last executing test programs:

18m59.124639414s ago: executing program 0 (id=4127):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
setresuid(0xffffffffffffffff, 0xffffffffffffffff, 0xee01)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7)
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee7, 0x8031, 0xffffffffffffffff, 0x4af8a000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000280)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
syz_mount_image$exfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000380)={[{@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@umask={'umask', 0x3d, 0x3}}, {@namecase}, {}, {@fmask={'fmask', 0x3d, 0xab}}, {@discard}, {@fmask={'fmask', 0x3d, 0x8}}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@allow_utime={'allow_utime', 0x3d, 0xce38}}]}, 0x1, 0x1528, &(0x7f00000037c0)="$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")
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0x20002078)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00')
socket(0x10, 0x3, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)

18m55.415326555s ago: executing program 0 (id=4134):
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x100088, &(0x7f0000000480)={[{@test_dummy_encryption}, {@i_version}, {@noblock_validity}, {@commit={'commit', 0x3d, 0x8000000000000}}, {@resuid}, {@grpid}, {@abort}, {@auto_da_alloc}, {@lazytime}, {@noauto_da_alloc}, {@jqfmt_vfsv0}]}, 0x0, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=")
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0xffffffb3, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
io_uring_enter(0xffffffffffffffff, 0x2df1, 0x4000, 0x4, 0x0, 0x54)
bind$inet(r3, 0x0, 0x0)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
fchmodat(0xffffffffffffff9c, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='cubic', 0x4)
sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
io_getevents(0x0, 0x2, 0x0, 0x0, 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0)
ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000140))
pwritev(r4, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd02000040", 0x42}], 0x1, 0x0, 0x0)

18m51.625556224s ago: executing program 0 (id=4138):
r0 = socket$netlink(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000040000000800800014140000", @ANYRES32, @ANYBLOB='\x00'/17, @ANYRES32], 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000340)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
fcntl$setstatus(r4, 0x4, 0x40800)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000140)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x241, &(0x7f0000000540)="$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")
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
creat(&(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10)
mknod$loop(&(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x400, 0x1)
creat(0x0, 0x0)
setxattr$incfs_id(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x2)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
ftruncate(r5, 0x2000009)
sendfile(r4, r5, 0x0, 0x7ffff004)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040)

18m49.644570262s ago: executing program 0 (id=4141):
r0 = socket(0x1e, 0x4, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x92)
sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0xf0, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}}, 0xf0}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x4, 0x1, 0x12}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x80)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
r7 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
dup3(0xffffffffffffffff, r0, 0x0)

18m41.529433062s ago: executing program 0 (id=4152):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x2003, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec85"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYRES32=0x0, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYBLOB], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d)
setxattr$system_posix_acl(0x0, &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000"], 0x24, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x40081, 0x0, 0x0, 0x0, 0x0)
request_key(0x0, &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000004c0)='\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="070002000000fddbdf2505000000180001801400020073797a5f74756e00000000000000007d0800038004000380080005"], 0x3c}}, 0x0)
copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x0)

18m32.306261194s ago: executing program 0 (id=4165):
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
getpriority(0x0, r0)
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
chdir(&(0x7f0000000480)='./cgroup\x00')
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000140))
statx(0xffffffffffffffff, 0x0, 0x400, 0x200, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x28, 0x0, 0x0, 0x7ffff024}, {0x6, 0x0, 0x10}]}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x0, 0x0, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000180)='./mnt\x00', 0x0, &(0x7f00000001c0)={[{@test_dummy_encryption_v1}, {@test_dummy_encryption_v1}, {@nomblk_io_submit}, {@commit}]}, 0x1, 0x241, &(0x7f0000000540)="$eJzs3U9oFFccB/DfzO42TbKUtL0UCm2hlNIGQnor9JJeWgiUEEoptIUUES9KIsQEb4knLx70rJKTlyDejB4ll+BFETxFzSFeBA0eDB70sDI7iUSz/oGJO+J8PjC7M7vvze8Ns983exkmgMoaiIiRiKhFxGBENCIi2dngm3wZ2Npc6F2ZiGi1/nyYtNvl27ntfv0RMR8RP0fEcprEwXrE7NK/649Xf//+xEzju3NL//R29SC3bKyv/bF5duz4xdGfZq/fvD+WxEg0XziuvZd0+KyeRHz2Loq9J5J62SPgbYwfvXAry/3nEfFtO/+NSCM/eSenP1puxI9nXtX31IMbX3ZzrMDea7Ua2TVwvgVUThoRzUjSoYjI19N0aCj/D3+71pcempo+MnhgamZyf9kzFbBXmhFrv13uudT/Uv7v1fL8Ax+uLP9/jS/eydY3a2WPBuimLP+D/8/9EPIPlSP/UF3yD9Ul/1Bdr8t/WtKYgO5w/Yfqkn+oLvmH6pJ/qC75h+ramX8AoFpaPWXfgQyUpez5BwAAAAAAAAAAAAAAAAAA2G2hd2Vie+lWzaunIzZ+jYh6p/q1recQfNx+7XuUZM2eS/Juhfz3dcEdFHS+5LuvP7lbbv1rX5Vbf24yYv5YRAzX67t/f0nh52B8+obvG/sKFijol7/Lrf90sdz6o6sRV7L5Z7jT/JPGF+33zvNPMzt/BesfflJwBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTNswAAAP//ceptKw==")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x108b}, 0x0)

18m16.891644204s ago: executing program 32 (id=4165):
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
getpriority(0x0, r0)
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
chdir(&(0x7f0000000480)='./cgroup\x00')
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000140))
statx(0xffffffffffffffff, 0x0, 0x400, 0x200, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x28, 0x0, 0x0, 0x7ffff024}, {0x6, 0x0, 0x10}]}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x0, 0x0, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000180)='./mnt\x00', 0x0, &(0x7f00000001c0)={[{@test_dummy_encryption_v1}, {@test_dummy_encryption_v1}, {@nomblk_io_submit}, {@commit}]}, 0x1, 0x241, &(0x7f0000000540)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x108b}, 0x0)

16m15.569822119s ago: executing program 5 (id=4802):
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f0000000080)={[{@quota}, {@grpid}, {@grpjquota}, {@norecovery}, {@dioread_lock}]}, 0x3, 0x4d1, &(0x7f0000000b80)="$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")
syz_mount_image$vfat(&(0x7f0000000780), &(0x7f0000000000)='./bus\x00', 0x90, &(0x7f0000000140)=ANY=[], 0x6, 0x2d7, &(0x7f0000000340)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f0000000180)={@desc={0x1, 0x0, @auto="f11b6feefe2d7589"}})

16m14.521051974s ago: executing program 5 (id=4798):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3400000010000d0425bd7000fcdbff250000", @ANYRES32=0x0, @ANYBLOB="10f800"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000c1, 0x0)

16m13.932715293s ago: executing program 5 (id=4803):
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket(0x2, 0x3, 0xff)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x7e, &(0x7f0000000180)={@random="a94fdfd0cc7a", @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x1, 0xb, 0x70, 0x66, 0x0, 0x5, 0x1, 0x0, @remote, @remote}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x9, 0x0, {0x15, 0x4, 0x0, 0x17, 0xfffb, 0x65, 0x7b98, 0xc0, 0xff, 0x5, @multicast1=0x7f000001, @empty, {[@rr={0x7, 0x7, 0xe4, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @rr={0x7, 0x13, 0x55, [@remote, @dev={0xac, 0x14, 0x14, 0x19}, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0xb, 0xa2, [@rand_addr=0x64010100, @private=0xa010102]}, @timestamp_prespec={0x44, 0x14, 0x95, 0x3, 0x2, [{@empty, 0x6}, {@rand_addr=0x64010101, 0x9}]}]}}}}}}}, 0x0)

16m13.876235278s ago: executing program 5 (id=4805):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x10000, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
unlinkat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file2\x00', 0x0)

16m13.520327684s ago: executing program 5 (id=4811):
pipe2$9p(0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x2004000, &(0x7f0000000040)={[{@errors_remount}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@usrjquota}]}, 0xfe, 0x563, &(0x7f00000007c0)="$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")
syz_mount_image$ext4(&(0x7f0000000740)='ext3\x00', &(0x7f00000001c0)='./bus\x00', 0x240445, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpquota}, {@noquota}, {@quota}, {@noload}, {@noload}]}, 0x0, 0x50c, &(0x7f0000001440)="$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")
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a421, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000))

16m12.224603183s ago: executing program 5 (id=4831):
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2b, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000180), 0x7, 0x2480)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280))
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, 0x0)

16m12.181737808s ago: executing program 33 (id=4831):
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2b, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000180), 0x7, 0x2480)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280))
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, 0x0)

8m34.298234384s ago: executing program 2 (id=6699):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = eventfd2(0x0, 0x0)
r5 = socket(0x1e, 0x5, 0x0)
setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
listen(r5, 0x0)
r6 = socket(0x1e, 0x805, 0x0)
sendmsg$tipc(r6, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0)
sendmsg$tipc(r6, &(0x7f0000000640)={&(0x7f0000000300), 0x10, &(0x7f0000000500)=[{&(0x7f0000000340)='Z', 0x1}], 0x1}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0xa0, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x1, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}, @qdisc_kind_options=@q_pfifo_fast={0xf}, @TCA_STAB={0x58, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x2, 0xfffc, 0xe, 0x0, 0x10000, 0xd106, 0x4}}, {0xc, 0x2, [0x3, 0x7ff, 0x8, 0x4]}}, {{0x1c, 0x1, {0x6, 0x7, 0x7fff, 0xffffffff, 0x2, 0x8000, 0x8, 0x6}}, {0x10, 0x2, [0x4, 0xe, 0xfffb, 0xd, 0x8, 0x6]}}]}, @TCA_RATE={0x6, 0x5, {0x2, 0x6}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
io_pgetevents(0x0, 0x4, 0x0, &(0x7f0000000380), 0x0, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1, r4}])
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f00000001c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4", @ANYRES32=r7, @ANYBLOB="001009000e0d0000bcafe254f60c5ca2c0450b"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r8}, 0x18)
socket$inet(0x2, 0x4000000000000001, 0x0)

8m30.709240652s ago: executing program 2 (id=6704):
open(0x0, 0x14927e, 0x9)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000001c0)={[{@noblock_validity}, {@jqfmt_vfsv0}]}, 0x1, 0x445, &(0x7f0000000b00)="$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")
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
recvmmsg(r1, &(0x7f00000032c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000440)=""/196, 0xc4}, {&(0x7f0000000340)=""/68, 0x44}], 0x2, &(0x7f0000000580)=""/188, 0xbc}, 0x9}, {{&(0x7f0000000640)=@can, 0x80, &(0x7f0000000940)=[{&(0x7f00000006c0)=""/118, 0x76}, {&(0x7f0000000f80)=""/4096, 0x1000}, {&(0x7f0000000740)=""/161, 0xa1}, {&(0x7f0000000800)=""/169, 0xa9}, {&(0x7f00000008c0)=""/71, 0x47}], 0x5, &(0x7f0000001f80)=""/4096, 0x1000}, 0x7}, {{&(0x7f00000009c0)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000003180)=[{&(0x7f00000003c0)=""/24, 0x18}, {&(0x7f0000000a40)=""/170, 0xaa}, {&(0x7f0000002f80)=""/92, 0x5c}, {&(0x7f0000003000)}, {&(0x7f0000003040)=""/112, 0x70}, {&(0x7f00000030c0)=""/164, 0xa4}], 0x6, &(0x7f0000003200)=""/148, 0x94}, 0x1ff}], 0x3, 0x10000, 0x0)
mkdir(&(0x7f00000001c0)='./bus\x00', 0x40)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x4000, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x539001, 0x0)
syz_open_dev$hidraw(&(0x7f0000003000), 0x8, 0x64080)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18)
write$eventfd(0xffffffffffffffff, &(0x7f0000000140)=0xfffffffffffffffc, 0x8)
getresuid(&(0x7f0000000140)=<r3=>0x0, &(0x7f0000000180), 0x0)
setuid(r3)
io_uring_setup(0x503, &(0x7f0000000e80)={0x0, 0x1d55, 0x1046, 0xffff7fff, 0xb7})

8m28.110389622s ago: executing program 2 (id=6710):
r0 = socket(0x1e, 0x4, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r2}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x92)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x4, 0x1, 0x12}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x80)
r6 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10)
r7 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
dup3(r6, r0, 0x0)

8m26.150758308s ago: executing program 2 (id=6713):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="660a00000000df0061114c000000000085000000540000009500e400000000000313133bb9bfcc40e24cfa10c5df11b4c4b418de246f1ebed76df30c0011e1c3d19d86658dc73eaed31cec8f412698643d46fbd5f1c6890000f7fdc04a0ee1d7fdc3df546d7f94ff38e95f73c49e33011ed1354ee592f4ad150ae9c64d51c0b23699070200008e544a4daa7b2fc60f0fcc8ac10ad4676663153204ea7247df9b8d0c8eb698a115a6d42e371d9efdbe62b0e52153eb91c1a80f908e3dbcea695c06"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x80)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
getdents(0xffffffffffffffff, 0x0, 0x0)
connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x2)
readv(r5, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1)

8m23.247770597s ago: executing program 2 (id=6718):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000000)={[{@errors_remount}]}, 0x1, 0x3d9, &(0x7f00000004c0)="$eJzs3F1rHNUbAPBnJm//pn/dqNULLRgpYvAlL02JDRZU8NIr6xdYk7REt41tVrAlFwpiP4D6AcTL+hG8EO8EwZvitXdKoUiSa1mZzexm3OzGvC2j3d8PDpxnZoczz8zsnpMzhwQwsCYj4pOIGI2I9yOikm9P8hJv7JTsc9ubG0tZSaLRuPxH0ty/tbmxFIVjMqfzYCqNSD9L4pku7a7fuv1BtVZbuZnHM/VrH86s37r9yuq16tWVqyvX52cXF2fnLy4sLpxYrr/FnV8v3Xur8sVP53754b13FpJCvsU8TspkTLavSafpk26sZP8r1JPhEk+EQ0kjYigihpvf/0oMxe7Nq8R3lVJPDgDoi0bj9Y4YAHj4Jfp8ABgwrb/7tzY3llqljHmIsjx4c+fl1Vb+bnO7nf9w+03ISMf7rZM0GRHffvXqs1mJPr2HBAAo+j4b/1zsNv5L42zhc6ciYjxf2/X/iHgkIh4trJ86qsmOeO/4J71/zCb2lY3/LhXWtm0X8s9NDOVRlvNEjCRXVmsrs3n+UzEylsVz+7Rx9vJTf/baVxz/ZSVrvzUWzM/j/vDY349Zrtarx8m56MGnEU8Pd8s/aY9/k2beR/fajbtP9tr3z/n3V+PriBe63v/dlXvJ/usTZ5rPw0zrqdjrzovP3+jVftn5Z/d/fP/8J5Lies31w7fx44XVn3vtO+rzP5q826yP5ts+rtbrN+ciRpO3924/v3tsK259Pst/6lz37/+Z2L0Sj0XE4xHxRERze88HuouXa988d/T8+yvLf/lQ9//wlfHP797r1f7B7v+FZm0q33KQ37+DnuBxrh0AAAD8V6TN+dwknW7X03R6emee90yMp7W19fpLV9Y+ur68M+87ESNpa6arUpgPncvnCFvx+Y54Pp9D+XLsVDOeXlqrLZedPAAMqNM9+v/M72Nlnx0A0Df9WtwOAPx76f8BYPDo/wFg8Oj/AWDw6P8BYPDo/wFgoBzn//qpqKg8rJWyf5kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMr1VwAAAP//Y/TVQg==")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
timer_create(0x7, &(0x7f0000000040)={0x0, 0x38, 0x5, @tid=r1}, &(0x7f00000000c0))
fsconfig$FSCONFIG_SET_BINARY(r6, 0x6, 0x0, 0x0, 0x0)
r7 = fsmount(r6, 0x0, 0x0)
r8 = openat$cgroup_subtree(r7, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_subtree(r8, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5)

8m21.72447672s ago: executing program 2 (id=6720):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x1, 0x4, 0x301, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x3}]}, 0x1c}}, 0x4000000)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socket$inet6(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
chroot(&(0x7f0000000240)='./file0\x00')
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1980, 0x0)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5)
getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x585d4d9346027f5c}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd, 0x1fff}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x1c, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{}, {0x5}}}, @TCA_EM_META_LVALUE={0x4}]}}]}]}]}}]}, 0x70}}, 0x0)

8m6.09981857s ago: executing program 34 (id=6720):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x1, 0x4, 0x301, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x3}]}, 0x1c}}, 0x4000000)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socket$inet6(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
chroot(&(0x7f0000000240)='./file0\x00')
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1980, 0x0)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5)
getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x585d4d9346027f5c}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd, 0x1fff}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x1c, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{}, {0x5}}}, @TCA_EM_META_LVALUE={0x4}]}}]}]}]}}]}, 0x70}}, 0x0)

21.962864233s ago: executing program 7 (id=7721):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup(r0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r5}, 0x18)
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000340), 0x4, 0x241, &(0x7f00000009c0)="$eJzs3U9oFFccB/DfzO42TbKUtL0UCm2hlNIGQnor9JJeWgiUEEoptIUUES9KIsQEb4knLx70rJKTlyDejB4ll+BFETxFzSFeBA0eDB70sDI7iUSz/oGJO+J8PjC7M7vvze8Ns983exkmgMoaiIiRiKhFxGBENCIi2dngm3wZ2Npc6F2ZiGi1/nyYtNvl27ntfv0RMR8RP0fEcprEwXrE7NK/649Xf//+xEzju3NL//R29SC3bKyv/bF5duz4xdGfZq/fvD+WxEg0XziuvZd0+KyeRHz2Loq9J5J62SPgbYwfvXAry/3nEfFtO/+NSCM/eSenP1puxI9nXtX31IMbX3ZzrMDea7Ua2TVwvgVUThoRzUjSoYjI19N0aCj/D3+71pcempo+MnhgamZyf9kzFbBXmhFrv13uudT/Uv7v1fL8Ax+uLP9/jS/eydY3a2WPBuimLP+D/8/9EPIPlSP/UF3yD9Ul/1Bdr8t/WtKYgO5w/Yfqkn+oLvmH6pJ/qC75h+ramX8AoFpaPWXfgQyUpez5BwAAAAAAAAAAAAAAAAAA2G2hd2Vie+lWzaunIzZ+jYh6p/q1recQfNx+7XuUZM2eS/Juhfz3dcEdFHS+5LuvP7lbbv1rX5Vbf24yYv5YRAzX67t/f0nh52B8+obvG/sKFijol7/Lrf90sdz6o6sRV7L5Z7jT/JPGF+33zvNPMzt/BesfflJwBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTNswAAAP//ceptKw==")
setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x6affffff, 0x3403000b, 0x0, 0x7, 0x210, 0x230, 0x230, 0x210, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00'}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x7f510100, 0x4, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@time={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)
syz_open_procfs(0x0, 0x0)

17.37290253s ago: executing program 7 (id=7725):
socket(0x11, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10)
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000a00)=ANY=[], 0x1, 0x1c5, &(0x7f00000004c0)="$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")
socket(0x6, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00'})
getpgid(r0)
getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x17, 0x0, &(0x7f0000000140)=0xbd)

17.329110865s ago: executing program 1 (id=7727):
clock_gettime(0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000082000400000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
epoll_create1(0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x40850)
symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
lsetxattr$security_capability(&(0x7f0000000200)='./file0\x00', 0x0, &(0x7f00000003c0)=@v3={0x3000000, [{0x0, 0xfffffff9}, {0x40008, 0x800}], 0xee01}, 0x18, 0x1)
io_getevents(0x0, 0xffffffff, 0x0, 0x0, &(0x7f00000000c0))
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x5, [@enum={0x3, 0x1, 0x0, 0xf, 0x4000000, [{}]}, @struct={0x2}]}, {0x0, [0x61, 0x61, 0x2e]}}, &(0x7f0000002200)=""/4110, 0x3d, 0x100e, 0x1}, 0x28)

13.588719411s ago: executing program 1 (id=7730):
r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSTI(r0, 0x5412, 0x0)

13.588192051s ago: executing program 1 (id=7731):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup(r0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e0000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r5}, 0x18)
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000340), 0x4, 0x241, &(0x7f00000009c0)="$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")
setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x6affffff, 0x3403000b, 0x0, 0x7, 0x210, 0x230, 0x230, 0x210, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00'}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x7f510100, 0x4, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@time={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)
syz_open_procfs(0x0, 0x0)

13.333028201s ago: executing program 3 (id=7732):
clock_gettime(0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000082000400000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
epoll_create1(0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000015c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40850)
symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00')
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
lsetxattr$security_capability(&(0x7f0000000200)='./file0\x00', 0x0, &(0x7f00000003c0)=@v3={0x3000000, [{0x0, 0xfffffff9}, {0x40008, 0x800}], 0xee01}, 0x18, 0x1)
io_getevents(0x0, 0xffffffff, 0x0, 0x0, &(0x7f00000000c0))
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x5, [@enum={0x3, 0x1, 0x0, 0xf, 0x4000000, [{}]}, @struct={0x2}]}, {0x0, [0x61, 0x61, 0x2e]}}, &(0x7f0000002200)=""/4110, 0x3d, 0x100e, 0x1}, 0x28)

13.331981371s ago: executing program 6 (id=7733):
clock_gettime(0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000082000400000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
epoll_create1(0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000015c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40850)
symlink(&(0x7f0000000040)='.\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
lsetxattr$security_capability(&(0x7f0000000200)='./file0\x00', 0x0, &(0x7f00000003c0)=@v3={0x3000000, [{0x0, 0xfffffff9}, {0x40008, 0x800}], 0xee01}, 0x18, 0x1)
io_getevents(0x0, 0xffffffff, 0x0, 0x0, &(0x7f00000000c0))
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x5, [@enum={0x3, 0x1, 0x0, 0xf, 0x4000000, [{}]}, @struct={0x2}]}, {0x0, [0x61, 0x61, 0x2e]}}, &(0x7f0000002200)=""/4110, 0x3d, 0x100e, 0x1}, 0x28)

12.906089532s ago: executing program 4 (id=7734):
socket(0x11, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000a00)=ANY=[], 0x1, 0x1c5, &(0x7f00000004c0)="$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")
mount$incfs(&(0x7f00000007c0)='./bus\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0)
socket(0x6, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00'})
getpgid(r0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_int(r3, 0x6, 0x17, 0x0, &(0x7f0000000140)=0xbd)

10.442391926s ago: executing program 3 (id=7735):
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x54)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
pipe2$9p(&(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
poll(&(0x7f0000000040)=[{r3}], 0x1, 0x6)
splice(r1, 0x0, r2, 0x0, 0x10000000000016, 0x0)
r4 = open(&(0x7f0000000300)='./bus\x00', 0x14103e, 0x18a)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x7, 0x2a, 0x5}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00'}, 0x18)
sync()
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000080)=0x13)
ioctl$TCSETS2(r5, 0x402c542b, &(0x7f0000000080)={0x5, 0x0, 0x5, 0x1, 0x6, "d9d1ea7f3c4b3b3c1b6ef637937590538b6229", 0xfffffffd, 0xffffffff})
ftruncate(0xffffffffffffffff, 0x3000000)
sendfile(r4, 0xffffffffffffffff, 0x0, 0x80000001)

10.442005796s ago: executing program 7 (id=7736):
clock_gettime(0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000082000400000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
epoll_create1(0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x40850)
symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
lsetxattr$security_capability(&(0x7f0000000200)='./file0\x00', 0x0, &(0x7f00000003c0)=@v3={0x3000000, [{0x0, 0xfffffff9}, {0x40008, 0x800}], 0xee01}, 0x18, 0x1)
io_getevents(0x0, 0xffffffff, 0x0, 0x0, &(0x7f00000000c0))
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x5, [@enum={0x3, 0x1, 0x0, 0xf, 0x4000000, [{}]}, @struct={0x2}]}, {0x0, [0x61, 0x61, 0x2e]}}, &(0x7f0000002200)=""/4110, 0x3d, 0x100e, 0x1}, 0x28)

10.32337725s ago: executing program 6 (id=7737):
clock_gettime(0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000082000400000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
epoll_create1(0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000015c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40850)
symlink(&(0x7f0000000040)='.\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
lsetxattr$security_capability(&(0x7f0000000200)='./file0\x00', 0x0, &(0x7f00000003c0)=@v3={0x3000000, [{0x0, 0xfffffff9}, {0x40008, 0x800}], 0xee01}, 0x18, 0x1)
io_getevents(0x0, 0xffffffff, 0x0, 0x0, &(0x7f00000000c0))
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x5, [@enum={0x3, 0x1, 0x0, 0xf, 0x4000000, [{}]}, @struct={0x2}]}, {0x0, [0x61, 0x61, 0x2e]}}, &(0x7f0000002200)=""/4110, 0x3d, 0x100e, 0x1}, 0x28)

10.32226915s ago: executing program 1 (id=7738):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18)
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000340), 0x4, 0x241, &(0x7f00000009c0)="$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")

10.31940766s ago: executing program 4 (id=7739):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000001b00)=ANY=[], 0x50)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200010, &(0x7f0000000240)={[{@resgid}, {}, {@grpquota}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@discard}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x146)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7)
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@getnexthop={0x20, 0x76, 0xb0d, 0x0, 0x0, {0x3}, [@NHA_MASTER={0x8}]}, 0x20}}, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, 0x0, 0x5000)

8.855783005s ago: executing program 7 (id=7740):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup(r0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e0000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r5}, 0x18)
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000340), 0x4, 0x241, &(0x7f00000009c0)="$eJzs3U9oFFccB/DfzO42TbKUtL0UCm2hlNIGQnor9JJeWgiUEEoptIUUES9KIsQEb4knLx70rJKTlyDejB4ll+BFETxFzSFeBA0eDB70sDI7iUSz/oGJO+J8PjC7M7vvze8Ns983exkmgMoaiIiRiKhFxGBENCIi2dngm3wZ2Npc6F2ZiGi1/nyYtNvl27ntfv0RMR8RP0fEcprEwXrE7NK/649Xf//+xEzju3NL//R29SC3bKyv/bF5duz4xdGfZq/fvD+WxEg0XziuvZd0+KyeRHz2Loq9J5J62SPgbYwfvXAry/3nEfFtO/+NSCM/eSenP1puxI9nXtX31IMbX3ZzrMDea7Ua2TVwvgVUThoRzUjSoYjI19N0aCj/D3+71pcempo+MnhgamZyf9kzFbBXmhFrv13uudT/Uv7v1fL8Ax+uLP9/jS/eydY3a2WPBuimLP+D/8/9EPIPlSP/UF3yD9Ul/1Bdr8t/WtKYgO5w/Yfqkn+oLvmH6pJ/qC75h+ramX8AoFpaPWXfgQyUpez5BwAAAAAAAAAAAAAAAAAA2G2hd2Vie+lWzaunIzZ+jYh6p/q1recQfNx+7XuUZM2eS/Juhfz3dcEdFHS+5LuvP7lbbv1rX5Vbf24yYv5YRAzX67t/f0nh52B8+obvG/sKFijol7/Lrf90sdz6o6sRV7L5Z7jT/JPGF+33zvNPMzt/BesfflJwBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTNswAAAP//ceptKw==")
setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x6affffff, 0x3403000b, 0x0, 0x7, 0x210, 0x230, 0x230, 0x210, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00'}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x7f510100, 0x4, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@time={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)
syz_open_procfs(0x0, 0x0)

8.833010968s ago: executing program 6 (id=7741):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000700), 0xff, 0x49b, &(0x7f0000001040)="$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")
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0)
write(r1, &(0x7f0000004200)='t', 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x216, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffcc4)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2, <r3=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0x3ffff)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r4, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x8, 0x0, 0x5, 0x0, {0xa, 0x0, 0xf9d, @private2}}}, 0x32)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r0)

6.827520517s ago: executing program 4 (id=7742):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000700), 0xff, 0x49b, &(0x7f0000001040)="$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")
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0)
write(r1, &(0x7f0000004200)='t', 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x216, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffcc4)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2, <r3=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
sendfile(r1, r0, 0x0, 0x3ffff)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r5, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x8, 0x0, 0x5, 0x0, {0xa, 0x0, 0xf9d, @private2}}}, 0x32)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r0)

6.826828667s ago: executing program 3 (id=7743):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
dup(0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00'}, 0x18)
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000340), 0x4, 0x241, &(0x7f00000009c0)="$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")

6.308908209s ago: executing program 1 (id=7744):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000700), 0xff, 0x49b, &(0x7f0000001040)="$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")
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0)
write(r1, &(0x7f0000004200)='t', 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x216, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffcc4)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2, <r3=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r4}, 0x18)
sendfile(r1, r0, 0x0, 0x3ffff)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r5, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x8, 0x0, 0x5, 0x0, {0xa, 0x0, 0xf9d, @private2}}}, 0x32)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r0)

5.798493569s ago: executing program 4 (id=7745):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000001b00)=ANY=[], 0x50)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200010, &(0x7f0000000240)={[{@resgid}, {}, {@grpquota}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@discard}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x146)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7)
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@getnexthop={0x20, 0x76, 0xb0d, 0x0, 0x0, {0x3}, [@NHA_MASTER={0x8}]}, 0x20}}, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, 0x0, 0x5000)

5.181059443s ago: executing program 7 (id=7746):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000700), 0xff, 0x49b, &(0x7f0000001040)="$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")
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0)
write(r1, &(0x7f0000004200)='t', 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x216, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffcc4)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2, <r3=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0x3ffff)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r4, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x8, 0x0, 0x5, 0x0, {0xa, 0x0, 0xf9d, @private2}}}, 0x32)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r0)

4.87429048s ago: executing program 6 (id=7747):
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x54)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
pipe2$9p(&(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
poll(&(0x7f0000000040)=[{r3}], 0x1, 0x6)
splice(r1, 0x0, r2, 0x0, 0x10000000000016, 0x0)
r4 = open(&(0x7f0000000300)='./bus\x00', 0x14103e, 0x18a)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x7, 0x2a, 0x5}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00'}, 0x18)
sync()
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000080)=0x13)
r6 = open(&(0x7f00000001c0)='./file0\x00', 0x14b042, 0x83)
ftruncate(r6, 0x3000000)
sendfile(r4, r6, 0x0, 0x80000001)

4.827653585s ago: executing program 3 (id=7748):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0xfffffffffffffdee, &(0x7f0000000000)=0x8000000000005)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCBRDELBR(r6, 0x89a2, &(0x7f0000000200)='bridge0\x00')
ioctl$sock_SIOCBRDELBR(r5, 0x89a3, &(0x7f0000000200)='bridge0\x00')

2.461350677s ago: executing program 6 (id=7749):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup(r0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e00000000000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r5}, 0x18)
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000340), 0x4, 0x241, &(0x7f00000009c0)="$eJzs3U9oFFccB/DfzO42TbKUtL0UCm2hlNIGQnor9JJeWgiUEEoptIUUES9KIsQEb4knLx70rJKTlyDejB4ll+BFETxFzSFeBA0eDB70sDI7iUSz/oGJO+J8PjC7M7vvze8Ns983exkmgMoaiIiRiKhFxGBENCIi2dngm3wZ2Npc6F2ZiGi1/nyYtNvl27ntfv0RMR8RP0fEcprEwXrE7NK/649Xf//+xEzju3NL//R29SC3bKyv/bF5duz4xdGfZq/fvD+WxEg0XziuvZd0+KyeRHz2Loq9J5J62SPgbYwfvXAry/3nEfFtO/+NSCM/eSenP1puxI9nXtX31IMbX3ZzrMDea7Ua2TVwvgVUThoRzUjSoYjI19N0aCj/D3+71pcempo+MnhgamZyf9kzFbBXmhFrv13uudT/Uv7v1fL8Ax+uLP9/jS/eydY3a2WPBuimLP+D/8/9EPIPlSP/UF3yD9Ul/1Bdr8t/WtKYgO5w/Yfqkn+oLvmH6pJ/qC75h+ramX8AoFpaPWXfgQyUpez5BwAAAAAAAAAAAAAAAAAA2G2hd2Vie+lWzaunIzZ+jYh6p/q1recQfNx+7XuUZM2eS/Juhfz3dcEdFHS+5LuvP7lbbv1rX5Vbf24yYv5YRAzX67t/f0nh52B8+obvG/sKFijol7/Lrf90sdz6o6sRV7L5Z7jT/JPGF+33zvNPMzt/BesfflJwBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTNswAAAP//ceptKw==")
setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x6affffff, 0x3403000b, 0x0, 0x7, 0x210, 0x230, 0x230, 0x210, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00'}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x7f510100, 0x4, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@time={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)
syz_open_procfs(0x0, 0x0)

62.626863ms ago: executing program 4 (id=7750):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="660a00000000df0061114c000000000085000000540000009500e400000000000313133bb9bfcc40e24cfa10c5df11b4c4b418de246f1ebed76df30c0011e1c3d19d86658dc73eaed31cec8f412698643d46fbd5f1c6890000f7fdc04a0ee1d7fdc3df546d7f94ff38e95f73c49e33011ed1354ee592f4ad150ae9c64d51c0b23699070200008e544a4daa7b2fc60f0fcc"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10)
getdents(0xffffffffffffffff, 0x0, 0x0)
connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
readv(r4, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1)

61.482533ms ago: executing program 1 (id=7751):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000001b00)=ANY=[], 0x50)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200010, &(0x7f0000000240)={[{@resgid}, {}, {@grpquota}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@discard}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x146)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7)
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@getnexthop={0x20, 0x76, 0xb0d, 0x0, 0x0, {0x3}, [@NHA_MASTER={0x8}]}, 0x20}}, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, 0x0, 0x5000)

45.646235ms ago: executing program 6 (id=7752):
r0 = socket(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r1 = getpid()
ioprio_get$pid(0x0, r1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r4}, &(0x7f00000001c0), &(0x7f0000000240)}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000980)={0x2}, 0x10)
write(r0, &(0x7f0000000300)="240000001add5f0214f9f4070d0903050000000200000800040001", 0x1b)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x88203, 0x0)
r7 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r7, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)={0x2, 0x4, 0x0, 0x2, 0x2000000000000070, 0x0, 0x0, 0x25dfdbff, [@sadb_x_policy={0x8, 0x12, 0x4, 0x4, 0x0, 0x6e6bb4, 0x9, {0x6, 0xff, 0x1, 0xe, 0x0, 0x4f, 0x0, @in=@loopback, @in=@rand_addr=0x64010102}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, @sadb_address={0x5, 0x5, 0x2b, 0x80, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}]}, 0x88}}, 0x4)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)

44.947325ms ago: executing program 3 (id=7753):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000700), 0xff, 0x49b, &(0x7f0000001040)="$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")
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x88882, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0)
write(r1, &(0x7f0000004200)='t', 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x216, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffcc4)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2, <r3=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
sendfile(r1, r0, 0x0, 0x3ffff)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r5, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x8, 0x0, 0x5, 0x0, {0xa, 0x0, 0xf9d, @private2}}}, 0x32)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r0)

44.388975ms ago: executing program 4 (id=7754):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup(r0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r5}, 0x18)
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000340), 0x4, 0x241, &(0x7f00000009c0)="$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")
setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x6affffff, 0x3403000b, 0x0, 0x7, 0x210, 0x230, 0x230, 0x210, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00'}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x7f510100, 0x4, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@time={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)
syz_open_procfs(0x0, 0x0)

1.2841ms ago: executing program 3 (id=7755):
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x54)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
pipe2$9p(&(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
poll(&(0x7f0000000040)=[{r3}], 0x1, 0x6)
splice(r1, 0x0, r2, 0x0, 0x10000000000016, 0x0)
r4 = open(&(0x7f0000000300)='./bus\x00', 0x14103e, 0x18a)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x7, 0x2a, 0x5}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00'}, 0x18)
sync()
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TCSETS2(r5, 0x402c542b, &(0x7f0000000080)={0x5, 0x0, 0x5, 0x1, 0x6, "d9d1ea7f3c4b3b3c1b6ef637937590538b6229", 0xfffffffd, 0xffffffff})
r6 = open(&(0x7f00000001c0)='./file0\x00', 0x14b042, 0x83)
ftruncate(r6, 0x3000000)
sendfile(r4, r6, 0x0, 0x80000001)

0s ago: executing program 7 (id=7756):
socket(0x11, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10)
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000a00)=ANY=[], 0x1, 0x1c5, &(0x7f00000004c0)="$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")
socket(0x6, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00'})
getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x17, 0x0, &(0x7f0000000140)=0xbd)

kernel console output (not intermixed with test programs):

ed!
[ 1734.373461][T21806] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6634'.
[ 1735.180688][   T28] audit: type=1326 audit(1760637885.617:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21793 comm="syz.2.6635" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6c4698eec9 code=0x0
[ 1735.210759][T21802] EXT4-fs (loop6): pa ffff88813391f930: logic 256, phys. 385, len 8
[ 1735.218802][T21802] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 1
[ 1735.286060][T16119] EXT4-fs (loop6): unmounting filesystem.
[ 1736.101116][T21819] overlayfs: failed to clone upperpath
[ 1740.170674][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1742.834640][T21860] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6657'.
[ 1750.264020][T21901] netlink: 76 bytes leftover after parsing attributes in process `syz.3.6658'.
[ 1754.453499][T21929] netlink: 'syz.3.6662': attribute type 12 has an invalid length.
[ 1755.142123][T21944] device veth0_to_team entered promiscuous mode
[ 1756.054140][T21955] loop6: detected capacity change from 0 to 512
[ 1756.810688][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1757.120556][T21960] xt_hashlimit: max too large, truncated to 1048576
[ 1758.507816][T21955] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c02c, mo2=0002]
[ 1758.516060][T21955] System zones: 0-7
[ 1758.520832][T21955] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[ 1760.401061][   T28] audit: type=1326 audit(1760637913.497:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21969 comm="syz.1.6675" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa36238eec9 code=0x0
[ 1760.431514][T16119] EXT4-fs (loop6): unmounting filesystem.
[ 1760.456024][T21975] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12
[ 1760.465445][T21975] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12
[ 1760.571398][T21993] xt_hashlimit: max too large, truncated to 1048576
[ 1768.913730][T22012] loop6: detected capacity change from 0 to 512
[ 1769.257675][T22012] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[ 1769.291400][T22012] EXT4-fs (loop6): 1 orphan inode deleted
[ 1769.318883][T22012] EXT4-fs (loop6): 1 truncate cleaned up
[ 1769.342285][T22012] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[ 1770.596031][T22026] EXT4-fs error (device loop6): ext4_search_dir:1549: inode #12: block 7: comm syz.6.6685: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=56 fake=0
[ 1771.788723][T16119] EXT4-fs (loop6): unmounting filesystem.
[ 1773.181540][T22040] overlayfs: failed to clone upperpath
[ 1778.811588][   T28] audit: type=1326 audit(1760637932.857:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22053 comm="syz.6.6692" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7343f8eec9 code=0x0
[ 1779.570696][T22079] loop6: detected capacity change from 0 to 128
[ 1782.224799][T22079] EXT4-fs: error -4 creating inode table initialization thread
[ 1782.232948][T22079] EXT4-fs (loop6): mount failed
[ 1783.685167][T22101] overlayfs: missing 'lowerdir'
[ 1788.810653][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1792.588144][T22168] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6720'.
[ 1792.598112][T22168] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6720'.
[ 1793.483450][T22177] loop6: detected capacity change from 0 to 512
[ 1793.490730][T22177] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[ 1794.951560][T22162] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1796.397665][T22194] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 1796.548729][T13545] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[ 1797.830661][T13545] usb 7-1: Using ep0 maxpacket: 32
[ 1798.058626][T13545] usb 7-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1799.139098][T13545] usb 7-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1799.160571][T13545] usb 7-1: config 0 interface 0 has no altsetting 0
[ 1799.167251][T13545] usb 7-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00
[ 1799.176532][T13545] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1800.579607][T22227] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6732'.
[ 1801.546471][T22234] loop6: detected capacity change from 0 to 512
[ 1801.575754][T22234] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem
[ 1801.585022][T22234] EXT4-fs (loop6): invalid journal inode
[ 1801.590940][T22234] EXT4-fs (loop6): can't get journal size
[ 1801.621377][T22234] EXT4-fs (loop6): 1 truncate cleaned up
[ 1801.627099][T22234] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[ 1806.915849][T13545] usb 7-1: config 0 descriptor??
[ 1806.927375][T16119] EXT4-fs (loop6): unmounting filesystem.
[ 1806.943467][T13545] usb 7-1: can't set config #0, error -71
[ 1806.950326][T13545] usb 7-1: USB disconnect, device number 11
[ 1808.600955][T22268] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6741'.
[ 1808.986043][T22275] loop6: detected capacity change from 0 to 512
[ 1809.001097][T22275] EXT4-fs: Ignoring removed nobh option
[ 1809.029586][T22275] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[ 1809.124014][T22279] overlayfs: failed to clone upperpath
[ 1809.197162][T22279] overlayfs: failed to clone upperpath
[ 1810.684224][T22275] EXT4-fs (loop6): 1 truncate cleaned up
[ 1811.746695][T22275] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[ 1812.270822][T22296] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22296 comm=syz.4.6747
[ 1812.998663][T22300] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6748'.
[ 1813.753286][T22291] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1813.760375][T22291] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1813.768272][T22291] device bridge_slave_0 entered promiscuous mode
[ 1813.775742][T22291] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1813.783314][   T28] audit: type=1400 audit(1760637967.247:766): avc:  denied  { mounton } for  pid=22298 comm="syz.1.6749" path="/file0" dev="bpf" ino=77909 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1
[ 1813.805978][T22291] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1813.813974][T22291] device bridge_slave_1 entered promiscuous mode
[ 1814.062538][T16119] EXT4-fs (loop6): unmounting filesystem.
[ 1814.173890][T21133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1814.182037][T21133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1814.242292][T21133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1814.261477][T21133] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1814.275962][T21133] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1814.283099][T21133] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1814.292277][T21133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1814.302399][T21133] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1814.311804][T21133] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1814.318860][T21133] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1815.171020][T22291] device veth0_vlan entered promiscuous mode
[ 1815.191494][T22291] device veth1_macvtap entered promiscuous mode
[ 1815.204033][T21133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1818.311334][T21133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1818.329580][T21133] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1818.337498][T21133] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1818.347646][T21133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1818.366415][T21133] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1818.379370][T21133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1818.408477][T21133] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1818.416870][T21133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1818.464422][T21133] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1818.606921][T21133] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1818.689390][T22349] overlayfs: failed to clone lowerpath
[ 1818.935589][T21133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1818.944386][T21133] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1818.953392][T21133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1819.179886][T22360] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22360 comm=syz.7.6737
[ 1819.393407][T22362] overlayfs: failed to clone upperpath
[ 1822.492575][T22389] syz.1.6766[22389] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1822.492765][T22389] syz.1.6766[22389] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1827.624374][T22428] loop7: detected capacity change from 0 to 512
[ 1827.651602][T22428] EXT4-fs: Ignoring removed mblk_io_submit option
[ 1827.658224][T22428] EXT4-fs: Ignoring removed mblk_io_submit option
[ 1827.779603][T22430] overlayfs: failed to clone upperpath
[ 1828.324478][T22428] EXT4-fs (loop7): Test dummy encryption mode enabled
[ 1828.355190][T22435] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6777'.
[ 1828.367456][T22428] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[ 1828.380432][T22435] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1828.639276][   T28] audit: type=1400 audit(1760637982.687:767): avc:  denied  { create } for  pid=22437 comm="syz.4.6779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[ 1828.749972][T22428] EXT4-fs (loop7): 1 truncate cleaned up
[ 1828.755813][T22428] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[ 1828.819125][   T28] audit: type=1400 audit(1760637982.867:768): avc:  denied  { ioctl } for  pid=22424 comm="syz.7.6776" path="/3/bus/memory.stat" dev="loop7" ino=18 ioctlcmd=0x6614 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[ 1828.927174][T22448] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[ 1829.881528][   T28] audit: type=1400 audit(1760637983.817:769): avc:  denied  { map } for  pid=22424 comm="syz.7.6776" path="/3/bus/memory.stat" dev="loop7" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[ 1830.742864][T22291] EXT4-fs (loop7): unmounting filesystem.
[ 1831.441378][T22479] syz.4.6786[22479] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1831.441746][T22479] syz.4.6786[22479] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1832.465987][T22482] loop7: detected capacity change from 0 to 1024
[ 1832.618971][T22482] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1832.669166][T22482] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[ 1834.351997][T22291] EXT4-fs (loop7): unmounting filesystem.
[ 1836.413703][T22502] loop7: detected capacity change from 0 to 256
[ 1836.440368][T22502] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xcab3d314, utbl_chksum : 0xe619d30d)
[ 1837.637142][T22514] tipc: Started in network mode
[ 1837.642365][T22514] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711
[ 1837.651262][T22514] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[ 1838.030408][T22521] loop7: detected capacity change from 0 to 512
[ 1838.061532][T22521] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[ 1838.549913][T22521] EXT4-fs (loop7): 1 truncate cleaned up
[ 1838.699691][T22521] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[ 1839.145492][T22291] EXT4-fs (loop7): unmounting filesystem.
[ 1839.457816][T22538] loop7: detected capacity change from 0 to 4096
[ 1841.661110][T22538] EXT4-fs (loop7): Test dummy encryption mode enabled
[ 1841.866574][T22538] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[ 1843.061737][T22551] netlink: 96 bytes leftover after parsing attributes in process `syz.1.6801'.
[ 1844.174698][T22556] fscrypt: AES-256-XTS using implementation "xts-aes-aesni"
[ 1844.197957][T22557] EXT4-fs (loop7): re-mounted. Quota mode: writeback.
[ 1844.311946][T22291] EXT4-fs (loop7): unmounting filesystem.
[ 1847.796235][T22586] syz.7.6806[22586] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1847.797620][T22586] syz.7.6806[22586] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1847.945791][T22586] loop7: detected capacity change from 0 to 128
[ 1849.815733][T22586] EXT4-fs (loop7): Test dummy encryption mode enabled
[ 1849.914565][T22586] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[ 1850.902184][T22598] sch_tbf: burst 32855 is lower than device lo mtu (11337746) !
[ 1850.961048][T22586] ext4 filesystem being mounted at /9/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1851.153025][T22291] EXT4-fs (loop7): unmounting filesystem.
[ 1856.299010][T22639] loop7: detected capacity change from 0 to 512
[ 1857.291063][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1859.707780][T22639] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[ 1859.717201][T22639] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1860.469901][T22291] EXT4-fs (loop7): unmounting filesystem.
[ 1860.651771][T22650] netem: change failed
[ 1861.538746][T22661] loop7: detected capacity change from 0 to 128
[ 1861.565820][T22661] EXT4-fs: Ignoring removed nobh option
[ 1861.661495][T22661] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[ 1861.680411][T22661] ext4 filesystem being mounted at /12/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1866.377152][T22291] EXT4-fs (loop7): unmounting filesystem.
[ 1866.556502][T22684] loop7: detected capacity change from 0 to 1024
[ 1866.953379][T22684] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[ 1867.634383][T22291] EXT4-fs (loop7): unmounting filesystem.
[ 1868.530750][T22705] overlayfs: failed to clone upperpath
[ 1869.962481][T22724] netlink: 'syz.3.6843': attribute type 3 has an invalid length.
[ 1869.970995][T22724] netlink: 'syz.3.6843': attribute type 3 has an invalid length.
[ 1870.295546][T22727] loop7: detected capacity change from 0 to 512
[ 1870.335739][T22727] EXT4-fs error (device loop7): ext4_orphan_get:1400: inode #15: comm syz.7.6844: casefold flag without casefold feature
[ 1870.359841][T22727] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.6844: couldn't read orphan inode 15 (err -117)
[ 1870.384474][T22727] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[ 1871.996939][T22291] EXT4-fs (loop7): unmounting filesystem.
[ 1872.658397][T22758] syz.3.6849[22758] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1872.659445][T22758] syz.3.6849[22758] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1874.755518][T22789] loop7: detected capacity change from 0 to 512
[ 1874.838173][T22789] EXT4-fs error (device loop7): ext4_orphan_get:1400: inode #15: comm syz.7.6861: casefold flag without casefold feature
[ 1874.871386][T22789] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.6861: couldn't read orphan inode 15 (err -117)
[ 1874.917149][T22789] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[ 1875.737804][T22291] EXT4-fs (loop7): unmounting filesystem.
[ 1876.651886][T22818] loop7: detected capacity change from 0 to 512
[ 1876.674888][T22818] EXT4-fs error (device loop7): ext4_orphan_get:1400: inode #15: comm syz.7.6868: casefold flag without casefold feature
[ 1876.739316][T22818] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.6868: couldn't read orphan inode 15 (err -117)
[ 1876.830280][T22818] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[ 1877.647549][T22291] EXT4-fs (loop7): unmounting filesystem.
[ 1877.907441][T22842] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6873'.
[ 1879.974731][T22883] loop7: detected capacity change from 0 to 512
[ 1880.055726][T22883] EXT4-fs error (device loop7): ext4_orphan_get:1400: inode #15: comm syz.7.6889: casefold flag without casefold feature
[ 1880.077442][T22883] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.6889: couldn't read orphan inode 15 (err -117)
[ 1880.214918][T22883] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[ 1881.515870][T22291] EXT4-fs (loop7): unmounting filesystem.
[ 1881.589522][T22905] loop7: detected capacity change from 0 to 512
[ 1881.619832][T22905] EXT4-fs error (device loop7): ext4_orphan_get:1400: inode #15: comm syz.7.6895: casefold flag without casefold feature
[ 1881.641895][T22905] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.6895: couldn't read orphan inode 15 (err -117)
[ 1881.657268][T22905] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[ 1881.972422][T22915] syz.4.6897[22915] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1881.972836][T22915] syz.4.6897[22915] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1883.064458][T22291] EXT4-fs (loop7): unmounting filesystem.
[ 1883.428188][T22929] loop7: detected capacity change from 0 to 512
[ 1883.472867][T22929] EXT4-fs error (device loop7): ext4_orphan_get:1400: inode #15: comm syz.7.6902: casefold flag without casefold feature
[ 1883.512586][T22929] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.6902: couldn't read orphan inode 15 (err -117)
[ 1883.717924][T22929] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[ 1885.757805][T22291] EXT4-fs (loop7): unmounting filesystem.
[ 1886.588759][T22971] syz.1.6911[22971] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1886.589232][T22971] syz.1.6911[22971] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1887.690352][T22975] syz.7.6914[22975] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1887.701904][T22975] syz.7.6914[22975] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1887.720534][   T28] audit: type=1326 audit(1760638041.777:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22972 comm="syz.7.6914" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb4d798eec9 code=0x0
[ 1887.788206][T22976] loop7: detected capacity change from 0 to 128
[ 1887.920543][T22976] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[ 1887.930685][T22976] ext4 filesystem being mounted at /30/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1888.671817][T22291] EXT4-fs (loop7): unmounting filesystem.
[ 1888.702567][T22987] loop7: detected capacity change from 0 to 512
[ 1889.479078][T22987] EXT4-fs error (device loop7): ext4_orphan_get:1400: inode #15: comm syz.7.6918: casefold flag without casefold feature
[ 1889.492815][T22987] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.6918: couldn't read orphan inode 15 (err -117)
[ 1889.531146][T22987] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[ 1889.579939][T22997] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6919'.
[ 1890.200376][T22291] EXT4-fs (loop7): unmounting filesystem.
[ 1890.982746][T23018] syz.1.6924[23018] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1890.983232][T23018] syz.1.6924[23018] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1890.997799][T23019] syz.3.6926[23019] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1891.009862][T23019] syz.3.6926[23019] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1891.219114][T23020] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1891.853077][   T28] audit: type=1326 audit(1760638045.267:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23009 comm="syz.1.6924" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa36238eec9 code=0x0
[ 1891.940577][   T28] audit: type=1326 audit(1760638045.267:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23012 comm="syz.3.6926" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1a56f8eec9 code=0x0
[ 1892.348459][T23033] loop7: detected capacity change from 0 to 512
[ 1892.401638][T23033] EXT4-fs error (device loop7): ext4_orphan_get:1400: inode #15: comm syz.7.6931: casefold flag without casefold feature
[ 1892.466588][T23033] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.6931: couldn't read orphan inode 15 (err -117)
[ 1892.516539][T23033] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[ 1893.354907][T22291] EXT4-fs (loop7): unmounting filesystem.
[ 1893.496260][T23050] syz.1.6934[23050] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1893.496345][T23050] syz.1.6934[23050] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1893.951440][   T28] audit: type=1326 audit(1760638047.567:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23045 comm="syz.1.6934" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa36238eec9 code=0x0
[ 1894.191094][T23054] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6933'.
[ 1895.036168][T23057] loop7: detected capacity change from 0 to 512
[ 1895.062685][T23057] EXT4-fs error (device loop7): ext4_orphan_get:1400: inode #15: comm syz.7.6935: casefold flag without casefold feature
[ 1895.273756][T23068] syz.4.6939[23068] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1895.275158][T23068] syz.4.6939[23068] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1896.039258][T23069] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1897.703532][   T28] audit: type=1326 audit(1760638049.417:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23058 comm="syz.4.6939" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feb71d8eec9 code=0x0
[ 1897.741305][T23057] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.6935: couldn't read orphan inode 15 (err -117)
[ 1897.800429][T23057] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[ 1898.405322][T22291] EXT4-fs (loop7): unmounting filesystem.
[ 1899.561146][T23094] syz.7.6945[23094] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1899.561621][T23094] syz.7.6945[23094] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1899.591527][   T28] audit: type=1326 audit(1760638053.637:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23088 comm="syz.7.6945" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb4d798eec9 code=0x0
[ 1899.666839][T23095] loop7: detected capacity change from 0 to 128
[ 1899.864322][T23095] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[ 1899.874752][T23095] ext4 filesystem being mounted at /35/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1900.018805][T23095] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1900.661487][T22291] EXT4-fs (loop7): unmounting filesystem.
[ 1901.868503][T23126] syz.7.6953[23126] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1901.869780][T23126] syz.7.6953[23126] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1901.922936][T23126] loop7: detected capacity change from 0 to 128
[ 1904.176444][T23142] syz.6.6957[23142] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1904.177733][T23142] syz.6.6957[23142] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1904.846202][T23144] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1907.535833][   T28] audit: type=1326 audit(1760638058.307:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23130 comm="syz.6.6957" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7343f8eec9 code=0x0
[ 1908.060883][T23157] syz.6.6960[23157] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1908.060968][T23157] syz.6.6960[23157] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1908.270864][T23158] syz.1.6961[23158] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1908.278475][   T28] audit: type=1326 audit(1760638062.327:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23145 comm="syz.6.6960" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7343f8eec9 code=0x0
[ 1908.282425][T23158] syz.1.6961[23158] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1908.296354][   T28] audit: type=1326 audit(1760638062.357:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23149 comm="syz.1.6961" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa36238eec9 code=0x0
[ 1909.031984][T23162] syz.3.6963[23162] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1909.034546][T23162] syz.3.6963[23162] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1909.077222][T23160] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1910.010857][T23158] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1912.082922][   T28] audit: type=1326 audit(1760638064.507:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23154 comm="syz.3.6963" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1a56f8eec9 code=0x0
[ 1912.391314][T23175] syz.6.6966[23175] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1912.391684][T23175] syz.6.6966[23175] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1912.428847][   T28] audit: type=1326 audit(1760638066.467:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23167 comm="syz.6.6966" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7343f8eec9 code=0x0
[ 1912.487494][T23176] syz.4.6967[23176] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1912.488113][T23176] syz.4.6967[23176] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1913.461556][T23186] syz.3.6969[23186] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1913.473619][T23186] syz.3.6969[23186] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1913.609943][T23186] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1914.926395][T23197] loop7: detected capacity change from 0 to 512
[ 1915.026730][T23203] syz.6.6972[23203] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1915.027742][T23203] syz.6.6972[23203] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1915.087509][   T28] audit: type=1326 audit(1760638069.137:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23193 comm="syz.6.6972" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7343f8eec9 code=0x0
[ 1916.134263][T23205] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1916.881775][T23197] EXT4-fs error (device loop7): ext4_orphan_get:1400: inode #15: comm syz.7.6974: casefold flag without casefold feature
[ 1917.029257][T23197] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.6974: couldn't read orphan inode 15 (err -117)
[ 1917.055566][T23212] syz.3.6975[23212] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1917.055939][T23212] syz.3.6975[23212] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1917.162314][T23197] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[ 1917.879755][T23213] netlink: 'syz.1.6976': attribute type 3 has an invalid length.
[ 1917.887940][T23213] netlink: 'syz.1.6976': attribute type 3 has an invalid length.
[ 1918.038337][T22291] EXT4-fs (loop7): unmounting filesystem.
[ 1918.498363][T23224] syz.3.6978[23224] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1918.499223][T23224] syz.3.6978[23224] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1918.959202][T23225] syz.6.6980[23225] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1918.972142][T23225] syz.6.6980[23225] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1919.984242][T23226] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1920.503145][   T28] audit: type=1326 audit(1760638072.617:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23215 comm="syz.3.6978" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1a56f8eec9 code=0x0
[ 1921.621956][   T28] audit: type=1326 audit(1760638073.717:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23220 comm="syz.6.6980" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7343f8eec9 code=0x0
[ 1921.796241][T23237] serio: Serial port ptm0
[ 1922.734386][T23246] syz.6.6983[23246] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1922.734544][T23246] syz.6.6983[23246] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1922.754441][T23246] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1923.980850][T23252] syz.3.6986[23252] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1923.980934][T23252] syz.3.6986[23252] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1924.304917][T23253] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1925.924867][T23256] loop7: detected capacity change from 0 to 128
[ 1927.080944][   T28] audit: type=1326 audit(1760638078.147:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23248 comm="syz.3.6986" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1a56f8eec9 code=0x0
[ 1927.272706][T23256] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[ 1927.282425][T23256] ext4 filesystem being mounted at /44/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1927.341163][T23256] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1927.986179][   T28] audit: type=1326 audit(1760638078.717:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23247 comm="syz.7.6985" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb4d798eec9 code=0x0
[ 1928.037014][T22291] EXT4-fs (loop7): unmounting filesystem.
[ 1928.299631][T23273] syz.7.6991[23273] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1928.300027][T23273] syz.7.6991[23273] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1928.370577][   T28] audit: type=1326 audit(1760638082.377:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23268 comm="syz.7.6991" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb4d798eec9 code=0x0
[ 1928.419094][T23274] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1929.389797][T23279] loop7: detected capacity change from 0 to 512
[ 1929.448388][T23279] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem
[ 1929.477496][T23279] EXT4-fs (loop7): invalid journal inode
[ 1929.493579][T23279] EXT4-fs (loop7): can't get journal size
[ 1929.526537][T23279] EXT4-fs (loop7): 1 truncate cleaned up
[ 1929.532567][T23279] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[ 1929.860796][T23292] syz.4.6995[23292] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1929.860883][T23292] syz.4.6995[23292] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1930.229549][T23293] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1932.101766][T23295] netlink: 'syz.7.6992': attribute type 3 has an invalid length.
[ 1932.109797][T23295] netlink: 'syz.7.6992': attribute type 3 has an invalid length.
[ 1932.124173][   T28] audit: type=1326 audit(1760638084.027:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23282 comm="syz.4.6995" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feb71d8eec9 code=0x0
[ 1932.404901][T22291] EXT4-fs (loop7): unmounting filesystem.
[ 1934.092886][T23321] syz.6.7004[23321] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1934.093341][T23321] syz.6.7004[23321] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1934.414284][T23323] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1935.394756][T23324] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1937.194729][   T28] audit: type=1326 audit(1760638088.167:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23317 comm="syz.1.7005" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa36238eec9 code=0x0
[ 1937.283156][   T28] audit: type=1326 audit(1760638088.337:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23315 comm="syz.6.7004" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7343f8eec9 code=0x0
[ 1938.616832][T23343] syz.6.7009[23343] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1938.617722][T23343] syz.6.7009[23343] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1938.649044][T23343] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1941.271781][T23352] netlink: 'syz.6.7012': attribute type 3 has an invalid length.
[ 1941.280511][T23352] netlink: 'syz.6.7012': attribute type 3 has an invalid length.
[ 1943.450568][T23354] device gretap0 left promiscuous mode
[ 1943.456178][T23354] bridge0: port 3(gretap0) entered disabled state
[ 1943.938401][T23358] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1943.962460][T23365] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1946.500695][T23382] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1948.830679][T23386] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1950.871637][   T28] audit: type=1326 audit(1760638100.057:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23372 comm="syz.6.7020" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7343f8eec9 code=0x0
[ 1950.979195][   T28] audit: type=1326 audit(1760638101.167:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23379 comm="syz.1.7021" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa36238eec9 code=0x0
[ 1952.255534][T23406] netlink: 'syz.4.7026': attribute type 3 has an invalid length.
[ 1952.263584][T23410] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1952.423357][T23406] netlink: 'syz.4.7026': attribute type 3 has an invalid length.
[ 1952.846086][T23418] syz.6.7029[23418] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1952.846173][T23418] syz.6.7029[23418] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1952.913791][T23419] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1953.353387][   T28] audit: type=1326 audit(1760638106.907:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23413 comm="syz.6.7029" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7343f8eec9 code=0x0
[ 1956.668876][T23446] bridge0: port 3(gretap0) entered blocking state
[ 1956.675409][T23446] bridge0: port 3(gretap0) entered disabled state
[ 1956.682430][T23446] device gretap0 entered promiscuous mode
[ 1956.688320][T23446] bridge0: port 3(gretap0) entered blocking state
[ 1956.694816][T23446] bridge0: port 3(gretap0) entered forwarding state
[ 1956.704405][T23446] device gretap0 left promiscuous mode
[ 1956.710091][T23446] bridge0: port 3(gretap0) entered disabled state
[ 1958.982057][T23461] syz.7.7040[23461] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1958.982143][T23461] syz.7.7040[23461] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1959.060133][T23462] syz.4.7038[23462] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1959.073533][T23462] syz.4.7038[23462] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1959.146014][T23465] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1959.870507][T23466] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1960.365773][   T28] audit: type=1326 audit(1760638113.147:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23454 comm="syz.7.7040" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb4d798eec9 code=0x0
[ 1960.414703][   T28] audit: type=1326 audit(1760638113.147:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23450 comm="syz.4.7038" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feb71d8eec9 code=0x0
[ 1961.201751][T23481] syz.4.7046[23481] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1961.201835][T23481] syz.4.7046[23481] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1961.215521][   T28] audit: type=1326 audit(1760638115.277:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23479 comm="syz.4.7046" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feb71d8eec9 code=0x0
[ 1961.269144][T23483] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1965.950557][T23506] bridge0: port 2(gretap0) entered blocking state
[ 1965.957034][T23506] bridge0: port 2(gretap0) entered disabled state
[ 1965.964105][T23506] device gretap0 entered promiscuous mode
[ 1965.969986][T23506] bridge0: port 2(gretap0) entered blocking state
[ 1965.976458][T23506] bridge0: port 2(gretap0) entered forwarding state
[ 1966.080558][T23506] device gretap0 left promiscuous mode
[ 1966.086180][T23506] bridge0: port 2(gretap0) entered disabled state
[ 1969.798139][T23528] syz.3.7054[23528] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1969.798311][T23528] syz.3.7054[23528] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1973.028127][T23547] serio: Serial port ptm0
[ 1973.535069][T23559] loop7: detected capacity change from 0 to 512
[ 1973.560706][T23559] EXT4-fs error (device loop7): ext4_orphan_get:1400: inode #15: comm syz.7.7066: casefold flag without casefold feature
[ 1973.579538][T23559] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.7066: couldn't read orphan inode 15 (err -117)
[ 1973.594979][T23559] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[ 1975.628043][T23583] syz.3.7072[23583] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1975.629423][T23583] syz.3.7072[23583] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1977.014750][T22291] EXT4-fs (loop7): unmounting filesystem.
[ 1978.570574][T23590] device gretap0 left promiscuous mode
[ 1978.576283][T23590] bridge0: port 3(gretap0) entered disabled state
[ 1982.937064][T23629] syz.3.7083[23629] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1982.937249][T23629] syz.3.7083[23629] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1985.314661][T23634] syz.6.7086[23634] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1985.326283][T23634] syz.6.7086[23634] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1985.412095][T23640] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1985.445242][   T28] audit: type=1326 audit(1760638139.397:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23631 comm="syz.6.7086" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7343f8eec9 code=0x0
[ 1986.474743][T23654] serio: Serial port ptm0
[ 1987.461142][T23676] bridge0: port 2(gretap0) entered blocking state
[ 1987.467679][T23676] bridge0: port 2(gretap0) entered disabled state
[ 1987.476926][T23676] device gretap0 entered promiscuous mode
[ 1987.483274][T23676] bridge0: port 2(gretap0) entered blocking state
[ 1987.489725][T23676] bridge0: port 2(gretap0) entered forwarding state
[ 1987.519454][T23676] device gretap0 left promiscuous mode
[ 1987.525505][T23676] bridge0: port 2(gretap0) entered disabled state
[ 1989.252799][T23687] syz.6.7100[23687] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1989.252981][T23687] syz.6.7100[23687] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1991.373565][T23705] syz.3.7103[23705] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1991.385566][T23705] syz.3.7103[23705] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1991.775245][T23707] loop7: detected capacity change from 0 to 512
[ 1991.881305][T23707] EXT4-fs error (device loop7): ext4_orphan_get:1400: inode #15: comm syz.7.7106: casefold flag without casefold feature
[ 1991.920693][T23707] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.7106: couldn't read orphan inode 15 (err -117)
[ 1991.973596][T23707] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[ 1992.876513][T22291] EXT4-fs (loop7): unmounting filesystem.
[ 1992.895922][T23732] loop7: detected capacity change from 0 to 512
[ 1992.918995][T23732] EXT4-fs error (device loop7): ext4_orphan_get:1400: inode #15: comm syz.7.7113: casefold flag without casefold feature
[ 1992.940242][T23732] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.7113: couldn't read orphan inode 15 (err -117)
[ 1992.967854][T23732] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[ 1994.226570][T23748] syz.3.7115[23748] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1994.227005][T23748] syz.3.7115[23748] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1995.530566][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1996.434084][T22291] EXT4-fs (loop7): unmounting filesystem.
[ 1996.633402][T23765] syz.3.7120[23765] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1996.633849][T23765] syz.3.7120[23765] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1998.760753][T23794] syz.1.7127[23794] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1998.790567][T23794] syz.1.7127[23794] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1999.154947][   T28] audit: type=1326 audit(1760638153.207:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23784 comm="syz.1.7127" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa36238eec9 code=0x0
[ 1999.245323][T23799] syz.6.7126[23799] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1999.245405][T23799] syz.6.7126[23799] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1999.258480][T23797] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1999.291694][   T28] audit: type=1326 audit(1760638153.327:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23787 comm="syz.6.7126" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7343f8eec9 code=0x0
[ 1999.341238][T23799] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2000.307503][   T28] audit: type=1326 audit(1760638154.357:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23808 comm="syz.4.7131" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feb71d8eec9 code=0x0
[ 2000.480104][T23812] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2000.740899][T23814] loop7: detected capacity change from 0 to 512
[ 2000.948013][T23814] EXT4-fs error (device loop7): ext4_orphan_get:1400: inode #15: comm syz.7.7132: casefold flag without casefold feature
[ 2001.120823][T23814] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.7132: couldn't read orphan inode 15 (err -117)
[ 2001.163256][T23814] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[ 2001.576793][T22291] EXT4-fs (loop7): unmounting filesystem.
[ 2001.664807][T23826] syz.3.7133[23826] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2001.664893][T23826] syz.3.7133[23826] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2001.717568][   T28] audit: type=1326 audit(1760638155.767:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23818 comm="syz.3.7133" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1a56f8eec9 code=0x0
[ 2002.076821][T23826] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2002.473732][T23837] syz.1.7136[23837] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2002.473886][T23837] syz.1.7136[23837] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2003.768423][   T28] audit: type=1326 audit(1760638157.817:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23842 comm="syz.7.7139" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb4d798eec9 code=0x0
[ 2003.819678][T23849] loop7: detected capacity change from 0 to 128
[ 2003.838484][T23849] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[ 2003.847363][T23849] ext4 filesystem being mounted at /76/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 2004.069483][T23849] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2004.376408][T22291] EXT4-fs (loop7): unmounting filesystem.
[ 2005.358970][T23872] syz.1.7145[23872] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2005.359057][T23872] syz.1.7145[23872] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2005.380575][   T28] audit: type=1326 audit(1760638159.427:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23868 comm="syz.1.7145" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa36238eec9 code=0x0
[ 2005.422073][T23874] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2007.424938][T23907] syz.1.7155[23907] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2007.425547][T23907] syz.1.7155[23907] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2007.469825][   T28] audit: type=1326 audit(1760638161.517:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23897 comm="syz.1.7155" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa36238eec9 code=0x0
[ 2008.411220][T23910] syz.6.7154[23910] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2008.411305][T23910] syz.6.7154[23910] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2009.150764][T23914] syz.4.7157[23914] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2009.162292][T23914] syz.4.7157[23914] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2009.205939][T23915] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2009.737795][T23921] loop7: detected capacity change from 0 to 512
[ 2009.801143][T23921] EXT4-fs error (device loop7): ext4_orphan_get:1400: inode #15: comm syz.7.7160: casefold flag without casefold feature
[ 2009.840645][T23921] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.7160: couldn't read orphan inode 15 (err -117)
[ 2009.890516][T23921] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[ 2010.043011][T22291] EXT4-fs (loop7): unmounting filesystem.
[ 2010.684613][T23943] syz.3.7161[23943] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2010.685585][T23943] syz.3.7161[23943] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2010.736265][   T28] audit: type=1326 audit(1760638164.787:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23926 comm="syz.3.7161" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1a56f8eec9 code=0x0
[ 2010.813187][T23943] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2011.546009][T23957] syz.6.7165[23957] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2011.546094][T23957] syz.6.7165[23957] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2011.558889][   T28] audit: type=1326 audit(1760638165.617:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23940 comm="syz.6.7165" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7343f8eec9 code=0x0
[ 2011.613990][T23958] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2012.050509][   T28] audit: type=1326 audit(1760638166.097:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23955 comm="syz.4.7169" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feb71d8eec9 code=0x0
[ 2012.110280][T23966] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2012.285212][T23969] loop7: detected capacity change from 0 to 128
[ 2012.298895][   T28] audit: type=1326 audit(1760638166.257:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23961 comm="syz.7.7170" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb4d798eec9 code=0x0
[ 2012.485843][T23969] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[ 2012.496461][T23969] ext4 filesystem being mounted at /83/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 2013.242085][T22291] EXT4-fs (loop7): unmounting filesystem.
[ 2013.546199][T23980] bpf_get_probe_write_proto: 4 callbacks suppressed
[ 2013.546231][T23980] syz.1.7173[23980] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2013.553416][T23980] syz.1.7173[23980] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2013.585643][T23980] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2013.646969][T23981] syz.3.7171[23981] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2013.649060][T23981] syz.3.7171[23981] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2013.835418][   T28] audit: type=1326 audit(1760638167.887:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23965 comm="syz.3.7171" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1a56f8eec9 code=0x0
[ 2014.324303][T23981] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2014.468569][T23984] loop7: detected capacity change from 0 to 512
[ 2014.531771][T23984] EXT4-fs error (device loop7): ext4_orphan_get:1400: inode #15: comm syz.7.7174: casefold flag without casefold feature
[ 2014.570625][T23984] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.7174: couldn't read orphan inode 15 (err -117)
[ 2014.592849][T23984] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[ 2015.479181][T22291] EXT4-fs (loop7): unmounting filesystem.
[ 2015.884242][T24008] syz.1.7180[24008] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2015.884614][T24008] syz.1.7180[24008] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2016.110616][   T28] audit: type=1326 audit(1760638169.957:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24001 comm="syz.1.7180" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa36238eec9 code=0x0
[ 2017.211751][T24020] loop7: detected capacity change from 0 to 512
[ 2017.280914][T24020] EXT4-fs error (device loop7): ext4_orphan_get:1400: inode #15: comm syz.7.7186: casefold flag without casefold feature
[ 2017.294474][T24020] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.7186: couldn't read orphan inode 15 (err -117)
[ 2017.306622][T24020] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[ 2018.141632][T22291] EXT4-fs (loop7): unmounting filesystem.
[ 2018.223903][T24043] loop7: detected capacity change from 0 to 512
[ 2018.294999][T24043] EXT4-fs error (device loop7): ext4_orphan_get:1400: inode #15: comm syz.7.7192: casefold flag without casefold feature
[ 2018.308269][T24043] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.7192: couldn't read orphan inode 15 (err -117)
[ 2018.320605][T24043] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[ 2018.602836][T24044] syz.1.7193[24044] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2018.602922][T24044] syz.1.7193[24044] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2018.667087][   T28] audit: type=1326 audit(1760638172.717:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24040 comm="syz.1.7193" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa36238eec9 code=0x0
[ 2018.729787][T24044] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2019.312238][T22291] EXT4-fs (loop7): unmounting filesystem.
[ 2019.320853][T24068] syz.6.7198[24068] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2019.320931][T24068] syz.6.7198[24068] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2019.333176][   T28] audit: type=1326 audit(1760638173.397:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24066 comm="syz.6.7198" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7343f8eec9 code=0x0
[ 2019.384079][T24073] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2021.189718][T24094] syz.1.7204[24094] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2021.189802][T24094] syz.1.7204[24094] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2021.230565][   T28] audit: type=1326 audit(1760638175.257:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24087 comm="syz.1.7204" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa36238eec9 code=0x0
[ 2021.404925][T24104] syz.6.7207[24104] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2021.405607][T24104] syz.6.7207[24104] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2021.686676][T24105] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2021.773196][   T28] audit: type=1326 audit(1760638175.507:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24095 comm="syz.6.7207" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7343f8eec9 code=0x0
[ 2023.223574][T24115] syz.1.7209[24115] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2023.224008][T24115] syz.1.7209[24115] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2025.093271][T24119] bridge0: port 2(gretap0) entered blocking state
[ 2025.111187][T24119] bridge0: port 2(gretap0) entered disabled state
[ 2025.118850][T24119] device gretap0 entered promiscuous mode
[ 2025.124942][T24119] bridge0: port 2(gretap0) entered blocking state
[ 2025.131449][T24119] bridge0: port 2(gretap0) entered forwarding state
[ 2025.144340][T24119] device gretap0 left promiscuous mode
[ 2025.150062][T24119] bridge0: port 2(gretap0) entered disabled state
[ 2026.232760][T24138] syz.7.7214[24138] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2026.232843][T24138] syz.7.7214[24138] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2026.245857][T24131] loop7: detected capacity change from 0 to 128
[ 2026.389191][T24144] syz.4.7216[24144] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2026.389345][T24144] syz.4.7216[24144] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2026.406103][   T28] audit: type=1326 audit(1760638180.457:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24134 comm="syz.4.7216" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feb71d8eec9 code=0x0
[ 2028.790814][T24162] syz.4.7220[24162] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2028.790902][T24162] syz.4.7220[24162] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2029.400629][T24163] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2030.218371][   T28] audit: type=1326 audit(1760638182.957:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24153 comm="syz.4.7220" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feb71d8eec9 code=0x0
[ 2031.264575][T24191] bridge0: port 2(gretap0) entered blocking state
[ 2031.305593][T24191] bridge0: port 2(gretap0) entered disabled state
[ 2031.346443][T24191] device gretap0 entered promiscuous mode
[ 2031.389633][T24191] bridge0: port 2(gretap0) entered blocking state
[ 2031.396176][T24191] bridge0: port 2(gretap0) entered forwarding state
[ 2031.457598][T24192] device gretap0 left promiscuous mode
[ 2031.473897][T24192] bridge0: port 2(gretap0) entered disabled state
[ 2032.016095][T24199] syz.3.7230[24199] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2032.016177][T24199] syz.3.7230[24199] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2032.084415][   T28] audit: type=1326 audit(1760638186.137:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24196 comm="syz.3.7230" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1a56f8eec9 code=0x0
[ 2032.135590][T24199] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2032.420588][T24207] loop7: detected capacity change from 0 to 128
[ 2032.462887][T24207] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[ 2032.512881][T24207] ext4 filesystem being mounted at /95/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 2033.676741][T22291] EXT4-fs (loop7): unmounting filesystem.
[ 2033.718582][T24219] loop7: detected capacity change from 0 to 512
[ 2033.759718][T24219] EXT4-fs error (device loop7): ext4_orphan_get:1400: inode #15: comm syz.7.7236: casefold flag without casefold feature
[ 2033.791625][T24219] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.7236: couldn't read orphan inode 15 (err -117)
[ 2033.803864][T24219] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[ 2033.861520][T22291] EXT4-fs (loop7): unmounting filesystem.
[ 2033.892986][T24222] loop7: detected capacity change from 0 to 512
[ 2033.932211][T24222] EXT4-fs error (device loop7): ext4_orphan_get:1400: inode #15: comm syz.7.7237: casefold flag without casefold feature
[ 2033.951654][T24222] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.7237: couldn't read orphan inode 15 (err -117)
[ 2033.980466][T24222] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[ 2035.517264][T22291] EXT4-fs (loop7): unmounting filesystem.
[ 2035.529675][T24237] syz.1.7240[24237] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2035.529756][T24237] syz.1.7240[24237] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2035.542011][   T28] audit: type=1326 audit(1760638189.607:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24235 comm="syz.1.7240" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa36238eec9 code=0x0
[ 2035.594317][T24244] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2035.930783][T24249] syz.7.7242[24249] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2035.930862][T24249] syz.7.7242[24249] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2036.341642][T24250] loop7: detected capacity change from 0 to 128
[ 2036.610986][T24252] syz.3.7243[24252] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2036.611109][T24252] syz.3.7243[24252] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2037.220792][T24254] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2038.584426][T24250] EXT4-fs: failed to create workqueue
[ 2038.589859][T24250] EXT4-fs (loop7): mount failed
[ 2038.670487][   T28] audit: type=1326 audit(1760638190.097:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24240 comm="syz.7.7242" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb4d798eec9 code=0x0
[ 2038.760966][   T28] audit: type=1326 audit(1760638190.777:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24247 comm="syz.3.7243" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1a56f8eec9 code=0x0
[ 2038.859318][T24264] loop7: detected capacity change from 0 to 512
[ 2038.914482][T24264] EXT4-fs error (device loop7): ext4_orphan_get:1400: inode #15: comm syz.7.7247: casefold flag without casefold feature
[ 2038.936046][T24264] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.7247: couldn't read orphan inode 15 (err -117)
[ 2038.995679][T24264] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[ 2039.125393][T22291] EXT4-fs (loop7): unmounting filesystem.
[ 2039.153488][T24273] loop7: detected capacity change from 0 to 512
[ 2039.223444][T24274] syz.4.7248[24274] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2039.223811][T24274] syz.4.7248[24274] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2039.251071][   T28] audit: type=1326 audit(1760638193.297:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24269 comm="syz.4.7248" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feb71d8eec9 code=0x0
[ 2039.406385][T24275] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2039.675592][T24273] EXT4-fs error (device loop7): ext4_orphan_get:1400: inode #15: comm syz.7.7249: casefold flag without casefold feature
[ 2039.804994][T24273] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.7249: couldn't read orphan inode 15 (err -117)
[ 2040.170553][T24273] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[ 2040.619166][T22291] EXT4-fs (loop7): unmounting filesystem.
[ 2041.259663][T24296] loop7: detected capacity change from 0 to 512
[ 2041.370625][T24296] EXT4-fs error (device loop7): ext4_orphan_get:1400: inode #15: comm syz.7.7254: casefold flag without casefold feature
[ 2041.387715][T24299] syz.3.7255[24299] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2041.387804][T24299] syz.3.7255[24299] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2041.401374][   T28] audit: type=1326 audit(1760638195.457:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24297 comm="syz.3.7255" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1a56f8eec9 code=0x0
[ 2041.440527][T24296] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.7254: couldn't read orphan inode 15 (err -117)
[ 2041.454463][T24301] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2041.472963][T24296] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[ 2042.674378][T24318] syz.3.7259[24318] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2042.674832][T24318] syz.3.7259[24318] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2042.720691][   T28] audit: type=1326 audit(1760638196.757:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24315 comm="syz.3.7259" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1a56f8eec9 code=0x0
[ 2042.868477][T24319] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2043.235038][T24321] syz.6.7261[24321] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2043.235126][T24321] syz.6.7261[24321] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2043.633553][T24323] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2043.685737][   T28] audit: type=1326 audit(1760638197.307:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24320 comm="syz.6.7261" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7343f8eec9 code=0x0
[ 2043.739742][T22291] EXT4-fs (loop7): unmounting filesystem.
[ 2043.976153][T24336] bridge0: port 3(gretap0) entered blocking state
[ 2044.026225][T24336] bridge0: port 3(gretap0) entered disabled state
[ 2044.060735][T24336] device gretap0 entered promiscuous mode
[ 2044.080582][T24336] bridge0: port 3(gretap0) entered blocking state
[ 2044.087081][T24336] bridge0: port 3(gretap0) entered forwarding state
[ 2044.160915][T24338] device gretap0 left promiscuous mode
[ 2044.174112][T24338] bridge0: port 3(gretap0) entered disabled state
[ 2044.583553][T24348] syz.1.7266[24348] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2044.583946][T24348] syz.1.7266[24348] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2044.640751][   T28] audit: type=1326 audit(1760638198.687:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24341 comm="syz.1.7266" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa36238eec9 code=0x0
[ 2046.761315][T24359] syz.3.7269[24359] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2046.762914][T24359] syz.3.7269[24359] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2046.817499][T24360] syz.1.7268[24360] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2046.831228][T24360] syz.1.7268[24360] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2047.277063][T24359] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2048.254119][T24361] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2048.714136][   T28] audit: type=1326 audit(1760638201.267:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24354 comm="syz.1.7268" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa36238eec9 code=0x0
[ 2049.394426][T24372] syz.4.7272[24372] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2049.394818][T24372] syz.4.7272[24372] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2049.424085][   T28] audit: type=1326 audit(1760638203.477:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24368 comm="syz.4.7272" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feb71d8eec9 code=0x0
[ 2050.352557][T24376] syz.3.7273[24376] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2050.352644][T24376] syz.3.7273[24376] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2050.526370][T24378] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2051.152396][   T28] audit: type=1326 audit(1760638204.417:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24371 comm="syz.3.7273" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1a56f8eec9 code=0x0
[ 2051.910175][T24385] syz.3.7275[24385] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2051.911030][T24385] syz.3.7275[24385] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2052.252336][   T28] audit: type=1326 audit(1760638206.287:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24381 comm="syz.3.7275" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1a56f8eec9 code=0x0
[ 2052.451874][T24394] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2052.997130][T24403] syz.4.7279[24403] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2052.997543][T24403] syz.4.7279[24403] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2053.018668][   T28] audit: type=1326 audit(1760638207.067:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24399 comm="syz.4.7279" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feb71d8eec9 code=0x0
[ 2054.026116][T24408] syz.6.7280[24408] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2054.026205][T24408] syz.6.7280[24408] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2054.041372][   T28] audit: type=1326 audit(1760638208.087:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24406 comm="syz.6.7280" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7343f8eec9 code=0x0
[ 2054.089096][T24411] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2054.355484][T24416] syz.7.7281[24416] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2054.355573][T24416] syz.7.7281[24416] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2054.379801][T24416] loop7: detected capacity change from 0 to 128
[ 2054.446734][T24416] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[ 2054.499020][T24416] ext4 filesystem being mounted at /104/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 2054.543734][T24416] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2056.550619][T24430] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2056.670571][   T28] audit: type=1326 audit(1760638208.977:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24422 comm="syz.1.7283" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa36238eec9 code=0x0
[ 2057.571168][T22291] EXT4-fs (loop7): unmounting filesystem.
[ 2058.466205][T24451] bridge0: port 2(gretap0) entered blocking state
[ 2058.496997][T24451] bridge0: port 2(gretap0) entered disabled state
[ 2058.553211][T24451] device gretap0 entered promiscuous mode
[ 2058.583753][T24451] bridge0: port 2(gretap0) entered blocking state
[ 2058.590318][T24451] bridge0: port 2(gretap0) entered forwarding state
[ 2058.639710][T24454] device gretap0 left promiscuous mode
[ 2058.657162][T24454] bridge0: port 2(gretap0) entered disabled state
[ 2058.852162][T24458] bpf_get_probe_write_proto: 4 callbacks suppressed
[ 2058.852185][T24458] syz.3.7290[24458] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2058.900087][T24458] syz.3.7290[24458] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2058.938766][   T28] audit: type=1326 audit(1760638212.987:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24452 comm="syz.3.7290" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1a56f8eec9 code=0x0
[ 2058.990384][T24461] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2061.374677][T24483] syz.7.7297[24483] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2061.374765][T24483] syz.7.7297[24483] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2061.387964][T24483] loop7: detected capacity change from 0 to 128
[ 2061.440831][T24483] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[ 2061.449588][T24483] ext4 filesystem being mounted at /107/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 2061.461299][T24483] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2062.122663][T22291] EXT4-fs (loop7): unmounting filesystem.
[ 2063.412431][T24505] syz.4.7302[24505] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2063.412514][T24505] syz.4.7302[24505] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2063.487953][T24507] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2064.232679][   T28] audit: type=1326 audit(1760638217.487:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24497 comm="syz.4.7302" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feb71d8eec9 code=0x0
[ 2065.781581][T24535] syz.3.7311[24535] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2065.781668][T24535] syz.3.7311[24535] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2066.259683][T24541] syz.1.7312[24541] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2066.271847][T24541] syz.1.7312[24541] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2066.285604][T24541] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2068.888472][T24592] syz.6.7325[24592] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2068.888915][T24592] syz.6.7325[24592] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2069.086325][T24593] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2070.071049][   T28] audit: type=1326 audit(1760638222.967:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24580 comm="syz.6.7325" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7343f8eec9 code=0x0
[ 2070.458218][   T28] audit: type=1326 audit(1760638224.487:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24599 comm="syz.4.7330" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feb71d8eec9 code=0x0
[ 2072.189789][T24616] loop7: detected capacity change from 0 to 128
[ 2072.258778][T24616] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[ 2072.277860][T24616] ext4 filesystem being mounted at /114/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 2074.188490][T24636] syz.1.7338[24636] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2074.188574][T24636] syz.1.7338[24636] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2074.200960][   T28] audit: type=1326 audit(1760638228.257:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24628 comm="syz.1.7338" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa36238eec9 code=0x0
[ 2074.364539][T22291] EXT4-fs (loop7): unmounting filesystem.
[ 2074.622911][T24654] syz.7.7340[24654] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2074.622995][T24654] syz.7.7340[24654] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2074.637778][   T28] audit: type=1326 audit(1760638228.687:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24643 comm="syz.7.7340" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb4d798eec9 code=0x0
[ 2074.690320][T24655] loop7: detected capacity change from 0 to 128
[ 2074.749520][T24655] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[ 2074.758555][T24655] ext4 filesystem being mounted at /115/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 2074.772978][T24655] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2075.851557][T22291] EXT4-fs (loop7): unmounting filesystem.
[ 2075.907140][T24669] loop7: detected capacity change from 0 to 512
[ 2075.962178][T24669] EXT4-fs error (device loop7): ext4_orphan_get:1400: inode #15: comm syz.7.7349: casefold flag without casefold feature
[ 2076.036477][T24669] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.7349: couldn't read orphan inode 15 (err -117)
[ 2076.098464][T24669] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[ 2076.283239][T24677] syz.6.7351[24677] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2076.283321][T24677] syz.6.7351[24677] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2076.584121][T24682] syz.4.7352[24682] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2076.621808][T24682] syz.4.7352[24682] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2076.683870][   T28] audit: type=1326 audit(1760638230.737:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24678 comm="syz.4.7352" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feb71d8eec9 code=0x0
[ 2076.731010][T24682] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2076.779181][T24686] syz.3.7353[24686] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2076.779268][T24686] syz.3.7353[24686] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2076.793133][   T28] audit: type=1326 audit(1760638230.847:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24684 comm="syz.3.7353" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1a56f8eec9 code=0x0
[ 2077.352003][T22291] EXT4-fs (loop7): unmounting filesystem.
[ 2080.260692][T24713] syz.1.7362[24713] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2080.260775][T24713] syz.1.7362[24713] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2080.274534][T24713] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2080.580800][T24724] syz.3.7361[24724] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2080.580884][T24724] syz.3.7361[24724] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2080.705716][T24727] syz.7.7364[24727] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2080.717905][T24727] syz.7.7364[24727] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2080.744121][T24727] loop7: detected capacity change from 0 to 128
[ 2080.766459][   T28] audit: type=1326 audit(1760638234.717:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24710 comm="syz.3.7361" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1a56f8eec9 code=0x0
[ 2081.523160][T24728] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2084.523727][T24763] syz.1.7373[24763] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2084.523813][T24763] syz.1.7373[24763] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2084.536017][   T28] audit: type=1326 audit(1760638238.587:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24756 comm="syz.1.7373" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa36238eec9 code=0x0
[ 2084.588137][T24763] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2084.691779][T24769] syz.7.7374[24769] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2084.693197][T24769] syz.7.7374[24769] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2084.807880][T24771] loop7: detected capacity change from 0 to 128
[ 2085.279242][T24772] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2085.335250][T24773] bpf_get_probe_write_proto: 2 callbacks suppressed
[ 2085.335272][T24773] syz.3.7377[24773] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2085.342033][T24773] syz.3.7377[24773] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2085.864290][   T28] audit: type=1326 audit(1760638238.777:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24758 comm="syz.7.7374" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb4d798eec9 code=0x0
[ 2085.939396][   T28] audit: type=1326 audit(1760638238.937:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24762 comm="syz.6.7376" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7343f8eec9 code=0x0
[ 2085.947212][T24771] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[ 2085.971329][T24771] ext4 filesystem being mounted at /123/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 2086.002065][T24777] syz.1.7378[24777] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2086.002145][T24777] syz.1.7378[24777] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2086.014991][   T28] audit: type=1326 audit(1760638240.077:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24776 comm="syz.1.7378" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa36238eec9 code=0x0
[ 2086.068227][T24783] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2086.141809][T22291] EXT4-fs (loop7): unmounting filesystem.
[ 2086.172013][T24786] syz.4.7375[24786] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2086.172143][T24786] syz.4.7375[24786] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2086.232912][   T28] audit: type=1326 audit(1760638240.287:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24760 comm="syz.4.7375" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feb71d8eec9 code=0x0
[ 2086.311347][T24789] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2089.739038][T24822] syz.6.7390[24822] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2089.739128][T24822] syz.6.7390[24822] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2089.806682][T24823] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2090.114084][   T28] audit: type=1326 audit(1760638243.807:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24819 comm="syz.6.7390" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7343f8eec9 code=0x0
[ 2090.329202][   T28] audit: type=1326 audit(1760638244.377:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24824 comm="syz.3.7391" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1a56f8eec9 code=0x0
[ 2090.484045][T24831] syz.7.7388[24831] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2090.484134][T24831] syz.7.7388[24831] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2090.542350][   T28] audit: type=1326 audit(1760638244.597:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24813 comm="syz.7.7388" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb4d798eec9 code=0x0
[ 2091.161852][T24831] loop7: detected capacity change from 0 to 128
[ 2091.456200][T24831] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[ 2091.465961][T24831] ext4 filesystem being mounted at /126/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 2091.490080][T24848] syz.3.7394[24848] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2091.490177][T24848] syz.3.7394[24848] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2091.510496][   T28] audit: type=1326 audit(1760638245.557:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24840 comm="syz.3.7394" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1a56f8eec9 code=0x0
[ 2091.546232][T24814] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2091.556983][T24849] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2091.934252][T22291] EXT4-fs (loop7): unmounting filesystem.
[ 2095.361801][   T28] audit: type=1326 audit(1760638249.417:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24876 comm="syz.6.7404" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7343f8eec9 code=0x0
[ 2095.468197][T24885] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2096.806956][   T28] audit: type=1326 audit(1760638250.857:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24894 comm="syz.1.7408" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa36238eec9 code=0x0
[ 2096.912233][T24900] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2099.735999][T24922] syz.3.7413[24922] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2099.736086][T24922] syz.3.7413[24922] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2099.770526][   T28] audit: type=1326 audit(1760638253.797:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24916 comm="syz.3.7413" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1a56f8eec9 code=0x0
[ 2099.807904][T24924] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2099.845727][T24927] loop7: detected capacity change from 0 to 512
[ 2100.784264][T24927] EXT4-fs error (device loop7): ext4_orphan_get:1400: inode #15: comm syz.7.7416: casefold flag without casefold feature
[ 2100.814935][T24927] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.7416: couldn't read orphan inode 15 (err -117)
[ 2100.827440][T24927] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[ 2101.273553][T22291] EXT4-fs (loop7): unmounting filesystem.
[ 2101.316155][T24939] syz.6.7419[24939] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2101.316243][T24939] syz.6.7419[24939] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2101.329485][   T28] audit: type=1326 audit(1760638255.377:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24936 comm="syz.6.7419" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7343f8eec9 code=0x0
[ 2101.400178][T24948] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2101.423509][T24952] bridge0: port 3(gretap0) entered blocking state
[ 2101.443264][T24952] bridge0: port 3(gretap0) entered disabled state
[ 2101.463415][T24952] device gretap0 entered promiscuous mode
[ 2101.478444][T24952] bridge0: port 3(gretap0) entered blocking state
[ 2101.485104][T24952] bridge0: port 3(gretap0) entered forwarding state
[ 2101.493398][T24953] device gretap0 left promiscuous mode
[ 2101.530584][T24953] bridge0: port 3(gretap0) entered disabled state
[ 2103.833573][   T28] audit: type=1326 audit(1760638257.887:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24973 comm="syz.1.7427" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa36238eec9 code=0x0
[ 2103.934249][T24978] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2105.150258][T24983] syz.1.7429[24983] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2105.150343][T24983] syz.1.7429[24983] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2106.943671][T25004] syz.3.7435[25004] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2106.955307][T25004] syz.3.7435[25004] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2106.968397][   T28] audit: type=1326 audit(1760638261.027:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25002 comm="syz.3.7435" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1a56f8eec9 code=0x0
[ 2107.021458][T25005] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2107.591350][T25014] syz.6.7437[25014] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2107.593600][T25014] syz.6.7437[25014] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2110.089519][T25027] bridge0: port 3(gretap0) entered blocking state
[ 2110.107603][T25027] bridge0: port 3(gretap0) entered disabled state
[ 2110.114606][T25027] device gretap0 entered promiscuous mode
[ 2110.120483][T25027] bridge0: port 3(gretap0) entered blocking state
[ 2110.126924][T25027] bridge0: port 3(gretap0) entered forwarding state
[ 2110.137028][T25027] device gretap0 left promiscuous mode
[ 2110.142664][T25027] bridge0: port 3(gretap0) entered disabled state
[ 2111.140590][T25036] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2111.141814][   T28] audit: type=1326 audit(1760638264.697:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25028 comm="syz.4.7442" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feb71d8eec9 code=0x0
[ 2113.861126][T25039] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2114.538122][   T28] audit: type=1326 audit(1760638266.117:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25031 comm="syz.3.7441" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1a56f8eec9 code=0x0
[ 2116.980429][T25055] syz.4.7445[25055] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2116.980689][T25055] syz.4.7445[25055] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2118.006487][T25061] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2118.100487][   T28] audit: type=1326 audit(1760638271.657:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25052 comm="syz.3.7448" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1a56f8eec9 code=0x0
[ 2120.064987][   T28] audit: type=1326 audit(1760638274.107:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25064 comm="syz.4.7449" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feb71d8eec9 code=0x0
[ 2120.145278][T25074] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2121.993967][T25086] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2122.016110][   T28] audit: type=1326 audit(1760638275.947:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25069 comm="syz.1.7450" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa36238eec9 code=0x0
[ 2122.041540][T25089] syz.3.7453[25089] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2122.041621][T25089] syz.3.7453[25089] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2122.152200][   T28] audit: type=1326 audit(1760638276.207:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25081 comm="syz.7.7452" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb4d798eec9 code=0x0
[ 2122.295849][T25096] loop7: detected capacity change from 0 to 128
[ 2122.558295][T25096] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[ 2122.572129][T25096] ext4 filesystem being mounted at /134/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 2122.652215][   T28] audit: type=1326 audit(1760638276.697:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25094 comm="syz.6.7455" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7343f8eec9 code=0x0
[ 2122.749720][T25102] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2126.088419][   T28] audit: type=1326 audit(1760638280.137:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25123 comm="syz.3.7461" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1a56f8eec9 code=0x0
[ 2126.185395][T25129] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2127.435946][T25138] syz.3.7462[25138] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2127.436030][T25138] syz.3.7462[25138] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2127.449247][   T28] audit: type=1326 audit(1760638281.497:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25133 comm="syz.3.7462" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1a56f8eec9 code=0x0
[ 2128.812805][T25151] bridge0: port 2(gretap0) entered blocking state
[ 2128.819318][T25151] bridge0: port 2(gretap0) entered disabled state
[ 2128.827121][T25151] device gretap0 entered promiscuous mode
[ 2128.833196][T25151] bridge0: port 2(gretap0) entered blocking state
[ 2128.839678][T25151] bridge0: port 2(gretap0) entered forwarding state
[ 2128.851899][T25151] device gretap0 left promiscuous mode
[ 2128.857692][T25151] bridge0: port 2(gretap0) entered disabled state
[ 2129.182783][   T28] audit: type=1326 audit(1760638283.227:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25146 comm="syz.1.7465" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa36238eec9 code=0x0
[ 2129.239700][T25154] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2132.152504][T25167] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2132.852318][   T28] audit: type=1326 audit(1760638285.787:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25155 comm="syz.3.7467" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1a56f8eec9 code=0x0
[ 2132.890257][T22291] EXT4-fs (loop7): unmounting filesystem.
[ 2132.907911][T25170] loop7: detected capacity change from 0 to 512
[ 2133.096567][T25179] syz.4.7472[25179] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2133.096656][T25179] syz.4.7472[25179] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2133.151410][T25170] EXT4-fs error (device loop7): ext4_orphan_get:1400: inode #15: comm syz.7.7471: casefold flag without casefold feature
[ 2133.232251][T25170] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.7471: couldn't read orphan inode 15 (err -117)
[ 2133.270598][T25170] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[ 2134.730526][T25197] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2135.384921][   T28] audit: type=1326 audit(1760638288.697:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25186 comm="syz.6.7475" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7343f8eec9 code=0x0
[ 2136.033872][T22291] EXT4-fs (loop7): unmounting filesystem.
[ 2138.160659][   T28] audit: type=1326 audit(1760638292.207:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25211 comm="syz.7.7482" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb4d798eec9 code=0x0
[ 2138.250947][T25225] loop7: detected capacity change from 0 to 128
[ 2138.886912][   T28] audit: type=1400 audit(1760638292.537:869): avc:  denied  { create } for  pid=25221 comm="syz.3.7483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[ 2141.360656][T25238] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2141.700700][T25239] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2143.040419][T25225] EXT4-fs: error -4 creating inode table initialization thread
[ 2143.048167][T25225] EXT4-fs (loop7): mount failed
[ 2143.640348][   T28] audit: type=1326 audit(1760638293.767:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25223 comm="syz.4.7484" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feb71d8eec9 code=0x0
[ 2143.726552][T25246] bridge0: port 2(gretap0) entered blocking state
[ 2143.733813][T25246] bridge0: port 2(gretap0) entered disabled state
[ 2143.741108][T25246] device gretap0 entered promiscuous mode
[ 2143.747077][T25246] bridge0: port 2(gretap0) entered blocking state
[ 2143.753556][T25246] bridge0: port 2(gretap0) entered forwarding state
[ 2143.762993][T25246] device gretap0 left promiscuous mode
[ 2143.768596][T25246] bridge0: port 2(gretap0) entered disabled state
[ 2143.920060][   T28] audit: type=1326 audit(1760638294.107:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25230 comm="syz.6.7485" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7343f8eec9 code=0x0
[ 2144.245178][T25256] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2144.321463][   T28] audit: type=1326 audit(1760638298.007:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25241 comm="syz.3.7487" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1a56f8eec9 code=0x0
[ 2145.314095][T25265] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2145.336585][   T28] audit: type=1326 audit(1760638299.267:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25260 comm="syz.4.7492" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feb71d8eec9 code=0x0
[ 2145.742440][T25270] loop7: detected capacity change from 0 to 128
[ 2146.716286][T25278] loop7: detected capacity change from 0 to 128
[ 2146.745303][T25278] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[ 2146.754589][T25278] ext4 filesystem being mounted at /139/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 2148.889755][   T28] audit: type=1326 audit(1760638302.937:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25275 comm="syz.4.7497" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feb71d8eec9 code=0x0
[ 2149.600741][T25293] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2150.556859][   T28] audit: type=1326 audit(1760638303.237:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25289 comm="syz.1.7500" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa36238eec9 code=0x0
[ 2150.631084][T22291] EXT4-fs (loop7): unmounting filesystem.
[ 2152.406156][T25318] loop7: detected capacity change from 0 to 128
[ 2152.414874][   T28] audit: type=1326 audit(1760638306.067:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25308 comm="syz.7.7503" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb4d798eec9 code=0x0
[ 2152.571106][T25318] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[ 2152.580729][T25318] ext4 filesystem being mounted at /140/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 2152.619802][T25318] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2153.563323][T22291] EXT4-fs (loop7): unmounting filesystem.
[ 2155.225732][T25340] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2155.317297][   T28] audit: type=1326 audit(1760638309.277:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25330 comm="syz.1.7508" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa36238eec9 code=0x0
[ 2155.974775][T25347] loop7: detected capacity change from 0 to 512
[ 2157.216591][   T28] audit: type=1326 audit(1760638311.257:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25345 comm="syz.6.7512" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7343f8eec9 code=0x0
[ 2157.313744][T25357] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2158.991677][T25362] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2159.045173][T25347] EXT4-fs: error -4 creating inode table initialization thread
[ 2159.695090][T25347] EXT4-fs (loop7): mount failed
[ 2159.733797][   T28] audit: type=1326 audit(1760638313.037:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25353 comm="syz.1.7514" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa36238eec9 code=0x0
[ 2159.988905][T25377] loop7: detected capacity change from 0 to 512
[ 2160.225279][T25377] EXT4-fs error (device loop7): ext4_orphan_get:1400: inode #15: comm syz.7.7519: casefold flag without casefold feature
[ 2160.327936][T25377] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.7519: couldn't read orphan inode 15 (err -117)
[ 2160.370544][T25377] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[ 2162.217122][T25395] bridge0: port 3(gretap0) entered blocking state
[ 2162.223729][T25395] bridge0: port 3(gretap0) entered disabled state
[ 2162.230759][T25395] device gretap0 entered promiscuous mode
[ 2162.236665][T25395] bridge0: port 3(gretap0) entered blocking state
[ 2162.243163][T25395] bridge0: port 3(gretap0) entered forwarding state
[ 2162.253157][T25395] device gretap0 left promiscuous mode
[ 2162.258858][T25395] bridge0: port 3(gretap0) entered disabled state
[ 2162.870327][T22291] EXT4-fs (loop7): unmounting filesystem.
[ 2163.366712][T25401] loop7: detected capacity change from 0 to 128
[ 2163.566826][T25401] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[ 2163.613491][T25401] ext4 filesystem being mounted at /144/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 2166.959576][   T28] audit: type=1326 audit(1760638321.007:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25418 comm="syz.3.7529" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1a56f8eec9 code=0x0
[ 2167.000471][T22291] EXT4-fs (loop7): unmounting filesystem.
[ 2167.064129][T25431] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2169.013137][T25450] loop7: detected capacity change from 0 to 128
[ 2170.466946][T25462] syz.7.7539[25462] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2170.467033][T25462] syz.7.7539[25462] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2170.480273][T25462] loop7: detected capacity change from 0 to 128
[ 2170.677233][T25460] syz.3.7538[25460] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2170.677323][T25460] syz.3.7538[25460] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2170.703392][T25469] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2172.578012][   T28] audit: type=1326 audit(1760638326.627:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25482 comm="syz.1.7544" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa36238eec9 code=0x0
[ 2173.622493][T25492] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2175.330520][T25503] loop7: detected capacity change from 0 to 128
[ 2176.083715][T25513] loop7: detected capacity change from 0 to 512
[ 2176.135320][T25513] EXT4-fs error (device loop7): ext4_orphan_get:1400: inode #15: comm syz.7.7552: casefold flag without casefold feature
[ 2176.160714][T25513] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.7552: couldn't read orphan inode 15 (err -117)
[ 2176.182852][T25513] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[ 2177.568027][T25526] syz.6.7555[25526] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2177.568116][T25526] syz.6.7555[25526] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2178.053192][T22291] EXT4-fs (loop7): unmounting filesystem.
[ 2180.562888][T25549] loop7: detected capacity change from 0 to 128
[ 2180.970842][T25551] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2182.331446][   T28] audit: type=1326 audit(1760638334.297:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25537 comm="syz.7.7557" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb4d798eec9 code=0x0
[ 2182.538908][T25549] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[ 2182.548717][T25549] ext4 filesystem being mounted at /150/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 2182.595701][T25549] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2183.061825][   T28] audit: type=1326 audit(1760638334.517:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25541 comm="syz.6.7558" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7343f8eec9 code=0x0
[ 2183.204355][T22291] EXT4-fs (loop7): unmounting filesystem.
[ 2183.901444][T25576] bridge0: port 2(gretap0) entered blocking state
[ 2183.908037][T25576] bridge0: port 2(gretap0) entered disabled state
[ 2183.915500][T25576] device gretap0 entered promiscuous mode
[ 2183.921458][T25576] bridge0: port 2(gretap0) entered blocking state
[ 2183.927939][T25576] bridge0: port 2(gretap0) entered forwarding state
[ 2183.938291][T25576] device gretap0 left promiscuous mode
[ 2183.944034][T25576] bridge0: port 2(gretap0) entered disabled state
[ 2183.978004][T25575] syz.1.7561[25575] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2183.983994][T25575] syz.1.7561[25575] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2184.014018][   T28] audit: type=1326 audit(1760638338.067:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25557 comm="syz.1.7561" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa36238eec9 code=0x0
[ 2184.034714][T25579] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2184.911821][T25584] loop7: detected capacity change from 0 to 512
[ 2186.126433][T25584] EXT4-fs error (device loop7): ext4_orphan_get:1400: inode #15: comm syz.7.7567: casefold flag without casefold feature
[ 2186.140551][T25584] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.7567: couldn't read orphan inode 15 (err -117)
[ 2186.160526][T25584] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[ 2189.291639][   T28] audit: type=1326 audit(1760638343.347:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25602 comm="syz.4.7571" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feb71d8eec9 code=0x0
[ 2189.627953][T25611] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2191.339855][T22291] EXT4-fs (loop7): unmounting filesystem.
[ 2191.611155][   T28] audit: type=1326 audit(1760638345.657:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25619 comm="syz.4.7576" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feb71d8eec9 code=0x0
[ 2191.921203][T25632] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2196.881574][T25667] loop7: detected capacity change from 0 to 128
[ 2196.963909][   T28] audit: type=1326 audit(1760638350.637:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25643 comm="syz.7.7582" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb4d798eec9 code=0x0
[ 2197.875368][T25671] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2198.165858][   T28] audit: type=1326 audit(1760638351.617:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25663 comm="syz.6.7586" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7343f8eec9 code=0x0
[ 2199.045553][T25679] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2199.571595][T25667] EXT4-fs: error -4 creating inode table initialization thread
[ 2199.579407][T25667] EXT4-fs (loop7): mount failed
[ 2199.585980][   T28] audit: type=1326 audit(1760638352.987:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25661 comm="syz.1.7585" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa36238eec9 code=0x0
[ 2199.964579][   T28] audit: type=1326 audit(1760638353.987:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25680 comm="syz.6.7588" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7343f8eec9 code=0x0
[ 2200.427275][T25687] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2202.140389][   T28] audit: type=1326 audit(1760638356.007:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25689 comm="syz.7.7589" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb4d798eec9 code=0x0
[ 2202.281124][T25697] loop7: detected capacity change from 0 to 128
[ 2203.170385][   T28] audit: type=1326 audit(1760638356.307:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25690 comm="syz.1.7591" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa36238eec9 code=0x0
[ 2203.293774][T25700] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2203.506934][T25697] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[ 2203.515757][T25697] ext4 filesystem being mounted at /156/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 2203.561798][T25693] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2205.221389][T22291] EXT4-fs (loop7): unmounting filesystem.
[ 2207.532138][T25743] bridge0: port 3(gretap0) entered blocking state
[ 2207.538680][T25743] bridge0: port 3(gretap0) entered disabled state
[ 2207.545934][T25743] device gretap0 entered promiscuous mode
[ 2207.551886][T25743] bridge0: port 3(gretap0) entered blocking state
[ 2207.558424][T25743] bridge0: port 3(gretap0) entered forwarding state
[ 2207.567990][T25743] device gretap0 left promiscuous mode
[ 2207.573738][T25743] bridge0: port 3(gretap0) entered disabled state
[ 2208.992113][T25753] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2210.092283][   T28] audit: type=1326 audit(1760638362.297:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25746 comm="syz.3.7603" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1a56f8eec9 code=0x0
[ 2214.839132][   T28] audit: type=1326 audit(1760638368.867:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25769 comm="syz.3.7611" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1a56f8eec9 code=0x0
[ 2215.899086][T25785] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2216.170402][T25787] overlayfs: failed to clone upperpath
[ 2216.297425][T25793] overlayfs: failed to clone upperpath
[ 2216.874820][T25801] loop7: detected capacity change from 0 to 128
[ 2217.163805][T25803] xt_TPROXY: Can be used only with -p tcp or -p udp
[ 2220.018424][T25825] loop7: detected capacity change from 0 to 512
[ 2220.066683][T25825] EXT4-fs error (device loop7): ext4_orphan_get:1400: inode #15: comm syz.7.7625: casefold flag without casefold feature
[ 2220.099974][T25825] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.7625: couldn't read orphan inode 15 (err -117)
[ 2220.112476][T25825] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[ 2222.384840][T22291] EXT4-fs (loop7): unmounting filesystem.
[ 2222.444425][T25851] loop7: detected capacity change from 0 to 1024
[ 2222.473245][T25851] EXT4-fs: Ignoring removed orlov option
[ 2222.515547][T25851] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[ 2222.570402][   T28] audit: type=1400 audit(1760638376.597:895): avc:  denied  { append } for  pid=25850 comm="syz.7.7631" name="file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[ 2222.612624][   T28] audit: type=1400 audit(1760638376.597:896): avc:  denied  { open } for  pid=25850 comm="syz.7.7631" path="/163/file1/file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[ 2223.726585][T25865] overlayfs: failed to clone upperpath
[ 2224.783559][T22291] EXT4-fs (loop7): unmounting filesystem.
[ 2225.703155][T25884] loop7: detected capacity change from 0 to 128
[ 2230.537026][T25926] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2230.580671][   T28] audit: type=1326 audit(1760638384.487:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25920 comm="syz.1.7648" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa36238eec9 code=0x0
[ 2231.733042][T25932] syz.6.7649[25932] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2231.733128][T25932] syz.6.7649[25932] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2231.736285][   T28] audit: type=1326 audit(1760638385.787:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25923 comm="syz.6.7649" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7343f8eec9 code=0x0
[ 2236.544558][T25960] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2237.342748][T25962] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2238.491054][   T28] audit: type=1326 audit(1760638389.087:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25947 comm="syz.1.7654" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa36238eec9 code=0x0
[ 2238.694969][   T28] audit: type=1326 audit(1760638389.727:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25949 comm="syz.4.7656" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feb71d8eec9 code=0x0
[ 2239.319411][   T28] audit: type=1326 audit(1760638393.367:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25973 comm="syz.1.7661" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa36238eec9 code=0x0
[ 2239.386037][T25979] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2241.183153][T25992] loop7: detected capacity change from 0 to 128
[ 2242.032192][T25993] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2242.141857][   T28] audit: type=1326 audit(1760638394.937:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25985 comm="syz.7.7663" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb4d798eec9 code=0x0
[ 2242.173595][   T28] audit: type=1326 audit(1760638395.107:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25984 comm="syz.4.7664" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feb71d8eec9 code=0x0
[ 2242.176057][T25997] overlayfs: failed to clone upperpath
[ 2242.481537][T25992] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[ 2242.490304][T25992] ext4 filesystem being mounted at /170/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 2242.535824][T25989] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2242.809370][T22291] EXT4-fs (loop7): unmounting filesystem.
[ 2245.809957][T26029] bridge0: port 3(gretap0) entered blocking state
[ 2245.816469][T26029] bridge0: port 3(gretap0) entered disabled state
[ 2245.823600][T26029] device gretap0 entered promiscuous mode
[ 2245.829465][T26029] bridge0: port 3(gretap0) entered blocking state
[ 2245.835917][T26029] bridge0: port 3(gretap0) entered forwarding state
[ 2245.846153][T26029] device gretap0 left promiscuous mode
[ 2245.851852][T26029] bridge0: port 3(gretap0) entered disabled state
[ 2248.918483][T26047] overlayfs: failed to clone upperpath
[ 2248.944090][T26049] xt_TPROXY: Can be used only with -p tcp or -p udp
[ 2250.628441][T26073] loop7: detected capacity change from 0 to 512
[ 2252.160839][T26073] EXT4-fs error (device loop7): ext4_orphan_get:1400: inode #15: comm syz.7.7686: casefold flag without casefold feature
[ 2252.180579][T26073] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.7686: couldn't read orphan inode 15 (err -117)
[ 2252.295839][T26085] syz.3.7687[26085] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2252.295922][T26085] syz.3.7687[26085] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2252.691284][T26073] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[ 2253.328608][T26095] syz.6.7683[26095] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2253.328709][T26095] syz.6.7683[26095] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2253.340959][   T28] audit: type=1326 audit(1760638407.397:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26066 comm="syz.6.7683" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7343f8eec9 code=0x0
[ 2254.319778][T22291] EXT4-fs (loop7): unmounting filesystem.
[ 2255.538862][T26114] loop7: detected capacity change from 0 to 128
[ 2256.650417][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 2257.640643][T26128] loop7: detected capacity change from 0 to 128
[ 2257.871566][   T28] audit: type=1326 audit(1760638411.927:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26125 comm="syz.3.7698" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1a56f8eec9 code=0x0
[ 2257.977139][T26131] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2258.689733][T26134] overlayfs: failed to clone upperpath
[ 2259.769780][T26144] overlayfs: failed to clone upperpath
[ 2259.884844][T26151] loop7: detected capacity change from 0 to 1024
[ 2259.921922][T26151] EXT4-fs: Ignoring removed orlov option
[ 2259.961138][T26151] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[ 2261.317600][T22291] EXT4-fs (loop7): unmounting filesystem.
[ 2261.606291][T26168] overlayfs: failed to resolve './file0': -2
[ 2264.210658][T26178] syz.6.7710[26178] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2264.210747][T26178] syz.6.7710[26178] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2265.398677][T26181] overlayfs: failed to clone upperpath
[ 2265.493112][T26186] xt_TPROXY: Can be used only with -p tcp or -p udp
[ 2267.281506][T26193] loop7: detected capacity change from 0 to 128
[ 2270.140559][T26211] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2270.965237][T26214] overlayfs: failed to clone upperpath
[ 2270.975904][   T28] audit: type=1326 audit(1760638423.697:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26195 comm="syz.1.7715" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa36238eec9 code=0x0
[ 2271.154442][T26222] overlayfs: failed to clone upperpath
[ 2272.685122][T26229] syz.1.7719[26229] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2272.686737][T26229] syz.1.7719[26229] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2272.883173][T26230] loop7: detected capacity change from 0 to 128
[ 2273.698097][   T28] audit: type=1326 audit(1760638426.637:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26216 comm="syz.7.7721" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb4d798eec9 code=0x0
[ 2273.993674][T26230] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[ 2274.002475][T26230] ext4 filesystem being mounted at /182/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 2274.048675][T26227] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2274.141365][   T28] audit: type=1326 audit(1760638427.017:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26212 comm="syz.1.7719" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa36238eec9 code=0x0
[ 2275.601395][T22291] EXT4-fs (loop7): unmounting filesystem.
[ 2278.350512][T26259] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2278.883046][   T28] audit: type=1326 audit(1760638431.177:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26248 comm="syz.3.7729" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1a56f8eec9 code=0x0
[ 2279.047702][   T28] audit: type=1326 audit(1760638431.647:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26246 comm="syz.4.7728" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feb71d8eec9 code=0x0
[ 2279.468308][T26267] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2280.151191][   T28] audit: type=1326 audit(1760638433.437:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26262 comm="syz.1.7731" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa36238eec9 code=0x0
[ 2282.496976][T26280] overlayfs: failed to clone upperpath
[ 2285.062031][T26302] syz.1.7738[26302] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2285.062348][T26302] syz.1.7738[26302] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2285.491124][   T28] audit: type=1326 audit(1760638439.457:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26287 comm="syz.1.7738" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa36238eec9 code=0x0
[ 2286.340452][   T28] audit: type=1326 audit(1760638440.367:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26295 comm="syz.7.7740" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb4d798eec9 code=0x0
[ 2286.385532][T26311] loop7: detected capacity change from 0 to 128
[ 2287.191428][T26311] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[ 2287.380680][   T28] audit: type=1326 audit(1760638441.237:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26306 comm="syz.3.7743" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1a56f8eec9 code=0x0
[ 2287.405997][T26311] ext4 filesystem being mounted at /185/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 2287.748824][T22291] EXT4-fs (loop7): unmounting filesystem.
[ 2287.819479][T26326] loop7: detected capacity change from 0 to 512
[ 2287.827008][T26324] overlayfs: failed to clone upperpath
[ 2287.969770][T26326] EXT4-fs error (device loop7): ext4_orphan_get:1400: inode #15: comm syz.7.7746: casefold flag without casefold feature
[ 2288.141010][T26326] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.7746: couldn't read orphan inode 15 (err -117)
[ 2288.170114][T26326] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[ 2292.035467][T26351] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2292.927501][   T28] audit: type=1326 audit(1760638446.067:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26342 comm="syz.6.7749" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7343f8eec9 code=0x0
[ 2292.969056][T22291] EXT4-fs (loop7): unmounting filesystem.
[ 2293.851600][T20870] ==================================================================
[ 2293.859731][T20870] BUG: KASAN: use-after-free in l2tp_session_delete+0x27/0x4e0
[ 2293.867406][T20870] Write of size 8 at addr ffff88810d114c08 by task kworker/u4:6/20870
[ 2293.875594][T20870] 
[ 2293.877929][T20870] CPU: 1 PID: 20870 Comm: kworker/u4:6 Tainted: G        W          syzkaller #0
[ 2293.887050][T20870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 2293.897208][T20870] Workqueue: l2tp l2tp_tunnel_del_work
[ 2293.903156][T20870] Call Trace:
[ 2293.906451][T20870]  <TASK>
[ 2293.909482][T20870]  __dump_stack+0x21/0x24
[ 2293.913830][T20870]  dump_stack_lvl+0xee/0x150
[ 2293.918528][T20870]  ? __cfi_dump_stack_lvl+0x8/0x8
[ 2293.923572][T20870]  ? l2tp_session_delete+0x27/0x4e0
[ 2293.928784][T20870]  print_address_description+0x71/0x200
[ 2293.934360][T20870]  print_report+0x4a/0x60
[ 2293.938714][T20870]  kasan_report+0x122/0x150
[ 2293.943242][T20870]  ? l2tp_session_delete+0x27/0x4e0
[ 2293.948455][T20870]  ? __this_cpu_preempt_check+0x13/0x20
[ 2293.954039][T20870]  kasan_check_range+0x280/0x290
[ 2293.959003][T20870]  __kasan_check_write+0x14/0x20
[ 2293.963965][T20870]  l2tp_session_delete+0x27/0x4e0
[ 2293.969126][T20870]  l2tp_tunnel_del_work+0x201/0x420
[ 2293.974549][T20870]  process_one_work+0x71f/0xc40
[ 2293.979434][T20870]  worker_thread+0xa29/0x11f0
[ 2293.984149][T20870]  ? _raw_spin_lock_irqsave+0xb0/0x110
[ 2293.989651][T20870]  ? __kthread_parkme+0x142/0x180
[ 2293.994701][T20870]  kthread+0x281/0x320
[ 2293.998792][T20870]  ? __cfi_worker_thread+0x10/0x10
[ 2294.003918][T20870]  ? __cfi_kthread+0x10/0x10
[ 2294.008531][T20870]  ret_from_fork+0x1f/0x30
[ 2294.012973][T20870]  </TASK>
[ 2294.016006][T20870] 
[ 2294.018347][T20870] Allocated by task 26356:
[ 2294.022773][T20870]  kasan_set_track+0x4b/0x70
[ 2294.027388][T20870]  kasan_save_alloc_info+0x25/0x30
[ 2294.032614][T20870]  __kasan_kmalloc+0x95/0xb0
[ 2294.037399][T20870]  __kmalloc+0xb1/0x1e0
[ 2294.041580][T20870]  l2tp_session_create+0x38/0xbe0
[ 2294.046635][T20870]  pppol2tp_connect+0xb35/0x1570
[ 2294.051649][T20870]  __sys_connect+0x398/0x420
[ 2294.056256][T20870]  __x64_sys_connect+0x7a/0x90
[ 2294.061126][T20870]  x64_sys_call+0x88d/0x9a0
[ 2294.065644][T20870]  do_syscall_64+0x4c/0xa0
[ 2294.070085][T20870]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2294.076028][T20870] 
[ 2294.078360][T20870] Freed by task 26358:
[ 2294.082435][T20870]  kasan_set_track+0x4b/0x70
[ 2294.087051][T20870]  kasan_save_free_info+0x31/0x50
[ 2294.092101][T20870]  ____kasan_slab_free+0x132/0x180
[ 2294.097434][T20870]  __kasan_slab_free+0x11/0x20
[ 2294.102228][T20870]  slab_free_freelist_hook+0xc2/0x190
[ 2294.107633][T20870]  __kmem_cache_free+0xb7/0x1b0
[ 2294.112509][T20870]  kfree+0x6f/0xf0
[ 2294.116260][T20870]  l2tp_session_dec_refcount+0xaf/0x1a0
[ 2294.121835][T20870]  pppol2tp_session_destruct+0xb1/0xf0
[ 2294.127314][T20870]  __sk_destruct+0x64/0x600
[ 2294.131832][T20870]  __sk_free+0x313/0x410
[ 2294.136089][T20870]  sk_free+0x54/0x90
[ 2294.139998][T20870]  pppol2tp_put_sk+0x7a/0xb0
[ 2294.144601][T20870]  rcu_do_batch+0x515/0xb90
[ 2294.149117][T20870]  rcu_core+0x5a5/0xe70
[ 2294.153332][T20870]  rcu_core_si+0x9/0x10
[ 2294.157518][T20870]  handle_softirqs+0x1d7/0x600
[ 2294.162296][T20870]  __irq_exit_rcu+0x52/0xf0
[ 2294.166906][T20870]  irq_exit_rcu+0x9/0x10
[ 2294.171168][T20870]  sysvec_apic_timer_interrupt+0xa9/0xc0
[ 2294.176821][T20870]  asm_sysvec_apic_timer_interrupt+0x1b/0x20
[ 2294.182833][T20870] 
[ 2294.185171][T20870] Last potentially related work creation:
[ 2294.191062][T20870]  kasan_save_stack+0x3a/0x60
[ 2294.195759][T20870]  __kasan_record_aux_stack+0xb6/0xc0
[ 2294.201155][T20870]  kasan_record_aux_stack_noalloc+0xb/0x10
[ 2294.206986][T20870]  call_rcu+0xd4/0xf90
[ 2294.211068][T20870]  pppol2tp_release+0x208/0x2d0
[ 2294.215936][T20870]  sock_close+0xf1/0x290
[ 2294.220290][T20870]  __fput+0x1fc/0x8f0
[ 2294.224287][T20870]  ____fput+0x15/0x20
[ 2294.228287][T20870]  task_work_run+0x1db/0x240
[ 2294.232898][T20870]  exit_to_user_mode_loop+0x9b/0xb0
[ 2294.238113][T20870]  exit_to_user_mode_prepare+0x5a/0xa0
[ 2294.243583][T20870]  syscall_exit_to_user_mode+0x1a/0x30
[ 2294.249068][T20870]  do_syscall_64+0x58/0xa0
[ 2294.253504][T20870]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2294.259418][T20870] 
[ 2294.261756][T20870] Second to last potentially related work creation:
[ 2294.268341][T20870]  kasan_save_stack+0x3a/0x60
[ 2294.273042][T20870]  __kasan_record_aux_stack+0xb6/0xc0
[ 2294.278440][T20870]  kasan_record_aux_stack_noalloc+0xb/0x10
[ 2294.284269][T20870]  insert_work+0x51/0x300
[ 2294.288618][T20870]  __queue_work+0x9b1/0xd30
[ 2294.293141][T20870]  queue_work_on+0xd2/0x140
[ 2294.297665][T20870]  bpf_map_put+0x1cf/0x240
[ 2294.302106][T20870]  bpf_prog_free_deferred+0x169/0x720
[ 2294.307516][T20870]  process_one_work+0x71f/0xc40
[ 2294.312476][T20870]  worker_thread+0xa29/0x11f0
[ 2294.317172][T20870]  kthread+0x281/0x320
[ 2294.321284][T20870]  ret_from_fork+0x1f/0x30
[ 2294.325708][T20870] 
[ 2294.328030][T20870] The buggy address belongs to the object at ffff88810d114c00
[ 2294.328030][T20870]  which belongs to the cache kmalloc-512 of size 512
[ 2294.342083][T20870] The buggy address is located 8 bytes inside of
[ 2294.342083][T20870]  512-byte region [ffff88810d114c00, ffff88810d114e00)
[ 2294.355244][T20870] 
[ 2294.357573][T20870] The buggy address belongs to the physical page:
[ 2294.363978][T20870] page:ffffea0004344500 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10d114
[ 2294.374241][T20870] head:ffffea0004344500 order:2 compound_mapcount:0 compound_pincount:0
[ 2294.382589][T20870] flags: 0x4000000000010200(slab|head|zone=1)
[ 2294.388671][T20870] raw: 4000000000010200 ffffea0004c98d00 dead000000000002 ffff888100042f00
[ 2294.397258][T20870] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000
[ 2294.405834][T20870] page dumped because: kasan: bad access detected
[ 2294.412253][T20870] page_owner tracks the page as allocated
[ 2294.417972][T20870] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x152a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 1618, tgid 1618 (kworker/0:8), ts 1215989246967, free_ts 1209284567917
[ 2294.438898][T20870]  post_alloc_hook+0x1f5/0x210
[ 2294.443678][T20870]  prep_new_page+0x1c/0x110
[ 2294.448187][T20870]  get_page_from_freelist+0x2c7b/0x2cf0
[ 2294.453748][T20870]  __alloc_pages+0x1c3/0x450
[ 2294.458431][T20870]  alloc_slab_page+0x6e/0xf0
[ 2294.463028][T20870]  new_slab+0x98/0x3d0
[ 2294.467112][T20870]  ___slab_alloc+0x6bd/0xb20
[ 2294.471706][T20870]  __slab_alloc+0x5e/0xa0
[ 2294.476041][T20870]  __kmem_cache_alloc_node+0x203/0x2c0
[ 2294.481505][T20870]  __kmalloc+0xa1/0x1e0
[ 2294.485669][T20870]  ___neigh_create+0x6f6/0x1e20
[ 2294.490543][T20870]  __neigh_create+0x31/0x40
[ 2294.495071][T20870]  ip6_finish_output2+0xa4f/0x1870
[ 2294.500206][T20870]  ip6_finish_output+0x5f9/0xbb0
[ 2294.505145][T20870]  ip6_output+0x1d1/0x3b0
[ 2294.509474][T20870]  ndisc_send_skb+0x7e3/0xcf0
[ 2294.514161][T20870] page last free stack trace:
[ 2294.518832][T20870]  free_unref_page_prepare+0x742/0x750
[ 2294.524297][T20870]  free_unref_page+0x8f/0x530
[ 2294.528982][T20870]  __free_pages+0x67/0x100
[ 2294.533399][T20870]  __free_slab+0xca/0x1a0
[ 2294.537735][T20870]  __unfreeze_partials+0x160/0x190
[ 2294.542852][T20870]  put_cpu_partial+0xa9/0x100
[ 2294.547537][T20870]  __slab_free+0x1c4/0x280
[ 2294.551968][T20870]  ___cache_free+0xbf/0xd0
[ 2294.556393][T20870]  qlist_free_all+0xc6/0x140
[ 2294.560984][T20870]  kasan_quarantine_reduce+0x14a/0x170
[ 2294.566448][T20870]  __kasan_slab_alloc+0x24/0x80
[ 2294.571341][T20870]  slab_post_alloc_hook+0x4f/0x2d0
[ 2294.576460][T20870]  __kmem_cache_alloc_node+0x192/0x2c0
[ 2294.581921][T20870]  kmalloc_trace+0x29/0xb0
[ 2294.586355][T20870]  __kvm_set_memory_region+0x606/0x910
[ 2294.591819][T20870]  kvm_vm_ioctl_set_memory_region+0x74/0xa0
[ 2294.597718][T20870] 
[ 2294.600040][T20870] Memory state around the buggy address:
[ 2294.605662][T20870]  ffff88810d114b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 2294.613721][T20870]  ffff88810d114b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 2294.621812][T20870] >ffff88810d114c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 2294.629867][T20870]                       ^
[ 2294.634216][T20870]  ffff88810d114c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 2294.642279][T20870]  ffff88810d114d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 2294.650340][T20870] ==================================================================
[ 2294.822296][T26362] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2295.481473][T26364] overlayfs: failed to clone upperpath
[ 2295.497922][   T28] audit: type=1326 audit(1760638448.777:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26353 comm="syz.4.7754" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feb71d8eec9 code=0x0
[ 2295.545396][T20870] Disabling lock debugging due to kernel taint
[ 2295.551677][T20870] ------------[ cut here ]------------
[ 2295.557143][T20870] refcount_t: underflow; use-after-free.
[ 2295.562967][T20870] WARNING: CPU: 0 PID: 20870 at lib/refcount.c:28 refcount_warn_saturate+0x120/0x1a0
[ 2295.572522][T20870] Modules linked in:
[ 2295.576445][T20870] CPU: 0 PID: 20870 Comm: kworker/u4:6 Tainted: G    B   W          syzkaller #0
[ 2295.585592][T20870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 2295.595698][T20870] Workqueue: l2tp l2tp_tunnel_del_work
[ 2295.601200][T20870] RIP: 0010:refcount_warn_saturate+0x120/0x1a0
[ 2295.607470][T20870] Code: 05 01 48 c7 c7 60 b6 a9 85 e8 8c bc dd fe 0f 0b eb c3 e8 c3 80 0c ff c6 05 53 9b 0b 05 01 48 c7 c7 c0 b6 a9 85 e8 70 bc dd fe <0f> 0b eb a7 e8 a7 80 0c ff c6 05 34 9b 0b 05 01 48 c7 c7 00 b6 a9
[ 2295.627368][T20870] RSP: 0018:ffffc9000ecbfc20 EFLAGS: 00010246
[ 2295.633571][T20870] RAX: f76eef826df30600 RBX: 0000000000000003 RCX: ffff88811a319440
[ 2295.641577][T20870] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002
[ 2295.649577][T20870] RBP: ffffc9000ecbfc30 R08: dffffc0000000000 R09: fffff52001d97f01
[ 2295.657692][T20870] R10: fffff52001d97f01 R11: 1ffff92001d97f00 R12: 1ffff11021a22990
[ 2295.665701][T20870] R13: ffff88810d114c00 R14: 0000000000000003 R15: 0000000000000000
[ 2295.673714][T20870] FS:  0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[ 2295.682828][T20870] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 2295.689440][T20870] CR2: 000000110c2790a7 CR3: 0000000146307000 CR4: 00000000003506b0
[ 2295.697844][T20870] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083
[ 2295.706183][T20870] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[ 2295.714479][T20870] Call Trace:
[ 2295.717817][T20870]  <TASK>
[ 2295.720796][T20870]  l2tp_session_dec_refcount+0xc8/0x1a0
[ 2295.726383][T20870]  l2tp_session_delete+0x3f0/0x4e0
[ 2295.731546][T20870]  l2tp_tunnel_del_work+0x201/0x420
[ 2295.736778][T20870]  process_one_work+0x71f/0xc40
[ 2295.741675][T20870]  worker_thread+0xa29/0x11f0
[ 2295.746960][T20870]  ? _raw_spin_lock_irqsave+0xb0/0x110
[ 2295.752503][T20870]  ? __kthread_parkme+0x142/0x180
[ 2295.757559][T20870]  kthread+0x281/0x320
[ 2295.761671][T20870]  ? __cfi_worker_thread+0x10/0x10
[ 2295.766809][T20870]  ? __cfi_kthread+0x10/0x10
[ 2295.771442][T20870]  ret_from_fork+0x1f/0x30
[ 2295.775904][T20870]  </TASK>
[ 2295.778935][T20870] ---[ end trace 0000000000000000 ]---
[ 2295.784792][   T28] audit: type=1400 audit(1760638448.977:917): avc:  denied  { read } for  pid=85 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[ 2295.827316][   T28] audit: type=1400 audit(1760638448.977:918): avc:  denied  { search } for  pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2296.135523][T26372] loop7: detected capacity change from 0 to 128
[ 2296.393147][   T28] audit: type=1400 audit(1760638448.977:919): avc:  denied  { write } for  pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2296.477891][   T28] audit: type=1400 audit(1760638448.977:920): avc:  denied  { add_name } for  pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2296.498615][   T28] audit: type=1400 audit(1760638448.977:921): avc:  denied  { create } for  pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 2296.519341][   T28] audit: type=1400 audit(1760638448.977:922): avc:  denied  { append open } for  pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 2296.550547][   T28] audit: type=1400 audit(1760638448.977:923): avc:  denied  { getattr } for  pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1