last executing test programs:

2.559416396s ago: executing program 0 (id=393):
socket$qrtr(0x2a, 0x2, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000440)={&(0x7f0000000200), 0x0, 0x0, 0x0, 0x9, r1}, 0x38)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r4=>0x0})
r5 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=@bridge_setlink={0x2d0, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x3, 0x0, 0x1, {0xc, 0x5, 0x0, 0x1, [{0x8}]}}]}, @IFLA_VF_PORTS={0x1c0, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0xc}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "714abbd2547de97cbbf6efb226f19bf9"}, @IFLA_PORT_PROFILE={0xd, 0x2, ':(\x8e^[[Z@\x00'}]}, {0x60, 0x7, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "293a02149f3b75a67093c28fd6f55a23"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "e48f01e49713f0c2d839f940d9f088d8"}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_PROFILE={0x13, 0x2, 'bridge_ilave_0\x00'}, @IFLA_PORT_PROFILE={0x7, 0x2, '):\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "4d2906d0880fc8acc30fe2020f984967"}]}, {0x50, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "a1085e7df341b9dc3d8008a2fe5bdaad"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "9c7e472c916020fe41bcc5aa8f56c947"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "80ab8be51421cfa3c9e5cbfe8217e0af"}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_VF={0x8}]}, {0x4c, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_PROFILE={0xc, 0x2, 'syztnl0\x00'}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0x13, 0x2, 'bridge_slave_0\x00'}]}, {0x3c, 0xc, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x25}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x19, "03dd96197aca85b64424a37dbda7b694"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x7, "eb052fcd3dd4d3e8bbcbf1de857c0e1c"}]}, {0x3c, 0x18, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "b2112a97bf9704ee57915340334b8271"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "e8635392a70f36f95f4b9b352920ebec"}]}]}, @IFLA_GSO_MAX_SEGS={0x8}, @IFLA_AF_SPEC={0xd4, 0x1a, 0x0, 0x1, [@AF_INET6={0x20, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET6={0x40, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}, @IFLA_INET6_TOKEN={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @broadcast}}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}]}, @AF_BRIDGE={0x4}, @AF_INET6={0x6c, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @remote}, @IFLA_INET6_TOKEN={0x14, 0x7, @loopback}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @private2}, @IFLA_INET6_TOKEN={0x14, 0x7, @private1}]}]}]}, 0x2d0}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000300004802c0001800b0001006e756d67656e00001c0002800800014000000000080002400000000008000340000000000500074022000000140200001100010000000000147000000000000a"], 0x8c}}, 0x0)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000780)=ANY=[@ANYBLOB="18020000000000000000000000001d3a8500000017000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r8)
ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f00000001c0)={'wpan1\x00', <r10=>0x0})
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000003100000005003500000000000500330000040000050036000000000008000200", @ANYRES32=r10], 0x34}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0xc)
setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000000)=0x8, 0x4)
getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x41, 0x0, &(0x7f0000000880))
setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f0000000140)={{&(0x7f00000000c0)=""/108, 0x6c}, &(0x7f0000000040), 0x48}, 0x20)
getsockopt$IP_SET_OP_GET_BYINDEX(r6, 0x1, 0x53, &(0x7f0000000180), &(0x7f00000001c0)=0x28)

2.432363106s ago: executing program 0 (id=395):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100003e4e00000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xcb1c}, 0x18)
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000300)='./bus\x00', 0x1008002, &(0x7f00000003c0)={[{@grpquota}, {@delalloc}, {@noblock_validity}, {@usrquota}, {@dioread_nolock}, {@nobh}, {@usrquota}, {@grpjquota}, {@lazytime}]}, 0x1, 0x5eb, &(0x7f0000001740)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700)
r1 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r1, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRESHEX=r2, @ANYBLOB="0000000000000000b702000014002000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sysfs$1(0x1, 0x0)
prlimit64(0x0, 0xf, &(0x7f0000000140)={0x0, 0xffffffffffffffff}, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
recvmsg(r4, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r3}, 0x10)
inotify_init()

2.231691685s ago: executing program 4 (id=399):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000980)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=<r1=>r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='kfree\x00', 0xffffffffffffffff, 0x0, 0x9b}, 0x18)
pipe(&(0x7f00000045c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f00000002c0)=ANY=[@ANYRES32=r1, @ANYRES32=r4, @ANYBLOB="34ccbb6bd4b440b5fcb0fdafca0aa33801796c10fa8649577915aec21399a3a11b8b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3, 0x0, 0x3}, 0x18)
fchmodat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000080)=0x6, 0x4)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000200), 0xfc, 0x56d, &(0x7f00000013c0)="$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")
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000b00)=ANY=[@ANYBLOB="000000004c900200010000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff050000000000000000000000000000000000000000000000000000000b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005b4e3fa37631cfd7af2a5b57f1e77c8a92b3e84d4cb8fac724448ca02e23737e55b0b1db014239067166c08a85c4831e17e31393c31ccddfe275396a6c0d13477b3cd32f702b04d90a30514582d0ae618b438cff2e4ebf2fa4c22105a9d73899b21838a9687e5d89fde0db4b934fa018611378bd7cbcbb9aec4c594145f7d6ba2aedcde009d23aadb217caffba03b2491eaaa58f393d48e067107f6dddd751a6853d573f908e7dcd41a94370e10d7e924b3535b894523939"])
splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0xe8, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
timer_create(0x9, 0x0, &(0x7f0000bbdffc))
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRES32], 0x5c}}, 0x0)

1.996231655s ago: executing program 1 (id=401):
r0 = socket$inet6(0xa, 0x2, 0x3a)
io_setup(0x2, &(0x7f0000000040))
utimensat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={{0x77359400}}, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x2004c8a0, 0x0, 0x0)
prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000ff9000/0x4000)=nil)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00')
pread64(r3, &(0x7f000000cf80)=""/102400, 0xfffffda3, 0xe0ffff000000)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_HEADER(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x8)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x4}}, 0x1c)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a0"], 0xffd8}}, 0x4000000)

1.995506355s ago: executing program 3 (id=402):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1, 0x2000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
tgkill(0x0, 0x0, 0x0)
sync()
r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0)
writev(r1, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x66010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8da}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socket$inet6(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x8000000004)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f00000003c0)=0x2, 0x4)
setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f00000020c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
writev(r2, &(0x7f0000000140)=[{&(0x7f00000004c0)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x790, @void, @value}, 0x94)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1, 0x2172, 0xffffffffffffffff, 0x4b656000)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)

1.957273005s ago: executing program 1 (id=403):
r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff)
keyctl$KEYCTL_MOVE(0x4, r0, r0, 0x0, 0x0)
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000380)={0x6, "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"})
sendmsg$nl_route_sched(r1, 0x0, 0x800)
fcntl$dupfd(r2, 0x0, r2)
mmap(&(0x7f0000261000/0xc00000)=nil, 0xc00000, 0x3000003, 0x31, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0)
r3 = getpid()
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
ioctl$sock_x25_SIOCADDRT(r1, 0x890b, &(0x7f0000000c00)={@null, 0x3, 'sit0\x00'})
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/43, 0x7ffff000}, {&(0x7f0000000480)=""/165, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x2aa, 0x0)
r4 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8, &(0x7f0000000240)={[{@sb={'sb', 0x3d, 0x1}}, {@errors_remount}]}, 0x1, 0x511, &(0x7f0000000540)="$eJzs3cFvVE8dAPDv23Zp6a/8CspBjQoiioawbRdoCBfhojGExEg8eYDaLk3TXbbpLpFWDuXonUQST/onePNgwsmDN29684IHE1SioSYe1ry327K023b9dduF7ueTvL43M8t+Z7rMzL6B3QlgYJ2PiPWIOBERDyJiopWftI641TzSx71983Ru483TuSQajXv/SLLyNC/a/kzqk9ZzjkbED78X8ZNkZ9za6trSbLlcWmmlJ+uV5cna6tqVxVwrpzgzPTN14+r1Ys/aeq7ym9ffXbzzo9/99iuv/rj+7Z+l1Rr/+amsrL0dvdRsej7G2/KGI+LOYQTrk+HW3x8+Pmlv+1xEXMj6/0QMZa8mAHCcNRoT0ZhoTwMAx116/z8eSa7QWgsYj1yuUGiu4Z2NsVy5Wqtfnqg+fjQf2RrW6cjnHi6WS1OttcLTkU/S9HR2/S5dfC/9vHQ1Is5ExPORk1l5Ya5anu/nGx8AGGCfbJv//z3SnP8BgGNutN8VAACOnPkfAAaP+R8ABs//Mf/7dCAAHBPu/wFg8Jj/AWDw7Dv/PzuaegAAR+IHd++mR2Oj+f3Xm9/UfWW+VFsqVB7PFeaqK8uFhWp1oVwqzDUa+z1fuVpdnr62laytrt2vVB8/qt9frMwulO6X8ofZGACgK2fOvfxzOumv3zyZHdG2l4O5Go63XL8rAPTNUL8rAPSNz/PA4OriHt8yABxzHbbofc+u/0Xohc1f4WN16YvW/2FQHWT939oBfNw+2/r/d3peD+DomcNhcDUaiT3/AWDAWOMHDvTv/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADCgxrMjyRWyvcDX05+5QiHiVEScjnzycLFcmoqITyPiTyP5kTQ93e9KAwAHlPtb0tr/69LExfHtpSeS/4xk54j46S/v/eLJbL2+Mp3m/3Mrv/4izT9ZXyme6EcDAIB2t3ZmZfN3sXVuu5F/++bp3OZxlFV8fbu5uWgad6N1NEuGYzg7j0Y+Isb+lbTSTen7laEexF9/FhFf2Gz/aDxpizCerYE0dz7dHj+Nfarn8dt//9vj595rby4rS8/57Hfx+R7UBQbNy9vNcbLV99Iu3up/uTifnTv3/9FshDq4dPxL+/XGjvEvtzX+De2In2R9/vxWeu+avL72++/vyGxMNMueRXxpuFP8ZCt+0nn8zV/sso1/+fJXL+xW1vhVxKWO7d/ckbqSDbOT9cryZG117cpiZXahtFB6VCzOTM9M3bh6vTiZrVE3f/6hU4y/37z86W7x0/aP7RJ/dO/2xze6bP+v//vgx1/bI/63vt759T+7R/x0Tvxml/Fnx27tun13Gn9+l/bv8/rH5S7jv/rr2nyXDwUAjkBtdW1ptlwurexzkb7X3O8xLrq/SO/tP4BqZBexHtGrJ8wWJSKi42PSd9QfRpMP6yL5MKrRi4t+j0zAYXvX6ftdEwAAAAAAAAAAAAAAYDe11bWlkc6f1urZRb/bCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwPH1vwAAAP//tBrD+w==")
r5 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYRES16=r4], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000002000010300000000fcffffff0200000300000008000000000c001400", @ANYRES32], 0x28}}, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000001200), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000000))

1.685584234s ago: executing program 4 (id=405):
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x58, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000007}, 0x0, 0x5dd8, 0x3, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x200000000000002}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0)
set_mempolicy_home_node(&(0x7f0000310000/0x4000)=nil, 0x4000, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000002c0)={[{@nogrpid}, {@resuid}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@orlov}, {@nombcache}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV")
syz_io_uring_setup(0x16c2, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x2}, &(0x7f0000000240)=<r0=>0x0, &(0x7f0000000140)=<r1=>0x0)
syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0})
syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x10c, &(0x7f0000000200)=0x6, 0x0, 0x4)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x20081e, &(0x7f0000000040)={[{@nodelalloc}, {@grpid}, {@auto_da_alloc}]}, 0x1, 0x4f4, &(0x7f00000008c0)="$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")
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
socket$kcm(0x10, 0x3, 0x10)
socket$kcm(0x10, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.self_freezing\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x2111, 0x80, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fef, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x1)
syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/time_for_children\x00')
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d80))
r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x8}, 0x8080, 0x2, 0x0, 0x0, 0x7fffffff}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080))
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000b00)=ANY=[@ANYRES32, @ANYRES64=r3, @ANYBLOB="13"], 0x20)
unlink(&(0x7f0000000180)='./file1\x00')

1.604178474s ago: executing program 3 (id=406):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,')
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x1000, 0xfffffffe, @remote, 0x8}, 0x51)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount(&(0x7f0000000200), &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='gadgetfs\x00', 0x900, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x2, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
syz_clone(0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="13e500000000000000000000000000009500000000000000"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r4}, 0x10)
r5 = socket$pptp(0x18, 0x1, 0x2)
close(r5)
r6 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0)
sendfile(r6, r3, 0x0, 0x80000000)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000980)={'wg2\x00', <r7=>0x0})
sendto$packet(r2, &(0x7f0000000180)="0b031407e0ff640f0200475400f6a13bb1000e00080008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r7}, 0x14)
bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r7, 0x2, {0x2, 0xff}, 0x1}, 0x18)

1.543893264s ago: executing program 0 (id=407):
r0 = socket(0x2, 0x80805, 0x0)
listen(r0, 0x5)
sendmmsg$inet(r0, &(0x7f0000001880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@ip_tos_u8={{0x11, 0x84, 0x1, 0x1}}], 0x18}}], 0x1, 0x8000)
r1 = socket(0x10, 0x3, 0x0)
write(r1, &(0x7f0000000000)="1c0000001a005f0214f9f4070009040080ffffffff02000200020000", 0x1c)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="020000000400000008000000060000000011"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007000000181100", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10)
connect$pppoe(r1, &(0x7f0000000240)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'ip6erspan0\x00'}}, 0x1e)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002ac0)=@newtaction={0x14, 0x30, 0xffff}, 0x14}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', <r6=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{}, [@TCA_NETEM_RATE={0x14, 0xe, {0x0, 0x7f}}]}}}]}, 0x60}}, 0x0)

1.529068953s ago: executing program 3 (id=408):
shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
write$selinux_attr(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
open(&(0x7f0000000140)='./file0\x00', 0xec40, 0x12)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15)
pipe2$9p(&(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[], 0x15)
r4 = dup(r3)
write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4])
chown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)

1.419144583s ago: executing program 2 (id=410):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000980)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=<r1=>r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='kfree\x00', 0xffffffffffffffff, 0x0, 0x9b}, 0x18)
pipe(&(0x7f00000045c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f00000002c0)=ANY=[@ANYRES32=r1, @ANYRES32=r4, @ANYBLOB="34ccbb6bd4b440b5fcb0fdafca0aa33801796c10fa8649577915aec21399a3a11b8b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3, 0x0, 0x3}, 0x18)
fchmodat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000080)=0x6, 0x4)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000200), 0xfc, 0x56d, &(0x7f00000013c0)="$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")
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"])
splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0xe8, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
timer_create(0x9, 0x0, &(0x7f0000bbdffc))
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRES32], 0x5c}}, 0x0)

1.412047754s ago: executing program 0 (id=411):
shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
write$selinux_attr(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
open(&(0x7f0000000140)='./file0\x00', 0xec40, 0x12)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x15)
pipe2$9p(&(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[], 0x15)
r4 = dup(r3)
write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4])
chown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)

1.335009223s ago: executing program 0 (id=412):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b70300000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0)
ptrace$ARCH_MAP_VDSO_X32(0x1e, r1, 0x0, 0x2001)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0)
write(r3, &(0x7f0000004200)='t', 0x1)
sendfile(r3, r2, 0x0, 0x3ffff)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff98)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8})
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000000), 0x6db6e559)

1.281451233s ago: executing program 3 (id=413):
r0 = socket$inet6(0xa, 0x2, 0x3a)
io_setup(0x2, &(0x7f0000000040))
utimensat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={{0x77359400}}, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x2004c8a0, 0x0, 0x0)
prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000ff9000/0x4000)=nil)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00')
pread64(r3, &(0x7f000000cf80)=""/102400, 0xfffffda3, 0xe0ffff000000)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_HEADER(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x8)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x4}}, 0x1c)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a0"], 0xffd8}}, 0x4000000)

1.174288113s ago: executing program 2 (id=414):
bpf$MAP_CREATE(0x0, &(0x7f0000001640)=ANY=[@ANYBLOB="0100000004000000080000000d00000000000000", @ANYRES32, @ANYBLOB="0000000000001169ebcc00"/20, @ANYRES32=0x0, @ANYRESHEX, @ANYBLOB='\x00'/28], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a80016002000024006000200035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(r2, 0xf507, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000140))
pwritev(0xffffffffffffffff, &(0x7f0000000940), 0x0, 0x0, 0x9)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000003c0)=[{0x0}], 0x1)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000000)={0x0, 'pim6reg\x00', {0x1}, 0x8})

1.109043953s ago: executing program 3 (id=415):
unlink(0x0)
r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xbe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x10090, 0x1, 0x7, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x834}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000240)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r2, @ANYRESOCT=r0, @ANYRESHEX=r1], 0x4, 0x1297, &(0x7f0000000f80)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
creat(&(0x7f0000000340)='./file0/file0\x00', 0x0)
statfs(&(0x7f0000000200)='./file2\x00', 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000340)='cpu\t&0&&\t')
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r3, 0x8008f511, &(0x7f0000000080))
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r4 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
prctl$PR_SET_SECUREBITS(0x1c, 0x8)
removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00')
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_config_ext={0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_clone(0xa49a4400, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc)

1.007989032s ago: executing program 2 (id=416):
add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec85"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB], &(0x7f00000006c0)='syzkaller\x00', 0x4, 0x47, &(0x7f0000000380)=""/71, 0xc1100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, 0x0, 0x20000894)
chdir(0x0)
r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100)
getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8)
r2 = msgget(0x0, 0x2c4)
msgsnd(r2, &(0x7f0000000100)=ANY=[@ANYRESOCT=r2], 0x2000, 0x0)
msgctl$IPC_RMID(r2, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000780)={[{@errors_remount}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@resgid}, {@block_validity}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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")
clock_gettime(0x0, &(0x7f0000000000)={<r3=>0x0, <r4=>0x0})
timer_settime(0x0, 0x0, &(0x7f000006b000)={{r3, r4+10000000}, {0x0, 0x9}}, 0x0)
timer_gettime(0x0, &(0x7f0000000040))
link(&(0x7f0000001240)='./file0\x00', 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r5, 0x0, 0x6}, 0x18)
io_setup(0x200, &(0x7f00000002c0)=<r6=>0x0)
io_pgetevents(r6, 0x5, 0x1, &(0x7f0000000300)=[{}], &(0x7f0000000340)={0x77359400}, 0x0)

604.552501ms ago: executing program 2 (id=417):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000980)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=<r1=>r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='kfree\x00', 0xffffffffffffffff, 0x0, 0x9b}, 0x18)
pipe(&(0x7f00000045c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f00000002c0)=ANY=[@ANYRES32=r1, @ANYRES32=r4, @ANYBLOB="34ccbb6bd4b440b5fcb0fdafca0aa33801796c10fa8649577915aec21399a3a11b8b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3, 0x0, 0x3}, 0x18)
fchmodat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000080)=0x6, 0x4)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000200), 0xfc, 0x56d, &(0x7f00000013c0)="$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")
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"])
splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0xe8, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
timer_create(0x9, 0x0, &(0x7f0000bbdffc))
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRES32], 0x5c}}, 0x0)

512.629431ms ago: executing program 1 (id=418):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000fc000000000000000083000000000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r4}, 0x10)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='sys_enter\x00', r2}, 0x18)
memfd_create(&(0x7f00000004c0)='%\x01\x00\xb6\xc8Lct\x82_ \x11\xccy\xf8\x9b.\xf8h\x85\x81$o\xcb\a\xcd\b\x87\xf0\x7fy\xeb\x84/3\x06M0\xb6\xd6\xb2\r\xcb\xfe\x7fs\x10mIt\x19\x8f\x1b\xf3&4.\xf3\x1f\x18\x9fS\x1d\xe1\xfc\x00\x00\x00\x00\x00\x00\x00', 0x6)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000100060000000077f2ab26850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x45)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r5}, 0x10)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x549, &(0x7f0000001800)="$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")
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
open(&(0x7f00000003c0)='./file1\x00', 0x147842, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r6, 0x0, 0x60, &(0x7f0000000180)={'filter\x00', 0xfffffffffffff20, [{}, {0x0, 0x100000000000000}]}, 0x68)

462.224591ms ago: executing program 3 (id=419):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x32}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8c}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
r1 = socket$inet6(0xa, 0x2, 0x3a)
r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
preadv(r2, 0x0, 0x0, 0x4bd, 0x8)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x10}}, './file0\x00'})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$gtp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$GTP_CMD_ECHOREQ(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)={0x2c, r4, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000840}, 0x24008004)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x1016c7, 0x0, 0x0, 0x6, 0x3, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$bt_hci(r5, &(0x7f0000000040)={0x27}, 0x6)
mkdir(0x0, 0x3b)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r6, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0x0, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000001800)='_', 0x1}], 0x1}, 0x4000000)
setsockopt$sock_attach_bpf(r6, 0x84, 0x1e, &(0x7f0000000000), 0x10)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x0, @remote}})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r8}, 0x10)
ioctl$sock_inet_SIOCSIFADDR(r7, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffe}})

363.615991ms ago: executing program 0 (id=420):
listen(0xffffffffffffffff, 0x3)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
syz_io_uring_setup(0xe42, &(0x7f0000000580)={0x0, 0x2119, 0x400, 0x1}, &(0x7f0000000240)=<r1=>0x0, &(0x7f00000001c0))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18002000"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f00001d8000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000140)=ANY=[], 0x7)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000780)='mm_page_free\x00', r4}, 0x10)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x1}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000001c0)=0x100, 0x4)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r5}, 0x10)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r6, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
listen(r6, 0x2)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r7, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10)
close_range(r6, 0xffffffffffffffff, 0x0)

231.2987ms ago: executing program 4 (id=421):
shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
write$selinux_attr(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
open(&(0x7f0000000140)='./file0\x00', 0xec40, 0x12)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15)
pipe2$9p(&(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r3, 0x0, 0x15)
r4 = dup(r3)
write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4])

230.14268ms ago: executing program 1 (id=422):
shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
write$selinux_attr(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
open(&(0x7f0000000140)='./file0\x00', 0xec40, 0x12)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x15)
pipe2$9p(&(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[], 0x15)
r4 = dup(r3)
write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4])
chown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)

184.88422ms ago: executing program 4 (id=423):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c000000000000002300850000000f00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r1 = dup2(r0, r0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
unshare(0x2040400)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
semtimedop(0x0, 0x0, 0x0, 0x0)
unshare(0x60400)
set_mempolicy(0x4005, 0x0, 0x2)
prctl$PR_SET_IO_FLUSHER(0x39, 0x1)
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0, @ANYRESOCT], 0x2, 0x699, &(0x7f0000000140)="$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")
r2 = memfd_create(0x0, 0x2)
write$binfmt_script(r2, 0x0, 0x0)
execveat(r2, 0x0, 0x0, 0x0, 0x1000)
write$sndseq(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
poll(0x0, 0x0, 0x8)
prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
setgid(0x0)

178.13624ms ago: executing program 1 (id=424):
shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
write$selinux_attr(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
open(&(0x7f0000000140)='./file0\x00', 0xec40, 0x12)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15)
pipe2$9p(&(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[], 0x15)
r4 = dup(r3)
write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4])
chown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)

172.10636ms ago: executing program 2 (id=425):
r0 = socket$inet6(0xa, 0x2, 0x3a)
io_setup(0x2, &(0x7f0000000040))
utimensat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={{0x77359400}}, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x2004c8a0, 0x0, 0x0)
prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000ff9000/0x4000)=nil)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00')
pread64(r3, &(0x7f000000cf80)=""/102400, 0xfffffda3, 0xe0ffff000000)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_HEADER(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x8)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x4}}, 0x1c)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a0"], 0xffd8}}, 0x4000000)

95.63695ms ago: executing program 1 (id=426):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100003e4e00000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xcb1c}, 0x18)
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000300)='./bus\x00', 0x1008002, &(0x7f00000003c0)={[{@grpquota}, {@delalloc}, {@noblock_validity}, {@usrquota}, {@dioread_nolock}, {@nobh}, {@usrquota}, {@grpjquota}, {@lazytime}]}, 0x1, 0x5eb, &(0x7f0000001740)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700)
r1 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r1, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000", @ANYRESHEX=r2, @ANYBLOB="0000000000000000b702000014002000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sysfs$1(0x1, 0x0)
prlimit64(0x0, 0xf, &(0x7f0000000140)={0x0, 0xffffffffffffffff}, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
recvmsg(r4, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r3}, 0x10)
inotify_init()

69.44699ms ago: executing program 4 (id=427):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a80016002000024006000200035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(r2, 0xf507, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000140))
pwritev(0xffffffffffffffff, &(0x7f0000000940), 0x0, 0x0, 0x9)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000003c0)=[{0x0}], 0x1)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000000)={0x0, 'pim6reg\x00', {0x1}, 0x8})

921.71µs ago: executing program 4 (id=428):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280), 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800001bc81a000000000002000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000101180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000e500010000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000050000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
epoll_create1(0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x100010e, &(0x7f0000000200), 0x2, 0x45c, &(0x7f0000000b40)="$eJzs28tvG8UfAPDvrpu++0t+pTz6AAIFEfFImrRAD3AAgcQBJCQu5WiStCp1G9QEiVYRBITKEVXijjhW4i/gBBcEnJC4wh1VqlAuFE5Ga+86tmOnSfNwwJ+PtMnM7mxmvp4de3YnDqBvDWc/koj9EfFrRAzWs60Fhuu/bi/OT/61OD+ZRLX61h9Jrdyfi/OTRdHivH15ZiSNSD9N4miHemevXL1QrlSmL+f5sbmL743NXrn6zPmL5XPT56YvTZw+ferk+PPPTTybHa6uN87/Z2098uHMscOvvX39jckz19/58eukiL8tjg0yvNLBx6vrDmlbOdCUTnb0sCGsSSkisu4aqI3/wSjFUucNxqufdD0x3aIGApummutyeKEK/HftHoxeNwHojeKDPrv/rW83tm7ysQ3ceql+A5TFfjvfYiFqO4tbnIG2+9uNNBwRZxb+/jLbYnOeQwAAtPg2m/883Tz/K+YfadzXVO5/+drQUL6WcjAi7qnuikMRcW9Erez9EfHAGutvXyRZPv9Jb95VYKuUzf9eyNe2GvO/er1FkaFSnjtQi38gOXu+Mn0if01GYmBXlh9foY7vXvnl827Hmud/2ZbVX8wF83bc3LGr9Zyp8lx5PTE3u/VxxJEdneJPGisBSUQcjogjd1nH+SdvHOt27M7xN+xctmcD1pmqX0U8Ue//hWiLv5CsvD45tjsq0yfGiqtiuZ9+vvZmt/rXEP+myPp/b8frvxH/UNKyXruw5pXLa7991vWeZnR11/+LzeNrqrw0IIqL4oPy3Nzl8Yidyev1Rjfvn1g6t8gX5bP4R453Hv8HY+mVOBoR2UX8YEQ8FBEP5333SEQ8GhHHV4j/h5cfe7fbse3Q/1Nt/T/UWqS1/5sSO6N9T+dE6cL337T+xaXk6t7/TtVSI/me1bz/raZdWWJdLx4AAAD8S6QRsT+SdLSRTtPR0fr/8B+KvWllZnbuqbMz71+aqn9HYCgG0uJJ12DT89Dx/La+yE+05U/mz42/KO2p5UcnZypTvQ4e+ty+LuM/83up160DNp3va0H/Mv6hfxn/0L+Mf+hfHcb/nl60A9h6nT7/P+pBO4Ct1zb+LftBH2mM/6S37QC2nud/0L+ax78pAPSN2T1x5y/JS0gsS0S6LZqxMYlkk0fB/l4HuPZEr9+ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANsY/AQAA//9couxY")
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000380), &(0x7f00000003c0)=r2}, 0x20)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0xa4}, {0x6}]})
r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
syz_usb_disconnect(r3)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[], 0x0)
ioctl$EVIOCRMFF(r3, 0x40085507, &(0x7f00000000c0)=0x50000002)
ioctl$TIOCSSOFTCAR(r0, 0x5453, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x4, 0x2004, @fd, 0x81, 0x0, 0x0, 0x4, 0x1, {0x1}})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x2, &(0x7f0000000480)={0x0, 0x0})
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, 0xffffffffffffffff, &(0x7f0000000c40)={0x2000000b})

0s ago: executing program 2 (id=429):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b70300000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0)
ptrace$ARCH_MAP_VDSO_X32(0x1e, r1, 0x0, 0x2001)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0)
write(r3, &(0x7f0000004200)='t', 0x1)
sendfile(r3, r2, 0x0, 0x3ffff)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1)
creat(&(0x7f00000000c0)='./file0\x00', 0xd4)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8})
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000000), 0x6db6e559)

kernel console output (not intermixed with test programs):

[   21.564742][   T29] audit: type=1400 audit(1738343289.886:81): avc:  denied  { read } for  pid=2981 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
Warning: Permanently added '10.128.10.46' (ED25519) to the list of known hosts.
[   24.991958][   T29] audit: type=1400 audit(1738343293.306:82): avc:  denied  { mounton } for  pid=3286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   24.992919][ T3286] cgroup: Unknown subsys name 'net'
[   25.014720][   T29] audit: type=1400 audit(1738343293.306:83): avc:  denied  { mount } for  pid=3286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   25.042076][   T29] audit: type=1400 audit(1738343293.336:84): avc:  denied  { unmount } for  pid=3286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   25.274943][ T3286] cgroup: Unknown subsys name 'cpuset'
[   25.281079][ T3286] cgroup: Unknown subsys name 'rlimit'
[   25.451860][   T29] audit: type=1400 audit(1738343293.766:85): avc:  denied  { setattr } for  pid=3286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   25.475960][   T29] audit: type=1400 audit(1738343293.766:86): avc:  denied  { create } for  pid=3286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   25.496453][   T29] audit: type=1400 audit(1738343293.766:87): avc:  denied  { write } for  pid=3286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   25.516927][   T29] audit: type=1400 audit(1738343293.766:88): avc:  denied  { read } for  pid=3286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   25.537203][   T29] audit: type=1400 audit(1738343293.776:89): avc:  denied  { mounton } for  pid=3286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   25.544394][ T3289] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   25.562122][   T29] audit: type=1400 audit(1738343293.776:90): avc:  denied  { mount } for  pid=3286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[   25.594027][   T29] audit: type=1400 audit(1738343293.886:91): avc:  denied  { relabelto } for  pid=3289 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   25.641877][ T3286] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   27.337456][ T3297] chnl_net:caif_netlink_parms(): no params data found
[   27.385679][ T3301] chnl_net:caif_netlink_parms(): no params data found
[   27.403922][ T3311] chnl_net:caif_netlink_parms(): no params data found
[   27.420590][ T3298] chnl_net:caif_netlink_parms(): no params data found
[   27.457521][ T3297] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.464633][ T3297] bridge0: port 1(bridge_slave_0) entered disabled state
[   27.471786][ T3297] bridge_slave_0: entered allmulticast mode
[   27.478270][ T3297] bridge_slave_0: entered promiscuous mode
[   27.484921][ T3303] chnl_net:caif_netlink_parms(): no params data found
[   27.493484][ T3297] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.500562][ T3297] bridge0: port 2(bridge_slave_1) entered disabled state
[   27.507712][ T3297] bridge_slave_1: entered allmulticast mode
[   27.514202][ T3297] bridge_slave_1: entered promiscuous mode
[   27.569478][ T3297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   27.600493][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.607618][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state
[   27.614957][ T3311] bridge_slave_0: entered allmulticast mode
[   27.621273][ T3311] bridge_slave_0: entered promiscuous mode
[   27.630794][ T3297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   27.651189][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.658457][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state
[   27.665594][ T3311] bridge_slave_1: entered allmulticast mode
[   27.672196][ T3311] bridge_slave_1: entered promiscuous mode
[   27.687723][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.694810][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state
[   27.701859][ T3301] bridge_slave_0: entered allmulticast mode
[   27.708438][ T3301] bridge_slave_0: entered promiscuous mode
[   27.728293][ T3298] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.735512][ T3298] bridge0: port 1(bridge_slave_0) entered disabled state
[   27.742625][ T3298] bridge_slave_0: entered allmulticast mode
[   27.749098][ T3298] bridge_slave_0: entered promiscuous mode
[   27.759994][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.767065][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state
[   27.774199][ T3301] bridge_slave_1: entered allmulticast mode
[   27.780638][ T3301] bridge_slave_1: entered promiscuous mode
[   27.800126][ T3298] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.807418][ T3298] bridge0: port 2(bridge_slave_1) entered disabled state
[   27.814734][ T3298] bridge_slave_1: entered allmulticast mode
[   27.821096][ T3298] bridge_slave_1: entered promiscuous mode
[   27.827791][ T3297] team0: Port device team_slave_0 added
[   27.847130][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   27.856847][ T3297] team0: Port device team_slave_1 added
[   27.863490][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   27.878077][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   27.888401][ T3298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   27.897585][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.904675][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state
[   27.912057][ T3303] bridge_slave_0: entered allmulticast mode
[   27.918643][ T3303] bridge_slave_0: entered promiscuous mode
[   27.940605][ T3298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   27.950648][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   27.964722][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.971748][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state
[   27.979030][ T3303] bridge_slave_1: entered allmulticast mode
[   27.985481][ T3303] bridge_slave_1: entered promiscuous mode
[   27.996609][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_0
[   28.003594][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   28.029717][ T3297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   28.059801][ T3311] team0: Port device team_slave_0 added
[   28.066349][ T3311] team0: Port device team_slave_1 added
[   28.072241][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_1
[   28.079213][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   28.105156][ T3297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   28.116608][ T3298] team0: Port device team_slave_0 added
[   28.125271][ T3301] team0: Port device team_slave_0 added
[   28.141135][ T3298] team0: Port device team_slave_1 added
[   28.157160][ T3301] team0: Port device team_slave_1 added
[   28.163923][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   28.173977][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   28.188422][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0
[   28.195395][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   28.221494][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   28.232463][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_0
[   28.239455][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   28.265460][ T3298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   28.294078][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1
[   28.301108][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   28.327073][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   28.337937][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_1
[   28.345118][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   28.371064][ T3298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   28.382189][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0
[   28.389174][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   28.415243][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   28.439823][ T3297] hsr_slave_0: entered promiscuous mode
[   28.445805][ T3297] hsr_slave_1: entered promiscuous mode
[   28.460005][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1
[   28.466969][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   28.492999][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   28.504423][ T3303] team0: Port device team_slave_0 added
[   28.511375][ T3303] team0: Port device team_slave_1 added
[   28.557150][ T3311] hsr_slave_0: entered promiscuous mode
[   28.563075][ T3311] hsr_slave_1: entered promiscuous mode
[   28.569034][ T3311] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   28.576745][ T3311] Cannot create hsr debugfs directory
[   28.593702][ T3298] hsr_slave_0: entered promiscuous mode
[   28.599809][ T3298] hsr_slave_1: entered promiscuous mode
[   28.605664][ T3298] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   28.613219][ T3298] Cannot create hsr debugfs directory
[   28.625435][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0
[   28.632380][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   28.658313][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   28.669647][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1
[   28.676638][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   28.702555][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   28.721849][ T3301] hsr_slave_0: entered promiscuous mode
[   28.727861][ T3301] hsr_slave_1: entered promiscuous mode
[   28.733622][ T3301] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   28.741214][ T3301] Cannot create hsr debugfs directory
[   28.781818][ T3303] hsr_slave_0: entered promiscuous mode
[   28.787799][ T3303] hsr_slave_1: entered promiscuous mode
[   28.793591][ T3303] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   28.801242][ T3303] Cannot create hsr debugfs directory
[   28.935671][ T3297] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   28.960027][ T3297] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   28.978183][ T3297] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   28.991619][ T3297] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   29.007326][ T3298] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   29.027921][ T3298] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   29.041339][ T3298] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   29.051288][ T3298] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   29.060265][ T3303] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   29.069242][ T3303] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   29.084231][ T3303] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   29.094647][ T3303] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   29.118903][ T3301] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   29.128472][ T3301] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   29.137382][ T3301] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   29.148470][ T3301] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   29.172495][ T3311] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   29.182136][ T3311] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   29.193103][ T3311] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   29.201530][ T3311] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   29.257545][ T3297] 8021q: adding VLAN 0 to HW filter on device bond0
[   29.286431][ T3298] 8021q: adding VLAN 0 to HW filter on device bond0
[   29.298115][ T3297] 8021q: adding VLAN 0 to HW filter on device team0
[   29.313581][  T167] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.320654][  T167] bridge0: port 1(bridge_slave_0) entered forwarding state
[   29.334537][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.341601][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   29.351341][ T3298] 8021q: adding VLAN 0 to HW filter on device team0
[   29.381131][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0
[   29.390855][  T167] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.397939][  T167] bridge0: port 1(bridge_slave_0) entered forwarding state
[   29.409087][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0
[   29.418821][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0
[   29.432170][ T3297] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   29.442654][ T3297] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   29.463284][  T167] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.470512][  T167] bridge0: port 2(bridge_slave_1) entered forwarding state
[   29.489657][ T3301] 8021q: adding VLAN 0 to HW filter on device team0
[   29.502549][ T3303] 8021q: adding VLAN 0 to HW filter on device team0
[   29.516560][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.523613][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   29.540468][  T167] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.547549][  T167] bridge0: port 2(bridge_slave_1) entered forwarding state
[   29.558410][ T3311] 8021q: adding VLAN 0 to HW filter on device team0
[   29.588242][   T58] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.595412][   T58] bridge0: port 1(bridge_slave_0) entered forwarding state
[   29.604506][   T58] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.611562][   T58] bridge0: port 2(bridge_slave_1) entered forwarding state
[   29.623217][   T58] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.630319][   T58] bridge0: port 1(bridge_slave_0) entered forwarding state
[   29.646241][   T58] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.653313][   T58] bridge0: port 2(bridge_slave_1) entered forwarding state
[   29.672755][ T3303] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   29.683188][ T3303] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   29.716662][ T3297] 8021q: adding VLAN 0 to HW filter on device batadv0
[   29.725993][ T3298] 8021q: adding VLAN 0 to HW filter on device batadv0
[   29.740877][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0
[   29.760984][ T3311] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   29.771401][ T3311] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   29.805377][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0
[   29.886604][ T3301] veth0_vlan: entered promiscuous mode
[   29.919343][ T3297] veth0_vlan: entered promiscuous mode
[   29.933044][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0
[   29.942099][ T3301] veth1_vlan: entered promiscuous mode
[   29.959537][ T3303] veth0_vlan: entered promiscuous mode
[   29.975569][ T3297] veth1_vlan: entered promiscuous mode
[   29.984983][ T3298] veth0_vlan: entered promiscuous mode
[   29.993786][ T3303] veth1_vlan: entered promiscuous mode
[   30.002902][ T3298] veth1_vlan: entered promiscuous mode
[   30.015153][ T3301] veth0_macvtap: entered promiscuous mode
[   30.026749][ T3298] veth0_macvtap: entered promiscuous mode
[   30.046414][ T3297] veth0_macvtap: entered promiscuous mode
[   30.053740][ T3298] veth1_macvtap: entered promiscuous mode
[   30.060394][ T3301] veth1_macvtap: entered promiscuous mode
[   30.069157][ T3297] veth1_macvtap: entered promiscuous mode
[   30.088984][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_0
[   30.100645][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   30.111157][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   30.122156][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0
[   30.134770][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   30.145316][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   30.155138][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   30.165564][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   30.176434][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_0
[   30.185319][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_1
[   30.192972][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   30.203406][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   30.213913][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_1
[   30.222023][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   30.232543][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   30.242407][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   30.252889][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   30.263509][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1
[   30.273248][ T3301] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   30.282138][ T3301] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   30.291038][ T3301] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   30.299790][ T3301] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   30.316148][ T3297] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   30.324900][ T3297] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   30.333586][ T3297] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   30.342332][ T3297] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   30.352925][ T3298] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   30.361818][ T3298] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   30.370716][ T3298] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   30.379493][ T3298] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   30.393814][ T3303] veth0_macvtap: entered promiscuous mode
[   30.408179][ T3303] veth1_macvtap: entered promiscuous mode
[   30.423209][   T29] kauditd_printk_skb: 18 callbacks suppressed
[   30.423224][   T29] audit: type=1400 audit(1738343298.736:110): avc:  denied  { mounton } for  pid=3301 comm="syz-executor" path="/root/syzkaller.OMm2pz/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[   30.431467][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   30.464168][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   30.464564][   T29] audit: type=1400 audit(1738343298.736:111): avc:  denied  { mount } for  pid=3301 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   30.473980][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   30.495967][   T29] audit: type=1400 audit(1738343298.736:112): avc:  denied  { mounton } for  pid=3301 comm="syz-executor" path="/root/syzkaller.OMm2pz/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   30.506368][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   30.506380][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   30.506395][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   30.531658][   T29] audit: type=1400 audit(1738343298.736:113): avc:  denied  { mount } for  pid=3301 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   30.531718][   T29] audit: type=1400 audit(1738343298.736:114): avc:  denied  { mounton } for  pid=3301 comm="syz-executor" path="/root/syzkaller.OMm2pz/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   30.531748][   T29] audit: type=1400 audit(1738343298.736:115): avc:  denied  { mounton } for  pid=3301 comm="syz-executor" path="/root/syzkaller.OMm2pz/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4550 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[   30.543314][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0
[   30.551976][   T29] audit: type=1400 audit(1738343298.736:116): avc:  denied  { unmount } for  pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   30.562849][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   30.675165][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   30.685185][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   30.695663][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   30.705569][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   30.715470][   T29] audit: type=1400 audit(1738343299.006:117): avc:  denied  { mounton } for  pid=3301 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=502 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[   30.716055][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   30.738749][   T29] audit: type=1400 audit(1738343299.006:118): avc:  denied  { mount } for  pid=3301 comm="syz-executor" name="/" dev="gadgetfs" ino=3610 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[   30.750313][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1
[   30.783014][ T3301] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   30.788239][ T3311] veth0_vlan: entered promiscuous mode
[   30.804941][ T3303] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   30.813649][ T3303] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   30.822393][ T3303] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   30.831096][ T3303] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   30.849198][ T3311] veth1_vlan: entered promiscuous mode
[   30.856729][   T29] audit: type=1400 audit(1738343299.176:119): avc:  denied  { read write } for  pid=3301 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   30.940463][ T3311] veth0_macvtap: entered promiscuous mode
[   30.972019][ T3311] veth1_macvtap: entered promiscuous mode
[   31.002892][ T3448] smc: net device bond0 applied user defined pnetid SYZ0
[   31.013576][ T3311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   31.024192][ T3311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.034072][ T3311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   31.044576][ T3311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.048283][ T3448] loop2: detected capacity change from 0 to 512
[   31.054440][ T3311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   31.071233][ T3311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.081049][ T3311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   31.091518][ T3311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.106353][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0
[   31.111539][ T3446] loop3: detected capacity change from 0 to 512
[   31.116227][ T3311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   31.130397][ T3311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.140267][ T3311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   31.150774][ T3311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.156868][ T3446] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   31.160619][ T3311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   31.183293][ T3446] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   31.183513][ T3311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.203542][ T3311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   31.214008][ T3311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.216708][ T3448] EXT4-fs (loop2): revision level too high, forcing read-only mode
[   31.225881][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1
[   31.244582][ T3448] EXT4-fs (loop2): orphan cleanup on readonly fs
[   31.253861][ T3448] EXT4-fs warning (device loop2): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   31.271424][ T3311] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   31.280232][ T3311] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   31.289046][ T3311] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   31.297750][ T3311] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   31.318370][ T3448] EXT4-fs (loop2): Cannot turn on quotas: error -117
[   31.337813][ T3448] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3: bg 0: block 40: padding at end of block bitmap is not set
[   31.354739][ T3459] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[   31.362973][ T3459] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[   31.367422][ T3448] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem
[   31.402793][ T3448] EXT4-fs (loop2): 1 truncate cleaned up
[   31.410747][ T3448] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   31.488097][ T3442] loop0: detected capacity change from 0 to 512
[   31.490607][ T3448] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #16: comm syz.2.3: corrupted xattr block 31: invalid header
[   31.495114][ T3442] EXT4-fs: Ignoring removed oldalloc option
[   31.543968][ T3467] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   31.558745][ T3467] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   31.601033][ T3442] EXT4-fs error (device loop0): ext4_xattr_inode_iget:436: comm syz.0.1: Parent and EA inode have the same ino 15
[   31.608187][ T3448] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop2 ino=16
[   31.616117][ T3442] EXT4-fs (loop0): Remounting filesystem read-only
[   31.628668][ T3442] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   31.641708][ T3442] EXT4-fs warning (device loop0): ext4_evict_inode:259: couldn't mark inode dirty (err -5)
[   31.664355][ T3442] EXT4-fs (loop0): 1 orphan inode deleted
[   31.675907][ T3442] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   31.688653][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   31.688706][ T3442] SELinux: (dev loop0, type ext4) getxattr errno 5
[   31.706245][ T3442] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   31.805193][ T3446] syz.3.4 (3446) used greatest stack depth: 10832 bytes left
[   31.998501][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   32.156260][ T3482] loop2: detected capacity change from 0 to 1024
[   32.185410][ T3482] =======================================================
[   32.185410][ T3482] WARNING: The mand mount option has been deprecated and
[   32.185410][ T3482]          and is ignored by this kernel. Remove the mand
[   32.185410][ T3482]          option from the mount to silence this warning.
[   32.185410][ T3482] =======================================================
[   32.290151][ T3482] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   32.319002][ T3482] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   32.376744][ T3482] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   32.531458][ T3500] loop0: detected capacity change from 0 to 512
[   32.544636][ T3500] EXT4-fs: Ignoring removed oldalloc option
[   32.588353][ T3498] loop3: detected capacity change from 0 to 8192
[   32.623240][ T3500] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   32.636377][ T3500] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   32.658702][ T3500] EXT4-fs (loop0): 1 truncate cleaned up
[   32.676078][ T3500] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   33.230549][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   33.257579][ T3512] loop1: detected capacity change from 0 to 512
[   33.310129][ T3512] EXT4-fs (loop1): too many log groups per flexible block group
[   33.317990][ T3512] EXT4-fs (loop1): failed to initialize mballoc (-12)
[   33.426433][ T3517] gretap1: entered allmulticast mode
[   33.512296][ T3512] EXT4-fs (loop1): mount failed
[   34.259788][ T3528] loop3: detected capacity change from 0 to 512
[   34.322608][ T3528] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.23: corrupted in-inode xattr: invalid ea_ino
[   34.377348][ T3528] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.23: couldn't read orphan inode 15 (err -117)
[   34.443586][ T3518] infiniband syz!: set active
[   34.448344][ T3518] infiniband syz!: added team_slave_0
[   34.542873][ T3532] netlink: 12 bytes leftover after parsing attributes in process `syz.4.24'.
[   34.552755][ T3532] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   34.566021][ T3528] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   34.616076][ T3507] Set syz1 is full, maxelem 65536 reached
[   34.630109][ T3518] RDS/IB: syz!: added
[   34.649163][ T3518] smc: adding ib device syz! with port count 1
[   34.688068][ T3543] loop4: detected capacity change from 0 to 512
[   34.694848][ T3543] EXT4-fs: Ignoring removed oldalloc option
[   34.701537][ T3518] smc:    ib device syz! port 1 has pnetid 
[   34.755045][ T3543] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.27: Parent and EA inode have the same ino 15
[   34.772983][ T3543] EXT4-fs (loop4): Remounting filesystem read-only
[   34.780045][ T3543] EXT4-fs warning (device loop4): ext4_evict_inode:259: couldn't mark inode dirty (err -5)
[   34.793546][ T3543] EXT4-fs (loop4): 1 orphan inode deleted
[   34.805617][ T3543] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   34.819536][ T3543] SELinux: (dev loop4, type ext4) getxattr errno 5
[   34.827691][ T3543] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   34.853195][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   34.898244][ T3552] loop3: detected capacity change from 0 to 512
[   34.921798][ T3552] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   34.956820][ T3550] lo speed is unknown, defaulting to 1000
[   34.967347][ T3550] lo speed is unknown, defaulting to 1000
[   34.970901][ T3518] syz.0.20 (3518) used greatest stack depth: 10568 bytes left
[   34.985714][ T3550] lo speed is unknown, defaulting to 1000
[   34.992931][ T3550] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   35.007406][ T3559] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies.
[   35.016932][ T3550] lo speed is unknown, defaulting to 1000
[   35.023207][ T3550] lo speed is unknown, defaulting to 1000
[   35.024524][ T3558] Falling back ldisc for ttyS3.
[   35.029585][ T3550] lo speed is unknown, defaulting to 1000
[   35.041208][ T3550] lo speed is unknown, defaulting to 1000
[   35.048138][ T3550] lo speed is unknown, defaulting to 1000
[   35.054743][ T3550] lo speed is unknown, defaulting to 1000
[   35.079109][ T3561] loop0: detected capacity change from 0 to 164
[   35.119041][ T3561] rock: directory entry would overflow storage
[   35.125344][ T3561] rock: sig=0x4f50, size=4, remaining=3
[   35.131004][ T3561] iso9660: Corrupted directory entry in block 4 of inode 1792
[   35.198093][ T3565] loop1: detected capacity change from 0 to 512
[   35.209156][ T3567] ipt_REJECT: ECHOREPLY no longer supported.
[   35.215828][ T3565] ext4: Bad value for 'debug_want_extra_isize'
[   35.216053][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.286773][ T3570] loop0: detected capacity change from 0 to 128
[   35.385905][ T3575] loop3: detected capacity change from 0 to 164
[   35.394568][ T3575] netlink: 'syz.3.35': attribute type 13 has an invalid length.
[   35.403681][ T3575] process 'syz.3.35' launched '/dev/fd/8' with NULL argv: empty string added
[   35.438990][   T29] kauditd_printk_skb: 205 callbacks suppressed
[   35.439006][   T29] audit: type=1400 audit(1738343303.756:324): avc:  denied  { write } for  pid=3576 comm="syz.3.36" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[   35.464104][   T29] audit: type=1326 audit(1738343303.756:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3576 comm="syz.3.36" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f17b683cda9 code=0x0
[   35.533923][   T29] audit: type=1400 audit(1738343303.846:326): avc:  denied  { read write } for  pid=3580 comm="syz.4.38" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   35.557647][   T29] audit: type=1400 audit(1738343303.846:327): avc:  denied  { open } for  pid=3580 comm="syz.4.38" path="/dev/virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   35.583146][   T29] audit: type=1400 audit(1738343303.896:328): avc:  denied  { ioctl } for  pid=3580 comm="syz.4.38" path="/dev/virtual_nci" dev="devtmpfs" ino=132 ioctlcmd=0x0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   35.640331][ T3588] loop4: detected capacity change from 0 to 512
[   35.652237][ T3588] journal_path: Lookup failure for './file0/file0'
[   35.658909][ T3588] EXT4-fs: error: could not find journal device path
[   35.745771][ T3588] netlink: 4 bytes leftover after parsing attributes in process `syz.4.38'.
[   35.759545][ T3588] bond_slave_0: entered promiscuous mode
[   35.765280][ T3588] bond_slave_1: entered promiscuous mode
[   35.780919][ T3588] macvtap1: entered promiscuous mode
[   35.786372][ T3588] bond0: entered promiscuous mode
[   35.791812][ T3588] macvtap1: entered allmulticast mode
[   35.797309][ T3588] bond0: entered allmulticast mode
[   35.802435][ T3588] bond_slave_0: entered allmulticast mode
[   35.808288][ T3588] bond_slave_1: entered allmulticast mode
[   35.816088][ T3588] 8021q: adding VLAN 0 to HW filter on device macvtap1
[   35.894758][   T29] audit: type=1400 audit(1738343304.216:329): avc:  denied  { ioctl } for  pid=3589 comm="syz.2.39" path="socket:[3969]" dev="sockfs" ino=3969 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   35.897584][ T3590] netlink: 4 bytes leftover after parsing attributes in process `syz.2.39'.
[   36.012211][ T3592] loop1: detected capacity change from 0 to 128
[   36.055719][ T3590] syz.2.39 (3590) used greatest stack depth: 10544 bytes left
[   36.068451][   T29] audit: type=1400 audit(1738343304.386:330): avc:  denied  { create } for  pid=3593 comm="syz.2.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   36.087898][   T29] audit: type=1400 audit(1738343304.386:331): avc:  denied  { setopt } for  pid=3593 comm="syz.2.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   36.088047][   T29] audit: type=1400 audit(1738343304.386:332): avc:  denied  { bind } for  pid=3593 comm="syz.2.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   36.088075][   T29] audit: type=1400 audit(1738343304.386:333): avc:  denied  { create } for  pid=3591 comm="syz.1.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[   36.132358][ T3597] netlink: 4 bytes leftover after parsing attributes in process `syz.1.40'.
[   36.155729][ T3599] capability: warning: `syz.0.42' uses deprecated v2 capabilities in a way that may be insecure
[   36.179749][ T3594] loop2: detected capacity change from 0 to 2048
[   36.191795][ T3599] loop0: detected capacity change from 0 to 512
[   36.199071][ T3599] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   36.210891][ T3599] EXT4-fs (loop0): 1 truncate cleaned up
[   36.217240][ T3594]  loop2: p4 < >
[   36.218029][ T3599] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   36.383905][    C0] hrtimer: interrupt took 46794 ns
[   36.388145][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.431934][ T3612] loop3: detected capacity change from 0 to 1024
[   36.439658][ T3612] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   36.499538][ T3612] EXT4-fs (loop3): revision level too high, forcing read-only mode
[   36.507836][ T3612] EXT4-fs (loop3): orphan cleanup on readonly fs
[   36.519703][ T3612] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5838: Corrupt filesystem
[   36.531485][ T3612] EXT4-fs (loop3): Remounting filesystem read-only
[   36.539637][ T3612] EXT4-fs (loop3): 1 orphan inode deleted
[   36.547602][ T3612] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[   36.560040][ T3612] SELinux: (dev loop3, type ext4) getxattr errno 5
[   36.568925][ T3612] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.778305][ T3610] lo speed is unknown, defaulting to 1000
[   36.826292][ T3612] lo speed is unknown, defaulting to 1000
[   36.970837][ T3612] syz.3.46 (3612) used greatest stack depth: 9632 bytes left
[   37.511464][ T3642] netlink: 4 bytes leftover after parsing attributes in process `syz.2.51'.
[   37.598324][ T3642] wg1: entered promiscuous mode
[   37.603237][ T3642] wg1: entered allmulticast mode
[   37.804951][ T3644] SELinux:  Context system_u:object_r:dmesg_exec_t:s0 is not valid (left unmapped).
[   37.948194][ T3658] loop1: detected capacity change from 0 to 1024
[   37.959456][ T3658] EXT4-fs: Ignoring removed nobh option
[   37.965109][ T3658] EXT4-fs: Ignoring removed bh option
[   37.978078][ T3658] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   38.008623][ T3658] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4115: comm syz.1.57: Allocating blocks 497-513 which overlap fs metadata
[   38.024133][ T3658] EXT4-fs (loop1): Remounting filesystem read-only
[   38.070245][ T3655] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop1 ino=12
[   38.089450][ T3663] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   38.105989][ T3655] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop1 ino=12
[   38.131393][ T3654] EXT4-fs (loop1): pa ffff888105164310: logic 256, phys. 385, len 8
[   38.198160][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.268932][ T3665] loop3: detected capacity change from 0 to 8192
[   38.392916][ T3673] netlink: 32 bytes leftover after parsing attributes in process `syz.3.60'.
[   38.416596][ T3673] netlink: 32 bytes leftover after parsing attributes in process `syz.3.60'.
[   38.583562][ T3678] loop4: detected capacity change from 0 to 164
[   38.630906][ T3680] loop1: detected capacity change from 0 to 2048
[   38.660545][ T3680] EXT4-fs: Ignoring removed bh option
[   38.681367][ T3678] rock: directory entry would overflow storage
[   38.687640][ T3678] rock: sig=0x4f50, size=4, remaining=3
[   38.693192][ T3678] iso9660: Corrupted directory entry in block 4 of inode 1792
[   38.726355][ T3680] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   39.091656][ T3708] netlink: 'syz.2.71': attribute type 14 has an invalid length.
[   39.372342][ T3715] loop2: detected capacity change from 0 to 1024
[   39.459109][ T3715] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   39.731539][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.767418][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.020758][ T3725] ./file0: Can't lookup blockdev
[   40.051793][ T3729] loop4: detected capacity change from 0 to 512
[   40.080663][ T3729] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.78: corrupted in-inode xattr: invalid ea_ino
[   40.096663][ T3729] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.78: couldn't read orphan inode 15 (err -117)
[   40.134627][ T3733] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.74'.
[   40.209393][ T3729] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   40.235801][ T3725] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.74'.
[   40.351357][ T3732] loop3: detected capacity change from 0 to 8192
[   40.448033][   T29] kauditd_printk_skb: 483 callbacks suppressed
[   40.448049][   T29] audit: type=1326 audit(1738343308.766:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3727 comm="syz.4.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb74b50cda9 code=0x7ffc0000
[   40.469357][ T3719] syz.0.75 uses obsolete (PF_INET,SOCK_PACKET)
[   40.506355][   T29] audit: type=1326 audit(1738343308.766:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3727 comm="syz.4.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb74b4a8fa9 code=0x7ffc0000
[   40.506396][   T29] audit: type=1326 audit(1738343308.766:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3727 comm="syz.4.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb74b50cda9 code=0x7ffc0000
[   40.506465][   T29] audit: type=1326 audit(1738343308.776:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3727 comm="syz.4.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb74b4a8fa9 code=0x7ffc0000
[   40.506493][   T29] audit: type=1326 audit(1738343308.776:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3727 comm="syz.4.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb74b50cda9 code=0x7ffc0000
[   40.506520][   T29] audit: type=1326 audit(1738343308.786:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3727 comm="syz.4.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb74b4a8fa9 code=0x7ffc0000
[   40.506625][   T29] audit: type=1326 audit(1738343308.786:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3727 comm="syz.4.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb74b50cda9 code=0x7ffc0000
[   40.506672][   T29] audit: type=1326 audit(1738343308.796:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3727 comm="syz.4.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb74b50cda9 code=0x7ffc0000
[   40.506699][   T29] audit: type=1326 audit(1738343308.796:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3727 comm="syz.4.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb74b50cda9 code=0x7ffc0000
[   40.506768][   T29] audit: type=1326 audit(1738343308.796:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3727 comm="syz.4.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fb74b50cda9 code=0x7ffc0000
[   40.537161][ T3742] loop1: detected capacity change from 0 to 512
[   40.537927][ T3742] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   40.539076][ T3742] EXT4-fs (loop1): 1 truncate cleaned up
[   40.539505][ T3742] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   40.554646][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.588114][ T3745] loop2: detected capacity change from 0 to 1024
[   40.588391][ T3745] EXT4-fs: Ignoring removed nobh option
[   40.594481][ T3745] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   40.707715][ T3751] sd 0:0:1:0: device reset
[   40.725433][ T3745] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   40.808826][ T3754] loop4: detected capacity change from 0 to 1024
[   41.038225][ T3755] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.80'.
[   41.131925][ T3754] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   41.154048][ T3757] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.80'.
[   41.200630][ T3761] netlink: 'syz.3.84': attribute type 21 has an invalid length.
[   41.225808][ T3761] netlink: 132 bytes leftover after parsing attributes in process `syz.3.84'.
[   41.309169][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.357392][ T3764] netlink: 12 bytes leftover after parsing attributes in process `syz.3.86'.
[   41.402506][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.531192][ T3769] loop2: detected capacity change from 0 to 1764
[   41.660082][ T3776] loop2: detected capacity change from 0 to 128
[   41.723253][ T3781] loop0: detected capacity change from 0 to 1024
[   41.766572][ T3781] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   41.777544][ T3781] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[   41.806088][ T3774] loop4: detected capacity change from 0 to 8192
[   41.836888][ T3781] JBD2: no valid journal superblock found
[   41.842649][ T3781] EXT4-fs (loop0): Could not load journal inode
[   41.939712][ T3788] netlink: 32 bytes leftover after parsing attributes in process `syz.4.88'.
[   41.975238][ T3788] netlink: 32 bytes leftover after parsing attributes in process `syz.4.88'.
[   42.208313][ T3794] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22
[   42.216563][ T3794] netdevsim netdevsim2: Direct firmware load for . failed with error -22
[   42.642464][ T3799] loop2: detected capacity change from 0 to 512
[   42.675876][ T3799] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   42.737374][ T3799] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   42.857483][ T3800] loop3: detected capacity change from 0 to 8192
[   43.409928][ T3809] loop4: detected capacity change from 0 to 1024
[   43.418011][ T3742] syz.1.89 (3742) used greatest stack depth: 6112 bytes left
[   43.437523][ T3809] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   43.453039][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.488147][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.587286][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.658231][ T1082] IPVS: starting estimator thread 0...
[   43.761442][ T3823] IPVS: using max 2400 ests per chain, 120000 per kthread
[   43.938515][ T3831] loop1: detected capacity change from 0 to 8192
[   44.048114][ T3832] Set syz1 is full, maxelem 65536 reached
[   44.079386][ T3835] lo speed is unknown, defaulting to 1000
[   44.249392][ T3843] loop2: detected capacity change from 0 to 1024
[   44.282387][ T3843] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   44.358485][ T3852] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   44.409954][ T3843] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[   44.448956][ T3852] geneve0: entered allmulticast mode
[   44.472530][ T3827] lo speed is unknown, defaulting to 1000
[   44.557671][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.688538][ T3864] netlink: 12 bytes leftover after parsing attributes in process `syz.0.115'.
[   44.764428][ T3866] loop2: detected capacity change from 0 to 256
[   44.789113][ T3866] vfat: Unknown parameter '€'
[   44.836862][ T3866] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   44.948768][ T3866] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   45.016063][ T3879] loop4: detected capacity change from 0 to 2048
[   45.038161][ T3866] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   45.050686][ T3879]  loop4: p1 < > p4
[   45.056585][ T3879] loop4: p4 size 8388608 extends beyond EOD, truncated
[   45.077420][ T3885] loop3: detected capacity change from 0 to 256
[   45.099249][ T3885] vfat: Unknown parameter 'ÿ0x0000000000000000'
[   45.123528][ T3881] xt_TPROXY: Can be used only with -p tcp or -p udp
[   45.125990][ T2999]  loop4: p1 < > p4
[   45.138441][ T3866] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   45.149946][ T2999] loop4: p4 size 8388608 extends beyond EOD, truncated
[   45.205074][ T3866] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   45.238241][ T3866] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   45.250246][ T3866] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   45.263257][ T3866] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   45.333632][ T3892] loop4: detected capacity change from 0 to 2048
[   45.350593][ T3892] EXT4-fs: Ignoring removed bh option
[   45.359047][ T3889] dccp_close: ABORT with 32 bytes unread
[   45.395562][ T3892] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   45.448484][ T3890] lo speed is unknown, defaulting to 1000
[   45.462525][   T29] kauditd_printk_skb: 623 callbacks suppressed
[   45.462592][   T29] audit: type=1326 audit(1738343313.776:1446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3873 comm="syz.0.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd5622c3d67 code=0x7ffc0000
[   45.534825][   T29] audit: type=1326 audit(1738343313.826:1447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3873 comm="syz.0.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd562268fa9 code=0x7ffc0000
[   45.558147][   T29] audit: type=1326 audit(1738343313.826:1448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3873 comm="syz.0.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd5622c3d67 code=0x7ffc0000
[   45.581543][   T29] audit: type=1326 audit(1738343313.826:1449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3873 comm="syz.0.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd562268fa9 code=0x7ffc0000
[   45.604815][   T29] audit: type=1326 audit(1738343313.826:1450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3873 comm="syz.0.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd5622ccda9 code=0x7ffc0000
[   45.628080][   T29] audit: type=1326 audit(1738343313.836:1451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3873 comm="syz.0.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd5622c3d67 code=0x7ffc0000
[   45.651673][   T29] audit: type=1326 audit(1738343313.836:1452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3873 comm="syz.0.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd562268fa9 code=0x7ffc0000
[   45.674972][   T29] audit: type=1326 audit(1738343313.836:1453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3873 comm="syz.0.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd5622ccda9 code=0x7ffc0000
[   45.698268][   T29] audit: type=1400 audit(1738343313.836:1454): avc:  denied  { mount } for  pid=3891 comm="syz.4.126" name="/" dev="ramfs" ino=6309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[   45.720389][   T29] audit: type=1326 audit(1738343313.836:1455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3873 comm="syz.0.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd5622c3d67 code=0x7ffc0000
[   45.795082][ T3917] loop2: detected capacity change from 0 to 8192
[   46.089474][ T3930] netlink: 4 bytes leftover after parsing attributes in process `syz.0.131'.
[   46.142292][ T3930] veth1_macvtap: entered allmulticast mode
[   46.213326][ T3933] netlink: 'syz.3.132': attribute type 4 has an invalid length.
[   46.402498][ T3946] netlink: 'syz.1.134': attribute type 27 has an invalid length.
[   46.435434][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.520362][ T3946] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.527613][ T3946] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.576041][ T3949] loop3: detected capacity change from 0 to 1764
[   46.581940][ T3946] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   46.594689][ T3949] iso9660: Bad value for 'sbsector'
[   46.637828][ T3946] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   46.690156][ T3946] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   46.699129][ T3946] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   46.708058][ T3946] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   46.716952][ T3946] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   46.749484][ T1082] lo speed is unknown, defaulting to 1000
[   46.772630][ T3958] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22
[   46.780943][ T3958] netdevsim netdevsim4: Direct firmware load for . failed with error -22
[   46.874619][ T3964] netlink: 4 bytes leftover after parsing attributes in process `syz.2.140'.
[   46.890550][ T3967] vlan2: entered allmulticast mode
[   46.901863][ T3964] netlink: 4 bytes leftover after parsing attributes in process `syz.2.140'.
[   46.968384][ T3973] loop0: detected capacity change from 0 to 1024
[   47.000759][ T3973] EXT4-fs: Ignoring removed nobh option
[   47.052189][ T3965] lo speed is unknown, defaulting to 1000
[   47.062182][ T3973] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   47.148507][ T3973] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   47.240138][ T3988] loop2: detected capacity change from 0 to 128
[   47.333252][ T3988] lo speed is unknown, defaulting to 1000
[   47.594798][ T3991] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.143'.
[   47.745857][ T3990] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.143'.
[   48.003539][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.064038][ T4003] loop3: detected capacity change from 0 to 1024
[   48.103870][ T4007] loop0: detected capacity change from 0 to 128
[   48.165956][ T4003] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   48.276648][ T4003] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[   48.353948][ T4008] lo speed is unknown, defaulting to 1000
[   48.409958][ T4000] Set syz1 is full, maxelem 65536 reached
[   48.538641][ T4022] loop1: detected capacity change from 0 to 8192
[   48.547033][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.584690][ T4022]  loop1: p1 p2 p3
[   48.589458][ T4022] loop1: p1 start 51379968 is beyond EOD, truncated
[   48.646261][ T4022] loop1: p3 size 100663552 extends beyond EOD, truncated
[   48.651785][ T4028] loop3: detected capacity change from 0 to 1024
[   48.693052][ T4032] netlink: 'syz.0.158': attribute type 21 has an invalid length.
[   48.693422][ T4028] EXT4-fs: Ignoring removed nobh option
[   48.722752][ T4032] netlink: 132 bytes leftover after parsing attributes in process `syz.0.158'.
[   48.748157][ T4028] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   48.795257][ T4028] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   48.839865][ T4043] loop0: detected capacity change from 0 to 1024
[   48.897827][ T4043] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   48.923296][ T4043] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[   48.966148][ T4047] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.156'.
[   48.978810][ T4046] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.156'.
[   49.009359][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.126631][ T4052] vlan2: entered allmulticast mode
[   49.170513][ T4048] netlink: 4 bytes leftover after parsing attributes in process `syz.4.157'.
[   49.229458][ T4054] loop1: detected capacity change from 0 to 512
[   49.259030][ T4054] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   49.293095][ T4054] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.162: bad orphan inode 16
[   49.325724][ T4054] ext4_test_bit(bit=15, block=4) = 0
[   49.331049][ T4054] EXT4-fs (loop1): 1 orphan inode deleted
[   49.347070][ T4054] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   49.426213][ T4059] loop0: detected capacity change from 0 to 1024
[   49.446461][ T4059] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   49.471212][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.482539][ T4059] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[   49.611677][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.634881][ T4060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   49.649118][ T4060] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   49.660588][ T4073] loop3: detected capacity change from 0 to 1024
[   49.684479][ T4075] netlink: 3 bytes leftover after parsing attributes in process `syz.0.167'.
[   49.694088][ T4075] 0ªX¹¦À: renamed from caif0
[   49.701305][ T4075] 0ªX¹¦À: entered allmulticast mode
[   49.707377][ T4075] A link change request failed with some changes committed already. Interface 
60ªX¹¦À may have been left with an inconsistent configuration, please check.
[   49.735555][ T4073] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   49.752677][ T4073] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[   49.804243][ T4082] netlink: 'syz.0.168': attribute type 14 has an invalid length.
[   49.833744][ T4084] loop0: detected capacity change from 0 to 512
[   49.850527][ T4084] EXT4-fs error (device loop0): ext4_orphan_get:1389: inode #15: comm syz.0.169: casefold flag without casefold feature
[   49.865894][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.881288][ T4084] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.169: couldn't read orphan inode 15 (err -117)
[   49.920037][ T4084] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   49.951243][ T4089] loop2: detected capacity change from 0 to 256
[   49.952840][ T4084] netlink: 'syz.0.169': attribute type 11 has an invalid length.
[   49.970089][ T4089] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   50.208256][ T4096] msdos: Unknown parameter '0x0000000000000000ÿÿ'
[   50.566120][ T4099] loop4: detected capacity change from 0 to 2048
[   50.595583][ T4099] EXT4-fs: Ignoring removed nomblk_io_submit option
[   50.626680][ T4099] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   50.691926][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.774298][ T3985] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[   50.825298][   T29] kauditd_printk_skb: 181 callbacks suppressed
[   50.825314][   T29] audit: type=1400 audit(1738343319.146:1637): avc:  denied  { ioctl } for  pid=4098 comm="syz.4.173" path="/33/file2/file2" dev="loop4" ino=16 ioctlcmd=0x937b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   50.893442][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.069211][ T4108] loop3: detected capacity change from 0 to 1024
[   51.083197][ T4108] EXT4-fs: Ignoring removed nobh option
[   51.128890][ T4108] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   51.204913][ T4111] lo speed is unknown, defaulting to 1000
[   51.357144][ T4112] vlan2: entered allmulticast mode
[   51.456464][ T4108] EXT4-fs error (device loop3): ext4_ext_check_inode:524: inode #11: comm syz.3.177: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[   51.496005][ T4110] loop2: detected capacity change from 0 to 512
[   51.506519][ T4108] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.177: couldn't read orphan inode 11 (err -117)
[   51.529089][ T4110] EXT4-fs (loop2): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   51.546335][ T4110] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2081 sclass=netlink_xfrm_socket pid=4110 comm=syz.2.176
[   51.564750][ T4108] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   51.587420][   T29] audit: type=1326 audit(1738343319.896:1638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4113 comm="syz.4.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb74b50cda9 code=0x7ffc0000
[   51.610887][   T29] audit: type=1326 audit(1738343319.896:1639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4113 comm="syz.4.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb74b50cda9 code=0x7ffc0000
[   51.666319][ T4108] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.177: Invalid block bitmap block 0 in block_group 0
[   51.680089][ T4108] Quota error (device loop3): write_blk: dquota write failed
[   51.687586][ T4108] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[   51.699321][ T4108] EXT4-fs error (device loop3): ext4_acquire_dquot:6927: comm syz.3.177: Failed to acquire dquot type 0
[   51.717632][   T29] audit: type=1400 audit(1738343320.036:1640): avc:  denied  { setopt } for  pid=4107 comm="syz.3.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   51.737007][   T29] audit: type=1400 audit(1738343320.036:1641): avc:  denied  { connect } for  pid=4107 comm="syz.3.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   51.824237][   T29] audit: type=1326 audit(1738343320.086:1642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4113 comm="syz.4.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fb74b50cda9 code=0x7ffc0000
[   51.833303][ T4117] loop4: detected capacity change from 0 to 2048
[   51.847749][   T29] audit: type=1326 audit(1738343320.086:1643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4113 comm="syz.4.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb74b50cda9 code=0x7ffc0000
[   51.854628][ T3303] EXT4-fs (loop2): unmounting filesystem 00800000-0000-0000-0000-000000000000.
[   51.877521][   T29] audit: type=1326 audit(1738343320.086:1644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4113 comm="syz.4.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb74b50cda9 code=0x7ffc0000
[   51.933038][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.965020][ T4117]  loop4: p1 < > p2 < > p3 p4
[   51.969816][ T4117] loop4: partition table partially beyond EOD, truncated
[   51.977220][ T4117] loop4: p1 start 2305 is beyond EOD, truncated
[   51.983585][ T4117] loop4: p2 start 4294902784 is beyond EOD, truncated
[   51.990433][ T4117] loop4: p3 start 3724543488 is beyond EOD, truncated
[   51.997292][ T4117] loop4: p4 size 8192 extends beyond EOD, truncated
[   52.009243][ T4126] loop2: detected capacity change from 0 to 1024
[   52.030645][ T4126] EXT4-fs: Ignoring removed nobh option
[   52.036805][ T4126] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   52.066660][ T4126] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   52.190428][ T4138] netlink: 'syz.0.182': attribute type 14 has an invalid length.
[   52.212392][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.231537][ T4139] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.180'.
[   52.253783][ T4136] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.180'.
[   52.277012][ T4141] loop1: detected capacity change from 0 to 1024
[   52.406056][ T4141] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   52.419759][ T4141] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[   52.544403][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.696943][ T4156] dccp_close: ABORT with 32 bytes unread
[   52.712620][ T4155] lo speed is unknown, defaulting to 1000
[   53.010516][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   53.027257][ T4158] loop4: detected capacity change from 0 to 164
[   53.079051][ T4158] iso9660: Corrupted directory entry in block 4 of inode 1792
[   53.316055][ T4162] loop2: detected capacity change from 0 to 8192
[   53.365022][ T4170] mmap: syz.0.192 (4170) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   53.565380][ T4175] loop4: detected capacity change from 0 to 1024
[   53.616274][ T4175] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   53.740573][ T4175] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[   53.755980][ T4179] loop0: detected capacity change from 0 to 1024
[   53.783419][ T4179] EXT4-fs: Ignoring removed nobh option
[   53.855093][ T4179] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   53.880893][ T4179] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   53.884444][ T4171] lo speed is unknown, defaulting to 1000
[   53.959252][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   54.027681][ T4186] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.194'.
[   54.061369][ T4183] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.194'.
[   54.172303][ T4189] loop3: detected capacity change from 0 to 1024
[   54.194571][ T4189] EXT4-fs: Ignoring removed nobh option
[   54.223501][ T4189] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   54.249068][ T4189] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   54.263435][ T4195] netlink: 'syz.2.196': attribute type 8 has an invalid length.
[   54.401172][ T4204] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.197'.
[   54.408820][ T4206] loop1: detected capacity change from 0 to 1024
[   54.418903][ T4206] EXT4-fs: Ignoring removed nobh option
[   54.425112][ T4206] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   54.437911][ T4203] netlink: 'syz.2.200': attribute type 4 has an invalid length.
[   54.441139][ T4206] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   54.446676][ T4200] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.197'.
[   54.503745][ T4209] loop2: detected capacity change from 0 to 1024
[   54.511103][ T4209] EXT4-fs: Ignoring removed nomblk_io_submit option
[   54.527060][ T4209] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   54.552438][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   54.570591][ T4213] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.201'.
[   54.597438][ T4210] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.201'.
[   54.636349][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   54.717880][ T4220] loop0: detected capacity change from 0 to 512
[   54.743775][ T4220] EXT4-fs (loop0): can't mount with commit=3, fs mounted w/o journal
[   54.792152][ T4222] sch_tbf: burst 0 is lower than device lo mtu (18) !
[   54.984007][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.052736][ T4230] netlink: 'syz.3.207': attribute type 14 has an invalid length.
[   55.281241][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.368946][ T4241] loop3: detected capacity change from 0 to 128
[   55.400723][ T4240] loop1: detected capacity change from 0 to 1024
[   55.471696][ T4240] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   55.566009][ T4241] lo speed is unknown, defaulting to 1000
[   55.750293][ T4240] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   55.843759][   T29] kauditd_printk_skb: 628 callbacks suppressed
[   55.843772][   T29] audit: type=1326 audit(1738343324.156:2273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4231 comm="syz.4.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb74b503d67 code=0x7ffc0000
[   55.874371][ T4246] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   55.963598][   T29] audit: type=1326 audit(1738343324.196:2274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4231 comm="syz.4.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb74b4a8fa9 code=0x7ffc0000
[   55.986969][   T29] audit: type=1326 audit(1738343324.196:2275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4231 comm="syz.4.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb74b503d67 code=0x7ffc0000
[   56.010234][   T29] audit: type=1326 audit(1738343324.196:2276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4231 comm="syz.4.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb74b4a8fa9 code=0x7ffc0000
[   56.033512][   T29] audit: type=1326 audit(1738343324.196:2277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4231 comm="syz.4.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fb74b50cda9 code=0x7ffc0000
[   56.056881][   T29] audit: type=1326 audit(1738343324.196:2278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4231 comm="syz.4.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb74b503d67 code=0x7ffc0000
[   56.080194][   T29] audit: type=1326 audit(1738343324.196:2279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4231 comm="syz.4.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb74b4a8fa9 code=0x7ffc0000
[   56.085247][ T4255] loop0: detected capacity change from 0 to 1024
[   56.103768][   T29] audit: type=1326 audit(1738343324.196:2280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4231 comm="syz.4.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fb74b50cda9 code=0x7ffc0000
[   56.111885][ T4255] EXT4-fs: Ignoring removed nobh option
[   56.132947][   T29] audit: type=1400 audit(1738343324.206:2281): avc:  denied  { ioctl } for  pid=4239 comm="syz.1.210" path="socket:[7286]" dev="sockfs" ino=7286 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   56.163078][   T29] audit: type=1326 audit(1738343324.226:2282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4231 comm="syz.4.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb74b503d67 code=0x7ffc0000
[   56.166197][ T4255] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   56.202934][ T4256] vhci_hcd: invalid port number 127
[   56.208251][ T4256] vhci_hcd: default hub control req: 6003 v000e i007f l172
[   56.221525][ T4255] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   56.288886][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   56.348303][ T4256] loop4: detected capacity change from 0 to 1024
[   56.355112][ T4256] EXT4-fs: Ignoring removed orlov option
[   56.360829][ T4256] EXT4-fs: Ignoring removed nomblk_io_submit option
[   56.374623][ T4259] loop3: detected capacity change from 0 to 1024
[   56.381779][ T4259] EXT4-fs: Ignoring removed nobh option
[   56.390835][ T4259] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   56.409148][ T4256] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   56.477472][ T4268] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.214'.
[   56.494689][ T4264] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.214'.
[   56.540671][ T4267] loop1: detected capacity change from 0 to 8192
[   56.727763][ T4274] loop4: detected capacity change from 0 to 8192
[   56.784448][ T4274]  loop4: p1 p2 p3
[   56.788843][ T4274] loop4: p1 start 51379968 is beyond EOD, truncated
[   56.796579][ T4274] loop4: p3 size 100663552 extends beyond EOD, truncated
[   56.948598][ T4281] loop4: detected capacity change from 0 to 1024
[   56.981498][ T4281] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[   57.154483][ T4285] lo speed is unknown, defaulting to 1000
[   57.576901][ T4298] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4298 comm=syz.1.227
[   57.589290][ T4298] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4298 comm=syz.1.227
[   57.627712][ T4300] SELinux:  Context system_u:object_r:updpwd_exec_t:s0 is not valid (left unmapped).
[   57.642329][ T4298] loop1: detected capacity change from 0 to 128
[   57.697838][ T4306] loop2: detected capacity change from 0 to 256
[   57.701382][ T4307] loop1: detected capacity change from 0 to 512
[   57.723933][ T4306] vfat: Unknown parameter 'ÿ0x0000000000000000'
[   57.743682][ T4307] EXT4-fs error (device loop1): ext4_orphan_get:1389: inode #15: comm syz.1.229: casefold flag without casefold feature
[   57.978163][ T4307] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.229: couldn't read orphan inode 15 (err -117)
[   58.020641][ T4307] netlink: 'syz.1.229': attribute type 11 has an invalid length.
[   58.032218][ T4310] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   58.256232][ T4290] lo speed is unknown, defaulting to 1000
[   58.471760][ T4323] loop1: detected capacity change from 0 to 1024
[   58.501069][ T4323] EXT4-fs: Ignoring removed nobh option
[   58.515457][ T4323] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   58.577105][ T4321] loop0: detected capacity change from 0 to 1764
[   58.583892][ T4321] iso9660: Bad value for 'sbsector'
[   58.617575][ T4332] loop4: detected capacity change from 0 to 512
[   58.718428][ T4332] EXT4-fs error (device loop4): ext4_ext_check_inode:524: inode #15: comm syz.4.236: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[   58.736897][ T4336] __nla_validate_parse: 2 callbacks suppressed
[   58.736913][ T4336] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.234'.
[   58.754584][ T4334] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.234'.
[   58.788598][ T4333] loop3: detected capacity change from 0 to 8192
[   58.795775][ T4332] EXT4-fs error (device loop4): ext4_ext_check_inode:524: inode #15: comm syz.4.236: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[   59.069350][ T4339] xt_bpf: check failed: parse error
[   59.129075][ T4342] loop4: detected capacity change from 0 to 512
[   59.172775][ T4342] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[   59.184451][ T4342] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it
[   59.194568][ T4342] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.239: Corrupt directory, running e2fsck is recommended
[   59.234596][ T4342] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117
[   59.242824][ T4342] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.239: corrupted in-inode xattr: invalid ea_ino
[   59.301952][ T4342] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.239: couldn't read orphan inode 15 (err -117)
[   59.372554][ T4342] EXT4-fs error (device loop4): __ext4_remount:6738: comm syz.4.239: Abort forced by user
[   59.434535][ T4342] EXT4-fs (loop4): Remounting filesystem read-only
[   59.441325][ T4342] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback.
[   59.549871][ T4343] Set syz1 is full, maxelem 65536 reached
[   59.698380][ T4355] loop4: detected capacity change from 0 to 512
[   59.809901][ T4361] loop2: detected capacity change from 0 to 1024
[   59.818903][ T4355] EXT4-fs error (device loop4): ext4_orphan_get:1389: inode #15: comm syz.4.242: casefold flag without casefold feature
[   59.839365][ T4355] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.242: couldn't read orphan inode 15 (err -117)
[   60.015260][ T4373] lo speed is unknown, defaulting to 1000
[   60.062813][ T4373] geneve0: entered allmulticast mode
[   60.276869][ T4355] netlink: 'syz.4.242': attribute type 11 has an invalid length.
[   60.668620][ T4393] Zero length message leads to an empty skb
[   60.998493][ T4403] loop4: detected capacity change from 0 to 512
[   61.011735][   T29] kauditd_printk_skb: 457 callbacks suppressed
[   61.011751][   T29] audit: type=1400 audit(1738343329.316:2740): avc:  denied  { read } for  pid=4402 comm="syz.4.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   61.023239][ T4403] EXT4-fs: Ignoring removed oldalloc option
[   61.091718][ T4403] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.253: Parent and EA inode have the same ino 15
[   61.134431][ T4403] EXT4-fs (loop4): Remounting filesystem read-only
[   61.141107][ T4403] EXT4-fs warning (device loop4): ext4_evict_inode:259: couldn't mark inode dirty (err -5)
[   61.211256][ T4406] wireguard0: entered promiscuous mode
[   61.216790][ T4406] wireguard0: entered allmulticast mode
[   61.230433][ T4403] EXT4-fs (loop4): 1 orphan inode deleted
[   61.250197][   T29] audit: type=1400 audit(1738343329.556:2741): avc:  denied  { tracepoint } for  pid=4405 comm="syz.1.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[   61.266958][ T4403] SELinux: (dev loop4, type ext4) getxattr errno 5
[   61.328646][ T4411] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[   61.379770][ T4415] netlink: 4 bytes leftover after parsing attributes in process `syz.0.255'.
[   61.394283][ T4417] loop4: detected capacity change from 0 to 1024
[   61.403077][ T4415] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   61.409114][ T4417] EXT4-fs: Ignoring removed nobh option
[   61.410624][ T4415] batman_adv: batadv0: Removing interface: batadv_slave_0
[   61.427118][ T4417] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   61.465441][ T4417] EXT4-fs error (device loop4): ext4_ext_check_inode:524: inode #11: comm syz.4.257: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[   61.489415][ T4415] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   61.496980][ T4415] batman_adv: batadv0: Removing interface: batadv_slave_1
[   61.505918][ T4417] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.257: couldn't read orphan inode 11 (err -117)
[   61.538976][ T4420] loop2: detected capacity change from 0 to 1024
[   61.567610][ T4417] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.257: Invalid block bitmap block 0 in block_group 0
[   61.583260][ T4420] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[   61.598399][ T4417] Quota error (device loop4): write_blk: dquota write failed
[   61.605967][ T4417] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[   61.624245][ T4417] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.257: Failed to acquire dquot type 0
[   61.801126][   T29] audit: type=1326 audit(1738343330.116:2742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4428 comm="syz.1.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8630afcda9 code=0x7ffc0000
[   61.824648][   T29] audit: type=1326 audit(1738343330.116:2743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4428 comm="syz.1.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8630afcda9 code=0x7ffc0000
[   61.848064][   T29] audit: type=1326 audit(1738343330.116:2744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4428 comm="syz.1.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7f8630afcda9 code=0x7ffc0000
[   61.857571][ T4433] lo speed is unknown, defaulting to 1000
[   61.871625][   T29] audit: type=1326 audit(1738343330.116:2745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4428 comm="syz.1.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8630afcda9 code=0x7ffc0000
[   61.871656][   T29] audit: type=1326 audit(1738343330.116:2746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4428 comm="syz.1.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8630afcda9 code=0x7ffc0000
[   61.908376][ T4437] loop4: detected capacity change from 0 to 512
[   61.924227][   T29] audit: type=1326 audit(1738343330.116:2747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4428 comm="syz.1.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f8630afcda9 code=0x7ffc0000
[   61.992074][ T4437] EXT4-fs warning (device loop4): ext4_enable_quotas:7145: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix.
[   62.024358][ T4437] EXT4-fs (loop4): mount failed
[   62.137814][ T4437] rdma_rxe: rxe_newlink: failed to add team_slave_0
[   62.268800][ T4454] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.265'.
[   62.318260][ T4452] loop2: detected capacity change from 0 to 1024
[   62.337708][ T4450] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.265'.
[   62.358476][ T4452] EXT4-fs: Ignoring removed nobh option
[   62.409037][ T4452] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   62.769758][ T4465] loop4: detected capacity change from 0 to 1024
[   62.798511][ T4465] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[   62.813881][ T4464] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.266'.
[   62.832010][ T4462] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.266'.
[   62.887423][ T4467] loop3: detected capacity change from 0 to 8192
[   63.313907][ T4480] loop4: detected capacity change from 0 to 4096
[   63.786943][ T4495] 9pnet_fd: Insufficient options for proto=fd
[   63.870524][ T4497] syz.0.280: attempt to access beyond end of device
[   63.870524][ T4497] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0
[   63.995970][ T4501] sd 0:0:1:0: device reset
[   64.059892][ T4503] loop2: detected capacity change from 0 to 1024
[   64.074939][ T4503] EXT4-fs: Ignoring removed nobh option
[   64.095091][ T4503] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   64.189316][ T4501] loop4: detected capacity change from 0 to 164
[   64.790744][ T4501] ISOFS: unable to read i-node block
[   64.796216][ T4501] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[   64.920497][ T4516] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.282'.
[   64.935312][ T4511] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.282'.
[   65.268796][ T4521] loop2: detected capacity change from 0 to 8192
[   65.419792][ T4493] lo speed is unknown, defaulting to 1000
[   65.490616][ T4497] lo speed is unknown, defaulting to 1000
[   65.888768][ T4530] loop4: detected capacity change from 0 to 8192
[   66.120078][ T4538] loop2: detected capacity change from 0 to 1024
[   66.173276][ T4538] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[   66.355240][ T4545] 9pnet_fd: Insufficient options for proto=fd
[   66.428594][   T29] kauditd_printk_skb: 1653 callbacks suppressed
[   66.428608][   T29] audit: type=1400 audit(1738343334.746:4401): avc:  denied  { ioctl } for  pid=4549 comm="syz.2.293" path="socket:[7830]" dev="sockfs" ino=7830 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   66.464423][ T4550] netlink: 4 bytes leftover after parsing attributes in process `syz.2.293'.
[   66.490412][ T4550] loop2: detected capacity change from 0 to 1024
[   66.508095][ T4553] loop3: detected capacity change from 0 to 1024
[   66.529568][   T29] audit: type=1400 audit(1738343334.816:4402): avc:  denied  { create } for  pid=4548 comm="syz.0.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[   66.564466][ T4550] EXT4-fs mount: 34 callbacks suppressed
[   66.564559][ T4550] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   66.566086][ T4553] EXT4-fs: Ignoring removed orlov option
[   66.588475][ T4553] EXT4-fs: Ignoring removed nomblk_io_submit option
[   66.601646][   T29] audit: type=1400 audit(1738343334.916:4403): avc:  denied  { create } for  pid=4549 comm="syz.2.293" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=blk_file permissive=1
[   66.624831][ T4550] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[   66.640003][ T4550] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28
[   66.652392][ T4550] EXT4-fs (loop2): This should not happen!! Data will be lost
[   66.652392][ T4550] 
[   66.660615][ T4553] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   66.662112][ T4550] EXT4-fs (loop2): Total free blocks count 0
[   66.680235][ T4550] EXT4-fs (loop2): Free/Dirty block details
[   66.686304][ T4550] EXT4-fs (loop2): free_blocks=68451041280
[   66.692236][ T4550] EXT4-fs (loop2): dirty_blocks=16
[   66.697467][ T4550] EXT4-fs (loop2): Block reservation details
[   66.703466][ T4550] EXT4-fs (loop2): i_reserved_data_blocks=1
[   66.724213][   T29] audit: type=1400 audit(1738343334.946:4404): avc:  denied  { map } for  pid=4549 comm="syz.2.293" path="/56/file2/cpuset.memory_pressure_enabled" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   66.773679][ T4563] loop0: detected capacity change from 0 to 512
[   66.811571][ T4563] EXT4-fs (loop0): revision level too high, forcing read-only mode
[   66.822496][ T4563] EXT4-fs (loop0): orphan cleanup on readonly fs
[   66.829360][ T4566] loop4: detected capacity change from 0 to 1024
[   66.849883][   T29] audit: type=1400 audit(1738343335.076:4405): avc:  denied  { setopt } for  pid=4552 comm="syz.3.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   66.870548][   T29] audit: type=1400 audit(1738343335.106:4406): avc:  denied  { append } for  pid=4552 comm="syz.3.295" name="file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   66.892874][   T29] audit: type=1400 audit(1738343335.106:4407): avc:  denied  { lock } for  pid=4552 comm="syz.3.295" path="/55/file1/file0/file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   66.920676][ T4563] Quota error (device loop0): v2_read_file_info: Block with free entry 1 out of range (1, 6).
[   66.927270][ T4566] EXT4-fs: Ignoring removed nobh option
[   66.937614][ T4566] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   66.939628][ T4563] EXT4-fs warning (device loop0): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   66.981273][ T4566] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   67.012590][ T4563] EXT4-fs (loop0): Cannot turn on quotas: error -117
[   67.022489][ T3483] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28
[   67.060977][ T4573] netlink: 4 bytes leftover after parsing attributes in process `syz.1.301'.
[   67.064486][ T4563] EXT4-fs error (device loop0): ext4_orphan_get:1389: inode #16: comm syz.0.296: casefold flag without casefold feature
[   67.085429][   T29] audit: type=1400 audit(1738343335.396:4408): avc:  denied  { ioctl } for  pid=4572 comm="syz.1.301" path="socket:[7881]" dev="sockfs" ino=7881 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   67.113524][ T4573] bridge0: port 3(vlan3) entered blocking state
[   67.119831][ T4573] bridge0: port 3(vlan3) entered disabled state
[   67.126462][ T4573] vlan3: entered allmulticast mode
[   67.132614][ T4573] vlan3: left allmulticast mode
[   67.154597][ T4563] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.296: couldn't read orphan inode 16 (err -117)
[   67.163716][ T4576] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.297'.
[   67.176351][   T29] audit: type=1400 audit(1738343335.496:4409): avc:  denied  { sqpoll } for  pid=4575 comm="syz.2.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[   67.181062][ T4574] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.297'.
[   67.226036][ T4563] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   67.360887][ T4577] lo speed is unknown, defaulting to 1000
[   67.370503][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   67.393188][ T4580] infiniband syz2: set down
[   67.397795][ T4580] infiniband syz2: added veth0_to_bond
[   67.457037][ T4580] RDS/IB: syz2: added
[   67.461145][ T4580] smc: adding ib device syz2 with port count 1
[   67.494628][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   67.539690][ T4580] smc:    ib device syz2 port 1 has pnetid 
[   67.624410][ T4591] 9pnet_fd: Insufficient options for proto=fd
[   67.640772][ T4589] bond2: entered promiscuous mode
[   67.645972][ T4589] bond2: entered allmulticast mode
[   67.676170][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   67.700017][ T4589] 8021q: adding VLAN 0 to HW filter on device bond2
[   67.751705][ T4589] bond2 (unregistering): Released all slaves
[   67.769952][ T4593] .: renamed from vlan1 (while UP)
[   68.075613][ T4609] loop3: detected capacity change from 0 to 512
[   68.090595][ T4577] loop2: detected capacity change from 0 to 512
[   68.109793][ T4577] EXT4-fs: Ignoring removed oldalloc option
[   68.119446][ T4609] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000001)
[   68.153302][ T4577] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.299: Parent and EA inode have the same ino 15
[   68.187231][ T4577] EXT4-fs (loop2): Remounting filesystem read-only
[   68.193847][ T4577] EXT4-fs warning (device loop2): ext4_evict_inode:259: couldn't mark inode dirty (err -5)
[   68.235978][ T4577] EXT4-fs (loop2): 1 orphan inode deleted
[   68.252759][ T4577] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   68.285651][ T4577] SELinux: (dev loop2, type ext4) getxattr errno 5
[   68.305561][ T4577] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   68.328608][ T4611] netlink: 292 bytes leftover after parsing attributes in process `syz.3.311'.
[   68.919655][ T4627] loop4: detected capacity change from 0 to 1024
[   68.936893][ T4627] EXT4-fs: Ignoring removed nobh option
[   68.944258][ T4629] 9pnet_virtio: no channels available for device 
[   69.044592][ T4627] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   69.137655][ T4627] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   69.449733][ T4642] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.317'.
[   69.458122][ T4618] loop0: detected capacity change from 0 to 2048
[   69.460430][ T4637] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.317'.
[   69.577833][ T4644] lo speed is unknown, defaulting to 1000
[   69.785704][ T4618]  loop0: p1 < > p2 < > p3 p4
[   69.790493][ T4618] loop0: partition table partially beyond EOD, truncated
[   69.984110][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.004752][ T4618] loop0: p1 start 2305 is beyond EOD, truncated
[   70.011082][ T4618] loop0: p2 start 4294902784 is beyond EOD, truncated
[   70.018012][ T4618] loop0: p3 start 3724543488 is beyond EOD, truncated
[   70.024929][ T4618] loop0: p4 size 8192 extends beyond EOD, truncated
[   70.072489][ T4652] sd 0:0:1:0: device reset
[   70.076020][ T4656] nfs: Deprecated parameter 'nointr'
[   70.118795][ T4656] tipc: Started in network mode
[   70.123776][ T4656] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[   70.136386][ T4652] loop2: detected capacity change from 0 to 164
[   70.155131][ T4652] ISOFS: unable to read i-node block
[   70.160526][ T4652] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[   70.205908][ T4656] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[   70.214208][ T2999]  loop0: p1 < > p2 < > p3 p4
[   70.215046][ T4656] tipc: Enabled bearer <udp:syz1>, priority 10
[   70.218996][ T2999] loop0: partition table partially beyond EOD, truncated
[   70.224311][ T2999] loop0: p1 start 2305 is beyond EOD, truncated
[   70.238816][ T2999] loop0: p2 start 4294902784 is beyond EOD, truncated
[   70.245626][ T2999] loop0: p3 start 3724543488 is beyond EOD, truncated
[   70.252400][ T2999] loop0: p4 size 8192 extends beyond EOD, truncated
[   70.294674][ T4660] loop3: detected capacity change from 0 to 1024
[   70.311503][ T3471] udevd[3471]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[   70.345756][ T4660] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   70.367574][ T3471] udevd[3471]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[   70.407949][ T4671] loop2: detected capacity change from 0 to 128
[   70.444893][ T4674] usb usb4: usbfs: interface 0 claimed by hub while 'syz.0.328' sets config #-1
[   70.472951][ T4671] rdma_rxe: rxe_newlink: failed to add veth0_to_bond
[   70.505073][ T4674] syz!: rxe_newlink: already configured on team_slave_0
[   70.630994][ T4681] netlink: 8 bytes leftover after parsing attributes in process `syz.1.332'.
[   70.640620][ T4681] IPVS: Error joining to the multicast group
[   70.650860][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.671188][ T4681] netlink: 16 bytes leftover after parsing attributes in process `syz.1.332'.
[   70.951849][ T4686] netlink: 'syz.2.334': attribute type 21 has an invalid length.
[   70.985103][ T4686] netlink: 132 bytes leftover after parsing attributes in process `syz.2.334'.
[   71.022677][ T4690] wireguard0: entered promiscuous mode
[   71.028241][ T4690] wireguard0: entered allmulticast mode
[   71.167173][ T4698] bond0: Unable to set up delay as MII monitoring is disabled
[   71.215529][ T3367] tipc: Node number set to 1
[   71.263289][ T4705] netlink: 'syz.1.341': attribute type 14 has an invalid length.
[   71.444313][   T29] kauditd_printk_skb: 647 callbacks suppressed
[   71.444334][   T29] audit: type=1326 audit(1738343339.736:5057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4706 comm="syz.0.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5622ccda9 code=0x7ffc0000
[   71.473908][   T29] audit: type=1326 audit(1738343339.736:5058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4706 comm="syz.0.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd5622ccda9 code=0x7ffc0000
[   71.497275][   T29] audit: type=1326 audit(1738343339.736:5059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4706 comm="syz.0.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5622ccda9 code=0x7ffc0000
[   71.520648][   T29] audit: type=1326 audit(1738343339.736:5060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4706 comm="syz.0.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5622ccda9 code=0x7ffc0000
[   71.543972][   T29] audit: type=1326 audit(1738343339.736:5061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4706 comm="syz.0.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fd5622ccda9 code=0x7ffc0000
[   71.567316][   T29] audit: type=1326 audit(1738343339.736:5062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4706 comm="syz.0.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5622ccda9 code=0x7ffc0000
[   71.590658][   T29] audit: type=1326 audit(1738343339.736:5063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4706 comm="syz.0.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5622ccda9 code=0x7ffc0000
[   71.614086][   T29] audit: type=1326 audit(1738343339.736:5064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4706 comm="syz.0.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd5622ccda9 code=0x7ffc0000
[   71.637472][   T29] audit: type=1326 audit(1738343339.736:5065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4706 comm="syz.0.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5622ccda9 code=0x7ffc0000
[   71.660912][   T29] audit: type=1326 audit(1738343339.736:5066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4706 comm="syz.0.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd5622ccda9 code=0x7ffc0000
[   71.832591][ T4717] loop4: detected capacity change from 0 to 1024
[   71.898347][ T4717] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   72.030330][ T4709] loop2: detected capacity change from 0 to 2048
[   72.063142][ T4714] Set syz1 is full, maxelem 65536 reached
[   72.074594][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.085265][ T4709]  loop2: p1 < > p2 < > p3 p4
[   72.089975][ T4709] loop2: partition table partially beyond EOD, truncated
[   72.097458][ T4709] loop2: p1 start 2305 is beyond EOD, truncated
[   72.103797][ T4709] loop2: p2 start 4294902784 is beyond EOD, truncated
[   72.110690][ T4709] loop2: p3 start 3724543488 is beyond EOD, truncated
[   72.112169][ T4735] loop3: detected capacity change from 0 to 8192
[   72.117526][ T4709] loop2: p4 size 8192 extends beyond EOD, truncated
[   72.152362][ T2999]  loop2: p1 < > p2 < > p3 p4
[   72.157168][ T2999] loop2: partition table partially beyond EOD, truncated
[   72.172341][ T2999] loop2: p1 start 2305 is beyond EOD, truncated
[   72.178795][ T2999] loop2: p2 start 4294902784 is beyond EOD, truncated
[   72.185709][ T2999] loop2: p3 start 3724543488 is beyond EOD, truncated
[   72.192601][ T2999] loop2: p4 size 8192 extends beyond EOD, truncated
[   72.200115][ T4735]  loop3: p1 p2 p3
[   72.204249][ T4735] loop3: p1 start 51379968 is beyond EOD, truncated
[   72.242555][ T4735] loop3: p3 size 100663552 extends beyond EOD, truncated
[   72.271298][ T2999]  loop3: p1 p2 p3
[   72.283895][ T2999] loop3: p1 start 51379968 is beyond EOD, truncated
[   72.299714][ T2999] loop3: p3 size 100663552 extends beyond EOD, truncated
[   72.375815][ T4740] usb usb4: usbfs: interface 0 claimed by hub while 'syz.4.350' sets config #-1
[   72.426797][ T4740] rdma_rxe: rxe_newlink: failed to add team_slave_0
[   72.849677][ T4749] loop0: detected capacity change from 0 to 1024
[   72.892029][ T4753] netlink: 8 bytes leftover after parsing attributes in process `syz.2.353'.
[   72.898883][ T4377] udevd[4377]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[   72.901095][ T4753] IPVS: Error joining to the multicast group
[   72.918304][ T4379] udevd[4379]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[   72.922833][ T3471] udevd[3471]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory
[   72.950669][ T4377] udevd[4377]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[   72.954059][ T3471] udevd[3471]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory
[   72.961024][ T4749] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   73.009638][ T4758] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.029848][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.126201][ T4758] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.174736][ T4768] netlink: 'syz.1.361': attribute type 14 has an invalid length.
[   73.201556][ T4758] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.219741][ T4772] loop0: detected capacity change from 0 to 1024
[   73.264628][ T4772] EXT4-fs: Ignoring removed nobh option
[   73.331880][ T4772] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   73.354993][ T4772] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   73.376488][ T4758] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.398391][ T4770] lo speed is unknown, defaulting to 1000
[   73.528698][ T4779] lo speed is unknown, defaulting to 1000
[   73.538102][ T4780] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.364'.
[   73.579935][ T4758] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.600822][ T4778] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.364'.
[   73.768429][ T4758] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.849419][ T4758] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.890992][ T4758] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.997682][ T4789] netlink: 4 bytes leftover after parsing attributes in process `syz.3.365'.
[   74.000452][ T3373] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0
[   74.019332][ T4789] bridge0: port 3(vlan2) entered blocking state
[   74.025751][ T4789] bridge0: port 3(vlan2) entered disabled state
[   74.039959][ T4789] vlan2: entered allmulticast mode
[   74.042872][ T3373] hid-generic 0000:0000:0004.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[   74.087882][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   74.099579][ T4789] vlan2: left allmulticast mode
[   74.120662][ T4790] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.192789][ T4794] wireguard0: entered promiscuous mode
[   74.198349][ T4794] wireguard0: entered allmulticast mode
[   74.245460][ T4799] netlink: 8 bytes leftover after parsing attributes in process `syz.3.370'.
[   74.254340][ T4799] netlink: 8 bytes leftover after parsing attributes in process `syz.3.370'.
[   74.266489][ T4790] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.281531][ T4803] loop4: detected capacity change from 0 to 128
[   74.310158][ T4803] rdma_rxe: rxe_newlink: failed to add veth0_to_bond
[   74.318629][ T4805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   74.365437][ T4805] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   74.375949][ T4790] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.424544][ T4799] netlink: 12 bytes leftover after parsing attributes in process `syz.3.370'.
[   74.485425][ T4790] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.769974][ T4820] loop4: detected capacity change from 0 to 1024
[   74.799705][ T4822] loop0: detected capacity change from 0 to 1024
[   74.806616][ T4820] EXT4-fs: Ignoring removed nobh option
[   74.817816][ T4820] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   74.862019][ T4820] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   74.862494][ T4822] EXT4-fs: Ignoring removed nobh option
[   74.902685][ T4822] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   74.954475][ T4822] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   75.334885][ T4836] loop3: detected capacity change from 0 to 1024
[   75.360461][ T4836] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   75.414713][ T4836] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[   75.432625][ T4834] netlink: 'syz.1.380': attribute type 15 has an invalid length.
[   75.563719][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   75.615933][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   75.640177][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   75.643585][ T4840] netlink: 'syz.3.383': attribute type 21 has an invalid length.
[   75.690220][ T4840] __nla_validate_parse: 5 callbacks suppressed
[   75.690238][ T4840] netlink: 132 bytes leftover after parsing attributes in process `syz.3.383'.
[   75.775884][ T3367] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   75.794446][ T3367] hid-generic 0000:0000:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   75.799999][ T4844] lo speed is unknown, defaulting to 1000
[   75.843128][ T4850] loop4: detected capacity change from 0 to 512
[   75.858499][ T4850] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   75.881679][ T4850] EXT4-fs (loop4): orphan cleanup on readonly fs
[   75.896595][ T4850] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.386: bg 0: block 248: padding at end of block bitmap is not set
[   75.920698][ T4850] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.386: Failed to acquire dquot type 1
[   75.932713][ T4850] EXT4-fs (loop4): 1 truncate cleaned up
[   75.940268][ T4850] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   76.153069][ T4860] program +}[@ is using a deprecated SCSI ioctl, please convert it to SG_IO
[   76.273170][ T4866] loop3: detected capacity change from 0 to 128
[   76.302932][ T4863] lo speed is unknown, defaulting to 1000
[   76.309295][ T4863] lo speed is unknown, defaulting to 1000
[   76.315179][ T4863] lo speed is unknown, defaulting to 1000
[   76.348603][ T4863] infiniband s
z1: set down
[   76.353234][ T4863] infiniband s
z1: added lo
[   76.358355][ T3376] lo speed is unknown, defaulting to 1000
[   76.372755][ T4863] RDS/IB: s
z1: added
[   76.376974][ T4863] smc: adding ib device s
z1 with port count 1
[   76.383140][ T4863] smc:    ib device s
z1 port 1 has pnetid 
[   76.389235][ T4863] lo speed is unknown, defaulting to 1000
[   76.423659][ T4863] lo speed is unknown, defaulting to 1000
[   76.457385][ T4863] lo speed is unknown, defaulting to 1000
[   76.467463][ T4867] »»»»»»: renamed from lo
[   76.491627][ T4863] »»»»»» speed is unknown, defaulting to 1000
[   76.526484][ T4863] »»»»»» speed is unknown, defaulting to 1000
[   76.559718][ T3376] »»»»»» speed is unknown, defaulting to 1000
[   76.585366][   T29] kauditd_printk_skb: 676 callbacks suppressed
[   76.585383][   T29] audit: type=1400 audit(1738343344.906:5732): avc:  denied  { getopt } for  pid=4870 comm="syz.0.393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[   76.644910][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   76.690198][ T4873] loop0: detected capacity change from 0 to 1024
[   76.711430][ T4873] EXT4-fs: Ignoring removed nobh option
[   76.720840][ T4873] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   76.732801][ T4875] loop4: detected capacity change from 0 to 1024
[   76.743357][ T4873] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   76.765695][ T4875] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   76.798155][ T4882] 9pnet_fd: Insufficient options for proto=fd
[   76.820714][ T4875] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[   76.841342][ T4885] netlink: 'syz.1.398': attribute type 21 has an invalid length.
[   76.849200][ T4885] netlink: 132 bytes leftover after parsing attributes in process `syz.1.398'.
[   76.865224][ T4886] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.395'.
[   76.876373][ T4883] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.395'.
[   76.900245][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   76.931952][ T4889] netlink: 'syz.1.400': attribute type 10 has an invalid length.
[   76.939794][ T4889] netlink: 40 bytes leftover after parsing attributes in process `syz.1.400'.
[   76.950277][   T29] audit: type=1400 audit(1738343345.246:5733): avc:  denied  { read } for  pid=4888 comm="syz.1.400" path="socket:[8680]" dev="sockfs" ino=8680 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   76.975865][ T4889] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.984691][ T4889] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.993430][ T4889] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   77.002166][ T4889] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   77.025403][ T4889] team0: Failed to send port change of device geneve1 via netlink (err -105)
[   77.034447][ T4889] team0: Failed to send options change via netlink (err -105)
[   77.041927][ T4889] team0: Port device geneve1 added
[   77.045512][ T4892] loop4: detected capacity change from 0 to 1024
[   77.059257][ T4790] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   77.096245][ T4892] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   77.111540][ T4790] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   77.140022][ T4790] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   77.156579][ T4892] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[   77.197438][ T4790] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   77.219933][   T29] audit: type=1400 audit(1738343345.536:5734): avc:  denied  { map_create } for  pid=4897 comm="syz.3.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   77.239131][   T29] audit: type=1400 audit(1738343345.536:5735): avc:  denied  { bpf } for  pid=4897 comm="syz.3.402" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   77.287900][   T29] audit: type=1400 audit(1738343345.576:5736): avc:  denied  { append } for  pid=2981 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   77.310836][   T29] audit: type=1400 audit(1738343345.586:5737): avc:  denied  { wake_alarm } for  pid=4890 comm="syz.4.399" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   77.332021][   T29] audit: type=1400 audit(1738343345.586:5738): avc:  denied  { map_read map_write } for  pid=4897 comm="syz.3.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   77.351923][   T29] audit: type=1400 audit(1738343345.586:5739): avc:  denied  { open } for  pid=4897 comm="syz.3.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[   77.371101][   T29] audit: type=1400 audit(1738343345.586:5740): avc:  denied  { perfmon } for  pid=4897 comm="syz.3.402" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   77.391993][   T29] audit: type=1400 audit(1738343345.586:5741): avc:  denied  { kernel } for  pid=4897 comm="syz.3.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[   77.418195][ T4904] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1537 sclass=netlink_route_socket pid=4904 comm=syz.2.404
[   77.445634][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   77.486756][ T4907] loop4: detected capacity change from 0 to 512
[   77.497699][ T4907] EXT4-fs: Ignoring removed orlov option
[   77.509389][ T4907] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   77.521382][ T4907] EXT4-fs (loop4): 1 truncate cleaned up
[   77.527699][ T4907] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   77.576769][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   77.654340][ T4917] 9pnet_fd: Insufficient options for proto=fd
[   77.673200][ T4919] netlink: 'syz.0.407': attribute type 14 has an invalid length.
[   77.809862][ T4924] loop2: detected capacity change from 0 to 1024
[   77.835264][ T4924] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   77.848866][ T4924] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[   77.958277][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   78.113358][ T4932] loop0: detected capacity change from 0 to 8192
[   78.205233][ T4935] loop3: detected capacity change from 0 to 8192
[   78.225347][ T4935] vfat: Unknown parameter '18446744073709551615000000000000000000000030x0000000000000004'
[   78.229025][ T4939] loop2: detected capacity change from 0 to 512
[   78.270959][ T4939] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   78.319373][ T4939] EXT4-fs (loop2): 1 truncate cleaned up
[   78.334731][ T4939] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   78.527090][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   78.602795][ T4943] loop2: detected capacity change from 0 to 1024
[   78.726292][ T4943] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   78.814630][ T4943] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[   78.880357][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   78.961586][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   78.997371][ T4960] loop4: detected capacity change from 0 to 164
[   79.146691][ T4971] loop4: detected capacity change from 0 to 512
[   79.154632][ T4975] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.426'.
[   79.168764][ T4971] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   79.179299][ T4969] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.426'.
[   79.192411][ T4971] EXT4-fs error (device loop4): ext4_orphan_get:1415: comm syz.4.428: bad orphan inode 16
[   79.224113][ T4971] ext4_test_bit(bit=15, block=4) = 0
[   79.229510][ T4971] EXT4-fs (loop4): 1 orphan inode deleted
[   79.247943][ T4971] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   79.268851][ T4973] loop2: detected capacity change from 0 to 8192
[   79.501220][ T4978] ==================================================================
[   79.509425][ T4978] BUG: KCSAN: data-race in mark_buffer_dirty_inode / sync_mapping_buffers
[   79.518055][ T4978] 
[   79.520398][ T4978] write to 0xffff8881052b9260 of 8 bytes by task 4973 on cpu 1:
[   79.528047][ T4978]  sync_mapping_buffers+0x159/0x7c0
[   79.533271][ T4978]  fat_file_fsync+0xa7/0x100
[   79.537884][ T4978]  vfs_fsync_range+0x116/0x130
[   79.542660][ T4978]  generic_file_write_iter+0x1c3/0x310
[   79.548182][ T4978]  iter_file_splice_write+0x5f1/0x980
[   79.553572][ T4978]  direct_splice_actor+0x160/0x2c0
[   79.558716][ T4978]  splice_direct_to_actor+0x302/0x670
[   79.564127][ T4978]  do_splice_direct+0xd7/0x150
[   79.568905][ T4978]  do_sendfile+0x398/0x660
[   79.573369][ T4978]  __x64_sys_sendfile64+0x110/0x150
[   79.578606][ T4978]  x64_sys_call+0xfbd/0x2dc0
[   79.583235][ T4978]  do_syscall_64+0xc9/0x1c0
[   79.587767][ T4978]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   79.593678][ T4978] 
[   79.596037][ T4978] read to 0xffff8881052b9260 of 8 bytes by task 4978 on cpu 0:
[   79.603596][ T4978]  mark_buffer_dirty_inode+0x96/0x1c0
[   79.608994][ T4978]  fat_mirror_bhs+0x241/0x330
[   79.613697][ T4978]  fat_alloc_clusters+0x994/0xa80
[   79.618749][ T4978]  fat_get_block+0x25c/0x5e0
[   79.623373][ T4978]  __block_write_begin_int+0x417/0xfa0
[   79.628862][ T4978]  cont_write_begin+0x546/0x860
[   79.633749][ T4978]  fat_write_begin+0x51/0xe0
[   79.638384][ T4978]  generic_perform_write+0x1a8/0x4a0
[   79.643693][ T4978]  __generic_file_write_iter+0xa1/0x120
[   79.649257][ T4978]  generic_file_write_iter+0x8f/0x310
[   79.654649][ T4978]  vfs_write+0x77b/0x920
[   79.658906][ T4978]  ksys_write+0xe8/0x1b0
[   79.663171][ T4978]  __x64_sys_write+0x42/0x50
[   79.667775][ T4978]  x64_sys_call+0x287e/0x2dc0
[   79.672499][ T4978]  do_syscall_64+0xc9/0x1c0
[   79.677022][ T4978]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   79.682949][ T4978] 
[   79.685273][ T4978] value changed: 0xffff8881051c6c08 -> 0x0000000000000000
[   79.692385][ T4978] 
[   79.694715][ T4978] Reported by Kernel Concurrency Sanitizer on:
[   79.700880][ T4978] CPU: 0 UID: 0 PID: 4978 Comm: syz.2.429 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0
[   79.711144][ T4978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[   79.721215][ T4978] ==================================================================
[   79.738173][ T4979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   79.761015][ T4979] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   81.644206][ T4757] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[   82.123656][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.