last executing test programs:

1m49.799281955s ago: executing program 4 (id=2607):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0x3e, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='kfree\x00', r1}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000480)=@security={'security\x00', 0xe, 0x4, 0x308, 0xffffffff, 0x0, 0xf8, 0x0, 0xffffffff, 0xffffffff, 0x318, 0x318, 0x318, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x2, 0x0, 0x1, 0x1], 0x2, 0x6}, {0x3, [0x3, 0x1, 0x0, 0x2, 0x4, 0x6], 0x2, 0x5}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0x0, 0x0, 0xff, 0xffffff00], 0x4e23, 0x4e21, 0x4e23, 0x4e23, 0x3, 0x3ff, 0x6, 0x7716, 0x2c9}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @empty, 0x800, 0xf, [0x2, 0x16, 0x2c, 0x1b, 0x18, 0x22, 0x2, 0x33, 0x1a, 0xd, 0x38, 0x3f, 0x38, 0x35, 0x36, 0x3d], 0x0, 0x7, 0x10000}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x368)

1m49.707081666s ago: executing program 4 (id=2610):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r2}, 0x10)
execve(0x0, 0x0, 0x0)

1m49.596270416s ago: executing program 4 (id=2614):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r1}, 0x18)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r2}, 0x18)
io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6, 0x0, 0x0, 0x0, 0x0, r2})

1m49.572207707s ago: executing program 4 (id=2615):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00')

1m49.541258187s ago: executing program 4 (id=2616):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x367, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10)
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0x0)

1m49.327784939s ago: executing program 4 (id=2619):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000000040)={0x0, 0x0})

1m49.327632339s ago: executing program 32 (id=2619):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000000040)={0x0, 0x0})

1m34.218679521s ago: executing program 0 (id=2975):
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]})
signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0xfc6]}, 0x8)
getresuid(0x0, 0x0, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0)
sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6ADDR={0xf, 0x5, @ipv4={'\x00', '\xff\xff', @empty}}]}, 0x44}}, 0x0)

1m34.177601061s ago: executing program 0 (id=2977):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1}, 0x10)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x1001}, 0x4)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2689064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

1m34.080763082s ago: executing program 0 (id=2980):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0)

1m33.777848754s ago: executing program 0 (id=2986):
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000008000008500000006"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10)
bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x0, 0x0, @void, @value, @void, @value}, 0x48)

1m33.732962335s ago: executing program 0 (id=2987):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f0000000140)={[{@errors_remount}, {@nobh}, {@max_batch_time={'max_batch_time', 0x3d, 0x3ff}}, {@nojournal_checksum}, {@usrquota}, {@dioread_nolock}, {@nodiscard}]}, 0x21, 0x4b0, &(0x7f0000000540)="$eJzs3cFPG9kZAPBvBgiEkEDaHNqqbdI0bVpFscFJUJRTemlVRZGqRj31kFBwEMLGCJs00BzI/1CpkXpq/4QeKvVQKafee9u97SV7WCm7G+0qrLQHr2ZsCCEY2A3BK/z7SU8zb57x9x7WvGc+wC+AnnUuItYi4lhE3IuI0fb1pF3iZqtkj3v54tH0+otH00k0m3c+SfL27Fps+ZrMifZzDkXE738T8afkzbj1ldX5qUqlvNSuFxvVxWJ9ZfXyXHVqtjxbXiiVJicmx69fuVY6sLGerf7r+a/nbv3hv//50bP/r/3yL1m3RtptW8dxkFpDH9iMk+mPiFvvIlgX9LXHc6zbHeEbSSPiOxFxPr//R6MvfzUBgKOs2RyN5ujW+iv92+oAwNGQ5jmwJC20cwEjkaaFQiuHdyaG00qt3rh0v7a8MNPKlY3FQHp/rlIeb+cKx2IgyeoT+fmremlb/UpEnI6Ivw4ez+uF6VplpptvfACgh53Ytv5/Ptha/wGAI26o2x0AAA6d9R8Aeo/1HwB6j/UfAHqP9R8Aeo/1HwB6j/UfAHrK727fzkpzvf351zMPVpbnaw8uz5Tr84Xq8nRhura0WJit1Wbzz+yp7vV8lVptceJqLD8sNsr1RrG+snq3WlteaNzNP9f7bnngUEYFAOzm9Nmn7ycRsXbjeF5iy14O1mo42tJudwDomr5udwDoGrt9Qe/yMz6wwxa9r+n4J0JPDr4vwOG4+H35f+hV8v/Qu+T/oXfJ/0PvajYTe/wDQI+R4wf8/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC+vpG8JGmhvRf4SKRpoRBxMiLGYiC5P1cpj0fEqYh4b3BgMKtPdLvTAMBbSj9K2vt/XRy9MLK99VjyxWB+jIg///3O3x5ONRpLE9n1TzevN560r5e60X8AYC8b6/TGOr7h5YtH0xvlMPvz/FetzUWzuOvt0mrpj/78OBQDETH8WdKut2TvV/oOIP7a44j43k7jT/LcyFh759Pt8bPYJw81fvpa/DRvax2z78V3D6Av0GueZvPPzZ3uvzTO5ced7/+hfIZ6exvz3/ob81+6Of/1dZj/zu03xtX//bZj2+OIH/TvFD/ZjJ90iH9hn/E/+OGPz3dqa/4j4mLsHH9rrGKjulisr6xenqtOzZZnywul0uTE5Pj1K9dKxTxHXdzIVL/p4xuXTu02/uEO8Yf2GP/P9jn+f355748/2SX+L3668+t/Zpf42Zr4833Gnxr+d8ftu7P4Mx3Gv9frf2mf8Z99uDqzz4cCAIegvrI6P1WplJecdOmk79vRDSdOXjvp9swEvGuvbvpu9wQAAAAAAAAAAAAAAOjkMP6dqNtjBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Oj6KgAA//+r59Ta")
r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0xffffffffffffffff}, 0x13)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0x40086602, &(0x7f0000000080)={@desc={0x84c00, 0x0, @desc2}})

1m33.707187405s ago: executing program 0 (id=2988):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1, 0x6, 0xbfab, 0x8, 0x40, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r1}, 0x18)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x6, 0x8, 0x0, 0xf77}]}, 0x10)
close(r2)

1m18.677281066s ago: executing program 33 (id=2988):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1, 0x6, 0xbfab, 0x8, 0x40, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r1}, 0x18)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x6, 0x8, 0x0, 0xf77}]}, 0x10)
close(r2)

1m15.492702109s ago: executing program 3 (id=3413):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
unshare(0x24040000)
unshare(0x2a020400)

1m15.360373781s ago: executing program 3 (id=3414):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x10, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0)
r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0)
writev(r3, &(0x7f0000000040)=[{&(0x7f0000002500)='\f', 0x1}], 0x1)

1m15.188013692s ago: executing program 3 (id=3417):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
close_range(r1, 0xffffffffffffffff, 0x0)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0)
r3 = gettid()
write$cgroup_pid(r2, &(0x7f0000000200)=r3, 0x12)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000180)={'ip_vti0\x00', <r4=>0x0, 0x700, 0x7800, 0x401, 0x9, {{0x1e, 0x4, 0x1, 0x0, 0x78, 0x68, 0x0, 0xdb, 0x4, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ssrr={0x89, 0xb, 0x25, [@dev={0xac, 0x14, 0x14, 0x1f}, @local]}, @ssrr={0x89, 0x27, 0x60, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, @remote, @remote, @multicast2, @loopback, @remote, @rand_addr=0x64010102, @rand_addr=0x64010102]}, @rr={0x7, 0xb, 0xe4, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote]}, @timestamp_addr={0x44, 0x1c, 0x4d, 0x1, 0x4, [{@empty, 0x4}, {@loopback, 0xd}, {@private=0xa010102, 0x4}]}, @ssrr={0x89, 0xb, 0xe, [@loopback, @loopback]}]}}}}})
ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000002c0)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x39, r4})

1m15.145101392s ago: executing program 3 (id=3419):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r1}, 0x10)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0)

1m15.083611463s ago: executing program 3 (id=3422):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
wait4(r2, 0x0, 0x40000000, 0x0)

1m14.954436614s ago: executing program 3 (id=3426):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000001"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='kmem_cache_free\x00', r1}, 0x18)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0)

1m14.903714114s ago: executing program 34 (id=3426):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000001"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='kmem_cache_free\x00', r1}, 0x18)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0)

48.904527947s ago: executing program 5 (id=4091):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10)
r4 = dup(r1)
getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001540)=0x14)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newtaction={0x98, 0x30, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x4}, 0x1, r5}}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0)

48.878669707s ago: executing program 5 (id=4092):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r2, 0x0, 0x8}, 0x18)
execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000)

48.759199988s ago: executing program 5 (id=4097):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000002c0)=0x3)
ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x4)
ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000300)='\x00!', 0x2}], 0x1, 0x9, 0x1)

48.657154769s ago: executing program 5 (id=4101):
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000340)='./file0/file0\x00', 0x400, &(0x7f00000003c0)={[{@shortname_winnt}, {@shortname_winnt}, {@fat=@nocase}, {@fat=@dos1xfloppy}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@utf8}, {@fat=@errors_continue}, {@utf8}]}, 0xfd, 0x2a1, &(0x7f0000000540)="$eJzs3E9rE08YwPGnadOmKW1y+PEDBfFBL3pZ2vgKgrQgBpTaiHoQpnajIWtSsmskIrY3r76O4tGbYH0DvXjzLl6KIHjpQbrS3azZ1mBLTbtp+/1A2ac782Rm/yTMDuxs3nvztFZxrYrxJJVRSYmsypZIfifqGOpsU0E8KnGrcnXix+cLd+4/uFkslWbnVeeKC9cKqjp18cPzl28vffQm7r6bej8mG/mHm98LXzb+3zi3ub0QfXrDU6OLjYZnFh1bl6puzVK97djGtbVad+3mrvKK01hebqupL01ml5u266qpt7Vmt9VrqNdsq3lsqnW1LEsns3LWDB8qa7XY944gKeO9djabRTPcs7C8dhydAgAAgyWp8f+TqqtVV+v7jf9Twvj/6JTX5ufNds9BI06H9M4DQNFkO9/f3Rj/AwAAAAAAAAAAAAAAAAAAAABwEmz5fs73/Vy0jf7GRCQjItH/fySOJNJd9Nkhrv9Qgt1Fn8Ve3MuIOK9b5VY53IblxYpUxRFbptMiP4P7oSOM526UZqc1kJd1Z6WTH7wkOBblR/K982fCfI3lr7TKacnG2y9ITv7rnV/Yk58WkVZ5VK5cjuVbkpNPj6QhjiwF93U3/9WM6vVbpT3tjwf1AAAAAAA4DSz9Lb/7+TdcTdKyNFo2ZE95uLM7PyC5feYHVNZHpZs/IueZQwQAAAAA4Fi47Rc14zh2c+CD1GB0IwpO0qnrV2Blwpvmr5V931/ZqfTvjaZEJKEj/SYiA3DC+x18fRZewINUTvJXCQAAAMBR6A76k+4JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABn10EXD4vqH2btsVhzw8kcJQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAYfgUAAP//M2gZag==")
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x51a, &(0x7f0000001200)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
open(&(0x7f0000000040)='./bus\x00', 0x1efb7e, 0x86d7ae2592eaaba6)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r1 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x1a1)
write$binfmt_script(r1, &(0x7f0000000280)={'#! ', './file0/file0', [], 0xa, "9486709602dc606e54805ba5f1624a28ef7623f163bd2d8b3b1e430b101ad13528aeb380d0a2903f2f64148f4432c6977af1004503540b0127cc4cd609c4a1be1395ffde631861539441d82c4c3e0ce46bf128c1a906ababe958783eacaafa103cae1fb55bf8552447738a95915b43aab9512aab5b9ab17f31b9aea76601b0b570367bc947"}, 0x208e281)
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40086610, &(0x7f0000000140)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})

48.43123643s ago: executing program 5 (id=4104):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c00028008000140000000080800034000000110"], 0xc4}}, 0x20050800)
setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)

47.881813045s ago: executing program 5 (id=4119):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
pipe(&(0x7f0000000000))
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffbfffffffffa, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x82, 0x0, 0x9, 0x1, 0x0, 0x7ffffffd}, 0x0, 0x0)
splice(r1, 0x0, r2, 0x0, 0x400000008000f28, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00010000031401"], 0x100}, 0x1, 0x0, 0x0, 0x4040024}, 0x0)

47.876664735s ago: executing program 35 (id=4119):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
pipe(&(0x7f0000000000))
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffbfffffffffa, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x82, 0x0, 0x9, 0x1, 0x0, 0x7ffffffd}, 0x0, 0x0)
splice(r1, 0x0, r2, 0x0, 0x400000008000f28, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00010000031401"], 0x100}, 0x1, 0x0, 0x0, 0x4040024}, 0x0)

2.179589443s ago: executing program 6 (id=5536):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000004c0)='kfree\x00', r0}, 0x18)
mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f00000001c0), 0x0, 0x0)
umount2(&(0x7f00000002c0)='./file0\x00', 0x0)

2.112649574s ago: executing program 6 (id=5538):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000002840), 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, &(0x7f0000000280), &(0x7f00000002c0)=r3}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10)
close_range(r0, r1, 0x200000000000000)

2.039854865s ago: executing program 6 (id=5540):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r1}, 0x3d)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r2}, 0x3d)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x3}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)

1.731083887s ago: executing program 6 (id=5543):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000040), 0x5, r0}, 0x38)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r2 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x90e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}}, 0x0)

1.682351387s ago: executing program 6 (id=5557):
r0 = io_uring_setup(0x7d98, &(0x7f00000003c0)={0x0, 0xdf07, 0x2, 0x2})
r1 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
listen(r1, 0x8957)
r2 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
accept4(r1, 0x0, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x200000000000000)

1.679893477s ago: executing program 2 (id=5549):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
openat$full(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10)
r2 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8)
write$binfmt_elf32(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="5402"], 0x69)
close(r2)
execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)

1.611106988s ago: executing program 2 (id=5553):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
recvmmsg(r0, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0}, 0x500}, {{0x0, 0x0, &(0x7f0000001d80)}}], 0x4000157, 0x40000000, 0x0)
pipe2$9p(0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r2}, 0x10)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

807.231534ms ago: executing program 6 (id=5580):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = dup(r1)
pipe2$9p(&(0x7f00000001c0)={<r3=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r1])
write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53)
write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000800000003003c02ffffffef3501"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}})

735.258394ms ago: executing program 7 (id=5581):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000040)={[{@barrier}, {@data_err_ignore}, {@nodelalloc}]}, 0x1, 0x4a3, &(0x7f0000000580)="$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")
connect$can_bcm(0xffffffffffffffff, &(0x7f00000001c0), 0x10)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000100)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0)
ioctl$TCSETS(r0, 0x89f0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7ff, 0x0, "5dee000000594000"})

546.236685ms ago: executing program 7 (id=5585):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r2}, 0x10)
unshare(0x20000400)

391.941017ms ago: executing program 7 (id=5591):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x800000000003}, 0x1320, 0xffffffff, 0x3, 0x5, 0x4, 0x1088f109, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0x10000})
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddb357f7adf97affffffff7d1800"})
r1 = syz_open_pts(r0, 0x0)
ioctl$TIOCVHANGUP(r1, 0x5437, 0x0)
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x81, 0x9, 0x7, 0x400, 0x11, "fdffff0320090004"})
ioctl$TIOCGPTPEER(r0, 0x5441, 0x0)

338.868277ms ago: executing program 7 (id=5592):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xfffffffff7ffffe9}, 0x18)
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000780)={'dummy0\x00', <r4=>0x0})
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd6000000000002d9300000c00018008000100", @ANYRES32=r4], 0x20}, 0x1, 0x0, 0x0, 0xd4}, 0x24008000)

319.747287ms ago: executing program 7 (id=5593):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x1)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000140)={0x0, 0x3, 0x7, 0x0, 0x40, 0x8b})
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x2)

260.003568ms ago: executing program 7 (id=5594):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bic\x00', 0x4)
sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000500)="93bf", 0x2}], 0x1}}], 0x1, 0xc0)
sendto$inet(r0, &(0x7f0000001a80)="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", 0x7f9e, 0x20000000, 0x0, 0x0)

246.749748ms ago: executing program 8 (id=5595):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070250000000000202d437b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', r0}, 0x18)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
r1 = gettid()
r2 = gettid()
tkill(r1, 0x12)
tkill(r2, 0x14)

209.651388ms ago: executing program 8 (id=5597):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
close_range(r1, 0xffffffffffffffff, 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
io_uring_setup(0x7d2, &(0x7f0000000580)={0x0, 0xddf9, 0x2, 0xfffffffe, 0x338})
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)

178.625428ms ago: executing program 8 (id=5598):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0)
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000040)=0x1, 0x4)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x7}, 0x1c)
sendmmsg$inet(r1, &(0x7f0000005400)=[{{&(0x7f0000000080)={0x2, 0x4e20, @private=0xa010101}, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)="0341", 0x2}], 0x1}}], 0x1, 0x800)

148.307769ms ago: executing program 8 (id=5600):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="380000000314010000000000000008000900020073797a310000000008004100736977001400330073797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)

145.610479ms ago: executing program 1 (id=5601):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000004c0)='kfree\x00', r0}, 0x18)
mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f00000001c0), 0x0, 0x0)
umount2(&(0x7f00000002c0)='./file0\x00', 0x0)

123.950109ms ago: executing program 2 (id=5602):
r0 = socket(0x10, 0x803, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000004}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x4c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x8}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1cc05}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_XOR={0x8, 0x7, 0x5}]}}]}, 0x4c}}, 0x400c084)

106.652719ms ago: executing program 1 (id=5603):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0x9a, &(0x7f0000000140)={@random="5595e425f9c6", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "071182", 0x64, 0x11, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, {[], {0x0, 0xe22, 0x4d, 0x0, @wg=@response={0x2, 0x4, 0x3, "b2351251229a383836f19d1c751a8e3c2031cfe25ac64374c9c81c4e6139b8f4", "f00d470c9acf115a3b04dc3b6335e267", {"d0de8800fe1d49914914180abe99c10f", "77872c3b19de35ed8708e969d84b8e31"}}}}}}}}, 0x0)

86.020279ms ago: executing program 1 (id=5604):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
close(r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0))
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2, <r3=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000100), &(0x7f0000000140)=r0}, 0x20)

76.571559ms ago: executing program 2 (id=5605):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c)
connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32)
writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1)

65.650179ms ago: executing program 1 (id=5606):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x20000000000001d2, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0)

47.899409ms ago: executing program 2 (id=5607):
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1)
mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0)
mount$bind(0x0, 0x0, 0x0, 0x1005848, 0x0)
r0 = inotify_init1(0x0)
inotify_add_watch(r0, &(0x7f00000002c0)='./file0\x00', 0x500082c)
setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, 0x0, 0x0)
removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00')

34.543379ms ago: executing program 1 (id=5608):
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
listen(r0, 0x5)
setsockopt(r1, 0x800000000010d, 0x8000000011, &(0x7f00001c9fff), 0xc5)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10)
sendmmsg(r1, &(0x7f0000002980), 0x400000000000239, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

25.6967ms ago: executing program 8 (id=5609):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r2, 0x25, &(0x7f0000000000)={0x1})
fcntl$lock(r2, 0x25, &(0x7f0000000340)={0x0, 0x0, 0x10080000f})
fcntl$lock(r2, 0x25, &(0x7f0000000180))

23.06056ms ago: executing program 2 (id=5610):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r4, 0x0, 0x8}, 0x18)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0)

11.56342ms ago: executing program 1 (id=5611):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000800000005"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)='%pK    \x00'}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r2}, 0x10)
bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0600000004000000ff0100005c00000000000000", @ANYRES32, @ANYBLOB="000000000000000800000000000000ec00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000feff"], 0x48)

0s ago: executing program 8 (id=5612):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="170000000000000007000000ff"], 0x50)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)=r1}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'})

kernel console output (not intermixed with test programs):

3632] geneve0: left allmulticast mode
[  167.300360][T13632] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  167.308926][T13632] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  167.317305][T13632] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  167.325744][T13632] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  167.530882][T13673] uprobe: syz.6.3829:13673 failed to unregister, leaking uprobe
[  167.567254][T13676] loop5: detected capacity change from 0 to 1024
[  167.582954][T13676] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  167.614371][T10489] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  167.620466][T13685] loop6: detected capacity change from 0 to 164
[  167.639659][T13685] Unable to read rock-ridge attributes
[  167.649285][T13685] Unable to read rock-ridge attributes
[  167.657091][T13687] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  167.671322][T13685] iso9660: Corrupted directory entry in block 4 of inode 1792
[  167.680469][T13685] syz.6.3833: attempt to access beyond end of device
[  167.680469][T13685] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  167.732269][T13697] loop6: detected capacity change from 0 to 2048
[  167.750133][T13693] SELinux: ebitmap: truncated map
[  167.756736][T13693] SELinux: failed to load policy
[  167.762154][T13697]  loop6: p1 < > p4
[  167.779798][T13697] loop6: p4 size 8388608 extends beyond EOD, truncated
[  167.939443][T13712] uprobe: syz.5.3846:13712 failed to unregister, leaking uprobe
[  168.153359][ T3368] hid-generic 0000:0000:20000000.0011: unknown main item tag 0x0
[  168.161316][ T3368] hid-generic 0000:0000:20000000.0011: unknown main item tag 0x0
[  168.169082][ T3368] hid-generic 0000:0000:20000000.0011: unknown main item tag 0x0
[  168.228014][ T3368] hid-generic 0000:0000:20000000.0011: unknown main item tag 0x0
[  168.235854][ T3368] hid-generic 0000:0000:20000000.0011: unknown main item tag 0x0
[  168.243733][ T3368] hid-generic 0000:0000:20000000.0011: unknown main item tag 0x0
[  168.251555][ T3368] hid-generic 0000:0000:20000000.0011: unknown main item tag 0x0
[  168.259332][ T3368] hid-generic 0000:0000:20000000.0011: unknown main item tag 0x0
[  168.267119][ T3368] hid-generic 0000:0000:20000000.0011: unknown main item tag 0x0
[  168.274953][ T3368] hid-generic 0000:0000:20000000.0011: unknown main item tag 0x0
[  168.278807][T13737] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  168.282703][ T3368] hid-generic 0000:0000:20000000.0011: unknown main item tag 0x0
[  168.297561][T13737] vhci_hcd: default hub control req: 6011 v8001 i0001 l0
[  168.297834][ T3368] hid-generic 0000:0000:20000000.0011: unknown main item tag 0x0
[  168.312665][ T3368] hid-generic 0000:0000:20000000.0011: unknown main item tag 0x0
[  168.320499][ T3368] hid-generic 0000:0000:20000000.0011: unknown main item tag 0x0
[  168.536904][ T3368] hid-generic 0000:0000:20000000.0011: unknown main item tag 0x0
[  168.545006][ T3368] hid-generic 0000:0000:20000000.0011: unknown main item tag 0x0
[  168.552814][ T3368] hid-generic 0000:0000:20000000.0011: unknown main item tag 0x0
[  168.560726][ T3368] hid-generic 0000:0000:20000000.0011: unknown main item tag 0x0
[  168.568581][ T3368] hid-generic 0000:0000:20000000.0011: unknown main item tag 0x0
[  168.576388][ T3368] hid-generic 0000:0000:20000000.0011: unknown main item tag 0x0
[  168.584217][ T3368] hid-generic 0000:0000:20000000.0011: unknown main item tag 0x0
[  168.592226][ T3368] hid-generic 0000:0000:20000000.0011: unknown main item tag 0x0
[  168.600033][ T3368] hid-generic 0000:0000:20000000.0011: unknown main item tag 0x0
[  168.607845][ T3368] hid-generic 0000:0000:20000000.0011: unknown main item tag 0x0
[  168.615625][ T3368] hid-generic 0000:0000:20000000.0011: unknown main item tag 0x0
[  168.623423][ T3368] hid-generic 0000:0000:20000000.0011: unknown main item tag 0x0
[  168.631263][ T3368] hid-generic 0000:0000:20000000.0011: unknown main item tag 0x0
[  168.639145][ T3368] hid-generic 0000:0000:20000000.0011: unknown main item tag 0x0
[  168.646973][ T3368] hid-generic 0000:0000:20000000.0011: unknown main item tag 0x0
[  168.705614][ T3368] hid-generic 0000:0000:20000000.0011: hidraw0: <UNKNOWN> HID v0.01 Device [syz0] on syz1
[  168.795224][T13727] Set syz1 is full, maxelem 65536 reached
[  168.883035][T13755] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3)
[  168.889722][T13755] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  168.897514][T13755] vhci_hcd vhci_hcd.0: Device attached
[  168.927546][T13764] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  168.971875][T13760] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  168.984207][T13760] vhci_hcd: default hub control req: 2314 v0008 i0002 l0
[  168.987935][T13756] usbip_core: unknown command
[  168.996055][T13756] vhci_hcd: unknown pdu 4294967295
[  169.001241][T13756] usbip_core: unknown command
[  169.014718][T13768] loop7: detected capacity change from 0 to 512
[  169.029123][ T4300] vhci_hcd: stop threads
[  169.033458][ T4300] vhci_hcd: release socket
[  169.037956][ T4300] vhci_hcd: disconnect device
[  169.061920][T13768] EXT4-fs (loop7): 1 orphan inode deleted
[  169.070774][T13768] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  169.083399][ T3368] vhci_hcd: vhci_device speed not set
[  169.098135][ T4300] EXT4-fs error (device loop7): ext4_release_dquot:6950: comm kworker/u8:28: Failed to release dquot type 1
[  169.111471][T13768] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  169.112859][T13779] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=13779 comm=syz.1.3875
[  169.134576][T13779] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=13779 comm=syz.1.3875
[  169.198587][T12694] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  169.504641][T13812] netlink: 'syz.2.3900': attribute type 10 has an invalid length.
[  169.553997][T13815] macvtap0: entered promiscuous mode
[  169.566910][T13815] team0: Device macvtap0 failed to register rx_handler
[  169.669885][T13649] kernel write not supported for file /536/attr/exec (pid: 13649 comm: kworker/1:10)
[  169.748173][T13833] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.802231][T13833] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.863432][T13833] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.925895][T13833] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.974791][T13842] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3)
[  169.981366][T13842] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  169.989020][T13842] vhci_hcd vhci_hcd.0: Device attached
[  169.998140][T13843] usbip_core: unknown command
[  170.001441][T13833] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  170.002882][T13843] vhci_hcd: unknown pdu 4294967295
[  170.014930][T13833] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  170.016229][T13843] usbip_core: unknown command
[  170.019115][ T4333] vhci_hcd: stop threads
[  170.033175][T13833] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  170.033404][ T4333] vhci_hcd: release socket
[  170.045272][T13833] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  170.046020][ T4333] vhci_hcd: disconnect device
[  170.082448][T13847] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3904'.
[  170.324958][T13872] loop6: detected capacity change from 0 to 512
[  170.378010][T13872] EXT4-fs (loop6): 1 orphan inode deleted
[  170.398332][ T4300] EXT4-fs error (device loop6): ext4_release_dquot:6950: comm kworker/u8:28: Failed to release dquot type 1
[  170.410490][T13872] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  170.423738][T13872] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  170.492985][T12436] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  170.534465][T13887] loop6: detected capacity change from 0 to 512
[  170.541508][T13887] EXT4-fs: Ignoring removed i_version option
[  170.572315][T13887] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  170.596722][T13887] ext4 filesystem being mounted at /84/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  170.613660][T13896] ip6gre1: entered allmulticast mode
[  170.617740][T13887] SELinux:  Context system_u:object_r:null_device_t:s0 is not valid (left unmapped).
[  170.637277][T13887] EXT4-fs error (device loop6): ext4_do_update_inode:5154: inode #4: comm syz.6.3920: corrupted inode contents
[  170.656115][T13887] EXT4-fs error (device loop6): ext4_dirty_inode:6042: inode #4: comm syz.6.3920: mark_inode_dirty error
[  170.675881][T13887] EXT4-fs error (device loop6): ext4_do_update_inode:5154: inode #4: comm syz.6.3920: corrupted inode contents
[  170.712377][T13887] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #4: comm syz.6.3920: mark_inode_dirty error
[  170.740018][T13887] EXT4-fs error (device loop6): ext4_acquire_dquot:6927: comm syz.6.3920: Failed to acquire dquot type 1
[  170.752929][T13899] EXT4-fs error (device loop6): ext4_do_update_inode:5154: inode #4: comm syz.6.3920: corrupted inode contents
[  170.767539][T13899] EXT4-fs error (device loop6): ext4_dirty_inode:6042: inode #4: comm syz.6.3920: mark_inode_dirty error
[  170.781130][T13899] EXT4-fs error (device loop6): ext4_do_update_inode:5154: inode #4: comm syz.6.3920: corrupted inode contents
[  170.794929][T13899] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #4: comm syz.6.3920: mark_inode_dirty error
[  170.809014][T13899] EXT4-fs error (device loop6): ext4_acquire_dquot:6927: comm syz.6.3920: Failed to acquire dquot type 1
[  170.827448][T13911] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3929'.
[  170.836523][T13911] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3929'.
[  170.845594][T13911] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3929'.
[  170.876709][T12436] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  170.913884][T13918] loop5: detected capacity change from 0 to 1024
[  170.928803][T13918] EXT4-fs: Ignoring removed orlov option
[  170.934572][T13918] EXT4-fs: Ignoring removed nomblk_io_submit option
[  170.960118][T13918] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  170.975506][   T30] kauditd_printk_skb: 172 callbacks suppressed
[  170.975522][   T30] audit: type=1400 audit(1742244141.022:4503): avc:  denied  { setattr } for  pid=13914 comm="syz.5.3933" name="file0" dev="loop5" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  171.004737][T13923] lo speed is unknown, defaulting to 1000
[  171.019192][   T30] audit: type=1400 audit(1742244141.022:4504): avc:  denied  { remove_name } for  pid=13914 comm="syz.5.3933" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  171.022451][T13923] lo speed is unknown, defaulting to 1000
[  171.041978][   T30] audit: type=1400 audit(1742244141.022:4505): avc:  denied  { rename } for  pid=13914 comm="syz.5.3933" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  171.070340][   T30] audit: type=1400 audit(1742244141.022:4506): avc:  denied  { unlink } for  pid=13914 comm="syz.5.3933" name="file0" dev="loop5" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  171.071255][T13923] lo speed is unknown, defaulting to 1000
[  171.110076][T10489] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  171.146827][   T30] audit: type=1400 audit(1742244141.192:4507): avc:  denied  { append } for  pid=13933 comm="syz.5.3939" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  171.200627][T13923] infiniband s
z1: set active
[  171.205379][T13923] infiniband s
z1: added lo
[  171.210055][T13648] lo speed is unknown, defaulting to 1000
[  171.220744][T13938] loop5: detected capacity change from 0 to 512
[  171.259106][T13938] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.3941: corrupted in-inode xattr: invalid ea_ino
[  171.259310][T13923] RDS/IB: s
z1: added
[  171.283857][T13923] smc: adding ib device s
z1 with port count 1
[  171.291921][T13923] smc:    ib device s
z1 port 1 has pnetid 
[  171.297955][T13648] lo speed is unknown, defaulting to 1000
[  171.309828][T13938] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.3941: couldn't read orphan inode 15 (err -117)
[  171.332305][T13938] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  171.344790][T13923] lo speed is unknown, defaulting to 1000
[  171.367882][   T30] audit: type=1400 audit(1742244141.412:4508): avc:  denied  { read append open } for  pid=13935 comm="syz.5.3941" path="/243/bus/file0/blkio.bfq.avg_queue_size" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  171.419527][T13923] lo speed is unknown, defaulting to 1000
[  171.453503][T10489] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  171.467685][T13947] veth0_macvtap: left promiscuous mode
[  171.479831][T13947] macvtap0: entered promiscuous mode
[  171.496994][T13951] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3946'.
[  171.508312][T13947] veth0_macvtap: entered promiscuous mode
[  171.515451][T13947] team0: Device macvtap0 failed to register rx_handler
[  171.534065][T13947] veth0_macvtap: left promiscuous mode
[  171.550232][T13923] lo speed is unknown, defaulting to 1000
[  171.617485][T13923] lo speed is unknown, defaulting to 1000
[  171.676093][T13923] lo speed is unknown, defaulting to 1000
[  171.687951][ T4677] kmmpd-loop1: attempt to access beyond end of device
[  171.687951][ T4677] loop1: rw=14337, sector=64, nr_sectors = 8 limit=64
[  171.701616][ T4677] Buffer I/O error on dev loop1, logical block 8, lost sync page write
[  171.760864][T13923] lo speed is unknown, defaulting to 1000
[  171.780197][T13970] serio: Serial port ptm2
[  171.820253][T13923] lo speed is unknown, defaulting to 1000
[  171.848075][T13977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  171.868223][T13977] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  171.923548][T13986] SELinux: security_context_str_to_sid (�-�Xܘ7.H\��%�u@
) failed with errno=-22
[  171.954138][   T30] audit: type=1326 audit(1742244142.002:4509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13987 comm="syz.2.3964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d24cad169 code=0x7ffc0000
[  171.978460][   T30] audit: type=1326 audit(1742244142.002:4510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13987 comm="syz.2.3964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d24cad169 code=0x7ffc0000
[  172.002159][   T30] audit: type=1326 audit(1742244142.002:4511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13987 comm="syz.2.3964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4d24cad169 code=0x7ffc0000
[  172.025822][   T30] audit: type=1326 audit(1742244142.002:4512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13987 comm="syz.2.3964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d24cad169 code=0x7ffc0000
[  172.482471][T14012] rdma_rxe: rxe_newlink: failed to add lo
[  172.769837][T14040] syzkaller0: entered promiscuous mode
[  172.775383][T14040] syzkaller0: entered allmulticast mode
[  172.812948][T14044] rdma_rxe: rxe_newlink: failed to add lo
[  172.839188][T14049] lo speed is unknown, defaulting to 1000
[  172.844999][T14049] lo speed is unknown, defaulting to 1000
[  172.850994][T14049] lo speed is unknown, defaulting to 1000
[  172.857445][T14049] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  172.867534][T14049] lo speed is unknown, defaulting to 1000
[  172.873997][T14049] lo speed is unknown, defaulting to 1000
[  172.880156][T14049] lo speed is unknown, defaulting to 1000
[  172.886391][T14049] lo speed is unknown, defaulting to 1000
[  172.893065][T14049] lo speed is unknown, defaulting to 1000
[  172.899149][T14049] lo speed is unknown, defaulting to 1000
[  172.905253][T14049] lo speed is unknown, defaulting to 1000
[  172.933540][T14054] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3991'.
[  173.100993][T14072] netem: change failed
[  173.222662][T14094] siw: device registration error -23
[  173.316468][T14100] bridge0: port 2(bridge_slave_1) entered disabled state
[  173.323787][T14100] bridge0: port 1(bridge_slave_0) entered disabled state
[  173.374670][T14100] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  173.385139][T14100] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  173.431967][T14100] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  173.440591][T14100] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  173.449116][T14100] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  173.457773][T14100] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  173.466460][T14100] geneve2: left promiscuous mode
[  173.471468][T14100] geneve2: left allmulticast mode
[  173.477487][T14100] ip6gre1: left allmulticast mode
[  173.483970][T13648] lo speed is unknown, defaulting to 1000
[  173.507549][T13648] lo speed is unknown, defaulting to 1000
[  173.719571][T14134] loop6: detected capacity change from 0 to 1024
[  173.734055][T14134] EXT4-fs: Ignoring removed orlov option
[  173.739818][T14134] EXT4-fs: Ignoring removed nomblk_io_submit option
[  173.772041][T14134] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  173.833882][T12436] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  173.921786][T14141] loop6: detected capacity change from 0 to 256
[  174.270113][T14164] loop7: detected capacity change from 0 to 1024
[  174.278095][T14164] EXT4-fs: Ignoring removed nomblk_io_submit option
[  174.290297][T14164] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  174.325306][T14174] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3)
[  174.331895][T14174] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  174.339422][T14174] vhci_hcd vhci_hcd.0: Device attached
[  174.409482][T14178] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(6)
[  174.416045][T14178] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  174.423640][T14178] vhci_hcd vhci_hcd.0: Device attached
[  174.434377][T14181] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  174.456759][T14174] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(5)
[  174.463399][T14174] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  174.470897][T14174] vhci_hcd vhci_hcd.0: Device attached
[  174.483431][T12694] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  174.518517][T14174] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(12)
[  174.525280][T14174] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  174.532942][T14174] vhci_hcd vhci_hcd.0: Device attached
[  174.563263][T14178] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  174.587946][T13648] vhci_hcd: vhci_device speed not set
[  174.598109][T14174] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  174.612355][T14192] loop7: detected capacity change from 0 to 1024
[  174.646939][T14192] EXT4-fs: Ignoring removed orlov option
[  174.652689][T13648] usb 3-1: new high-speed USB device number 2 using vhci_hcd
[  174.652708][T14192] EXT4-fs: Ignoring removed nomblk_io_submit option
[  174.666835][T14174] vhci_hcd vhci_hcd.0: pdev(1) rhport(7) sockfd(17)
[  174.673470][T14174] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  174.681098][T14174] vhci_hcd vhci_hcd.0: Device attached
[  174.690047][T14183] vhci_hcd: connection closed
[  174.690086][T14175] vhci_hcd: connection reset by peer
[  174.690275][T14179] vhci_hcd: connection closed
[  174.696929][T14194] vhci_hcd: connection closed
[  174.702367][T14186] vhci_hcd: connection closed
[  174.705035][ T4300] vhci_hcd: stop threads
[  174.718927][ T4300] vhci_hcd: release socket
[  174.723399][ T4300] vhci_hcd: disconnect device
[  174.728826][ T4300] vhci_hcd: stop threads
[  174.733134][ T4300] vhci_hcd: release socket
[  174.737583][ T4300] vhci_hcd: disconnect device
[  174.745213][ T4300] vhci_hcd: stop threads
[  174.746555][T14192] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  174.749521][ T4300] vhci_hcd: release socket
[  174.749539][ T4300] vhci_hcd: disconnect device
[  174.755376][ T4300] vhci_hcd: stop threads
[  174.775142][ T4300] vhci_hcd: release socket
[  174.779663][ T4300] vhci_hcd: disconnect device
[  174.806574][ T4300] vhci_hcd: stop threads
[  174.811042][ T4300] vhci_hcd: release socket
[  174.815486][ T4300] vhci_hcd: disconnect device
[  174.825648][T14204] serio: Serial port ptm1
[  174.861268][T12694] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  175.081544][T14227] bond1: (slave dummy0): Releasing backup interface
[  175.093730][T14227] bridge_slave_0: left allmulticast mode
[  175.099500][T14227] bridge_slave_0: left promiscuous mode
[  175.105206][T14227] bridge0: port 1(bridge_slave_0) entered disabled state
[  175.131499][T14231] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4061'.
[  175.146092][T14227] bridge_slave_1: left allmulticast mode
[  175.151946][T14227] bridge_slave_1: left promiscuous mode
[  175.157709][T14227] bridge0: port 2(bridge_slave_1) entered disabled state
[  175.179807][T14227] bond0: (slave bond_slave_0): Releasing backup interface
[  175.190425][T14227] batman_adv: batadv0: Removing interface: batadv_slave_0
[  175.203129][T14227] batman_adv: batadv0: Removing interface: batadv_slave_1
[  175.223263][T14227] bond2: (slave geneve2): Releasing active interface
[  175.250476][T14236] loop6: detected capacity change from 0 to 512
[  175.285667][T14236] EXT4-fs: Ignoring removed i_version option
[  175.291841][T14236] EXT4-fs: Ignoring removed mblk_io_submit option
[  175.346493][T14236] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  175.367873][T14236] EXT4-fs (loop6): 1 truncate cleaned up
[  175.375992][T14236] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  175.437924][T12436] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  175.695427][T14271] pim6reg1: entered promiscuous mode
[  175.700861][T14271] pim6reg1: entered allmulticast mode
[  175.810175][T14282] ref_ctr_offset mismatch. inode: 0x2b1 offset: 0x7 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0
[  175.883573][T14269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  175.893705][T14269] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  175.906572][T14297] loop6: detected capacity change from 0 to 512
[  175.919333][T14297] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  175.959269][T14297] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  175.992757][T14297] ext4 filesystem being mounted at /117/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  175.993558][T14308] netlink: 'syz.7.4093': attribute type 1 has an invalid length.
[  176.011303][T14308] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4093'.
[  176.076410][T12436] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  176.157408][T14322] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  176.165386][T14322] batman_adv: batadv0: Removing interface: batadv_slave_0
[  176.177333][T14322] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  176.185014][T14322] batman_adv: batadv0: Removing interface: batadv_slave_1
[  176.205291][T14324] loop5: detected capacity change from 0 to 128
[  176.230001][T14324] loop5: detected capacity change from 0 to 512
[  176.265495][T14324] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  176.280494][T14324] ext4 filesystem being mounted at /275/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  176.298948][   T30] kauditd_printk_skb: 100 callbacks suppressed
[  176.298966][   T30] audit: type=1400 audit(1742244146.352:4613): avc:  denied  { create } for  pid=14329 comm="syz.6.4103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  176.302178][T14324] EXT4-fs (loop5): resizing filesystem from 128 to 1 blocks
[  176.308659][   T30] audit: type=1400 audit(1742244146.352:4614): avc:  denied  { write } for  pid=14323 comm="syz.5.4101" path="/275/file0/bus" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  176.324856][T14324] EXT4-fs warning (device loop5): ext4_resize_fs:2042: can't shrink FS - resize aborted
[  176.332454][   T30] audit: type=1400 audit(1742244146.352:4615): avc:  denied  { mounton } for  pid=14323 comm="syz.5.4101" path="/275/file0/bus" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  176.411582][   T30] audit: type=1400 audit(1742244146.462:4616): avc:  denied  { bind } for  pid=14329 comm="syz.6.4103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  176.432631][T10489] Quota error (device loop5): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8
[  176.450208][T10489] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota
[  176.451685][   T30] audit: type=1400 audit(1742244146.462:4617): avc:  denied  { listen } for  pid=14329 comm="syz.6.4103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  176.480281][T10489] EXT4-fs error (device loop5): ext4_acquire_dquot:6927: comm syz-executor: Failed to acquire dquot type 0
[  176.492500][   T30] audit: type=1400 audit(1742244146.482:4618): avc:  denied  { rmdir } for  pid=10489 comm="syz-executor" name="lost+found" dev="loop5" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  176.574585][T14338] pim6reg1: entered promiscuous mode
[  176.580068][T14338] pim6reg1: entered allmulticast mode
[  176.729354][ T4677] kmmpd-loop1: attempt to access beyond end of device
[  176.729354][ T4677] loop1: rw=14337, sector=64, nr_sectors = 8 limit=64
[  176.742978][ T4677] Buffer I/O error on dev loop1, logical block 8, lost sync page write
[  176.762181][T14352] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4122'.
[  176.840120][T12291] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  176.949790][   T30] audit: type=1400 audit(1742244147.002:4619): avc:  denied  { write } for  pid=14362 comm="syz.2.4116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  177.129403][T14372] lo speed is unknown, defaulting to 1000
[  177.169899][ T4308] bridge_slave_1: left allmulticast mode
[  177.175645][ T4308] bridge_slave_1: left promiscuous mode
[  177.181381][ T4308] bridge0: port 2(bridge_slave_1) entered disabled state
[  177.201409][ T4308] bridge_slave_0: left allmulticast mode
[  177.207251][ T4308] bridge_slave_0: left promiscuous mode
[  177.213068][ T4308] bridge0: port 1(bridge_slave_0) entered disabled state
[  177.280279][ T4308] bond0 (unregistering): (slave bridge0): Releasing backup interface
[  177.361131][ T4308] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  177.377780][ T4308] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  177.399805][ T4308] bond0 (unregistering): Released all slaves
[  177.425368][T14372] lo speed is unknown, defaulting to 1000
[  177.433843][   T30] audit: type=1326 audit(1742244147.482:4620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14389 comm="syz.2.4125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d24cad169 code=0x7ffc0000
[  177.533498][ T4308] hsr_slave_0: left promiscuous mode
[  177.540991][ T4308] hsr_slave_1: left promiscuous mode
[  177.546746][ T4308] batman_adv: batadv0: Removing interface: batadv_slave_0
[  177.549431][T14394] loop7: detected capacity change from 0 to 256
[  177.560921][ T4308] batman_adv: batadv0: Removing interface: batadv_slave_1
[  177.644004][T14402] rdma_rxe: rxe_newlink: failed to add bond0
[  177.650711][ T4308] team0 (unregistering): Port device team_slave_1 removed
[  177.657016][T14402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  177.667759][T14402] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  177.676343][ T4308] team0 (unregistering): Port device team_slave_0 removed
[  177.712304][T14406] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4133'.
[  177.792518][T14402] lo speed is unknown, defaulting to 1000
[  177.810314][T14372] chnl_net:caif_netlink_parms(): no params data found
[  177.882009][T14402] lo speed is unknown, defaulting to 1000
[  177.967672][T14372] bridge0: port 1(bridge_slave_0) entered blocking state
[  177.975017][T14372] bridge0: port 1(bridge_slave_0) entered disabled state
[  178.001186][T14372] bridge_slave_0: entered allmulticast mode
[  178.015349][T14372] bridge_slave_0: entered promiscuous mode
[  178.072433][T14372] bridge0: port 2(bridge_slave_1) entered blocking state
[  178.079750][T14372] bridge0: port 2(bridge_slave_1) entered disabled state
[  178.088553][T14372] bridge_slave_1: entered allmulticast mode
[  178.095227][T14372] bridge_slave_1: entered promiscuous mode
[  178.141502][T14372] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  178.152260][ T4308] IPVS: stop unused estimator thread 0...
[  178.185138][T14372] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  178.236942][T14372] team0: Port device team_slave_0 added
[  178.245970][T14432] sd 0:0:1:0: device reset
[  178.251216][T14372] team0: Port device team_slave_1 added
[  178.281413][T14372] batman_adv: batadv0: Adding interface: batadv_slave_0
[  178.288445][T14372] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  178.314530][T14372] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  178.329815][T14372] batman_adv: batadv0: Adding interface: batadv_slave_1
[  178.336842][T14372] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  178.363012][T14372] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  178.427487][T14372] hsr_slave_0: entered promiscuous mode
[  178.434868][T14443] program syz.2.4147 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  178.444814][T14372] hsr_slave_1: entered promiscuous mode
[  178.452215][T14372] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  178.460031][T14443] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  178.468823][T14383] syz.1.4121 (14383) used greatest stack depth: 6176 bytes left
[  178.469853][T14372] Cannot create hsr debugfs directory
[  178.548650][T14453] netlink: 96 bytes leftover after parsing attributes in process `syz.6.4150'.
[  178.568051][T14455] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4153'.
[  178.591287][T14459] loop6: detected capacity change from 0 to 128
[  178.648418][T14372] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  178.670725][T14372] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  178.689965][T14372] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  178.700211][T14372] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  178.708898][T14469] netlink: 'syz.2.4161': attribute type 9 has an invalid length.
[  178.716870][T14469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4161'.
[  178.725158][T14372] bridge0: port 2(bridge_slave_1) entered blocking state
[  178.732930][T14372] bridge0: port 2(bridge_slave_1) entered forwarding state
[  178.740271][T14372] bridge0: port 1(bridge_slave_0) entered blocking state
[  178.747420][T14372] bridge0: port 1(bridge_slave_0) entered forwarding state
[  178.793223][T14372] 8021q: adding VLAN 0 to HW filter on device bond0
[  178.820876][ T4314] bridge0: port 1(bridge_slave_0) entered disabled state
[  178.837191][ T4314] bridge0: port 2(bridge_slave_1) entered disabled state
[  178.882719][T14491] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4171'.
[  178.903321][T14372] 8021q: adding VLAN 0 to HW filter on device team0
[  178.920946][ T4308] bridge0: port 1(bridge_slave_0) entered blocking state
[  178.928108][ T4308] bridge0: port 1(bridge_slave_0) entered forwarding state
[  178.939444][ T4287] bridge0: port 2(bridge_slave_1) entered blocking state
[  178.946579][ T4287] bridge0: port 2(bridge_slave_1) entered forwarding state
[  178.977220][T14496] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  178.990825][T14496] vhci_hcd: default hub control req: 2314 v0008 i0002 l0
[  179.025452][T14372] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  179.069325][T14506] loop7: detected capacity change from 0 to 128
[  179.134264][T14372] 8021q: adding VLAN 0 to HW filter on device batadv0
[  179.261346][T14372] veth0_vlan: entered promiscuous mode
[  179.271513][T14372] veth1_vlan: entered promiscuous mode
[  179.290601][T14372] veth0_macvtap: entered promiscuous mode
[  179.300244][T14372] veth1_macvtap: entered promiscuous mode
[  179.311823][T14372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  179.322356][T14372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  179.332831][T14372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  179.343419][T14372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  179.353348][T14372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  179.363805][T14372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  179.374908][T14372] batman_adv: batadv0: Interface activated: batadv_slave_0
[  179.386266][T14372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  179.396947][T14372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  179.406875][T14372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  179.417440][T14372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  179.427370][T14372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  179.437882][T14372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  179.448766][T14372] batman_adv: batadv0: Interface activated: batadv_slave_1
[  179.457215][T14372] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  179.466105][T14372] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  179.474932][T14372] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  179.483741][T14372] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  179.757875][T13648] vhci_hcd: vhci_device speed not set
[  179.967674][T14582] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[  179.976096][T14583] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4202'.
[  180.019765][T14589] binfmt_misc: register: failed to install interpreter file ./file0
[  180.054338][T14591] vlan2: entered allmulticast mode
[  180.272193][T14623] SELinux:  Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped).
[  180.520149][T14636] loop8: detected capacity change from 0 to 128
[  180.856150][T14654] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4233'.
[  181.139968][T14664] geneve0: entered allmulticast mode
[  181.410983][T14675] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4242'.
[  181.420148][T14675] netlink: 'syz.6.4242': attribute type 30 has an invalid length.
[  181.434103][T14675] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  181.442959][T14675] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  181.451776][T14675] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  181.461138][T14675] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  181.502488][T14680] hub 9-0:1.0: USB hub found
[  181.509079][T14680] hub 9-0:1.0: 8 ports detected
[  181.568548][T14684] loop6: detected capacity change from 0 to 1024
[  181.605646][T14684] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  181.621611][T14684] ext4 filesystem being mounted at /152/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  181.636068][T14689] loop8: detected capacity change from 0 to 1024
[  181.654354][T14689] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  181.662343][T14684] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, 
[  181.665329][T14689] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  181.666777][T14689] JBD2: no valid journal superblock found
[  181.673732][T14684] block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  181.683312][T14689] EXT4-fs (loop8): Could not load journal inode
[  181.689594][T14684] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28
[  181.716865][T14684] EXT4-fs (loop6): This should not happen!! Data will be lost
[  181.716865][T14684] 
[  181.726616][T14684] EXT4-fs (loop6): Total free blocks count 0
[  181.729133][   T30] kauditd_printk_skb: 92 callbacks suppressed
[  181.729153][   T30] audit: type=1400 audit(1742244151.752:4713): avc:  denied  { ioctl } for  pid=14683 comm="syz.6.4246" path="/152/file1/file1" dev="loop6" ino=15 ioctlcmd=0x6628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  181.732729][T14684] EXT4-fs (loop6): Free/Dirty block details
[  181.769443][T14684] EXT4-fs (loop6): free_blocks=4293918720
[  181.775184][T14684] EXT4-fs (loop6): dirty_blocks=64
[  181.780391][T14684] EXT4-fs (loop6): Block reservation details
[  181.786404][T14684] EXT4-fs (loop6): i_reserved_data_blocks=4
[  181.795889][ T4677] kmmpd-loop1: attempt to access beyond end of device
[  181.795889][ T4677] loop1: rw=14337, sector=64, nr_sectors = 8 limit=64
[  181.809484][ T4677] Buffer I/O error on dev loop1, logical block 8, lost sync page write
[  181.844080][T14689] SELinux: security_context_str_to_sid (�-�Xܘ7.H\��%�ue�…W���Fct̝�3�L;-n�����9�;=�B�9g�=g&��K�"�D��$b���Y�X�;��:ݒ��^�-�$��<>���'�=��7I�.��wn����ju�J����pybn��s��Ξ��.) failed with errno=-22
[  181.853911][T14699] pim6reg1: entered promiscuous mode
[  181.870286][T14699] pim6reg1: entered allmulticast mode
[  181.877939][   T30] audit: type=1400 audit(1742244151.872:4714): avc:  denied  { connect } for  pid=14693 comm="syz.7.4249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  181.928287][T12436] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  181.961782][   T30] audit: type=1400 audit(1742244152.002:4715): avc:  denied  { setopt } for  pid=14702 comm="syz.1.4254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  181.984049][   T30] audit: type=1326 audit(1742244152.032:4716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14704 comm="syz.8.4255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b453dd169 code=0x7ffc0000
[  182.007733][   T30] audit: type=1326 audit(1742244152.032:4717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14704 comm="syz.8.4255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b453dd169 code=0x7ffc0000
[  182.035267][   T30] audit: type=1326 audit(1742244152.062:4718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14704 comm="syz.8.4255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6b453dd169 code=0x7ffc0000
[  182.058949][   T30] audit: type=1326 audit(1742244152.062:4719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14704 comm="syz.8.4255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b453dd169 code=0x7ffc0000
[  182.082487][   T30] audit: type=1326 audit(1742244152.062:4720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14704 comm="syz.8.4255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6b453dd169 code=0x7ffc0000
[  182.106365][   T30] audit: type=1326 audit(1742244152.062:4721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14704 comm="syz.8.4255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b453dd169 code=0x7ffc0000
[  182.130290][   T30] audit: type=1326 audit(1742244152.062:4722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14704 comm="syz.8.4255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6b453dd169 code=0x7ffc0000
[  182.359143][T14729] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  182.374865][T14729] vhci_hcd: default hub control req: 2314 v0008 i0002 l0
[  182.931255][T14755] veth1_macvtap: left promiscuous mode
[  182.948492][T14755] macsec0: entered promiscuous mode
[  182.998879][T14761] pim6reg: entered allmulticast mode
[  183.006610][T14761] pim6reg: left allmulticast mode
[  183.162007][T14778] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=14778 comm=syz.1.4286
[  183.174746][T14778] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=14778 comm=syz.1.4286
[  183.339203][T14791] veth1_macvtap: entered promiscuous mode
[  183.354937][T14791] macsec0: entered allmulticast mode
[  183.360335][T14791] veth1_macvtap: entered allmulticast mode
[  183.418932][T14799] loop6: detected capacity change from 0 to 128
[  183.442384][T14799] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  183.479721][T14805] netlink: 'syz.7.4298': attribute type 5 has an invalid length.
[  183.494524][T14799] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  183.554564][ T4292] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  183.751408][T14836] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4312'.
[  183.785706][T14836] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  183.999450][T14864] block device autoloading is deprecated and will be removed.
[  184.028028][T14867] loop8: detected capacity change from 0 to 512
[  184.044766][T14867] EXT4-fs (loop8): orphan cleanup on readonly fs
[  184.051911][T14867] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.4327: bg 0: block 248: padding at end of block bitmap is not set
[  184.069759][T14867] EXT4-fs error (device loop8): ext4_acquire_dquot:6927: comm syz.8.4327: Failed to acquire dquot type 1
[  184.082971][T14867] EXT4-fs (loop8): 1 truncate cleaned up
[  184.090005][T14867] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  184.200414][T14372] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  184.236933][T14888] loop7: detected capacity change from 0 to 1024
[  184.253768][T14888] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  184.291913][T14888] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback.
[  184.376771][T12694] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  184.557351][T13649] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0
[  184.564842][T13649] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0
[  184.572491][T13649] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0
[  184.631583][T13649] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0
[  184.639172][T13649] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0
[  184.646665][T13649] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0
[  184.654416][T13649] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0
[  184.662073][T13649] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0
[  184.669762][T13649] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0
[  184.677309][T13649] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0
[  184.684794][T13649] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0
[  184.692253][T13649] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0
[  184.699705][T13649] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0
[  184.749416][T13649] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0
[  184.757155][T13649] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0
[  184.764683][T13649] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0
[  184.772481][T13649] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0
[  184.779947][T13649] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0
[  184.787429][T13649] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0
[  184.794914][T13649] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0
[  184.802417][T13649] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0
[  184.810371][T13649] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0
[  184.818042][T13649] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0
[  184.825722][T13649] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0
[  184.833224][T13649] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0
[  184.840777][T13649] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0
[  184.848285][T13649] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0
[  184.855775][T13649] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0
[  184.936039][T14950] netlink: 'syz.1.4361': attribute type 10 has an invalid length.
[  184.954677][T13649] hid-generic 0000:0000:0000.0012: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  185.047265][T14961] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4366'.
[  185.123245][T14967] loop8: detected capacity change from 0 to 1024
[  185.134829][T14967] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  185.144872][T14967] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  185.170150][T14967] EXT4-fs (loop8): revision level too high, forcing read-only mode
[  185.188003][T14967] EXT4-fs (loop8): orphan cleanup on readonly fs
[  185.197727][T14967] EXT4-fs error (device loop8): ext4_ext_check_inode:524: inode #3: comm syz.8.4370: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 2(4), depth 0(0)
[  185.235096][T14967] EXT4-fs (loop8): Remounting filesystem read-only
[  185.241819][T14967] EXT4-fs warning (device loop8): ext4_enable_quotas:7145: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  185.256510][T14967] EXT4-fs (loop8): Cannot turn on quotas: error -117
[  185.263822][T14967] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  185.276264][T14967] SELinux: (dev loop8, type ext4) getxattr errno 5
[  185.283262][T14967] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  185.302222][T14967] SELinux:  Context system_u:object_r:ssh_exec_t:s0 is not valid (left unmapped).
[  185.575526][T15003] netlink: 268 bytes leftover after parsing attributes in process `syz.8.4385'.
[  185.721882][T15017] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  185.752244][T15017] vhci_hcd: default hub control req: 2316 v0008 i0002 l0
[  185.830501][T15027] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4396'.
[  185.876171][T15030] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4398'.
[  185.877970][T15028] netlink: 68 bytes leftover after parsing attributes in process `syz.8.4397'.
[  186.267620][T15069] sd 0:0:1:0: device reset
[  186.298810][T15072] loop8: detected capacity change from 0 to 1024
[  186.324689][T15072] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  186.347674][T15072] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback.
[  186.391519][T14372] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  186.554913][T15100] dvmrp0: entered allmulticast mode
[  186.563712][T15100] dvmrp0: left allmulticast mode
[  186.699214][T15113] loop6: detected capacity change from 0 to 512
[  186.707191][T15113] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a856c098, mo2=0002]
[  186.715912][T15113] System zones: 1-12
[  186.725498][T15113] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2240: inode #15: comm syz.6.4433: corrupted in-inode xattr: invalid ea_ino
[  186.744991][T15113] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.4433: couldn't read orphan inode 15 (err -117)
[  186.757963][T15113] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  186.807929][ T4677] kmmpd-loop1: attempt to access beyond end of device
[  186.807929][ T4677] loop1: rw=14337, sector=64, nr_sectors = 8 limit=64
[  186.821443][ T4677] Buffer I/O error on dev loop1, logical block 8, lost sync page write
[  186.906682][T12436] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  186.962377][T15136] loop6: detected capacity change from 0 to 1024
[  186.993264][T15136] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  187.117167][T15150] program syz.1.4450 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  187.139735][T15150] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  187.260213][T15166] +}[@: attempt to access beyond end of device
[  187.260213][T15166] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  187.276617][T15168] netlink: 132 bytes leftover after parsing attributes in process `syz.7.4459'.
[  187.382074][T15179] xt_hashlimit: size too large, truncated to 1048576
[  187.608463][T15196] loop7: detected capacity change from 0 to 512
[  187.632192][T15196] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a856c098, mo2=0002]
[  187.654151][T15196] System zones: 1-12
[  187.658991][T15196] EXT4-fs error (device loop7): ext4_xattr_ibody_find:2240: inode #15: comm syz.7.4470: corrupted in-inode xattr: invalid ea_ino
[  187.672753][T15196] EXT4-fs error (device loop7): ext4_orphan_get:1394: comm syz.7.4470: couldn't read orphan inode 15 (err -117)
[  187.685689][T15196] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  187.724053][   T30] kauditd_printk_skb: 233 callbacks suppressed
[  187.724073][   T30] audit: type=1326 audit(1742244157.772:4954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15200 comm="syz.2.4472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d24cad169 code=0x7ffc0000
[  187.783972][T15204] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4473'.
[  187.843851][T12694] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  187.859799][   T30] audit: type=1326 audit(1742244157.772:4955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15200 comm="syz.2.4472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d24cad169 code=0x7ffc0000
[  187.883675][   T30] audit: type=1326 audit(1742244157.812:4956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15200 comm="syz.2.4472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f4d24cad169 code=0x7ffc0000
[  187.907241][   T30] audit: type=1326 audit(1742244157.812:4957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15200 comm="syz.2.4472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d24cad169 code=0x7ffc0000
[  187.930767][   T30] audit: type=1326 audit(1742244157.812:4958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15200 comm="syz.2.4472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d24cad169 code=0x7ffc0000
[  187.954462][   T30] audit: type=1326 audit(1742244157.822:4959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15200 comm="syz.2.4472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f4d24cad169 code=0x7ffc0000
[  187.978109][   T30] audit: type=1326 audit(1742244157.822:4960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15200 comm="syz.2.4472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d24cad169 code=0x7ffc0000
[  188.001726][   T30] audit: type=1326 audit(1742244157.822:4961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15200 comm="syz.2.4472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d24cad169 code=0x7ffc0000
[  188.025314][   T30] audit: type=1326 audit(1742244157.822:4962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15200 comm="syz.2.4472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4d24c49359 code=0x7ffc0000
[  188.049810][   T30] audit: type=1326 audit(1742244157.822:4963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15200 comm="syz.2.4472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d24cad169 code=0x7ffc0000
[  188.074768][T12436] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  188.173055][T15228] netlink: 664 bytes leftover after parsing attributes in process `syz.2.4483'.
[  188.463610][T15258] rdma_op ffff888117836580 conn xmit_rdma 0000000000000000
[  188.634318][T15252] lo speed is unknown, defaulting to 1000
[  188.668174][T15252] lo speed is unknown, defaulting to 1000
[  189.018547][T15286] lo speed is unknown, defaulting to 1000
[  189.066096][T15286] lo speed is unknown, defaulting to 1000
[  189.162041][T15302] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4516'.
[  189.290557][T15313] hub 9-0:1.0: USB hub found
[  189.295329][T15313] hub 9-0:1.0: 8 ports detected
[  189.714665][T15319] SELinux: failed to load policy
[  189.758660][T15322] loop8: detected capacity change from 0 to 256
[  189.780924][T15322] FAT-fs (loop8): bogus number of FAT sectors
[  189.787085][T15322] FAT-fs (loop8): Can't find a valid FAT filesystem
[  189.865338][T15330] lo speed is unknown, defaulting to 1000
[  189.913292][T15330] lo speed is unknown, defaulting to 1000
[  190.160163][T13639] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0
[  190.167645][T13639] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0
[  190.175143][T13639] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0
[  190.183915][T13639] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0
[  190.191495][T13639] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0
[  190.199184][T13639] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0
[  190.206614][T13639] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0
[  190.214144][T13639] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0
[  190.221722][T13639] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0
[  190.229167][T13639] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0
[  190.236608][T13639] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0
[  190.244047][T13639] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0
[  190.251491][T13639] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0
[  190.258934][T13639] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0
[  190.266406][T13639] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0
[  190.273906][T13639] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0
[  190.281400][T13639] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0
[  190.288835][T13639] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0
[  190.296272][T13639] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0
[  190.303704][T13639] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0
[  190.311216][T13639] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0
[  190.318653][T13639] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0
[  190.326092][T13639] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0
[  190.333586][T13639] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0
[  190.341034][T13639] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0
[  190.348547][T13639] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0
[  190.355959][T13639] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0
[  190.363366][T13639] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0
[  190.371432][T13639] hid-generic 0000:0000:0000.0013: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  190.426556][T15364] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4541'.
[  190.436571][T15364] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4541'.
[  190.596665][T15379] loop8: detected capacity change from 0 to 512
[  190.605155][T15379] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a856c098, mo2=0002]
[  190.613304][T15379] System zones: 1-12
[  190.617685][T15379] EXT4-fs error (device loop8): ext4_xattr_ibody_find:2240: inode #15: comm syz.8.4549: corrupted in-inode xattr: invalid ea_ino
[  190.631462][T15379] EXT4-fs error (device loop8): ext4_orphan_get:1394: comm syz.8.4549: couldn't read orphan inode 15 (err -117)
[  190.644252][T15379] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  190.759956][T15388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  190.783413][T15388] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  190.854559][T14372] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  191.190293][T15416] random: crng reseeded on system resumption
[  191.331219][T15417] lo speed is unknown, defaulting to 1000
[  191.429859][T15417] lo speed is unknown, defaulting to 1000
[  191.848023][ T4677] kmmpd-loop1: attempt to access beyond end of device
[  191.848023][ T4677] loop1: rw=14337, sector=64, nr_sectors = 8 limit=64
[  191.861534][ T4677] Buffer I/O error on dev loop1, logical block 8, lost sync page write
[  192.094502][T15438] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4574'.
[  192.786734][T15476] all: renamed from bridge_slave_0
[  192.794726][T15478] loop8: detected capacity change from 0 to 512
[  192.805200][T15478] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  192.819323][T15478] EXT4-fs (loop8): 1 truncate cleaned up
[  192.825408][T15478] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  192.961440][T14372] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  193.038607][   T30] kauditd_printk_skb: 63 callbacks suppressed
[  193.038627][   T30] audit: type=1326 audit(1742244163.092:5027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15492 comm="syz.8.4595" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6b453dd169 code=0x0
[  193.510439][T15521] netlink: 96 bytes leftover after parsing attributes in process `syz.6.4618'.
[  193.563009][T15526] loop7: detected capacity change from 0 to 512
[  193.587293][T15526] EXT4-fs (loop7): orphan cleanup on readonly fs
[  193.600970][T15526] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.4609: bg 0: block 248: padding at end of block bitmap is not set
[  193.629277][T15531] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4612'.
[  193.638924][T15526] Quota error (device loop7): write_blk: dquota write failed
[  193.646380][T15526] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota
[  193.656152][T15531] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4612'.
[  193.656381][T15526] EXT4-fs error (device loop7): ext4_acquire_dquot:6927: comm syz.7.4609: Failed to acquire dquot type 1
[  193.706295][T15526] EXT4-fs (loop7): 1 truncate cleaned up
[  193.713922][T15526] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  193.747926][   T30] audit: type=1326 audit(1742244163.792:5028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15534 comm="syz.2.4615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d24cad169 code=0x7ffc0000
[  193.771658][   T30] audit: type=1326 audit(1742244163.792:5029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15534 comm="syz.2.4615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d24cad169 code=0x7ffc0000
[  193.795249][   T30] audit: type=1326 audit(1742244163.792:5030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15534 comm="syz.2.4615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4d24cad169 code=0x7ffc0000
[  193.818826][   T30] audit: type=1326 audit(1742244163.792:5031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15534 comm="syz.2.4615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d24cad169 code=0x7ffc0000
[  193.842471][   T30] audit: type=1326 audit(1742244163.792:5032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15534 comm="syz.2.4615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d24cad169 code=0x7ffc0000
[  193.866117][   T30] audit: type=1326 audit(1742244163.792:5033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15534 comm="syz.2.4615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f4d24cad169 code=0x7ffc0000
[  193.889537][   T30] audit: type=1326 audit(1742244163.792:5034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15534 comm="syz.2.4615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d24cad169 code=0x7ffc0000
[  193.976658][T12694] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  194.146571][T15565] loop7: detected capacity change from 0 to 2048
[  194.185848][T15575] netlink: 4 bytes leftover after parsing attributes in process `+}[@'.
[  194.202348][T15575] ipvlan2: entered promiscuous mode
[  194.223960][T15565]  loop7: p1 < > p3
[  194.234314][T15565] loop7: p3 size 134217728 extends beyond EOD, truncated
[  194.243935][T15582] netlink: 100 bytes leftover after parsing attributes in process `syz.1.4637'.
[  194.389354][T15602] all: renamed from bridge_slave_0 (while UP)
[  194.417061][T15603] loop6: detected capacity change from 0 to 2048
[  194.471183][T15603] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  194.558438][T12436] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  194.654631][T15625] wireguard0: entered promiscuous mode
[  194.660206][T15625] wireguard0: entered allmulticast mode
[  194.855249][T15647] SELinux: ebitmap: map size 1818583649 does not match my size 64 (high bit was 1836020326)
[  194.900402][T15647] SELinux: failed to load policy
[  195.082530][T15665] wireguard0: entered promiscuous mode
[  195.088090][T15665] wireguard0: entered allmulticast mode
[  195.267510][T15691] batadv_slave_1: entered promiscuous mode
[  195.280995][T15691] batadv_slave_1: left promiscuous mode
[  195.379292][T15689] netlink: 122 bytes leftover after parsing attributes in process `syz.6.4681'.
[  195.431048][T15701] netlink: 9 bytes leftover after parsing attributes in process `syz.7.4687'.
[  195.457309][T15701] gretap0: entered promiscuous mode
[  195.471355][T15701] netlink: 5 bytes leftover after parsing attributes in process `syz.7.4687'.
[  195.481394][T15701] 0�X��D: renamed from gretap0
[  195.492674][T15701] 0�X��D: left promiscuous mode
[  195.497584][T15701] 0�X��D: entered allmulticast mode
[  195.505186][T15701] A link change request failed with some changes committed already. Interface 
30�X��D may have been left with an inconsistent configuration, please check.
[  195.556255][T15714] loop7: detected capacity change from 0 to 128
[  195.573933][T15714] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  195.603640][T15714] ext4 filesystem being mounted at /240/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  195.730724][T12694] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  195.959091][T15732] netlink: 122 bytes leftover after parsing attributes in process `syz.7.4699'.
[  195.992225][T15741] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4712'.
[  196.042945][T15747] netlink: 'syz.8.4706': attribute type 2 has an invalid length.
[  196.050901][T15747] netlink: 'syz.8.4706': attribute type 8 has an invalid length.
[  196.105235][T15756] loop8: detected capacity change from 0 to 2048
[  196.131450][T15756] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  196.176621][T14372] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  196.388043][T15788] Falling back ldisc for ttyS3.
[  196.400466][T15791] lo speed is unknown, defaulting to 1000
[  196.472230][T15791] lo speed is unknown, defaulting to 1000
[  196.520471][T15805] loop9: detected capacity change from 0 to 7
[  196.527287][T15805] Buffer I/O error on dev loop9, logical block 0, async page read
[  196.536404][T15805] Buffer I/O error on dev loop9, logical block 0, async page read
[  196.544307][T15805]  loop9: unable to read partition table
[  196.551821][T15805] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dƤ����ݡ�����
[  196.551821][T15805] 
U�������) failed (rc=-5)
[  196.608417][T15812] netlink: 'syz.2.4741': attribute type 3 has an invalid length.
[  196.709753][T15818] wireguard0: entered promiscuous mode
[  196.715309][T15818] wireguard0: entered allmulticast mode
[  196.887877][ T4677] kmmpd-loop1: attempt to access beyond end of device
[  196.887877][ T4677] loop1: rw=14337, sector=64, nr_sectors = 8 limit=64
[  196.901330][ T4677] Buffer I/O error on dev loop1, logical block 8, lost sync page write
[  196.954543][T15837] only policy match revision 0 supported
[  196.954561][T15837] unable to load match
[  197.094903][T15843] pim6reg1: entered promiscuous mode
[  197.100358][T15843] pim6reg1: entered allmulticast mode
[  197.224223][T15853] wireguard0: entered promiscuous mode
[  197.229845][T15853] wireguard0: entered allmulticast mode
[  197.302381][T15869] wireguard0: entered promiscuous mode
[  197.308062][T15869] wireguard0: entered allmulticast mode
[  197.327518][T15862] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  197.702057][T15909] wireguard0: entered promiscuous mode
[  197.707766][T15909] wireguard0: entered allmulticast mode
[  198.089439][ T4336] bridge_slave_1: left allmulticast mode
[  198.095164][ T4336] bridge_slave_1: left promiscuous mode
[  198.101031][ T4336] bridge0: port 2(bridge_slave_1) entered disabled state
[  198.113376][ T4336] bridge_slave_0: left allmulticast mode
[  198.119267][ T4336] bridge_slave_0: left promiscuous mode
[  198.125154][ T4336] bridge0: port 1(bridge_slave_0) entered disabled state
[  198.140984][T15924] loop6: detected capacity change from 0 to 1024
[  198.148195][T15924] EXT4-fs: Ignoring removed mblk_io_submit option
[  198.165729][ T4336] bond1 (unregistering): (slave ip6gretap1): Releasing active interface
[  198.167228][T15924] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=f040c0ac, mo2=0002]
[  198.182466][T15924] System zones: 0-1, 3-36
[  198.188229][T15924] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  198.220390][T12436] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  198.239980][T15928] 9pnet: p9_errstr2errno: server reported unknown error 
[  198.270505][ T4336] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  198.280458][ T4336] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  198.290227][ T4336] bond0 (unregistering): Released all slaves
[  198.299194][ T4336] bond1 (unregistering): Released all slaves
[  198.326096][T15930] loop6: detected capacity change from 0 to 128
[  198.334419][T15930] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  198.347485][T15930] ext4 filesystem being mounted at /264/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  198.361403][   T30] kauditd_printk_skb: 115 callbacks suppressed
[  198.361459][   T30] audit: type=1400 audit(1742244168.412:5150): avc:  denied  { create } for  pid=15929 comm="syz.6.4783" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1
[  198.412377][   T30] audit: type=1400 audit(1742244168.412:5151): avc:  denied  { read } for  pid=15929 comm="syz.6.4783" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1
[  198.459540][T12436] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  198.493158][ T4336] hsr_slave_0: left promiscuous mode
[  198.499429][ T4336] hsr_slave_1: left promiscuous mode
[  198.505185][ T4336] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  198.512714][ T4336] batman_adv: batadv0: Removing interface: batadv_slave_0
[  198.520984][ T4336] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  198.528712][ T4336] batman_adv: batadv0: Removing interface: batadv_slave_1
[  198.579587][   T30] audit: type=1326 audit(1742244168.632:5152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15937 comm="syz.7.4787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200b46d169 code=0x7ffc0000
[  198.603231][   T30] audit: type=1326 audit(1742244168.632:5153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15937 comm="syz.7.4787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200b46d169 code=0x7ffc0000
[  198.627070][ T4336] veth0_macvtap: left promiscuous mode
[  198.638986][   T30] audit: type=1326 audit(1742244168.672:5154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15937 comm="syz.7.4787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f200b46d169 code=0x7ffc0000
[  198.662662][   T30] audit: type=1326 audit(1742244168.672:5155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15937 comm="syz.7.4787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200b46d169 code=0x7ffc0000
[  198.686209][   T30] audit: type=1326 audit(1742244168.672:5156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15937 comm="syz.7.4787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200b46d169 code=0x7ffc0000
[  198.709888][   T30] audit: type=1326 audit(1742244168.682:5157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15937 comm="syz.7.4787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f200b46d169 code=0x7ffc0000
[  198.733627][   T30] audit: type=1326 audit(1742244168.682:5158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15937 comm="syz.7.4787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200b46d169 code=0x7ffc0000
[  198.738609][ T4336] veth1_vlan: left promiscuous mode
[  198.757236][   T30] audit: type=1326 audit(1742244168.682:5159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15937 comm="syz.7.4787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200b46d169 code=0x7ffc0000
[  198.764039][ T4336] veth0_vlan: left promiscuous mode
[  198.854847][ T4336] team0 (unregistering): Port device team_slave_1 removed
[  198.867041][ T4336] team0 (unregistering): Port device team_slave_0 removed
[  199.138167][T13645] hid-generic 0000:0004:00FF.0014: unknown main item tag 0x0
[  199.145706][T13645] hid-generic 0000:0004:00FF.0014: unknown main item tag 0x0
[  199.153353][T13645] hid-generic 0000:0004:00FF.0014: unknown main item tag 0x0
[  199.160855][T13645] hid-generic 0000:0004:00FF.0014: unknown main item tag 0x0
[  199.168423][T13645] hid-generic 0000:0004:00FF.0014: unknown main item tag 0x0
[  199.175920][T13645] hid-generic 0000:0004:00FF.0014: unknown main item tag 0x0
[  199.183402][T13645] hid-generic 0000:0004:00FF.0014: unknown main item tag 0x0
[  199.190858][T13645] hid-generic 0000:0004:00FF.0014: unknown main item tag 0x0
[  199.198386][T13645] hid-generic 0000:0004:00FF.0014: unknown main item tag 0x0
[  199.205812][T13645] hid-generic 0000:0004:00FF.0014: unknown main item tag 0x0
[  199.213311][T13645] hid-generic 0000:0004:00FF.0014: unknown main item tag 0x0
[  199.220844][T13645] hid-generic 0000:0004:00FF.0014: unknown main item tag 0x0
[  199.228367][T13645] hid-generic 0000:0004:00FF.0014: unknown main item tag 0x0
[  199.235843][T13645] hid-generic 0000:0004:00FF.0014: unknown main item tag 0x0
[  199.243331][T13645] hid-generic 0000:0004:00FF.0014: unknown main item tag 0x0
[  199.250882][T13645] hid-generic 0000:0004:00FF.0014: unknown main item tag 0x0
[  199.258337][T13645] hid-generic 0000:0004:00FF.0014: unknown main item tag 0x0
[  199.266419][T13645] hid-generic 0000:0004:00FF.0014: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  199.459215][T15976] __nla_validate_parse: 9 callbacks suppressed
[  199.459289][T15976] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4800'.
[  199.564346][T15986] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4805'.
[  199.596025][T15988] loop7: detected capacity change from 0 to 2048
[  199.602665][T15988] EXT4-fs: inline encryption not supported
[  199.619886][T15988] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  199.801838][T15992] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  199.817202][T15992] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  199.829747][T15992] EXT4-fs (loop7): This should not happen!! Data will be lost
[  199.829747][T15992] 
[  199.839545][T15992] EXT4-fs (loop7): Total free blocks count 0
[  199.845558][T15992] EXT4-fs (loop7): Free/Dirty block details
[  199.851582][T15992] EXT4-fs (loop7): free_blocks=2415919104
[  199.857321][T15992] EXT4-fs (loop7): dirty_blocks=8192
[  199.862726][T15992] EXT4-fs (loop7): Block reservation details
[  199.868945][T15992] EXT4-fs (loop7): i_reserved_data_blocks=512
[  199.906919][ T4336] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28
[  200.123838][T16026] loop7: detected capacity change from 0 to 1024
[  200.163509][T16026] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  200.183627][T16033] bridge0: entered promiscuous mode
[  200.199438][T16033] bridge0: port 3(macsec1) entered blocking state
[  200.205952][T16033] bridge0: port 3(macsec1) entered disabled state
[  200.213142][T16033] macsec1: entered allmulticast mode
[  200.218522][T16033] bridge0: entered allmulticast mode
[  200.227463][T16033] macsec1: left allmulticast mode
[  200.232628][T16033] bridge0: left allmulticast mode
[  200.249518][T16040] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  200.259146][T16033] bridge0: left promiscuous mode
[  200.355065][T12694] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  200.446177][T16060] loop6: detected capacity change from 0 to 2048
[  200.479237][T16060]  loop6: p1 < > p4
[  200.483889][T16060] loop6: p4 size 8388608 extends beyond EOD, truncated
[  200.510763][T16068] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4842'.
[  200.661871][T16081] loop8: detected capacity change from 0 to 2048
[  200.669797][T16081] EXT4-fs: inline encryption not supported
[  200.701618][T16081] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  200.716327][T16093] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4851'.
[  200.981864][T16096] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  200.998475][T16096] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  201.011020][T16096] EXT4-fs (loop8): This should not happen!! Data will be lost
[  201.011020][T16096] 
[  201.020896][T16096] EXT4-fs (loop8): Total free blocks count 0
[  201.026961][T16096] EXT4-fs (loop8): Free/Dirty block details
[  201.033019][T16096] EXT4-fs (loop8): free_blocks=2415919104
[  201.038933][T16096] EXT4-fs (loop8): dirty_blocks=8192
[  201.044238][T16096] EXT4-fs (loop8): Block reservation details
[  201.050327][T16096] EXT4-fs (loop8): i_reserved_data_blocks=512
[  201.135689][ T4292] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28
[  201.483405][T16135] loop8: detected capacity change from 0 to 2048
[  201.498310][T16135] EXT4-fs: inline encryption not supported
[  201.536631][T16135] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  201.703756][T16149] lo speed is unknown, defaulting to 1000
[  201.803283][T16149] lo speed is unknown, defaulting to 1000
[  201.928618][ T4677] kmmpd-loop1: attempt to access beyond end of device
[  201.928618][ T4677] loop1: rw=14337, sector=64, nr_sectors = 8 limit=64
[  201.942226][ T4677] Buffer I/O error on dev loop1, logical block 8, lost sync page write
[  202.039867][T16150] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  202.056016][T16150] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  202.068609][T16150] EXT4-fs (loop8): This should not happen!! Data will be lost
[  202.068609][T16150] 
[  202.078400][T16150] EXT4-fs (loop8): Total free blocks count 0
[  202.084412][T16150] EXT4-fs (loop8): Free/Dirty block details
[  202.090389][T16150] EXT4-fs (loop8): free_blocks=2415919104
[  202.096132][T16150] EXT4-fs (loop8): dirty_blocks=8192
[  202.101487][T16150] EXT4-fs (loop8): Block reservation details
[  202.107509][T16150] EXT4-fs (loop8): i_reserved_data_blocks=512
[  202.210561][ T4287] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28
[  202.396747][T16189] loop8: detected capacity change from 0 to 1024
[  202.441650][T16189] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  202.458511][T16197] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  202.473833][T16197] vhci_hcd: default hub control req: 2314 v0008 i0002 l0
[  202.644813][T14372] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  202.748871][T16218] smc: net device bond0 applied user defined pnetid SYZ0
[  202.778653][T16218] smc: net device bond0 erased user defined pnetid SYZ0
[  202.911860][T16229] loop7: detected capacity change from 0 to 512
[  202.940249][T16229] EXT4-fs error (device loop7): ext4_acquire_dquot:6927: comm syz.7.4909: Failed to acquire dquot type 1
[  202.970495][T16229] EXT4-fs (loop7): 1 truncate cleaned up
[  202.979172][T16229] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  202.993786][T16229] ext4 filesystem being mounted at /291/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  203.065049][T16225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  203.084159][T12694] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  203.094540][T16225] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  203.122586][T16241] loop8: detected capacity change from 0 to 256
[  203.176503][T16247] loop6: detected capacity change from 0 to 1024
[  203.179855][T16241] syz.8.4916: attempt to access beyond end of device
[  203.179855][T16241] loop8: rw=2049, sector=256, nr_sectors = 4 limit=256
[  203.202027][T16250] vcan0: entered allmulticast mode
[  203.207649][T16250] vcan0: left allmulticast mode
[  203.214600][T16247] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  203.326895][T16265] pim6reg: entered allmulticast mode
[  203.334717][T16268] loop8: detected capacity change from 0 to 512
[  203.350204][T16265] pim6reg: left allmulticast mode
[  203.359933][T16268] EXT4-fs error (device loop8): ext4_acquire_dquot:6927: comm syz.8.4926: Failed to acquire dquot type 1
[  203.379024][T16268] EXT4-fs (loop8): 1 truncate cleaned up
[  203.385063][T16268] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  203.398517][T16268] ext4 filesystem being mounted at /131/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  203.467617][T12436] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  203.475433][T16275] loop7: detected capacity change from 0 to 2048
[  203.484997][T14372] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  203.498445][T16275]  loop7: p1 < > p4
[  203.502787][T16275] loop7: p4 size 8388608 extends beyond EOD, truncated
[  203.522705][   T30] kauditd_printk_skb: 107 callbacks suppressed
[  203.522721][   T30] audit: type=1400 audit(1742244173.572:5263): avc:  denied  { write } for  pid=16274 comm="syz.7.4928" name="loop7p1" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  203.553104][   T30] audit: type=1400 audit(1742244173.602:5264): avc:  denied  { open } for  pid=16274 comm="syz.7.4928" path="/dev/loop7p1" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  203.576467][   T30] audit: type=1400 audit(1742244173.602:5265): avc:  denied  { read } for  pid=16274 comm="syz.7.4928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  203.609673][   T30] audit: type=1400 audit(1742244173.662:5266): avc:  denied  { mounton } for  pid=16274 comm="syz.7.4928" path="/dev/loop7p1" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  203.636265][T16282] loop6: detected capacity change from 0 to 512
[  203.643769][T16282] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  203.659657][T16282] EXT4-fs (loop6): 1 truncate cleaned up
[  203.670170][T16282] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  203.690569][T16282] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  203.842754][T16306] loop6: detected capacity change from 0 to 512
[  203.870985][T16306] Quota error (device loop6): do_check_range: Getting dqdh_entries 1536 out of range 0-14
[  203.881254][T16306] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota
[  203.891201][T16306] EXT4-fs error (device loop6): ext4_acquire_dquot:6927: comm syz.6.4941: Failed to acquire dquot type 1
[  203.935682][T16306] EXT4-fs (loop6): 1 truncate cleaned up
[  203.950452][T16306] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  203.986949][T16306] ext4 filesystem being mounted at /299/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  204.070287][T12436] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  204.111737][   T30] audit: type=1326 audit(1742244174.162:5267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16298 comm="syz.1.4938" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2692d6d169 code=0x0
[  204.257380][T16323] SELinux: failed to load policy
[  204.283370][T16325] vhci_hcd: default hub control req: 800f v0000 i0000 l31125
[  204.355816][T16332] sg_write: data in/out 768/1 bytes for SCSI command 0x0-- guessing data in;
[  204.355816][T16332]    program syz.6.4950 not setting count and/or reply_len properly
[  204.427668][T16338] loop7: detected capacity change from 0 to 1024
[  204.440660][T16338] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  204.470298][T16338] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4115: comm syz.7.4953: Allocating blocks 497-513 which overlap fs metadata
[  204.484935][T16338] EXT4-fs (loop7): pa ffff8881064d3230: logic 256, phys. 385, len 8
[  204.493186][T16338] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 1
[  204.558180][T12694] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  204.695563][   T30] audit: type=1326 audit(1742244174.742:5268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16357 comm="syz.6.4961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc32d4d169 code=0x7ffc0000
[  204.719448][   T30] audit: type=1326 audit(1742244174.742:5269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16357 comm="syz.6.4961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fdc32d4d169 code=0x7ffc0000
[  204.743146][   T30] audit: type=1326 audit(1742244174.742:5270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16357 comm="syz.6.4961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc32d4d169 code=0x7ffc0000
[  204.789825][T16363] hub 9-0:1.0: USB hub found
[  204.795209][T16363] hub 9-0:1.0: 8 ports detected
[  204.878350][T16370] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4968'.
[  204.939699][T16375] loop7: detected capacity change from 0 to 128
[  204.961159][T16378] netlink: 154020 bytes leftover after parsing attributes in process `syz.8.4972'.
[  205.044073][T16384] loop7: detected capacity change from 0 to 512
[  205.052205][T16384] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  205.066107][T16384] EXT4-fs (loop7): 1 truncate cleaned up
[  205.077152][T16384] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  205.093062][T16384] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  205.173459][T16396] batman_adv: batadv0: Adding interface: geneve2
[  205.179915][T16396] batman_adv: batadv0: Not using interface geneve2 (retrying later): interface not active
[  205.238286][T16409] netlink: 'syz.6.4985': attribute type 1 has an invalid length.
[  205.246073][T16409] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4985'.
[  205.393149][T16429] loop7: detected capacity change from 0 to 2048
[  205.399855][T16429] EXT4-fs: inline encryption not supported
[  205.416172][T16429] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  205.473619][T16444] sch_tbf: burst 3298 is lower than device lo mtu (11337746) !
[  205.573156][T16458] loop8: detected capacity change from 0 to 512
[  205.601247][T16458] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  205.625797][T16458] ext4 filesystem being mounted at /147/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  205.671476][T16466] sg_write: data in/out 768/1 bytes for SCSI command 0x0-- guessing data in;
[  205.671476][T16466]    program syz.2.5010 not setting count and/or reply_len properly
[  205.695861][T16447] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  205.712145][T14372] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  205.712240][T16447] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  205.733845][T16447] EXT4-fs (loop7): This should not happen!! Data will be lost
[  205.733845][T16447] 
[  205.743598][T16447] EXT4-fs (loop7): Total free blocks count 0
[  205.749651][T16447] EXT4-fs (loop7): Free/Dirty block details
[  205.755652][T16447] EXT4-fs (loop7): free_blocks=2415919104
[  205.761452][T16447] EXT4-fs (loop7): dirty_blocks=8192
[  205.766789][T16447] EXT4-fs (loop7): Block reservation details
[  205.773173][T16447] EXT4-fs (loop7): i_reserved_data_blocks=512
[  205.828974][ T4336] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28
[  205.842032][T16470] loop8: detected capacity change from 0 to 8192
[  205.852718][T16470] syz.8.5011: attempt to access beyond end of device
[  205.852718][T16470] loop8: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  205.866999][T16470] FAT-fs (loop8): error, invalid access to FAT (entry 0x0000e1b1)
[  205.874944][T16470] FAT-fs (loop8): Filesystem has been set read-only
[  205.882542][T16470] FAT-fs (loop8): error, invalid access to FAT (entry 0x0000e1b1)
[  205.891335][T16470] FAT-fs (loop8): error, invalid access to FAT (entry 0x0000e1b1)
[  205.947001][T16478] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5015'.
[  206.101203][T16495] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5023'.
[  206.145119][T16501] loop7: detected capacity change from 0 to 128
[  206.157641][T16501] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
[  206.171836][T16501] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  206.188954][T16501] ext2 filesystem being mounted at /316/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  206.228959][T16501] EXT4-fs error (device loop7): htree_dirblock_to_tree:1112: inode #2: block 4: comm syz.7.5026: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1
[  206.290855][T12694] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  206.332407][T16525] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5036'.
[  206.342106][T16527] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5038'.
[  206.560672][T16543] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5045'.
[  206.822297][T16571] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5059'.
[  206.831440][T16571] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5059'.
[  206.873525][T16567] loop7: detected capacity change from 0 to 8192
[  206.967855][ T4677] kmmpd-loop1: attempt to access beyond end of device
[  206.967855][ T4677] loop1: rw=14337, sector=64, nr_sectors = 8 limit=64
[  206.981423][ T4677] Buffer I/O error on dev loop1, logical block 8, lost sync page write
[  207.125155][T16599] loop6: detected capacity change from 0 to 1024
[  207.140283][T16599] EXT4-fs: Ignoring removed bh option
[  207.181003][T16599] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  207.232605][T16599] EXT4-fs error (device loop6): __ext4_remount:6738: comm syz.6.5071: Abort forced by user
[  207.249122][T16599] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback.
[  207.330407][T12436] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  207.344094][T13640] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x4
[  207.351863][T13640] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x2
[  207.394007][T13640] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x0
[  207.402007][T13640] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x0
[  207.409744][T13640] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x0
[  207.417444][T13640] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x0
[  207.425178][T13640] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x0
[  207.432958][T13640] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x0
[  207.440748][T13640] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x0
[  207.448468][T13640] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x0
[  207.456141][T13640] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x0
[  207.463882][T13640] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x0
[  207.471591][T13640] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x0
[  207.479310][T13640] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x0
[  207.486981][T13640] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x0
[  207.494751][T13640] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x0
[  207.505593][T13640] hid-generic 0000:3000000:0000.0015: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[  207.531366][T16619] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16619 comm=syz.8.5081
[  207.565417][T16625] netlink: 'syz.1.5083': attribute type 3 has an invalid length.
[  208.156159][T16665] loop7: detected capacity change from 0 to 8192
[  208.177877][T16665] syz.7.5099: attempt to access beyond end of device
[  208.177877][T16665] loop7: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  208.195949][T16665] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000e1b1)
[  208.203860][T16665] FAT-fs (loop7): Filesystem has been set read-only
[  208.223247][T16665] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000e1b1)
[  208.238583][T16665] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000e1b1)
[  208.287744][T16670] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16384 sclass=netlink_route_socket pid=16670 comm=syz.6.5101
[  208.630707][T16699] netlink: 'syz.7.5112': attribute type 4 has an invalid length.
[  208.641685][T13640] lo speed is unknown, defaulting to 1000
[  208.650958][T16699] netlink: 'syz.7.5112': attribute type 4 has an invalid length.
[  208.660962][T13640] lo speed is unknown, defaulting to 1000
[  208.683153][T16701] loop8: detected capacity change from 0 to 2048
[  208.699560][T16701] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  208.712990][T16701] ext4 filesystem being mounted at /164/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  209.023732][ T3414] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm kworker/u8:7: bg 0: block 345: padding at end of block bitmap is not set
[  209.058052][ T3414] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117
[  209.070865][ T3414] EXT4-fs (loop8): This should not happen!! Data will be lost
[  209.070865][ T3414] 
[  209.105346][ T3414] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2040 with error 28
[  209.118180][ T3414] EXT4-fs (loop8): This should not happen!! Data will be lost
[  209.118180][ T3414] 
[  209.127905][ T3414] EXT4-fs (loop8): Total free blocks count 0
[  209.133977][ T3414] EXT4-fs (loop8): Free/Dirty block details
[  209.139976][ T3414] EXT4-fs (loop8): free_blocks=0
[  209.144936][ T3414] EXT4-fs (loop8): dirty_blocks=2048
[  209.150352][ T3414] EXT4-fs (loop8): Block reservation details
[  209.240910][T16719] SELinux: failed to load policy
[  209.554752][T16745] 
: renamed from bond0 (while UP)
[  209.592895][T13640] hid-generic 0000:0004:0000.0016: unknown main item tag 0x0
[  209.600537][T13640] hid-generic 0000:0004:0000.0016: unknown main item tag 0x0
[  209.608431][T13640] hid-generic 0000:0004:0000.0016: unknown main item tag 0x0
[  209.629404][T13640] hid-generic 0000:0004:0000.0016: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  209.728807][   T30] kauditd_printk_skb: 90 callbacks suppressed
[  209.728826][   T30] audit: type=1326 audit(1742244179.782:5361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16761 comm="syz.8.5141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b453dd169 code=0x7ffc0000
[  209.770639][   T30] audit: type=1326 audit(1742244179.782:5362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16761 comm="syz.8.5141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b453dd169 code=0x7ffc0000
[  209.794388][   T30] audit: type=1326 audit(1742244179.812:5363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16761 comm="syz.8.5141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f6b453dd169 code=0x7ffc0000
[  209.818109][   T30] audit: type=1326 audit(1742244179.812:5364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16761 comm="syz.8.5141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b453dd169 code=0x7ffc0000
[  209.841684][   T30] audit: type=1326 audit(1742244179.812:5365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16761 comm="syz.8.5141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b453dd169 code=0x7ffc0000
[  209.865238][   T30] audit: type=1326 audit(1742244179.822:5366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16761 comm="syz.8.5141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7f6b453dd169 code=0x7ffc0000
[  209.888778][   T30] audit: type=1326 audit(1742244179.822:5367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16761 comm="syz.8.5141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b453dd169 code=0x7ffc0000
[  209.912366][   T30] audit: type=1326 audit(1742244179.822:5368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16761 comm="syz.8.5141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b453dd169 code=0x7ffc0000
[  210.031107][T16772] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7)
[  210.037743][T16772] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  210.047153][T16772] vhci_hcd vhci_hcd.0: Device attached
[  210.080761][T16778] vhci_hcd: connection closed
[  210.081050][ T3414] vhci_hcd: stop threads
[  210.090122][ T3414] vhci_hcd: release socket
[  210.094563][ T3414] vhci_hcd: disconnect device
[  210.125247][T16784] 
: renamed from bond0 (while UP)
[  210.182259][T13646] hid-generic 0000:0004:0000.0017: unknown main item tag 0x0
[  210.189846][T13646] hid-generic 0000:0004:0000.0017: unknown main item tag 0x0
[  210.197542][T13646] hid-generic 0000:0004:0000.0017: unknown main item tag 0x0
[  210.226154][   T30] audit: type=1326 audit(1742244180.272:5369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16794 comm="syz.8.5154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b453dd169 code=0x7ffc0000
[  210.250216][   T30] audit: type=1326 audit(1742244180.272:5370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16794 comm="syz.8.5154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b453dd169 code=0x7ffc0000
[  210.275816][T13646] hid-generic 0000:0004:0000.0017: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  210.360500][T16805] sd 0:0:1:0: device reset
[  210.731420][T16852] __nla_validate_parse: 2 callbacks suppressed
[  210.731444][T16852] netlink: 96 bytes leftover after parsing attributes in process `syz.7.5179'.
[  210.748783][T16854] loop9: detected capacity change from 0 to 7
[  210.759183][T16845] Invalid ELF header magic: != ELF
[  210.763382][T16854] Buffer I/O error on dev loop9, logical block 0, async page read
[  210.804975][T16854] Buffer I/O error on dev loop9, logical block 0, async page read
[  210.812952][T16854]  loop9: unable to read partition table
[  210.834054][T16854] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dƤ����ݡ�����
[  210.834054][T16854] 
U�������) failed (rc=-5)
[  210.992265][T16873] loop6: detected capacity change from 0 to 2048
[  211.045091][T16873] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  211.068163][T16873] ext4 filesystem being mounted at /360/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  211.188285][T16886] syz_tun: entered allmulticast mode
[  211.198474][T16886] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0)
[  211.207026][T16886] mroute: pending queue full, dropping entries
[  211.228462][T16885] syz_tun: left allmulticast mode
[  211.856720][ T4336] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm kworker/u8:58: bg 0: block 345: padding at end of block bitmap is not set
[  211.892869][ T4336] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117
[  211.905734][ T4336] EXT4-fs (loop6): This should not happen!! Data will be lost
[  211.905734][ T4336] 
[  211.978726][ T4336] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2040 with error 28
[  211.991639][ T4336] EXT4-fs (loop6): This should not happen!! Data will be lost
[  211.991639][ T4336] 
[  212.001639][ T4336] EXT4-fs (loop6): Total free blocks count 0
[  212.007826][ T4336] EXT4-fs (loop6): Free/Dirty block details
[  212.013764][ T4336] EXT4-fs (loop6): free_blocks=0
[  212.018753][ T4336] EXT4-fs (loop6): dirty_blocks=2048
[  212.024080][ T4336] EXT4-fs (loop6): Block reservation details
[  212.034799][ T4677] kmmpd-loop1: attempt to access beyond end of device
[  212.034799][ T4677] loop1: rw=14337, sector=64, nr_sectors = 8 limit=64
[  212.048473][ T4677] Buffer I/O error on dev loop1, logical block 8, lost sync page write
[  212.133830][T16933] netlink: 'syz.8.5213': attribute type 1 has an invalid length.
[  212.168969][T16933] 8021q: adding VLAN 0 to HW filter on device bond1
[  212.196474][T16938] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536
[  212.221780][T16939] bond1: (slave veth7): Enslaving as an active interface with a down link
[  212.283922][T16933] bond1: (slave dummy0): making interface the new active one
[  212.321914][T16933] dummy0: entered promiscuous mode
[  212.347456][T16933] bond1: (slave dummy0): Enslaving as an active interface with an up link
[  212.403373][T16952] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5219'.
[  212.532244][T16964] loop9: detected capacity change from 0 to 7
[  212.545650][T16964] Buffer I/O error on dev loop9, logical block 0, async page read
[  212.571169][T16964] Buffer I/O error on dev loop9, logical block 0, async page read
[  212.579106][T16964]  loop9: unable to read partition table
[  212.604391][T16964] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dƤ����ݡ�����
[  212.604391][T16964] 
U�������) failed (rc=-5)
[  212.624068][T16971] gretap0: refused to change device tx_queue_len
[  212.772306][T16985] loop7: detected capacity change from 0 to 128
[  212.833651][T16985] syz.7.5233: attempt to access beyond end of device
[  212.833651][T16985] loop7: rw=2049, sector=145, nr_sectors = 896 limit=128
[  212.833596][T16990] loop6: detected capacity change from 0 to 512
[  212.858280][T16990] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  212.865630][T16985] syz.7.5233: attempt to access beyond end of device
[  212.865630][T16985] loop7: rw=524288, sector=145, nr_sectors = 896 limit=128
[  212.896010][T16990] EXT4-fs error (device loop6): ext4_xattr_block_get:596: inode #15: comm syz.6.5236: corrupted xattr block 33: invalid header
[  212.920867][T16990] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop6 ino=15
[  212.940272][T16990] EXT4-fs error (device loop6): ext4_xattr_block_get:596: inode #15: comm syz.6.5236: corrupted xattr block 33: invalid header
[  212.964879][T16990] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop6 ino=15
[  212.974582][T16990] EXT4-fs error (device loop6): ext4_xattr_block_list:768: inode #15: comm syz.6.5236: corrupted xattr block 33: invalid header
[  213.006854][T12436] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  213.016956][T17003] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.5243'.
[  213.027762][T17003] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.5243'.
[  213.039668][T17003] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.5243'.
[  213.049512][T17003] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.5243'.
[  213.060304][T17005] loop6: detected capacity change from 0 to 256
[  213.082898][T17005] vfat: Unknown parameter '�������'
[  213.095128][T17009] ip6gre1: entered allmulticast mode
[  213.112365][T17012] loop7: detected capacity change from 0 to 128
[  213.120153][T17012] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  213.133761][T17012] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  213.178147][ T4292] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  213.298582][T17026] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536
[  213.329603][T17028] loop6: detected capacity change from 0 to 1024
[  213.336350][T17028] EXT4-fs: Ignoring removed orlov option
[  213.351649][T17033] netlink: 100 bytes leftover after parsing attributes in process `syz.8.5256'.
[  213.359666][T17028] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  213.383062][T17028] EXT4-fs error (device loop6): ext4_ext_check_inode:524: inode #11: comm syz.6.5254: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[  213.408103][T17028] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.5254: couldn't read orphan inode 11 (err -117)
[  213.434817][T17028] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  213.456233][T17033] lo speed is unknown, defaulting to 1000
[  213.471386][T17041] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5258'.
[  213.491139][T17028] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.5254: Invalid block bitmap block 0 in block_group 0
[  213.492300][T17033] lo speed is unknown, defaulting to 1000
[  213.523233][T17028] EXT4-fs error (device loop6): ext4_acquire_dquot:6927: comm syz.6.5254: Failed to acquire dquot type 0
[  213.560825][ T4287] EXT4-fs error (device loop6): __ext4_get_inode_loc:4435: comm kworker/u8:18: Invalid inode table block 8589934593 in block_group 0
[  213.576344][T12436] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  213.600286][T17049] netlink: 'syz.6.5260': attribute type 13 has an invalid length.
[  213.646210][T17049] bridge0: port 2(bridge_slave_1) entered disabled state
[  213.653617][T17049] bridge0: port 1(bridge_slave_0) entered disabled state
[  213.758813][T17049] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  213.769541][T17049] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  213.803577][T17049] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  213.812726][T17049] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  213.821852][T17049] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  213.830863][T17049] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  213.844679][T17049] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  213.853892][T17049] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  213.862902][T17049] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  213.871892][T17049] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  213.934179][T17064] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536
[  214.107873][T13640] IPVS: starting estimator thread 0...
[  214.157255][T17087] netlink: 'syz.7.5275': attribute type 1 has an invalid length.
[  214.197953][T17082] IPVS: using max 2304 ests per chain, 115200 per kthread
[  214.212429][T17087] 8021q: adding VLAN 0 to HW filter on device bond0
[  214.254554][T17091] bond0: (slave veth11): Enslaving as an active interface with a down link
[  214.305709][T17087] bond0: (slave dummy0): making interface the new active one
[  214.329135][T17087] dummy0: entered promiscuous mode
[  214.341735][T17087] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  214.465585][T17106] netlink: 132 bytes leftover after parsing attributes in process `syz.7.5282'.
[  214.514819][T17111] loop8: detected capacity change from 0 to 128
[  214.541948][T17111] EXT4-fs: Ignoring removed nobh option
[  214.560287][T17111] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  214.576764][T17111] ext4 filesystem being mounted at /203/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  214.592559][T17124] loop7: detected capacity change from 0 to 256
[  214.632146][T17124] vfat: Unknown parameter '�������'
[  214.682603][T14372] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  214.701616][T17129] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5303'.
[  215.061719][T17159] ip6gre2: entered allmulticast mode
[  215.173206][   T30] kauditd_printk_skb: 113 callbacks suppressed
[  215.173246][   T30] audit: type=1326 audit(1742244185.222:5482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17166 comm="syz.6.5310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc32d4d169 code=0x7ffc0000
[  215.203555][   T30] audit: type=1326 audit(1742244185.232:5483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17166 comm="syz.6.5310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdc32d4d169 code=0x7ffc0000
[  215.227150][   T30] audit: type=1326 audit(1742244185.232:5484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17166 comm="syz.6.5310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc32d4d169 code=0x7ffc0000
[  215.251036][   T30] audit: type=1326 audit(1742244185.232:5485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17166 comm="syz.6.5310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc32d4d169 code=0x7ffc0000
[  215.274624][   T30] audit: type=1326 audit(1742244185.232:5486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17166 comm="syz.6.5310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fdc32d4d169 code=0x7ffc0000
[  215.299230][   T30] audit: type=1326 audit(1742244185.262:5487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17166 comm="syz.6.5310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc32d4d169 code=0x7ffc0000
[  215.323009][   T30] audit: type=1326 audit(1742244185.272:5488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17166 comm="syz.6.5310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc32d4d169 code=0x7ffc0000
[  215.346669][   T30] audit: type=1326 audit(1742244185.292:5489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17166 comm="syz.6.5310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7fdc32d4d169 code=0x7ffc0000
[  215.370432][   T30] audit: type=1326 audit(1742244185.292:5490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17166 comm="syz.6.5310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc32d4d169 code=0x7ffc0000
[  215.394187][   T30] audit: type=1326 audit(1742244185.292:5491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17166 comm="syz.6.5310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc32d4d169 code=0x7ffc0000
[  215.464504][T17176] block device autoloading is deprecated and will be removed.
[  215.475471][T17176] syz.6.5314: attempt to access beyond end of device
[  215.475471][T17176] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  215.584346][T17178] lo speed is unknown, defaulting to 1000
[  215.681351][T17178] lo speed is unknown, defaulting to 1000
[  215.909478][T17208] bridge0: port 2(bridge_slave_1) entered disabled state
[  215.927650][T17208] __nla_validate_parse: 2 callbacks suppressed
[  215.927672][T17208] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5327'.
[  215.947150][T17208] bridge0: port 1(bridge_slave_0) entered disabled state
[  215.979907][T17208] bridge_slave_0 (unregistering): left allmulticast mode
[  215.987066][T17208] bridge_slave_0 (unregistering): left promiscuous mode
[  215.994265][T17208] bridge0: port 1(bridge_slave_0) entered disabled state
[  216.011265][T17220] netlink: 'syz.2.5332': attribute type 3 has an invalid length.
[  217.047858][ T4677] kmmpd-loop1: attempt to access beyond end of device
[  217.047858][ T4677] loop1: rw=14337, sector=64, nr_sectors = 8 limit=64
[  217.061327][ T4677] Buffer I/O error on dev loop1, logical block 8, lost sync page write
[  217.647250][T17244] loop7: detected capacity change from 0 to 2048
[  217.657582][T17244] EXT4-fs: Ignoring removed bh option
[  217.724408][T17244] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  217.745639][T17261] netlink: 'syz.8.5347': attribute type 13 has an invalid length.
[  217.931889][T17261] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  217.951983][T17261] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  218.004304][T17261] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  218.013391][T17261] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  218.022334][T17261] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  218.030324][T17282] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5358'.
[  218.031357][T17261] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  218.143198][T17263] lo speed is unknown, defaulting to 1000
[  218.234722][T17263] lo speed is unknown, defaulting to 1000
[  218.236801][T17288] SELinux: failed to load policy
[  218.249208][ T3414] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  218.289236][ T3414] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  218.301569][ T3414] EXT4-fs (loop7): This should not happen!! Data will be lost
[  218.301569][ T3414] 
[  218.311313][ T3414] EXT4-fs (loop7): Total free blocks count 0
[  218.317321][ T3414] EXT4-fs (loop7): Free/Dirty block details
[  218.323324][ T3414] EXT4-fs (loop7): free_blocks=2415919104
[  218.329122][ T3414] EXT4-fs (loop7): dirty_blocks=8224
[  218.334436][ T3414] EXT4-fs (loop7): Block reservation details
[  218.340480][ T3414] EXT4-fs (loop7): i_reserved_data_blocks=514
[  218.365802][ T3414] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28
[  218.523987][T17307] dvmrp0: entered allmulticast mode
[  218.608685][T17309] dvmrp0: left allmulticast mode
[  218.906339][T17352] binfmt_misc: register: failed to install interpreter file ./file2
[  218.980564][T17357] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5387'.
[  219.020284][T17362] IPVS: Error connecting to the multicast addr
[  219.163527][T17383] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5400'.
[  219.221596][T17390] netlink: 'syz.1.5402': attribute type 4 has an invalid length.
[  219.243691][T17392] sg_write: data in/out 122/14 bytes for SCSI command 0x1-- guessing data in;
[  219.243691][T17392]    program syz.7.5404 not setting count and/or reply_len properly
[  219.254778][T17390] netlink: 'syz.1.5402': attribute type 4 has an invalid length.
[  219.264006][T17389] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5403'.
[  219.545423][T17429] loop7: detected capacity change from 0 to 8192
[  219.715117][T17444] syzkaller0: entered promiscuous mode
[  219.720703][T17444] syzkaller0: entered allmulticast mode
[  219.915274][T17468] netlink: 'syz.7.5436': attribute type 13 has an invalid length.
[  220.013421][T17468] bridge0: port 2(bridge_slave_1) entered disabled state
[  220.020669][T17468] bridge0: port 1(bridge_slave_0) entered disabled state
[  220.150133][T17468] veth1_macvtap: left allmulticast mode
[  220.158637][T17468] netdevsim netdevsim7 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  220.167060][T17468] netdevsim netdevsim7 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  220.175680][T17468] netdevsim netdevsim7 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  220.184299][T17468] netdevsim netdevsim7 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  220.199554][T13648] lo speed is unknown, defaulting to 1000
[  220.213204][T17483] IPVS: Error connecting to the multicast addr
[  220.286888][   T30] kauditd_printk_skb: 13 callbacks suppressed
[  220.286905][   T30] audit: type=1400 audit(1742244190.332:5505): avc:  denied  { module_load } for  pid=17488 comm="syz.7.5444" path="/sys/power/wakeup_count" dev="sysfs" ino=216 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1
[  220.349332][   T30] audit: type=1326 audit(1742244190.402:5506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17490 comm="syz.7.5445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200b46d169 code=0x7ffc0000
[  220.395936][T17495] sch_tbf: peakrate 8 is lower than or equals to rate 12 !
[  220.402486][   T30] audit: type=1326 audit(1742244190.402:5507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17490 comm="syz.7.5445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7f200b46d169 code=0x7ffc0000
[  220.426803][   T30] audit: type=1326 audit(1742244190.402:5508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17490 comm="syz.7.5445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200b46d169 code=0x7ffc0000
[  220.450595][   T30] audit: type=1326 audit(1742244190.422:5509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17490 comm="syz.7.5445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200b46d169 code=0x7ffc0000
[  220.479306][T17497] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5448'.
[  220.489114][T17497] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5448'.
[  220.556445][T17501] tipc: Started in network mode
[  220.561553][T17501] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711
[  220.568912][T17501] tipc: Enabled bearer <eth:syz_tun>, priority 10
[  220.578006][   T30] audit: type=1400 audit(1742244190.622:5510): avc:  denied  { getopt } for  pid=17500 comm="syz.6.5450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  220.681190][T17510] syzkaller1: entered promiscuous mode
[  220.686773][T17510] syzkaller1: entered allmulticast mode
[  220.824828][   T30] audit: type=1326 audit(1742244190.872:5511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17524 comm="syz.8.5461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b453dd169 code=0x7ffc0000
[  220.848712][   T30] audit: type=1326 audit(1742244190.872:5512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17524 comm="syz.8.5461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b453dd169 code=0x7ffc0000
[  220.890248][   T30] audit: type=1326 audit(1742244190.942:5513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17524 comm="syz.8.5461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6b453dd169 code=0x7ffc0000
[  220.913913][   T30] audit: type=1326 audit(1742244190.942:5514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17524 comm="syz.8.5461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b453dd169 code=0x7ffc0000
[  220.964336][T17535] IPVS: Error connecting to the multicast addr
[  220.973947][T17533] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5464'.
[  221.004330][T17537] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5468'.
[  221.160840][T17559] IPVS: Error connecting to the multicast addr
[  221.250742][T17575] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5486'.
[  221.265743][T17575] 8021q: adding VLAN 0 to HW filter on device team1
[  221.330278][T17584] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5490'.
[  221.341168][T17584] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5490'.
[  221.409314][T17588] tipc: Started in network mode
[  221.414306][T17588] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711
[  221.421710][T17588] tipc: Enabled bearer <eth:syz_tun>, priority 10
[  221.515769][T17599] SELinux: failed to load policy
[  221.569187][T17604] IPVS: Error connecting to the multicast addr
[  221.627961][T17610] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5502'.
[  221.698252][T13648] tipc: Node number set to 43690
[  222.087962][ T4677] kmmpd-loop1: attempt to access beyond end of device
[  222.087962][ T4677] loop1: rw=14337, sector=64, nr_sectors = 8 limit=64
[  222.101509][ T4677] Buffer I/O error on dev loop1, logical block 8, lost sync page write
[  222.329174][T17681] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  222.336572][T17681] vhci_hcd: default hub control req: 1f14 v080b i0002 l0
[  222.562606][ T3368] tipc: Node number set to 43690
[  223.082270][T17687] Set syz1 is full, maxelem 65536 reached
[  223.217744][T17724] sch_tbf: burst 3298 is lower than device lo mtu (11337746) !
[  223.499091][T17755] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5562'.
[  223.529252][T17758] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5564'.
[  223.726631][T17782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  223.735875][T17782] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  224.120013][T17797] loop7: detected capacity change from 0 to 512
[  224.157265][T17797] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  224.188095][T17797] ext4 filesystem being mounted at /426/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  224.302713][T12694] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  224.568274][T17827] Falling back ldisc for ttyS3.
[  224.731719][T17845] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  224.790702][T17855] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5606'.
[  224.850353][T17863] vlan0: entered allmulticast mode
[  224.860283][T17863] bond0: entered allmulticast mode
[  224.866171][T17863] bond0: left allmulticast mode
[  224.879124][ T3368] ==================================================================
[  224.887257][ T3368] BUG: KCSAN: data-race in p9_conn_cancel / p9_poll_workfn
[  224.894502][ T3368] 
[  224.896847][ T3368] write to 0xffff88811880be28 of 4 bytes by task 13649 on cpu 1:
[  224.904573][ T3368]  p9_conn_cancel+0x89/0x400
[  224.909194][ T3368]  p9_write_work+0x3ac/0x750
[  224.913820][ T3368]  process_scheduled_works+0x4db/0xa20
[  224.919300][ T3368]  worker_thread+0x51d/0x6f0
[  224.923928][ T3368]  kthread+0x4ae/0x520
[  224.928021][ T3368]  ret_from_fork+0x4b/0x60
[  224.932462][ T3368]  ret_from_fork_asm+0x1a/0x30
[  224.937265][ T3368] 
[  224.939612][ T3368] read to 0xffff88811880be28 of 4 bytes by task 3368 on cpu 0:
[  224.947174][ T3368]  p9_poll_workfn+0xc0/0x410
[  224.951802][ T3368]  process_scheduled_works+0x4db/0xa20
[  224.957286][ T3368]  worker_thread+0x51d/0x6f0
[  224.961902][ T3368]  kthread+0x4ae/0x520
[  224.965998][ T3368]  ret_from_fork+0x4b/0x60
[  224.970441][ T3368]  ret_from_fork_asm+0x1a/0x30
[  224.975235][ T3368] 
[  224.977565][ T3368] value changed: 0x00000000 -> 0xffffffe0
[  224.983291][ T3368] 
[  224.985622][ T3368] Reported by Kernel Concurrency Sanitizer on:
[  224.991801][ T3368] CPU: 0 UID: 0 PID: 3368 Comm: kworker/0:2 Tainted: G        W          6.14.0-rc7-syzkaller #0
[  225.002327][ T3368] Tainted: [W]=WARN
[  225.006144][ T3368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  225.016222][ T3368] Workqueue: events p9_poll_workfn
[  225.021371][ T3368] ==================================================================
[  227.128018][ T4677] kmmpd-loop1: attempt to access beyond end of device
[  227.128018][ T4677] loop1: rw=14337, sector=64, nr_sectors = 8 limit=64
[  227.141594][ T4677] Buffer I/O error on dev loop1, logical block 8, lost sync page write
[  232.167876][ T4677] kmmpd-loop1: attempt to access beyond end of device
[  232.167876][ T4677] loop1: rw=14337, sector=64, nr_sectors = 8 limit=64
[  232.181437][ T4677] Buffer I/O error on dev loop1, logical block 8, lost sync page write