last executing test programs:

9.49855433s ago: executing program 4 (id=573):
r0 = gettid()
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002300000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
quotactl$Q_SETINFO(0xffffffff80000600, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
ioctl$INCFS_IOC_CREATE_FILE(r3, 0xc058671e, &(0x7f0000000940)={{'\x00', 0x3}, {0xffffffffffffe0eb}, 0x40, 0x0, 0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)="242cd95d06428041dd9d7a70d11b6b21f5ccd2ba54ffcfb4851ccc4d7a0e3359fca782fbcb78ffae87c940ac376f1e55bd215e6ac6e19300f6df412089ac826c44a0cb9d2ce0f56f8a2eb7e0cb60a9ce0e171232d8d9f52699980d72f7337fe536d547dbbad93c9f85a1afa45bb323467d9cd9f3b42870e8b22a857cb27d359fad9ec33d6c7daaa93dcbea3fa1fefd99f95c88eefc5d24205e872f99410a198703cea4ebe12655b5626115b7d1e5c89c66b41cc5c2d3d244850feae355234ee24e4c45947c759702c0e77a9ac0b1fd14194c4162e29eeef899e30d8e84c7f902330d2e10ff3c781bae7616af6c2aed7e8d417d6c88d76e9c3af3d73e72256321314f109d707ad2c86b9e4d5b779b8bdf9141f939e5910c33edaee448e6ff1c679b957befd06d5c93f1770a179075d002270faf75d3bfea5081d26a5103e63d7447544fb43001c70bdefff9ed5b1c5fd116", 0x151, 0x0, &(0x7f00000007c0)={0x2, 0x1e, {0x1, 0xc, 0x11, "16d99a314ea499d975ce7812ffff110a61"}, 0x35, "d7ae91496c4db9c58ea54888cd12cfb397262d1c756d87f68f9400285255471e42d772a400269e1a1da25c6b0733c9146fdb3ff34b"}, 0x5f})
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000f80)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r5}, 0x10)
r6 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x37000, 0x1000}, 0x20)
sendmsg$tipc(r4, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x3, 0x0, {0x2, 0x2}}, 0x10, 0x0, 0xffffffffffffffc7}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
pipe(&(0x7f0000000440)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
splice(r7, 0x0, r8, 0x0, 0xf3a, 0x0)

8.496238107s ago: executing program 4 (id=582):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000240), 0x1, 0x787, &(0x7f0000001000)="$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")
chdir(&(0x7f0000000100)='./file0\x00')
rename(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file1\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0)
pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x13, r3, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg0\x00', 0x232})
ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000700)=ANY=[@ANYBLOB="0000bf03"])
r5 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, 0x0)
bind$can_raw(r5, 0x0, 0x0)
close(r5)

8.077296293s ago: executing program 4 (id=585):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)
sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000003c0)={[{@bsdgroups}, {@jqfmt_vfsold}, {@noquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@journal_dev={'journal_dev', 0x3d, 0xd}}]}, 0x1, 0x4be, &(0x7f0000000540)="$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")
r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r5, 0x1, 0x34, &(0x7f0000000040), 0x10)
lseek(r4, 0x7ffffb, 0x0)
write$binfmt_elf64(r4, &(0x7f0000000140)=ANY=[], 0xfd14)
r6 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
fallocate(r6, 0x8, 0x0, 0x10000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r1}, 0x10)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r7, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180"], 0x84}}, 0x0)

7.863507942s ago: executing program 4 (id=587):
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40800000000000061107700000000001600"/32], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="f4ffffffffffffff7111980000009500000002ffff00"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r0}, &(0x7f0000000540), 0x0}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000100000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000200)='mm_page_alloc\x00', r1}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000007c0), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000800)={0x34, r3, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x3}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x6]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000800}, 0x8000)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0x30}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x2282, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000008d01449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a01040000000000553f000100fffe08000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f840000000c0a01030000000000000000010000000900020073797a32000000005800038054000080080003400000000248000b80200001800a00010071756f7461000000100002800c0001400000000000000000100001800c000100636f756e74657200140001800a00010072616e6765000000040002800900010073797a30"], 0x108}}, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x5, 0x7}]})
getcwd(&(0x7f0000000200)=""/197, 0xc5)
write$P9_RLERRORu(r4, 0x0, 0x18)

6.828147801s ago: executing program 4 (id=593):
bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000003080)=ANY=[@ANYBLOB="850000002200000007000000000000089500000000000000e26c9bd1a6361b80cdd64bdf00000000000869045aac0000659f55df08f9b90788ff7f00000010000029c21ebbcde61d8ab5920aef6c3e007fe61241638962cf0b89ef506cfd3f1d4163d3cfca3733b30070a7cf53021a9554328a702688f92b6b71569d65e33d46f8d8ae24ba69c657afac04379cb536008c219991704f11c5a01ba62ed8f2c6a503dd1b1d076f03b0f917c766f3a7598bbc00feb3bc8e88f79df517b37b56bcbc290080000000000000e675458a43b8a8935bf9cf0be7d0aeaac41405e341d13d244359718ac3dad595712a4051bb6cf826ab757193fc093b8b3353fbbb278d19000000000000007b61805ed430ef06000000000000001e93f640f159320c8b088f4d64977b2eb312d4967aff9e4c14c66c90000054ed82c7cba4c81f91d6dfed18767bf0df584b4b6c4204df411f921e3aa02a67dd324b8176020e9c024751df38c05727f82c92046bfe64babb6d7ba86526b7886a0c2481c5812812a6fa3fca3758cbd8c32b25c28be225bd1f16297baa065f5bf96330fad0aaa4388c06c0eb2ecdf829af9577fcd868cc269b740000b777d73a63246ce6f0467167626329ab91df7a13d9ec9a64e7f6b56aeab8c38f69a213c96e2d2ad7978c9d721c230f27e7025d576535198742d403ec43572d7d0baf00e882617b260627805ca44200335ea4363066944d0aa6feb9705b09ba40d4642519281151f875cbf13a582f90ad719f0eccf02a473dd508a16138904933689ea6ee02412064730700aeff2b69c2f2bf6f691c3560e068743ae8e8771280dac7fd8fdc3f7a35ea352e35753c59ebc1bd27ab6603e6afb1b3f057fbb7ed3aabe702b3c6301d3f5c295d1d69d1541d0e64631c95d6c0999e27e8d1a58f6a00f19102d2bfaf53f25a45637b1c577ae50c4c56d9abc40c64a20c14ff0b1bf4d23fe07ae90f503ba9c64bf89b26e7d8d70710b04f9ece69023acadbb4582272e5b3a0429a5675e5a9554de54945d9a270180e0545b0c824ad36f7cc8be12b3874d5a19349b0ede845e9ece24d546d3af1bae069b89f6ecf2aabb17eb1840bc8e0ed1dd8b9b7eeaf32a185d8fc9a28c6b8e00250a7f2eeb756eadafe20bbc616bc44b347abc8caf722b2c3b06884c1d1690f23b06fa4541bb2a81073b452764f04bd39008b65ee222cf697ac21b087548e9708dffaff2859e973b1e88668c8022cc6dac8548167e5798ec9c7d288a7fa7749f07513187cd8f060abbbc5e37dd1be3aab927be1b409be733b7408534e5b0951e9ecfd0a1c77e3a29be4c4093330124615056e3ce0ce6ac91b1242d3bb2e787a186dc2ec284d60e9d8a03884a22eeaa1efa497ee88c6cb565b164a260afb5157e392b1ebb1a4d4f992011ecbac4a0a6df5bdc6f7994a422bb2761edd2d8f20f5f879a88f89d48b8314f862585e4b7a9d6a6681f40e8b82cc6555dcdb951d164cc9a70e640ac8974faa2587a6e3af3b9458f7d4b4077b3002536b10ea24d73307a33090c4c270909a5322eac32cb175e68fa83457b21465c08c02c0c714c2862ddbe567755f05a1e671328d160d3752345ca1db6e74c720e42afca982ba6befd96c5575f1e88f87ff6606301c0000000000000000000000000000000000000004d0d54b4caf78018766cdb971e8b168d4763c21181f00000003d4e1d842caf457797f93db93e4f38a9dbd79f6bf5dc40b55fdbf9b856665061b2e2924f27eb2d2b5a181ccfd9eeb11dec165b6f12433f00bb06124041ffdcdcdc91f3b3b76635a689c9249cf69bcae65e9f2cc9a5129e385b883c56026d83520395b7d511f607cf2f899c7b1c75e2192f775d72247167285857588ace1115fbebfe63c16b84cf7036d41c493a63c09f2ce46c1f5995c2d7fe58c15e64bb4cb7e7f336cc22fa1ea1363bce375bd3d579be1dddb08ed5147b629e4b3f0e65783ee5e20d9270802f2a7500738bf356131ca53e9d7ba8d486fb26252d684b84fa24639089064ca7b93057c041f12d544dab4d24a4f952b4f265a69ba279929959991b7ac63786055b3c029a0e8b6e4c26497c029bb61462623a58556cd62844d4d23cc738ee5b36c71d2c010b089251d5806000b1ade92dd9f441468967c052aecd9de817394eb580240d556d0f0b4b55d06670597991f37ddc4fa19a6369d5bf76c474633a337f676ad255869881da5cadcf49ce9188129cc978977f87b32bd49457536430ffbd3e01e67ff087644f52fcf0a3c732b0586cb87972c43d2616bf4e521dc3126bf1760243d51a197d3ecfd74bd625e9f496175cfeaaa020817d33d513f3e97854ea76e04e96a8639a297871485a8609f8ca842b3321932c4d9e224a0cec5946cec9e359fd3687415cad5fb8c678136f36d9f781fade9f2469477748f4dfa0f56c3b5a620fc84e1c735647895713cbcea57b2277831f8f633f0d29371e645e5544e57010a9b76457f6ad73231a9f31f6bbb1b95248aeda5a9df9dea643a792bb0910e45fce298ab0a0298fc33a423e860d5b308d7849381b294106af25f15fec047d5b844a99f36e342165df728e381b48c20e0900f8d265157467d3494f2b96acf060f74084760d226f50edb115c2e075f3c663a4b4169b900fa0a13cf796e0d7a9dad86953c13ed6241206d68ae194c64c491de6a531e9bd45abe705f07000a82ccd41a2c1b9d5dd8bf6c28653eb84f117e476e052a9db790e0a71dac9d8b343efebdc026860000000000000000000000000000aad579302085dfdf75bea24798c680b3de341e3bd57543bf74fd58bcebdbb883c743ed43ba7f540f2c4e0310c21e7deff9e45b8bd2cf65bb584091b8e80e34b3e59185fe32d1d73dd4f62712a39b1366c71420b339ec1295f79b1516723b6b80a7e99e5aa6536982c02275fc53fa3ef14d9fccb05f9c4e69a3af0fde863af2d9a0f8a94fc571b0ab4ad714f41fa4ee0bf14a8b44e3c41a3125be95e4b23d5f05395852761bfaebe0db979d5f3991d826cc74542b85cfd0dba66bc93cfd79178ab0b79fa3b29ff9c19e0424513c91980187c9d94b8354337a1fc782505db900c47d83bd49276cfe6e242ba8365b1ea4598a21f50f5415a70990b5bb4a1f6bd8acdf2c7da3d648754767089c9b5ceb556fafa3cc5afd2f3e9a62a90262a76ff89a2751b59a744f0d3f36ca503357daa3e29ce6f357dc1e4839277d003e93fdbb955e1a1302a76aea7e73835094fb15464e94e814c77c293121d0433e80d444c4ca17abaf32b521d8686666055da023aef9c8df3e80d2ed640ed10aa19a036dcef172dbd3b3600b69d7b90c6222e167d7c76059f2b5f3b3004e8a20d1f6612efeb629573be97aa949c6016e7e56283e84986aaa4fc8a098708ebe36f377ada63d9b464c39342e0682549862de3ec75e7b031bc49f341a21417fb6375e8701481b59d1722c836961804666801678eb25750b520bf1615a4bbf30aa74d60ec6b657f2dd298b0419da43fc708a60c94a7ff2fd6a2d08005ad73c9e2d6143d2857be8fb3f12bfa6628bccb153e39172d07563d6a1dc75c347c08060304f091230bd74b49ecdd13bf480db3984622a167c8603b8c501280059a7b6123c8f8cd217f64eccc2dffe4f3a1e8c9a96a13d8126f3ea26779fbd0069d729a7764d4ddd7d9d820b0de2530969362b94b974678527f5bac7eb8d6e321b2be0b2f7534634a5ecd1248d7ad7e8e03163e92e9f1d620e28597bd881eea0981e8adfd70b670b0763ce9226f7c3e156b353e22fdea6942b577bbc539aab23cbd46bdd0ea1e67140c759f208c12dc57f3100000000000000e4965fcb6c2749955eac9476687e63b41c6282bbcb0c3d8b0c9493a3a5f6d879d7257b4b68dc7cac3d9d5f5bbe937c501866ee4042b250e516ec074559e1e551167138766eeecb6941e8305d9cde1800c821536f9d25bd14163890842a08135bdb7a90db630b18f099855a7d9de65c80fa71ff90e873361d0e11a7dfebe56ffb2000b711a0b7914d6351ff60593e48af60e1ffecba7cd6f8ab662eb3c8f3164139e994d6a706afb92722595d649a04f1ff64e5634e7cb9106173a96bf47f7085e7eecdfdc1b6507b851c4ba43312726cfec58dedece1355a087c1b60882713a6161914f09267e2ce8aa886b380add5cd92e185d345c9b2933a78a4215133e8e7247fa444aee30bfb6c17ef537fba43aad323f552c01e17514d5db387e4bf9341ccf5931fc75350f8dcef3ed3e74d674865249b879466f0e3cf0dc9e3d8720ea261e6996b844501e374a0e9878c1d02fd3d6e2ae5d7677892d7a5cdf4b7fa8f315b41552d07495f034e1fa0a2c9a34b7f66638e775dacb33e9b5cd3f4193bdebb7e86090dd265ee2b3ca9bd32d19ef229a050e910263d916670d8006067f5c0a1d8219b4a74b6092656f3b96f060000005ca3eca5d6295a1c11be907fad3bf9ccdf9898a084bbcc0a3714691c6c28fc34c44f9a46d6caf3b93d5d9ad8e3a25d34da57b203af917f5359952468fcddbf43d8fd1add972fd5d361c5be3e8b3280bbfa97e9826163537c99ff461123a1d9f93880feb5f953217f1e633bfb221a7822513278c36abcb6a4009e5037b3f56f9172bd70331817862c5e129d830d4f13e9793dad49b6bf286d2a539d089393d481931735a544f4e86b51a91106ce86d278a0712eab917d843ecc7d031e99d230689210e5afbcbb0a6cff33b40e7b637a8171d7b28fcaee54bb0fb7e2dd92c6cf2130f9fa4482512ae356c5907533108113a9a98b0508e4041df8e99b4136a66f58a6e91e2017dc7e095e8e4776d396797e089e9b42fdee33e76c28a636893510ed71166086bb4c1f3363dfd0abf0b2ea8ceba68c7d9a22a8342059862985d987083d80761bd699c3ee77473263a77ea65eac8a4c3b6b87f399575a15a2db143f6aac363644fd45372d6f43baebc7c3547780d1d079e225962733e0c0d3f364cbe9bcec7caaa8d372da63b213d4554e9ced54c2d59a97b814f1d700"/3584], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x103a, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2a3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001"], 0x50)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x19, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000120000f1850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r3}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071122a000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x78}, 0x545c04b15dd03826)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
socketpair(0x0, 0x0, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r4, 0x8946, &(0x7f0000000900)={'wg2\x00', @random='\x00\x00\x00 \x00'})

6.457332783s ago: executing program 4 (id=595):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10)
syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x111b, 0x0, 0x2, 0x369}, 0x0, &(0x7f0000000280))
r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000680)={0x1f, 0x0, @none}, &(0x7f00000006c0)=0xe, 0x100000)
setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000700)={0x4, "a61838"}, 0x6)
lsetxattr$system_posix_acl(0x0, &(0x7f0000000440)='system.posix_acl_default\x00', 0x0, 0x5c, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x50)
ptrace(0x10, 0x1)
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0xde02})
preadv(r3, &(0x7f0000000400)=[{&(0x7f0000001300)=""/252, 0xfc}], 0x1, 0x0, 0xc)

3.232044051s ago: executing program 3 (id=617):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c40)=@delchain={0x244, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_NAME={0x12, 0x7, './file0/file0\x00'}]}}, @filter_kind_options=@f_flow={{0x9}, {0x1f4, 0x2, [@TCA_FLOW_KEYS={0x8}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x9}, @TCA_FLOW_EMATCHES={0x1e0, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x60, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x5, 0x7, 0x1ff}, {{0x1, 0x1, 0x1, 0x1}, {0x4, 0x1, 0x1}}}}, @TCF_EM_META={0x48, 0x1, 0x0, 0x0, {{0x200, 0x4, 0x5d7a}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x49}, {0x401, 0x92}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x2, 0x2, 0x1}, {0x1ff, 0x2, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x3, 0x8, 0x1}, {0x81, 0x1, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0xd, 0xd4, 0x1}, {0x0, 0x7, 0x2}}}, @TCA_EM_META_RVALUE={0x9, 0x3, [@TCF_META_TYPE_VAR="d68e", @TCF_META_TYPE_VAR="102e81"]}]}}]}, @TCA_EMATCH_TREE_LIST={0x17c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x0, 0x0, 0x0, {{0x0, 0x1, 0x200}}}, @TCF_EM_NBYTE={0x14, 0x0, 0x0, 0x0, {{}, {0x0, 0x1, 0x0, "bd"}}}, @TCF_EM_IPSET={0x10}, @TCF_EM_IPT={0x124, 0x0, 0x0, 0x0, {{}, [@TCA_EM_IPT_MATCH_DATA={0x45, 0x5, "e93960abc8e8b9b1c81a41853875755a9770e081d310740b960c37033ba39d472cc4af7b9bb85a8913424a78440f5f73db6d47b8a6d86b99ee42a383110af408f1"}, @TCA_EM_IPT_MATCH_DATA={0x55, 0x5, "a76be08d91c8b97ef380ae3db16a20b3132c296f57657e232f80868d017fb69afa39f98c1606993a10b0391407bfaa93840b27d3c07b16d0667b6e8fdd5ee8b3e823d5466a3dae5c0ba3ee56080486af6e"}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x69, 0x5, "5e3772b24db48865b6176e659712ca66c43012bd6b9e368fbac8b3cb7d8c5ca1e3001e1f6554595445defce0387f64c8c1a9aa6abcbe629dc9b85d1609e80404edbe523c5fc9f43b5ab0677b2c061a1ddd438170725a95fb5c106a7d5bbca228a182fdf9ce"}]}}, @TCF_EM_CMP={0x18, 0x3ffc}]}]}]}}]}, 0x244}}, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xf30}, {&(0x7f00000007c0)=""/154, 0x60}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, 0x0, &(0x7f00000003c0)=r2}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
setrlimit(0xc, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10)
r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101801)
ioctl$USBDEVFS_CLEAR_HALT(r4, 0x80045515, &(0x7f0000000340)={0x1, 0x1})

3.091409783s ago: executing program 2 (id=618):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, &(0x7f0000000080)=0x3, 0x4)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x6}, 0x1c)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x30, r5, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x0, 0x1}}}}, 0x30}}, 0x0)

2.961369304s ago: executing program 3 (id=619):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f00005d3000/0x3000)=nil, 0x3000, 0x1800000, 0x810, 0xffffffffffffffff, 0x8000000)
accept4(0xffffffffffffffff, 0x0, &(0x7f0000000480), 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a8", 0x31}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfe1b)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x8000)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab0700"], 0xfe33)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket$nl_route(0x10, 0x3, 0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_writev(r1, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)

2.520448583s ago: executing program 3 (id=621):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f00000700000000000000", @ANYRES32, @ANYRES32=0x0], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = syz_io_uring_setup(0x16d2, &(0x7f0000000080)={0x0, 0x0, 0x10100}, 0x0, &(0x7f0000000140)=<r3=>0x0)
bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0)
write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118)
syz_io_uring_submit(0x0, r3, 0x0)
io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
socketpair$tipc(0x1e, 0x2, 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000001200)={&(0x7f0000001080)=ANY=[@ANYBLOB="380000000314010000000000000000000900020053797a310000000808004100736977001400330073797a6b616c6c657230"], 0x38}}, 0x0)

2.262927125s ago: executing program 3 (id=624):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=<r1=>0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket$kcm(0x10, 0x3, 0x10)
sched_setscheduler(r2, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x0, 0x0)
open(&(0x7f00000022c0)='./file2\x00', 0x40000, 0x36)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="1401000025000100000000000000000003"], 0x114}], 0x1}, 0x0)

2.109261878s ago: executing program 0 (id=625):
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
creat(&(0x7f0000000580)='./bus\x00', 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x800414, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2bb, &(0x7f0000000440)="$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")
creat(&(0x7f0000000240)='./bus\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0)
write(r1, &(0x7f0000004200)='t', 0x1)
sendfile(r1, r0, 0x0, 0x3ffff)
r2 = syz_open_procfs(0x0, 0x0)
read$char_usb(r2, 0x0, 0x0)
preadv(r2, 0x0, 0x0, 0x0, 0x0)
read$msr(r2, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0x7ffff000)

1.997779308s ago: executing program 2 (id=627):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000240), 0x1, 0x787, &(0x7f0000001000)="$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")
chdir(&(0x7f0000000100)='./file0\x00')
rename(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file1\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0)
pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b70400000000000085000000010000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x13, r3, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg0\x00', 0x232})
ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000700)=ANY=[@ANYBLOB="0000bf03"])
r5 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, 0x0)
bind$can_raw(r5, 0x0, 0x0)
close(r5)

1.349857574s ago: executing program 2 (id=628):
r0 = gettid()
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002300000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
quotactl$Q_SETINFO(0xffffffff80000600, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
ioctl$INCFS_IOC_CREATE_FILE(r3, 0xc058671e, &(0x7f0000000940)={{'\x00', 0x3}, {0xffffffffffffe0eb}, 0x40, 0x0, 0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)="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", 0x151, 0x0, &(0x7f00000007c0)={0x2, 0x1e, {0x1, 0xc, 0x11, "16d99a314ea499d975ce7812ffff110a61"}, 0x35, "d7ae91496c4db9c58ea54888cd12cfb397262d1c756d87f68f9400285255471e42d772a400269e1a1da25c6b0733c9146fdb3ff34b"}, 0x5f})
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000f80)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r5}, 0x10)
r6 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x37000, 0x1000}, 0x20)
sendmsg$tipc(r4, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x3, 0x0, {0x2, 0x2}}, 0x10, 0x0, 0xffffffffffffffc7}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
pipe(&(0x7f0000000440)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
splice(r7, 0x0, r8, 0x0, 0xf3a, 0x0)

1.078689767s ago: executing program 0 (id=629):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r6 = socket(0x1e, 0x805, 0x0)
sendmsg$tipc(r6, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000}, 0x1c)
accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$tipc(r6, &(0x7f0000000640)={&(0x7f0000000300), 0x10, 0x0}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x40}}, 0x0)

1.077824217s ago: executing program 1 (id=630):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000012c0)='scsi_dispatch_cmd_start\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xa, 0x4, 0x3, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000107000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000023"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x6d)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='scsi_dispatch_cmd_start\x00', r4}, 0x10)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)

1.035813511s ago: executing program 1 (id=631):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$packet(0x11, 0x3, 0x300)
socket$inet6(0xa, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000004c0)={0x0, 0x465f}, 0x8)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r1, 0x4)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8)
sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x1}], 0x1}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32=r1], 0xc)

969.123756ms ago: executing program 1 (id=632):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
socket$nl_generic(0x10, 0x3, 0x10)
socket$xdp(0x2c, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
pipe(&(0x7f0000000100))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x40)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
syz_emit_ethernet(0x66, &(0x7f00000002c0)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "828bf7", 0x30, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @private1, @rand_addr=' \x01\x00'}}}}}}}, 0x0)

946.692659ms ago: executing program 1 (id=633):
r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
msgrcv(0x0, 0x0, 0x0, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10)
sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001340)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffffffff}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000140)='kfree\x00', r5}, 0x10)
r6 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r6, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
bind$tipc(r6, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x10)
bind$tipc(r6, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x41}}}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00'}, 0x10)
request_key(&(0x7f0000000540)='user\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000200)=',$:@^@,\x00', r0)

925.59584ms ago: executing program 1 (id=634):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f00000700000000000000", @ANYRES32, @ANYRES32=0x0], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = syz_io_uring_setup(0x16d2, &(0x7f0000000080)={0x0, 0x0, 0x10100}, 0x0, &(0x7f0000000140)=<r3=>0x0)
bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0)
write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118)
syz_io_uring_submit(0x0, r3, 0x0)
io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
socketpair$tipc(0x1e, 0x2, 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000001200)={&(0x7f0000001080)=ANY=[@ANYBLOB="380000000314010000000000000000000900020053797a310000000808004100736977001400330073797a6b616c6c657230"], 0x38}}, 0x0)

851.381356ms ago: executing program 1 (id=635):
execve(0x0, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x1)
r4 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0)
ioctl$MON_IOCX_MFETCH(r4, 0xc0109207, &(0x7f0000000080)={0x0, 0x6})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
write$P9_RREADLINK(r5, &(0x7f0000000000)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10)

846.823777ms ago: executing program 0 (id=646):
r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
msgrcv(0x0, 0x0, 0x0, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10)
sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001340)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffffffff}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000140)='kfree\x00', r4}, 0x10)
r5 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r5, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
bind$tipc(r5, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x10)
bind$tipc(r5, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x41}}}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00'}, 0x10)
request_key(&(0x7f0000000540)='user\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000200)=',$:@^@,\x00', r0)

843.290697ms ago: executing program 3 (id=636):
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{0x1}, &(0x7f0000000040), &(0x7f0000000080)='%-010d \x00'}, 0x20)
r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
writev(r0, &(0x7f0000002800)=[{&(0x7f0000002500)='\f7', 0x2}], 0x1)
write$cgroup_pid(r0, &(0x7f00000031c0), 0x12)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0)
write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040041e1d113c812e5d601adda05c7b5d27c9"})
r2 = syz_open_pts(r1, 0x0)
r3 = dup3(r2, r1, 0x0)
io_setup(0xbc, &(0x7f0000000280)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000000b80)=[&(0x7f0000000380)={0x503, 0x0, 0x0, 0x5, 0x0, r3, 0x0}])
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x2, '\x00', 0x0, r3, 0x5, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x11, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x16152f0}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r5, 0x0, 0x1}, 0x18)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd_index=0x8, 0x10, 0x20000000, 0x20004, 0x0, 0x0, {0x1}})
r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r7 = fcntl$dupfd(r6, 0x0, r6)
munmap(&(0x7f0000002000/0x2000)=nil, 0x2000)
ioctl$SCSI_IOCTL_GET_PCI(r7, 0x5393, &(0x7f0000000000))
mprotect(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x5000000)

744.171946ms ago: executing program 0 (id=637):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0xb)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x3f0, 0x1c0, 0xffffffff, 0xffffffff, 0x0, 0xfffffffe, 0x320, 0xffffffff, 0xffffffff, 0x320, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x80, 0x0, 0x1, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@inet=@socket1={{0x28}, 0x1}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000080)={0x0, 0x0, {0x0, 0xfffffffc, 0x0, 0x1, 0x0, 0x800}})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10)
sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xffffffffffffff20, &(0x7f00000002c0)={&(0x7f0000001740)={0x2c, 0x0, 0x701, 0x0, 0x0, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x2c}}, 0x0)

701.26069ms ago: executing program 0 (id=639):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000240), 0x1, 0x787, &(0x7f0000001000)="$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")
chdir(&(0x7f0000000100)='./file0\x00')
rename(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file1\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0)
pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b70400000000000085000000010000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x13, r3, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg0\x00', 0x232})
ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000700)=ANY=[@ANYBLOB="0000bf03"])
r5 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, 0x0)
bind$can_raw(r5, 0x0, 0x0)
close(r5)

235.32182ms ago: executing program 2 (id=640):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000240), 0x1, 0x787, &(0x7f0000001000)="$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")
chdir(&(0x7f0000000100)='./file0\x00')
rename(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file1\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0)
pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pim6reg0\x00', 0x232})
ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f0000000700)=ANY=[@ANYBLOB="0000bf03"])
r4 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, 0x0)
bind$can_raw(r4, 0x0, 0x0)
close(r4)

167.738016ms ago: executing program 0 (id=641):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ptrace$ARCH_MAP_VDSO_32(0x1e, r0, 0x2, 0x2002)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f0000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r4}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000040), 0x4)
setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_256={{0x304}, "76f7bc3e4ae1c84c", "af193cff4810ba5ac120d096eb00b40752095b4285514ca312c52e3a08756735", "5d362ced", "bc3a20b10f4ad11e"}, 0x38)

102.091601ms ago: executing program 3 (id=642):
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
creat(&(0x7f0000000580)='./bus\x00', 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x800414, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2bb, &(0x7f0000000440)="$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")
creat(&(0x7f0000000240)='./bus\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0)
write(r1, &(0x7f0000004200)='t', 0x1)
sendfile(r1, r0, 0x0, 0x3ffff)
r2 = syz_open_procfs(0x0, 0x0)
read$char_usb(r2, 0x0, 0x0)
preadv(r2, 0x0, 0x0, 0x0, 0x0)
read$msr(r2, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0x7ffff000)

66.084664ms ago: executing program 2 (id=643):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000012c0)='scsi_dispatch_cmd_start\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xa, 0x4, 0x3, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000023"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x6d)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='scsi_dispatch_cmd_start\x00', r4}, 0x10)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)

0s ago: executing program 2 (id=644):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$packet(0x11, 0x3, 0x300)
socket$inet6(0xa, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000004c0)={0x0, 0x465f}, 0x8)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r1, 0x4)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8)
sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x1}], 0x1}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32=r1], 0xc)

kernel console output (not intermixed with test programs):

up stats for /syz1:
[   84.147639][ T5422] cache 126976
[   84.154392][ T5427] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   84.156025][ T5422] rss 12288
[   84.156036][ T5422] shmem 0
[   84.156105][ T5422] mapped_file 126976
[   84.176781][ T5422] dirty 126976
[   84.180166][ T5422] writeback 0
[   84.183522][ T5422] workingset_refault_anon 905
[   84.188212][ T5422] workingset_refault_file 27
[   84.192839][ T5422] swap 4550656
[   84.196274][ T5422] swapcached 16384
[   84.200016][ T5422] pgpgin 84618
[   84.203422][ T5422] pgpgout 84581
[   84.206961][ T5422] pgfault 93687
[   84.210485][ T5422] pgmajfault 158
[   84.212391][ T5427] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002]
[   84.214065][ T5422] inactive_anon 8192
[   84.214076][ T5422] active_anon 12288
[   84.214086][ T5422] inactive_file 126976
[   84.214095][ T5422] active_file 0
[   84.222388][ T5427] System zones: 
[   84.225865][ T5422] unevictable 0
[   84.225877][ T5422] hierarchical_memory_limit 314572800
[   84.225946][ T5422] hierarchical_memsw_limit 9223372036854771712
[   84.225958][ T5422] total_cache 126976
[   84.225967][ T5422] total_rss 12288
[   84.225974][ T5422] total_shmem 0
[   84.225980][ T5422] total_mapped_file 126976
[   84.225987][ T5422] total_dirty 126976
[   84.225996][ T5422] total_writeback 0
[   84.226004][ T5422] total_workingset_refault_anon 905
[   84.229966][ T5427] 1-12
[   84.233866][ T5422] total_workingset_refault_file 27
[   84.233878][ T5422] total_swap 4550656
[   84.233888][ T5422] total_swapcached 16384
[   84.233897][ T5422] total_pgpgin 84618
[   84.233907][ T5422] total_pgpgout 84581
[   84.233917][ T5422] total_pgfault 93691
[   84.234000][ T5422] total_pgmajfault 158
[   84.234010][ T5422] total_inactive_anon 8192
[   84.234020][ T5422] total_active_anon 12288
[   84.234030][ T5422] total_inactive_file 126976
[   84.234040][ T5422] total_active_file 0
[   84.234053][ T5422] total_unevictable 0
[   84.234061][ T5422] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0
[   84.237646][ T5427] 
[   84.241085][ T5422] ,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.369,pid=5408,uid=0
[   84.241127][ T5422] Memory cgroup out of memory: Killed process 5422 (syz.1.369) total-vm:89296kB, anon-rss:612kB, file-rss:15912kB, shmem-rss:128kB, UID:0 pgtables:136kB oom_score_adj:1000
[   84.249622][   T29] kauditd_printk_skb: 166 callbacks suppressed
[   84.249638][   T29] audit: type=1400 audit(1728532109.593:3101): avc:  denied  { write } for  pid=2949 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   84.426238][ T5427] EXT4-fs (loop3): 1 truncate cleaned up
[   84.432827][ T5427] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   84.510319][ T3328] usb usb6-port1: unable to enumerate USB device
[   84.516899][   T29] audit: type=1400 audit(1728532109.763:3102): avc:  denied  { remove_name } for  pid=2949 comm="syslogd" name="messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   84.539544][   T29] audit: type=1400 audit(1728532109.763:3103): avc:  denied  { rename } for  pid=2949 comm="syslogd" name="messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   84.561821][   T29] audit: type=1400 audit(1728532109.763:3104): avc:  denied  { add_name } for  pid=2949 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   84.584401][   T29] audit: type=1400 audit(1728532109.763:3105): avc:  denied  { unlink } for  pid=2949 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   84.606932][   T29] audit: type=1400 audit(1728532109.763:3106): avc:  denied  { create } for  pid=2949 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   84.627755][   T29] audit: type=1400 audit(1728532109.853:3107): avc:  denied  { connect } for  pid=5426 comm="syz.3.373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   84.667555][ T5439] loop4: detected capacity change from 0 to 2048
[   84.684326][   T29] audit: type=1400 audit(1728532110.033:3108): avc:  denied  { read } for  pid=5436 comm="syz.0.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[   84.741892][ T3268] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   84.784420][ T5443] loop1: detected capacity change from 0 to 128
[   84.791915][ T5441] program syz.2.379 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   84.801570][   T29] audit: type=1400 audit(1728532110.143:3109): avc:  denied  { append } for  pid=5440 comm="syz.2.379" name="sg0" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[   84.831782][ T5441] IPv6: NLM_F_REPLACE set, but no existing node found!
[   84.894222][ T5439] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   84.921317][ T5450] loop3: detected capacity change from 0 to 128
[   84.935801][ T5450] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[   84.949638][ T5450] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   84.981110][ T5450] ext2 filesystem being mounted at /71/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   85.158264][ T3268] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   85.495929][ T3363] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.201246][ T5462] No such timeout policy "syz0"
[   86.233012][ T3363] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.287862][ T3363] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.332594][   T11] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   86.350866][   T11] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[   86.363561][   T11] EXT4-fs (loop4): This should not happen!! Data will be lost
[   86.363561][   T11] 
[   86.373234][   T11] EXT4-fs (loop4): Total free blocks count 0
[   86.379228][   T11] EXT4-fs (loop4): Free/Dirty block details
[   86.385182][   T11] EXT4-fs (loop4): free_blocks=2415919104
[   86.390955][   T11] EXT4-fs (loop4): dirty_blocks=8192
[   86.396309][   T11] EXT4-fs (loop4): Block reservation details
[   86.402379][   T11] EXT4-fs (loop4): i_reserved_data_blocks=512
[   86.433118][ T3363] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.436581][ T5473] loop3: detected capacity change from 0 to 512
[   86.456545][   T56] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28
[   86.473371][ T5474] __nla_validate_parse: 1 callbacks suppressed
[   86.473387][ T5474] netlink: 4 bytes leftover after parsing attributes in process `syz.2.390'.
[   86.475327][   T29] audit: type=1400 audit(1728532111.823:3110): avc:  denied  { nlmsg_read } for  pid=5472 comm="syz.2.390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   86.510706][ T5474] netlink: 'syz.2.390': attribute type 32 has an invalid length.
[   86.518556][ T5474] netlink: 8 bytes leftover after parsing attributes in process `syz.2.390'.
[   86.541159][ T5474] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[   86.564016][ T5479] siw: device registration error -23
[   86.641874][ T3363] bridge_slave_1: left allmulticast mode
[   86.647584][ T3363] bridge_slave_1: left promiscuous mode
[   86.653356][ T3363] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.685567][ T3363] bridge_slave_0: left allmulticast mode
[   86.691332][ T3363] bridge_slave_0: left promiscuous mode
[   86.697120][ T3363] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.760323][ T5497] loop2: detected capacity change from 0 to 1024
[   86.779673][ T5492] loop3: detected capacity change from 0 to 2048
[   86.846024][ T5497] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[   86.857085][ T5497] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)!
[   86.867307][ T5497] EXT4-fs (loop2): group descriptors corrupted!
[   86.876017][ T5492] Alternate GPT is invalid, using primary GPT.
[   86.882411][ T5492]  loop3: p1 p2 p3
[   86.960416][ T5507] loop4: detected capacity change from 0 to 512
[   86.975621][ T5485] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in;
[   86.975621][ T5485]    program syz.3.394 not setting count and/or reply_len properly
[   86.994062][ T5507] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   87.010844][ T3363] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   87.085261][ T3363] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   87.100788][ T5507] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.389: invalid indirect mapped block 83886080 (level 1)
[   87.118417][ T5507] EXT4-fs (loop4): 1 orphan inode deleted
[   87.124587][ T5507] EXT4-fs (loop4): 1 truncate cleaned up
[   87.131646][ T5507] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   87.289371][ T3363] bond0 (unregistering): Released all slaves
[   87.312131][ T5486] udevd[5486]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory
[   87.325026][ T5497] loop2: detected capacity change from 0 to 512
[   87.333490][ T3455] udevd[3455]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[   87.345482][ T3256] udevd[3256]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[   87.373129][ T5512] netlink: 'syz.4.389': attribute type 10 has an invalid length.
[   87.384266][ T5516] netlink: 8 bytes leftover after parsing attributes in process `syz.1.392'.
[   87.393085][ T5516] netlink: 64 bytes leftover after parsing attributes in process `syz.1.392'.
[   87.404272][ T5497] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[   87.413398][ T5497] EXT4-fs (loop2): blocks per group (71) and clusters per group (32768) inconsistent
[   87.458600][ T5526] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in;
[   87.458600][ T5526]    program syz.3.397 not setting count and/or reply_len properly
[   87.504719][ T3363] hsr_slave_0: left promiscuous mode
[   87.518510][ T3363] hsr_slave_1: left promiscuous mode
[   87.533498][ T3363] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   87.541241][ T3363] batman_adv: batadv0: Removing interface: batadv_slave_0
[   87.615551][ T3929] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   87.628332][ T3363] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   87.636122][ T3363] batman_adv: batadv0: Removing interface: batadv_slave_1
[   87.657965][ T3363] veth0_macvtap: left promiscuous mode
[   87.663562][ T3363] veth1_vlan: left promiscuous mode
[   87.668939][ T3363] veth0_vlan: left promiscuous mode
[   87.791823][ T3363] team0 (unregistering): Port device team_slave_1 removed
[   87.802670][ T3363] team0 (unregistering): Port device team_slave_0 removed
[   87.856977][ T5542] netlink: 'syz.4.399': attribute type 4 has an invalid length.
[   87.869982][ T5467] lo speed is unknown, defaulting to 1000
[   87.976172][ T5467] chnl_net:caif_netlink_parms(): no params data found
[   88.034910][ T5467] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.042251][ T5467] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.050792][ T5467] bridge_slave_0: entered allmulticast mode
[   88.057432][ T5467] bridge_slave_0: entered promiscuous mode
[   88.071255][ T5467] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.078338][ T5467] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.086877][ T5467] bridge_slave_1: entered allmulticast mode
[   88.093414][ T5467] bridge_slave_1: entered promiscuous mode
[   88.119219][ T5467] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   88.133961][ T5467] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   88.156109][ T5467] team0: Port device team_slave_0 added
[   88.162701][ T5467] team0: Port device team_slave_1 added
[   88.178697][ T5467] batman_adv: batadv0: Adding interface: batadv_slave_0
[   88.185714][ T5467] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.211674][ T5467] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   88.222942][ T5467] batman_adv: batadv0: Adding interface: batadv_slave_1
[   88.229906][ T5467] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.256152][ T5467] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   88.295859][ T5467] hsr_slave_0: entered promiscuous mode
[   88.303287][ T5467] hsr_slave_1: entered promiscuous mode
[   88.519210][ T5567] loop1: detected capacity change from 0 to 1024
[   88.709161][ T5567] EXT4-fs (loop1): mounted filesystem 00000000-0000-0008-0000-000000000000 r/w without journal. Quota mode: none.
[   88.738713][ T5567] lo speed is unknown, defaulting to 1000
[   88.836626][ T5467] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   88.845519][ T5467] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   88.854571][ T5467] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   88.863194][ T5467] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   88.900918][ T5467] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.915891][ T5467] 8021q: adding VLAN 0 to HW filter on device team0
[   88.923449][ T5573] loop4: detected capacity change from 0 to 512
[   88.935730][ T4473] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.942837][ T4473] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.962456][   T56] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.969524][   T56] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.019671][ T5581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   89.029720][ T5581] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   89.053203][ T5467] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.122883][ T5467] veth0_vlan: entered promiscuous mode
[   89.131363][ T5467] veth1_vlan: entered promiscuous mode
[   89.145920][ T5467] veth0_macvtap: entered promiscuous mode
[   89.157558][ T5467] veth1_macvtap: entered promiscuous mode
[   89.172511][ T5467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   89.183134][ T5467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.193046][ T5467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   89.203611][ T5467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.213546][ T5467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   89.224001][ T5467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.234692][ T5467] batman_adv: batadv0: Interface activated: batadv_slave_0
[   89.244532][ T3267] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0008-0000-000000000000.
[   89.257904][ T5467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   89.268415][ T5467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.278309][ T5467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   89.280153][ T5596] loop1: detected capacity change from 0 to 1024
[   89.288728][ T5467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.288747][ T5467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   89.288766][ T5467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.291104][ T5467] batman_adv: batadv0: Interface activated: batadv_slave_1
[   89.300490][ T5596] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement.
[   89.309673][ T5467] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   89.350979][ T5467] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   89.359903][ T5467] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   89.368632][ T5467] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   89.419123][   T29] kauditd_printk_skb: 34 callbacks suppressed
[   89.419143][   T29] audit: type=1400 audit(1728532114.763:3145): avc:  denied  { read } for  pid=5598 comm="syz.0.386" name="usbmon0" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   89.450395][   T29] audit: type=1400 audit(1728532114.763:3146): avc:  denied  { open } for  pid=5598 comm="syz.0.386" path="/dev/usbmon0" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   89.496725][ T5601] loop1: detected capacity change from 0 to 2048
[   89.538434][ T5601] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   89.552957][   T29] audit: type=1400 audit(1728532114.903:3147): avc:  denied  { remove_name } for  pid=5600 comm="syz.1.410" name="file0" dev="loop1" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   89.575701][   T29] audit: type=1400 audit(1728532114.903:3148): avc:  denied  { rename } for  pid=5600 comm="syz.1.410" name="file0" dev="loop1" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   89.597937][   T29] audit: type=1400 audit(1728532114.903:3149): avc:  denied  { unlink } for  pid=5600 comm="syz.1.410" name="file1" dev="loop1" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1
[   89.623528][ T5601] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   89.639619][ T5601] EXT4-fs (loop1): Delayed block allocation failed for inode 13 at logical offset 16 with max blocks 18 with error 28
[   89.652081][ T5601] EXT4-fs (loop1): This should not happen!! Data will be lost
[   89.652081][ T5601] 
[   89.661856][ T5601] EXT4-fs (loop1): Total free blocks count 0
[   89.667841][ T5601] EXT4-fs (loop1): Free/Dirty block details
[   89.673796][ T5601] EXT4-fs (loop1): free_blocks=2415919104
[   89.679528][ T5601] EXT4-fs (loop1): dirty_blocks=32
[   89.684905][ T5601] EXT4-fs (loop1): Block reservation details
[   89.691125][ T5601] EXT4-fs (loop1): i_reserved_data_blocks=2
[   89.762184][ T3267] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   89.788697][ T5610] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[   89.818961][   T29] audit: type=1400 audit(1728532115.163:3150): avc:  denied  { bind } for  pid=5611 comm="syz.1.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   89.839719][ T5612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   89.849916][ T5612] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   89.864947][ T5614] netlink: 8 bytes leftover after parsing attributes in process `syz.4.417'.
[   90.013330][ T5621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   90.022050][ T5621] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   90.030440][ T5621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   90.038997][ T5621] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   90.048901][ T5621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   90.057782][ T5621] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   90.437434][ T5625] loop1: detected capacity change from 0 to 2048
[   90.453193][ T5625] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   90.468155][ T5625] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   90.483157][ T5625] EXT4-fs (loop1): Delayed block allocation failed for inode 13 at logical offset 16 with max blocks 18 with error 28
[   90.495627][ T5625] EXT4-fs (loop1): This should not happen!! Data will be lost
[   90.495627][ T5625] 
[   90.505300][ T5625] EXT4-fs (loop1): Total free blocks count 0
[   90.511325][ T5625] EXT4-fs (loop1): Free/Dirty block details
[   90.517236][ T5625] EXT4-fs (loop1): free_blocks=2415919104
[   90.523030][ T5625] EXT4-fs (loop1): dirty_blocks=32
[   90.528143][ T5625] EXT4-fs (loop1): Block reservation details
[   90.534137][ T5625] EXT4-fs (loop1): i_reserved_data_blocks=2
[   90.590606][ T3267] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   90.617410][ T5631] loop1: detected capacity change from 0 to 2048
[   90.632874][ T5631] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   90.648211][ T5631] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   90.663487][ T5631] EXT4-fs (loop1): Delayed block allocation failed for inode 13 at logical offset 16 with max blocks 18 with error 28
[   90.675900][ T5631] EXT4-fs (loop1): This should not happen!! Data will be lost
[   90.675900][ T5631] 
[   90.685580][ T5631] EXT4-fs (loop1): Total free blocks count 0
[   90.691607][ T5631] EXT4-fs (loop1): Free/Dirty block details
[   90.697524][ T5631] EXT4-fs (loop1): free_blocks=2415919104
[   90.703325][ T5631] EXT4-fs (loop1): dirty_blocks=32
[   90.708475][ T5631] EXT4-fs (loop1): Block reservation details
[   90.714580][ T5631] EXT4-fs (loop1): i_reserved_data_blocks=2
[   90.742728][ T5636] loop3: detected capacity change from 0 to 1024
[   90.749633][ T5636] EXT4-fs: Ignoring removed oldalloc option
[   90.773485][ T5636] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   90.804037][ T3267] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   90.807599][   T29] audit: type=1400 audit(1728532116.153:3151): avc:  denied  { shutdown } for  pid=5642 comm="syz.0.424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   90.845597][   T29] audit: type=1326 audit(1728532116.193:3152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5645 comm="syz.1.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f564d30dff9 code=0x7ffc0000
[   90.869104][   T29] audit: type=1326 audit(1728532116.193:3153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5645 comm="syz.1.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f564d30dff9 code=0x7ffc0000
[   90.893645][   T29] audit: type=1326 audit(1728532116.193:3154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5645 comm="syz.1.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f564d30dff9 code=0x7ffc0000
[   90.947257][ T5650] loop1: detected capacity change from 0 to 512
[   90.954112][ T3268] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   90.979658][ T5650] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   90.994203][ T5652] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[   91.004993][ T5650] ext4 filesystem being mounted at /109/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   91.098065][ T3267] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   91.144094][ T5663] netlink: 4 bytes leftover after parsing attributes in process `syz.0.432'.
[   91.153012][ T5663] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   91.160424][ T5663] batman_adv: batadv0: Removing interface: batadv_slave_0
[   91.173238][ T5663] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   91.180693][ T5663] batman_adv: batadv0: Removing interface: batadv_slave_1
[   91.185222][ T5661] loop1: detected capacity change from 0 to 8192
[   91.246251][ T5659] netlink: 4 bytes leftover after parsing attributes in process `syz.3.431'.
[   91.255435][ T5659] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   91.271448][ T5661]  loop1: p1[EZD] p2 p4
[   91.280046][ T5661] loop1: p1 size 1465778176 extends beyond EOD, truncated
[   91.288744][ T5661] loop1: p2 start 65535 is beyond EOD, truncated
[   91.295319][ T5661] loop1: p4 size 65536 extends beyond EOD, truncated
[   91.345707][ T5659] batman_adv: batadv0: Removing interface: batadv_slave_0
[   91.502639][ T5670] loop3: detected capacity change from 0 to 128
[   92.057479][ T5675] loop1: detected capacity change from 0 to 512
[   92.077767][ T5680] usb usb9: usbfs: process 5680 (syz.2.436) did not claim interface 0 before use
[   92.088664][ T5675] EXT4-fs error (device loop1): ext4_acquire_dquot:6879: comm syz.1.434: Failed to acquire dquot type 1
[   92.100869][ T5675] EXT4-fs (loop1): 1 truncate cleaned up
[   92.107272][ T5675] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   92.120026][ T5675] ext4 filesystem being mounted at /111/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   92.148858][ T3267] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   92.177868][ T5683] lo speed is unknown, defaulting to 1000
[   92.190750][ T5685] loop2: detected capacity change from 0 to 512
[   92.198812][ T5685] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   92.223812][ T5685] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.438: bg 0: block 248: padding at end of block bitmap is not set
[   92.233631][ T5686] netlink: 5 bytes leftover after parsing attributes in process `syz.1.437'.
[   92.238741][ T5685] EXT4-fs error (device loop2): ext4_acquire_dquot:6879: comm syz.2.438: Failed to acquire dquot type 1
[   92.248034][ T5686] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[   92.259657][ T5685] EXT4-fs (loop2): 1 truncate cleaned up
[   92.280003][ T5685] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   92.293305][ T5685] ext4 filesystem being mounted at /15/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   92.321331][ T5690] loop1: detected capacity change from 0 to 2048
[   92.332668][ T5690] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   92.420816][ T5690] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   92.435695][ T5690] EXT4-fs (loop1): Delayed block allocation failed for inode 13 at logical offset 16 with max blocks 18 with error 28
[   92.448242][ T5690] EXT4-fs (loop1): This should not happen!! Data will be lost
[   92.448242][ T5690] 
[   92.457955][ T5690] EXT4-fs (loop1): Total free blocks count 0
[   92.464010][ T5690] EXT4-fs (loop1): Free/Dirty block details
[   92.469948][ T5690] EXT4-fs (loop1): free_blocks=2415919104
[   92.475897][ T5690] EXT4-fs (loop1): dirty_blocks=32
[   92.481066][ T5690] EXT4-fs (loop1): Block reservation details
[   92.487057][ T5690] EXT4-fs (loop1): i_reserved_data_blocks=2
[   92.575036][ T3267] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   92.880145][ T5700] loop1: detected capacity change from 0 to 1024
[   92.893384][ T5700] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   93.022048][ T3267] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   93.056784][ T5707] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[   93.078628][ T4850] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   93.106594][ T5711] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22
[   93.114824][ T5711] netdevsim netdevsim2: Direct firmware load for . failed with error -22
[   94.088047][ T5725] loop2: detected capacity change from 0 to 512
[   94.109790][ T5725] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.449: corrupted in-inode xattr: invalid ea_ino
[   94.123338][ T5725] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.449: couldn't read orphan inode 15 (err -117)
[   94.135671][ T5725] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   94.178689][ T4850] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   94.206194][ T5730] loop2: detected capacity change from 0 to 2048
[   94.223285][ T5730] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   94.238185][ T5730] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   94.253650][ T5730] EXT4-fs (loop2): Delayed block allocation failed for inode 13 at logical offset 16 with max blocks 18 with error 28
[   94.266165][ T5730] EXT4-fs (loop2): This should not happen!! Data will be lost
[   94.266165][ T5730] 
[   94.275835][ T5730] EXT4-fs (loop2): Total free blocks count 0
[   94.281909][ T5730] EXT4-fs (loop2): Free/Dirty block details
[   94.287809][ T5730] EXT4-fs (loop2): free_blocks=2415919104
[   94.293581][ T5730] EXT4-fs (loop2): dirty_blocks=32
[   94.298705][ T5730] EXT4-fs (loop2): Block reservation details
[   94.304692][ T5730] EXT4-fs (loop2): i_reserved_data_blocks=2
[   94.369702][ T4850] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   94.396106][ T5735] loop2: detected capacity change from 0 to 2048
[   94.424139][ T5735] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   94.440273][ T5735] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   94.457145][ T5735] EXT4-fs (loop2): Delayed block allocation failed for inode 13 at logical offset 16 with max blocks 18 with error 28
[   94.469590][ T5735] EXT4-fs (loop2): This should not happen!! Data will be lost
[   94.469590][ T5735] 
[   94.469885][ T5739] loop3: detected capacity change from 0 to 2048
[   94.479332][ T5735] EXT4-fs (loop2): Total free blocks count 0
[   94.492034][ T5735] EXT4-fs (loop2): Free/Dirty block details
[   94.498103][ T5735] EXT4-fs (loop2): free_blocks=2415919104
[   94.503885][ T5735] EXT4-fs (loop2): dirty_blocks=32
[   94.509011][ T5735] EXT4-fs (loop2): Block reservation details
[   94.515037][ T5735] EXT4-fs (loop2): i_reserved_data_blocks=2
[   94.515115][ T5739] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   94.537472][ T5739] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   94.552434][ T5739] EXT4-fs (loop3): Delayed block allocation failed for inode 13 at logical offset 16 with max blocks 18 with error 28
[   94.564854][ T5739] EXT4-fs (loop3): This should not happen!! Data will be lost
[   94.564854][ T5739] 
[   94.574878][ T5739] EXT4-fs (loop3): Total free blocks count 0
[   94.580868][ T5739] EXT4-fs (loop3): Free/Dirty block details
[   94.586781][ T5739] EXT4-fs (loop3): free_blocks=2415919104
[   94.592653][ T5739] EXT4-fs (loop3): dirty_blocks=32
[   94.597774][ T5739] EXT4-fs (loop3): Block reservation details
[   94.603783][ T5739] EXT4-fs (loop3): i_reserved_data_blocks=2
[   94.629907][ T4850] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   94.679685][ T3268] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   94.721745][ T5750] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[   94.747335][ T5752] loop2: detected capacity change from 0 to 512
[   94.754774][ T5752] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   94.803346][ T5752] EXT4-fs (loop2): 1 orphan inode deleted
[   94.809136][ T5752] EXT4-fs (loop2): 1 truncate cleaned up
[   94.813838][ T5755] lo speed is unknown, defaulting to 1000
[   94.883708][ T5752] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   95.658105][   T29] kauditd_printk_skb: 155 callbacks suppressed
[   95.658129][   T29] audit: type=1400 audit(1728532121.003:3306): avc:  denied  { read write } for  pid=5467 comm="syz-executor" name="loop0" dev="devtmpfs" ino=614 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   95.687650][   T29] audit: type=1400 audit(1728532121.003:3307): avc:  denied  { open } for  pid=5467 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=614 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   95.711223][   T29] audit: type=1400 audit(1728532121.003:3308): avc:  denied  { ioctl } for  pid=5467 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=614 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   95.802250][ T4850] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   95.839329][ T5765] loop2: detected capacity change from 0 to 1024
[   95.846143][ T5765] EXT4-fs: Ignoring removed orlov option
[   95.851883][ T5765] EXT4-fs: Ignoring removed nomblk_io_submit option
[   95.908110][ T5765] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   95.955752][ T5765] EXT4-fs (loop2): shut down requested (0)
[   95.983419][ T4850] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   96.486401][   T29] audit: type=1400 audit(1728532121.833:3309): avc:  denied  { ioctl } for  pid=5770 comm="syz.0.461" path="/dev/usbmon7" dev="devtmpfs" ino=139 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   96.895256][ T5784] loop1: detected capacity change from 0 to 2048
[   96.905224][   T29] audit: type=1326 audit(1728532122.233:3310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5785 comm="syz.2.473" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f57f870dff9 code=0x0
[   96.942040][ T5784] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   96.966369][ T5789] loop2: detected capacity change from 0 to 2048
[   96.976361][ T5781] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   96.991988][ T5781] EXT4-fs (loop1): Delayed block allocation failed for inode 13 at logical offset 16 with max blocks 18 with error 28
[   97.004650][ T5781] EXT4-fs (loop1): This should not happen!! Data will be lost
[   97.004650][ T5781] 
[   97.014355][ T5781] EXT4-fs (loop1): Total free blocks count 0
[   97.020397][ T5781] EXT4-fs (loop1): Free/Dirty block details
[   97.025351][ T5792] loop0: detected capacity change from 0 to 2048
[   97.027071][ T5781] EXT4-fs (loop1): free_blocks=2415919104
[   97.038452][ T5781] EXT4-fs (loop1): dirty_blocks=32
[   97.039111][ T5789] EXT4-fs error (device loop2): __ext4_fill_super:5458: inode #2: comm syz.2.473: casefold flag without casefold feature
[   97.043588][ T5781] EXT4-fs (loop1): Block reservation details
[   97.043604][ T5781] EXT4-fs (loop1): i_reserved_data_blocks=2
[   97.069080][ T5794] loop3: detected capacity change from 0 to 2048
[   97.069224][ T5789] EXT4-fs (loop2): get root inode failed
[   97.081170][ T5789] EXT4-fs (loop2): mount failed
[   97.089189][ T5792] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   97.105644][ T5792] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   97.120782][ T5792] EXT4-fs (loop0): Delayed block allocation failed for inode 13 at logical offset 16 with max blocks 18 with error 28
[   97.121417][ T5794] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   97.133262][ T5792] EXT4-fs (loop0): This should not happen!! Data will be lost
[   97.133262][ T5792] 
[   97.133278][ T5792] EXT4-fs (loop0): Total free blocks count 0
[   97.133291][ T5792] EXT4-fs (loop0): Free/Dirty block details
[   97.158925][ T5794] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, 
[   97.160930][ T5792] EXT4-fs (loop0): free_blocks=2415919104
[   97.166854][ T5794] block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   97.175174][ T5792] EXT4-fs (loop0): dirty_blocks=32
[   97.175193][ T5792] EXT4-fs (loop0): Block reservation details
[   97.175207][ T5792] EXT4-fs (loop0): i_reserved_data_blocks=2
[   97.208172][ T5794] EXT4-fs (loop3): Delayed block allocation failed for inode 13 at logical offset 16 with max blocks 18 with error 28
[   97.220611][ T5794] EXT4-fs (loop3): This should not happen!! Data will be lost
[   97.220611][ T5794] 
[   97.230448][ T5794] EXT4-fs (loop3): Total free blocks count 0
[   97.236593][ T5794] EXT4-fs (loop3): Free/Dirty block details
[   97.242508][ T5794] EXT4-fs (loop3): free_blocks=2415919104
[   97.248220][ T5794] EXT4-fs (loop3): dirty_blocks=32
[   97.253342][ T5794] EXT4-fs (loop3): Block reservation details
[   97.259334][ T5794] EXT4-fs (loop3): i_reserved_data_blocks=2
[   97.266455][ T3267] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   97.290385][ T5802] loop1: detected capacity change from 0 to 512
[   97.296897][ T5802] EXT4-fs: Ignoring removed mblk_io_submit option
[   97.333666][ T5808] SELinux:  Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[   97.343696][ T5808] hsr0: entered promiscuous mode
[   97.477931][   T29] audit: type=1326 audit(1728532122.823:3311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5812 comm="syz.3.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b88bddff9 code=0x7ffc0000
[   97.502219][   T29] audit: type=1326 audit(1728532122.823:3312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5812 comm="syz.3.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b88bddff9 code=0x7ffc0000
[   97.525735][   T29] audit: type=1326 audit(1728532122.823:3313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5812 comm="syz.3.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9b88bddff9 code=0x7ffc0000
[   97.549318][   T29] audit: type=1326 audit(1728532122.833:3314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5812 comm="syz.3.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b88bddff9 code=0x7ffc0000
[   97.572759][   T29] audit: type=1326 audit(1728532122.833:3315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5812 comm="syz.3.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b88bddff9 code=0x7ffc0000
[   97.575967][ T5815] loop3: detected capacity change from 0 to 2048
[   97.639175][ T5818] loop0: detected capacity change from 0 to 512
[   97.653333][ T5818] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   97.699084][ T5818] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback.
[   97.719407][ T5829] loop3: detected capacity change from 0 to 512
[   97.726723][ T5829] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   97.751499][ T5827] syzkaller0: entered promiscuous mode
[   97.757073][ T5827] syzkaller0: entered allmulticast mode
[   97.757916][ T5832] loop2: detected capacity change from 0 to 1024
[   97.765289][ T5829] EXT4-fs (loop3): orphan cleanup on readonly fs
[   97.776718][ T5829] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.476: bg 0: block 248: padding at end of block bitmap is not set
[   97.791438][ T5829] EXT4-fs error (device loop3): ext4_acquire_dquot:6879: comm syz.3.476: Failed to acquire dquot type 1
[   97.803245][ T5829] EXT4-fs (loop3): 1 truncate cleaned up
[   97.811125][ T5832] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended
[   97.826376][ T5835] gretap0: entered promiscuous mode
[   97.826803][ T5829] syz.3.476[5829] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   97.831876][ T5829] syz.3.476[5829] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   97.832119][ T5835] macsec1: entered promiscuous mode
[   97.843270][ T5829] syz.3.476[5829] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   97.854441][ T5835] macsec1: entered allmulticast mode
[   97.872886][ T5836] syz.0.478[5836] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   97.876178][ T5835] gretap0: entered allmulticast mode
[   97.893606][ T5836] syz.0.478[5836] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   97.893738][ T5836] syz.0.478[5836] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   97.910323][ T5835] gretap0: left allmulticast mode
[   97.926654][ T5835] gretap0: left promiscuous mode
[   98.073346][ T5848] loop1: detected capacity change from 0 to 4096
[   98.106718][ T5850] loop3: detected capacity change from 0 to 512
[   98.133692][ T5850] ext4 filesystem being mounted at /96/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   98.147455][ T5850] Process accounting resumed
[   98.154063][ T5850] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback.
[   98.243127][   T56] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.326685][   T56] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.343749][ T5856] lo speed is unknown, defaulting to 1000
[   98.414519][   T56] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.485298][   T56] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.531954][ T5864] lo speed is unknown, defaulting to 1000
[   98.679727][   T56] bridge_slave_1: left allmulticast mode
[   98.685500][   T56] bridge_slave_1: left promiscuous mode
[   98.691159][   T56] bridge0: port 2(bridge_slave_1) entered disabled state
[   98.707019][   T56] bridge_slave_0: left allmulticast mode
[   98.712810][   T56] bridge_slave_0: left promiscuous mode
[   98.718440][   T56] bridge0: port 1(bridge_slave_0) entered disabled state
[   98.742245][ T5880] loop1: detected capacity change from 0 to 512
[   98.782226][ T5880] ext4 filesystem being mounted at /126/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   98.874117][   T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   98.885578][   T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   98.897914][   T56] bond0 (unregistering): Released all slaves
[   98.908025][   T56] bond1 (unregistering): Released all slaves
[   99.071887][ T5864] chnl_net:caif_netlink_parms(): no params data found
[   99.105534][   T56] hsr_slave_0: left promiscuous mode
[   99.111722][   T56] hsr_slave_1: left promiscuous mode
[   99.117472][   T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   99.125009][   T56] batman_adv: batadv0: Removing interface: batadv_slave_0
[   99.134071][   T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   99.141537][   T56] batman_adv: batadv0: Removing interface: batadv_slave_1
[   99.152322][   T56] veth1_macvtap: left promiscuous mode
[   99.157894][   T56] veth0_macvtap: left promiscuous mode
[   99.163449][   T56] veth1_vlan: left promiscuous mode
[   99.168806][   T56] veth0_vlan: left promiscuous mode
[   99.177091][ T5891] __vm_enough_memory: pid: 5891, comm: syz.1.493, bytes: 4503599627366400 not enough memory for the allocation
[   99.513734][   T56] team0 (unregistering): Port device team_slave_1 removed
[   99.523899][   T56] team0 (unregistering): Port device team_slave_0 removed
[   99.572858][ T5894] lo speed is unknown, defaulting to 1000
[   99.624030][ T5864] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.631289][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.638533][ T5864] bridge_slave_0: entered allmulticast mode
[   99.646023][ T5864] bridge_slave_0: entered promiscuous mode
[   99.663488][ T5864] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.670599][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.677942][ T5864] bridge_slave_1: entered allmulticast mode
[   99.685312][ T5864] bridge_slave_1: entered promiscuous mode
[   99.712390][ T5864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   99.724359][ T5864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   99.746682][ T5864] team0: Port device team_slave_0 added
[   99.753397][ T5864] team0: Port device team_slave_1 added
[   99.771617][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_0
[   99.778601][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   99.804593][ T5864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   99.816792][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_1
[   99.823869][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   99.849842][ T5864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   99.881776][ T5864] hsr_slave_0: entered promiscuous mode
[   99.888277][ T5864] hsr_slave_1: entered promiscuous mode
[   99.972297][ T5909] loop1: detected capacity change from 0 to 128
[  100.068384][ T5910] lo speed is unknown, defaulting to 1000
[  100.152436][ T5910] chnl_net:caif_netlink_parms(): no params data found
[  100.191202][ T5910] bridge0: port 1(bridge_slave_0) entered blocking state
[  100.198299][ T5910] bridge0: port 1(bridge_slave_0) entered disabled state
[  100.205524][ T5910] bridge_slave_0: entered allmulticast mode
[  100.211956][ T5910] bridge_slave_0: entered promiscuous mode
[  100.216501][ T5926] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=5926 comm=syz.3.500
[  100.218978][ T5910] bridge0: port 2(bridge_slave_1) entered blocking state
[  100.231743][ T5926] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=5926 comm=syz.3.500
[  100.237397][ T5910] bridge0: port 2(bridge_slave_1) entered disabled state
[  100.257371][ T5910] bridge_slave_1: entered allmulticast mode
[  100.263942][ T5910] bridge_slave_1: entered promiscuous mode
[  100.290166][ T5910] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  100.303011][ T5910] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  100.326395][ T5864] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  100.335943][ T5910] team0: Port device team_slave_0 added
[  100.342793][ T5910] team0: Port device team_slave_1 added
[  100.348598][ T5864] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  100.368151][ T5864] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  100.377115][ T5910] batman_adv: batadv0: Adding interface: batadv_slave_0
[  100.384147][ T5910] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  100.410166][ T5910] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  100.421831][ T5910] batman_adv: batadv0: Adding interface: batadv_slave_1
[  100.428791][ T5910] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  100.454788][ T5910] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  100.465635][ T5864] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  100.492956][ T5910] hsr_slave_0: entered promiscuous mode
[  100.499062][ T5910] hsr_slave_1: entered promiscuous mode
[  100.505171][ T5910] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  100.512757][ T5910] Cannot create hsr debugfs directory
[  100.525353][ T5864] bridge0: port 2(bridge_slave_1) entered blocking state
[  100.532459][ T5864] bridge0: port 2(bridge_slave_1) entered forwarding state
[  100.539745][ T5864] bridge0: port 1(bridge_slave_0) entered blocking state
[  100.546864][ T5864] bridge0: port 1(bridge_slave_0) entered forwarding state
[  100.574209][ T4473] bridge0: port 1(bridge_slave_0) entered disabled state
[  100.582385][ T4473] bridge0: port 2(bridge_slave_1) entered disabled state
[  100.623082][ T5910] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.650359][ T5864] 8021q: adding VLAN 0 to HW filter on device bond0
[  100.664734][ T5910] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.678459][ T5864] 8021q: adding VLAN 0 to HW filter on device team0
[  100.688314][   T56] bridge0: port 1(bridge_slave_0) entered blocking state
[  100.695399][   T56] bridge0: port 1(bridge_slave_0) entered forwarding state
[  100.705820][   T56] bridge0: port 2(bridge_slave_1) entered blocking state
[  100.712946][   T56] bridge0: port 2(bridge_slave_1) entered forwarding state
[  100.731239][ T5910] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.756069][ T5864] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  100.766531][ T5864] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  100.784829][ T5910] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.837333][ T5864] 8021q: adding VLAN 0 to HW filter on device batadv0
[  100.864000][ T5910] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  100.872710][ T5910] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  100.883088][ T5910] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  100.892128][ T5910] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  100.930907][ T5864] veth0_vlan: entered promiscuous mode
[  100.948830][ T5864] veth1_vlan: entered promiscuous mode
[  100.957293][ T5910] 8021q: adding VLAN 0 to HW filter on device bond0
[  100.973791][ T5910] 8021q: adding VLAN 0 to HW filter on device team0
[  100.984385][ T4473] bridge0: port 1(bridge_slave_0) entered blocking state
[  100.991596][ T4473] bridge0: port 1(bridge_slave_0) entered forwarding state
[  101.002883][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  101.010002][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  101.029319][ T5864] veth0_macvtap: entered promiscuous mode
[  101.041331][ T5864] veth1_macvtap: entered promiscuous mode
[  101.063916][ T5864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  101.074594][ T5864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  101.086187][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_0
[  101.095879][ T5864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  101.106529][ T5864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  101.116407][ T5864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  101.126884][ T5864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  101.137751][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_1
[  101.148994][ T5864] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  101.157949][ T5864] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  101.166771][ T5864] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  101.175595][ T5864] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  101.201333][ T5910] 8021q: adding VLAN 0 to HW filter on device batadv0
[  101.241723][ T5953] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  101.255004][ T5954] loop3: detected capacity change from 0 to 512
[  101.290746][ T5954] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=f040e01c, mo2=0002]
[  101.302856][ T5954] System zones: 1-12
[  101.310106][ T5954] EXT4-fs error (device loop3): __ext4_iget:4952: inode #11: block 1: comm syz.3.512: invalid block
[  101.330390][ T5954] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.512: couldn't read orphan inode 11 (err -117)
[  101.344533][ T5954] EXT4-fs mount: 16 callbacks suppressed
[  101.344552][ T5954] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  101.378968][ T3268] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.411991][ T5910] veth0_vlan: entered promiscuous mode
[  101.423157][ T5910] veth1_vlan: entered promiscuous mode
[  101.442238][ T5910] veth0_macvtap: entered promiscuous mode
[  101.450654][ T5910] veth1_macvtap: entered promiscuous mode
[  101.464781][ T5910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  101.475265][ T5910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  101.485135][ T5910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  101.495661][ T5910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  101.508767][ T5910] batman_adv: batadv0: Interface activated: batadv_slave_0
[  101.530659][ T5910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  101.541233][ T5910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  101.551114][ T5910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  101.561629][ T5910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  101.571535][ T5910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  101.582029][ T5910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  101.600100][ T5910] batman_adv: batadv0: Interface activated: batadv_slave_1
[  101.615995][ T5910] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  101.624905][ T5910] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  101.633826][ T5910] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  101.642577][ T5910] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  101.756254][ T5971] loop4: detected capacity change from 0 to 2048
[  101.765278][ T5975] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  101.813215][ T5971] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  101.828863][ T5971] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  101.844982][ T5971] EXT4-fs (loop4): Delayed block allocation failed for inode 13 at logical offset 16 with max blocks 18 with error 28
[  101.857576][ T5971] EXT4-fs (loop4): This should not happen!! Data will be lost
[  101.857576][ T5971] 
[  101.867280][ T5971] EXT4-fs (loop4): Total free blocks count 0
[  101.873305][ T5971] EXT4-fs (loop4): Free/Dirty block details
[  101.879282][ T5971] EXT4-fs (loop4): free_blocks=2415919104
[  101.885032][ T5971] EXT4-fs (loop4): dirty_blocks=32
[  101.890163][ T5971] EXT4-fs (loop4): Block reservation details
[  101.896193][ T5971] EXT4-fs (loop4): i_reserved_data_blocks=2
[  101.896914][ T5974] netlink: 'syz.3.515': attribute type 15 has an invalid length.
[  101.916536][ T5974] loop3: detected capacity change from 0 to 512
[  101.924782][ T5974] EXT4-fs error (device loop3): ext4_orphan_get:1388: inode #15: comm syz.3.515: casefold flag without casefold feature
[  101.938128][ T5974] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.515: couldn't read orphan inode 15 (err -117)
[  101.950646][ T5974] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  101.966715][   T29] kauditd_printk_skb: 79 callbacks suppressed
[  101.966731][   T29] audit: type=1400 audit(1728532127.313:3393): avc:  denied  { mounton } for  pid=5972 comm="syz.3.515" path="/104/file0/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  102.004642][ T5910] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  102.021082][ T5974] loop3: detected capacity change from 512 to 64
[  102.032132][ T5982] loop1: detected capacity change from 0 to 2048
[  102.035634][ T5984] loop4: detected capacity change from 0 to 1024
[  102.046035][ T5978] syz.3.515: attempt to access beyond end of device
[  102.046035][ T5978] loop3: rw=3, sector=500, nr_sectors = 4 limit=64
[  102.059272][ T5978] syz.3.515: attempt to access beyond end of device
[  102.059272][ T5978] loop3: rw=2051, sector=504, nr_sectors = 2 limit=64
[  102.073097][ T5978] EXT4-fs (loop3): discard request in group:0 block:249 count:3 failed with -5
[  102.085016][ T5978] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: IO failure
[  102.098109][ T5978] syz.3.515: attempt to access beyond end of device
[  102.098109][ T5978] loop3: rw=2051, sector=82, nr_sectors = 2 limit=64
[  102.111472][ T5978] EXT4-fs (loop3): discard request in group:0 block:40 count:1 failed with -5
[  102.120425][ T5978] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: IO failure
[  102.130005][ T5982] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  102.144139][ T5978] syz.3.515: attempt to access beyond end of device
[  102.144139][ T5978] loop3: rw=2049, sector=510, nr_sectors = 2 limit=64
[  102.144268][ T5984] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  102.157491][ T5978] EXT4-fs warning (device loop3): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 255)
[  102.180934][ T5978] Buffer I/O error on device loop3, logical block 255
[  102.191298][ T5978] syz.3.515: attempt to access beyond end of device
[  102.191298][ T5978] loop3: rw=2049, sector=506, nr_sectors = 4 limit=64
[  102.194021][ T5982] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, 
[  102.204578][ T5978] EXT4-fs warning (device loop3): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 253)
[  102.204639][ T5978] Buffer I/O error on device loop3, logical block 253
[  102.204653][ T5978] Buffer I/O error on device loop3, logical block 254
[  102.212889][ T5982] block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  102.236112][ T5978] syz.3.515: attempt to access beyond end of device
[  102.236112][ T5978] loop3: rw=2049, sector=74, nr_sectors = 8 limit=64
[  102.248910][ T5982] EXT4-fs (loop1): Delayed block allocation failed for inode 13 at logical offset 16 with max blocks 18 with error 28
[  102.259646][ T5978] EXT4-fs warning (device loop3): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 37)
[  102.272010][ T5982] EXT4-fs (loop1): This should not happen!! Data will be lost
[  102.272010][ T5982] 
[  102.283173][ T5978] Buffer I/O error on device loop3, logical block 37
[  102.292779][ T5982] EXT4-fs (loop1): Total free blocks count 0
[  102.299501][ T5978] Buffer I/O error on device loop3, logical block 38
[  102.305418][ T5982] EXT4-fs (loop1): Free/Dirty block details
[  102.312064][ T5978] Buffer I/O error on device loop3, logical block 39
[  102.312078][ T5978] Buffer I/O error on device loop3, logical block 40
[  102.331654][ T5982] EXT4-fs (loop1): free_blocks=2415919104
[  102.337388][ T5982] EXT4-fs (loop1): dirty_blocks=32
[  102.342550][ T5982] EXT4-fs (loop1): Block reservation details
[  102.348629][ T5982] EXT4-fs (loop1): i_reserved_data_blocks=2
[  102.353477][   T29] audit: type=1326 audit(1728532127.703:3394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5983 comm="syz.4.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65cf12dff9 code=0x7ffc0000
[  102.354604][ T5978] syz.3.515: attempt to access beyond end of device
[  102.354604][ T5978] loop3: rw=2049, sector=498, nr_sectors = 8 limit=64
[  102.391202][ T5978] EXT4-fs warning (device loop3): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 249)
[  102.402532][ T5978] Buffer I/O error on device loop3, logical block 249
[  102.409335][ T5978] Buffer I/O error on device loop3, logical block 250
[  102.416107][ T5978] Buffer I/O error on device loop3, logical block 251
[  102.424497][ T5978] syz.3.515: attempt to access beyond end of device
[  102.424497][ T5978] loop3: rw=2049, sector=82, nr_sectors = 2 limit=64
[  102.437788][ T5978] EXT4-fs warning (device loop3): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 41)
[  102.450368][   T29] audit: type=1326 audit(1728532127.733:3395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5983 comm="syz.4.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f65cf12dff9 code=0x7ffc0000
[  102.473812][   T29] audit: type=1326 audit(1728532127.733:3396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5983 comm="syz.4.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65cf12dff9 code=0x7ffc0000
[  102.497389][   T29] audit: type=1326 audit(1728532127.733:3397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5983 comm="syz.4.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f65cf12dff9 code=0x7ffc0000
[  102.520826][   T29] audit: type=1326 audit(1728532127.733:3398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5983 comm="syz.4.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65cf12dff9 code=0x7ffc0000
[  102.544244][   T29] audit: type=1326 audit(1728532127.733:3399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5983 comm="syz.4.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f65cf12dff9 code=0x7ffc0000
[  102.567556][   T29] audit: type=1326 audit(1728532127.733:3400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5983 comm="syz.4.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65cf12dff9 code=0x7ffc0000
[  102.590900][   T29] audit: type=1326 audit(1728532127.733:3401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5983 comm="syz.4.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f65cf12dff9 code=0x7ffc0000
[  102.614283][   T29] audit: type=1326 audit(1728532127.733:3402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5983 comm="syz.4.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65cf12dff9 code=0x7ffc0000
[  102.650891][ T3268] EXT4-fs warning (device loop3): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -12 reading directory block
[  102.686433][ T3268] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  102.785541][ T5996] loop0: detected capacity change from 0 to 2048
[  102.813236][ T5910] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  102.824154][ T3267] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  102.865836][ T5996] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  102.896525][ T5996] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  102.912174][ T5996] EXT4-fs (loop0): Delayed block allocation failed for inode 13 at logical offset 16 with max blocks 18 with error 28
[  102.924641][ T5996] EXT4-fs (loop0): This should not happen!! Data will be lost
[  102.924641][ T5996] 
[  102.934456][ T5996] EXT4-fs (loop0): Total free blocks count 0
[  102.940582][ T5996] EXT4-fs (loop0): Free/Dirty block details
[  102.946616][ T5996] EXT4-fs (loop0): free_blocks=2415919104
[  102.952385][ T5996] EXT4-fs (loop0): dirty_blocks=32
[  102.957597][ T5996] EXT4-fs (loop0): Block reservation details
[  102.963637][ T5996] EXT4-fs (loop0): i_reserved_data_blocks=2
[  102.993085][ T6008] hub 1-0:1.0: USB hub found
[  102.997835][ T6008] hub 1-0:1.0: 8 ports detected
[  103.217764][   T56] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  103.228221][   T56] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.369183][   T56] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  103.380039][   T56] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.526619][   T56] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  103.537130][   T56] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.637504][   T56] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  103.647978][   T56] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.004935][ T5467] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.056329][ T6024] loop1: detected capacity change from 0 to 1024
[  104.129217][ T6006] lo speed is unknown, defaulting to 1000
[  104.196545][ T6024] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  104.252355][ T6006] chnl_net:caif_netlink_parms(): no params data found
[  104.313114][ T6043] EXT4-fs (loop1): shut down requested (0)
[  104.317624][ T6040] loop0: detected capacity change from 0 to 2048
[  104.364272][ T6040] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  104.379127][   T56] bridge_slave_1: left allmulticast mode
[  104.385545][   T56] bridge_slave_1: left promiscuous mode
[  104.391826][   T56] bridge0: port 2(bridge_slave_1) entered disabled state
[  104.410395][ T6040] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  104.433655][   T11] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  104.443890][ T6040] EXT4-fs (loop0): Delayed block allocation failed for inode 13 at logical offset 16 with max blocks 18 with error 28
[  104.459048][   T11] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  104.460901][ T6040] EXT4-fs (loop0): This should not happen!! Data will be lost
[  104.460901][ T6040] 
[  104.473244][   T11] EXT4-fs (loop1): This should not happen!! Data will be lost
[  104.473244][   T11] 
[  104.473264][   T11] EXT4-fs (loop1): Total free blocks count 0
[  104.473277][   T11] EXT4-fs (loop1): Free/Dirty block details
[  104.473288][   T11] EXT4-fs (loop1): free_blocks=68451041280
[  104.483040][ T6040] EXT4-fs (loop0): Total free blocks count 0
[  104.492591][   T11] EXT4-fs (loop1): dirty_blocks=2464
[  104.492635][   T11] EXT4-fs (loop1): Block reservation details
[  104.492650][   T11] EXT4-fs (loop1): i_reserved_data_blocks=154
[  104.534753][ T6040] EXT4-fs (loop0): Free/Dirty block details
[  104.540705][ T6040] EXT4-fs (loop0): free_blocks=2415919104
[  104.546682][ T6040] EXT4-fs (loop0): dirty_blocks=32
[  104.551955][ T6040] EXT4-fs (loop0): Block reservation details
[  104.557965][ T6040] EXT4-fs (loop0): i_reserved_data_blocks=2
[  104.566144][   T56] bridge_slave_0: left allmulticast mode
[  104.571936][   T56] bridge_slave_0: left promiscuous mode
[  104.577708][   T56] bridge0: port 1(bridge_slave_0) entered disabled state
[  104.641951][ T6052] syz.2.523[6052] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  104.642006][ T6052] syz.2.523[6052] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  104.728766][ T6057] 9pnet_fd: Insufficient options for proto=fd
[  104.813740][   T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  104.825836][   T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  104.836492][   T56] bond0 (unregistering): Released all slaves
[  104.845549][ T6006] bridge0: port 1(bridge_slave_0) entered blocking state
[  104.852701][ T6006] bridge0: port 1(bridge_slave_0) entered disabled state
[  104.859917][ T6006] bridge_slave_0: entered allmulticast mode
[  104.867760][ T6006] bridge_slave_0: entered promiscuous mode
[  104.893422][ T6006] bridge0: port 2(bridge_slave_1) entered blocking state
[  104.900503][ T6006] bridge0: port 2(bridge_slave_1) entered disabled state
[  104.907723][ T6006] bridge_slave_1: entered allmulticast mode
[  104.915553][ T6006] bridge_slave_1: entered promiscuous mode
[  104.933231][ T5467] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.944508][ T6052] lo speed is unknown, defaulting to 1000
[  104.944602][   T56] tipc: Left network mode
[  104.962822][ T6006] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  104.985263][ T6006] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  105.009995][ T6062] loop0: detected capacity change from 0 to 1024
[  105.029740][ T6006] team0: Port device team_slave_0 added
[  105.045987][ T6062] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  105.080013][ T6006] team0: Port device team_slave_1 added
[  105.086944][ T6068] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  105.149215][ T6070] hub 1-0:1.0: USB hub found
[  105.154014][ T6070] hub 1-0:1.0: 8 ports detected
[  105.337098][ T6074] loop4: detected capacity change from 0 to 2048
[  105.365428][   T56] hsr_slave_0: left promiscuous mode
[  105.379917][ T6074] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[  105.399270][   T56] hsr_slave_1: left promiscuous mode
[  105.420845][   T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  105.428433][   T56] batman_adv: batadv0: Removing interface: batadv_slave_1
[  105.477190][ T6074] x_tables: (null)_tables: DNAT target: only valid in nat table, not syz0
[  105.513023][ T5467] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.526287][   T56] veth1_macvtap: left promiscuous mode
[  105.531832][   T56] veth0_macvtap: left promiscuous mode
[  105.537456][   T56] veth1_vlan: left promiscuous mode
[  105.542735][   T56] veth0_vlan: left promiscuous mode
[  105.602484][   T56] infiniband syz1: set down
[  105.647147][   T56] team0 (unregistering): Port device team_slave_1 removed
[  105.658835][   T56] team0 (unregistering): Port device team_slave_0 removed
[  105.717065][   T11] smc: removing ib device syz1
[  105.730592][ T3342] lo speed is unknown, defaulting to 1000
[  105.737887][ T6006] batman_adv: batadv0: Adding interface: batadv_slave_0
[  105.744927][ T6006] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  105.770898][ T6006] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  105.786632][ T6006] batman_adv: batadv0: Adding interface: batadv_slave_1
[  105.793633][ T6006] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  105.819659][ T6006] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  105.855970][ T6084] netlink: 256 bytes leftover after parsing attributes in process `syz.4.532'.
[  105.979297][ T6088] loop1: detected capacity change from 0 to 2048
[  105.992246][ T6006] hsr_slave_0: entered promiscuous mode
[  106.004798][ T6006] hsr_slave_1: entered promiscuous mode
[  106.010922][ T6006] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  106.019143][ T6006] Cannot create hsr debugfs directory
[  106.047447][ T6088] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  106.074534][ T6088] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  106.090558][ T6088] EXT4-fs (loop1): Delayed block allocation failed for inode 13 at logical offset 16 with max blocks 18 with error 28
[  106.103274][ T6088] EXT4-fs (loop1): This should not happen!! Data will be lost
[  106.103274][ T6088] 
[  106.113241][ T6088] EXT4-fs (loop1): Total free blocks count 0
[  106.119339][ T6088] EXT4-fs (loop1): Free/Dirty block details
[  106.125277][ T6088] EXT4-fs (loop1): free_blocks=2415919104
[  106.131038][ T6088] EXT4-fs (loop1): dirty_blocks=32
[  106.136247][ T6088] EXT4-fs (loop1): Block reservation details
[  106.142270][ T6088] EXT4-fs (loop1): i_reserved_data_blocks=2
[  106.273503][ T6096] loop2: detected capacity change from 0 to 2048
[  106.292873][ T6096] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  106.310812][ T3267] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.320115][ T6096] tipc: Started in network mode
[  106.325050][ T6096] tipc: Node identity 1, cluster identity 4711
[  106.331363][ T6096] tipc: Node number set to 1
[  106.368736][ T6100] loop1: detected capacity change from 0 to 2048
[  106.378937][ T5864] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.426345][ T6100] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  106.472152][ T6100] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  106.493423][ T6107] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.538'.
[  106.507295][ T6100] EXT4-fs (loop1): Delayed block allocation failed for inode 13 at logical offset 16 with max blocks 18 with error 28
[  106.519851][ T6100] EXT4-fs (loop1): This should not happen!! Data will be lost
[  106.519851][ T6100] 
[  106.521066][ T6103] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.538'.
[  106.529499][ T6100] EXT4-fs (loop1): Total free blocks count 0
[  106.544821][ T6100] EXT4-fs (loop1): Free/Dirty block details
[  106.550724][ T6100] EXT4-fs (loop1): free_blocks=2415919104
[  106.556571][ T6100] EXT4-fs (loop1): dirty_blocks=32
[  106.561837][ T6100] EXT4-fs (loop1): Block reservation details
[  106.567823][ T6100] EXT4-fs (loop1): i_reserved_data_blocks=2
[  106.575245][ T6006] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  106.588191][ T6006] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  106.602953][ T6006] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  106.624103][ T6006] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  106.697863][ T6006] 8021q: adding VLAN 0 to HW filter on device bond0
[  106.710002][ T6006] 8021q: adding VLAN 0 to HW filter on device team0
[  106.728135][ T6006] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  106.738872][ T6006] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  106.759745][ T3363] bridge0: port 1(bridge_slave_0) entered blocking state
[  106.766850][ T3363] bridge0: port 1(bridge_slave_0) entered forwarding state
[  106.777693][ T6117] loop2: detected capacity change from 0 to 128
[  106.790751][ T3363] bridge0: port 2(bridge_slave_1) entered blocking state
[  106.797919][ T3363] bridge0: port 2(bridge_slave_1) entered forwarding state
[  106.848027][ T6006] 8021q: adding VLAN 0 to HW filter on device batadv0
[  106.894103][ T3267] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.929337][ T6006] veth0_vlan: entered promiscuous mode
[  107.019945][ T6137] loop2: detected capacity change from 0 to 128
[  107.033618][ T6137] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  107.067897][ T6137] ext4 filesystem being mounted at /11/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  107.105525][ T6006] veth1_vlan: entered promiscuous mode
[  107.180191][ T6006] veth0_macvtap: entered promiscuous mode
[  107.297612][ T6006] veth1_macvtap: entered promiscuous mode
[  107.335693][ T6006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  107.346301][ T6006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  107.356132][ T6006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  107.366585][ T6006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  107.376574][ T6006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  107.387097][ T6006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  107.452573][ T5864] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  107.462399][ T6006] batman_adv: batadv0: Interface activated: batadv_slave_0
[  107.473178][   T29] kauditd_printk_skb: 93 callbacks suppressed
[  107.473194][   T29] audit: type=1400 audit(1728532132.823:3496): avc:  denied  { ioctl } for  pid=6143 comm="syz.1.556" path="socket:[13076]" dev="sockfs" ino=13076 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  107.491401][ T6146] loop2: detected capacity change from 0 to 1024
[  107.508731][ T6006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  107.520846][ T6006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  107.530690][ T6006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  107.541151][ T6006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  107.550970][ T6006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  107.561573][ T6006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  107.572332][ T6006] batman_adv: batadv0: Interface activated: batadv_slave_1
[  107.582393][ T6146] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  107.644485][   T29] audit: type=1326 audit(1728532132.963:3497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6145 comm="syz.2.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1feb7dff9 code=0x7ffc0000
[  107.667858][   T29] audit: type=1326 audit(1728532132.963:3498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6145 comm="syz.2.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1feb7dff9 code=0x7ffc0000
[  107.674346][ T6006] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  107.691357][   T29] audit: type=1326 audit(1728532132.963:3499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6145 comm="syz.2.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb1feb7dff9 code=0x7ffc0000
[  107.700013][ T6006] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  107.700079][ T6006] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  107.700125][ T6006] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  107.723449][   T29] audit: type=1326 audit(1728532132.963:3500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6145 comm="syz.2.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1feb7dff9 code=0x7ffc0000
[  107.753928][ T6154] loop4: detected capacity change from 0 to 4096
[  107.773011][   T29] audit: type=1326 audit(1728532132.963:3501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6145 comm="syz.2.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1feb7dff9 code=0x7ffc0000
[  107.802781][   T29] audit: type=1326 audit(1728532132.963:3502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6145 comm="syz.2.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb1feb7dff9 code=0x7ffc0000
[  107.802958][ T6151] netlink: 12 bytes leftover after parsing attributes in process `syz.1.548'.
[  107.826198][   T29] audit: type=1326 audit(1728532132.963:3503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6145 comm="syz.2.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1feb7dff9 code=0x7ffc0000
[  107.835083][ T6151] netlink: 12 bytes leftover after parsing attributes in process `syz.1.548'.
[  107.858295][   T29] audit: type=1326 audit(1728532132.963:3504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6145 comm="syz.2.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1feb7dff9 code=0x7ffc0000
[  107.871987][ T6154] EXT4-fs: Ignoring removed nomblk_io_submit option
[  107.890567][   T29] audit: type=1326 audit(1728532132.963:3505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6145 comm="syz.2.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb1feb7dff9 code=0x7ffc0000
[  107.922473][ T6156] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  107.938868][ T6154] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  107.980158][ T6154] EXT4-fs error (device loop4): ext4_do_update_inode:5121: inode #15: comm syz.4.549: corrupted inode contents
[  107.996375][ T6154] EXT4-fs error (device loop4): ext4_dirty_inode:5984: inode #15: comm syz.4.549: mark_inode_dirty error
[  108.009198][ T6154] EXT4-fs error (device loop4): ext4_do_update_inode:5121: inode #15: comm syz.4.549: corrupted inode contents
[  108.024259][ T6154] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #15: comm syz.4.549: mark_inode_dirty error
[  108.036011][ T6154] EXT4-fs error (device loop4): ext4_do_update_inode:5121: inode #15: comm syz.4.549: corrupted inode contents
[  108.048801][ T6154] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #15: comm syz.4.549: mark_inode_dirty error
[  108.066032][ T6154] EXT4-fs error (device loop4): ext4_do_update_inode:5121: inode #15: comm syz.4.549: corrupted inode contents
[  108.088479][ T6154] EXT4-fs error (device loop4): ext4_truncate:4208: inode #15: comm syz.4.549: mark_inode_dirty error
[  108.100306][ T6154] EXT4-fs error (device loop4) in ext4_setattr:5523: Corrupt filesystem
[  108.133093][ T6163] EXT4-fs error (device loop4): ext4_do_update_inode:5121: inode #15: comm syz.4.549: corrupted inode contents
[  108.147667][ T5864] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.185642][ T5910] EXT4-fs warning (device loop4): ext4_evict_inode:259: couldn't mark inode dirty (err -117)
[  108.199228][ T5910] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.298244][ T6177] loop1: detected capacity change from 0 to 512
[  108.426976][ T6177] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  108.480826][ T6177] ext4 filesystem being mounted at /146/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  108.538158][ T6181] loop2: detected capacity change from 0 to 2048
[  108.548103][ T6183] loop4: detected capacity change from 0 to 2048
[  108.579876][ T6187] 9pnet: Could not find request transport: 0x0000000000000006
[  108.590193][ T6181] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  108.610219][ T6181] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  108.628304][ T6183] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  108.640895][ T6181] EXT4-fs (loop2): Delayed block allocation failed for inode 13 at logical offset 16 with max blocks 18 with error 28
[  108.653405][ T6181] EXT4-fs (loop2): This should not happen!! Data will be lost
[  108.653405][ T6181] 
[  108.663108][ T6181] EXT4-fs (loop2): Total free blocks count 0
[  108.669153][ T6181] EXT4-fs (loop2): Free/Dirty block details
[  108.673865][ T6183] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  108.675068][ T6181] EXT4-fs (loop2): free_blocks=2415919104
[  108.675087][ T6181] EXT4-fs (loop2): dirty_blocks=32
[  108.690690][ T6183] EXT4-fs (loop4): Delayed block allocation failed for inode 13 at logical offset 16 with max blocks 18 with error 28
[  108.695543][ T6181] EXT4-fs (loop2): Block reservation details
[  108.700592][ T6183] EXT4-fs (loop4): This should not happen!! Data will be lost
[  108.700592][ T6183] 
[  108.712921][ T6181] EXT4-fs (loop2): i_reserved_data_blocks=2
[  108.718937][ T6183] EXT4-fs (loop4): Total free blocks count 0
[  108.740627][ T6183] EXT4-fs (loop4): Free/Dirty block details
[  108.746662][ T6183] EXT4-fs (loop4): free_blocks=2415919104
[  108.752421][ T6183] EXT4-fs (loop4): dirty_blocks=32
[  108.757575][ T6183] EXT4-fs (loop4): Block reservation details
[  108.763599][ T6183] EXT4-fs (loop4): i_reserved_data_blocks=2
[  108.918960][ T5910] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.929187][ T5864] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.943674][ T6198] loop0: detected capacity change from 0 to 2048
[  108.979034][ T6198] EXT4-fs error (device loop0): __ext4_fill_super:5458: inode #2: comm syz.0.558: casefold flag without casefold feature
[  108.993259][ T6198] EXT4-fs (loop0): get root inode failed
[  108.998988][ T6198] EXT4-fs (loop0): mount failed
[  109.052981][ T6204] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow
[  109.459722][ T6211] hsr_slave_0: left promiscuous mode
[  109.480954][ T6209] loop2: detected capacity change from 0 to 2048
[  109.488325][ T6211] hsr_slave_1: left promiscuous mode
[  109.513266][ T6209] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  109.529015][ T6209] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  109.545903][ T6209] EXT4-fs (loop2): Delayed block allocation failed for inode 13 at logical offset 16 with max blocks 18 with error 28
[  109.558369][ T6209] EXT4-fs (loop2): This should not happen!! Data will be lost
[  109.558369][ T6209] 
[  109.568170][ T6209] EXT4-fs (loop2): Total free blocks count 0
[  109.574204][ T6209] EXT4-fs (loop2): Free/Dirty block details
[  109.580133][ T6209] EXT4-fs (loop2): free_blocks=2415919104
[  109.585930][ T6209] EXT4-fs (loop2): dirty_blocks=32
[  109.591112][ T6209] EXT4-fs (loop2): Block reservation details
[  109.597188][ T6209] EXT4-fs (loop2): i_reserved_data_blocks=2
[  109.643987][ T3267] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  109.696158][ T5864] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  109.733060][ T6218] loop2: detected capacity change from 0 to 1024
[  109.762452][ T6218] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  109.900753][ T6227] loop1: detected capacity change from 0 to 1024
[  109.907524][ T6227] EXT4-fs: Ignoring removed mblk_io_submit option
[  109.932151][ T5864] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  109.934097][ T6227] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  109.981391][ T6227] loop1: detected capacity change from 1024 to 64
[  109.988768][ T6227] syz.1.567: attempt to access beyond end of device
[  109.988768][ T6227] loop1: rw=2049, sector=224, nr_sectors = 2 limit=64
[  110.002089][ T6227] EXT4-fs warning (device loop1): ext4_end_bio:346: I/O error 10 writing to inode 18 starting block 112)
[  110.013613][ T6227] buffer_io_error: 2 callbacks suppressed
[  110.013626][ T6227] Buffer I/O error on device loop1, logical block 112
[  110.027157][ T6227] syz.1.567: attempt to access beyond end of device
[  110.027157][ T6227] loop1: rw=2049, sector=224, nr_sectors = 2 limit=64
[  110.040428][ T6227] EXT4-fs warning (device loop1): ext4_end_bio:346: I/O error 10 writing to inode 18 starting block 112)
[  110.040465][ T6227] Buffer I/O error on device loop1, logical block 112
[  110.070529][ T3267] EXT4-fs warning (device loop1): ext4_empty_dir:3090: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  110.088153][ T3267] EXT4-fs warning (device loop1): ext4_empty_dir:3090: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  110.102997][ T3267] EXT4-fs warning (device loop1): ext4_empty_dir:3090: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  110.116917][ T3267] EXT4-fs warning (device loop1): ext4_empty_dir:3090: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  110.145261][ T3267] EXT4-fs warning (device loop1): ext4_empty_dir:3090: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  110.219864][ T3267] EXT4-fs warning (device loop1): ext4_empty_dir:3090: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  110.237386][ T3267] EXT4-fs warning (device loop1): ext4_empty_dir:3090: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  110.251825][ T3267] EXT4-fs warning (device loop1): ext4_empty_dir:3090: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  110.287569][ T3267] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  110.301089][ T6228] kmmpd-loop1: attempt to access beyond end of device
[  110.301089][ T6228] loop1: rw=14337, sector=128, nr_sectors = 2 limit=64
[  110.314716][ T6228] Buffer I/O error on dev loop1, logical block 64, lost sync page write
[  110.454155][ T6241] netlink: 28 bytes leftover after parsing attributes in process `syz.2.572'.
[  110.463124][ T6241] netlink: 28 bytes leftover after parsing attributes in process `syz.2.572'.
[  110.564960][   T56] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.623572][   T56] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.683911][   T56] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.732932][   T56] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.796925][   T56] bridge_slave_1: left allmulticast mode
[  110.802639][   T56] bridge_slave_1: left promiscuous mode
[  110.808308][   T56] bridge0: port 2(bridge_slave_1) entered disabled state
[  110.816536][   T56] bridge_slave_0: left allmulticast mode
[  110.822447][   T56] bridge_slave_0: left promiscuous mode
[  110.828221][   T56] bridge0: port 1(bridge_slave_0) entered disabled state
[  110.977513][   T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  110.989071][   T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  111.003063][   T56] bond0 (unregistering): (slave vlan3): Releasing backup interface
[  111.012457][   T56] team0: left promiscuous mode
[  111.017505][   T56] team_slave_0: left promiscuous mode
[  111.024513][   T56] bond0 (unregistering): Released all slaves
[  111.053955][ T6264] smc: net device bond0 erased user defined pnetid SYZ0
[  111.064920][ T6264] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  111.134035][   T56] hsr_slave_0: left promiscuous mode
[  111.139737][   T56] hsr_slave_1: left promiscuous mode
[  111.146845][   T56] vlan0: left allmulticast mode
[  111.151884][   T56] veth0_vlan: left allmulticast mode
[  111.157233][   T56] vlan0: left promiscuous mode
[  111.162282][   T56] veth1_macvtap: left promiscuous mode
[  111.167771][   T56] veth0_macvtap: left promiscuous mode
[  111.173307][   T56] veth1_vlan: left promiscuous mode
[  111.178570][   T56] veth0_vlan: left promiscuous mode
[  111.229644][   T56] team0 (unregistering): Port device vlan2 removed
[  111.275132][   T56] team0 (unregistering): Port device team_slave_0 removed
[  111.316724][ T6252] chnl_net:caif_netlink_parms(): no params data found
[  111.367254][ T6252] bridge0: port 1(bridge_slave_0) entered blocking state
[  111.374486][ T6252] bridge0: port 1(bridge_slave_0) entered disabled state
[  111.383219][ T6252] bridge_slave_0: entered allmulticast mode
[  111.390412][ T6252] bridge_slave_0: entered promiscuous mode
[  111.398121][ T6252] bridge0: port 2(bridge_slave_1) entered blocking state
[  111.405234][ T6252] bridge0: port 2(bridge_slave_1) entered disabled state
[  111.413963][ T6252] bridge_slave_1: entered allmulticast mode
[  111.420804][ T6252] bridge_slave_1: entered promiscuous mode
[  111.460220][ T6252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  111.471442][ T6252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  111.493677][ T6252] team0: Port device team_slave_0 added
[  111.501288][ T6252] team0: Port device team_slave_1 added
[  111.560906][ T6252] batman_adv: batadv0: Adding interface: batadv_slave_0
[  111.567963][ T6252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  111.594004][ T6252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  111.711145][ T6285] loop0: detected capacity change from 0 to 2048
[  111.722658][ T6252] batman_adv: batadv0: Adding interface: batadv_slave_1
[  111.729748][ T6252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  111.755736][ T6252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  111.807060][ T6288] loop4: detected capacity change from 0 to 2048
[  111.814449][ T6285] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  111.837832][ T6284] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  111.855059][ T6284] EXT4-fs (loop0): Delayed block allocation failed for inode 13 at logical offset 16 with max blocks 18 with error 28
[  111.867561][ T6284] EXT4-fs (loop0): This should not happen!! Data will be lost
[  111.867561][ T6284] 
[  111.877146][ T6288] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  111.877336][ T6284] EXT4-fs (loop0): Total free blocks count 0
[  111.893534][ T6288] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, 
[  111.895250][ T6284] EXT4-fs (loop0): Free/Dirty block details
[  111.895268][ T6284] EXT4-fs (loop0): free_blocks=2415919104
[  111.903561][ T6288] block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  111.909458][ T6284] EXT4-fs (loop0): dirty_blocks=32
[  111.927243][ T6288] EXT4-fs (loop4): Delayed block allocation failed for inode 13 at logical offset 16 with max blocks 18 with error 28
[  111.929080][ T6284] EXT4-fs (loop0): Block reservation details
[  111.941624][ T6288] EXT4-fs (loop4): This should not happen!! Data will be lost
[  111.941624][ T6288] 
[  111.947410][ T6284] EXT4-fs (loop0): i_reserved_data_blocks=2
[  111.963290][ T6288] EXT4-fs (loop4): Total free blocks count 0
[  111.969292][ T6288] EXT4-fs (loop4): Free/Dirty block details
[  111.975258][ T6288] EXT4-fs (loop4): free_blocks=2415919104
[  111.981013][ T6288] EXT4-fs (loop4): dirty_blocks=32
[  111.986181][ T6288] EXT4-fs (loop4): Block reservation details
[  111.992201][ T6288] EXT4-fs (loop4): i_reserved_data_blocks=2
[  112.029931][ T6252] hsr_slave_0: entered promiscuous mode
[  112.036230][ T6252] hsr_slave_1: entered promiscuous mode
[  112.042422][ T6252] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  112.049976][ T6252] Cannot create hsr debugfs directory
[  112.072543][ T5467] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  112.107053][ T6295] loop0: detected capacity change from 0 to 2048
[  112.115665][ T5910] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  112.135432][ T6295] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  112.153633][ T6295] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  112.155004][ T6299] loop4: detected capacity change from 0 to 512
[  112.169084][ T6295] EXT4-fs (loop0): Delayed block allocation failed for inode 13 at logical offset 16 with max blocks 18 with error 28
[  112.187133][ T6295] EXT4-fs (loop0): This should not happen!! Data will be lost
[  112.187133][ T6295] 
[  112.192749][ T6299] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  112.196894][ T6295] EXT4-fs (loop0): Total free blocks count 0
[  112.211659][ T6295] EXT4-fs (loop0): Free/Dirty block details
[  112.217586][ T6295] EXT4-fs (loop0): free_blocks=2415919104
[  112.223348][ T6295] EXT4-fs (loop0): dirty_blocks=32
[  112.228479][ T6295] EXT4-fs (loop0): Block reservation details
[  112.234291][ T6299] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  112.234534][ T6295] EXT4-fs (loop0): i_reserved_data_blocks=2
[  112.253255][ T6299] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  112.290953][ T6299] netlink: 68 bytes leftover after parsing attributes in process `syz.4.585'.
[  112.299936][ T6299] netlink: 16 bytes leftover after parsing attributes in process `syz.4.585'.
[  112.308906][ T6299] netlink: 68 bytes leftover after parsing attributes in process `syz.4.585'.
[  112.327734][ T5910] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  112.352107][ T6308] syz.4.587[6308] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  112.352183][ T6308] syz.4.587[6308] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  112.363846][ T6308] syz.4.587[6308] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  112.376200][ T5467] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  112.524958][ T6252] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  112.533806][ T6252] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  112.542397][ T6252] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  112.550894][ T6252] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  112.590330][ T6252] 8021q: adding VLAN 0 to HW filter on device bond0
[  112.603736][ T6252] 8021q: adding VLAN 0 to HW filter on device team0
[  112.613816][  T726] bridge0: port 1(bridge_slave_0) entered blocking state
[  112.620905][  T726] bridge0: port 1(bridge_slave_0) entered forwarding state
[  112.631780][   T50] bridge0: port 2(bridge_slave_1) entered blocking state
[  112.638848][   T50] bridge0: port 2(bridge_slave_1) entered forwarding state
[  112.663291][ T6252] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  112.715837][ T6252] 8021q: adding VLAN 0 to HW filter on device batadv0
[  112.784150][ T6252] veth0_vlan: entered promiscuous mode
[  112.792622][ T6252] veth1_vlan: entered promiscuous mode
[  112.808712][ T6252] veth0_macvtap: entered promiscuous mode
[  112.816881][ T6252] veth1_macvtap: entered promiscuous mode
[  112.830905][ T6252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  112.841406][ T6252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  112.851270][ T6252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  112.861720][ T6252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  112.871538][ T6252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  112.882031][ T6252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  112.892020][ T6252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  112.902518][ T6252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  112.915621][ T6252] batman_adv: batadv0: Interface activated: batadv_slave_0
[  112.923961][ T6252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  112.934442][ T6252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  112.944291][ T6252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  112.954747][ T6252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  112.964783][ T6252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  112.975739][ T6252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  112.985756][ T6252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  112.996223][ T6252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  113.007819][ T6252] batman_adv: batadv0: Interface activated: batadv_slave_1
[  113.034936][ T6252] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  113.044015][ T6252] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  113.052813][ T6252] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  113.061575][ T6252] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  113.076676][ T6332] loop0: detected capacity change from 0 to 164
[  113.078480][   T29] kauditd_printk_skb: 634 callbacks suppressed
[  113.078583][   T29] audit: type=1326 audit(1728532138.423:4140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6331 comm="syz.0.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b79bddff9 code=0x7ffc0000
[  113.085145][ T6332] isofs_fill_super: bread failed, dev=loop0, iso_blknum=41, block=164
[  113.089248][   T29] audit: type=1326 audit(1728532138.423:4141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6331 comm="syz.0.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b79bddff9 code=0x7ffc0000
[  113.089276][   T29] audit: type=1326 audit(1728532138.423:4142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6331 comm="syz.0.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f9b79bddff9 code=0x7ffc0000
[  113.132328][ T6332] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6332 comm=syz.0.590
[  113.144254][   T29] audit: type=1326 audit(1728532138.423:4143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6331 comm="syz.0.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9b79bde033 code=0x7ffc0000
[  113.203174][   T29] audit: type=1326 audit(1728532138.423:4144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6331 comm="syz.0.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9b79bdcadf code=0x7ffc0000
[  113.226446][   T29] audit: type=1326 audit(1728532138.423:4145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6331 comm="syz.0.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f9b79bde087 code=0x7ffc0000
[  113.249714][   T29] audit: type=1326 audit(1728532138.423:4146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6331 comm="syz.0.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9b79bdc990 code=0x7ffc0000
[  113.273227][   T29] audit: type=1326 audit(1728532138.423:4147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6331 comm="syz.0.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9b79bddbfb code=0x7ffc0000
[  113.296590][   T29] audit: type=1326 audit(1728532138.433:4148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6331 comm="syz.0.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f9b79bdcc8a code=0x7ffc0000
[  113.319766][   T29] audit: type=1326 audit(1728532138.433:4149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6331 comm="syz.0.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f9b79bdcc8a code=0x7ffc0000
[  113.383521][ T6342] loop2: detected capacity change from 0 to 512
[  113.415506][ T6344] loop1: detected capacity change from 0 to 2048
[  113.417423][ T6342] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  113.437327][ T6342] ext4 filesystem being mounted at /23/w��5�T��)�`)Y�F�nA��@T<�3�ڂ$���r�cnH�<�p�r��>�wC�" ��-������8 supports timestamps until 2038-01-19 (0x7fffffff)
[  113.442685][ T6344] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  113.474560][ T6344] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  113.490023][ T6344] EXT4-fs (loop1): Delayed block allocation failed for inode 13 at logical offset 16 with max blocks 18 with error 28
[  113.490359][ T6342] EXT4-fs error (device loop2): ext4_readdir:261: inode #2: block 3: comm syz.2.592: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0
[  113.502441][ T6344] EXT4-fs (loop1): This should not happen!! Data will be lost
[  113.502441][ T6344] 
[  113.502461][ T6344] EXT4-fs (loop1): Total free blocks count 0
[  113.533582][ T6342] EXT4-fs error (device loop2): ext4_readdir:261: inode #2: block 12: comm syz.2.592: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0
[  113.538491][ T6344] EXT4-fs (loop1): Free/Dirty block details
[  113.538508][ T6344] EXT4-fs (loop1): free_blocks=2415919104
[  113.570842][ T6344] EXT4-fs (loop1): dirty_blocks=32
[  113.572788][ T6342] EXT4-fs error (device loop2): ext4_readdir:261: inode #2: block 13: comm syz.2.592: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0
[  113.576044][ T6344] EXT4-fs (loop1): Block reservation details
[  113.598781][ T6342] EXT4-fs error (device loop2): ext4_readdir:261: inode #2: block 14: comm syz.2.592: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[  113.602862][ T6344] EXT4-fs (loop1): i_reserved_data_blocks=2
[  113.630848][ T6342] EXT4-fs error (device loop2): ext4_readdir:261: inode #2: block 15: comm syz.2.592: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0
[  113.651530][ T6342] EXT4-fs error (device loop2): ext4_readdir:261: inode #2: block 16: comm syz.2.592: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0
[  113.674418][ T6342] EXT4-fs error (device loop2): ext4_readdir:261: inode #2: block 17: comm syz.2.592: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[  113.696046][ T6342] EXT4-fs error (device loop2): ext4_map_blocks:671: inode #2: block 18: comm syz.2.592: lblock 23 mapped to illegal pblock 18 (length 1)
[  113.712740][ T6342] EXT4-fs error (device loop2): ext4_readdir:261: inode #2: block 19: comm syz.2.592: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0
[  113.741285][ T6342] EXT4-fs error (device loop2): ext4_readdir:261: inode #2: block 20: comm syz.2.592: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0
[  113.793129][ T6252] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  113.820424][ T6358] loop1: detected capacity change from 0 to 512
[  113.862379][ T6361] loop3: detected capacity change from 0 to 128
[  113.868955][ T6361] ext4: Unknown parameter 'func'
[  113.995419][ T6366] loop3: detected capacity change from 0 to 2048
[  114.032941][ T6366] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  114.083111][ T6366] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  114.098882][ T6366] EXT4-fs (loop3): Delayed block allocation failed for inode 13 at logical offset 16 with max blocks 18 with error 28
[  114.111421][ T6366] EXT4-fs (loop3): This should not happen!! Data will be lost
[  114.111421][ T6366] 
[  114.121181][ T6366] EXT4-fs (loop3): Total free blocks count 0
[  114.127269][ T6366] EXT4-fs (loop3): Free/Dirty block details
[  114.133205][ T6366] EXT4-fs (loop3): free_blocks=2415919104
[  114.138946][ T6366] EXT4-fs (loop3): dirty_blocks=32
[  114.144141][ T6366] EXT4-fs (loop3): Block reservation details
[  114.150125][ T6366] EXT4-fs (loop3): i_reserved_data_blocks=2
[  114.213087][ T6006] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  114.247230][ T5864] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  114.327399][ T6380] loop3: detected capacity change from 0 to 2048
[  114.346531][ T6380] EXT4-fs error (device loop3): __ext4_fill_super:5458: inode #2: comm syz.3.602: casefold flag without casefold feature
[  114.359725][ T6380] EXT4-fs (loop3): get root inode failed
[  114.365466][ T6380] EXT4-fs (loop3): mount failed
[  114.862546][ T6394] syz.1.607[6394] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  114.862686][ T6394] syz.1.607[6394] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  114.874187][ T6394] syz.1.607[6394] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  115.177318][ T6397] loop3: detected capacity change from 0 to 2048
[  115.202629][ T6397] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  115.220179][ T6397] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  115.236459][ T6397] EXT4-fs (loop3): Delayed block allocation failed for inode 13 at logical offset 16 with max blocks 18 with error 28
[  115.248943][ T6397] EXT4-fs (loop3): This should not happen!! Data will be lost
[  115.248943][ T6397] 
[  115.258660][ T6397] EXT4-fs (loop3): Total free blocks count 0
[  115.264697][ T6397] EXT4-fs (loop3): Free/Dirty block details
[  115.270723][ T6397] EXT4-fs (loop3): free_blocks=2415919104
[  115.276508][ T6397] EXT4-fs (loop3): dirty_blocks=32
[  115.281761][ T6397] EXT4-fs (loop3): Block reservation details
[  115.287745][ T6397] EXT4-fs (loop3): i_reserved_data_blocks=2
[  115.339559][ T6006] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.754683][ T3328] usb usb6-port1: attempt power cycle
[  116.060276][ T6411] xt_CT: You must specify a L4 protocol and not use inversions on it
[  116.096150][ T6413] loop1: detected capacity change from 0 to 2048
[  116.112527][ T6413] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  116.129966][ T6413] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  116.147101][ T6413] EXT4-fs (loop1): Delayed block allocation failed for inode 13 at logical offset 16 with max blocks 18 with error 28
[  116.159572][ T6413] EXT4-fs (loop1): This should not happen!! Data will be lost
[  116.159572][ T6413] 
[  116.169294][ T6413] EXT4-fs (loop1): Total free blocks count 0
[  116.175728][ T6413] EXT4-fs (loop1): Free/Dirty block details
[  116.181934][ T6413] EXT4-fs (loop1): free_blocks=2415919104
[  116.187716][ T6413] EXT4-fs (loop1): dirty_blocks=32
[  116.192877][ T6413] EXT4-fs (loop1): Block reservation details
[  116.198868][ T6413] EXT4-fs (loop1): i_reserved_data_blocks=2
[  116.215648][ T6417] hub 1-0:1.0: USB hub found
[  116.220475][ T6417] hub 1-0:1.0: 8 ports detected
[  116.330087][ T6420] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  116.422584][ T6252] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  116.467652][ T6422] loop3: detected capacity change from 0 to 2048
[  116.494122][ T6422] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  116.513966][ T6422] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  116.529451][ T6422] EXT4-fs (loop3): Delayed block allocation failed for inode 13 at logical offset 16 with max blocks 18 with error 28
[  116.541928][ T6422] EXT4-fs (loop3): This should not happen!! Data will be lost
[  116.541928][ T6422] 
[  116.551655][ T6422] EXT4-fs (loop3): Total free blocks count 0
[  116.557654][ T6422] EXT4-fs (loop3): Free/Dirty block details
[  116.563607][ T6422] EXT4-fs (loop3): free_blocks=2415919104
[  116.569346][ T6422] EXT4-fs (loop3): dirty_blocks=32
[  116.574537][ T6422] EXT4-fs (loop3): Block reservation details
[  116.580574][ T6422] EXT4-fs (loop3): i_reserved_data_blocks=2
[  116.699800][ T6006] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  117.213603][ T6437] usb usb8: usbfs: process 6437 (syz.3.617) did not claim interface 0 before use
[  117.694607][ T6450] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98
[  118.062437][ T3328] usb usb6-port1: unable to enumerate USB device
[  118.082443][   T29] kauditd_printk_skb: 366 callbacks suppressed
[  118.082461][   T29] audit: type=1400 audit(1728532143.433:4516): avc:  denied  { rmdir } for  pid=5467 comm="syz-executor" name="file0" dev="tmpfs" ino=240 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:initctl_t:s0"
[  118.118586][   T29] audit: type=1400 audit(1728532143.433:4517): avc:  denied  { read write } for  pid=5467 comm="syz-executor" name="loop0" dev="devtmpfs" ino=614 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  118.141953][   T29] audit: type=1400 audit(1728532143.433:4518): avc:  denied  { open } for  pid=5467 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=614 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  118.165146][   T29] audit: type=1400 audit(1728532143.433:4519): avc:  denied  { ioctl } for  pid=5467 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=614 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  118.233710][ T6459] loop0: detected capacity change from 0 to 128
[  118.276875][ T6459] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  118.302746][ T6462] netlink: 256 bytes leftover after parsing attributes in process `syz.3.624'.
[  118.324673][ T6461] loop2: detected capacity change from 0 to 2048
[  118.340318][ T6459] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  118.476642][ T6461] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  118.490273][   T29] audit: type=1400 audit(1728532143.623:4520): avc:  denied  { read } for  pid=6451 comm="syz.3.624" dev="nsfs" ino=4026532382 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  118.511539][   T29] audit: type=1400 audit(1728532143.623:4521): avc:  denied  { open } for  pid=6451 comm="syz.3.624" path="net:[4026532382]" dev="nsfs" ino=4026532382 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  118.534914][   T29] audit: type=1400 audit(1728532143.623:4522): avc:  denied  { mounton } for  pid=6458 comm="syz.0.625" path="/42/file0" dev="tmpfs" ino=248 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  118.557371][   T29] audit: type=1400 audit(1728532143.653:4523): avc:  denied  { write } for  pid=6451 comm="syz.3.624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  118.577948][   T29] audit: type=1400 audit(1728532143.723:4524): avc:  denied  { mount } for  pid=6458 comm="syz.0.625" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[  118.603185][   T29] audit: type=1400 audit(1728532143.943:4525): avc:  denied  { mount } for  pid=6457 comm="syz.2.627" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  118.630444][ T6461] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  118.645534][ T6461] EXT4-fs (loop2): Delayed block allocation failed for inode 13 at logical offset 16 with max blocks 18 with error 28
[  118.658251][ T6461] EXT4-fs (loop2): This should not happen!! Data will be lost
[  118.658251][ T6461] 
[  118.668010][ T6461] EXT4-fs (loop2): Total free blocks count 0
[  118.674028][ T6461] EXT4-fs (loop2): Free/Dirty block details
[  118.679931][ T6461] EXT4-fs (loop2): free_blocks=2415919104
[  118.685687][ T6461] EXT4-fs (loop2): dirty_blocks=32
[  118.690816][ T6461] EXT4-fs (loop2): Block reservation details
[  118.696829][ T6461] EXT4-fs (loop2): i_reserved_data_blocks=2
[  118.843789][ T5864] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  118.876790][ T6471] loop1: detected capacity change from 0 to 2048
[  118.915071][ T6471] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  118.930057][ T6471] EXT4-fs (loop1): Delayed block allocation failed for inode 13 at logical offset 16 with max blocks 18 with error 28
[  118.942495][ T6471] EXT4-fs (loop1): This should not happen!! Data will be lost
[  118.942495][ T6471] 
[  118.952260][ T6471] EXT4-fs (loop1): Total free blocks count 0
[  118.958334][ T6471] EXT4-fs (loop1): Free/Dirty block details
[  118.964401][ T6471] EXT4-fs (loop1): free_blocks=2415919104
[  118.970145][ T6471] EXT4-fs (loop1): dirty_blocks=32
[  118.975325][ T6471] EXT4-fs (loop1): Block reservation details
[  118.981395][ T6471] EXT4-fs (loop1): i_reserved_data_blocks=2
[  119.113947][   T56] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  119.284939][ T6490] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98
[  119.471751][ T6500] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  119.510174][ T6502] loop0: detected capacity change from 0 to 2048
[  119.723125][ T6502] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  119.748936][ T6502] EXT4-fs (loop0): Delayed block allocation failed for inode 13 at logical offset 16 with max blocks 18 with error 28
[  119.761366][ T6502] EXT4-fs (loop0): This should not happen!! Data will be lost
[  119.761366][ T6502] 
[  119.771071][ T6502] EXT4-fs (loop0): Total free blocks count 0
[  119.777154][ T6502] EXT4-fs (loop0): Free/Dirty block details
[  119.783089][ T6502] EXT4-fs (loop0): free_blocks=2415919104
[  119.788892][ T6502] EXT4-fs (loop0): dirty_blocks=32
[  119.794051][ T6502] EXT4-fs (loop0): Block reservation details
[  119.800082][ T6502] EXT4-fs (loop0): i_reserved_data_blocks=2
[  119.972218][ T6509] loop2: detected capacity change from 0 to 2048
[  119.986567][ T6509] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  120.001489][ T6509] EXT4-fs (loop2): Delayed block allocation failed for inode 13 at logical offset 16 with max blocks 18 with error 28
[  120.014698][ T6509] EXT4-fs (loop2): This should not happen!! Data will be lost
[  120.014698][ T6509] 
[  120.024701][ T6509] EXT4-fs (loop2): Total free blocks count 0
[  120.030773][ T6509] EXT4-fs (loop2): Free/Dirty block details
[  120.036785][ T6509] EXT4-fs (loop2): free_blocks=2415919104
[  120.042555][ T6509] EXT4-fs (loop2): dirty_blocks=32
[  120.047677][ T6509] EXT4-fs (loop2): Block reservation details
[  120.053683][ T6509] EXT4-fs (loop2): i_reserved_data_blocks=2
[  120.098756][ T6516] loop3: detected capacity change from 0 to 128
[  120.105688][ T6516] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  120.126289][ T6516] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  120.573626][ T6522] ==================================================================
[  120.581774][ T6522] BUG: KCSAN: data-race in vfs_fsync_range / writeback_single_inode
[  120.589797][ T6522] 
[  120.592137][ T6522] write to 0xffff8881067ef428 of 4 bytes by task 6516 on cpu 1:
[  120.599845][ T6522]  writeback_single_inode+0x14f/0x3f0
[  120.605266][ T6522]  sync_inode_metadata+0x5c/0x90
[  120.610253][ T6522]  __generic_file_fsync+0xed/0x140
[  120.615495][ T6522]  fat_file_fsync+0x46/0x100
[  120.620113][ T6522]  vfs_fsync_range+0x116/0x130
[  120.624901][ T6522]  generic_file_write_iter+0x185/0x1c0
[  120.630390][ T6522]  iter_file_splice_write+0x5f1/0x980
[  120.635799][ T6522]  direct_splice_actor+0x160/0x2c0
[  120.640943][ T6522]  splice_direct_to_actor+0x302/0x670
[  120.646347][ T6522]  do_splice_direct+0xd7/0x150
[  120.651136][ T6522]  do_sendfile+0x39b/0x970
[  120.655576][ T6522]  __x64_sys_sendfile64+0x110/0x150
[  120.660802][ T6522]  x64_sys_call+0xed5/0x2d60
[  120.665430][ T6522]  do_syscall_64+0xc9/0x1c0
[  120.669960][ T6522]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  120.675904][ T6522] 
[  120.678245][ T6522] read to 0xffff8881067ef428 of 4 bytes by task 6522 on cpu 0:
[  120.685818][ T6522]  vfs_fsync_range+0x9a/0x130
[  120.690541][ T6522]  generic_file_write_iter+0x185/0x1c0
[  120.696031][ T6522]  iter_file_splice_write+0x5f1/0x980
[  120.701437][ T6522]  direct_splice_actor+0x160/0x2c0
[  120.706574][ T6522]  splice_direct_to_actor+0x302/0x670
[  120.711965][ T6522]  do_splice_direct+0xd7/0x150
[  120.716792][ T6522]  do_sendfile+0x39b/0x970
[  120.721237][ T6522]  __x64_sys_sendfile64+0x110/0x150
[  120.726450][ T6522]  x64_sys_call+0xed5/0x2d60
[  120.731068][ T6522]  do_syscall_64+0xc9/0x1c0
[  120.735591][ T6522]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  120.741531][ T6522] 
[  120.743870][ T6522] value changed: 0x00000038 -> 0x00000022
[  120.749592][ T6522] 
[  120.751932][ T6522] Reported by Kernel Concurrency Sanitizer on:
[  120.758089][ T6522] CPU: 0 UID: 0 PID: 6522 Comm: syz.3.642 Not tainted 6.12.0-rc2-syzkaller-00074-gd3d1556696c1 #0
[  120.768696][ T6522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  120.778776][ T6522] ==================================================================
[  120.975824][   T50] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)