last executing test programs:

4.034868436s ago: executing program 4 (id=888):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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")
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x4000)
fallocate(r0, 0x0, 0x0, 0x1000f4)
r2 = syz_io_uring_setup(0x3e, &(0x7f0000000640)={0x0, 0x2a94, 0x10100, 0x2, 0x168}, &(0x7f0000000200)=<r3=>0x0, &(0x7f00000006c0)=<r4=>0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8e7}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x80002101})
io_uring_enter(r2, 0xd81, 0x0, 0x0, 0x0, 0x0)
r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCMIWAIT(r7, 0x545c, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r6)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0})
exit(0x8)

3.113749701s ago: executing program 4 (id=897):
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x0)
ftruncate(r0, 0x2007ffb)

3.066144752s ago: executing program 4 (id=899):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="070000000400000008000000ff00000000000000", @ANYBLOB="ffffffff", @ANYRES32=0x0], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000015c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000009c3e850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/keys\x00', 0x0, 0x0)
syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad6, 0x80, 0xfffffffe}, 0x0, &(0x7f0000002a00)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r2, 0x0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x11e8}, 0x0, 0x8000, 0x1})
ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000140)={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x6, @multicast}, 0x4, {0x2, 0x4e24, @multicast2}, 'dvmrp1\x00'})
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r4}, 0x18)
r5 = socket$netlink(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r6, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
r7 = socket$netlink(0x10, 0x3, 0xf)
setsockopt$sock_int(r7, 0x1, 0x8, 0x0, 0x0)
r8 = socket(0x10, 0x3, 0x0)
write(r8, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={0xffffffffffffffff, 0x2000012, 0x0, 0x0, &(0x7f0000000c40), 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.313992273s ago: executing program 1 (id=903):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000210000e7000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc96}, 0x94)
r1 = socket(0x10, 0x803, 0x0)
recvmmsg(r1, &(0x7f00000037c0), 0x0, 0x2040000, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r3}, 0x10)
set_tid_address(0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={0x0, r0}, 0x18)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r4 = gettid()
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, 0x0, 0x0, 0x4}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000400000000000"], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)

2.313141904s ago: executing program 4 (id=906):
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$nl_route(0x10, 0x3, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0)
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4040080)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000)

1.979015128s ago: executing program 2 (id=907):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000500)={[{@dioread_nolock}, {@stripe={'stripe', 0x3d, 0x3}}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$eJzs3V9rW+UfAPDvSZP9636/djCGeiGDXTgZS9fWPxOEzUvR4UDvZ2izMpouo0nHWgduF+7GGxmCiAPxBXjv5fAN+CoGOhgyil6IUDnpSZe1Sf8tNbH5fOBsz5Nzkud58pzvyfOck/QEMLBOpv/kIl6OiK+SiJGWdfnIVp5c3W756e2pdEliZeXj35O4sO61kuz/4SzzUkT8/EXEmdzGcmuLS7OlSqU8n+XH6nM3xmqLS2evzZVmyjPl6xOTk+ffnJx45+23utbW1y//+e1HD98//+Wp5W9+fHzsfhIX42i2Lm1XF4q405o5Wfo7SxXi4roNx7tQWD9Jel0BdmUoi/NCpMeAkRjKoh7Y/z6PiBVgQCXiHwZUcxzQnNt3aR78n/HkvdUJ0Mb251fPjcShxtzoyHLy3Mwone+OdqH8tIyffntwP11i8/MQh7fIA+zInbsRcS6f33j8S7Lj3+6da5w83tz6Mgbt8wd66WE6/knuRGyI/9za+CfajH+G28Tubmwd/7nHXSimo3T8927b8e/aoWt0KMv9rzHmKyRXr1XK5yLi/xFxOgoH0/xm13POLz9a6bSudfyXLmn5zbFgVo/H+YPPP2e6VC+9SJtbPbkb8Urb8W+y1v9Jm/5P34/L2yzjRPnBq53Wbd3+vbXyQ8Rrbfv/2RWtZPPrk2ON/WGsuVds9Me9E790Kr/X7U/7/8jm7R9NWq/X1nZexveH/ip3Wrfb/f9A8kkjfSB77FapXp8fjziQfJgfXv/4xLPnNvPN7dP2nz7VPv432//Tyden22z/veP3Om7aD/0/vaP+33ni0Qeffdep/O31/xuN1Onske0c/7ZbwRd57wAAAAAAAKDf5CLiaCS54lo6lysWV7/fcTyO5CrVWv3M1erC9elo/FZ2NAq55pXukZbvQ4xn34dt5ifW5Scj4lhEfD10uJEvTlUr071uPAAAAAAAAAAAAAAAAAAAAPSJ4Q6//0/9OtTr2gF7rnFjg4O9rgXQC1ve8r8bd3oC+tKW8Q/sWzuPf2cGYL/w+Q+DS/zD4BL/MLi2G/+FkT2uCPCv8/kPg0v8AwAAAAAAAAAAAAAAAAAAAAAAAAAAQFddvnQpXVaWn96eSvPTNxcXZqs3z06Xa7PFuYWp4lR1/kZxplqdqZSLU9W5rV6vUq3eGJ+IhVtj9XKtPlZbXLoyV124Xr9yba40U75SLvhjwwAAAAAAAAAAAAAAAAAAALBBbXFptlSplOclOiYuRF9UYy8buGpXT8/3Syskupro8YEJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFr8EwAA//8DDjNQ")
fallocate(0xffffffffffffffff, 0x10, 0x160483b7, 0x5)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000005d081200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/11, @ANYRES8=0x0], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETTXFILTER(r5, 0x400454d1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
unshare(0x42000000)

1.87828902s ago: executing program 0 (id=908):
bpf$MAP_CREATE(0x0, 0x0, 0x50)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unshare(0x22020600)
fchmod(0xffffffffffffffff, 0x7)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=@newqdisc={0x28, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x6, 0x6}}, [@TCA_STAB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x803}, 0x20004004)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000811}, 0x0)
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
listen(r0, 0x0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r1, &(0x7f0000002300)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x0, {0x4e22, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44}, 0x4)
sendmsg$tipc(r1, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x0)
accept4(r0, 0x0, 0x0, 0x400000000000000)

1.792577662s ago: executing program 3 (id=909):
bpf$MAP_CREATE(0x0, 0x0, 0x50)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unshare(0x22020600)
fchmod(0xffffffffffffffff, 0x7)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=@newqdisc={0x28, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x6, 0x6}}, [@TCA_STAB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x803}, 0x20004004)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000811}, 0x0)
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r1, &(0x7f0000002300)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x0, {0x4e22, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44}, 0x4)
sendmsg$tipc(r1, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x0)
accept4(r0, 0x0, 0x0, 0x400000000000000)

1.625049784s ago: executing program 3 (id=910):
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000140)={0x0, 0x0})
r0 = open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x0)
ftruncate(r0, 0x2007ffb)

1.566968655s ago: executing program 0 (id=911):
preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000cc0)={'wg1\x00', 0xa})
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000dc"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)
perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
semop(0x0, &(0x7f0000000040)=[{0x4, 0x1}], 0x1)
r1 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x8, 0x0, 0x401}, 0xc)
setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000080)=0x9, 0x4)
open(0x0, 0x14927e, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

1.459066297s ago: executing program 3 (id=912):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCMIWAIT(r2, 0x545c, 0x0)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=<r4=>r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0)
fcntl$lock(r5, 0x24, &(0x7f0000000080)={0x0, 0x0, 0x2007, 0x1fd})
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYRES8=r4, @ANYRESDEC=r0, @ANYRES64=r4, @ANYRESHEX=r0, @ANYRES8=r3], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r5)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4c, &(0x7f0000000040)=0xf000, 0x4)

1.387137468s ago: executing program 0 (id=913):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000080)=0x6)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0xfffffffe, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x303, 0x36}, "0000000000000080", "a14748a65151e96d6d2a01e49419560000000000000000000000004000", "6d40e581", "066580001e00"}, 0x38)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x87)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x18)
setpriority(0x3, 0x0, 0xfffffffd)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0)
fcntl$lock(r4, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8})
fcntl$lock(r4, 0x7, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9})
fcntl$lock(r4, 0x7, &(0x7f00000000c0)={0x0, 0x2, 0x7, 0x401})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c000000140021010000e0ffffff000023"], 0x2c}}, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040)

1.020819034s ago: executing program 0 (id=915):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r4}, 0x18)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000041000000850000007d00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0x2111, 0x300, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r2, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400000200000200080001000300000005000200030000000500020008000000240003"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan0\x00'})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x8, 0x0, 0x0, 0xf, 0x0, 0x5}]}}, &(0x7f0000000040)=""/249, 0x26, 0xf9, 0x6}, 0x28)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
openat$cgroup_devices(r6, &(0x7f000000a540)='devices.allow\x00', 0x2, 0x0)

1.017762924s ago: executing program 1 (id=916):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
prctl$PR_SET_NAME(0xf, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair(0x18, 0x0, 0x2, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03"], 0x34}}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r3}, 0x10)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast})
close(r1)

903.118006ms ago: executing program 2 (id=917):
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x18, &(0x7f00000001c0)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18)
pipe2(&(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
splice(r3, 0x0, r2, 0x0, 0x6, 0x0)
ioctl$int_in(r2, 0x5452, &(0x7f0000000100)=0x3ff)
fcntl$setstatus(r2, 0x4, 0x7c00)
dup3(r3, r2, 0x0)
sendmsg$IPSET_CMD_PROTOCOL(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c000000010605"], 0x2c}, 0x1, 0x0, 0x0, 0x40001d0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000100)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYRES16], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10)
socket$phonet_pipe(0x23, 0x5, 0x2)

850.918627ms ago: executing program 0 (id=918):
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0)
fallocate(r0, 0x21, 0x0, 0x1000f5)
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x5, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x6}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00'}, 0x41)
prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00')
bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x21, 0x0, 0x0, 0x100000, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2000000, 0x0, 0x200000000000000}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50)
open$dir(&(0x7f0000000040)='./file0\x00', 0x880, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff000007020000f8ffffffb703000008000000b70400000000000085000000010000009500"/65], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000240), &(0x7f0000000280)=r2}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8041, 0x0)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r4 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6})
mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0)

834.460567ms ago: executing program 4 (id=919):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x18)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10)
futex(0x0, 0x5, 0x2, &(0x7f0000fd7ff0)={0x0, 0x3938700}, 0x0, 0xfffffffd)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000fcdbdf250401f2800c001800f8ffffffffffffff140001"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000800)={{r0}, &(0x7f0000000580), &(0x7f00000007c0)='%-5lx  \x00'}, 0x20)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0)

716.603119ms ago: executing program 4 (id=920):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x4010, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11ee, &(0x7f0000002480)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a)
r1 = creat(&(0x7f0000000580)='./bus\x00', 0x0)
io_setup(0x1, &(0x7f0000000040)=<r2=>0x0)
io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x1a00001a}])
syz_io_uring_setup(0x20ad, &(0x7f0000000180)={0x0, 0xe7b3, 0x100, 0x1, 0x163}, &(0x7f0000000200), &(0x7f0000000280))
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r5}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r4}, 0x10)
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r6}, 0x38)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10)

716.265539ms ago: executing program 1 (id=921):
openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x4)
writev(r0, &(0x7f0000000240)=[{&(0x7f0000000280)="580000001400add427323b472545b45602117fffffff81004e204e227f000001925aa80020007b0009008003000000000000000000ff0000f03ac71002000000fffffffffeffffffffe7ee00000000000000000200000000", 0x58}], 0x1)
ioprio_set$pid(0x1, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00')
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)
ioprio_set$pid(0x1, 0x0, 0x4007)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kfree\x00', r5}, 0x18)
sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f68737200000000140001"], 0xfc}}, 0x20000004)
sendfile(r2, r3, 0x0, 0x20000023896)
ioctl$TIOCVHANGUP(r2, 0x5437, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3)
syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0)

715.913479ms ago: executing program 2 (id=922):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080))
write$cgroup_devices(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="1e0308004d8c71ef2885634a8270e7123300000000000000000000000000ac1414cf14"], 0xffdd)
setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f00000001c0)=0x400000001, 0x4)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x2)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000240)=0x12)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x1b)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10)
getitimer(0x2, &(0x7f0000000000))
ioctl$TIOCVHANGUP(r3, 0x5437, 0x0)

614.90812ms ago: executing program 3 (id=923):
r0 = syz_open_dev$usbfs(0x0, 0x76, 0x103381)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000180)=ANY=[@ANYBLOB="0ae5000001"])
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
ustat(0x3, &(0x7f0000000000))
socketpair$unix(0x1, 0x5, 0x0, 0x0)
fcntl$setown(0xffffffffffffffff, 0x8, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$eJzs3E+LHEUYB+B315iNG/ePGqMJiIVe9NJk9+BFL4tsQDKgJFkhEYSO26vDtDPD9LAwIkZPXv0cIojgTRBvetmL30DwthePEcSWndEko5PDSEiH5Xku80LVb6jqphuq6erD1774sLNXZXv5MBYXFmKxH5FupUixGP/4NF5+9cefnrty7fqlrVZr+3JKF7eubrySUlp9/vt3Pv7qhR+Gp9/+dvW7pThYf/fwt81fD84enDv88+oH7Sq1q9TtDVOebvR6w/xGWaTddtXJUnqrLPKqSO1uVQym2vfKXr8/Snl3d2W5PyiqKuXdUeoUozTspeFglPL383Y3ZVmWVpaD+Z24Xe18eauu64i6fjRORl3X9WOxHKfj8ViJ1ViL9Xginoyn4kw8HWfjmXg2vvnl69FRAgAAAAAAAAAAAAAAAAAAALh/5t3/f27cq+lRAwAAAAAAAAAAAAAAAAAAwPFy5dr1S1ut1vbllE5FlJ/v7+zvTH4n7Vt70Y4yirgQa/FHjHf/T0zqi2+0ti+ksfX4rLz5d/7m/s4j0/mN8ecEZuY3Jvk0nV+K5bvzm7EWZ2bnN2fmT8VLL96Vz2Itfn4velHGbhxl7+Q/2Ujp9Tdb/8qfH/cDAACA4yBLt81cv2fZvdon+TmeD0ytr4+y5080OnUiohp91MnLshgoHvriZLPD+L2u6+YPQkPFva+UpYj43/+8EBEPxwT/UzR9Z+JBuHPSmx4JAAAAAAAAAAAA83gQrxM2PUcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YgeOBQAAAACE+Vun0bEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHwVAAD//+pd0x0=")
truncate(0x0, 0x8000c00)
sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x810)
r1 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@remote, @broadcast}, 0x7)
setsockopt$inet_msfilter(r1, 0x0, 0x29, 0x0, 0x1c)
socket$netlink(0x10, 0x3, 0x0)

434.702583ms ago: executing program 3 (id=924):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x38, r1, 0x1, 0x0, 0x2, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8000}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x24000010)
setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x50, &(0x7f0000000280)={[{@usrquota}, {}, {@nobh}, {@grpjquota}, {@dioread_nolock}]}, 0x1, 0x3eb, &(0x7f0000000880)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents64(r2, 0x0, 0x0)
lseek(r2, 0x3, 0x1)
socket$inet_sctp(0x2, 0x1, 0x84)
socket$unix(0x1, 0x1, 0x0)
socket$unix(0x1, 0x1, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000780)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a0000000000008500"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r3, 0x0, 0xfffffffffffffffd}, 0x18)
sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3014850, &(0x7f0000000600)={[{@auto_da_alloc_val}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@grpjquota}, {@nomblk_io_submit}, {@jqfmt_vfsold}]}, 0x3, 0x4c5, &(0x7f0000001cc0)="$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")
lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000300), &(0x7f0000000280)='system_u:object_r:hwdata_t:s0\x00', 0x1e, 0x1)

397.015194ms ago: executing program 1 (id=925):
bpf$MAP_CREATE(0x0, 0x0, 0x50)
unshare(0x22020600)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000811}, 0x0)
r0 = socket$tipc(0x1e, 0x5, 0x0)
listen(r0, 0x0)

370.704214ms ago: executing program 1 (id=926):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000300)={'#! ', '', [{0x20, 'memory.events\x00'}]}, 0x13)
perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x3, 0x82, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xf}, 0x8080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10000000000007}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000080)}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$notify(r2, 0x402, 0x8000003d)
write$binfmt_elf64(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x178)
close(r1)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r5 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f0000000140), 0x0)
setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f0000000100)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x8)

369.775694ms ago: executing program 2 (id=927):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = dup2(r1, r1)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
timer_create(0x0, 0x0, &(0x7f00009b1ffc))
mkdirat(r2, &(0x7f0000000000)='./file0\x00', 0x21)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64, @ANYRES16=0x0], 0x1, 0x36e, &(0x7f0000000c00)="$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")
r3 = open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x2000000, 0x14, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c000", 0x0, 0x86, 0x0, 0x31, 0x0, &(0x7f00000001c0)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36eb77dd0aaa2dbe567d168904cf0d5bce1771889c98ffc0abf", 0x0}, 0x50)
ftruncate(r3, 0x2007ffb)
sendfile(r3, r3, 0x0, 0x800000009)

315.275505ms ago: executing program 3 (id=928):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)
socket(0x400000000010, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x89}, 0x18)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000104}, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x2e0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x3f0, 0x3d8, 0x3d8, 0x3f0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x4001, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x4001, 0x1, 0x3, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000240)={[{@grpquota}, {@auto_da_alloc}, {@minixdf}]}, 0x1, 0x50c, &(0x7f0000000ac0)="$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")
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40))
gettid()
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCBRDELBR(r4, 0x89a2, &(0x7f0000000000)='bridge0\x00')
syz_emit_ethernet(0xfffffffffffffd22, &(0x7f0000000680)={@link_local, @dev, @val={@val={0x88a8, 0x7, 0x0, 0x3}, {0x8100, 0x3, 0x0, 0x1}}, {@generic={0xa00, "bdc6368fc950d3b1dfa5555d89883b9bc7c2e5415e8f122066dc9ab1b86b8a41a7b20f54423228ccabd703336ff5fb6f4c4af02e0aa84eb16df035d38fa890fd422a9014ac86ce6ce775359f791e6f63c6e01b8fa76523d7fa0c3731f5b28db9e3aa5a22d9b95f64121d5639428ff04f2f5f0fa8bb76678333cffd2f2a27d081a5144082b5f741f57c49b076384376e3549e1aae2ede839d9ca19aa1b1f22f2461e0"}}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)

207.067717ms ago: executing program 2 (id=929):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000850000000e00000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10)
name_to_handle_at(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r2 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001740)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x800)
syz_io_uring_setup(0x1714, &(0x7f0000000300)={0x0, 0x2dd2, 0x10100, 0x0, 0xffffffdc}, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_RENAMEAT={0x23, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1})
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000"], 0x48)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000004d80)=ANY=[], 0x1c0}}, 0x4004005)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0)
semtimedop(0x0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0)

111.056578ms ago: executing program 2 (id=930):
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$nl_route(0x10, 0x3, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0)
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4040080)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000)

89.096848ms ago: executing program 1 (id=931):
r0 = gettid()
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000006c0), 0x2000)
read(r1, &(0x7f0000000200)=""/209, 0x128)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x2bf, @tick=0x5, 0x0, {}, 0x0, 0x0, 0x4})
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000480)={0xfffffffb, 0x2, 0x1, 'queue0\x00'})
openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x8000)
syz_open_procfs(0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000400)={0x0, 0x1f000000})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, 0x0, 0x0)
tkill(r0, 0x7)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xc, 0x8, &(0x7f0000000700)=ANY=[@ANYBLOB="0bba70b35acb93b95d95a22e8168cec35b134841d9ce907f326ae66613a8c8f3c3bc1ae8295c08aca37c3ad8363dcbc7091b73679a29943e50f5613051a46e21094fa8975085acaecddfb2295a9035b3354a9cf8c1422773755cc9c1bf968627c5c0378b6a722275f1fd27b30b72238b279e9615b2c771d1ca25260d9fbe648e0c84", @ANYRES32], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, @fallback=0x1d}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r3=>0xffffffffffffffff})
recvmsg$unix(r3, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00'}, 0x10)

0s ago: executing program 0 (id=932):
r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000001d00)={0x6, 0x0, 0x100, 0xe}, &(0x7f0000001d40)=0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0x14, 0x30, 0x871a15abc695fa3d, 0x70bd27}, 0x14}}, 0x0)
gettid()
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002)
readv(r0, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/20, 0x14}, {0x0}], 0x2)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x2200454, &(0x7f0000000000), 0x1, 0x236, &(0x7f0000000300)="$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")
symlink(0x0, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
syz_usb_connect(0x2, 0x64, 0x0, 0x0)
sendto$inet6(r0, &(0x7f0000000100)="b8", 0x1, 0x2000c851, &(0x7f0000000140)={0xa, 0x4c23, 0x0, @loopback, 0xffffffff}, 0x1c)
r2 = socket$key(0xf, 0x3, 0x2)
r3 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8983, &(0x7f0000001cc0)={0x6, 'veth0_to_hsr\x00', {0x3}, 0x6})
sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x7, 0x0, 0x5, 0x2, 0x0, 0x70bd2d, 0x25dfdbfe}, 0x10}}, 0x4)
pivot_root(&(0x7f0000000180)='./mnt\x00', &(0x7f00000001c0)='./mnt\x00')

kernel console output (not intermixed with test programs):

z.0.306" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   70.896210][   T29] audit: type=1400 audit(1753507379.537:1332): avc:  denied  { bind } for  pid=4473 comm="syz.0.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   70.915604][   T29] audit: type=1400 audit(1753507379.537:1333): avc:  denied  { name_bind } for  pid=4473 comm="syz.0.306" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[   70.937378][   T29] audit: type=1400 audit(1753507379.537:1334): avc:  denied  { node_bind } for  pid=4473 comm="syz.0.306" saddr=172.20.20.170 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1
[   70.959945][   T29] audit: type=1400 audit(1753507379.537:1335): avc:  denied  { write } for  pid=4473 comm="syz.0.306" laddr=172.20.20.170 lport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   70.982167][   T29] audit: type=1400 audit(1753507379.537:1336): avc:  denied  { connect } for  pid=4473 comm="syz.0.306" laddr=172.20.20.170 lport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   71.004935][   T29] audit: type=1400 audit(1753507379.537:1337): avc:  denied  { name_connect } for  pid=4473 comm="syz.0.306" dest=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[   71.027115][   T29] audit: type=1400 audit(1753507379.537:1338): avc:  denied  { create } for  pid=4473 comm="syz.0.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   71.047291][   T29] audit: type=1400 audit(1753507379.537:1339): avc:  denied  { write } for  pid=4473 comm="syz.0.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   71.112703][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   71.138629][ T4477] loop0: detected capacity change from 0 to 512
[   71.145570][ T4477] EXT4-fs: Ignoring removed orlov option
[   71.162052][ T4461] Set syz1 is full, maxelem 65536 reached
[   71.168988][ T4477] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   71.181698][ T4477] EXT4-fs (loop0): orphan cleanup on readonly fs
[   71.209413][ T4477] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.307: bg 0: block 248: padding at end of block bitmap is not set
[   71.234992][ T4477] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.307: Failed to acquire dquot type 1
[   71.320113][ T4477] EXT4-fs (loop0): 1 truncate cleaned up
[   71.327289][ T4477] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   71.349144][ T4477] EXT4-fs: Ignoring removed orlov option
[   71.355015][ T4477] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   71.363549][ T4477] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended
[   71.391849][ T4477] EXT4-fs error (device loop0): __ext4_remount:6736: comm syz.0.307: Abort forced by user
[   71.414409][ T4477] EXT4-fs (loop0): Remounting filesystem read-only
[   71.421085][ T4477] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[   71.445066][ T4486] loop2: detected capacity change from 0 to 128
[   71.546827][ T4477] ext4 filesystem being remounted at /60/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   71.678880][ T4477] siw: device registration error -23
[   71.788223][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   71.854373][ T4491] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   71.897788][ T4491] syzkaller0: entered promiscuous mode
[   71.903391][ T4491] syzkaller0: entered allmulticast mode
[   71.993227][ T4492] tipc: Resetting bearer <eth:syzkaller0>
[   72.066589][ T4494] loop2: detected capacity change from 0 to 512
[   72.074578][ T4490] tipc: Resetting bearer <eth:syzkaller0>
[   72.268691][ T4490] tipc: Disabling bearer <eth:syzkaller0>
[   72.275580][ T4494] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[   72.303193][ T4494] EXT4-fs (loop2): orphan cleanup on readonly fs
[   72.313281][ T4494] EXT4-fs error (device loop2): ext4_orphan_get:1419: comm syz.2.313: bad orphan inode 15
[   72.341662][ T4494] ext4_test_bit(bit=14, block=18) = 1
[   72.347118][ T4494] is_bad_inode(inode)=0
[   72.351390][ T4494] NEXT_ORPHAN(inode)=1023
[   72.355768][ T4494] max_ino=32
[   72.359021][ T4494] i_nlink=0
[   72.406087][ T4497] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   72.413412][ T4497] IPv6: NLM_F_CREATE should be set when creating new route
[   72.424451][ T4494] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2962: inode #15: comm syz.2.313: corrupted xattr block 19: e_value size too large
[   72.469344][ T4494] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117)
[   72.500920][ T4494] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[   72.629842][ T4503] ˙˙˙˙˙˙: renamed from vlan1 (while UP)
[   72.717267][ T4505] netlink: 'syz.4.316': attribute type 4 has an invalid length.
[   72.725230][ T4505] netlink: 17 bytes leftover after parsing attributes in process `syz.4.316'.
[   72.886319][ T4514] loop4: detected capacity change from 0 to 1024
[   72.922967][ T4514] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   72.937463][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.947619][ T4514] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   72.968097][ T4514] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e01c, mo2=0000]
[   72.977703][ T4514] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 2: comm syz.4.318: lblock 2 mapped to illegal pblock 2 (length 1)
[   72.992741][ T4514] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 48: comm syz.4.318: lblock 0 mapped to illegal pblock 48 (length 1)
[   73.007485][ T4514] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.318: Failed to acquire dquot type 0
[   73.011194][ T4518] loop2: detected capacity change from 0 to 128
[   73.024995][ T4514] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6255: Corrupt filesystem
[   73.035895][ T4514] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.318: mark_inode_dirty error
[   73.047273][ T4514] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[   73.058351][ T4514] EXT4-fs (loop4): 1 orphan inode deleted
[   73.064637][ T4514] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   73.077109][ T3460] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1)
[   73.151045][ T3460] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 0
[   73.274170][ T4524] netlink: 'syz.2.322': attribute type 4 has an invalid length.
[   73.284638][ T4524] netlink: 'syz.2.322': attribute type 4 has an invalid length.
[   73.432275][ T4535] netlink: 28 bytes leftover after parsing attributes in process `syz.3.325'.
[   73.441300][ T4535] netlink: 28 bytes leftover after parsing attributes in process `syz.3.325'.
[   73.689767][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.702603][ T3307] EXT4-fs error (device loop4): __ext4_get_inode_loc:4792: comm syz-executor: Invalid inode table block 1 in block_group 0
[   73.733134][ T3307] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6255: Corrupt filesystem
[   73.761913][ T3307] EXT4-fs error (device loop4): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error
[   73.810044][ T4563] netlink: 12 bytes leftover after parsing attributes in process `syz.4.328'.
[   74.627434][ T4570] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   74.648647][ T4570] syzkaller0: entered promiscuous mode
[   74.654308][ T4570] syzkaller0: entered allmulticast mode
[   74.673818][ T4570] tipc: Resetting bearer <eth:syzkaller0>
[   74.692362][ T4569] tipc: Resetting bearer <eth:syzkaller0>
[   74.702522][ T4569] tipc: Disabling bearer <eth:syzkaller0>
[   74.806458][ T4576] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   74.813999][ T4576] syzkaller0: entered promiscuous mode
[   74.819524][ T4576] syzkaller0: entered allmulticast mode
[   74.831934][ T4576] tipc: Resetting bearer <eth:syzkaller0>
[   74.839389][ T4575] tipc: Resetting bearer <eth:syzkaller0>
[   74.854195][ T4575] tipc: Disabling bearer <eth:syzkaller0>
[   74.916491][ T4580] loop0: detected capacity change from 0 to 1024
[   74.945124][ T4580] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   74.959227][ T4587] bridge0: port 3(batadv0) entered blocking state
[   74.965767][ T4587] bridge0: port 3(batadv0) entered disabled state
[   75.003617][ T4588] netlink: 4 bytes leftover after parsing attributes in process `syz.3.336'.
[   75.051198][ T4587] batadv0: entered allmulticast mode
[   75.061652][ T4587] batadv0: entered promiscuous mode
[   75.102575][ T4588] batadv0 (unregistering): left allmulticast mode
[   75.109075][ T4588] batadv0 (unregistering): left promiscuous mode
[   75.115523][ T4588] bridge0: port 3(batadv0) entered disabled state
[   75.164136][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   75.567864][ T4598] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   75.607893][ T4598] syzkaller0: entered promiscuous mode
[   75.613600][ T4598] syzkaller0: entered allmulticast mode
[   75.651938][   T29] kauditd_printk_skb: 479 callbacks suppressed
[   75.651958][   T29] audit: type=1400 audit(1753507384.307:1814): avc:  denied  { sqpoll } for  pid=4594 comm="syz.0.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[   75.927595][ T4597] tipc: Resetting bearer <eth:syzkaller0>
[   75.961716][ T4597] tipc: Disabling bearer <eth:syzkaller0>
[   76.265989][   T29] audit: type=1400 audit(1753507384.917:1815): avc:  denied  { read write } for  pid=4660 comm="syz.2.341" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[   76.290333][   T29] audit: type=1400 audit(1753507384.917:1816): avc:  denied  { open } for  pid=4660 comm="syz.2.341" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[   76.388889][   T29] audit: type=1400 audit(1753507385.037:1817): avc:  denied  { unmount } for  pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1
[   76.574628][ T4672] loop4: detected capacity change from 0 to 512
[   76.615770][   T29] audit: type=1400 audit(1753507385.267:1818): avc:  denied  { lock } for  pid=4669 comm="syz.3.345" path="socket:[7841]" dev="sockfs" ino=7841 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[   76.638858][   T29] audit: type=1400 audit(1753507385.267:1819): avc:  denied  { name_bind } for  pid=4669 comm="syz.3.345" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[   76.706343][ T4672] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   76.728330][ T4677] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   76.762444][ T4677] syzkaller0: entered promiscuous mode
[   76.768063][ T4677] syzkaller0: entered allmulticast mode
[   76.775134][   T29] audit: type=1400 audit(1753507385.397:1820): avc:  denied  { read } for  pid=4671 comm="syz.4.346" name="qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   76.797994][   T29] audit: type=1400 audit(1753507385.397:1821): avc:  denied  { open } for  pid=4671 comm="syz.4.346" path="/dev/qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   76.821333][   T29] audit: type=1400 audit(1753507385.417:1822): avc:  denied  { unlink } for  pid=3310 comm="syz-executor" name="file0" dev="tmpfs" ino=376 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   76.866925][ T4681] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   76.877035][ T4677] tipc: Resetting bearer <eth:syzkaller0>
[   76.883571][ T4681] syzkaller0: entered promiscuous mode
[   76.889145][ T4681] syzkaller0: entered allmulticast mode
[   76.912725][ T4676] tipc: Resetting bearer <eth:syzkaller0>
[   76.922797][ T4676] tipc: Disabling bearer <eth:syzkaller0>
[   76.939060][ T4681] tipc: Resetting bearer <eth:syzkaller0>
[   76.950314][ T4680] tipc: Resetting bearer <eth:syzkaller0>
[   76.972035][ T4680] tipc: Disabling bearer <eth:syzkaller0>
[   77.480365][ T4690] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not ''
[   77.504712][ T4672] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   77.563530][ T4693] loop0: detected capacity change from 0 to 512
[   77.617207][ T4693] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   77.663544][ T4693] ext4 filesystem being mounted at /70/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   77.744221][   T29] audit: type=1400 audit(1753507386.397:1823): avc:  denied  { write } for  pid=4689 comm="syz.0.351" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   78.376440][ T4700] loop2: detected capacity change from 0 to 1024
[   78.383334][ T4700] EXT4-fs: Ignoring removed nobh option
[   78.500306][ T4703] sch_tbf: burst 3298 is lower than device lo mtu (11337746) !
[   78.608763][ T4710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.357'.
[   78.635109][ T4708] loop4: detected capacity change from 0 to 1024
[   78.669953][ T4710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.357'.
[   78.682425][ T4708] EXT4-fs: Ignoring removed orlov option
[   78.699242][ T4712] sctp: [Deprecated]: syz.1.357 (pid 4712) Use of int in max_burst socket option.
[   78.699242][ T4712] Use struct sctp_assoc_value instead
[   78.719887][ T4713] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   78.737851][ T4713] syzkaller0: entered promiscuous mode
[   78.743401][ T4713] syzkaller0: entered allmulticast mode
[   78.785198][ T4713] tipc: Resetting bearer <eth:syzkaller0>
[   78.794333][ T4711] tipc: Resetting bearer <eth:syzkaller0>
[   78.818295][ T4711] tipc: Disabling bearer <eth:syzkaller0>
[   79.229269][ T4700] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   79.240257][ T4700] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[   79.251329][ T4700] JBD2: no valid journal superblock found
[   79.257100][ T4700] EXT4-fs (loop2): Could not load journal inode
[   79.278747][ T4708] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   79.428380][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.804621][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.833046][ T4725] loop0: detected capacity change from 0 to 2048
[   79.872914][ T4725] EXT4-fs (loop0): failed to initialize system zone (-117)
[   79.901627][ T4725] EXT4-fs (loop0): mount failed
[   80.000428][ T4732] 9pnet: p9_errstr2errno: server reported unknown error 
[   80.164835][ T4737] netlink: 8 bytes leftover after parsing attributes in process `syz.4.366'.
[   80.263946][ T4743] tipc: New replicast peer: 255.255.255.255
[   80.270077][ T4743] tipc: Enabled bearer <udp:syz2>, priority 10
[   80.323040][ T4747] loop4: detected capacity change from 0 to 1024
[   80.330066][ T4747] EXT4-fs: Ignoring removed nomblk_io_submit option
[   80.422984][ T4747] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   80.502737][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   80.723233][ T4758] netem: change failed
[   80.733710][   T29] kauditd_printk_skb: 32 callbacks suppressed
[   80.733798][   T29] audit: type=1400 audit(1753507389.387:1856): avc:  denied  { read append } for  pid=4757 comm="syz.3.375" name="event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   80.763740][   T29] audit: type=1400 audit(1753507389.387:1857): avc:  denied  { open } for  pid=4757 comm="syz.3.375" path="/dev/input/event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   80.900228][   T29] audit: type=1400 audit(1753507389.507:1858): avc:  denied  { setopt } for  pid=4760 comm="syz.0.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   80.923025][ T4764] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[   80.939623][ T4761] bridge_slave_0: left allmulticast mode
[   80.945429][ T4761] bridge_slave_0: left promiscuous mode
[   80.951129][ T4761] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.997305][   T29] audit: type=1400 audit(1753507389.617:1859): avc:  denied  { accept } for  pid=4762 comm="syz.3.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   81.017241][   T29] audit: type=1400 audit(1753507389.647:1860): avc:  denied  { bind } for  pid=4760 comm="syz.0.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   81.047445][ T4761] bridge_slave_1: left allmulticast mode
[   81.053174][ T4761] bridge_slave_1: left promiscuous mode
[   81.058961][ T4761] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.115271][ T4761] bond0: (slave bond_slave_0): Releasing backup interface
[   81.142971][ T4761] bond0: (slave bond_slave_1): Releasing backup interface
[   81.174447][ T4761] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   81.182019][ T4761] batman_adv: batadv0: Removing interface: batadv_slave_0
[   81.211731][ T4761] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   81.219352][ T4761] batman_adv: batadv0: Removing interface: batadv_slave_1
[   81.261184][   T10] tipc: Node number set to 1432794410
[   81.303323][ T4761] bond1: (slave geneve2): Releasing active interface
[   81.310062][ T4761] bond1: (slave geneve2): the permanent HWaddr of slave - 26:15:45:9f:32:37 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[   81.383179][ T4761] geneve2: left allmulticast mode
[   81.404781][ T4761] bond1: (slave veth3): Releasing active interface
[   81.436578][ T4767] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   81.445183][ T4767] syzkaller0: entered promiscuous mode
[   81.450683][ T4767] syzkaller0: entered allmulticast mode
[   81.508463][ T4767] tipc: Resetting bearer <eth:syzkaller0>
[   81.549540][ T4766] tipc: Resetting bearer <eth:syzkaller0>
[   81.570736][ T4766] tipc: Disabling bearer <eth:syzkaller0>
[   82.265442][ T4777] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   82.294642][ T4777] syzkaller0: entered promiscuous mode
[   82.300182][ T4777] syzkaller0: entered allmulticast mode
[   82.338801][ T4779] loop4: detected capacity change from 0 to 512
[   82.363840][ T4777] tipc: Resetting bearer <eth:syzkaller0>
[   82.375011][ T4779] EXT4-fs: Ignoring removed nobh option
[   82.435554][ T4776] tipc: Resetting bearer <eth:syzkaller0>
[   82.451259][ T4776] tipc: Disabling bearer <eth:syzkaller0>
[   82.463845][ T4779] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #3: comm syz.4.381: corrupted inode contents
[   82.502774][ T4779] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #3: comm syz.4.381: mark_inode_dirty error
[   82.525911][ T4785] loop3: detected capacity change from 0 to 2048
[   82.540244][ T4779] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #3: comm syz.4.381: corrupted inode contents
[   82.564592][ T4779] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #3: comm syz.4.381: mark_inode_dirty error
[   82.582885][ T4785] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   82.607595][ T4779] Quota error (device loop4): write_blk: dquota write failed
[   82.628676][ T4779] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[   82.656302][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.667967][ T4779] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.381: Failed to acquire dquot type 0
[   82.701038][ T4779] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.381: corrupted inode contents
[   82.717223][   T29] audit: type=1326 audit(1753507391.367:1861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4788 comm="syz.1.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ce969e9a9 code=0x7ffc0000
[   82.753395][ T4779] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #16: comm syz.4.381: mark_inode_dirty error
[   82.790845][ T4791] xt_hashlimit: max too large, truncated to 1048576
[   82.812075][ T4779] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.381: corrupted inode contents
[   82.843491][   T29] audit: type=1326 audit(1753507391.397:1862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4788 comm="syz.1.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=123 compat=0 ip=0x7f9ce969e9a9 code=0x7ffc0000
[   82.867036][   T29] audit: type=1326 audit(1753507391.397:1863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4788 comm="syz.1.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ce969e9a9 code=0x7ffc0000
[   82.927674][ T4779] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.381: mark_inode_dirty error
[   82.947050][ T4795] loop3: detected capacity change from 0 to 1024
[   82.956818][ T4797] loop1: detected capacity change from 0 to 512
[   82.964906][ T4795] EXT4-fs: Ignoring removed nobh option
[   82.970589][ T4795] EXT4-fs: Ignoring removed bh option
[   82.974588][ T4779] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.381: corrupted inode contents
[   82.988623][ T4779] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem
[   83.081381][ T4779] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.381: corrupted inode contents
[   83.094305][ T4779] EXT4-fs error (device loop4): ext4_truncate:4597: inode #16: comm syz.4.381: mark_inode_dirty error
[   83.105696][ T4779] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem
[   83.201120][ T4795] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   83.206357][ T4779] EXT4-fs (loop4): 1 truncate cleaned up
[   83.224191][ T4797] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   83.241616][ T4779] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   83.247316][ T4797] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   83.254488][ T4779] ext4 filesystem being mounted at /79/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   83.405059][ T4809] hub 6-0:1.0: USB hub found
[   83.416345][ T4797] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[   83.435481][ T4809] hub 6-0:1.0: 8 ports detected
[   83.520012][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   83.554423][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   83.663865][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   84.233392][ T4821] loop3: detected capacity change from 0 to 512
[   84.240628][ T4821] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   84.396863][ T4823] loop0: detected capacity change from 0 to 512
[   84.408480][ T4823] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   84.441267][ T4823] EXT4-fs (loop0): orphan cleanup on readonly fs
[   84.464560][ T4823] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.394: bg 0: block 248: padding at end of block bitmap is not set
[   84.480155][ T4823] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.394: Failed to acquire dquot type 1
[   84.492941][ T4823] EXT4-fs (loop0): 1 truncate cleaned up
[   84.499935][ T4823] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   84.525353][ T4821] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   84.576043][ T4831] loop4: detected capacity change from 0 to 164
[   84.611201][ T4821] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   84.633903][ T4831] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   84.782664][ T4837] SELinux:  Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped).
[   84.801521][ T4836] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   84.834570][ T4837] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[   85.141335][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.205715][ T4852] loop4: detected capacity change from 0 to 128
[   85.225674][ T4854] netlink: 'syz.3.404': attribute type 3 has an invalid length.
[   85.244295][ T4852] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   85.261711][ T4856] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   85.279678][ T4856] syzkaller0: entered promiscuous mode
[   85.285267][ T4856] syzkaller0: entered allmulticast mode
[   85.305039][ T4852] ext4 filesystem being mounted at /83/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   85.324014][ T4860] loop3: detected capacity change from 0 to 512
[   85.333210][ T4856] tipc: Resetting bearer <eth:syzkaller0>
[   85.363988][ T4855] tipc: Resetting bearer <eth:syzkaller0>
[   85.370717][ T4860] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[   85.396629][ T4855] tipc: Disabling bearer <eth:syzkaller0>
[   85.428178][ T4860] EXT4-fs warning (device loop3): dx_probe:837: inode #2: comm syz.3.407: Unimplemented hash flags: 0x0001
[   85.439699][ T4860] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.407: Corrupt directory, running e2fsck is recommended
[   85.482089][ T4857] loop1: detected capacity change from 0 to 512
[   85.488905][ T4857] EXT4-fs: Ignoring removed nobh option
[   85.556385][ T4860] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 3: comm syz.3.407: path /104/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=4294967295, rec_len=7, size=1024 fake=0
[   85.588506][ T4857] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #3: comm syz.1.402: corrupted inode contents
[   85.601273][ T4866] xt_connbytes: Forcing CT accounting to be enabled
[   85.629406][ T4857] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #3: comm syz.1.402: mark_inode_dirty error
[   85.667318][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.682947][ T4857] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #3: comm syz.1.402: corrupted inode contents
[   85.708793][ T4857] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #3: comm syz.1.402: mark_inode_dirty error
[   85.734769][ T4857] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.402: Failed to acquire dquot type 0
[   85.758381][ T4857] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.402: corrupted inode contents
[   85.785671][ T4857] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #16: comm syz.1.402: mark_inode_dirty error
[   85.809531][ T4857] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.402: corrupted inode contents
[   85.835220][ T4857] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.402: mark_inode_dirty error
[   85.865517][ T4857] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.402: corrupted inode contents
[   85.892081][ T4857] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem
[   85.910229][ T4857] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.402: corrupted inode contents
[   85.934804][ T3307] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   85.954842][ T4857] EXT4-fs error (device loop1): ext4_truncate:4597: inode #16: comm syz.1.402: mark_inode_dirty error
[   85.976789][ T4857] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem
[   86.005217][ T4857] EXT4-fs (loop1): 1 truncate cleaned up
[   86.011811][ T4857] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   86.043123][ T4857] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   86.408539][ T4868] loop3: detected capacity change from 0 to 2048
[   86.438150][ T4868] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[   86.463292][ T4868] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   86.498352][ T4868] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28
[   86.510753][ T4868] EXT4-fs (loop3): This should not happen!! Data will be lost
[   86.510753][ T4868] 
[   86.520446][ T4868] EXT4-fs (loop3): Total free blocks count 0
[   86.526478][ T4868] EXT4-fs (loop3): Free/Dirty block details
[   86.532439][ T4868] EXT4-fs (loop3): free_blocks=2415919104
[   86.538264][ T4868] EXT4-fs (loop3): dirty_blocks=16
[   86.543420][ T4868] EXT4-fs (loop3): Block reservation details
[   86.549431][ T4868] EXT4-fs (loop3): i_reserved_data_blocks=1
[   86.615914][   T29] kauditd_printk_skb: 98 callbacks suppressed
[   86.615930][   T29] audit: type=1400 audit(1753507395.257:1958): avc:  denied  { create } for  pid=4874 comm="syz.4.411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   86.641746][   T29] audit: type=1400 audit(1753507395.257:1959): avc:  denied  { create } for  pid=4874 comm="syz.4.411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   86.661245][   T29] audit: type=1400 audit(1753507395.267:1960): avc:  denied  { create } for  pid=4874 comm="syz.4.411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   86.680703][   T29] audit: type=1400 audit(1753507395.267:1961): avc:  denied  { create } for  pid=4874 comm="syz.4.411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   86.738367][ T4877] netlink: 4 bytes leftover after parsing attributes in process `syz.4.412'.
[   86.766043][ T4878] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28
[   86.865819][   T29] audit: type=1400 audit(1753507395.407:1962): avc:  denied  { map } for  pid=4867 comm="syz.3.409" path="/105/file2/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   86.888966][   T29] audit: type=1400 audit(1753507395.467:1963): avc:  denied  { execute } for  pid=4867 comm="syz.3.409" path="/105/file2/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   86.944048][ T4877] netlink: 4 bytes leftover after parsing attributes in process `syz.4.412'.
[   87.128414][   T29] audit: type=1400 audit(1753507395.777:1964): avc:  denied  { bind } for  pid=4885 comm="syz.4.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   87.259876][ T4888] netlink: 36 bytes leftover after parsing attributes in process `syz.4.415'.
[   87.269034][ T4888] netlink: 16 bytes leftover after parsing attributes in process `syz.4.415'.
[   87.278038][ T4888] netlink: 36 bytes leftover after parsing attributes in process `syz.4.415'.
[   87.306506][ T4888] netlink: 36 bytes leftover after parsing attributes in process `syz.4.415'.
[   87.367984][   T29] audit: type=1400 audit(1753507396.017:1965): avc:  denied  { ioctl } for  pid=4893 comm="syz.4.416" path="socket:[9441]" dev="sockfs" ino=9441 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   88.230351][ T4897] loop4: detected capacity change from 0 to 1024
[   88.255759][ T4897] EXT4-fs: Ignoring removed nobh option
[   88.261529][ T4897] EXT4-fs: Ignoring removed bh option
[   88.287779][ T4897] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   88.390056][   T29] audit: type=1400 audit(1753507397.027:1966): avc:  denied  { map } for  pid=4896 comm="syz.4.417" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9451 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   88.414259][   T29] audit: type=1400 audit(1753507397.027:1967): avc:  denied  { read write } for  pid=4896 comm="syz.4.417" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9451 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   88.456642][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   88.516261][ T4902] loop0: detected capacity change from 0 to 512
[   88.528666][ T4902] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[   88.529095][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   88.553267][ T4902] EXT4-fs (loop0): invalid journal inode
[   89.586882][ T4920] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11)
[   89.593686][ T4920] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[   89.601417][ T4920] vhci_hcd vhci_hcd.0: Device attached
[   89.715948][ T4866] set match dimension is over the limit!
[   89.749852][ T4924] loop2: detected capacity change from 0 to 1024
[   89.762819][ T4924] EXT4-fs: Ignoring removed nobh option
[   89.768449][ T4924] EXT4-fs: Ignoring removed bh option
[   89.780788][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   89.794577][ T4924] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   89.835646][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   89.878837][ T4928] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.886483][ T4928] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address
[   89.898218][ T4928] bond0: (slave ip6tnl0): Error -95 calling set_mac_address
[   90.092180][ T4951] SELinux:  Context system_u:object_r:logrotate_var_lib_t:s0 is not valid (left unmapped).
[   90.184757][ T4954] capability: warning: `syz.4.431' uses 32-bit capabilities (legacy support in use)
[   90.372101][ T4974] loop3: detected capacity change from 0 to 1024
[   90.433401][ T4974] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   90.511752][ T4921] vhci_hcd: connection closed
[   90.512195][ T4622] vhci_hcd: stop threads
[   90.521243][ T4622] vhci_hcd: release socket
[   90.525777][ T4622] vhci_hcd: disconnect device
[   90.585944][ T4981] netlink: 'syz.4.436': attribute type 1 has an invalid length.
[   90.593779][ T4981] netlink: 224 bytes leftover after parsing attributes in process `syz.4.436'.
[   90.747155][ T4987] ip6gre1: entered promiscuous mode
[   90.752475][ T4987] ip6gre1: entered allmulticast mode
[   91.162726][ T4991] bridge_slave_0: left allmulticast mode
[   91.168530][ T4991] bridge_slave_0: left promiscuous mode
[   91.174431][ T4991] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.223404][ T4991] bridge_slave_1: left allmulticast mode
[   91.229175][ T4991] bridge_slave_1: left promiscuous mode
[   91.235013][ T4991] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.282115][ T4991] bond0: (slave bond_slave_0): Releasing backup interface
[   91.294438][ T4991] bond0: (slave bond_slave_1): Releasing backup interface
[   91.313074][ T4991] team0: Port device team_slave_0 removed
[   91.343680][ T4991] team0: Port device team_slave_1 removed
[   91.740505][ T5013] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   91.756349][   T29] kauditd_printk_skb: 90 callbacks suppressed
[   91.756442][   T29] audit: type=1400 audit(1753507400.407:2058): avc:  denied  { block_suspend } for  pid=5007 comm="syz.4.441" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   91.866454][ T5013] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0'
[   92.169230][ T5018] loop0: detected capacity change from 0 to 128
[   92.447013][ T5026] loop2: detected capacity change from 0 to 1024
[   92.513467][   T29] audit: type=1400 audit(1753507401.167:2059): avc:  denied  { create } for  pid=5027 comm="syz.4.446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   92.544704][ T5026] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   92.583337][ T5028] loop4: detected capacity change from 0 to 512
[   92.608066][ T5028] EXT4-fs: Ignoring removed bh option
[   92.614382][   T29] audit: type=1400 audit(1753507401.187:2060): avc:  denied  { write } for  pid=5027 comm="syz.4.446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   92.635062][   T29] audit: type=1400 audit(1753507401.197:2061): avc:  denied  { map_create } for  pid=5027 comm="syz.4.446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   92.654335][   T29] audit: type=1400 audit(1753507401.197:2062): avc:  denied  { map_read map_write } for  pid=5027 comm="syz.4.446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   92.661433][ T5028] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[   92.674224][   T29] audit: type=1400 audit(1753507401.217:2063): avc:  denied  { prog_load } for  pid=5027 comm="syz.4.446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   92.674268][   T29] audit: type=1400 audit(1753507401.217:2064): avc:  denied  { bpf } for  pid=5027 comm="syz.4.446" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   92.683320][ T5028] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[   92.702577][   T29] audit: type=1400 audit(1753507401.227:2065): avc:  denied  { read write } for  pid=5027 comm="syz.4.446" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   92.755336][   T29] audit: type=1400 audit(1753507401.227:2066): avc:  denied  { open } for  pid=5027 comm="syz.4.446" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   92.779323][   T29] audit: type=1400 audit(1753507401.227:2067): avc:  denied  { ioctl } for  pid=3306 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   92.841636][ T5034] loop0: detected capacity change from 0 to 512
[   92.858616][ T5026] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.445: Allocating blocks 385-513 which overlap fs metadata
[   92.881219][ T5034] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349)
[   92.902780][ T5036] EXT4-fs (loop2): pa ffff888106a725b0: logic 16, phys. 129, len 24
[   92.910873][ T5036] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8
[   92.942331][ T5028] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended
[   92.942714][ T5028] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006]
[   92.943287][ T5028] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   92.951444][ T5034] EXT4-fs (loop0): orphan cleanup on readonly fs
[   92.951735][ T5034] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:517: comm syz.0.448: Block bitmap for bg 0 marked uninitialized
[   92.951916][ T5034] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6548: Corrupt filesystem
[   92.952110][ T5034] EXT4-fs (loop0): 1 orphan inode deleted
[   92.952686][ T5034] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[   93.175237][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   93.243068][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   93.318625][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   93.996466][ T5051] loop1: detected capacity change from 0 to 1024
[   94.031666][ T5051] EXT4-fs: Ignoring removed nomblk_io_submit option
[   94.069683][ T5051] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   94.302383][ T5047] Driver unsupported XDP return value 0 on prog  (id 338) dev N/A, expect packet loss!
[   94.412615][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   94.511068][ T5060] C: renamed from team_slave_0
[   94.587070][ T5060] netlink: 152 bytes leftover after parsing attributes in process `syz.3.453'.
[   94.723683][ T5065] loop3: detected capacity change from 0 to 2048
[   94.813562][ T5065] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[   94.876959][ T5071] netlink: 'syz.2.457': attribute type 1 has an invalid length.
[   94.884827][ T5071] netlink: 224 bytes leftover after parsing attributes in process `syz.2.457'.
[   95.027635][ T5075] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   95.082223][ T5075] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 732 with error 28
[   95.094666][ T5075] EXT4-fs (loop3): This should not happen!! Data will be lost
[   95.094666][ T5075] 
[   95.104480][ T5075] EXT4-fs (loop3): Total free blocks count 0
[   95.110478][ T5075] EXT4-fs (loop3): Free/Dirty block details
[   95.116579][ T5075] EXT4-fs (loop3): free_blocks=2415919104
[   95.122523][ T5075] EXT4-fs (loop3): dirty_blocks=736
[   95.127761][ T5075] EXT4-fs (loop3): Block reservation details
[   95.133986][ T5075] EXT4-fs (loop3): i_reserved_data_blocks=46
[   95.281866][ T5075] netlink: 28 bytes leftover after parsing attributes in process `syz.3.456'.
[   95.290777][ T5075] netlink: 32 bytes leftover after parsing attributes in process `syz.3.456'.
[   95.299833][ T5075] netlink: 28 bytes leftover after parsing attributes in process `syz.3.456'.
[   95.377966][ T5051] Set syz1 is full, maxelem 65536 reached
[   95.402053][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   95.497061][ T4632] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28
[   95.583651][ T5089] netlink: 'syz.3.461': attribute type 13 has an invalid length.
[   95.612678][ T5089] gretap0: refused to change device tx_queue_len
[   95.619188][ T5089] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   96.551001][ T5099] xt_CT: No such helper "snmp"
[   96.791482][   T29] kauditd_printk_skb: 54 callbacks suppressed
[   96.791498][   T29] audit: type=1400 audit(1753507404.537:2122): avc:  denied  { create } for  pid=5097 comm="syz.0.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   96.817640][   T29] audit: type=1400 audit(1753507404.537:2123): avc:  denied  { write } for  pid=5097 comm="syz.0.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   97.166699][   T29] audit: type=1326 audit(1753507405.817:2124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5107 comm="syz.4.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4cbfce9a9 code=0x7ffc0000
[   97.190237][   T29] audit: type=1326 audit(1753507405.817:2125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5107 comm="syz.4.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4cbfce9a9 code=0x7ffc0000
[   97.213665][   T29] audit: type=1326 audit(1753507405.817:2126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5107 comm="syz.4.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff4cbfce9a9 code=0x7ffc0000
[   97.229850][ T5110] netlink: 'syz.0.468': attribute type 10 has an invalid length.
[   97.237210][   T29] audit: type=1326 audit(1753507405.817:2127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5107 comm="syz.4.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4cbfce9a9 code=0x7ffc0000
[   97.255629][ T5110] netlink: 'syz.0.468': attribute type 10 has an invalid length.
[   97.268442][   T29] audit: type=1326 audit(1753507405.817:2128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5107 comm="syz.4.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4cbfce9a9 code=0x7ffc0000
[   97.299403][   T29] audit: type=1326 audit(1753507405.817:2129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5107 comm="syz.4.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7ff4cbfce9a9 code=0x7ffc0000
[   97.322861][   T29] audit: type=1326 audit(1753507405.817:2130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5107 comm="syz.4.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4cbfce9a9 code=0x7ffc0000
[   97.346244][   T29] audit: type=1326 audit(1753507405.817:2131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5107 comm="syz.4.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7ff4cbfce9a9 code=0x7ffc0000
[   97.616163][ T5126] loop3: detected capacity change from 0 to 128
[   97.919640][ T5132] Cannot find del_set index 286 as target
[   97.949927][ T5135] netlink: 60 bytes leftover after parsing attributes in process `syz.2.474'.
[   97.958930][ T5135] unsupported nlmsg_type 40
[   98.023868][ T5140] loop4: detected capacity change from 0 to 1024
[   98.034829][ T5140] EXT4-fs: Ignoring removed nobh option
[   98.045018][ T5144] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled
[   98.045543][ T5140] EXT4-fs: Ignoring removed bh option
[   98.064563][ T5146] loop2: detected capacity change from 0 to 1024
[   98.073198][ T5140] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   98.087541][ T5146] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   98.119290][ T5140] SELinux: ebitmap: truncated map
[   98.129179][ T5140] SELinux: failed to load policy
[   98.151731][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   98.179609][ T5154] netlink: 'syz.4.480': attribute type 13 has an invalid length.
[   98.210901][ T5154] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   98.277906][ T5156] loop4: detected capacity change from 0 to 512
[   98.286325][ T5156] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   98.352234][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   98.376331][ T5164] Cannot find del_set index 286 as target
[   98.383626][ T5166] netlink: 60 bytes leftover after parsing attributes in process `syz.3.487'.
[   98.628784][ T5185] loop3: detected capacity change from 0 to 512
[   98.638161][ T5185] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   98.703316][ T5185] EXT4-fs (loop3): orphan cleanup on readonly fs
[   98.711578][ T5185] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.491: bg 0: block 248: padding at end of block bitmap is not set
[   98.727085][ T5185] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.491: Failed to acquire dquot type 1
[   98.752577][ T5185] EXT4-fs (loop3): 1 truncate cleaned up
[   98.760498][ T5185] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   99.040534][ T5190] loop0: detected capacity change from 0 to 512
[   99.120852][ T5190] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   99.206530][ T5190] ext4 filesystem being mounted at /93/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   99.319624][ T5197] loop2: detected capacity change from 0 to 512
[   99.542080][ T5197] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   99.572115][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   99.687219][ T5203] netlink: 8 bytes leftover after parsing attributes in process `syz.0.497'.
[   99.723253][ T5208] loop4: detected capacity change from 0 to 1024
[   99.769584][ T5208] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   99.813527][ T5216] netlink: 60 bytes leftover after parsing attributes in process `syz.0.500'.
[   99.865516][ T5205] loop1: detected capacity change from 0 to 128
[   99.973776][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   99.997689][ T5218] netlink: 256 bytes leftover after parsing attributes in process `syz.2.502'.
[  100.235715][ T5232] loop0: detected capacity change from 0 to 1024
[  100.274051][ T5232] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  100.312462][ T5232] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.504: Allocating blocks 385-513 which overlap fs metadata
[  100.347503][ T5232] EXT4-fs (loop0): pa ffff888106a72620: logic 16, phys. 129, len 24
[  100.355588][ T5232] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8
[  102.601171][ T5255] loop1: detected capacity change from 0 to 1024
[  102.636910][ T5255] EXT4-fs mount: 1 callbacks suppressed
[  102.636989][ T5255] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  103.183891][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.202102][   T29] kauditd_printk_skb: 414 callbacks suppressed
[  103.202116][   T29] audit: type=1400 audit(1753507411.857:2544): avc:  denied  { read } for  pid=5261 comm="syz.0.523" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  103.207825][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.208351][   T29] audit: type=1400 audit(1753507411.857:2545): avc:  denied  { open } for  pid=5261 comm="syz.0.523" path="/dev/cpu/1/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  103.286090][   T29] audit: type=1400 audit(1753507411.907:2546): avc:  denied  { ioctl } for  pid=5261 comm="syz.0.523" path="/dev/cpu/1/msr" dev="devtmpfs" ino=87 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  103.341377][ T5265] loop3: detected capacity change from 0 to 2048
[  103.383893][ T5265]  loop3: p1 < > p3
[  103.389110][ T5265] loop3: p3 size 134217728 extends beyond EOD, truncated
[  103.421799][ T5265] netlink: 16 bytes leftover after parsing attributes in process `syz.3.514'.
[  103.536626][ T5275] loop3: detected capacity change from 0 to 512
[  103.563101][ T5275] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  103.584140][ T5275] EXT4-fs (loop3): orphan cleanup on readonly fs
[  103.629626][ T5275] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.516: iget: bad i_size value: 38620345925642
[  103.688385][ T5275] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.516: couldn't read orphan inode 15 (err -117)
[  103.729497][ T5275] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  103.775900][   T29] audit: type=1400 audit(1753507412.427:2547): avc:  denied  { bind } for  pid=5274 comm="syz.3.516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  103.795241][   T29] audit: type=1400 audit(1753507412.427:2548): avc:  denied  { name_bind } for  pid=5274 comm="syz.3.516" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  103.816970][   T29] audit: type=1400 audit(1753507412.427:2549): avc:  denied  { node_bind } for  pid=5274 comm="syz.3.516" saddr=172.20.20.170 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1
[  103.867353][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.888487][   T29] audit: type=1400 audit(1753507412.537:2550): avc:  denied  { create } for  pid=5279 comm="syz.3.517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  103.955172][ T5280] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  104.110724][   T29] audit: type=1400 audit(1753507412.757:2551): avc:  denied  { read write } for  pid=5283 comm="syz.0.529" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  104.134454][   T29] audit: type=1400 audit(1753507412.757:2552): avc:  denied  { open } for  pid=5283 comm="syz.0.529" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  104.157840][   T29] audit: type=1400 audit(1753507412.757:2553): avc:  denied  { firmware_load } for  pid=4615 comm="kworker/u8:21" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1
[  104.491940][ T5291] loop0: detected capacity change from 0 to 128
[  104.502317][ T5292] loop4: detected capacity change from 0 to 1024
[  104.543483][ T5292] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  104.600918][ T5292] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.519: Allocating blocks 385-513 which overlap fs metadata
[  104.604336][ T5292] EXT4-fs (loop4): pa ffff888106a9b000: logic 16, phys. 129, len 24
[  104.604370][ T5292] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8
[  104.736602][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.818636][ T5304] netlink: 'syz.4.521': attribute type 10 has an invalid length.
[  104.855311][ T5306] loop2: detected capacity change from 0 to 256
[  104.858278][ T5304] team0: Port device dummy0 added
[  104.893242][ T5304] netlink: 'syz.4.521': attribute type 10 has an invalid length.
[  104.916380][ T5304] team0: Port device dummy0 removed
[  105.250604][ T5318] netlink: 4 bytes leftover after parsing attributes in process `syz.1.530'.
[  105.395631][ T5329] loop3: detected capacity change from 0 to 1024
[  105.428698][ T5329] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  105.472556][ T5329] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.535: Allocating blocks 385-513 which overlap fs metadata
[  105.502393][ T5329] EXT4-fs (loop3): pa ffff888106a9b0e0: logic 16, phys. 129, len 24
[  105.510525][ T5329] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8
[  105.569426][ T5333] loop1: detected capacity change from 0 to 8192
[  105.601371][ T5333] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  105.617526][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.630544][ T5333] 9pnet_fd: Insufficient options for proto=fd
[  105.684553][ T5339] loop4: detected capacity change from 0 to 128
[  106.613704][ T5352] loop4: detected capacity change from 0 to 256
[  106.732289][ T5358] program syz.1.544 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  107.036357][ T5366] loop1: detected capacity change from 0 to 1024
[  107.046558][ T5364] netlink: 28 bytes leftover after parsing attributes in process `syz.4.547'.
[  107.055495][ T5364] netlink: 28 bytes leftover after parsing attributes in process `syz.4.547'.
[  107.108829][ T5366] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  107.195318][ T5375] loop4: detected capacity change from 0 to 128
[  107.215672][ T5366] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.548: Allocating blocks 385-513 which overlap fs metadata
[  107.293201][ T5380] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  107.307819][ T5380] syzkaller0: entered promiscuous mode
[  107.313492][ T5380] syzkaller0: entered allmulticast mode
[  107.343342][ T5380] tipc: Resetting bearer <eth:syzkaller0>
[  107.365119][ T5379] tipc: Resetting bearer <eth:syzkaller0>
[  107.371267][ T5366] EXT4-fs (loop1): pa ffff888106a725b0: logic 16, phys. 129, len 24
[  107.379327][ T5366] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8
[  107.390236][ T5379] tipc: Disabling bearer <eth:syzkaller0>
[  107.468212][ T5386] loop0: detected capacity change from 0 to 128
[  107.502190][ T5385] netlink: 4 bytes leftover after parsing attributes in process `syz.4.555'.
[  107.752619][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.917940][ T5391] loop2: detected capacity change from 0 to 1024
[  107.955719][ T5391] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  108.076205][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.243809][   T29] kauditd_printk_skb: 114 callbacks suppressed
[  108.243823][   T29] audit: type=1400 audit(1753507416.897:2668): avc:  denied  { name_connect } for  pid=5396 comm="syz.4.561" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1
[  108.288474][ T5398] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5398 comm=syz.3.560
[  108.303016][   T29] audit: type=1326 audit(1753507416.937:2669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5394 comm="syz.3.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34f2e3e9a9 code=0x7ffc0000
[  108.326475][   T29] audit: type=1326 audit(1753507416.937:2670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5394 comm="syz.3.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=460 compat=0 ip=0x7f34f2e3e9a9 code=0x7ffc0000
[  108.349827][   T29] audit: type=1326 audit(1753507416.937:2671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5394 comm="syz.3.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34f2e3e9a9 code=0x7ffc0000
[  108.373351][   T29] audit: type=1326 audit(1753507416.937:2672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5394 comm="syz.3.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f34f2e3e9a9 code=0x7ffc0000
[  108.396745][   T29] audit: type=1326 audit(1753507416.937:2673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5394 comm="syz.3.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34f2e3e9a9 code=0x7ffc0000
[  108.420085][   T29] audit: type=1326 audit(1753507416.937:2674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5394 comm="syz.3.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f34f2e3e9a9 code=0x7ffc0000
[  108.443408][   T29] audit: type=1326 audit(1753507416.957:2675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5394 comm="syz.3.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34f2e3e9a9 code=0x7ffc0000
[  108.466765][   T29] audit: type=1326 audit(1753507416.957:2676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5394 comm="syz.3.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f34f2e3e9a9 code=0x7ffc0000
[  108.490046][   T29] audit: type=1326 audit(1753507416.957:2677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5394 comm="syz.3.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34f2e3e9a9 code=0x7ffc0000
[  108.630844][ T5403] loop2: detected capacity change from 0 to 8192
[  108.670465][ T5408] loop4: detected capacity change from 0 to 128
[  108.705182][ T5412] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[  108.718059][ T5408] IPVS: stopping master sync thread 5412 ...
[  108.774386][ T5418] syz.2.565 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  108.825736][ T5421] netlink: 52 bytes leftover after parsing attributes in process `syz.4.567'.
[  108.968901][ T5415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  108.988921][ T5415] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  109.038604][ T5428] netlink: 'syz.2.569': attribute type 12 has an invalid length.
[  109.466465][ T5441] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  109.491164][ T5441] syzkaller0: entered promiscuous mode
[  109.496874][ T5441] syzkaller0: entered allmulticast mode
[  109.521208][ T5441] tipc: Resetting bearer <eth:syzkaller0>
[  109.528188][ T5439] tipc: Resetting bearer <eth:syzkaller0>
[  109.544702][ T5439] tipc: Disabling bearer <eth:syzkaller0>
[  109.556750][ T5443] netlink: 28 bytes leftover after parsing attributes in process `syz.0.575'.
[  109.565788][ T5443] netlink: 28 bytes leftover after parsing attributes in process `syz.0.575'.
[  109.622594][ T5447] netlink: 'syz.0.576': attribute type 4 has an invalid length.
[  109.652413][ T5445] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.678888][ T5453] loop0: detected capacity change from 0 to 512
[  109.687813][ T5453] ext4: Unknown parameter 'fsuuid'
[  109.771834][ T5445] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.832655][ T5458] loop2: detected capacity change from 0 to 128
[  109.865731][ T5458] syz.2.581: attempt to access beyond end of device
[  109.865731][ T5458] loop2: rw=0, sector=121, nr_sectors = 120 limit=128
[  109.896877][ T5445] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.945828][ T4640] kworker/u8:46: attempt to access beyond end of device
[  109.945828][ T4640] loop2: rw=1, sector=241, nr_sectors = 800 limit=128
[  110.430945][ T5445] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.617106][ T5445] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  110.629998][ T5475] loop0: detected capacity change from 0 to 256
[  110.663771][ T5477] netlink: 32 bytes leftover after parsing attributes in process `syz.2.585'.
[  110.676394][ T5445] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  110.699963][ T5445] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  110.745888][ T5445] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  110.845487][ T3474] hid-generic 0003:8000:0002.0001: item fetching failed at offset 0/1
[  110.853873][ T3474] hid-generic 0003:8000:0002.0001: probe with driver hid-generic failed with error -22
[  110.937844][ T5491] netlink: 4 bytes leftover after parsing attributes in process `syz.2.592'.
[  110.951440][ T5491] batman_adv: batadv0: Removing interface: batadv_slave_1
[  110.953116][ T5495] loop4: detected capacity change from 0 to 128
[  110.980661][ T5495] syz.4.593: attempt to access beyond end of device
[  110.980661][ T5495] loop4: rw=0, sector=121, nr_sectors = 120 limit=128
[  111.007165][ T4642] kworker/u8:48: attempt to access beyond end of device
[  111.007165][ T4642] loop4: rw=1, sector=241, nr_sectors = 800 limit=128
[  111.024774][ T5497] loop3: detected capacity change from 0 to 2048
[  111.037906][ T5497] EXT4-fs: Ignoring removed nobh option
[  111.040004][ T5499] loop2: detected capacity change from 0 to 2048
[  111.065013][ T5497] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  111.092535][ T5499] 9pnet_fd: Insufficient options for proto=fd
[  111.107861][ T5508] loop4: detected capacity change from 0 to 256
[  111.115085][ T5508] msdos: Unknown parameter '˙0xffffffffffffffff˙˙˙˙'
[  111.152185][ T5512] netlink: 'syz.1.599': attribute type 1 has an invalid length.
[  111.159919][ T5512] netlink: 224 bytes leftover after parsing attributes in process `syz.1.599'.
[  111.272845][ T5525] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  111.280126][ T5525] syzkaller0: entered promiscuous mode
[  111.285706][ T5525] syzkaller0: entered allmulticast mode
[  111.298564][ T5525] tipc: Resetting bearer <eth:syzkaller0>
[  111.313616][ T5524] tipc: Resetting bearer <eth:syzkaller0>
[  111.316742][ T5527] loop4: detected capacity change from 0 to 128
[  111.332220][ T5524] tipc: Disabling bearer <eth:syzkaller0>
[  111.348696][ T5527] syz.4.605: attempt to access beyond end of device
[  111.348696][ T5527] loop4: rw=0, sector=121, nr_sectors = 120 limit=128
[  111.376656][ T4615] kworker/u8:21: attempt to access beyond end of device
[  111.376656][ T4615] loop4: rw=1, sector=241, nr_sectors = 800 limit=128
[  111.407127][ T5531] netlink: 8 bytes leftover after parsing attributes in process `syz.4.607'.
[  111.417015][ T5531] netlink: 8 bytes leftover after parsing attributes in process `syz.4.607'.
[  111.463098][ T5531] sctp: [Deprecated]: syz.4.607 (pid 5531) Use of int in max_burst socket option.
[  111.463098][ T5531] Use struct sctp_assoc_value instead
[  111.576138][ T5542] netlink: 36 bytes leftover after parsing attributes in process `syz.0.612'.
[  111.585125][ T5542] netlink: 16 bytes leftover after parsing attributes in process `syz.0.612'.
[  111.594078][ T5542] netlink: 36 bytes leftover after parsing attributes in process `syz.0.612'.
[  111.613205][ T5542] netlink: 36 bytes leftover after parsing attributes in process `syz.0.612'.
[  111.644091][ T5549] netlink: 'syz.2.614': attribute type 1 has an invalid length.
[  111.651908][ T5549] netlink: 224 bytes leftover after parsing attributes in process `syz.2.614'.
[  111.717958][ T5557] loop0: detected capacity change from 0 to 128
[  111.732702][ T5557] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  111.756494][ T5557] ext4 filesystem being mounted at /115/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  111.769548][ T5562] loop4: detected capacity change from 0 to 128
[  111.793688][ T5562] syz.4.616: attempt to access beyond end of device
[  111.793688][ T5562] loop4: rw=0, sector=121, nr_sectors = 120 limit=128
[  111.852775][ T4615] kworker/u8:21: attempt to access beyond end of device
[  111.852775][ T4615] loop4: rw=1, sector=241, nr_sectors = 800 limit=128
[  111.873983][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  111.917607][ T5568] 9pnet: p9_errstr2errno: server reported unknown error 
[  112.248677][ T5586] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  112.290213][ T5588] loop3: detected capacity change from 0 to 128
[  112.362433][ T3310] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  112.384948][ T5592] netem: change failed
[  112.517354][ T5600] netlink: 'syz.1.636': attribute type 12 has an invalid length.
[  112.598686][ T5605] SELinux:  Context system_u:object_r:ldconfig_cache_t:s0 is not valid (left unmapped).
[  112.682519][ T5609] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not '
'
[  112.882043][ T5617] loop2: detected capacity change from 0 to 128
[  112.890145][ T5617] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  112.922958][ T5617] ext4 filesystem being mounted at /137/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  113.024896][ T5621] loop4: detected capacity change from 0 to 2048
[  113.102285][ T5621] EXT4-fs (loop4): failed to initialize system zone (-117)
[  113.109659][ T5621] EXT4-fs (loop4): mount failed
[  113.279906][ T5631] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  113.287332][ T5631] syzkaller0: entered promiscuous mode
[  113.292987][ T5631] syzkaller0: entered allmulticast mode
[  113.306417][ T5631] tipc: Resetting bearer <eth:syzkaller0>
[  113.314611][ T5630] tipc: Resetting bearer <eth:syzkaller0>
[  113.322513][ T5630] tipc: Disabling bearer <eth:syzkaller0>
[  113.343419][   T29] kauditd_printk_skb: 464 callbacks suppressed
[  113.343434][   T29] audit: type=1326 audit(1753507422.058:3142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5626 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ce969e9a9 code=0x7ffc0000
[  113.350840][ T5633] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  113.390122][ T5633] syzkaller0: entered promiscuous mode
[  113.395727][ T5633] syzkaller0: entered allmulticast mode
[  113.406170][ T5633] tipc: Resetting bearer <eth:syzkaller0>
[  113.427841][ T5632] tipc: Resetting bearer <eth:syzkaller0>
[  113.437177][ T5632] tipc: Disabling bearer <eth:syzkaller0>
[  113.525034][   T29] audit: type=1326 audit(1753507422.228:3143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5636 comm="syz.4.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4cbfce9a9 code=0x7ffc0000
[  113.530132][ T3316] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  113.548463][   T29] audit: type=1326 audit(1753507422.228:3144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5636 comm="syz.4.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4cbfce9a9 code=0x7ffc0000
[  113.548492][   T29] audit: type=1326 audit(1753507422.228:3145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5636 comm="syz.4.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff4cbfce9a9 code=0x7ffc0000
[  113.576038][ T5642] netlink: 'syz.1.652': attribute type 1 has an invalid length.
[  113.580919][   T29] audit: type=1326 audit(1753507422.228:3146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5636 comm="syz.4.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4cbfce9a9 code=0x7ffc0000
[  113.635254][   T29] audit: type=1326 audit(1753507422.228:3147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5636 comm="syz.4.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff4cbfce9a9 code=0x7ffc0000
[  113.658704][   T29] audit: type=1326 audit(1753507422.228:3148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5636 comm="syz.4.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4cbfce9a9 code=0x7ffc0000
[  113.682144][   T29] audit: type=1326 audit(1753507422.228:3149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5636 comm="syz.4.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4cbfce9a9 code=0x7ffc0000
[  113.690510][ T5642] bond1: (slave vcan1): The slave device specified does not support setting the MAC address
[  113.705578][   T29] audit: type=1326 audit(1753507422.228:3150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5636 comm="syz.4.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7ff4cbfce9a9 code=0x7ffc0000
[  113.715654][ T5642] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode
[  113.738994][   T29] audit: type=1326 audit(1753507422.228:3151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5636 comm="syz.4.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4cbfce9a9 code=0x7ffc0000
[  113.752229][ T5642] bond1: (slave vcan1): making interface the new active one
[  113.784043][ T5642] bond1: (slave vcan1): Enslaving as an active interface with an up link
[  113.794899][ T5648] netlink: 'syz.2.654': attribute type 10 has an invalid length.
[  113.805313][ T5648] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  113.814276][ T5648] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  113.823037][ T5648] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  113.831803][ T5648] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  113.858138][ T5648] team0: Port device geneve1 added
[  113.887514][ T5654] loop4: detected capacity change from 0 to 128
[  113.900396][ T5646] infiniband syz1: set down
[  113.905043][ T5646] infiniband syz1: added bond0
[  113.934863][ T5660] 9pnet: p9_errstr2errno: server reported unknown error 
[  113.991630][ T5646] RDS/IB: syz1: added
[  113.995952][ T5646] smc: adding ib device syz1 with port count 1
[  114.004072][ T5646] smc:    ib device syz1 port 1 has pnetid 
[  114.875979][ T5672] loop4: detected capacity change from 0 to 512
[  114.910288][ T5673] loop0: detected capacity change from 0 to 164
[  114.918545][ T5672] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  114.931384][ T5673] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  114.944233][ T5672] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  114.962462][ T5672] ext4 filesystem being mounted at /143/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  115.011046][ T5686] loop2: detected capacity change from 0 to 128
[  115.042239][ T5672] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[  115.101030][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.119160][ T5689] loop0: detected capacity change from 0 to 128
[  115.128404][ T5689] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  115.137020][ T5689] FAT-fs (loop0): Filesystem has been set read-only
[  115.153037][ T5689] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  115.163053][ T5689] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  115.171693][ T5689] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  115.180724][ T5689] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  115.189536][ T4656] kworker/u8:62: attempt to access beyond end of device
[  115.189536][ T4656] loop2: rw=1, sector=153, nr_sectors = 8 limit=128
[  115.190854][ T5689] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  115.203967][ T4656] kworker/u8:62: attempt to access beyond end of device
[  115.203967][ T4656] loop2: rw=1, sector=169, nr_sectors = 16 limit=128
[  115.212030][ T5689] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  115.234327][ T5689] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  115.243868][ T5689] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  115.251116][ T4656] kworker/u8:62: attempt to access beyond end of device
[  115.251116][ T4656] loop2: rw=1, sector=193, nr_sectors = 8 limit=128
[  115.252728][ T5689] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  115.275343][ T5689] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  115.277455][ T4656] kworker/u8:62: attempt to access beyond end of device
[  115.277455][ T4656] loop2: rw=1, sector=209, nr_sectors = 8 limit=128
[  115.284020][ T5689] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  115.306663][ T5689] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  115.315245][ T5689] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  115.321044][ T4656] kworker/u8:62: attempt to access beyond end of device
[  115.321044][ T4656] loop2: rw=1, sector=225, nr_sectors = 8 limit=128
[  115.324639][ T5689] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  115.346916][ T5689] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  115.346963][ T4656] kworker/u8:62: attempt to access beyond end of device
[  115.346963][ T4656] loop2: rw=1, sector=241, nr_sectors = 8 limit=128
[  115.355673][ T5689] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  115.378524][ T5689] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  115.387349][ T5689] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  115.396828][ T5694] xt_connbytes: Forcing CT accounting to be enabled
[  115.396807][ T5689] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  115.396880][ T5689] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  115.396898][ T5689] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  115.403554][ T5694] set match dimension is over the limit!
[  115.403739][ T4656] kworker/u8:62: attempt to access beyond end of device
[  115.403739][ T4656] loop2: rw=1, sector=257, nr_sectors = 8 limit=128
[  115.413132][ T5689] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  115.441274][ T4656] kworker/u8:62: attempt to access beyond end of device
[  115.441274][ T4656] loop2: rw=1, sector=273, nr_sectors = 8 limit=128
[  115.449059][ T5689] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  115.463216][ T4656] kworker/u8:62: attempt to access beyond end of device
[  115.463216][ T4656] loop2: rw=1, sector=289, nr_sectors = 8 limit=128
[  115.470935][ T5689] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  115.500620][ T5689] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  115.506314][ T4656] kworker/u8:62: attempt to access beyond end of device
[  115.506314][ T4656] loop2: rw=1, sector=305, nr_sectors = 8 limit=128
[  115.509402][ T5689] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  115.531300][ T5689] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  115.539821][ T5689] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  115.548545][ T5689] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  115.557103][ T5689] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  115.572370][ T5689] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  115.582021][ T5689] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  115.590898][ T5689] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  115.599731][ T5689] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  115.608889][ T5689] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  115.617629][ T5689] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  115.626307][ T5689] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  115.641137][ T5689] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  115.649844][ T5689] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  115.658818][ T5689] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  115.667700][ T5689] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  115.678987][ T5696] xt_hashlimit: max too large, truncated to 1048576
[  115.906804][ T5702] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  115.914552][ T5702] syzkaller0: entered promiscuous mode
[  115.920316][ T5702] syzkaller0: entered allmulticast mode
[  115.937073][ T5704] loop3: detected capacity change from 0 to 512
[  115.953349][ T5702] tipc: Resetting bearer <eth:syzkaller0>
[  115.961007][ T5701] tipc: Resetting bearer <eth:syzkaller0>
[  115.968063][ T5704] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  115.968351][ T5701] tipc: Disabling bearer <eth:syzkaller0>
[  115.987728][ T5704] ext4 filesystem being mounted at /139/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  116.039579][ T5708] hub 6-0:1.0: USB hub found
[  116.047699][ T5704] __nla_validate_parse: 3 callbacks suppressed
[  116.047717][ T5704] netlink: 48 bytes leftover after parsing attributes in process `syz.3.674'.
[  116.090801][ T5708] hub 6-0:1.0: 8 ports detected
[  116.122149][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  116.142016][ T5714] loop4: detected capacity change from 0 to 128
[  116.148599][ T5712] loop0: detected capacity change from 0 to 2048
[  116.179765][ T5712] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  116.210887][ T5712] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  116.234488][ T5712] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28
[  116.247318][ T5712] EXT4-fs (loop0): This should not happen!! Data will be lost
[  116.247318][ T5712] 
[  116.257127][ T5712] EXT4-fs (loop0): Total free blocks count 0
[  116.263206][ T5712] EXT4-fs (loop0): Free/Dirty block details
[  116.269127][ T5712] EXT4-fs (loop0): free_blocks=2415919104
[  116.274937][ T5712] EXT4-fs (loop0): dirty_blocks=16
[  116.280078][ T5712] EXT4-fs (loop0): Block reservation details
[  116.286121][ T5712] EXT4-fs (loop0): i_reserved_data_blocks=1
[  116.305894][ T5719] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28
[  116.365683][ T5723] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address
[  116.386076][ T5723] bond0: (slave ip6tnl0): Error -95 calling set_mac_address
[  116.416076][ T5725] loop0: detected capacity change from 0 to 1024
[  116.431732][ T5725] EXT4-fs: Ignoring removed nomblk_io_submit option
[  116.453139][ T5725] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  116.495393][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  116.546244][ T5733] geneve3: entered promiscuous mode
[  116.750388][ T5747] netlink: 44 bytes leftover after parsing attributes in process `syz.4.685'.
[  117.013243][ T5755] loop3: detected capacity change from 0 to 128
[  117.024561][ T5755] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  117.038100][ T5755] ext4 filesystem being mounted at /142/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  117.095614][ T3311] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  117.233685][ T5760] netlink: 4 bytes leftover after parsing attributes in process `syz.3.692'.
[  117.272149][ T5760] netlink: 4 bytes leftover after parsing attributes in process `syz.3.692'.
[  117.624813][ T5771] bridge0: entered allmulticast mode
[  117.630393][ T5771] netlink: 4 bytes leftover after parsing attributes in process `syz.0.697'.
[  117.642847][ T5771] bridge0 (unregistering): left allmulticast mode
[  117.741947][ T5777] loop2: detected capacity change from 0 to 128
[  118.177698][ T5784] netlink: 12 bytes leftover after parsing attributes in process `syz.2.701'.
[  118.376491][   T29] kauditd_printk_skb: 765 callbacks suppressed
[  118.376506][   T29] audit: type=1400 audit(1753507427.088:3917): avc:  denied  { ioctl } for  pid=5783 comm="syz.2.701" path="socket:[12509]" dev="sockfs" ino=12509 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  118.653969][ T5789] netlink: 12 bytes leftover after parsing attributes in process `syz.0.703'.
[  118.715969][ T5791] loop2: detected capacity change from 0 to 164
[  118.750543][ T5791] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  118.781873][ T5793] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.893886][ T5793] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.937859][   T29] audit: type=1400 audit(1753507427.648:3918): avc:  denied  { connect } for  pid=5796 comm="syz.3.704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  118.967662][ T5799] loop2: detected capacity change from 0 to 512
[  118.976961][ T5799] EXT4-fs (loop2): orphan cleanup on readonly fs
[  118.985229][ T5793] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.996955][ T5799] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.707: bg 0: block 248: padding at end of block bitmap is not set
[  119.013674][ T5799] Quota error (device loop2): write_blk: dquota write failed
[  119.021223][ T5799] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  119.031245][ T5799] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.707: Failed to acquire dquot type 1
[  119.118667][ T5793] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.163943][ T5799] EXT4-fs (loop2): 1 truncate cleaned up
[  119.177924][ T5799] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  119.203100][ T5793] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  119.231044][ T5793] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  119.241334][ T5799] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended
[  119.269391][ T5793] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  119.278215][ T5799] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  119.289298][ T5799] Quota error (device loop2): do_check_range: Getting block 1536 out of range 0-5
[  119.317739][ T5793] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  119.494524][ T5808] loop0: detected capacity change from 0 to 128
[  119.643502][ T5810] loop0: detected capacity change from 0 to 1024
[  119.716211][ T5810] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  119.735001][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  119.761316][ T5810] netlink: 8 bytes leftover after parsing attributes in process `syz.0.709'.
[  119.817671][   T29] audit: type=1400 audit(1753507428.528:3919): avc:  denied  { relabelto } for  pid=5811 comm="syz.1.710" name="cgroup.procs" dev="cgroup" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:logrotate_var_lib_t:s0"
[  119.845538][   T29] audit: type=1400 audit(1753507428.528:3920): avc:  denied  { associate } for  pid=5811 comm="syz.1.710" name="cgroup.procs" dev="cgroup" ino=53 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:logrotate_var_lib_t:s0"
[  119.908098][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  119.931739][ T5820] loop2: detected capacity change from 0 to 128
[  119.988776][ T5822] xt_hashlimit: max too large, truncated to 1048576
[  120.037031][   T29] audit: type=1326 audit(1753507428.748:3921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5827 comm="syz.1.717" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9ce969e9a9 code=0x0
[  120.076180][ T5840] netlink: 4 bytes leftover after parsing attributes in process `syz.2.719'.
[  120.117287][ T5840] netlink: 4 bytes leftover after parsing attributes in process `syz.2.719'.
[  120.137481][ T5844] loop4: detected capacity change from 0 to 128
[  120.216101][ T5849] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0'
[  120.282454][   T29] audit: type=1400 audit(1753507428.988:3922): avc:  denied  { read } for  pid=5858 comm="syz.4.726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  120.311770][ T5862] loop2: detected capacity change from 0 to 128
[  120.346730][ T5862] bio_check_eod: 55 callbacks suppressed
[  120.346746][ T5862] syz.2.728: attempt to access beyond end of device
[  120.346746][ T5862] loop2: rw=0, sector=121, nr_sectors = 120 limit=128
[  120.380930][ T4615] kworker/u8:21: attempt to access beyond end of device
[  120.380930][ T4615] loop2: rw=1, sector=241, nr_sectors = 800 limit=128
[  120.472783][ T5871] loop0: detected capacity change from 0 to 512
[  120.493493][ T5871] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  120.507110][ T5871] ext4 filesystem being mounted at /144/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  120.522426][ T5871] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  120.543207][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  120.581486][   T29] audit: type=1400 audit(1753507429.298:3923): avc:  denied  { create } for  pid=5879 comm="syz.3.734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  120.662483][ T4622] smc: removing ib device syz1
[  120.662711][ T5884] bond0 (unregistering): Released all slaves
[  120.765894][ T5890] loop3: detected capacity change from 0 to 128
[  120.792286][ T5890] syz.3.739: attempt to access beyond end of device
[  120.792286][ T5890] loop3: rw=0, sector=121, nr_sectors = 120 limit=128
[  120.819783][ T4622] kworker/u8:28: attempt to access beyond end of device
[  120.819783][ T4622] loop3: rw=1, sector=241, nr_sectors = 800 limit=128
[  120.911048][ T5898] loop3: detected capacity change from 0 to 512
[  120.914753][ T5896] syz_tun: left allmulticast mode
[  120.922467][ T5896] syz_tun: left promiscuous mode
[  120.927535][ T5896] bridge0: port 3(syz_tun) entered disabled state
[  120.933188][ T5898] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  120.946684][ T5898] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  120.957863][ T5896] bond0: (slave dummy0): Releasing backup interface
[  120.964633][ T5898] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  120.973645][ T5896] bridge_slave_0: left allmulticast mode
[  120.979398][ T5896] bridge_slave_0: left promiscuous mode
[  120.985175][ T5896] bridge0: port 1(bridge_slave_0) entered disabled state
[  120.993048][ T5896] bridge_slave_1: left allmulticast mode
[  120.998719][ T5896] bridge_slave_1: left promiscuous mode
[  121.004403][ T5896] bridge0: port 2(bridge_slave_1) entered disabled state
[  121.013198][ T5896] bond0: (slave bond_slave_0): Releasing backup interface
[  121.021889][ T5896] bond0: (slave bond_slave_1): Releasing backup interface
[  121.030314][ T5896] team0: Port device team_slave_0 removed
[  121.036932][ T5896] team0: Port device team_slave_1 removed
[  121.042992][ T5896] batman_adv: batadv0: Removing interface: batadv_slave_0
[  121.050721][ T5896] batman_adv: batadv0: Removing interface: batadv_slave_1
[  121.058818][ T5896] bond1: (slave vcan1): Releasing backup interface
[  121.079228][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  121.149062][ T5910] xt_hashlimit: max too large, truncated to 1048576
[  121.196905][ T5912] wg2: entered promiscuous mode
[  121.202084][ T5912] wg2: entered allmulticast mode
[  121.257903][ T5921] loop4: detected capacity change from 0 to 128
[  121.292974][ T5921] syz.4.752: attempt to access beyond end of device
[  121.292974][ T5921] loop4: rw=0, sector=121, nr_sectors = 120 limit=128
[  121.322422][ T4612] kworker/u8:18: attempt to access beyond end of device
[  121.322422][ T4612] loop4: rw=1, sector=241, nr_sectors = 800 limit=128
[  121.374275][ T5932] loop3: detected capacity change from 0 to 512
[  121.383369][ T5934] __nla_validate_parse: 2 callbacks suppressed
[  121.383392][ T5934] netlink: 420 bytes leftover after parsing attributes in process `syz.4.758'.
[  121.504588][ T5939] loop4: detected capacity change from 0 to 8192
[  121.512409][ T5939] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  121.546711][ T5939] netlink: 4 bytes leftover after parsing attributes in process `syz.4.759'.
[  121.785715][ T5946] netlink: 4 bytes leftover after parsing attributes in process `syz.4.761'.
[  121.966234][ T5949] loop4: detected capacity change from 0 to 2048
[  121.983184][ T5949] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  121.997958][ T5949] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  122.013808][ T5949] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28
[  122.026263][ T5949] EXT4-fs (loop4): This should not happen!! Data will be lost
[  122.026263][ T5949] 
[  122.035985][ T5949] EXT4-fs (loop4): Total free blocks count 0
[  122.042020][ T5949] EXT4-fs (loop4): Free/Dirty block details
[  122.047967][ T5949] EXT4-fs (loop4): free_blocks=2415919104
[  122.053765][ T5949] EXT4-fs (loop4): dirty_blocks=16
[  122.058910][ T5949] EXT4-fs (loop4): Block reservation details
[  122.065086][ T5949] EXT4-fs (loop4): i_reserved_data_blocks=1
[  122.086386][ T5949] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28
[  122.146938][ T5959] netlink: 44 bytes leftover after parsing attributes in process `syz.1.765'.
[  122.159431][ T5959] netlink: 4 bytes leftover after parsing attributes in process `syz.1.765'.
[  122.213250][ T5961] netlink: 16 bytes leftover after parsing attributes in process `syz.4.766'.
[  123.069559][ T5992] loop2: detected capacity change from 0 to 512
[  123.082783][ T5992] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  123.121874][ T5992] ext4 filesystem being mounted at /160/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  123.160789][ T5992] netlink: 14 bytes leftover after parsing attributes in process `syz.2.776'.
[  123.173952][ T5992] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  123.195637][ T5992] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  123.210467][ T5992] bond0 (unregistering): Released all slaves
[  123.277391][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  123.325954][ T6002] loop0: detected capacity change from 0 to 512
[  123.335396][ T6007] netlink: 272 bytes leftover after parsing attributes in process `syz.3.780'.
[  123.352976][ T6002] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  123.363648][ T6007] netlink: 8 bytes leftover after parsing attributes in process `syz.3.780'.
[  123.372548][ T6007] netlink: 'syz.3.780': attribute type 30 has an invalid length.
[  123.392696][ T6007] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  123.401086][ T6007] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  123.409296][ T6007] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  123.417614][ T6007] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  123.431048][   T29] kauditd_printk_skb: 76 callbacks suppressed
[  123.431063][   T29] audit: type=1400 audit(1753507432.068:4000): avc:  denied  { mounton } for  pid=6001 comm="syz.0.787" path="/148/file1" dev="tmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  123.459750][   T29] audit: type=1400 audit(1753507432.078:4001): avc:  denied  { create } for  pid=6005 comm="syz.3.780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  123.480250][   T29] audit: type=1326 audit(1753507432.138:4002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6005 comm="syz.3.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34f2e3e9a9 code=0x7ffc0000
[  123.503610][   T29] audit: type=1326 audit(1753507432.138:4003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6005 comm="syz.3.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34f2e3e9a9 code=0x7ffc0000
[  123.527014][   T29] audit: type=1326 audit(1753507432.138:4004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6005 comm="syz.3.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f34f2e3e9a9 code=0x7ffc0000
[  123.529343][ T6004] loop2: detected capacity change from 0 to 2048
[  123.550369][   T29] audit: type=1326 audit(1753507432.138:4005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6005 comm="syz.3.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34f2e3e9a9 code=0x7ffc0000
[  123.550407][   T29] audit: type=1326 audit(1753507432.138:4006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6005 comm="syz.3.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34f2e3e9a9 code=0x7ffc0000
[  123.557660][ T6007] netlink: 8 bytes leftover after parsing attributes in process `syz.3.780'.
[  123.609458][ T6002] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  123.612212][ T6007] netlink: 'syz.3.780': attribute type 30 has an invalid length.
[  123.626310][ T6002] ext4 filesystem being mounted at /148/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  123.635442][   T29] audit: type=1400 audit(1753507432.338:4007): avc:  denied  { mount } for  pid=6001 comm="syz.0.787" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  123.670716][ T6004] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  123.676172][   T29] audit: type=1400 audit(1753507432.388:4008): avc:  denied  { add_name } for  pid=6001 comm="syz.0.787" name="memory.events" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  123.701486][ T6004] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  123.704196][   T29] audit: type=1400 audit(1753507432.388:4009): avc:  denied  { create } for  pid=6001 comm="syz.0.787" name="memory.events" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  123.719164][ T6004] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28
[  123.752218][ T6004] EXT4-fs (loop2): This should not happen!! Data will be lost
[  123.752218][ T6004] 
[  123.761955][ T6004] EXT4-fs (loop2): Total free blocks count 0
[  123.768015][ T6004] EXT4-fs (loop2): Free/Dirty block details
[  123.774019][ T6004] EXT4-fs (loop2): free_blocks=2415919104
[  123.779910][ T6004] EXT4-fs (loop2): dirty_blocks=16
[  123.785125][ T6004] EXT4-fs (loop2): Block reservation details
[  123.791223][ T6004] EXT4-fs (loop2): i_reserved_data_blocks=1
[  123.825197][ T6004] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28
[  123.860926][ T6019] loop3: detected capacity change from 0 to 128
[  123.892135][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  123.907564][ T6019] syz.3.782: attempt to access beyond end of device
[  123.907564][ T6019] loop3: rw=0, sector=121, nr_sectors = 120 limit=128
[  123.937794][ T6022] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.954343][ T4622] kworker/u8:28: attempt to access beyond end of device
[  123.954343][ T4622] loop3: rw=1, sector=241, nr_sectors = 800 limit=128
[  123.993579][ T6027] netlink: 'syz.3.786': attribute type 21 has an invalid length.
[  124.011820][ T6022] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.034019][ T6027] loop3: detected capacity change from 0 to 512
[  124.045645][ T6027] EXT4-fs: Ignoring removed mblk_io_submit option
[  124.054330][ T6027] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  124.068087][ T6027] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  124.077689][ T6022] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.085555][ T6037] loop2: detected capacity change from 0 to 1024
[  124.094582][ T6027] EXT4-fs (loop3): orphan cleanup on readonly fs
[  124.105215][ T6027] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.786: Invalid block bitmap block 0 in block_group 0
[  124.119277][ T6027] EXT4-fs (loop3): Remounting filesystem read-only
[  124.129493][ T6027] EXT4-fs (loop3): 1 orphan inode deleted
[  124.136433][ T6027] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  124.183448][ T6022] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.248921][ T6022] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  124.261719][ T6022] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  124.289478][ T6022] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  124.304222][ T6022] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  124.521769][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  124.556727][ T6048] loop4: detected capacity change from 0 to 1024
[  124.606376][ T6048] EXT4-fs: Ignoring removed i_version option
[  124.663556][ T6048] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  124.699388][ T6048] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.793: Invalid block bitmap block 0 in block_group 0
[  124.789776][ T6048] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.793: Failed to acquire dquot type 0
[  124.802340][ T6048] EXT4-fs error (device loop4): ext4_free_blocks:6587: comm syz.4.793: Freeing blocks not in datazone - block = 0, count = 4096
[  124.817872][ T6048] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.793: Invalid inode bitmap blk 0 in block_group 0
[  124.822012][ T6058] loop3: detected capacity change from 0 to 512
[  124.837025][ T4622] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:28: Failed to release dquot type 0
[  124.837679][ T6048] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem
[  124.858091][ T6048] EXT4-fs (loop4): 1 orphan inode deleted
[  124.864416][ T6048] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  124.879363][ T6058] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  124.892136][ T6058] ext4 filesystem being mounted at /170/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  124.931358][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  124.940988][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  125.013091][ T6070] loop4: detected capacity change from 0 to 128
[  125.049354][ T6068] loop3: detected capacity change from 0 to 128
[  125.093802][ T6070] syz.4.798: attempt to access beyond end of device
[  125.093802][ T6070] loop4: rw=0, sector=121, nr_sectors = 120 limit=128
[  125.112289][ T6068] syz.3.799: attempt to access beyond end of device
[  125.112289][ T6068] loop3: rw=0, sector=121, nr_sectors = 120 limit=128
[  125.619959][ T6096] team0 (unregistering): Port device team_slave_0 removed
[  125.628694][ T6096] team0 (unregistering): Port device team_slave_1 removed
[  125.642891][ T6096] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  125.651879][ T6096] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  125.660816][ T6096] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  125.669865][ T6096] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  125.710851][ T6096] team0 (unregistering): Port device geneve1 removed
[  126.114047][ T6109] netlink: 'syz.1.813': attribute type 1 has an invalid length.
[  126.121824][ T6109] netlink: 'syz.1.813': attribute type 2 has an invalid length.
[  126.157908][ T6109] xt_TCPMSS: Only works on TCP SYN packets
[  126.178772][ T6111] syzkaller0: entered promiscuous mode
[  126.184518][ T6111] syzkaller0: entered allmulticast mode
[  126.430125][ T6118] loop0: detected capacity change from 0 to 128
[  126.496633][ T6118] bio_check_eod: 2 callbacks suppressed
[  126.496654][ T6118] syz.0.817: attempt to access beyond end of device
[  126.496654][ T6118] loop0: rw=0, sector=121, nr_sectors = 120 limit=128
[  126.554175][ T4615] kworker/u8:21: attempt to access beyond end of device
[  126.554175][ T4615] loop0: rw=1, sector=241, nr_sectors = 800 limit=128
[  126.739344][ T6128] futex_wake_op: syz.2.821 tries to shift op by 144; fix this program
[  126.759403][ T6129] loop0: detected capacity change from 0 to 1024
[  126.766918][ T6129] ext3: Bad value for 'errors'
[  126.792836][ T6128] __nla_validate_parse: 7 callbacks suppressed
[  126.792852][ T6128] netlink: 4 bytes leftover after parsing attributes in process `syz.2.821'.
[  126.826541][ T6128] netlink: 4 bytes leftover after parsing attributes in process `syz.2.821'.
[  126.852925][ T6128] netlink: 4 bytes leftover after parsing attributes in process `syz.2.821'.
[  126.862876][ T6128] netlink: 4 bytes leftover after parsing attributes in process `syz.2.821'.
[  126.898370][ T6128] netlink: 4 bytes leftover after parsing attributes in process `syz.2.821'.
[  126.909004][ T6128] netlink: 4 bytes leftover after parsing attributes in process `syz.2.821'.
[  126.942393][ T6145] hub 9-0:1.0: USB hub found
[  126.947348][ T6145] hub 9-0:1.0: 8 ports detected
[  127.040781][ T6148] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003
[  127.162453][ T6156] loop2: detected capacity change from 0 to 128
[  127.397845][ T6163] lo speed is unknown, defaulting to 1000
[  127.403680][ T6163] lo speed is unknown, defaulting to 1000
[  127.409864][ T6163] lo speed is unknown, defaulting to 1000
[  127.417179][ T6163] infiniband 3yz0: RDMA CMA: cma_listen_on_dev, error -98
[  127.492454][ T6163] lo speed is unknown, defaulting to 1000
[  127.499416][ T6163] lo speed is unknown, defaulting to 1000
[  127.506256][ T6163] lo speed is unknown, defaulting to 1000
[  127.512761][ T6163] lo speed is unknown, defaulting to 1000
[  127.519349][ T6163] lo speed is unknown, defaulting to 1000
[  127.737387][ T6169] sch_tbf: burst 3298 is lower than device lo mtu (11337746) !
[  127.807866][ T6172] loop0: detected capacity change from 0 to 1024
[  127.815563][ T6172] EXT4-fs: Ignoring removed nobh option
[  127.821217][ T6172] EXT4-fs: Ignoring removed bh option
[  127.834804][ T6172] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  127.981167][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  128.199570][ T6179] loop0: detected capacity change from 0 to 512
[  128.206453][ T6179] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  128.217432][ T6179] EXT4-fs error (device loop0): ext4_iget_extra_inode:5035: inode #17: comm syz.0.837: corrupted in-inode xattr: invalid ea_ino
[  128.230983][ T6179] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.837: couldn't read orphan inode 17 (err -117)
[  128.243350][ T6179] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  128.283971][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  128.308473][ T6190] loop0: detected capacity change from 0 to 1024
[  128.334013][ T6192] loop2: detected capacity change from 0 to 128
[  129.052470][   T29] kauditd_printk_skb: 143 callbacks suppressed
[  129.052489][   T29] audit: type=1326 audit(1753507437.768:4147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6206 comm="syz.2.848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa859bfe9a9 code=0x7ffc0000
[  129.082147][   T29] audit: type=1326 audit(1753507437.768:4148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6206 comm="syz.2.848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa859bfe9a9 code=0x7ffc0000
[  129.105612][   T29] audit: type=1326 audit(1753507437.768:4149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6206 comm="syz.2.848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7fa859bfe9a9 code=0x7ffc0000
[  129.129058][   T29] audit: type=1326 audit(1753507437.768:4150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6206 comm="syz.2.848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa859bfe9a9 code=0x7ffc0000
[  129.152935][   T29] audit: type=1326 audit(1753507437.778:4151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6206 comm="syz.2.848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa859bfe9a9 code=0x7ffc0000
[  129.176333][   T29] audit: type=1326 audit(1753507437.778:4152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6206 comm="syz.2.848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa859bfe9a9 code=0x7ffc0000
[  129.199756][   T29] audit: type=1326 audit(1753507437.778:4153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6206 comm="syz.2.848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa859bfe9a9 code=0x7ffc0000
[  129.223191][   T29] audit: type=1326 audit(1753507437.798:4154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6206 comm="syz.2.848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa859bfe9a9 code=0x7ffc0000
[  129.246746][   T29] audit: type=1326 audit(1753507437.798:4155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6206 comm="syz.2.848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa859bfe9a9 code=0x7ffc0000
[  129.289694][   T29] audit: type=1400 audit(1753507437.998:4156): avc:  denied  { create } for  pid=6208 comm="syz.1.847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  129.321488][ T6213] netlink: 32 bytes leftover after parsing attributes in process `syz.3.850'.
[  129.346106][ T6212] loop2: detected capacity change from 0 to 1024
[  129.355821][ T6212] EXT4-fs: Ignoring removed i_version option
[  129.370251][ T6212] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  129.381933][ T6216] netlink: 'syz.1.847': attribute type 12 has an invalid length.
[  129.401393][ T6209] lo speed is unknown, defaulting to 1000
[  129.463029][ T6212] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.849: Invalid block bitmap block 0 in block_group 0
[  129.491309][ T6212] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.849: Failed to acquire dquot type 0
[  129.509295][ T6212] EXT4-fs error (device loop2): ext4_free_blocks:6587: comm syz.2.849: Freeing blocks not in datazone - block = 0, count = 4096
[  129.543613][ T6212] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.849: Invalid inode bitmap blk 0 in block_group 0
[  129.559713][ T6226] loop3: detected capacity change from 0 to 512
[  129.576305][ T6212] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem
[  129.585203][ T4622] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:28: Failed to release dquot type 0
[  129.601142][ T6212] EXT4-fs (loop2): 1 orphan inode deleted
[  129.607303][ T6212] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  129.621048][ T6226] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  129.694573][ T6226] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  129.726531][ T6226] ext4 filesystem being mounted at /180/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  129.739624][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  129.895739][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  130.023768][ T6237] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  130.033753][ T6237] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.095020][ T6237] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  130.104966][ T6237] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.182749][ T6237] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  130.192760][ T6237] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.230856][ T6237] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  130.240721][ T6237] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.299239][ T6242] loop2: detected capacity change from 0 to 8192
[  130.336690][ T6237] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  130.345127][ T6237] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  130.362742][ T6237] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  130.371229][ T6237] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  130.383536][ T6237] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  130.391948][ T6237] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  130.404036][ T6237] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  130.412421][ T6237] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  130.438406][ T6246] netlink: 40 bytes leftover after parsing attributes in process `syz.1.862'.
[  130.451818][ T6246] netlink: 40 bytes leftover after parsing attributes in process `syz.1.862'.
[  130.552463][ T6253] netlink: 32 bytes leftover after parsing attributes in process `syz.1.865'.
[  130.688731][ T6258] netlink: 'syz.4.866': attribute type 12 has an invalid length.
[  130.824329][ T6256] lo speed is unknown, defaulting to 1000
[  130.876876][ T6244] Set syz1 is full, maxelem 65536 reached
[  130.921063][ T6263] sch_tbf: burst 3298 is lower than device lo mtu (11337746) !
[  131.156324][ T6274] loop0: detected capacity change from 0 to 2048
[  131.218433][ T6274]  loop0: p1 < > p4
[  131.228133][ T6274] loop0: p4 size 8388608 extends beyond EOD, truncated
[  131.267802][ T6283] loop4: detected capacity change from 0 to 2048
[  131.342958][ T6283] 9pnet_fd: Insufficient options for proto=fd
[  131.349578][ T6287] loop0: detected capacity change from 0 to 8192
[  131.480614][ T6292] sch_tbf: burst 3298 is lower than device lo mtu (11337746) !
[  131.525474][ T6304] loop4: detected capacity change from 0 to 512
[  131.552903][ T6304] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  131.575930][ T6304] ext4 filesystem being mounted at /181/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  132.175461][ T6322] 8021q: VLANs not supported on ip6gre0
[  132.213166][ T6324] loop3: detected capacity change from 0 to 2048
[  132.245931][ T6326] loop2: detected capacity change from 0 to 2048
[  132.263194][ T6324] 9pnet_fd: Insufficient options for proto=fd
[  132.272903][ T6326] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  132.402899][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  132.505441][ T6339] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.540463][ T6343] loop3: detected capacity change from 0 to 128
[  132.548577][ T6339] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.560310][ T6337] loop0: detected capacity change from 0 to 8192
[  132.584881][ T6343] syz.3.901: attempt to access beyond end of device
[  132.584881][ T6343] loop3: rw=0, sector=121, nr_sectors = 120 limit=128
[  132.610767][ T4612] kworker/u8:18: attempt to access beyond end of device
[  132.610767][ T4612] loop3: rw=1, sector=241, nr_sectors = 800 limit=128
[  132.634768][ T6339] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.702736][ T6339] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.768475][ T6339] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  132.779834][ T6339] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  132.791982][ T6339] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  132.804135][ T6339] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  133.080648][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000900.
[  133.399677][ T6356] netlink: 16 bytes leftover after parsing attributes in process `syz.2.905'.
[  133.548098][ T6365] loop2: detected capacity change from 0 to 1024
[  133.661037][ T6365] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled
[  133.892448][ T6365] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  134.018241][ T6380] pim6reg: entered allmulticast mode
[  134.036856][ T6380] pim6reg: left allmulticast mode
[  134.103016][   T29] kauditd_printk_skb: 296 callbacks suppressed
[  134.103040][   T29] audit: type=1326 audit(1753507442.818:4450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6379 comm="syz.0.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e7a93e9a9 code=0x7ffc0000
[  134.143318][   T29] audit: type=1326 audit(1753507442.848:4451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6379 comm="syz.0.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e7a93e9a9 code=0x7ffc0000
[  134.276524][ T6387] lo speed is unknown, defaulting to 1000
[  134.409364][ T6388] netlink: 20 bytes leftover after parsing attributes in process `syz.0.913'.
[  134.563807][ T6393] netlink: 32 bytes leftover after parsing attributes in process `syz.1.916'.
[  134.604058][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.608416][ T6393] pim6reg1: entered promiscuous mode
[  134.618461][ T6393] pim6reg1: entered allmulticast mode
[  134.637779][   T29] audit: type=1400 audit(1753507443.348:4452): avc:  denied  { read } for  pid=6394 comm="syz.2.917" path="socket:[14787]" dev="sockfs" ino=14787 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  134.729728][ T6400] netlink: 'syz.4.919': attribute type 1 has an invalid length.
[  134.737618][ T6400] netlink: 224 bytes leftover after parsing attributes in process `syz.4.919'.
[  134.753500][ T6400] bond1: entered promiscuous mode
[  134.758658][ T6400] bond1: entered allmulticast mode
[  134.764585][ T6400] 8021q: adding VLAN 0 to HW filter on device bond1
[  134.774888][ T6400] bond1 (unregistering): Released all slaves
[  134.791948][ T6403] netlink: 24 bytes leftover after parsing attributes in process `syz.2.917'.
[  134.802724][   T29] audit: type=1400 audit(1753507443.518:4453): avc:  denied  { create } for  pid=6394 comm="syz.2.917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  134.843731][   T29] audit: type=1400 audit(1753507443.558:4454): avc:  denied  { read write } for  pid=6406 comm="syz.1.921" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  134.867253][   T29] audit: type=1400 audit(1753507443.558:4455): avc:  denied  { open } for  pid=6406 comm="syz.1.921" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  134.867541][ T6409] syzkaller0: entered promiscuous mode
[  134.896193][ T6409] syzkaller0: entered allmulticast mode
[  134.897478][   T29] audit: type=1400 audit(1753507443.608:4456): avc:  denied  { write } for  pid=6406 comm="syz.1.921" name="raw" dev="proc" ino=4026532419 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[  134.944469][   T29] audit: type=1400 audit(1753507443.648:4457): avc:  denied  { name_bind } for  pid=6406 comm="syz.1.921" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  134.966733][ T6407] loop4: detected capacity change from 0 to 8192
[  135.022225][ T6412] loop3: detected capacity change from 0 to 8192
[  135.041900][   T29] audit: type=1326 audit(1753507443.758:4458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6404 comm="syz.2.922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa859bfe9a9 code=0x7ffc0000
[  135.093331][   T29] audit: type=1326 audit(1753507443.758:4459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6404 comm="syz.2.922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa859bfe9a9 code=0x7ffc0000
[  135.157962][ T6422] loop3: detected capacity change from 0 to 512
[  135.193350][ T6422] EXT4-fs: Ignoring removed nobh option
[  135.203604][ T6422] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  135.204979][ T6428] loop2: detected capacity change from 0 to 128
[  135.237053][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  135.269451][ T6433] loop3: detected capacity change from 0 to 512
[  135.290398][ T6428] syz.2.927: attempt to access beyond end of device
[  135.290398][ T6428] loop2: rw=0, sector=121, nr_sectors = 120 limit=128
[  135.306534][ T6433] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  135.320518][ T6433] ext4 filesystem being mounted at /197/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  135.321212][ T4622] kworker/u8:28: attempt to access beyond end of device
[  135.321212][ T4622] loop2: rw=1, sector=241, nr_sectors = 800 limit=128
[  135.343843][ T6433] bridge_slave_0: left allmulticast mode
[  135.350143][ T6433] bridge_slave_0: left promiscuous mode
[  135.356015][ T6433] bridge0: port 1(bridge_slave_0) entered disabled state
[  135.369572][ T6433] bridge_slave_1: left allmulticast mode
[  135.375328][ T6433] bridge_slave_1: left promiscuous mode
[  135.381097][ T6433] bridge0: port 2(bridge_slave_1) entered disabled state
[  135.405207][ T6433] 
: (slave bond_slave_0): Releasing backup interface
[  135.423026][ T6433] 
: (slave bond_slave_1): Releasing backup interface
[  135.503338][ T6433] bond0: (slave gretap1): Releasing active interface
[  135.582215][ T6443] loop0: detected capacity change from 0 to 128
[  135.600066][ T6443] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  135.628345][ T3394] syz2: Port: 1 Link DOWN
[  135.633139][ T6443] ext4 filesystem being mounted at /183/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  135.662596][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  135.722059][ T6416] ==================================================================
[  135.730216][ T6416] BUG: KCSAN: data-race in fat16_ent_put / fat_mirror_bhs
[  135.737384][ T6416] 
[  135.739753][ T6416] write to 0xffff888104b37aae of 2 bytes by task 6407 on cpu 0:
[  135.747418][ T6416]  fat16_ent_put+0x28/0x60
[  135.751881][ T6416]  fat_alloc_clusters+0x4d1/0xa80
[  135.756948][ T6416]  fat_get_block+0x258/0x5e0
[  135.761591][ T6416]  __block_write_begin_int+0x400/0xf90
[  135.767137][ T6416]  cont_write_begin+0x5fc/0x970
[  135.772025][ T6416]  fat_write_begin+0x4f/0xe0
[  135.776642][ T6416]  generic_perform_write+0x184/0x490
[  135.781952][ T6416]  __generic_file_write_iter+0x9e/0x120
[  135.787524][ T6416]  generic_file_write_iter+0x8d/0x2f0
[  135.792915][ T6416]  vfs_write+0x4a0/0x8e0
[  135.797188][ T6416]  ksys_write+0xda/0x1a0
[  135.801463][ T6416]  __x64_sys_write+0x40/0x50
[  135.806082][ T6416]  x64_sys_call+0x2cdd/0x2fb0
[  135.810779][ T6416]  do_syscall_64+0xd2/0x200
[  135.815299][ T6416]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  135.821213][ T6416] 
[  135.823556][ T6416] read to 0xffff888104b37a00 of 512 bytes by task 6416 on cpu 1:
[  135.831289][ T6416]  fat_mirror_bhs+0x1df/0x320
[  135.835990][ T6416]  fat_alloc_clusters+0x98b/0xa80
[  135.841037][ T6416]  fat_get_block+0x258/0x5e0
[  135.845657][ T6416]  __block_write_begin_int+0x400/0xf90
[  135.851148][ T6416]  cont_write_begin+0x5fc/0x970
[  135.856037][ T6416]  fat_write_begin+0x4f/0xe0
[  135.860660][ T6416]  generic_perform_write+0x184/0x490
[  135.865969][ T6416]  __generic_file_write_iter+0x9e/0x120
[  135.871534][ T6416]  generic_file_write_iter+0x8d/0x2f0
[  135.876930][ T6416]  aio_write+0x2e5/0x410
[  135.881279][ T6416]  io_submit_one+0xacd/0x11d0
[  135.885977][ T6416]  __se_sys_io_submit+0xfb/0x280
[  135.890959][ T6416]  __x64_sys_io_submit+0x43/0x50
[  135.895944][ T6416]  x64_sys_call+0xfc4/0x2fb0
[  135.900574][ T6416]  do_syscall_64+0xd2/0x200
[  135.905186][ T6416]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  135.911097][ T6416] 
[  135.913432][ T6416] Reported by Kernel Concurrency Sanitizer on:
[  135.919607][ T6416] CPU: 1 UID: 0 PID: 6416 Comm: syz.4.920 Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(voluntary) 
[  135.932042][ T6416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  135.942116][ T6416] ==================================================================
[  137.339696][ T3310] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.