x204/0x2f0
[  246.000700][T19232]  generic_buffers_fsync_noflush+0x46/0x120
[  246.006618][T19232]  ext4_sync_file+0x1ff/0x6c0
[  246.011356][T19232]  vfs_fsync_range+0x116/0x130
[  246.016138][T19232]  ext4_buffered_write_iter+0x326/0x370
[  246.021729][T19232]  ext4_file_write_iter+0x383/0xf20
[  246.026941][T19232]  iter_file_splice_write+0x5f1/0x980
[  246.032342][T19232]  direct_splice_actor+0x160/0x2c0
[  246.037480][T19232]  splice_direct_to_actor+0x302/0x670
[  246.042867][T19232]  do_splice_direct+0xd7/0x150
[  246.047680][T19232]  do_sendfile+0x398/0x660
[  246.052126][T19232]  __x64_sys_sendfile64+0x110/0x150
[  246.057360][T19232]  x64_sys_call+0xfbd/0x2dc0
[  246.061980][T19232]  do_syscall_64+0xc9/0x1c0
[  246.066513][T19232]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  246.072434][T19232] 
[  246.074768][T19232] value changed: 0x04000021 -> 0x0e000021
[  246.080504][T19232] 
[  246.082845][T19232] Reported by Kernel Concurrency Sanitizer on:
[  246.089018][T19232] CPU: 1 UID: 0 PID: 19232 Comm: syz.8.5765 Not tainted 6.13.0-syzkaller-07078-gb46c89c08f41 #0
[  246.099474][T19232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  246.109547][T19232] ==================================================================
[  246.509200][T11228] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.