last executing test programs:

1m34.879743311s ago: executing program 4 (id=1653):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback, 0x2}, 0x1c)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r2}, 0x18)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x6a, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @broadcast}, {0x0, 0x883e, 0x48, 0x0, @wg=@cookie={0x3, 0x3, "90c7205b89c6ba79f201fb2a7ccdec3f092308bf4d1ae199", "11da928cceb7f2257669a73e935ab02244656cfe8638fefb94440b907850c38e"}}}}}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000007c0)=@nat={'nat\x00', 0x19, 0x3, 0x2e4, [0x200000000a00, 0x0, 0x0, 0x200000000b96, 0x200000000bc6], 0x0, &(0x7f0000000300), &(0x7f0000000a00)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}, {0x0, '\x00', 0x1, 0xfffffffffffffffc, 0x2, [{0x9, 0x2, 0x8863, 'wg1\x00', 'veth0_to_batadv\x00', 'macvlan0\x00', 'pimreg\x00', @local, [0x0, 0x0, 0xff, 0xff, 0xff], @multicast, [0xff, 0xff, 0x0, 0x0, 0x0, 0xff], 0xae, 0xfe, 0x14e, [@statistic={{'statistic\x00', 0x0, 0x18}, {{0x0, 0x0, 0x2, 0x7, 0x7}}}], [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x6, 'syz0\x00', {0xad}}}}], @common=@log={'log\x00', 0x28, {{0x2, "7090146364987c16e8875da53684e30b35fee0cf19dadb4f0adbd2a24887", 0x1}}}}, {0x5, 0x10, 0x0, 'vlan0\x00', 'veth1\x00', 'veth0\x00', 'bridge_slave_0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0xff, 0xff, 0x0, 0x0, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], 0x6e, 0xa6, 0xd6, [], [@arpreply={'arpreply\x00', 0x10, {{@dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, 0xfffffffffffffffd}}}], @common=@redirect={'redirect\x00', 0x8, {{0xffffffffffffffff}}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffe}]}, 0x35c)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r4 = fsopen(&(0x7f00000003c0)='bpf\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, 0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc0189374, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), 0x0}, 0x20)
gettid()
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000000)
r5 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r5, &(0x7f00000004c0)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e24, @broadcast}}, 0x24)
socket$rxrpc(0x21, 0x2, 0xa)
connect$inet6(r0, &(0x7f0000000340)={0x2, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r1, &(0x7f0000000080)="dccfb93097e7a219f006890c92b8b16d99bc7c8af5ba65283ff441da68d2e7761627f96553a7c19d96bb3a1f2a525953734bc52d819da9260a5f6badc5f453de04ea87622a213c578c8afab8960b7c26d12fd94c415c9fd736cd1deacf88da374b1e048b6bc54033f776532ef69f942df2d67e0d82e19f541b95ff5452b60014404a7c41a0104e76293fb4d9fbc657bde4dc192562a43bdc4b9c1ae68aa72ceac7bedcee68929f8f35fc826cb011c062f14b6b86c1d9c6ec786850d4d575fb00a2ff81e8de8d3c4562533114", &(0x7f00000001c0)=""/179, 0x4}, 0x20)
socket(0x40000000015, 0x5, 0x0)
ptrace(0x10, 0x0)

1m34.728843044s ago: executing program 4 (id=1657):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x3}, 0x18)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd25, 0x25df9bfb, {0x0, 0x0, 0x0, r4, {0xd, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x54, 0x2, [@TCA_ROUTE4_ACT={0x50, 0x6, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xa, 0x5, 0x20, 0x7, 0x8}, 0x39}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xfc, 0x3}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000)

1m34.554177207s ago: executing program 4 (id=1658):
brk(0x400000ffc000)

1m34.352434661s ago: executing program 4 (id=1660):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000240)=ANY=[@ANYRES64=r3, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@minixdf}]}, 0x3, 0x43a, &(0x7f0000000340)="$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")
r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0)
open_by_handle_at(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="08000000020000000b00000000000000"], 0x80041)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x18)
socket$inet6_mptcp(0xa, 0x1, 0x106)
syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a80)=ANY=[@ANYRESDEC=r0, @ANYRES16=r0], 0x64}}, 0x20044800)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x10000857}, 0x4000084)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYRESHEX=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', <r7=>0x0})
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r7, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r9}, 0x10)
syz_clone(0x60000400, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x18)
r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x181000)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r10, 0xc0a85320, &(0x7f0000000c40)={{0x80}, 'port0\x00', 0x0, 0x100c40, 0x5, 0x6, 0x2, 0x40, 0x3, 0x0, 0x1, 0x5})
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r10, 0xc0a85320, &(0x7f0000000340)={{0xf2, 0x8}, 'port1\x00', 0x24, 0x1b1878, 0xfffffe00, 0x2, 0x0, 0x20800, 0x5, 0x0, 0x4, 0x3})
close(r10)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94)

1m33.354684681s ago: executing program 4 (id=1668):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x840, 0x0, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x174, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x160, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xc8, 0x3, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0xea3, 0x6}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d28}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xd8, 0x0, 0x9, 0x100000e0}}]}, {0x51, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x174}}, 0x0)

1m32.743721892s ago: executing program 4 (id=1674):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x9, 0x6}, 0x8d14, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
chdir(&(0x7f0000000040)='./file0\x00')

1m32.743563402s ago: executing program 32 (id=1674):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x9, 0x6}, 0x8d14, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
chdir(&(0x7f0000000040)='./file0\x00')

20.918866446s ago: executing program 3 (id=2289):
unshare(0x6a040000)
socket(0x27, 0x80002, 0x1000000)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x1, 0x6}, 0x2, 0x7fffffff, 0x2, 0x7, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001200), 0xa0000)
setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f00000002c0)={0x2, 'veth1_virt_wifi\x00'}, 0x18)
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYRES32], 0x6c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000100)=@framed={{0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0, @generic={0x65}, @initr0, @exit, @alu={0x4, 0x0, 0xc, 0x3}]}, &(0x7f0000000000)='GPL\x00'}, 0x94)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="2000000069000b00020000000009000000000000000000000800010002000000a1e61f4fb05466e1b5b5b0e9d68208ac8adfd8f85f952d51ae07000000000000009122fefb070186c7dba842fb1d89db790467690e60bdaf27d021f4efe762170a94cc000000000000007ce94dba1acb7e7153301df81eab889975ae4fafdf03a2557857aa8cbda3386b3efe860780a2c5f81049e5478415f65862024f1de1e950dff6c4fe842f9952e554b31d3fae8ca0b3b32734f0f39f1ceb48121c8e68f36617854e02059a937a75ace179283fb7b3a9d2bd91b955dd3b96a7b23f21dc775b67dc92c9937ae03ac401eacb848a20f18ae92054719faf"], 0x20}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a000000000000000400040030db918bc8ccf0be2dd9"], 0x1c}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000006800010002000000fcffff7f0000000000000000bc760560d601100454619917ef2e100c0002000200000004000000"], 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)
read(r2, &(0x7f0000000200)=""/209, 0xd1)
fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8})
fcntl$lock(r0, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd})
fcntl$lock(r0, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9})
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000640)={{{@in6=@dev, @in=@loopback}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f0000000180)=0xe8)
fcntl$lock(r0, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x9, 0x8f})
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000180)})
close_range(r7, 0xffffffffffffffff, 0x0)

19.913633646s ago: executing program 3 (id=2299):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="01000000030000000400010005"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000080)=r3}, 0x20)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="79610000442b1ca3052d65df0096e1000000", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4008084}, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f0000000000)={[{@i_version}, {@init_itable}, {@noblock_validity}]}, 0x1, 0x71e, &(0x7f0000000f40)="$eJzs3U1rXNUbAPDn3nb+yb+NJoKKLyAVxYqlkya2lK6sC9FNMVBwm4bkJsTc9MbMTG1CF+nKrYii4Ea/gxtXims/gF9BQbTURV1F7rykbzPNVJMMZH4/uNPn3Hub55yZzHkgZ5gTwNA6UT6kEc9HxEwSMd4+n0REpRkdjbjYuu/2rRvz5ZHE9vblP5LmPWU77vk/peMRsRURz0XET5WIU+nDeWsbmytzeZ6tt9uT9dW1ydrG5unl1bmlbCm7euHs2emz589duLB3Y33j/Q+erZ57Z+z7mcXZk1O/fpfExRhrX7t3HHup9ZxUyqfwPu/uR7IBSgbdAf6V8q15pPUuj2diPI40IwDgMNseidgGAIZMov4DwJDp/B2gs7a3X+tgvfz+dkSMdst/tL1mNtpchzx2O7lvZSKJiImD7CiH0tbNiLgyceLh37/koTXbx3VmLzrIvvqxnH8udpt/0p35J7rMP6Odz078R73nv7v5j/SY/2b6zPHei42iZ/6bES8c7ZY/2cmf9Mh/pc/8P9xZ+LvXte1vI17rWn+S+3L1/nzI5OJynp1pPXbPcaJx48NHjf9Yj/xbu4x/rc/xj3328s9bj8j/+iuPfv275S9r4qd95v+k8tYXva6V+Rd6jH+31/+bPvOff+mjzT5vBQAAAAAAAAAAAAAAAAAAAAAAAAAAgEMhjYixSNLqTpym1WprD++n41iaF7X6qcWicXUhmntlT0Ql7XzV8nirnZTtqfb38Xfa0w+034yIpyLi85H/N9vV+SJfGPTgAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDt+AP7//810tr/HwA45EYH3QEA4MCp/wAwfNR/ABg+6j8ADB/1HwCGj/oPAMNH/QcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADggM1culQe27dv3Zgv2wvXNhorxbXTC1ltpbramK/OF+tr1aWiWMqz6nyxutvPy4tibXo6Gtcn61mtPlnb2JxdLRpX67PLq3NL2WxWOZBRAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDjGWseSVqNiLQZp2m1GvFERExEJVlczrMzEfFkRPwyUhkp21OD7jQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7LHaxubKXJ5n6wKBQLATDHpmAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIN3d9PvQfcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYp/S2JiPI4Of7q2INX/5fcGWn+GxEff335y+tz9fr6VHn+z53z9a/a56cH0X8AYDedOt2p4wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQTW1jc2Uuz7P1fQwGPUYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPbOPwEAAP//vT/OxQ==")
r6 = creat(&(0x7f0000000380)='./bus\x00', 0x0)
io_setup(0x202, &(0x7f0000000200)=<r7=>0x0)
io_submit(r7, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x82, 0x1, 0x0, r6, &(0x7f0000000000), 0x100000, 0x3000}])

15.460208902s ago: executing program 3 (id=2343):
socket$kcm(0x10, 0x2, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='kfree\x00', r0}, 0x18)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000201010100000000000000000200000004000180180002801400018008000100b04c94a708000200ac1414aa140019"], 0x44}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}]}], {0x14}}, 0xc8}}, 0x0)
syz_emit_ethernet(0x42, &(0x7f0000000a40)={@local, @multicast, @val={@void}, {@ipv6={0x86dd, @udp={0x2, 0x6, "a341d0", 0x8, 0x11, 0x1, @private2, @dev={0xfe, 0x80, '\x00', 0x2e}, {[], {0x4e20, 0x4e23, 0x8}}}}}}, 0x0)
r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_config_ext={0x7, 0x6}, 0x0, 0xffff, 0x7f, 0x9, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x1)
socket$packet(0x11, 0x2, 0x300)
socket$key(0xf, 0x3, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e27}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000d900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000800000000000000000000000000030000000000000000"], 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r7}, 0x18)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
unshare(0x42000000)
writev(r3, &(0x7f0000000940)=[{&(0x7f0000000200)='\f7', 0x2}, {&(0x7f0000000100)='0', 0x1}], 0x2)

14.079500218s ago: executing program 3 (id=2354):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="01000000030000000400010005"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000080)=r3}, 0x20)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="79610000442b1ca3052d65df0096e1000000", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4008084}, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f0000000000)={[{@i_version}, {@init_itable}, {@noblock_validity}]}, 0x1, 0x71e, &(0x7f0000000f40)="$eJzs3U1rXNUbAPDn3nb+yb+NJoKKLyAVxYqlkya2lK6sC9FNMVBwm4bkJsTc9MbMTG1CF+nKrYii4Ea/gxtXims/gF9BQbTURV1F7rykbzPNVJMMZH4/uNPn3Hub55yZzHkgZ5gTwNA6UT6kEc9HxEwSMd4+n0REpRkdjbjYuu/2rRvz5ZHE9vblP5LmPWU77vk/peMRsRURz0XET5WIU+nDeWsbmytzeZ6tt9uT9dW1ydrG5unl1bmlbCm7euHs2emz589duLB3Y33j/Q+erZ57Z+z7mcXZk1O/fpfExRhrX7t3HHup9ZxUyqfwPu/uR7IBSgbdAf6V8q15pPUuj2diPI40IwDgMNseidgGAIZMov4DwJDp/B2gs7a3X+tgvfz+dkSMdst/tL1mNtpchzx2O7lvZSKJiImD7CiH0tbNiLgyceLh37/koTXbx3VmLzrIvvqxnH8udpt/0p35J7rMP6Odz078R73nv7v5j/SY/2b6zPHei42iZ/6bES8c7ZY/2cmf9Mh/pc/8P9xZ+LvXte1vI17rWn+S+3L1/nzI5OJynp1pPXbPcaJx48NHjf9Yj/xbu4x/rc/xj3328s9bj8j/+iuPfv275S9r4qd95v+k8tYXva6V+Rd6jH+31/+bPvOff+mjzT5vBQAAAAAAAAAAAAAAAAAAAAAAAAAAgEMhjYixSNLqTpym1WprD++n41iaF7X6qcWicXUhmntlT0Ql7XzV8nirnZTtqfb38Xfa0w+034yIpyLi85H/N9vV+SJfGPTgAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDt+AP7//810tr/HwA45EYH3QEA4MCp/wAwfNR/ABg+6j8ADB/1HwCGj/oPAMNH/QcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADggM1culQe27dv3Zgv2wvXNhorxbXTC1ltpbramK/OF+tr1aWiWMqz6nyxutvPy4tibXo6Gtcn61mtPlnb2JxdLRpX67PLq3NL2WxWOZBRAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDjGWseSVqNiLQZp2m1GvFERExEJVlczrMzEfFkRPwyUhkp21OD7jQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7LHaxubKXJ5n6wKBQLATDHpmAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIN3d9PvQfcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYp/S2JiPI4Of7q2INX/5fcGWn+GxEff335y+tz9fr6VHn+z53z9a/a56cH0X8AYDedOt2p4wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQTW1jc2Uuz7P1fQwGPUYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPbOPwEAAP//vT/OxQ==")
r6 = creat(&(0x7f0000000380)='./bus\x00', 0x0)
io_setup(0x202, &(0x7f0000000200)=<r7=>0x0)
io_submit(r7, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x82, 0x1, 0x0, r6, &(0x7f0000000000), 0x100000, 0x3000}])

9.378826529s ago: executing program 3 (id=2407):
socket$kcm(0x10, 0x2, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='kfree\x00', r0}, 0x18)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000201010100000000000000000200000004000180180002801400018008000100b04c94a708000200ac1414aa140019"], 0x44}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}]}], {0x14}}, 0xc8}}, 0x0)
syz_emit_ethernet(0x42, &(0x7f0000000a40)={@local, @multicast, @val={@void}, {@ipv6={0x86dd, @udp={0x2, 0x6, "a341d0", 0x8, 0x11, 0x1, @private2, @dev={0xfe, 0x80, '\x00', 0x2e}, {[], {0x4e20, 0x4e23, 0x8}}}}}}, 0x0)
r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_config_ext={0x7, 0x6}, 0x0, 0xffff, 0x7f, 0x9, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x1)
socket$packet(0x11, 0x2, 0x300)
socket$key(0xf, 0x3, 0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e27}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000d900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000800000000000000000000000000030000000000000000"], 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r7}, 0x18)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
unshare(0x42000000)
writev(r3, &(0x7f0000000940)=[{&(0x7f0000000200)='\f7', 0x2}, {&(0x7f0000000100)='0', 0x1}], 0x2)

9.061583715s ago: executing program 3 (id=2409):
prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd')
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r1 = syz_clone(0x25888200, 0x0, 0x0, 0x0, 0x0, 0x0)
rt_sigqueueinfo(r1, 0x9, &(0x7f000000df80)={0x0, 0x0, 0xffffffc0})

9.037514886s ago: executing program 33 (id=2409):
prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd')
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r1 = syz_clone(0x25888200, 0x0, 0x0, 0x0, 0x0, 0x0)
rt_sigqueueinfo(r1, 0x9, &(0x7f000000df80)={0x0, 0x0, 0xffffffc0})

3.803058277s ago: executing program 2 (id=2463):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10)
r2 = socket(0x10, 0x3, 0x9)
connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000b00)=ANY=[@ANYBLOB="1400000010000100001100010000000000000000000000000a"], 0x28}}, 0x0)

3.669470459s ago: executing program 2 (id=2465):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="01000000030000000400010005"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000080)=r3}, 0x20)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r5=>0xffffffffffffffff})
recvmmsg(r5, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="79610000442b1ca3052d65df0096e1000000", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4008084}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x548}, 0x1, 0x0, 0x0, 0x24004004}, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f0000000000)={[{@i_version}, {@init_itable}, {@noblock_validity}]}, 0x1, 0x71e, &(0x7f0000000f40)="$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")
r7 = creat(&(0x7f0000000380)='./bus\x00', 0x0)
io_setup(0x202, &(0x7f0000000200)=<r8=>0x0)
io_submit(r8, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x82, 0x1, 0x0, r7, &(0x7f0000000000), 0x100000, 0x3000}])

2.291085696s ago: executing program 2 (id=2484):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
creat(&(0x7f00000000c0)='./file0\x00', 0xce)
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x401ff, 0xe3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000180), 0x1}, 0x1, 0x7, 0x3, 0x27d50a2aa12aa55d, 0x0, 0x0, 0xfffd, 0x0, 0xfffffffd, 0x0, 0x8}, 0x0, 0xb000000000002001, 0xffffffffffffffff, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x15, 0xd, &(0x7f0000000100)=ANY=[@ANYRES32=r0, @ANYRES64=r0, @ANYRES32=r1], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x69d9b450c1fb548c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x2}, 0x18)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000001900010900000000200000000218000071b7931bb1a7ce7d0855352342e0db0002fd010000000008000100ac1414000800050064010100100016800c000100039266f68211bbd25c"], 0x44}}, 0x0)
semtimedop(0x0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000c80)='./file1\x00', 0x10804, &(0x7f00000005c0)={[{@data_err_abort}, {@journal_async_commit}, {@grpjquota}, {@i_version}, {@norecovery}, {@barrier_val={'barrier', 0x3d, 0x7}}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'norecovery'}}, {@context={'context', 0x3d, 'staff_u'}}, {@euid_eq}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@fsname={'fsname', 0x3d, 'i_version'}}]}, 0xfc, 0x572, &(0x7f0000000e40)="$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")
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=<r5=>0x0)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}}, 0x0)
r6 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0)
flock(r6, 0x2)
r7 = open(&(0x7f0000000180)='.\x00', 0x10000, 0x2)
r8 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0)
flock(r7, 0x2)
flock(r7, 0x1)
flock(r8, 0x1)
timer_settime(r5, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}}, &(0x7f0000000340))
setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0)
setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0)
lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=@v1={0x1000000, [{0xfffffffc, 0x3fa1}]}, 0xc, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r9, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x6, @mcast1}, 0x1c)

1.54751639s ago: executing program 6 (id=2505):
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback, 0x2}, 0x1c)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x6a, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @broadcast}, {0x0, 0x883e, 0x48, 0x0, @wg=@cookie={0x3, 0x3, "90c7205b89c6ba79f201fb2a7ccdec3f092308bf4d1ae199", "11da928cceb7f2257669a73e935ab02244656cfe8638fefb94440b907850c38e"}}}}}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000007c0)=@nat={'nat\x00', 0x19, 0x3, 0x2e4, [0x200000000a00, 0x0, 0x0, 0x200000000b96, 0x200000000bc6], 0x0, &(0x7f0000000300), &(0x7f0000000a00)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}, {0x0, '\x00', 0x1, 0xfffffffffffffffc, 0x2, [{0x9, 0x2, 0x8863, 'wg1\x00', 'veth0_to_batadv\x00', 'macvlan0\x00', 'pimreg\x00', @local, [0x0, 0x0, 0xff, 0xff, 0xff], @multicast, [0xff, 0xff, 0x0, 0x0, 0x0, 0xff], 0xae, 0xfe, 0x14e, [@statistic={{'statistic\x00', 0x0, 0x18}, {{0x0, 0x0, 0x2, 0x7, 0x7}}}], [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x6, 'syz0\x00', {0xad}}}}], @common=@log={'log\x00', 0x28, {{0x2, "7090146364987c16e8875da53684e30b35fee0cf19dadb4f0adbd2a24887", 0x1}}}}, {0x5, 0x10, 0x0, 'vlan0\x00', 'veth1\x00', 'veth0\x00', 'bridge_slave_0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0xff, 0xff, 0x0, 0x0, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], 0x6e, 0xa6, 0xd6, [], [@arpreply={'arpreply\x00', 0x10, {{@dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, 0xfffffffffffffffd}}}], @common=@redirect={'redirect\x00', 0x8, {{0xffffffffffffffff}}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffe}]}, 0x35c)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = fsopen(&(0x7f00000003c0)='bpf\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, 0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc0189374, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), 0x0}, 0x20)
gettid()
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000000)
r4 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r4, &(0x7f00000004c0)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e24, @broadcast}}, 0x24)
r5 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r5, &(0x7f00000005c0)=@in4={0x21, 0x8, 0x2, 0x10, {0x2, 0x1, @empty}}, 0x24)
connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r0, &(0x7f0000000080)="dccfb93097e7a219f006890c92b8b16d99bc7c8af5ba65283ff441da68d2e7761627f96553a7c19d96bb3a1f2a525953734bc52d819da9260a5f6badc5f453de04ea87622a213c578c8afab8960b7c26d12fd94c415c9fd736cd1deacf88da374b1e048b6bc54033f776532ef69f942df2d67e0d82e19f541b95ff5452b60014404a7c41a0104e76293fb4d9fbc657bde4dc192562a43bdc4b9c1ae68aa72ceac7bedcee68929f8f35fc826cb011c062f14b6b86c1d9c6ec786850d4d575fb00a2ff81e8de8d3c4562533114", &(0x7f00000001c0)=""/179, 0x4}, 0x20)
socket(0x40000000015, 0x5, 0x0)
ptrace(0x10, 0x0)

1.483893101s ago: executing program 6 (id=2507):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000800000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800)
openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000680), 0x2, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="18060000000000010000000000000000851000000200000020000000000000009500007b0000000085000000560000009500000000"], &(0x7f00000000c0)='GPL\x00', 0x2, 0x92, &(0x7f0000000240)=""/146}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$SG_GET_VERSION_NUM(r2, 0x2284, &(0x7f0000000080))

1.462075032s ago: executing program 6 (id=2508):
r0 = socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r1 = gettid()
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x2)
readv(r2, &(0x7f0000000000)=[{&(0x7f0000000580)=""/244, 0xf4}], 0x1)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000300))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x18)
pipe(&(0x7f0000005880)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fsetxattr$security_selinux(r4, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TCSBRKP(r5, 0x5425, 0x0)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4b301, 0x0)
r7 = getpid()
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r8, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r9 = dup(r8)
write$P9_RLERRORu(r9, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$binfmt_elf64(r9, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
kcmp$KCMP_EPOLL_TFD(r7, r1, 0x7, r2, &(0x7f0000000200)={r9, r4, 0x199e})
write(r6, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10)
sendfile(r0, r0, &(0x7f0000000000)=0x5, 0x8000000000000000)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001900)="2e00000011008188040900000000000000a1810031000000000f000000028002002d1f00000000000000e2000000", 0x2e}], 0x1}, 0x20000000)

1.280927755s ago: executing program 2 (id=2509):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={0x0}, 0x18)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000080)=r1}, 0x20)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
connect$unix(0xffffffffffffffff, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="79610000442b1ca3052d65df0096e1000000", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4008084}, 0x0)

993.123841ms ago: executing program 2 (id=2514):
r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000380)=0x2, 0x4)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r2}, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10)
sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000680)={0x2c, &(0x7f00000006c0)={0x20, 0x21, 0x4e, {0x4e, 0xa, "e72f841d3d0e8c16eff641a5dcb2653361e33f2ee859c806b00f94d372ce69c92f5ddf327e591df3abf96ed1ac6fa8042d94baa35bbe3f7886f5b169c7df5b4640409d5b5a1c675d8249fa2d"}}, &(0x7f0000000080)={0x0, 0x3, 0x1e, @string={0x1e, 0x3, "e380f22325676df320f7fe49bbc797cd327a29bcedc0e17b6857d4ed"}}, &(0x7f00000000c0)={0x0, 0xf, 0xf, {0x5, 0xf, 0xf, 0x2, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x3, 0xd, 0x341}]}}, &(0x7f0000000100)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x0, 0xf8, 0x81, "61d0f03b", "e5420600"}}, &(0x7f0000000140)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x3, 0x5, 0x9, 0x1, 0x80, 0x7081}}}, &(0x7f0000000780)={0x84, &(0x7f00000001c0)={0x0, 0x5, 0xbe, "90d6a62219f2fce1d6bd8e82daf4aa7d8764eb060efcd11390531e9f6cbd5f01e74ca9115831d4e655bd3a42c23895d332fc641d31ff833aab592704fbbb847348ffbdbe5603af01527635adad26708b103d090a513cd1846f68f457a1aa0fdde41f73fb63a650d0ba3a539003cc4fae5d3db5f818111b2efd60e34dbbd15da90a7c11a399ff785eb514276f19c7c182049419246f3781640eb3a180b9e152f409ce310162ddf34320f336d12c45f3edf0ffd79e7750711c3ac589bf4fd1"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000340)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x1000, 0x1}}, &(0x7f00000003c0)={0x40, 0x7, 0x2, 0x4008}, &(0x7f0000000400)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000000440)={0x40, 0xb, 0x2, 'a#'}, &(0x7f0000000480)={0x40, 0xf, 0x2}, &(0x7f0000000740)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000500)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000540)={0x40, 0x19, 0x2, "06ad"}, &(0x7f0000000580)={0x40, 0x1a, 0x2, 0x7}, &(0x7f00000004c0)={0x40, 0x1c, 0x1, 0x35}, &(0x7f0000000600)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000000640)={0x40, 0x21, 0x1, 0x7}})

668.562437ms ago: executing program 1 (id=2519):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, 0x0, 0x800)

657.094707ms ago: executing program 5 (id=2520):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c16, &(0x7f0000000040)={[{@nobh}, {@noauto_da_alloc}], [{@appraise_type}]}, 0x1, 0x240, &(0x7f00000002c0)="$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") (async)
setxattr$security_ima(0x0, &(0x7f0000000140), &(0x7f00000013c0)=ANY=[], 0xff7f, 0x0) (async, rerun: 64)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) (rerun: 64)
write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15)
remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0)

571.529539ms ago: executing program 1 (id=2522):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x4c094)
socket(0x10, 0x3, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10)
r4 = socket$pptp(0x18, 0x1, 0x2)
r5 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r7}, 0x18)
io_uring_setup(0x5b54, &(0x7f0000000040)={0x0, 0x2df0, 0x0, 0x0, 0x2b2})
ioctl$MON_IOCX_MFETCH(r5, 0xc0109207, &(0x7f0000000c40)={0x0, 0xfe72})
close_range(r4, 0xffffffffffffffff, 0x0)

571.324619ms ago: executing program 5 (id=2523):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0}, 0x18)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0)
syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x2000)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0xfd, 0x2}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0xffffffff, 0x3, 0x17, 0xd, 0x8, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0xe}}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "dc542b4e237011fb38ddb228806571a8633206e26df63a43bbc516382325dedd79c1cf0a26379dfaf72cb5ab9ab7efe16f312ee9ab598d1ac0d7903ac69c51f1b6842ebecf00dec5deff737b59f0c1f0b57cc6c2b7b8c5b2c527aafa57222f4bd2355ccab39fa20d4033b6b687491532080101805feb9c6fa8a56a77186efcb394ce1a1cd7f2130835e3bf9e3ac25d0a102a808be13beb51f37da6d10046f131834545ee5013f43e41e91eb18a12c28540ab4106286e0f7568f6a9cd0c0da51df08e42848096b25d455ebec9adfd6e493d8c9725bc2d49bbbae0a5375b359f91d9dad20ed109ffbc52469cffd2cf5df7773f7a4c72ae167485315c326281efc4"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0xfffffffc}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x3a8}}, 0x0)
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x4, 0xa}, {}, {0xfff2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r6=>0x0})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r6, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)

518.702ms ago: executing program 6 (id=2524):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={0x0}, 0x18)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000080)=r1}, 0x20)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
connect$unix(0xffffffffffffffff, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="79610000442b1ca3052d65df0096e1000000", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4008084}, 0x0)

473.341331ms ago: executing program 1 (id=2525):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000780)='mm_page_free\x00', r0}, 0x18)
kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x18a, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socket$vsock_stream(0x28, 0x1, 0x0)
socket$qrtr(0x2a, 0x2, 0x0)
r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x400}, 0x100002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4, <r5=>0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r7 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0)
close_range(r5, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000090601060000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140ffffffff0c000280080001407f"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
setregid(0xffffffffffffffff, 0x0)
r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x1, &(0x7f0000000100)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x13, '\x00', 0x0, 0x0, r10, 0x3f, &(0x7f0000000100)={0x2, 0x1}, 0x8}, 0x94)

453.784501ms ago: executing program 2 (id=2526):
r0 = msgget$private(0x0, 0x184)
msgsnd(r0, &(0x7f0000002900)=ANY=[@ANYBLOB="03"], 0xfd1, 0x0)

442.329641ms ago: executing program 0 (id=2527):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffdd}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='kfree\x00', r1}, 0x18)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f00000012c0)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x290)
close_range(r2, 0xffffffffffffffff, 0x0)

393.441392ms ago: executing program 1 (id=2528):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f0000"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="79610000442b1ca3052d65df0096e1000000", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4008084}, 0x0)

373.974093ms ago: executing program 1 (id=2529):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020900000700000000000000000000000500"], 0x38}}, 0x0)

358.117833ms ago: executing program 0 (id=2530):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000800000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800)
openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000680), 0x2, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="18060000000000010000000000000000851000000200000020000000000000009500007b0000000085000000560000009500000000"], &(0x7f00000000c0)='GPL\x00', 0x2, 0x92, &(0x7f0000000240)=""/146}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$SG_GET_VERSION_NUM(r2, 0x2284, &(0x7f0000000080))

349.111203ms ago: executing program 5 (id=2531):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x13}, 0x400, 0xffffffff, 0x6, 0x4, 0x0, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0)

313.734234ms ago: executing program 1 (id=2532):
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1a00404, &(0x7f0000000080)={[{@grpquota}, {@nomblk_io_submit}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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")
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000000300)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
ioperm(0x0, 0x1, 0x1)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x6, &(0x7f0000000000)=0x9, 0x8, 0x0)
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r0 = creat(&(0x7f0000000140)='./bus\x00', 0xc)
write$cgroup_int(r0, &(0x7f0000000540), 0xfffffdd8)
madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15)

313.491914ms ago: executing program 0 (id=2533):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, 0x0, 0x800)

270.050305ms ago: executing program 6 (id=2534):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xa, [@ptr={0xf}]}, {0x0, [0x2e, 0x61, 0x0, 0x30, 0x2e, 0x61, 0x61, 0x0]}}, &(0x7f0000000680)=""/53, 0x2e, 0x35, 0x1, 0xdce5, 0x10000}, 0x28)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, r0}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=<r4=>0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000007919a800000000009500005d4e04735aecc4194c4777090000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80)
r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x410000, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1e, 0xc, &(0x7f0000000580)=ANY=[@ANYRESDEC=r2, @ANYRESOCT=r4, @ANYRES32, @ANYRESDEC=r4], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd12, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r6}, 0x10)
r7 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x1, 0x91, 0x1ff, 0x801, 0x1}, 0x1c)
bind$tipc(r7, 0x0, 0x0)
r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]})
r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="9ee43fffcee853830b5ff81896c8b00bb5b3100aad38971db8d5188a1aac63aede606cf6a4f603235252422177ca66e1cc3fb33be741ec5c94e0580b8e47cba3e7e7038c1f5340198d637146787a", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r10}, 0x18)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r9, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x0, 0x100804, 0x0, 0xa, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x4})
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r9, 0x40a85321, &(0x7f00000004c0)={{0x80}, 'port0\x00', 0x0, 0x121428, 0x7fff, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xe})
r11 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
ftruncate(r7, 0x7)
ioctl$USBDEVFS_SUBMITURB(r11, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x60, &(0x7f0000000240)={0x0, 0x17, 0xfffc, 0x360}, 0x8, 0x9, 0x80, 0x0, 0x0, 0x101, 0x0})
close_range(r8, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r3}, 0x10)
getsockopt$inet_sctp6_SCTP_NODELAY(r7, 0x84, 0x3, &(0x7f0000000500), &(0x7f0000000540)=0x4)
syz_io_uring_setup(0x111, &(0x7f00000003c0)={0x0, 0x11, 0x2}, 0x0, 0x0)

223.523505ms ago: executing program 0 (id=2535):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'geneve1\x00', <r3=>0x0})
sendto$packet(r2, 0x0, 0x0, 0x4c001, &(0x7f00000002c0)={0x11, 0x86dd, r3, 0x1, 0xd, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x14)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r8}, 0x18)
writev(r7, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10, 0x0, 0x7fff}, 0x18)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r6}, &(0x7f0000000200), &(0x7f0000000240)=r9}, 0x20)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
fsetxattr$security_selinux(r11, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0)
ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10)
syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@resuid}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$eJzs3cFvI1cZAPBvJvE2u5tiFxAqlSgVLcpWsHbS0DZCCMoFTpWA5b6ExImi2HEUO2UTVZCK/wAhgcSJExck/gCkqgfEGVWqBBfEAQECIdjCAQnoII/HJevYSaBJnI1/P+mt35sZz/e9ifw8M56dCWBiPRURL0XEVEQ8GxHlYnpalDjole5yb99/daVbksiyO39JIimm9dfVbU9HxM3ibTMR8ZUvRnw9ORq3vbe/udxo1HeKdq3T3K619/ZvbzSX1+vr9a3FxYUXll5cen5pPiu8p35W+pUffeGzr3/yG7+9+6db3+ym9ZkPRSkG+nGWel0v5duir7uNds4j2BhMFf0pjTsRAABOpbuP//6I+Fi+/1+OqXxvbsDUODIDAAAAzkr2udn4VxKRAQAAAFdWGhGzkaTV4lqA2UjTa8W5gQ/GjbTRanc+sdba3VrtzouoRCld22jU54trhStRSrrtheIa2377uYH2YkQ8FhHfLV/P29WVVmN1zOc+AAAAYFLcHDj+/3s5zesnG/L/BAAAAIDLqzKyAQAAAFwVDvkBAADg6hs8/n99THkAAAAA5+JLL7/cLVn/+derr+ztbrZeub1ab29Wm7sr1ZXWznZ1vdVaz+/Z1zxpfY1Wa/tTsbV7r9aptzu19t7+3WZrd6tzd+OBR2ADAAAAF+ixj77xqyQiDj59PS9R3AcQ4AG/H3cCwFmaGncCwNi4izdMrlK/cm28eQDjk5ww38U7AADw8Jv78NHf//unAkpjzQw4b671AYDJ4/d/mFwlVwDCREsj4n296iOjlhn5+/8vThslyyLeLB+e4vwiAABcrNm8JGm1OA6YjTStViMejUgrUUrWNhr1+eL44Jfl0iPd9kL+zuTEa4YBAAAAAAAAAAAAAAAAAAAAAAAAgJ4sSyIDAAAArrSI9I9Jfjf/iLnyM7OD5weuJf8oxx+Kxg/ufO/ecqezs9Cd/tf8WV7XIqLz/TulfPpzIx8fBgAAAJy15GDkrN5xevG6cKFZAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAB3r7/6kq/XGTcP38+IirD4k/HTP46E6WIuPG3JKYPvS+JiKkziH/wWkQ8Pix+Eu9kWVYpshgW//o5x6/km2Z4/DQibp5BfJhkb3THn5eGff7SeCp/Hf75my7KezV6/EuLyI/n49yw8efRI2trDo3xxFs/qY2M/1rEE9PDx5/++JuMiP/0kbX9M8uyozG+9tX9/VHxsx9GzA39/kkeiFXrNLdr7b392xvN5fX6en1rcXHhhaUXl55fmq+tbTTqxb9DY3znIz9957j+3xgS/ze/7o2/x/X/mVErHfDvt+7d/0CvWhoW/9bTQ79/Z2JE/LT47vt4Ue/On+vXD3r1w5788ZtPHtf/1RHb/6S//61T9v/ZL3/7d6dcFAC4AO29/c3lRqO+c0xl5hTLPIyVn81cijT+x0r2rd5f7rLk8/9Wunur/53S79UlSOxQJbuwWFNxSbr8bmWswxIAAHAOfv7uTv+4MwEAAAAAAAAAAAAAAAAAAIDJdRG3ExuMeTCergIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHOs/AQAA//9GB9/T")
r12 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)

203.257826ms ago: executing program 5 (id=2536):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x70, 0x103301)
ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200))
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r4}, 0x18)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00'}, 0x10)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0xf5, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x24040099}, 0x20008010)

202.711216ms ago: executing program 6 (id=2537):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0)
sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010023010003380200000600000008000100", @ANYRES32=0x0, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0xb, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x3}, @TCA_SKBEDIT_PTYPE={0x6, 0x4}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0xf5}}}}]}]}, 0x70}}, 0x0)
r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b30000007b00000800000000", @ANYRES32, @ANYBLOB="100004000000000000006b0000e5d00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000080851000000600000018100000", @ANYRES32=r3, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r4, 0x58, &(0x7f0000000500)}, 0x10)
r5 = socket$inet6(0xa, 0x80000, 0x8)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4)
setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48)
syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x0, 0x1f9}, &(0x7f00000001c0)=<r6=>0x0, &(0x7f0000000300)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1)
r8 = gettid()
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x2, 0x0, 0x7ffc0001}]})
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES8=r7], 0x50)
memfd_secret(0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0)
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x40080)

187.350136ms ago: executing program 0 (id=2538):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x10000, {0x0, 0x0, 0x0, r5, {0xc, 0xffff}, {0x0, 0x4}, {0xfff3, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x8014}, 0x0)

138.039197ms ago: executing program 5 (id=2539):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f0000"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="79610000442b1ca3052d65df0096e1000000", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4008084}, 0x0)

88.488418ms ago: executing program 5 (id=2540):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="01000000030000000400010005"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000080)=r3}, 0x20)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r5=>0xffffffffffffffff})
recvmmsg(r5, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="79610000442b1ca3052d65df0096e1000000", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4008084}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x548}, 0x1, 0x0, 0x0, 0x24004004}, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f0000000000)={[{@i_version}, {@init_itable}, {@noblock_validity}]}, 0x1, 0x71e, &(0x7f0000000f40)="$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")
r7 = creat(&(0x7f0000000380)='./bus\x00', 0x0)
io_setup(0x202, &(0x7f0000000200)=<r8=>0x0)
io_submit(r8, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x82, 0x1, 0x0, r7, &(0x7f0000000000), 0x100000, 0x3000}])

0s ago: executing program 0 (id=2541):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="580000000102ff0c00000000000200000a010000040003803c0002802c0001801400032695eebddc12c2abdf3d3602949a132c219488a6bcb79ce5ce56fa4c90f7a5e0146547b4188cafe90a88c605bf307ba6155c2289ca36b00bfdc06d8da8279214f3c8083ac8d1b0a29920fe60ab5741c1960745c94879d468bedc4d05a770b504d2e9289204be60fb8286f26384b903b6dee9dbf2a3b410d1a057fed6914749cff6a5ba0ad2d30d28dfe6879a733e9fae553b0fe0bc1a26722b66904147d50977756ddc1f08a00cd1f84fcfbd7875"], 0x58}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRESOCT=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000540)='kfree\x00', r1}, 0x10)
pipe2(&(0x7f0000001cc0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x800)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
move_pages(r4, 0x1, &(0x7f0000000040)=[&(0x7f0000ffb000/0x2000)=nil], 0x0, &(0x7f0000000000), 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x8000021e}, &(0x7f00000001c0)=<r8=>0x0, &(0x7f0000000040)=<r9=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r8, r9, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1})
io_uring_enter(r7, 0x47fa, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r5, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1})
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan1\x00'})
sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x90)
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="2c756e616d653dd0aedec1aa20ffd81d1bf89329217cb058a396eda2ab40a26d93dd083c0074dcab6cab21ae16c4cdf97bdc355f3b41d27b654301345cb3c4cec37953322d01beaa7257964fd30fe2d72f171da72e389f382dea3c8d91906a2b00000000000000002c0090bdd0459c80eed7130e789de01b56e0cd40"])

kernel console output (not intermixed with test programs):

][ T9950] SELinux:  policydb magic number 0x7 does not match expected magic number 0xf97cff8c
[  181.359824][ T9950] SELinux: failed to load policy
[  181.368518][ T9951] SELinux:  policydb magic number 0x7 does not match expected magic number 0xf97cff8c
[  181.393037][ T9938] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.1752: Failed to acquire dquot type 0
[  181.409114][ T9951] SELinux: failed to load policy
[  181.444331][ T9938] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.1752: corrupted inode contents
[  181.514577][ T9965] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9965 comm=syz.0.1763
[  181.527822][ T9938] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #16: comm syz.3.1752: mark_inode_dirty error
[  181.554277][ T9938] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.1752: corrupted inode contents
[  181.566847][ T9938] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.1752: mark_inode_dirty error
[  181.582781][ T9938] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.1752: corrupted inode contents
[  181.649409][ T9972] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1760'.
[  181.678892][ T9972] loop2: detected capacity change from 0 to 2048
[  181.686028][ T9972] EXT4-fs: Ignoring removed i_version option
[  181.716077][ T9938] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem
[  181.737412][ T9972] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  181.749905][ T9972] ext4 filesystem being mounted at /93/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  181.783275][ T9938] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.1752: corrupted inode contents
[  181.810821][ T9970] loop1: detected capacity change from 0 to 512
[  181.858447][ T9938] EXT4-fs error (device loop3): ext4_truncate:4666: inode #16: comm syz.3.1752: mark_inode_dirty error
[  181.937400][ T9970] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  181.988133][ T9938] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem
[  182.077972][ T9970] ext4 filesystem being mounted at /338/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  182.104411][ T9938] EXT4-fs (loop3): 1 truncate cleaned up
[  182.147668][ T9938] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  182.250379][ T9984] serio: Serial port ptm0
[  182.303519][ T9938] ext4 filesystem being mounted at /85/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  182.321301][ T9970] netlink: 'syz.1.1765': attribute type 1 has an invalid length.
[  182.358553][ T9970] 8021q: adding VLAN 0 to HW filter on device bond3
[  182.380538][ T9970] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1765'.
[  182.412429][ T9938] rdma_rxe: rxe_newlink: failed to add lo
[  182.460997][ T9990] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1767'.
[  182.471022][ T8096] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  182.552234][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  182.706797][T10002] serio: Serial port ptm0
[  182.821987][T10009] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1776'.
[  182.869431][T10016] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1773'.
[  183.863830][ T7815] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  183.902330][T10029] loop2: detected capacity change from 0 to 4096
[  183.911323][T10029] EXT4-fs: Ignoring removed nomblk_io_submit option
[  183.922091][T10026] pimreg: entered allmulticast mode
[  183.929097][T10029] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  183.929427][T10026] pimreg: left allmulticast mode
[  184.071055][T10039] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10039 comm=syz.5.1782
[  184.113753][T10036] SELinux: failed to load policy
[  184.184482][T10045] loop5: detected capacity change from 0 to 512
[  184.205056][T10045] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  184.207360][T10052] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10052 comm=syz.1.1789
[  184.240254][T10045] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  184.272030][T10045] netlink: 'syz.5.1785': attribute type 1 has an invalid length.
[  184.280636][T10045] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1785'.
[  184.298656][   T29] kauditd_printk_skb: 133 callbacks suppressed
[  184.298670][   T29] audit: type=1400 audit(1757645754.422:6327): avc:  denied  { name_bind } for  pid=10057 comm="syz.0.1790" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[  184.391704][T10058] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[  184.399281][ T9580] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  184.430331][   T29] audit: type=1400 audit(1757645754.552:6328): avc:  denied  { create } for  pid=10057 comm="syz.0.1790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  184.450085][   T29] audit: type=1400 audit(1757645754.552:6329): avc:  denied  { create } for  pid=10060 comm="syz.1.1792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  184.519217][   T29] audit: type=1400 audit(1757645754.602:6330): avc:  denied  { create } for  pid=10060 comm="syz.1.1792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  184.539135][   T29] audit: type=1400 audit(1757645754.602:6331): avc:  denied  { create } for  pid=10057 comm="syz.0.1790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  184.613331][   T29] audit: type=1326 audit(1757645754.742:6332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10060 comm="syz.1.1792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd300e6eba9 code=0x7ffc0000
[  184.637113][   T29] audit: type=1326 audit(1757645754.742:6333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10060 comm="syz.1.1792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd300e6eba9 code=0x7ffc0000
[  184.660870][   T29] audit: type=1326 audit(1757645754.742:6334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10060 comm="syz.1.1792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd300e6eba9 code=0x7ffc0000
[  184.684469][   T29] audit: type=1326 audit(1757645754.742:6335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10060 comm="syz.1.1792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd300e6eba9 code=0x7ffc0000
[  184.708161][   T29] audit: type=1326 audit(1757645754.742:6336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10060 comm="syz.1.1792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd300e6eba9 code=0x7ffc0000
[  184.746531][T10072] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1795'.
[  184.755882][T10072] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  184.763396][T10072] batman_adv: batadv0: Removing interface: batadv_slave_0
[  184.797947][ T7815] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  184.811611][T10072] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  184.818993][T10072] batman_adv: batadv0: Removing interface: batadv_slave_1
[  184.870577][T10086] loop2: detected capacity change from 0 to 512
[  184.877374][T10086] EXT4-fs: Ignoring removed nobh option
[  184.916274][T10086] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.1796: corrupted inode contents
[  184.932612][T10086] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #3: comm syz.2.1796: mark_inode_dirty error
[  184.944718][T10086] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.1796: corrupted inode contents
[  184.958879][T10086] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.1796: mark_inode_dirty error
[  184.979055][T10086] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.1796: Failed to acquire dquot type 0
[  184.991662][T10086] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.1796: corrupted inode contents
[  185.004450][T10086] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #16: comm syz.2.1796: mark_inode_dirty error
[  185.016165][T10086] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.1796: corrupted inode contents
[  185.029199][T10086] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.1796: mark_inode_dirty error
[  185.044220][T10098] loop1: detected capacity change from 0 to 512
[  185.051414][T10086] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.1796: corrupted inode contents
[  185.072839][T10086] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem
[  185.084718][T10098] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  185.104722][T10086] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.1796: corrupted inode contents
[  185.117576][T10098] ext4 filesystem being mounted at /349/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  185.128776][T10086] EXT4-fs error (device loop2): ext4_truncate:4666: inode #16: comm syz.2.1796: mark_inode_dirty error
[  185.161515][T10098] netlink: 'syz.1.1803': attribute type 1 has an invalid length.
[  185.169470][T10098] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1803'.
[  185.190471][T10086] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem
[  185.205122][T10086] EXT4-fs (loop2): 1 truncate cleaned up
[  185.221756][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  185.242137][T10106] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[  185.247513][T10086] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  185.270856][T10086] ext4 filesystem being mounted at /95/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  185.301408][T10086] s
z1: rxe_newlink: already configured on lo
[  185.318644][ T7815] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  185.390885][T10113] loop1: detected capacity change from 0 to 4096
[  185.399678][T10113] EXT4-fs: Ignoring removed nomblk_io_submit option
[  185.423969][T10113] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  185.461316][T10120] FAULT_INJECTION: forcing a failure.
[  185.461316][T10120] name failslab, interval 1, probability 0, space 0, times 0
[  185.473998][T10120] CPU: 0 UID: 0 PID: 10120 Comm: syz.2.1811 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  185.474039][T10120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  185.474114][T10120] Call Trace:
[  185.474197][T10120]  <TASK>
[  185.474204][T10120]  __dump_stack+0x1d/0x30
[  185.474224][T10120]  dump_stack_lvl+0xe8/0x140
[  185.474240][T10120]  dump_stack+0x15/0x1b
[  185.474254][T10120]  should_fail_ex+0x265/0x280
[  185.474273][T10120]  ? audit_log_d_path+0x8d/0x150
[  185.474312][T10120]  should_failslab+0x8c/0xb0
[  185.474337][T10120]  __kmalloc_cache_noprof+0x4c/0x320
[  185.474367][T10120]  audit_log_d_path+0x8d/0x150
[  185.474421][T10120]  audit_log_d_path_exe+0x42/0x70
[  185.474446][T10120]  audit_log_task+0x1e9/0x250
[  185.474492][T10120]  audit_seccomp+0x61/0x100
[  185.474514][T10120]  ? __seccomp_filter+0x68c/0x10d0
[  185.474532][T10120]  __seccomp_filter+0x69d/0x10d0
[  185.474550][T10120]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  185.474626][T10120]  ? vfs_write+0x7e8/0x960
[  185.474649][T10120]  ? __rcu_read_unlock+0x4f/0x70
[  185.474673][T10120]  ? __fget_files+0x184/0x1c0
[  185.474699][T10120]  __secure_computing+0x82/0x150
[  185.474718][T10120]  syscall_trace_enter+0xcf/0x1e0
[  185.474749][T10120]  do_syscall_64+0xac/0x200
[  185.474841][T10120]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  185.474861][T10120]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  185.474930][T10120]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  185.474951][T10120] RIP: 0033:0x7efd8a05eba9
[  185.474975][T10120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  185.474990][T10120] RSP: 002b:00007efd88abf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f0
[  185.475009][T10120] RAX: ffffffffffffffda RBX: 00007efd8a2a5fa0 RCX: 00007efd8a05eba9
[  185.475078][T10120] RDX: 0000000000000196 RSI: 6e93ebbbcc0884f2 RDI: 0000000000000000
[  185.475130][T10120] RBP: 00007efd88abf090 R08: 0000000000000000 R09: 0000000000000000
[  185.475142][T10120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  185.475155][T10120] R13: 00007efd8a2a6038 R14: 00007efd8a2a5fa0 R15: 00007ffe412c6398
[  185.475174][T10120]  </TASK>
[  185.759354][T10125] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10125 comm=syz.2.1815
[  185.834004][T10133] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[  185.901548][T10131] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1817'.
[  185.964860][T10148] sd 0:0:1:0: device reset
[  186.137307][T10161] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[  186.208835][T10167] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10167 comm=syz.0.1829
[  186.236891][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  186.272729][T10171] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1831'.
[  186.277493][T10177] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[  186.362872][T10186] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10186 comm=syz.0.1837
[  186.375621][T10188] loop1: detected capacity change from 0 to 2048
[  186.404012][T10188] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  186.429147][T10188] ext4 filesystem being mounted at /354/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  186.449834][T10194] SELinux: failed to load policy
[  186.452519][T10188] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1838: bg 0: block 345: padding at end of block bitmap is not set
[  186.488311][T10203] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10203 comm=syz.2.1843
[  186.501111][ T7749] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 79 with max blocks 1 with error 28
[  186.513405][ T7749] EXT4-fs (loop1): This should not happen!! Data will be lost
[  186.513405][ T7749] 
[  186.523071][ T7749] EXT4-fs (loop1): Total free blocks count 0
[  186.529061][ T7749] EXT4-fs (loop1): Free/Dirty block details
[  186.535114][ T7749] EXT4-fs (loop1): free_blocks=0
[  186.540608][ T7749] EXT4-fs (loop1): dirty_blocks=16
[  186.545939][ T7749] EXT4-fs (loop1): Block reservation details
[  186.551971][ T7749] EXT4-fs (loop1): i_reserved_data_blocks=1
[  186.559226][T10205] loop2: detected capacity change from 0 to 4096
[  186.566536][T10205] EXT4-fs: Ignoring removed nomblk_io_submit option
[  186.585810][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  186.600693][T10205] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  186.606895][T10207] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1846'.
[  186.683165][T10216] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[  186.886969][T10230] SELinux: failed to load policy
[  187.373625][T10267] loop5: detected capacity change from 0 to 2048
[  187.380659][T10267] EXT4-fs: Ignoring removed i_version option
[  187.534014][T10267] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  188.377362][T10289] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[  188.471489][T10291] SELinux: failed to load policy
[  188.589163][T10303] serio: Serial port ptm0
[  188.887821][T10321] __nla_validate_parse: 2 callbacks suppressed
[  188.887837][T10321] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1869'.
[  188.895720][T10313] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1872'.
[  188.912756][T10320] loop1: detected capacity change from 0 to 4096
[  188.922021][T10320] EXT4-fs: Ignoring removed nomblk_io_submit option
[  189.240636][T10335] loop5: detected capacity change from 0 to 512
[  189.273928][T10335] EXT4-fs: Ignoring removed mblk_io_submit option
[  189.308378][T10335] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  189.318312][   T29] kauditd_printk_skb: 483 callbacks suppressed
[  189.318325][   T29] audit: type=1326 audit(1757645759.432:6818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10337 comm="syz.2.1875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd8a05eba9 code=0x7ffc0000
[  189.348143][   T29] audit: type=1326 audit(1757645759.432:6819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10337 comm="syz.2.1875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7efd8a05eba9 code=0x7ffc0000
[  189.371672][   T29] audit: type=1326 audit(1757645759.432:6820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10337 comm="syz.2.1875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd8a05eba9 code=0x7ffc0000
[  189.420596][T10335] EXT4-fs (loop5): 1 truncate cleaned up
[  189.426552][T10335] EXT4-fs mount: 4 callbacks suppressed
[  189.426564][T10335] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  189.509102][ T9580] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  189.532180][   T29] audit: type=1400 audit(1757645759.612:6821): avc:  denied  { read } for  pid=10334 comm="syz.5.1874" path="/34/bus/bus" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  189.593218][T10350] serio: Serial port ptm0
[  189.764399][T10357] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1877'.
[  189.829999][   T29] audit: type=1326 audit(1757645759.932:6822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10358 comm="syz.5.1876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa21d38eba9 code=0x7ffc0000
[  189.853517][   T29] audit: type=1326 audit(1757645759.932:6823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10358 comm="syz.5.1876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa21d38eba9 code=0x7ffc0000
[  189.877065][   T29] audit: type=1326 audit(1757645759.932:6824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10358 comm="syz.5.1876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa21d38eba9 code=0x7ffc0000
[  189.900492][   T29] audit: type=1326 audit(1757645759.932:6825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10358 comm="syz.5.1876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa21d38eba9 code=0x7ffc0000
[  189.908173][T10356] SELinux: failed to load policy
[  189.924039][   T29] audit: type=1326 audit(1757645759.932:6826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10358 comm="syz.5.1876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa21d38eba9 code=0x7ffc0000
[  189.924075][   T29] audit: type=1326 audit(1757645759.932:6827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10358 comm="syz.5.1876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fa21d38eba9 code=0x7ffc0000
[  189.930500][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  190.394423][T10363] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[  190.529885][T10228] Set syz1 is full, maxelem 65536 reached
[  190.689470][T10389] serio: Serial port ptm0
[  190.732449][T10393] IPv6: sit1: Disabled Multicast RS
[  190.741787][T10393] sit1: entered allmulticast mode
[  190.852486][T10406] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[  190.884975][T10407] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1888'.
[  190.957649][T10414] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1899'.
[  190.979291][T10412] loop3: detected capacity change from 0 to 512
[  190.996508][T10412] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  191.010551][T10412] EXT4-fs (loop3): 1 truncate cleaned up
[  191.017411][T10412] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  191.055447][ T8096] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  191.168176][T10430] loop3: detected capacity change from 0 to 512
[  191.198667][T10430] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  191.214114][T10430] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  191.231664][T10441] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[  191.287157][T10430] netlink: 'syz.3.1905': attribute type 1 has an invalid length.
[  191.360950][T10451] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1905'.
[  191.373364][T10430] 8021q: adding VLAN 0 to HW filter on device bond1
[  191.384861][T10451] bond1 (unregistering): Released all slaves
[  191.439497][T10453] loop1: detected capacity change from 0 to 4096
[  191.455133][T10453] EXT4-fs: Ignoring removed nomblk_io_submit option
[  191.509721][T10453] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  191.574501][ T8096] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  191.603279][T10464] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1914'.
[  191.879991][T10480] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[  192.161316][T10484] loop2: detected capacity change from 0 to 1024
[  192.290540][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  192.424782][T10484] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  192.439632][T10484] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.1922: Allocating blocks 385-513 which overlap fs metadata
[  192.558500][T10489] serio: Serial port ptm0
[  192.571737][T10483] EXT4-fs (loop2): pa ffff8881072a8af0: logic 16, phys. 129, len 24
[  192.579795][T10483] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8
[  192.592079][ T7815] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  192.722420][T10504] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[  192.737883][T10505] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1924'.
[  193.312204][T10523] serio: Serial port ptm1
[  193.474491][T10527] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1935'.
[  193.675401][T10434] Set syz1 is full, maxelem 65536 reached
[  193.917269][T10538] loop1: detected capacity change from 0 to 2048
[  193.924241][T10538] EXT4-fs: Ignoring removed i_version option
[  194.017682][T10538] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  194.030057][T10538] ext4 filesystem being mounted at /379/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  194.333686][   T29] kauditd_printk_skb: 247 callbacks suppressed
[  194.333698][   T29] audit: type=1400 audit(1757645764.462:7075): avc:  denied  { read } for  pid=10525 comm="syz.3.1936" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  194.363313][   T29] audit: type=1400 audit(1757645764.462:7076): avc:  denied  { open } for  pid=10525 comm="syz.3.1936" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  194.636272][T10526] loop3: detected capacity change from 0 to 1764
[  194.677690][T10551] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[  194.815993][T10558] serio: Serial port ptm0
[  194.825746][T10559] serio: Serial port ptm1
[  194.858424][   T29] audit: type=1400 audit(1757645764.842:7077): avc:  denied  { mount } for  pid=10525 comm="syz.3.1936" name="/" dev="loop3" ino=1920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1
[  194.880928][   T29] audit: type=1326 audit(1757645764.842:7078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10552 comm="syz.0.1945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3c79ceba9 code=0x7ffc0000
[  194.904512][   T29] audit: type=1326 audit(1757645764.842:7079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10552 comm="syz.0.1945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3c79ceba9 code=0x7ffc0000
[  194.927973][   T29] audit: type=1326 audit(1757645764.842:7080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10552 comm="syz.0.1945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc3c79ceba9 code=0x7ffc0000
[  194.951386][   T29] audit: type=1326 audit(1757645764.842:7081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10552 comm="syz.0.1945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3c79ceba9 code=0x7ffc0000
[  194.974832][   T29] audit: type=1326 audit(1757645764.842:7082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10552 comm="syz.0.1945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3c79ceba9 code=0x7ffc0000
[  194.998298][   T29] audit: type=1326 audit(1757645764.852:7083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10552 comm="syz.0.1945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fc3c79ceba9 code=0x7ffc0000
[  195.021580][   T29] audit: type=1326 audit(1757645764.852:7084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10552 comm="syz.0.1945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3c79ceba9 code=0x7ffc0000
[  195.063258][T10564] pimreg: entered allmulticast mode
[  195.085540][T10559] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1946'.
[  195.101211][T10564] pimreg: left allmulticast mode
[  195.164749][T10570] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1947'.
[  195.209811][T10572] serio: Serial port ptm1
[  195.252224][T10574] loop5: detected capacity change from 0 to 512
[  195.285042][T10574] EXT4-fs: Ignoring removed mblk_io_submit option
[  195.292186][T10574] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  195.303808][T10574] EXT4-fs (loop5): 1 truncate cleaned up
[  195.311036][T10574] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  195.376483][T10579] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1949'.
[  195.690182][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  195.961905][T10607] serio: Serial port ptm0
[  195.994910][T10611] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[  196.067779][T10607] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1964'.
[  196.132078][ T9580] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  196.174069][T10618] serio: Serial port ptm1
[  196.342499][T10633] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1969'.
[  196.417816][T10632] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1974'.
[  196.426835][T10632] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1974'.
[  196.494901][T10632] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  196.544534][T10632] bond1: entered allmulticast mode
[  196.565720][T10630] loop5: detected capacity change from 0 to 512
[  196.583401][T10632] 8021q: adding VLAN 0 to HW filter on device bond1
[  196.771703][T10649] lo speed is unknown, defaulting to 1000
[  196.958517][T10630] EXT4-fs (loop5): too many log groups per flexible block group
[  196.966391][T10630] EXT4-fs (loop5): failed to initialize mballoc (-12)
[  197.051415][T10630] EXT4-fs (loop5): mount failed
[  197.320182][T10657] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1980'.
[  197.485056][T10659] loop2: detected capacity change from 0 to 8192
[  197.492003][T10659] msdos: Unknown parameter 'showe›ec'
[  197.629209][T10681] netlink: 'syz.0.1989': attribute type 1 has an invalid length.
[  197.644269][T10681] 8021q: adding VLAN 0 to HW filter on device bond2
[  197.653629][T10681] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1989'.
[  197.701275][T10685] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[  197.724315][T10681] bond2 (unregistering): Released all slaves
[  197.868804][T10691] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1987'.
[  198.567657][T10693] loop5: detected capacity change from 0 to 2048
[  198.574676][T10693] EXT4-fs: Ignoring removed i_version option
[  199.118540][T10697] loop3: detected capacity change from 0 to 2048
[  199.125615][T10697] EXT4-fs: Ignoring removed i_version option
[  202.810059][T10693] EXT4-fs warning (device loop5): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop5.
[  203.032478][T10697] EXT4-fs warning (device loop3): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop3.
[  203.141356][T10707] __nla_validate_parse: 1 callbacks suppressed
[  203.141402][T10707] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1994'.
[  203.172275][   T29] kauditd_printk_skb: 318 callbacks suppressed
[  203.172289][   T29] audit: type=1400 audit(1757645773.302:7403): avc:  denied  { write } for  pid=10708 comm="syz.5.1995" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  203.186902][T10711] loop3: detected capacity change from 0 to 4096
[  203.217612][T10709] loop5: detected capacity change from 0 to 512
[  203.224477][T10711] EXT4-fs: Ignoring removed nomblk_io_submit option
[  203.232295][T10709] EXT4-fs: Ignoring removed nobh option
[  203.245877][   T29] audit: type=1326 audit(1757645773.372:7404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10712 comm="syz.2.1997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd8a05eba9 code=0x7ffc0000
[  203.289002][T10711] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  203.314416][T10709] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #3: comm syz.5.1995: corrupted inode contents
[  203.380499][T10709] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #3: comm syz.5.1995: mark_inode_dirty error
[  203.400296][   T29] audit: type=1326 audit(1757645773.402:7405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10712 comm="syz.2.1997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7efd8a05eba9 code=0x7ffc0000
[  203.423871][   T29] audit: type=1326 audit(1757645773.402:7406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10712 comm="syz.2.1997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd8a05eba9 code=0x7ffc0000
[  203.460634][T10709] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #3: comm syz.5.1995: corrupted inode contents
[  203.473357][T10709] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #3: comm syz.5.1995: mark_inode_dirty error
[  203.486983][T10709] Quota error (device loop5): write_blk: dquota write failed
[  203.494740][T10709] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota
[  203.504998][T10709] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.1995: Failed to acquire dquot type 0
[  203.532907][T10709] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.1995: corrupted inode contents
[  203.583876][T10723] loop2: detected capacity change from 0 to 4096
[  203.594074][T10723] EXT4-fs: Ignoring removed nomblk_io_submit option
[  203.615805][T10709] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #16: comm syz.5.1995: mark_inode_dirty error
[  203.651102][T10723] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  203.687131][T10709] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.1995: corrupted inode contents
[  203.750855][T10709] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.1995: mark_inode_dirty error
[  203.800188][T10709] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.1995: corrupted inode contents
[  203.840200][T10729] rdma_rxe: rxe_newlink: failed to add lo
[  203.869175][T10709] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem
[  203.920571][T10709] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.1995: corrupted inode contents
[  204.110966][T10709] EXT4-fs error (device loop5): ext4_truncate:4666: inode #16: comm syz.5.1995: mark_inode_dirty error
[  204.132391][T10709] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem
[  204.145638][ T8096] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  204.165571][T10709] EXT4-fs (loop5): 1 truncate cleaned up
[  204.197237][T10709] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  204.222662][T10709] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  204.236358][T10709] rdma_rxe: rxe_newlink: failed to add lo
[  204.250174][T10736] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2002'.
[  204.259933][ T9580] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  204.287887][   T29] audit: type=1400 audit(1757645774.412:7407): avc:  denied  { getopt } for  pid=10737 comm="syz.1.2003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  204.307663][   T29] audit: type=1400 audit(1757645774.412:7408): avc:  denied  { write } for  pid=10737 comm="syz.1.2003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  204.403540][T10736] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2002'.
[  204.413866][   T29] audit: type=1400 audit(1757645774.472:7409): avc:  denied  { ioctl } for  pid=10740 comm="syz.5.2004" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=27594 ioctlcmd=0x8912 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  204.440964][   T29] audit: type=1400 audit(1757645774.502:7410): avc:  denied  { shutdown } for  pid=10740 comm="syz.5.2004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  204.488847][ T7815] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  204.559332][T10756] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2007'.
[  204.579278][T10759] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2005'.
[  204.958869][T10766] SELinux:  policydb table sizes (0,0) do not match mine (8,7)
[  205.047061][T10766] SELinux: failed to load policy
[  205.203071][T10771] loop3: detected capacity change from 0 to 512
[  205.273067][T10771] EXT4-fs: Ignoring removed nobh option
[  205.379026][T10771] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.2014: corrupted inode contents
[  205.518772][T10771] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #3: comm syz.3.2014: mark_inode_dirty error
[  205.544621][T10785] loop2: detected capacity change from 0 to 2048
[  205.551458][T10785] EXT4-fs: Ignoring removed i_version option
[  205.572389][T10784] loop1: detected capacity change from 0 to 4096
[  205.584350][T10785] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  205.596508][T10785] ext4 filesystem being mounted at /151/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  205.642404][T10771] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.2014: corrupted inode contents
[  205.660947][T10784] EXT4-fs: Ignoring removed nomblk_io_submit option
[  205.692899][T10784] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  205.709144][T10771] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.2014: mark_inode_dirty error
[  205.738801][T10771] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.2014: Failed to acquire dquot type 0
[  205.764784][T10771] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.2014: corrupted inode contents
[  205.788530][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  205.799500][T10771] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #16: comm syz.3.2014: mark_inode_dirty error
[  205.811647][T10771] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.2014: corrupted inode contents
[  205.824008][T10771] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.2014: mark_inode_dirty error
[  205.836175][T10771] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.2014: corrupted inode contents
[  205.851710][T10771] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem
[  205.860779][T10771] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.2014: corrupted inode contents
[  205.873525][T10771] EXT4-fs error (device loop3): ext4_truncate:4666: inode #16: comm syz.3.2014: mark_inode_dirty error
[  205.884950][T10771] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem
[  205.895117][T10771] EXT4-fs (loop3): 1 truncate cleaned up
[  205.901294][T10771] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  205.914495][T10771] ext4 filesystem being mounted at /126/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  205.926815][T10771] rdma_rxe: rxe_newlink: failed to add lo
[  205.944606][ T8096] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  206.108063][T10790] loop1: detected capacity change from 0 to 4096
[  206.130736][T10790] EXT4-fs: Ignoring removed nomblk_io_submit option
[  206.162595][T10796] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2021'.
[  206.182949][T10800] serio: Serial port ptm0
[  206.184401][T10790] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  206.330699][ T7815] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  206.357988][T10806] SELinux: failed to load policy
[  206.440511][T10811] loop3: detected capacity change from 0 to 2048
[  206.447680][T10811] EXT4-fs: Ignoring removed i_version option
[  206.531846][T10800] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2022'.
[  206.558490][T10812] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2025'.
[  206.623183][T10811] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  206.635367][T10811] ext4 filesystem being mounted at /130/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  206.688119][T10822] sd 0:0:1:0: device reset
[  206.944677][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  207.097374][T10833] netlink: 'syz.0.2030': attribute type 1 has an invalid length.
[  207.132026][T10833] 8021q: adding VLAN 0 to HW filter on device bond2
[  207.146839][T10833] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2030'.
[  207.870066][T10842] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2032'.
[  208.417918][T10844] loop5: detected capacity change from 0 to 2048
[  208.424667][T10844] EXT4-fs: Ignoring removed i_version option
[  209.234212][T10844] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  209.246460][T10844] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  209.314619][ T8096] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  209.328979][T10833] bond2 (unregistering): Released all slaves
[  209.483165][   T29] kauditd_printk_skb: 91 callbacks suppressed
[  209.483179][   T29] audit: type=1326 audit(1757645779.612:7500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10839 comm="syz.2.2033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd8a05eba9 code=0x7ffc0000
[  209.512761][   T29] audit: type=1326 audit(1757645779.612:7501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10839 comm="syz.2.2033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7efd8a05eba9 code=0x7ffc0000
[  209.536294][   T29] audit: type=1326 audit(1757645779.612:7502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10839 comm="syz.2.2033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd8a05eba9 code=0x7ffc0000
[  209.559760][   T29] audit: type=1326 audit(1757645779.612:7503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10839 comm="syz.2.2033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd8a05eba9 code=0x7ffc0000
[  209.583585][   T29] audit: type=1326 audit(1757645779.612:7504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10839 comm="syz.2.2033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd8a05eba9 code=0x7ffc0000
[  209.607211][   T29] audit: type=1326 audit(1757645779.612:7505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10839 comm="syz.2.2033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd8a05eba9 code=0x7ffc0000
[  209.630715][   T29] audit: type=1326 audit(1757645779.612:7506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10839 comm="syz.2.2033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd8a05eba9 code=0x7ffc0000
[  209.654217][   T29] audit: type=1326 audit(1757645779.612:7507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10839 comm="syz.2.2033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd8a05eba9 code=0x7ffc0000
[  209.677723][   T29] audit: type=1326 audit(1757645779.612:7508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10839 comm="syz.2.2033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd8a05eba9 code=0x7ffc0000
[  209.701248][   T29] audit: type=1326 audit(1757645779.612:7509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10839 comm="syz.2.2033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd8a05eba9 code=0x7ffc0000
[  209.765887][T10850] loop1: detected capacity change from 0 to 4096
[  209.772547][T10850] EXT4-fs: Ignoring removed nomblk_io_submit option
[  209.916219][T10850] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  209.943429][T10856] loop2: detected capacity change from 0 to 2048
[  209.950108][T10856] EXT4-fs: Ignoring removed i_version option
[  209.988281][T10856] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  210.000495][T10856] ext4 filesystem being mounted at /154/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  210.119007][T10860] lo speed is unknown, defaulting to 1000
[  210.487420][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  210.655628][T10875] lo speed is unknown, defaulting to 1000
[  210.977391][ T9580] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  211.043951][ T7815] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  211.166327][T10895] loop5: detected capacity change from 0 to 4096
[  211.173401][T10895] EXT4-fs: Ignoring removed nomblk_io_submit option
[  211.554992][T10902] lo speed is unknown, defaulting to 1000
[  211.895248][T10895] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  212.290861][T10915] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[  212.345161][T10914] SELinux: failed to load policy
[  212.356621][T10887] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2045'.
[  212.462695][T10920] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2056'.
[  212.583905][T10930] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[  212.644800][T10934] loop1: detected capacity change from 0 to 512
[  212.712976][T10934] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  212.742445][T10934] ext4 filesystem being mounted at /400/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  212.759587][T10925] lo speed is unknown, defaulting to 1000
[  212.770824][T10934] netlink: 'syz.1.2061': attribute type 1 has an invalid length.
[  212.786853][T10934] 8021q: adding VLAN 0 to HW filter on device bond4
[  212.803937][T10934] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2061'.
[  212.816395][T10934] bond4 (unregistering): Released all slaves
[  212.838567][ T9580] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  212.985094][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  213.123200][T10959] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2067'.
[  213.326784][T10963] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[  213.345860][T10953] sd 0:0:1:0: device reset
[  213.548921][T10968] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2069'.
[  213.636535][T10970] loop1: detected capacity change from 0 to 4096
[  213.647398][T10970] EXT4-fs: Ignoring removed nomblk_io_submit option
[  213.671983][T10970] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  213.728288][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  213.761229][T10979] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[  213.825733][T10981] loop1: detected capacity change from 0 to 4096
[  213.865869][T10988] loop5: detected capacity change from 0 to 1024
[  213.882309][T10990] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2076'.
[  213.901427][T10981] EXT4-fs: Ignoring removed nomblk_io_submit option
[  213.919397][T10988] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  213.946717][T10981] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  213.986404][T10988] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4183: comm syz.5.2078: Allocating blocks 385-513 which overlap fs metadata
[  214.084701][T10995] loop3: detected capacity change from 0 to 512
[  214.137704][T10995] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  214.158117][T10995] ext4 filesystem being mounted at /139/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  214.161163][T10987] EXT4-fs (loop5): pa ffff888107267310: logic 16, phys. 129, len 24
[  214.176573][T10987] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8
[  214.243991][ T9580] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  214.371377][T11001] netlink: 'syz.5.2079': attribute type 1 has an invalid length.
[  214.431526][T11005] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2079'.
[  214.492106][   T29] kauditd_printk_skb: 147 callbacks suppressed
[  214.492121][   T29] audit: type=1326 audit(1757645784.622:7657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11006 comm="syz.2.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd8a05eba9 code=0x7ffc0000
[  214.521898][   T29] audit: type=1326 audit(1757645784.622:7658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11006 comm="syz.2.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd8a05eba9 code=0x7ffc0000
[  214.545520][   T29] audit: type=1326 audit(1757645784.622:7659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11006 comm="syz.2.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efd8a05eba9 code=0x7ffc0000
[  214.569041][   T29] audit: type=1326 audit(1757645784.622:7660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11006 comm="syz.2.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd8a05eba9 code=0x7ffc0000
[  214.592563][   T29] audit: type=1326 audit(1757645784.622:7661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11006 comm="syz.2.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd8a05eba9 code=0x7ffc0000
[  214.618060][T11001] 8021q: adding VLAN 0 to HW filter on device bond1
[  214.659396][   T29] audit: type=1326 audit(1757645784.752:7662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11006 comm="syz.2.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7efd8a05eba9 code=0x7ffc0000
[  214.682791][   T29] audit: type=1326 audit(1757645784.752:7663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11006 comm="syz.2.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd8a05eba9 code=0x7ffc0000
[  214.706349][   T29] audit: type=1326 audit(1757645784.762:7664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11006 comm="syz.2.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd8a05eba9 code=0x7ffc0000
[  214.729855][   T29] audit: type=1326 audit(1757645784.762:7665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11006 comm="syz.2.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd8a05eba9 code=0x7ffc0000
[  214.753747][   T29] audit: type=1326 audit(1757645784.762:7666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11006 comm="syz.2.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd8a05eba9 code=0x7ffc0000
[  214.770912][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  214.793558][T11010] loop2: detected capacity change from 0 to 4096
[  214.800708][T11010] EXT4-fs: Ignoring removed nomblk_io_submit option
[  214.808983][T11005] bond1 (unregistering): Released all slaves
[  214.818805][T11010] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  214.980348][ T7815] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  215.006276][T11019] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[  215.183017][T11029] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2090'.
[  215.200140][T11025] loop1: detected capacity change from 0 to 2048
[  215.206802][T11025] EXT4-fs: Ignoring removed i_version option
[  215.234132][T11025] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  215.256745][T11025] ext4 filesystem being mounted at /408/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  215.332880][ T8096] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  215.381039][T11039] loop3: detected capacity change from 0 to 4096
[  215.389790][T11039] EXT4-fs: Ignoring removed nomblk_io_submit option
[  215.406170][T11039] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  215.754469][T11046] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[  215.836982][ T8096] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  216.036762][T11060] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[  216.045865][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  216.099086][T11064] netlink: 'syz.1.2100': attribute type 1 has an invalid length.
[  216.136608][T11064] 8021q: adding VLAN 0 to HW filter on device bond4
[  216.187012][T11064] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2100'.
[  216.227694][T11061] lo speed is unknown, defaulting to 1000
[  216.304029][T11064] bond4 (unregistering): Released all slaves
[  216.585329][T11083] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2104'.
[  217.510731][T11092] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2110'.
[  217.671420][T11086] pimreg: entered allmulticast mode
[  217.691610][T11096] pimreg: left allmulticast mode
[  218.008046][T11099] loop3: detected capacity change from 0 to 2048
[  218.014903][T11099] EXT4-fs: Ignoring removed i_version option
[  218.061606][T11099] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  218.073870][T11099] ext4 filesystem being mounted at /144/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  218.425216][T11107] loop2: detected capacity change from 0 to 512
[  218.449244][T11108] netlink: 'syz.0.2112': attribute type 1 has an invalid length.
[  218.464326][T11107] EXT4-fs: Ignoring removed mblk_io_submit option
[  219.849494][T11107] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  219.871318][T11114] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2112'.
[  219.932709][T11107] EXT4-fs (loop2): 1 truncate cleaned up
[  219.982872][T11108] 8021q: adding VLAN 0 to HW filter on device bond2
[  219.994077][T11117] serio: Serial port ptm0
[  220.012945][T11114] bond2 (unregistering): Released all slaves
[  220.022572][T11107] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  220.079640][   T29] kauditd_printk_skb: 48 callbacks suppressed
[  220.079652][   T29] audit: type=1400 audit(1757645790.202:7715): avc:  denied  { unmount } for  pid=8096 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  220.117756][ T8096] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  220.141848][   T29] audit: type=1400 audit(1757645790.232:7716): avc:  denied  { relabelfrom } for  pid=11115 comm="syz.1.2116" name="" dev="pipefs" ino=30257 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[  220.158437][ T7815] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  220.164534][   T29] audit: type=1400 audit(1757645790.262:7717): avc:  denied  { read } for  pid=11104 comm="syz.2.2114" path="/163/bus/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  220.227244][T11124] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11124 comm=syz.0.2119
[  220.252965][T11125] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2116'.
[  220.275367][   T29] audit: type=1400 audit(1757645790.402:7718): avc:  denied  { bind } for  pid=11126 comm="syz.3.2120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  220.315742][   T29] audit: type=1326 audit(1757645790.442:7719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11130 comm="syz.3.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ba885eba9 code=0x7ffc0000
[  220.361390][T11135] serio: Serial port ptm1
[  220.368270][   T29] audit: type=1326 audit(1757645790.472:7720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11130 comm="syz.3.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7ba885eba9 code=0x7ffc0000
[  220.391802][   T29] audit: type=1326 audit(1757645790.472:7721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11130 comm="syz.3.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ba885eba9 code=0x7ffc0000
[  220.415522][   T29] audit: type=1326 audit(1757645790.472:7722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11130 comm="syz.3.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ba885eba9 code=0x7ffc0000
[  220.439108][   T29] audit: type=1326 audit(1757645790.472:7723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11130 comm="syz.3.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7ba885eba9 code=0x7ffc0000
[  220.462686][   T29] audit: type=1326 audit(1757645790.472:7724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11130 comm="syz.3.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ba885eba9 code=0x7ffc0000
[  220.579102][T11142] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2118'.
[  220.601401][T11143] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2124'.
[  220.816845][T11145] lo speed is unknown, defaulting to 1000
[  221.280510][T11161] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11161 comm=syz.2.2133
[  221.307237][T11159] netlink: 'syz.0.2131': attribute type 1 has an invalid length.
[  221.359025][T11168] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2131'.
[  221.433954][T11171] loop1: detected capacity change from 0 to 1024
[  221.496310][T11159] 8021q: adding VLAN 0 to HW filter on device bond2
[  221.531187][T11171] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  221.554787][T11168] bond2 (unregistering): Released all slaves
[  221.580788][T11171] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.2137: Allocating blocks 385-513 which overlap fs metadata
[  221.683170][T11171] EXT4-fs (loop1): pa ffff8881072673f0: logic 16, phys. 129, len 24
[  221.691244][T11171] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8
[  221.712706][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  221.747515][T11184] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2141'.
[  221.765035][T11199] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11199 comm=syz.1.2145
[  221.825526][T11193] sd 0:0:1:0: device reset
[  221.956501][T11213] netlink: 'syz.2.2153': attribute type 1 has an invalid length.
[  221.985112][T11213] 8021q: adding VLAN 0 to HW filter on device bond2
[  221.996608][T11213] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2153'.
[  222.195129][T11218] lo speed is unknown, defaulting to 1000
[  223.199128][T11221] lo speed is unknown, defaulting to 1000
[  223.460797][T11213] bond2 (unregistering): Released all slaves
[  223.498307][T11226] loop5: detected capacity change from 0 to 1024
[  223.554634][T11226] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  223.614879][T11226] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4183: comm syz.5.2156: Allocating blocks 385-513 which overlap fs metadata
[  223.858495][T11237] EXT4-fs (loop5): pa ffff8881072a8b60: logic 16, phys. 129, len 24
[  223.866635][T11237] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8
[  224.384660][T11256] serio: Serial port ptm0
[  224.543883][T11259] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2167'.
[  224.719273][ T9580] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  224.972010][T11244] loop1: detected capacity change from 0 to 2048
[  224.978754][T11244] EXT4-fs: Ignoring removed i_version option
[  224.990841][T11261] loop2: detected capacity change from 0 to 1024
[  225.049997][T11244] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  225.062205][T11244] ext4 filesystem being mounted at /420/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  225.077334][T11261] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  225.095489][   T29] kauditd_printk_skb: 142 callbacks suppressed
[  225.095503][   T29] audit: type=1400 audit(1757645795.222:7867): avc:  denied  { prog_run } for  pid=11266 comm="syz.3.2169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  225.163681][   T29] audit: type=1400 audit(1757645795.252:7868): avc:  denied  { create } for  pid=11266 comm="syz.3.2169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  225.185560][   T29] audit: type=1400 audit(1757645795.302:7869): avc:  denied  { add_name } for  pid=11260 comm="syz.2.2168" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  225.206542][   T29] audit: type=1400 audit(1757645795.302:7870): avc:  denied  { create } for  pid=11260 comm="syz.2.2168" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  225.227813][   T29] audit: type=1400 audit(1757645795.302:7871): avc:  denied  { read write } for  pid=11260 comm="syz.2.2168" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  225.250149][T11261] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.2168: Allocating blocks 385-513 which overlap fs metadata
[  225.250630][   T29] audit: type=1400 audit(1757645795.302:7872): avc:  denied  { open } for  pid=11260 comm="syz.2.2168" path="/177/file1/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  225.287914][   T29] audit: type=1400 audit(1757645795.302:7873): avc:  denied  { map } for  pid=11260 comm="syz.2.2168" path="/177/file1/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  225.306924][T11250] lo speed is unknown, defaulting to 1000
[  225.311092][   T29] audit: type=1400 audit(1757645795.302:7874): avc:  denied  { execute } for  pid=11260 comm="syz.2.2168" path="/177/file1/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  225.360288][   T29] audit: type=1400 audit(1757645795.362:7875): avc:  denied  { unmount } for  pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  225.380019][   T29] audit: type=1400 audit(1757645795.472:7876): avc:  denied  { create } for  pid=11266 comm="syz.3.2169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  225.390566][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  225.435586][T11261] EXT4-fs (loop2): pa ffff888107267380: logic 16, phys. 129, len 24
[  225.443661][T11261] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8
[  225.490439][ T7815] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  225.511647][T11276] loop1: detected capacity change from 0 to 512
[  225.519210][T11276] EXT4-fs: Ignoring removed nobh option
[  225.631508][T11276] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.2170: corrupted inode contents
[  225.648088][T11276] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #3: comm syz.1.2170: mark_inode_dirty error
[  225.662547][T11276] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.2170: corrupted inode contents
[  225.675824][T11276] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #3: comm syz.1.2170: mark_inode_dirty error
[  225.690816][T11276] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.2170: Failed to acquire dquot type 0
[  225.706002][T11276] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.2170: corrupted inode contents
[  225.719908][T11276] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #16: comm syz.1.2170: mark_inode_dirty error
[  225.816822][T11286] lo speed is unknown, defaulting to 1000
[  225.997991][T11276] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.2170: corrupted inode contents
[  226.062671][T11276] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.2170: mark_inode_dirty error
[  226.160010][T11276] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.2170: corrupted inode contents
[  226.172969][T11276] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem
[  226.186996][T11276] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.2170: corrupted inode contents
[  226.223333][T11276] EXT4-fs error (device loop1): ext4_truncate:4666: inode #16: comm syz.1.2170: mark_inode_dirty error
[  226.246974][T11276] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem
[  226.289080][T11276] EXT4-fs (loop1): 1 truncate cleaned up
[  226.299458][T11276] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  226.311975][T11291] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2176'.
[  226.314030][T11276] ext4 filesystem being mounted at /421/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  226.343027][T11276] rdma_rxe: rxe_newlink: failed to add lo
[  226.364015][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  226.818775][T11306] lo speed is unknown, defaulting to 1000
[  227.104635][T11309] lo speed is unknown, defaulting to 1000
[  227.431600][T11312] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2181'.
[  227.548199][T11312] loop5: detected capacity change from 0 to 512
[  227.638820][T11312] EXT4-fs (loop5): can't mount with journal_checksum, fs mounted w/o journal
[  227.757615][T11330] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2182'.
[  227.871993][T11338] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[  227.982987][T11328] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2185'.
[  228.160646][T11345] lo speed is unknown, defaulting to 1000
[  228.683445][T11354] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[  228.800593][T11355] loop5: detected capacity change from 0 to 2048
[  228.807282][T11355] EXT4-fs: Ignoring removed i_version option
[  228.823140][T11355] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  228.835225][T11355] ext4 filesystem being mounted at /92/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  229.054062][T11368] sd 0:0:1:0: device reset
[  229.220411][T11373] lo speed is unknown, defaulting to 1000
[  229.564475][ T9580] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  229.646321][T11379] loop5: detected capacity change from 0 to 4096
[  229.670330][T11379] EXT4-fs: Ignoring removed nomblk_io_submit option
[  229.706195][T11379] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  229.900643][ T9580] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  229.999979][T11381] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2201'.
[  230.019155][T11391] netlink: 92 bytes leftover after parsing attributes in process `syz.5.2203'.
[  230.035506][T11394] loop1: detected capacity change from 0 to 1024
[  230.067027][T11391] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2203'.
[  230.087334][T11394] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  230.144255][T11394] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.2205: Allocating blocks 385-513 which overlap fs metadata
[  230.158227][   T29] kauditd_printk_skb: 197 callbacks suppressed
[  230.158310][   T29] audit: type=1400 audit(1757645800.272:8070): avc:  denied  { read write } for  pid=11393 comm="syz.1.2205" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  230.187217][   T29] audit: type=1400 audit(1757645800.272:8071): avc:  denied  { map } for  pid=11393 comm="syz.1.2205" path="/425/file1/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  230.210249][   T29] audit: type=1400 audit(1757645800.272:8072): avc:  denied  { execute } for  pid=11393 comm="syz.1.2205" path="/425/file1/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  230.239062][T11401] serio: Serial port ptm0
[  230.252893][T11404] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[  230.282114][   T29] audit: type=1400 audit(1757645800.412:8073): avc:  denied  { connect } for  pid=11393 comm="syz.1.2205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  230.332458][T11394] EXT4-fs (loop1): pa ffff8881072a8bd0: logic 16, phys. 129, len 24
[  230.340535][T11394] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8
[  230.350891][   T29] audit: type=1326 audit(1757645800.442:8074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11405 comm="syz.3.2209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ba885eba9 code=0x7ffc0000
[  230.374586][   T29] audit: type=1326 audit(1757645800.442:8075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11405 comm="syz.3.2209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ba885eba9 code=0x7ffc0000
[  230.398162][   T29] audit: type=1326 audit(1757645800.462:8076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11405 comm="syz.3.2209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7f7ba885eba9 code=0x7ffc0000
[  230.422240][   T29] audit: type=1326 audit(1757645800.462:8077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11405 comm="syz.3.2209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ba885eba9 code=0x7ffc0000
[  230.445879][   T29] audit: type=1326 audit(1757645800.462:8078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11405 comm="syz.3.2209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ba885eba9 code=0x7ffc0000
[  230.469413][   T29] audit: type=1326 audit(1757645800.462:8079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11405 comm="syz.3.2209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7ba885eba9 code=0x7ffc0000
[  230.523368][T11409] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2207'.
[  230.535259][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  230.565495][T11411] loop2: detected capacity change from 0 to 512
[  230.572591][T11411] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  230.633305][T11416] loop5: detected capacity change from 0 to 1024
[  230.717858][T11417] lo speed is unknown, defaulting to 1000
[  230.997719][T11411] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.2210: corrupted in-inode xattr: overlapping e_value 
[  231.104475][T11416] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  231.356483][T11411] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.2210: couldn't read orphan inode 15 (err -117)
[  231.369972][T11424] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[  231.426335][T11416] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4183: comm syz.5.2212: Allocating blocks 385-513 which overlap fs metadata
[  231.443377][T11411] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  231.547369][T11427] loop1: detected capacity change from 0 to 4096
[  231.582236][T11427] EXT4-fs: Ignoring removed nomblk_io_submit option
[  231.692172][T11427] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  231.735888][T11415] EXT4-fs (loop5): pa ffff8881072a8c40: logic 16, phys. 129, len 24
[  231.744070][T11415] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8
[  231.814196][ T9580] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  231.843092][ T7815] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  231.974184][T11441] loop2: detected capacity change from 0 to 4096
[  231.990401][T11441] EXT4-fs: Ignoring removed nomblk_io_submit option
[  232.012129][T11441] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  232.049134][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  232.080645][ T7815] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  232.100635][T11435] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2216'.
[  232.183214][T11448] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[  232.202453][T11450] loop1: detected capacity change from 0 to 1024
[  232.297424][T11455] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2219'.
[  232.331010][T11450] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  232.345879][T11450] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.2222: Allocating blocks 385-513 which overlap fs metadata
[  232.376186][T11449] EXT4-fs (loop1): pa ffff8881072673f0: logic 16, phys. 129, len 24
[  232.384366][T11449] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8
[  232.507956][T11461] lo speed is unknown, defaulting to 1000
[  232.738145][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  233.022442][T11474] loop3: detected capacity change from 0 to 4096
[  233.045290][T11474] EXT4-fs: Ignoring removed nomblk_io_submit option
[  233.067162][T11477] loop1: detected capacity change from 0 to 4096
[  233.139486][T11478] loop5: detected capacity change from 0 to 2048
[  233.146242][T11478] EXT4-fs: Ignoring removed i_version option
[  233.160767][T11477] EXT4-fs: Ignoring removed nomblk_io_submit option
[  233.196356][T11478] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  233.208442][T11478] ext4 filesystem being mounted at /99/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  233.363689][T11481] loop2: detected capacity change from 0 to 2048
[  233.370360][T11481] EXT4-fs: Ignoring removed i_version option
[  233.397362][T11477] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  233.414482][T11481] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  233.426566][T11481] ext4 filesystem being mounted at /198/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  233.592049][ T7815] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  233.618658][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  234.035635][T11474] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  234.066389][T11493] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[  234.197164][ T8096] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  234.244380][T11500] loop2: detected capacity change from 0 to 512
[  234.271336][T11500] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  234.297388][T11500] ext4 filesystem being mounted at /201/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  234.439658][ T9580] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  234.507657][T11510] loop5: detected capacity change from 0 to 2048
[  234.543137][T11510] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  234.551553][T11508] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2238'.
[  234.558092][T11506] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2234'.
[  234.574109][T11510] FAULT_INJECTION: forcing a failure.
[  234.574109][T11510] name failslab, interval 1, probability 0, space 0, times 0
[  234.586800][T11510] CPU: 1 UID: 0 PID: 11510 Comm: syz.5.2240 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  234.586827][T11510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  234.586904][T11510] Call Trace:
[  234.586911][T11510]  <TASK>
[  234.586919][T11510]  __dump_stack+0x1d/0x30
[  234.586941][T11510]  dump_stack_lvl+0xe8/0x140
[  234.586961][T11510]  dump_stack+0x15/0x1b
[  234.586978][T11510]  should_fail_ex+0x265/0x280
[  234.587047][T11510]  should_failslab+0x8c/0xb0
[  234.587084][T11510]  __kmalloc_noprof+0xa5/0x3e0
[  234.587193][T11510]  ? ext4_find_extent+0x16b/0x7a0
[  234.587217][T11510]  ext4_find_extent+0x16b/0x7a0
[  234.587241][T11510]  ? mas_replace_node+0x2e7/0x410
[  234.587337][T11510]  ext4_ext_map_blocks+0x11f/0x38a0
[  234.587358][T11510]  ? setup_fault_attr+0x16a/0x1b0
[  234.587382][T11510]  ? folio_mark_accessed+0x240/0x3d0
[  234.587414][T11510]  ? folio_mark_accessed+0x1b6/0x3d0
[  234.587443][T11510]  ? folio_mark_accessed+0x240/0x3d0
[  234.587470][T11510]  ext4_map_query_blocks+0xa8/0x480
[  234.587497][T11510]  ext4_map_blocks+0x330/0xd00
[  234.587570][T11510]  ? ext4_get_group_desc+0x16b/0x190
[  234.587678][T11510]  ? __ext4_journal_start_sb+0x131/0x300
[  234.587708][T11510]  ext4_iomap_begin+0x88d/0xe00
[  234.587739][T11510]  ? __pfx_ext4_iomap_begin+0x10/0x10
[  234.587824][T11510]  iomap_iter+0x32f/0x730
[  234.587896][T11510]  ? should_failslab+0x8c/0xb0
[  234.587922][T11510]  __iomap_dio_rw+0x708/0x1250
[  234.587956][T11510]  ? ext4_journal_check_start+0x11a/0x1b0
[  234.587975][T11510]  iomap_dio_rw+0x40/0x90
[  234.587993][T11510]  ext4_file_write_iter+0xad9/0xf00
[  234.588083][T11510]  do_iter_readv_writev+0x499/0x540
[  234.588107][T11510]  vfs_writev+0x2df/0x8b0
[  234.588153][T11510]  ? htab_map_hash+0x1cc/0x1d0
[  234.588239][T11510]  __se_sys_pwritev2+0xfc/0x1c0
[  234.588308][T11510]  __x64_sys_pwritev2+0x67/0x80
[  234.588339][T11510]  x64_sys_call+0x2c55/0x2ff0
[  234.588403][T11510]  do_syscall_64+0xd2/0x200
[  234.588431][T11510]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  234.588478][T11510]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  234.588501][T11510]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  234.588520][T11510] RIP: 0033:0x7fa21d38eba9
[  234.588536][T11510] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  234.588591][T11510] RSP: 002b:00007fa21bdf7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148
[  234.588607][T11510] RAX: ffffffffffffffda RBX: 00007fa21d5d5fa0 RCX: 00007fa21d38eba9
[  234.588620][T11510] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000004
[  234.588633][T11510] RBP: 00007fa21bdf7090 R08: 0000000000000000 R09: 0000000000000000
[  234.588700][T11510] R10: 0000000000001400 R11: 0000000000000246 R12: 0000000000000001
[  234.588713][T11510] R13: 00007fa21d5d6038 R14: 00007fa21d5d5fa0 R15: 00007ffc56a5ad58
[  234.588755][T11510]  </TASK>
[  234.882830][ T9580] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  234.921661][T11516] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2241'.
[  235.056413][T11516] bridge0: port 3(batadv0) entered blocking state
[  235.065253][T11516] bridge0: port 3(batadv0) entered disabled state
[  235.072966][T11516] batadv0: entered allmulticast mode
[  235.082150][T11516] batadv0: entered promiscuous mode
[  235.089773][T11524] loop1: detected capacity change from 0 to 4096
[  235.113153][T11518] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2242'.
[  235.140089][ T7815] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  235.156556][T11524] EXT4-fs: Ignoring removed nomblk_io_submit option
[  235.172119][T11524] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  235.188886][T11530] loop3: detected capacity change from 0 to 512
[  235.230870][T11530] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  235.254317][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  235.263980][T11536] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[  235.290881][T11530] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.2247: corrupted in-inode xattr: overlapping e_value 
[  235.370614][T11530] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.2247: couldn't read orphan inode 15 (err -117)
[  235.387580][   T29] kauditd_printk_skb: 113 callbacks suppressed
[  235.387594][   T29] audit: type=1326 audit(1757645805.512:8193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11542 comm="syz.1.2250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd300e6eba9 code=0x7ffc0000
[  235.417704][   T29] audit: type=1326 audit(1757645805.512:8194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11542 comm="syz.1.2250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd300e6eba9 code=0x7ffc0000
[  235.441251][   T29] audit: type=1326 audit(1757645805.512:8195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11542 comm="syz.1.2250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7fd300e6eba9 code=0x7ffc0000
[  235.464791][   T29] audit: type=1326 audit(1757645805.512:8196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11542 comm="syz.1.2250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd300e6eba9 code=0x7ffc0000
[  235.488304][   T29] audit: type=1326 audit(1757645805.512:8197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11542 comm="syz.1.2250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd300e6eba9 code=0x7ffc0000
[  235.511800][   T29] audit: type=1326 audit(1757645805.512:8198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11542 comm="syz.1.2250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd300e6eba9 code=0x7ffc0000
[  235.535287][   T29] audit: type=1326 audit(1757645805.512:8199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11542 comm="syz.1.2250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd300e6eba9 code=0x7ffc0000
[  235.536312][ T1854] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  235.558832][   T29] audit: type=1326 audit(1757645805.512:8200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11542 comm="syz.1.2250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd300e6eba9 code=0x7ffc0000
[  235.558863][   T29] audit: type=1326 audit(1757645805.512:8201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11542 comm="syz.1.2250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7fd300e6eba9 code=0x7ffc0000
[  235.568101][ T1854] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  235.624234][   T29] audit: type=1326 audit(1757645805.512:8202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11542 comm="syz.1.2250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd300e6eba9 code=0x7ffc0000
[  235.703752][T11530] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  235.851783][T11552] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2252'.
[  236.026170][T11566] netlink: 'syz.0.2253': attribute type 1 has an invalid length.
[  236.077114][T11566] 8021q: adding VLAN 0 to HW filter on device bond2
[  236.138643][T11570] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2253'.
[  236.152885][ T8096] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  236.163749][T11570] bond2 (unregistering): Released all slaves
[  236.263808][T11574] loop2: detected capacity change from 0 to 2048
[  236.288862][T11574] EXT4-fs: Ignoring removed i_version option
[  236.332271][T11574] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  236.352474][T11583] loop1: detected capacity change from 0 to 512
[  236.390193][T11574] ext4 filesystem being mounted at /206/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  236.404676][T11583] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  236.432305][T11579] loop3: detected capacity change from 0 to 4096
[  236.485637][T11579] EXT4-fs: Ignoring removed nomblk_io_submit option
[  236.505859][T11583] EXT4-fs (loop1): mount failed
[  236.554307][T11579] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  236.640875][ T8096] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  236.990270][T11597] lo speed is unknown, defaulting to 1000
[  237.471356][T11601] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2263'.
[  238.596657][T11621] loop3: detected capacity change from 0 to 512
[  238.603582][T11621] EXT4-fs: Ignoring removed nobh option
[  238.664809][T11621] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.2268: corrupted inode contents
[  238.725667][T11621] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #3: comm syz.3.2268: mark_inode_dirty error
[  238.757509][T11621] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.2268: corrupted inode contents
[  238.808369][T11621] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.2268: mark_inode_dirty error
[  238.857171][T11621] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.2268: Failed to acquire dquot type 0
[  238.908407][T11621] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.2268: corrupted inode contents
[  238.958920][T11621] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #16: comm syz.3.2268: mark_inode_dirty error
[  239.011087][T11621] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.2268: corrupted inode contents
[  239.057511][T11621] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.2268: mark_inode_dirty error
[  239.108415][T11625] loop1: detected capacity change from 0 to 1024
[  239.125394][T11625] EXT4-fs: Ignoring removed nobh option
[  239.200835][T11621] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.2268: corrupted inode contents
[  239.217408][T11625] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  239.321442][T11625] SELinux:  policydb magic number 0xfd010004 does not match expected magic number 0xf97cff8c
[  239.350408][T11625] SELinux: failed to load policy
[  239.380024][T11621] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem
[  239.421682][T11621] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.2268: corrupted inode contents
[  239.435864][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  239.455594][T11621] EXT4-fs error (device loop3): ext4_truncate:4666: inode #16: comm syz.3.2268: mark_inode_dirty error
[  239.490293][T11621] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem
[  239.614819][T11621] EXT4-fs (loop3): 1 truncate cleaned up
[  239.621482][T11621] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  239.650268][T11621] ext4 filesystem being mounted at /173/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  239.678614][T11621] rdma_rxe: rxe_newlink: failed to add lo
[  239.760747][ T8096] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  240.023202][T11631] loop3: detected capacity change from 0 to 4096
[  240.029872][T11631] EXT4-fs: Ignoring removed nomblk_io_submit option
[  240.389989][   T29] kauditd_printk_skb: 3375 callbacks suppressed
[  240.390005][   T29] audit: type=1326 audit(1757645810.512:11575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11628 comm="syz.1.2270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd300e6eba9 code=0x50000
[  240.425498][   T29] audit: type=1326 audit(1757645810.542:11576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11628 comm="syz.1.2270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd300e6eba9 code=0x50000
[  240.448831][   T29] audit: type=1326 audit(1757645810.542:11577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11628 comm="syz.1.2270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd300e6eba9 code=0x50000
[  240.472140][   T29] audit: type=1326 audit(1757645810.542:11578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11628 comm="syz.1.2270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd300e6eba9 code=0x50000
[  240.495470][   T29] audit: type=1326 audit(1757645810.542:11579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11628 comm="syz.1.2270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd300e6eba9 code=0x50000
[  240.518802][   T29] audit: type=1326 audit(1757645810.542:11580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11628 comm="syz.1.2270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd300e6eba9 code=0x50000
[  240.533588][T11631] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  240.542699][   T29] audit: type=1326 audit(1757645810.542:11581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11628 comm="syz.1.2270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd300e6eba9 code=0x50000
[  240.578345][   T29] audit: type=1326 audit(1757645810.542:11582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11628 comm="syz.1.2270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd300e6eba9 code=0x50000
[  240.584507][T11634] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2270'.
[  240.601640][   T29] audit: type=1326 audit(1757645810.552:11583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11628 comm="syz.1.2270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd300e6eba9 code=0x50000
[  240.601668][   T29] audit: type=1326 audit(1757645810.552:11584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11628 comm="syz.1.2270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd300e6eba9 code=0x50000
[  240.721718][ T8096] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  241.107485][T11616] Set syz1 is full, maxelem 65536 reached
[  241.211179][T11642] netlink: 'syz.3.2273': attribute type 1 has an invalid length.
[  241.247345][T11645] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2275'.
[  241.268575][T11646] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2273'.
[  241.283482][T11642] 8021q: adding VLAN 0 to HW filter on device bond1
[  241.305173][T11646] bond1 (unregistering): Released all slaves
[  241.412850][T11655] loop3: detected capacity change from 0 to 512
[  241.431947][T11655] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  241.471893][T11655] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.2278: corrupted in-inode xattr: overlapping e_value 
[  241.486613][T11661] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[  241.493797][T11655] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.2278: couldn't read orphan inode 15 (err -117)
[  241.570585][T11655] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  241.922378][T11678] lo speed is unknown, defaulting to 1000
[  242.752691][T11685] serio: Serial port ptm0
[  242.870304][ T7815] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  242.893647][ T8096] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  242.936856][T11694] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2286'.
[  242.960439][T11696] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2291'.
[  242.997143][T11699] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2289'.
[  243.023416][T11693] lo speed is unknown, defaulting to 1000
[  243.601666][T11717] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11717 comm=syz.0.2295
[  244.060813][T11728] sd 0:0:1:0: device reset
[  244.071359][T11739] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[  244.170040][T11745] loop3: detected capacity change from 0 to 2048
[  244.206094][T11745] EXT4-fs: Ignoring removed i_version option
[  244.231916][T11745] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  244.252449][T11745] ext4 filesystem being mounted at /179/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  244.388445][T11751] lo speed is unknown, defaulting to 1000
[  245.043584][T11760] sd 0:0:1:0: device reset
[  245.107157][T11762] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2309'.
[  245.307953][T11769] loop2: detected capacity change from 0 to 1024
[  245.366423][T11769] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  245.417865][   T29] kauditd_printk_skb: 2467 callbacks suppressed
[  245.417880][   T29] audit: type=1400 audit(1757645815.542:14046): avc:  denied  { mount } for  pid=11768 comm="syz.2.2313" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  245.470200][   T29] audit: type=1400 audit(1757645815.582:14047): avc:  denied  { map_create } for  pid=11768 comm="syz.2.2313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  245.489557][   T29] audit: type=1400 audit(1757645815.582:14048): avc:  denied  { map_read map_write } for  pid=11768 comm="syz.2.2313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  245.509615][   T29] audit: type=1400 audit(1757645815.582:14049): avc:  denied  { read } for  pid=11768 comm="syz.2.2313" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  245.532936][   T29] audit: type=1400 audit(1757645815.582:14050): avc:  denied  { open } for  pid=11768 comm="syz.2.2313" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  245.560608][   T29] audit: type=1400 audit(1757645815.582:14051): avc:  denied  { ioctl } for  pid=11768 comm="syz.2.2313" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  245.586117][   T29] audit: type=1400 audit(1757645815.642:14052): avc:  denied  { unmount } for  pid=7815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  245.600481][ T7815] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  245.605933][   T29] audit: type=1400 audit(1757645815.642:14053): avc:  denied  { mounton } for  pid=11772 comm="syz.1.2312" path="/453/bus" dev="tmpfs" ino=2420 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  245.643594][   T29] audit: type=1400 audit(1757645815.772:14054): avc:  denied  { read write } for  pid=11774 comm="syz.1.2315" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  245.667201][   T29] audit: type=1400 audit(1757645815.772:14055): avc:  denied  { open } for  pid=11774 comm="syz.1.2315" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  245.796122][T11781] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2314'.
[  245.867136][T11777] lo speed is unknown, defaulting to 1000
[  245.952529][T11784] loop2: detected capacity change from 0 to 1024
[  245.975312][T11784] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  246.016809][T11784] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.2317: Allocating blocks 385-513 which overlap fs metadata
[  246.059712][T11783] EXT4-fs (loop2): pa ffff8881072a8cb0: logic 16, phys. 129, len 24
[  246.068131][T11783] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8
[  246.116305][ T7815] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  246.348882][T11795] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2319'.
[  246.409291][T11796] loop2: detected capacity change from 0 to 2048
[  246.426267][T11796] EXT4-fs: Ignoring removed i_version option
[  246.473288][T11796] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  246.524139][T11796] ext4 filesystem being mounted at /219/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  246.725390][T11810] loop5: detected capacity change from 0 to 512
[  246.743844][T11810] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  246.779290][T11810] EXT4-fs error (device loop5): ext4_iget_extra_inode:5104: inode #15: comm syz.5.2323: corrupted in-inode xattr: overlapping e_value 
[  246.836469][T11814] syzkaller0: entered promiscuous mode
[  246.842024][T11814] syzkaller0: entered allmulticast mode
[  246.856408][T11810] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.2323: couldn't read orphan inode 15 (err -117)
[  246.879810][T11810] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  247.176737][T11851] loop5: detected capacity change from 0 to 1024
[  247.240338][T11851] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4183: comm syz.5.2329: Allocating blocks 385-513 which overlap fs metadata
[  247.322985][T11850] EXT4-fs (loop5): pa ffff8881072a8c40: logic 16, phys. 129, len 24
[  247.331015][T11850] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8
[  247.358029][T11866] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2333'.
[  247.367755][T11867] sd 0:0:1:0: device reset
[  247.519375][T11877] loop5: detected capacity change from 0 to 512
[  247.580427][T11877] ext4: Unknown parameter 'audit'
[  247.918084][T11883] FAULT_INJECTION: forcing a failure.
[  247.918084][T11883] name failslab, interval 1, probability 0, space 0, times 0
[  247.930882][T11883] CPU: 1 UID: 0 PID: 11883 Comm: syz.5.2339 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  247.930908][T11883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  247.930918][T11883] Call Trace:
[  247.930924][T11883]  <TASK>
[  247.930932][T11883]  __dump_stack+0x1d/0x30
[  247.930953][T11883]  dump_stack_lvl+0xe8/0x140
[  247.931009][T11883]  dump_stack+0x15/0x1b
[  247.931022][T11883]  should_fail_ex+0x265/0x280
[  247.931042][T11883]  should_failslab+0x8c/0xb0
[  247.931062][T11883]  kmem_cache_alloc_noprof+0x50/0x310
[  247.931165][T11883]  ? skb_clone+0x151/0x1f0
[  247.931192][T11883]  skb_clone+0x151/0x1f0
[  247.931217][T11883]  __netlink_deliver_tap+0x2c9/0x500
[  247.931310][T11883]  netlink_unicast+0x66b/0x690
[  247.931331][T11883]  netlink_sendmsg+0x58b/0x6b0
[  247.931358][T11883]  ? __pfx_netlink_sendmsg+0x10/0x10
[  247.931454][T11883]  __sock_sendmsg+0x142/0x180
[  247.931487][T11883]  ____sys_sendmsg+0x31e/0x4e0
[  247.931515][T11883]  ___sys_sendmsg+0x17b/0x1d0
[  247.931644][T11883]  __x64_sys_sendmsg+0xd4/0x160
[  247.931673][T11883]  x64_sys_call+0x191e/0x2ff0
[  247.931695][T11883]  do_syscall_64+0xd2/0x200
[  247.931725][T11883]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  247.931787][T11883]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  247.931814][T11883]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  247.931976][T11883] RIP: 0033:0x7fa21d38eba9
[  247.931992][T11883] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  247.932042][T11883] RSP: 002b:00007fa21bdf7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  247.932060][T11883] RAX: ffffffffffffffda RBX: 00007fa21d5d5fa0 RCX: 00007fa21d38eba9
[  247.932070][T11883] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005
[  247.932148][T11883] RBP: 00007fa21bdf7090 R08: 0000000000000000 R09: 0000000000000000
[  247.932162][T11883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  247.932174][T11883] R13: 00007fa21d5d6038 R14: 00007fa21d5d5fa0 R15: 00007ffc56a5ad58
[  247.932194][T11883]  </TASK>
[  248.033155][T11883] bridge3: entered allmulticast mode
[  248.247897][T11887] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2341'.
[  248.279033][T11889] bridge3: entered allmulticast mode
[  248.687588][T11905] loop5: detected capacity change from 0 to 4096
[  248.728630][T11905] EXT4-fs: Ignoring removed nomblk_io_submit option
[  248.914558][T11904] lo speed is unknown, defaulting to 1000
[  249.304484][T11924] sd 0:0:1:0: device reset
[  249.456625][T11925] loop5: detected capacity change from 0 to 2048
[  249.463430][T11925] EXT4-fs: Ignoring removed i_version option
[  249.486793][T11925] ext4 filesystem being mounted at /123/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  249.971512][T11932] loop3: detected capacity change from 0 to 2048
[  249.995159][T11932] EXT4-fs: Ignoring removed i_version option
[  250.046823][T11932] EXT4-fs mount: 7 callbacks suppressed
[  250.046838][T11932] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  250.097522][T11932] ext4 filesystem being mounted at /181/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  250.219566][T11939] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2355'.
[  250.229774][ T9580] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  250.559843][T11949] lo speed is unknown, defaulting to 1000
[  250.738936][   T29] kauditd_printk_skb: 248 callbacks suppressed
[  250.738984][   T29] audit: type=1400 audit(1757645820.552:14304): avc:  denied  { create } for  pid=11946 comm="syz.0.2358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  250.765162][   T29] audit: type=1400 audit(1757645820.562:14305): avc:  denied  { open } for  pid=11946 comm="syz.0.2358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  250.784690][   T29] audit: type=1400 audit(1757645820.562:14306): avc:  denied  { kernel } for  pid=11946 comm="syz.0.2358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  250.804293][   T29] audit: type=1400 audit(1757645820.562:14307): avc:  denied  { tracepoint } for  pid=11946 comm="syz.0.2358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  250.863691][ T7815] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  250.904805][   T29] audit: type=1400 audit(1757645821.022:14308): avc:  denied  { read } for  pid=11952 comm="syz.2.2359" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  250.928177][   T29] audit: type=1400 audit(1757645821.022:14309): avc:  denied  { open } for  pid=11952 comm="syz.2.2359" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  250.952093][   T29] audit: type=1400 audit(1757645821.032:14310): avc:  denied  { create } for  pid=11952 comm="syz.2.2359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  251.010166][   T29] audit: type=1400 audit(1757645821.032:14311): avc:  denied  { create } for  pid=11952 comm="syz.2.2359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  251.067151][   T29] audit: type=1400 audit(1757645821.192:14312): avc:  denied  { write } for  pid=11959 comm="syz.0.2361" name="001" dev="devtmpfs" ino=150 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  251.075295][T11960] netlink: 'syz.0.2361': attribute type 29 has an invalid length.
[  251.093309][   T29] audit: type=1400 audit(1757645821.202:14313): avc:  denied  { write } for  pid=11959 comm="syz.0.2361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  251.118718][T11962] loop2: detected capacity change from 0 to 512
[  251.130301][T11962] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  251.169993][T11962] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.2362: corrupted in-inode xattr: overlapping e_value 
[  251.256468][T11962] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.2362: couldn't read orphan inode 15 (err -117)
[  251.270125][T11968] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2364'.
[  251.332549][T11962] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  251.472782][T11980] serio: Serial port ptm0
[  251.636710][T11989] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2369'.
[  251.763046][ T7815] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  251.843835][T11993] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2373'.
[  252.860643][T12040] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2387'.
[  253.194945][T12048] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12048 comm=}\)\
[  253.324527][T12054] serio: Serial port ptm0
[  253.500110][T12056] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2396'.
[  253.974728][T12075] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[  254.035586][T12079] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=12079 comm=syz.5.2405
[  254.511215][ T9485] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  254.783800][   T41] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  254.847353][   T41] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  254.881129][T12092] serio: Serial port ptm0
[  254.923561][   T41] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  254.982932][   T41] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  255.045585][T12094] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2408'.
[  255.054770][   T41] bridge_slave_1: left allmulticast mode
[  255.060498][   T41] bridge_slave_1: left promiscuous mode
[  255.066143][   T41] bridge0: port 2(bridge_slave_1) entered disabled state
[  255.091884][   T41] bridge_slave_0: left allmulticast mode
[  255.097569][   T41] bridge_slave_0: left promiscuous mode
[  255.103325][   T41] bridge0: port 1(bridge_slave_0) entered disabled state
[  255.265041][   T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  255.283081][   T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  255.302508][   T41] bond0 (unregistering): Released all slaves
[  255.366688][T12101] lo speed is unknown, defaulting to 1000
[  255.564244][   T41] veth1_macvtap: left promiscuous mode
[  255.576982][   T41] veth0_macvtap: left promiscuous mode
[  255.592842][   T41] veth1_vlan: left promiscuous mode
[  255.605454][   T41] veth0_vlan: left promiscuous mode
[  255.674315][   T41] team0 (unregistering): Port device team_slave_1 removed
[  255.683754][   T41] team0 (unregistering): Port device team_slave_0 removed
[  255.692280][ T7822] smc: removing ib device !yz!
[  255.740031][   T29] kauditd_printk_skb: 4463 callbacks suppressed
[  255.740046][   T29] audit: type=1400 audit(1757645825.872:18564): avc:  denied  { read } for  pid=3032 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  255.784039][T12108] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[  255.792024][ T3032] audit: audit_backlog=65 > audit_backlog_limit=64
[  255.798547][ T3032] audit: audit_lost=82 audit_rate_limit=0 audit_backlog_limit=64
[  255.806309][ T3032] audit: backlog limit exceeded
[  255.812370][T12108] audit: audit_backlog=65 > audit_backlog_limit=64
[  255.818947][T12108] audit: audit_lost=83 audit_rate_limit=0 audit_backlog_limit=64
[  255.820820][ T9580] audit: audit_backlog=65 > audit_backlog_limit=64
[  255.826776][T12108] audit: backlog limit exceeded
[  255.833242][ T9580] audit: audit_lost=84 audit_rate_limit=0 audit_backlog_limit=64
[  255.838516][   T29] audit: type=1400 audit(1757645825.902:18565): avc:  denied  { read } for  pid=3032 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  256.436879][T12119] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=12119 comm=syz.0.2416
[  256.521007][T12120] lo speed is unknown, defaulting to 1000
[  257.405283][T12204] lo speed is unknown, defaulting to 1000
[  257.746180][T12190] lo speed is unknown, defaulting to 1000
[  257.784085][T12212] loop5: detected capacity change from 0 to 1024
[  257.867799][T12190] chnl_net:caif_netlink_parms(): no params data found
[  257.906813][T12212] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  257.927324][T12212] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4183: comm syz.5.2425: Allocating blocks 385-513 which overlap fs metadata
[  258.071414][T12225] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[  258.193727][T12232] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=12232 comm=syz.1.2429
[  258.339474][T12190] bridge0: port 1(bridge_slave_0) entered blocking state
[  258.346709][T12190] bridge0: port 1(bridge_slave_0) entered disabled state
[  258.369300][T12223] EXT4-fs (loop5): pa ffff888107267540: logic 16, phys. 129, len 24
[  258.377352][T12223] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8
[  258.397145][T12190] bridge_slave_0: entered allmulticast mode
[  258.403838][T12190] bridge_slave_0: entered promiscuous mode
[  258.418662][T12190] bridge0: port 2(bridge_slave_1) entered blocking state
[  258.425765][T12190] bridge0: port 2(bridge_slave_1) entered disabled state
[  258.433586][T12190] bridge_slave_1: entered allmulticast mode
[  258.440357][T12190] bridge_slave_1: entered promiscuous mode
[  258.453071][ T9580] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  258.478433][T12190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  258.497632][T12190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  258.518993][T12190] team0: Port device team_slave_0 added
[  258.528508][T12190] team0: Port device team_slave_1 added
[  258.545377][T12190] batman_adv: batadv0: Adding interface: batadv_slave_0
[  258.552378][T12190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  258.578395][T12190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  258.635990][T12190] batman_adv: batadv0: Adding interface: batadv_slave_1
[  258.643029][T12190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  258.668982][T12190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  258.712919][T12190] hsr_slave_0: entered promiscuous mode
[  258.719147][T12190] hsr_slave_1: entered promiscuous mode
[  258.847749][T12190] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  258.859484][T12190] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  258.884201][T12190] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  258.893577][T12190] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  258.938317][T12190] 8021q: adding VLAN 0 to HW filter on device bond0
[  258.953867][T12190] 8021q: adding VLAN 0 to HW filter on device team0
[  258.967228][   T41] bridge0: port 1(bridge_slave_0) entered blocking state
[  258.974308][   T41] bridge0: port 1(bridge_slave_0) entered forwarding state
[  258.996033][T12190] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  259.006461][T12190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  259.021069][   T41] bridge0: port 2(bridge_slave_1) entered blocking state
[  259.028150][   T41] bridge0: port 2(bridge_slave_1) entered forwarding state
[  259.094316][T12264] serio: Serial port ptm0
[  259.173931][T12190] 8021q: adding VLAN 0 to HW filter on device batadv0
[  259.183295][T12264] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2434'.
[  259.187288][T12267] SELinux: failed to load policy
[  259.226346][T12283] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=12283 comm=syz.5.2439
[  259.335747][T12304] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2445'.
[  259.412222][T12313] loop5: detected capacity change from 0 to 4096
[  259.433260][T12190] veth0_vlan: entered promiscuous mode
[  259.448314][T12313] EXT4-fs: Ignoring removed nomblk_io_submit option
[  259.470467][T12325] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=12325 comm=syz.2.2451
[  259.496699][T12190] veth1_vlan: entered promiscuous mode
[  259.504738][T12313] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  259.523743][T12190] veth0_macvtap: entered promiscuous mode
[  259.567041][T12190] veth1_macvtap: entered promiscuous mode
[  259.578167][ T9580] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  259.590671][T12333] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2454'.
[  259.604102][T12190] batman_adv: batadv0: Interface activated: batadv_slave_0
[  259.625296][T12190] batman_adv: batadv0: Interface activated: batadv_slave_1
[  259.641325][ T3442] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  259.651066][ T3442] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  259.659762][ T3442] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  259.681238][ T3442] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  259.743144][T12346] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2457'.
[  259.808873][T12352] netlink: 'syz.5.2459': attribute type 1 has an invalid length.
[  259.841924][T12356] netlink: 360 bytes leftover after parsing attributes in process `syz.0.2461'.
[  259.862768][T12361] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2459'.
[  259.890371][T12352] 8021q: adding VLAN 0 to HW filter on device bond1
[  259.898856][T12359] loop2: detected capacity change from 0 to 4096
[  259.906032][T12359] EXT4-fs: Ignoring removed nomblk_io_submit option
[  259.958815][T12337] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2455'.
[  259.968484][T12359] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  260.001295][ T7815] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  260.013157][T12361] bond1 (unregistering): Released all slaves
[  260.103857][T12367] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=12367 comm=syz.2.2463
[  260.237086][T12374] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2466'.
[  260.298025][T12381] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2469'.
[  260.307157][T12372] loop2: detected capacity change from 0 to 2048
[  260.313888][T12372] EXT4-fs: Ignoring removed i_version option
[  260.474313][T12372] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  260.486825][T12372] ext4 filesystem being mounted at /252/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  260.522466][T12394] loop1: detected capacity change from 0 to 4096
[  260.534302][T12394] EXT4-fs: Ignoring removed nomblk_io_submit option
[  260.678376][T12395] lo speed is unknown, defaulting to 1000
[  260.735379][T12397] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=12397 comm=syz.5.2475
[  260.761033][T12394] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  260.813968][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  260.912598][T12405] netlink: 'syz.1.2477': attribute type 1 has an invalid length.
[  260.963595][T12407] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2477'.
[  260.989536][T12405] 8021q: adding VLAN 0 to HW filter on device bond4
[  261.012291][T12407] bond4 (unregistering): Released all slaves
[  261.220746][   T29] kauditd_printk_skb: 7909 callbacks suppressed
[  261.220764][   T29] audit: type=1326 audit(1757645831.252:25169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12412 comm="syz.0.2481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3c79ceba9 code=0x7ffc0000
[  261.250821][   T29] audit: type=1326 audit(1757645831.252:25170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12412 comm="syz.0.2481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3c79ceba9 code=0x7ffc0000
[  261.274452][   T29] audit: type=1326 audit(1757645831.252:25171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12412 comm="syz.0.2481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7fc3c79ceba9 code=0x7ffc0000
[  261.298036][   T29] audit: type=1326 audit(1757645831.252:25172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12412 comm="syz.0.2481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3c79ceba9 code=0x7ffc0000
[  261.321722][   T29] audit: type=1326 audit(1757645831.252:25173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12412 comm="syz.0.2481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3c79ceba9 code=0x7ffc0000
[  261.345302][   T29] audit: type=1326 audit(1757645831.252:25174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12412 comm="syz.0.2481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc3c79ceba9 code=0x7ffc0000
[  261.368799][   T29] audit: type=1326 audit(1757645831.252:25175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12412 comm="syz.0.2481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3c79ceba9 code=0x7ffc0000
[  261.392476][   T29] audit: type=1326 audit(1757645831.252:25176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12412 comm="syz.0.2481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3c79ceba9 code=0x7ffc0000
[  261.416058][   T29] audit: type=1326 audit(1757645831.252:25177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12412 comm="syz.0.2481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7fc3c79ceba9 code=0x7ffc0000
[  261.439697][   T29] audit: type=1326 audit(1757645831.252:25178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12412 comm="syz.0.2481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3c79ceba9 code=0x7ffc0000
[  261.546440][ T7815] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  261.651584][T12428] loop2: detected capacity change from 0 to 1024
[  261.658727][T12428] SELinux: security_context_str_to_sid (root) failed with errno=-22
[  261.745404][T12431] loop1: detected capacity change from 0 to 4096
[  261.754761][T12431] EXT4-fs: Ignoring removed nomblk_io_submit option
[  261.785677][T12431] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  261.836700][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  261.896794][T12351] Set syz1 is full, maxelem 65536 reached
[  261.982633][T12450] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12450 comm=}\)\
[  262.158325][T12466] netlink: 'syz.6.2500': attribute type 29 has an invalid length.
[  262.258994][T12479] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[  262.351655][T12488] serio: Serial port ptm1
[  262.515218][T12493] hsr_slave_0: left promiscuous mode
[  262.524902][T12493] hsr_slave_1: left promiscuous mode
[  262.774610][T12501] lo speed is unknown, defaulting to 1000
[  263.166337][T12525] loop5: detected capacity change from 0 to 128
[  263.255340][T12537] netlink: 'syz.0.2521': attribute type 1 has an invalid length.
[  263.275243][T12537] 8021q: adding VLAN 0 to HW filter on device bond2
[  263.287596][T12537] bond2 (unregistering): Released all slaves
[  263.299893][T12534] batadv0 (unregistering): left allmulticast mode
[  263.306439][T12534] batadv0 (unregistering): left promiscuous mode
[  263.312833][T12534] bridge0: port 3(batadv0) entered disabled state
[  263.499575][T12562] loop1: detected capacity change from 0 to 4096
[  263.509579][T12562] EXT4-fs: Ignoring removed nomblk_io_submit option
[  263.539620][T12562] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  263.547747][T12568] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  263.561813][T12568] vhci_hcd: invalid port number 96
[  263.566936][T12568] vhci_hcd: default hub control req: 0017 vfffc i0060 l0
[  263.587903][T12570] rdma_rxe: rxe_newlink: failed to add lo
[  263.625830][T12576] netlink: 'syz.0.2538': attribute type 1 has an invalid length.
[  263.683315][T12576] 8021q: adding VLAN 0 to HW filter on device bond2
[  263.704668][T12576] bond2 (unregistering): Released all slaves
[  263.905695][T12589] loop5: detected capacity change from 0 to 2048
[  263.912469][T12589] EXT4-fs: Ignoring removed i_version option
[  263.931293][T12589] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  263.943703][T12589] ext4 filesystem being mounted at /169/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  263.980597][T12589] ==================================================================
[  263.988700][T12589] BUG: KCSAN: data-race in __filemap_remove_folio / folio_mapping
[  263.996517][T12589] 
[  263.998840][T12589] write to 0xffffea0004c9fd58 of 8 bytes by task 7749 on cpu 1:
[  264.006458][T12589]  __filemap_remove_folio+0x1a5/0x2a0
[  264.011837][T12589]  folio_unmap_invalidate+0x1dd/0x360
[  264.017204][T12589]  folio_end_writeback+0x227/0x3d0
[  264.022330][T12589]  ext4_finish_bio+0x459/0x8c0
[  264.027095][T12589]  ext4_release_io_end+0x9f/0x1f0
[  264.032127][T12589]  ext4_end_io_end+0x18d/0x240
[  264.036899][T12589]  ext4_end_io_rsv_work+0x151/0x1e0
[  264.042108][T12589]  process_scheduled_works+0x4cb/0x9d0
[  264.047590][T12589]  worker_thread+0x582/0x770
[  264.052193][T12589]  kthread+0x489/0x510
[  264.056296][T12589]  ret_from_fork+0x11f/0x1b0
[  264.060881][T12589]  ret_from_fork_asm+0x1a/0x30
[  264.065650][T12589] 
[  264.067964][T12589] read to 0xffffea0004c9fd58 of 8 bytes by task 12589 on cpu 0:
[  264.075596][T12589]  folio_mapping+0xa1/0x120
[  264.080115][T12589]  folio_wait_writeback+0x43/0x140
[  264.085233][T12589]  file_write_and_wait_range+0x20b/0x2c0
[  264.090887][T12589]  generic_buffers_fsync_noflush+0x45/0x120
[  264.096788][T12589]  ext4_sync_file+0x1ab/0x690
[  264.101465][T12589]  vfs_fsync_range+0x10d/0x130
[  264.106233][T12589]  ext4_buffered_write_iter+0x34f/0x3c0
[  264.111794][T12589]  ext4_file_write_iter+0x383/0xf00
[  264.117013][T12589]  aio_write+0x2e5/0x410
[  264.121270][T12589]  io_submit_one+0xacd/0x11d0
[  264.125957][T12589]  __se_sys_io_submit+0xfb/0x280
[  264.130899][T12589]  __x64_sys_io_submit+0x43/0x50
[  264.135835][T12589]  x64_sys_call+0x2d5d/0x2ff0
[  264.140509][T12589]  do_syscall_64+0xd2/0x200
[  264.145020][T12589]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  264.150911][T12589] 
[  264.153223][T12589] value changed: 0xffff88811ac5d3e0 -> 0x0000000000000000
[  264.160319][T12589] 
[  264.162639][T12589] Reported by Kernel Concurrency Sanitizer on:
[  264.168791][T12589] CPU: 0 UID: 0 PID: 12589 Comm: syz.5.2540 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  264.178598][T12589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  264.188654][T12589] ==================================================================
[  264.347917][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  264.682722][ T9580] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  266.589707][   T29] kauditd_printk_skb: 350 callbacks suppressed
[  266.589722][   T29] audit: type=1400 audit(1757645836.712:25529): avc:  denied  { search } for  pid=12600 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  266.618528][   T29] audit: type=1400 audit(1757645836.712:25530): avc:  denied  { search } for  pid=12600 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=477 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  266.641442][   T29] audit: type=1400 audit(1757645836.712:25531): avc:  denied  { search } for  pid=12600 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=481 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  266.664686][   T29] audit: type=1400 audit(1757645836.712:25532): avc:  denied  { search } for  pid=12600 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  266.688016][   T29] audit: type=1400 audit(1757645836.712:25533): avc:  denied  { read open } for  pid=12601 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  266.713662][   T29] audit: type=1400 audit(1757645836.712:25534): avc:  denied  { getattr } for  pid=12601 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  266.739028][   T29] audit: type=1400 audit(1757645836.712:25535): avc:  denied  { getattr } for  pid=12601 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=508 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  266.765436][   T29] audit: type=1400 audit(1757645836.732:25536): avc:  denied  { read } for  pid=12603 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=508 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  266.787415][   T29] audit: type=1400 audit(1757645836.732:25537): avc:  denied  { open } for  pid=12603 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=508 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  266.812574][   T29] audit: type=1400 audit(1757645836.752:25538): avc:  denied  { add_name } for  pid=12600 comm="dhcpcd-run-hook" name="resolv.conf.eth5.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1