last executing test programs:

2.729266586s ago: executing program 3 (id=321):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r1)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e21, @loopback}], 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r3}, 0x18)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r4)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r6=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x24, r5, 0x1, 0x0, 0x2000000, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x0)
sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881)
r7 = dup(r0)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20)
socket$packet(0x11, 0x2, 0x300)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x8, 0x6}, 0x120, 0x10000, 0x33f8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x106}}, 0x20)
setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000300)=0xc6c5, 0x4)
setsockopt$inet_sctp_SCTP_MAXSEG(r7, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={0x0, 0xcc0}, 0x8)
sendmmsg$unix(r7, &(0x7f0000006700)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)="bf6c4f393bd5311cb70fd0244f01d30f1e2fe88bd64f2ef22ac3d0fb290f9d6ae423f2804fcf8710331c56667845152e8a5629132a5d7279cd2d2a0b64624593349daf2ff9faf374b9f87d4e7ad50a9ef07d1293761046d349b68a2ce70e595cdff5eff145754f61611945890831fd4f2ff8cd715affe5a4318be35ed9d89367b1676a1aebd4d61594119121e045c36c788e0262196110ab535f050270487298a9ebd13a1367476d4265d2836f640db6041c2a8450ea575d5f33a3970a70c2e6f439", 0xc2}], 0x1, 0x0, 0x0, 0x11}}], 0x1, 0x24048081)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r7, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x5}}, 0xfd87)

2.634134728s ago: executing program 2 (id=323):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="06"], 0x9)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB="04001700df"], 0x9)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000380)={0x0, 0x6}, 0x8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0)
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x64, 0x3, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000044}, 0x4008)
write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="06696f202b64657669630573202b706572665f6576656f7420"], 0x19)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil)
mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil)
sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=ANY=[@ANYBLOB="280100001700010029bd7000fcdbdf25ac141444000000000000000000000000000004d26d000000fc010000000000000000000a0000008000000000000000000000000000aafe8000000000000000424e2000004e2200000a002080890000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa0000000000000000000000007f0000010000000000000000000000004e2300074e2000040a0080a02f000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="01040000000000007f00000000000000000000000000000001000100000000000900000000000000737200000000000001000000000000003fb50000000000000000008000000000050000000000000000020000000000003b05a70100000000080000000000000001000001000000000900000004000000000000002dbd7000"], 0x128}, 0x1, 0x0, 0x0, 0x880}, 0x20008040)

2.53726842s ago: executing program 3 (id=324):
prctl$PR_SET_NAME(0xf, 0x0)
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYRES16=r1], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x31, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r2}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000040))
r5 = syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x20000)
read$usbmon(r5, 0x0, 0x0)
ioctl$MON_IOCX_GET(r5, 0x40189206, &(0x7f0000000180)={0x0, 0x0})
syz_open_dev$usbfs(&(0x7f0000000000), 0x205, 0x44680)
pwritev2(r3, &(0x7f0000000200)=[{&(0x7f00000014c0)="424d3f85b240893d1d20f01a3f91dfbffe42c5aa1b3a42002cf5d5c075a8285d9bd2f33c6cd381846821ac1a03936e3c85418ed92f133c610f82dc75b5336e5609604c27dc2198350151db97ae32669dd02a99c4a7d9bf00936eb2fd6117647df84d0e80f50b3e71975bcd72bd73f04120e4d46d046a5ffecd1aabec077f283816bc844b47f9659ff0f54d36ec790619e62956e32c9bf09265661feb", 0x9c}], 0x1, 0x100, 0x1, 0x18)
r6 = socket$kcm(0x10, 0x2, 0x0)
r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9901)
mount_setattr(r7, &(0x7f0000001d80)='.\x00', 0x0, &(0x7f0000000080)={0xb, 0x0, 0x40000}, 0x20)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r7, 0x29, 0x41, &(0x7f00000003c0)={'filter\x00', 0x3, [{}, {}, {}]}, 0x58)
ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000000)={0x0, r6, 0x3a9, 0x2, 0x7, 0x3})
sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001900)="2e00000011008188040900000000000000a1810031000000000f000000028002002d1f00000000000000e2000000", 0x2e}], 0x1}, 0x0)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000001600)=ANY=[@ANYBLOB="180000000002000000000000800000009500000000000000d53db9ef6fb2064db66ad3b503c89747c22bcfca25620f5c664487291dea379c6c2368fe061e2873fd8874a5c3efffd3ebe4bf9c01ce0113d7a02a8678e3d5c2783678fe3b251baddd584ec1db9735"], &(0x7f00000007c0)='GPL\x00', 0x6, 0x0, 0x0, 0x41002, 0x8, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x18)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x1c, r8, 0x1, 0x70bd27, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r10, 0x0, 0x20000010)

2.454740812s ago: executing program 2 (id=326):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="b4050000200080066110000000000000c6000000000000009500d800000000009f33ef60916e55893f1eeb0b2ae13d922e6235592ce847e2566c43d72918a897323fd0723043c47c896ce0bce66a245ad9d6817fd98cd824498949714ffaac8a6f77ef0000ca5d82054d54d53cd2b6db714e75d9bdae214fa68a0557eb2c5ca683a4b6fcfcff0bffffffffffd47042eaebfa6fa26fa7a347c7faa8e700458c60897d4a6148a1c11428427c40de60beacf871ab5c2ff88a02084e5b5271e45f00003826fb8579c1fb01d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0c20cdbe7009a6fe7cc78762f1d4dcdbca64920db9a50f86c21632f7a4bd344e0bd74ff05d37ef68e3b9db863c758ffffffffabe90ac5d08dd9d4e0359c41cf3626e1230bc1cd4c02c460ceb44276e9bd94d1c2e6d17dc5c2edf332a62f5fe68fbbbbfcfd00000000000fbf940e6652d357474ed5f816f66ac3027460ae66317f83cdd7a7eb2a7003d1a6cf5478533584961c329fcf5a43e05c92bfef0dcd28000000003f2915a3039c9a78f63b8ec7e60a0000fed7d67c440e23d130e51eea1e085bebabe7059de9cbfc5117c024185a062acb6b8eec31c21b3af8b9eedb4660ed2deb7acf2a33a376a5cb7d4266d5b0be14488d14b473502486ad8dd600000000000000000000c7766ea7c581782c0d90f42a85303835fc291c25d29e6bead5d7360f2e1929d7736ebc8558c4506407d3046022bdf25485bd5442169e9b4c1278343581b7a06f65e8ea6b042c4fd08381e5000000000000006398d6480000001a723b91030000006480304c66b217aea0156ce9eef911fe5b7370f79987303ecb3aabc53c60014a0101ab766754f596b41da9534d12b8306a1b36cf3b03f0d790879f523eabfbee83d8bd472ef69660cf6ec897106c51e54a17497f384c4956b41f3843e7c878b1e11316d8ddae1c6c3b85aaf7a9fcaf8f5d6186c42542d68ba72682c938d3c0a2e6e10eed71b1d31c9f300b41745329bf34495c63e43fb896e4903fb0fae54a8f0fe3b48a5b29d279070647e65097c8ecf32a15080000000000000001007ba4a70a084bd994ac5e00000000000000000000000000351a30cd97f83d72631d0fe92efa974a53f4dc1eb9a86df632a6d463688123f64d42a919bcfc44a90ffd680200000091f842a91c977f6075d07e39e669b0713af0498a99bf5261cb3269d499a5202d7a08b33ade7b38829b9bd39619688d5e9af22170ef83e5b92cbb32b655c45de1c154aad81bf64351668a3f76d5afa958aff76249e0ffdf8e45155536a1a44bfcbfbfd232af000052f9002a"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x12, 0x4, 0x4, 0x12}, 0x50)
close(r2)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r4, 0x0)
r5 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r5, 0x0)
r6 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r6, &(0x7f0000000040)={0xa, 0x0, 0x8, @local, 0xd940, 0x2}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r3}, &(0x7f0000000500), &(0x7f0000000540)=r2}, 0x20)
close_range(r2, 0xffffffffffffffff, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r7, 0x24, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x80000000})

2.397645673s ago: executing program 1 (id=328):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00'}, 0xe)
r0 = socket(0x10, 0x80003, 0x0)
r1 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000040))
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r0)
sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, r2, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x9, @media='udp\x00'}}}, ["", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x800000, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11)
setsockopt$sock_int(r3, 0x1, 0x12, &(0x7f0000000000)=0xffff2652, 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='btrfs_flush_space\x00', r5, 0x0, 0x800000000000a87c}, 0x18)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
ioctl$VT_DISALLOCATE(r1, 0x5608)
write(r0, &(0x7f0000000640)="240000001a005f0206f9f426000904000a00006bfe11a0333c4a00000000000000000000b2404f8a14", 0x29)

2.386589133s ago: executing program 3 (id=329):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000300)=r1}, 0x20)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x40)
sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x4000080)
bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14)
sendto$inet6(r2, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0)

2.333197434s ago: executing program 2 (id=330):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, <r1=>0xffffffffffffffff}, 0x4)
syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00')
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newlink={0x50, 0x10, 0x401, 0x0, 0xfffffffe, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r4, 0x60800, 0x20000}}}}}}, @IFLA_MASTER={0x8, 0x3, r4}]}, 0x50}}, 0x40000c0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
io_uring_setup(0x6c4, &(0x7f0000000400)={0x0, 0xed37, 0x18, 0x2})
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kfree\x00', r6}, 0x18)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b70300000000c97fb3eeac75965516167f11fa80692e0000850000000c"], &(0x7f0000000640)='syzkaller\x00', 0x7}, 0x94)
open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x9d, &(0x7f0000000300)='trans=rdma,')
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000d50000002a00c50095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
r7 = gettid()
syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0)
rt_sigaction(0x1b, &(0x7f0000000040)={0xfffffffffffffffc, 0x4c000000, 0x0, {[0x8000000000005a]}}, 0x0, 0x8, &(0x7f00000001c0))
tkill(r7, 0x1b)

2.276822275s ago: executing program 3 (id=333):
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10)
syz_usb_connect(0x6, 0x1fc, &(0x7f0000000780)=ANY=[@ANYBLOB="12015002b8005108101407a0683e010203010902ea01030e00300309040309027f54cc00090502040004040403800109661bede31b6d40ffd5a6457d3483a7c64a2cf09c6b30e3afe9caf13ed9a2924ed053d2b4b24aedb4035d4212c8a5f7df3b67916187c245f81035efe9b53a8d79988d4b00a8aa5926f8b9103fd0e543cebd14ca5d0825146c7ff12ef0b8fe612538542d6f5c9fdc7894374795b8ccb6bdb303b42aa86746d3370ad7a31c090504104000050209072501830200040725018101070009045b060c317135060905051008000600d30725018002000009050610200080ff0407250101060200090500100004090401090504104000ab0005090505022000060d0d48007672bf7524ef90e0a086de3562bf356642bc0201de8fa807c3b757b1c182c0f4c59af7c59293e1bc41956912be0eafd96bdf03aa6117bc3e50fbee59a6e5dfc7206516e091fce94c0c778a134b5368d1af31d240535b0725018002010009050b08000401a9050725010332f60b0725010206ac15090502140000c7070e0905010400020805800905051000020802ae07250103fbff0009050010400008000309050c040002030d07410f8c1ea652c620acd24cbf2bfeb921dfc3f2c147f7c05a53e4f7db6742a64c76fe8d2f319387c80165b1ad6b9054e93ae7385d785e1c040f2c4e5c2388ef8791090509002000010802"], 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a510800020010"], 0x44}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0)
r4 = socket(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0xfff0)

2.202801347s ago: executing program 4 (id=335):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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")
setxattr$incfs_metadata(0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYRESDEC=0x0, @ANYRES32, @ANYRESDEC], 0x38}}, 0x20000000)
getxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000000)=@known='user.incfs.metadata\x00', 0x0, 0xdeff)

2.142017168s ago: executing program 4 (id=336):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000040340000000000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000357500007b8af8ff00000000bfa200000000000007"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94)
write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="0e00000007010001002802000000f78ccfe75b9c3a9cac5f4e301c94ced2f36967a8b676cdd0b31e87ab85dcb2485118f0a677c94ca056ee550a5a12c77420acec73101029e627e2b74f186158ce55d0a70be819cf8eda8700005f007bba06129e94da5250adb0c119c13823c385e6baaafec27629714d8ce1780f11b23e4b730837015d5fac9de283df54a8cde07c920a16bb94068fd9d0055c26f6543f96178d2a4b81327549537c9d559c2b2c140017f4f972136b83bd9c2037c27388"], 0xe)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x2389, &(0x7f0000000380)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
timer_create(0x2, &(0x7f000049efa0)={0x0, 0x0, 0x1}, &(0x7f0000044000)=<r4=>0x0)
timer_settime(0x0, 0x1, &(0x7f0000000340)={{}, {0x0, 0x9}}, 0x0)
timer_gettime(r4, &(0x7f0000000000))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r3}, 0x18)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r5}, 0x18)
io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6, 0x0, 0x0, 0xb1})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$unix(r7, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@rights={{0x18, 0x1, 0x1, [r6, r6]}}], 0x18, 0x40000}, 0x4000)
r8 = socket$nl_rdma(0x10, 0x3, 0x14)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r8, 0xc0502100, &(0x7f0000000000)={0x0, <r9=>0x0})
syz_open_procfs$namespace(r9, &(0x7f00000000c0)='ns/uts\x00')
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)
syz_mount_image$iso9660(&(0x7f0000000940), &(0x7f0000000680)='./file0\x00', 0x14c0e, &(0x7f0000000b40)=ANY=[@ANYRES8=0x0], 0xfd, 0x6b1, &(0x7f0000001f80)="$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")
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r10}, 0x18)
creat(&(0x7f0000000000)='./file1\x00', 0x14c)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d785f3d3201c58033c88e160d2745a91b08363bcc34006d0009788455ec9ad10b24"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)

2.084900189s ago: executing program 4 (id=337):
syz_emit_ethernet(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18)
r1 = io_uring_setup(0x6ecd, &(0x7f0000000140)={0x0, 0x49fd, 0x10003, 0x24002, 0x185})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, 0x0, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x40404)
close_range(r1, 0xffffffffffffffff, 0x0)

2.064695869s ago: executing program 4 (id=338):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040), 0x10)
listen(r0, 0x5)
r1 = socket(0x28, 0x5, 0x0)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000280)={0x200000, 0x200000, 0x0, 0x0, 0x5989})
setrlimit(0x40000000000008, 0x0)
connect$vsock_stream(r1, &(0x7f0000000080), 0x10)
sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002480)=@deltfilter={0x24, 0x2d, 0x4, 0x70bd2f, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x9, 0xfff2}, {0x1, 0xffe0}, {0x5, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004885}, 0x44804)
setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f00000000c0)={0x1, 0x79e}, 0x8)
sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094)

1.717590626s ago: executing program 3 (id=339):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r2}, 0x10)
syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0)

1.493081081s ago: executing program 1 (id=340):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000140), 0x1, r0}, 0x38)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18)
bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@generic={0x0, r1}, 0x18)

1.492165641s ago: executing program 0 (id=341):
syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f00000000c0)='./file2\x00', 0x200000, &(0x7f0000000300)={[{@user_xattr}, {@jqfmt_vfsv1}, {@nouid32}, {@grpquota}]}, 0xfc, 0x580, &(0x7f0000000f80)="$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")
openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
pipe2(&(0x7f00000006c0)={<r2=>0xffffffffffffffff}, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x18)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
close_range(r2, 0xffffffffffffffff, 0x0)
add_key$fscrypt_v1(&(0x7f0000002a00), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000007c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa00", 0x28}, 0x48, 0xffffffffffffffff)
add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f0000000500)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0x1}, 0x48, 0xffffffffffffffff)
r7 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
r10 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0)
getsockname$packet(r10, &(0x7f00000003c0)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r11, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xd3a, 0x2c, 0x2, 0x76, 0x7, 0x6a, 0x4, 0x8, 0x80000000}}}}]}, 0x58}}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}}}, 0x24}}, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x1ff, 0x0, r7, 0x66, '\x00', r11, r7, 0x0, 0x1, 0x1}, 0x50)
r12 = inotify_init()
inotify_add_watch(r12, &(0x7f0000000000)='./file1\x00', 0x50000a82)

1.435426052s ago: executing program 1 (id=342):
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_emit_ethernet(0x82, &(0x7f0000000240)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0xfffc, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@rand_addr=0x64010102, 0x10000}, {@private}, {@dev}, {@remote}, {@loopback}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@private}]}]}}}}}}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r2 = inotify_init()
r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x13, 0x0, 0x0, 0x7995}, 0x10022, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})
ioctl$USBDEVFS_REAPURB(r4, 0x4004550c, &(0x7f0000000380))
inotify_add_watch(r2, &(0x7f0000000340)='.\x00', 0xa50003d1)
mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil)

1.433468582s ago: executing program 2 (id=343):
prctl$PR_SET_NAME(0xf, 0x0)
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYRES16=r1], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x31, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r2}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000040))
r5 = syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x20000)
read$usbmon(r5, 0x0, 0x0)
ioctl$MON_IOCX_GET(r5, 0x40189206, &(0x7f0000000180)={0x0, 0x0})
syz_open_dev$usbfs(&(0x7f0000000000), 0x205, 0x44680)
pwritev2(r3, &(0x7f0000000200)=[{&(0x7f00000014c0)="424d3f85b240893d1d20f01a3f91dfbffe42c5aa1b3a42002cf5d5c075a8285d9bd2f33c6cd381846821ac1a03936e3c85418ed92f133c610f82dc75b5336e5609604c27dc2198350151db97ae32669dd02a99c4a7d9bf00936eb2fd6117647df84d0e80f50b3e71975bcd72bd73f04120e4d46d046a5ffecd1aabec077f283816bc844b47f9659ff0f54d36ec790619e62956e32c9bf09265661feb", 0x9c}], 0x1, 0x100, 0x1, 0x18)
r6 = socket$kcm(0x10, 0x2, 0x0)
r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9901)
mount_setattr(r7, &(0x7f0000001d80)='.\x00', 0x0, &(0x7f0000000080)={0xb, 0x0, 0x40000}, 0x20)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r7, 0x29, 0x41, &(0x7f00000003c0)={'filter\x00', 0x3, [{}, {}, {}]}, 0x58)
ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000000)={0x0, r6, 0x3a9, 0x2, 0x7, 0x3})
sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001900)="2e00000011008188040900000000000000a1810031000000000f000000028002002d1f00000000000000e2000000", 0x2e}], 0x1}, 0x0)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000001600)=ANY=[@ANYBLOB="180000000002000000000000800000009500000000000000d53db9ef6fb2064db66ad3b503c89747c22bcfca25620f5c664487291dea379c6c2368fe061e2873fd8874a5c3efffd3ebe4bf9c01ce0113d7a02a8678e3d5c2783678fe3b251baddd584ec1db9735"], &(0x7f00000007c0)='GPL\x00', 0x6, 0x0, 0x0, 0x41002, 0x8, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x18)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x1c, r8, 0x1, 0x70bd27, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000000306050000000000000000000000000005000100"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010)

1.380968193s ago: executing program 0 (id=344):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001140)=@newsa={0x184, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x64}, {@in, 0x0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x35}, {}, {0xfffffffffffffffd, 0x0, 0x8000000, 0x200}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x18}}]}, 0x184}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0a00000004e30f00"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x86441, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0)
recvmsg(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1, 0x0, 0x1800}, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
r6 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000004c0)={'vcan0\x00', <r7=>0x0})
connect$can_bcm(r6, &(0x7f00000000c0)={0x1d, r7}, 0x10)
sendmsg$can_bcm(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="0100000040fc51c64400000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x80}}, 0x0)
sendmsg$can_bcm(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0)
sendmsg$can_bcm(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="01000000080800"/16, @ANYRESDEC=r7, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES16=r6], 0x80}}, 0x0)
r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x400000, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x1, '\x00', r7, r8, 0x2, 0x2, 0x2}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='neigh_create\x00', r9}, 0x18)
socket(0x8000000010, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.363645343s ago: executing program 1 (id=345):
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10)
syz_usb_connect(0x6, 0x1fc, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a510800020010"], 0x44}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0)
r4 = socket(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0xfff0)

1.320868324s ago: executing program 0 (id=346):
r0 = perf_event_open(0x0, 0x0, 0xfffffffffdfffffb, 0xffffffffffffffff, 0xa)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r3}, 0x10)
syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0)

1.214568016s ago: executing program 2 (id=347):
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r2, 0x0, 0x10}, 0x18)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x1412, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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")
r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYRES64=r3, @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12)
write(r6, &(0x7f00000009c0)="3bf58d", 0x3)
sendfile(r6, r4, 0x0, 0x7fffeffd)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r7 = syz_clone(0x44208400, 0x0, 0x0, 0x0, 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000000)={r7, 0x0, 0x7})

696.079306ms ago: executing program 1 (id=348):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000040340000000000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000357500007b8af8ff00000000bfa200000000000007"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94)
write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="0e00000007010001002802000000f78ccfe75b9c3a9cac5f4e301c94ced2f36967a8b676cdd0b31e87ab85dcb2485118f0a677c94ca056ee550a5a12c77420acec73101029e627e2b74f186158ce55d0a70be819cf8eda8700005f007bba06129e94da5250adb0c119c13823c385e6baaafec27629714d8ce1780f11b23e4b730837015d5fac9de283df54a8cde07c920a16bb94068fd9d0055c26f6543f96178d2a4b81327549537c9d559c2b2c140017f4f972136b83bd9c2037c27388"], 0xe)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x2389, &(0x7f0000000380)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
timer_create(0x2, &(0x7f000049efa0)={0x0, 0x0, 0x1}, &(0x7f0000044000)=<r4=>0x0)
timer_settime(0x0, 0x1, &(0x7f0000000340)={{}, {0x0, 0x9}}, 0x0)
timer_gettime(r4, &(0x7f0000000000))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r3}, 0x18)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r5}, 0x18)
io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6, 0x0, 0x0, 0xb1})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$unix(r7, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@rights={{0x18, 0x1, 0x1, [r6, r6]}}], 0x18, 0x40000}, 0x4000)
r8 = socket$nl_rdma(0x10, 0x3, 0x14)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r8, 0xc0502100, &(0x7f0000000000)={0x0, <r9=>0x0})
syz_open_procfs$namespace(r9, &(0x7f00000000c0)='ns/uts\x00')
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)
syz_mount_image$iso9660(&(0x7f0000000940), &(0x7f0000000680)='./file0\x00', 0x14c0e, &(0x7f0000000b40)=ANY=[@ANYRES8=0x0], 0xfd, 0x6b1, &(0x7f0000001f80)="$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")
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r10}, 0x18)
creat(&(0x7f0000000000)='./file1\x00', 0x14c)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d785f3d3201c58033c88e160d2745a91b08363bcc34006d0009788455ec9ad10b24"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)

694.996416ms ago: executing program 4 (id=349):
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000)
io_uring_setup(0x5594, &(0x7f0000000100)={0x0, 0x10000000, 0x1, 0x0, 0x1d2})
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073", @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r3}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe28, 0xfffffffffffffff5, &(0x7f0000000980)="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", 0x0, 0x2f, 0xe8034000, 0xf000, 0xfffffffffffffe2a, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559", 0x5dc}, 0x28)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000000f00)={<r5=>0x0, 0x7fffffff, 0x0, [0x3, 0x7, 0x8, 0x7, 0x101], [0x1000, 0xfffffffffffffffa, 0x9, 0x0, 0xeb7, 0x4, 0x5, 0x2, 0x4, 0x2, 0x3ff, 0x800, 0x2, 0x0, 0x9, 0x80000000, 0x5, 0x1, 0xfffffffffffffff8, 0x7, 0x1, 0x0, 0xd7de, 0x2, 0xc, 0x1, 0x5, 0x7f1, 0x1, 0x9, 0x10000, 0x5, 0x0, 0x4, 0x4, 0x8, 0x80000000, 0x4, 0x100, 0x4, 0xf8, 0x2, 0xfffffffffffff584, 0xd, 0x100, 0x2, 0x2, 0x4, 0xc, 0x8000000000000000, 0x1, 0x4, 0x5, 0x5, 0x8, 0x3, 0x5, 0x2, 0x9, 0x5, 0x5, 0xe00b, 0x8, 0x1, 0x8, 0x10000, 0x79fd, 0x2, 0x9, 0xff, 0x0, 0x4, 0x4, 0xfffffffffffff142, 0x9, 0x0, 0x100000001, 0x9, 0x7, 0x7, 0xc, 0x100000001, 0x8000000000000001, 0x7ad, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x9, 0x100000000, 0x7, 0x4, 0x6, 0x9, 0x2, 0x0, 0x6, 0x4, 0x80000001, 0xfc, 0xfb, 0x3, 0x3, 0x6, 0x8, 0x100000001, 0xa, 0x2, 0x0, 0x2, 0xaf72, 0x2, 0x8, 0x2, 0x8, 0x17d2, 0x998, 0x0, 0x6, 0x5, 0x5, 0x2, 0x2]})
ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001bc0)={<r6=>0x0, "52752e1cc2f666350efd22fb2d200774"})
ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000003a00)={<r7=>0x0, "63059c8b9a1be4ebeabd9b603d78069e"})
ioctl$BTRFS_IOC_BALANCE_V2(r4, 0xc4009420, &(0x7f0000001340)={0x2, 0x5, {0x4, @struct={0x1, 0x9}, r5, 0x100, 0x6, 0xda, 0x7fff, 0x4, 0x80, @struct={0x3, 0x1}, 0x7fffffff, 0xf, [0xffffffff, 0x1, 0x2c9, 0x0, 0x800]}, {0x4, @struct={0x9, 0x33f}, r6, 0x8001, 0x34, 0x9, 0x4, 0x6e5f, 0x10, @usage, 0x1000, 0x5, [0x10000, 0x7b61, 0x0, 0x2, 0x6, 0x8]}, {0x4000000000000000, @struct={0x0, 0x4}, r7, 0xffffffff, 0x2, 0xfffffffffffffffc, 0xa7c, 0x9e1, 0x20, @usage=0x100000001, 0x5e7fd24d, 0x9, [0x9, 0x3, 0x3, 0xcde, 0xdcdd, 0x9]}, {0x0, 0x8, 0x4}})
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x8)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r8 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
fstat(r8, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
setreuid(r9, r9)
linkat(r8, &(0x7f00000001c0)='./file1\x00', r8, 0x0, 0x1000)
r10 = creat(&(0x7f00000000c0)='./bus\x00', 0x182)
r11 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148)
pwrite64(r11, &(0x7f0000000140)='2', 0xfdef, 0xfecc)
fallocate(r10, 0x0, 0xbf5, 0x2000402)

693.020076ms ago: executing program 0 (id=358):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r0}, 0x38)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), r2)
sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f0000000740)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000840)={0x100, r4, 0x4, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0xec, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x74, @private2, 0x4}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x4, @local, 0x1000}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xfffffffb, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010101}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0xffffeff8, @dev={0xfe, 0x80, '\x00', 0x27}, 0x5}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x4004801}, 0x20000081)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x7cb641, 0x0)
close(r6)
socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00'})
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x1, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004)
socket$nl_netfilter(0x10, 0x3, 0xc)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c00)={0x11, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r10, 0x0, 0x4}, 0x18)
r11 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000002c0)="d80000001c0081064e81f782db44b9040a1d08040e00000000000aa1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162756aa5e8d7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x48090)
recvmmsg(r9, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000040)=""/55, 0x37}, {&(0x7f0000000540)=""/189, 0xbd}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000000940)=""/74, 0x4a}], 0x4}, 0x5d}], 0x1b00, 0x10022, 0x0)
r12 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r12}, 0x8)
r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x8000000, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0xfffffffc}, 0x50)
r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000009c0)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b702000000b7030000000000008500000083000000bf090000000000009500000000000000bf91000000000000b7020000000000008500000084000000ff0f0018000000009500f7ff0000000000f5ffffff00000000000067ff81846480b81a5b6fc72215066019c82bb6e345db3e8a43dbef0ce61d24f6f34161ea39425f015dd19798b8163f68850a6af89c4c7927e3ce900169f4931b23aabe8538a13f9167d8d891ac1c35f7ae86404342ba7bdb4da58348cbb6ff5412acf548d65c5e2f58aed71df14b3bd6660f431d3180894e3fcaaccc4489ed90bf6bd038"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000400)='pwc_handler_exit\x00', r14, 0x0, 0x9}, 0x18)
r15 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006c617374000000000400028008000340000001"], 0xe4}}, 0x20050800)

656.017347ms ago: executing program 3 (id=350):
r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x1010002, &(0x7f0000000a00)=ANY=[@ANYBLOB='iocharset=iso8859-14,utf8=1,uni_xlate=1,iocharset=iso8859-6,uni_xlate=1,utf8=1,utf8=0,uni_xlate=1,uni_xlate=0,iocharset=macgreek,shortname=winnt,iocharset=cp863,utf8=0,uni_xlate=1,uni_xlate=1,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c6e6f6e756d7461696c3d302c6673757569643d33313362643133662d003939612d333839f684d062332d383436372d64623732646334382c646566636f6e746578743d757365725f752c00"], 0x1, 0x36b, &(0x7f0000000500)="$eJzs3U1oY0UcAPB/+tKkXdD2JgpC9CZo2e5NL7ZIFxZ7UQl+HMTgdlWSKrRYbA+b1oPiUfCoJ28KevAgHkVQxJsHr64gq+JB97bg4kjy8vGapN3uYivF3w+aTGfmP/N/HySv4WX6wlI0L07HpWvXrsbMTCnKS48txfVSzEcWfbsxrjKhDgA4Ha6nFH+m3GjbzOSQ0gmkBQAco+77/0sRUYv5vObNrw/rn7z7A8Cp1/v7f/awPgd8DhDx2rGkBAAcs7HP/+/f11zp/pT7v5YLdwUAAKfVU88+9/jyasSTtdpMxPrbW/WtejwybF++FK9EK9bibMzFjYj8QqHzUOo+nr+wunK2Vqu145f5qEfEVC+wnl8pLGfd+GosxlzM9+J7Vxsppez8Z6sri7WuiNhtd+eP9dJWfTrO9Ob/8UysDS88+oN0nyIurK6cq/UGqK/349sRe8MbFTr5L8RcfP/iYJiU+ncwrq5cXuwnPYzfqlfj4mAvHPgJCAAAAAAAAAAAAAAAAAAAAAAA3JaF2sD8YP2c1HnOV8pZWJjQ3l0fJ4/vrQ+0l68PlKopUvrjjYfq72Sxb32g0fV5tiwkCAAAAAAAAAAAAAAAAAAAAAOb25VotFprG5vbO81iob2xuT0VEZ2aV7/95KvZGO9zk0I5n6IaMZii1pt2p9lIWb9zyiLGw7PO5P2ajz4fZFzsUx1sxcQ0qgc3tVp33Pfz+8Oae7P+yH8P+2QxeQOzQhqPjoy8fmee0q3sqEHhXLGmOj77lZRSoeatYvjl58cHjFJE+dYP3E5zKg7ukzqFb66+fHd/7ze+TLkHHpx7+sp7H/7WbLQ6M0f3CFY2Nm+kZqPU73yE2XvDpe4hGJ4bpcgLpeKZUD5swL39NY3sh9+fuefd7462E1Kx5vXO+TzSJ8s359PR8Epe6KQ50jQ7DJ/ubURrbXrCyX+zwm0c07s++OLjlH769chTDE2NvWyU/p1XHwAAAAAAAAAAAAAAAAAAoKjwXfHel67becP0YVEPP3FC6QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAiRj+//9CYW83RmqOUvirPSGquraxGVH5rzcTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/uX8CAAD//3wwZok=")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
syz_pidfd_open(0x0, 0x0)
listen(r1, 0xffffffff)
sendmmsg(r1, &(0x7f0000000540)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x1000, @dev={0xfe, 0x80, '\x00', 0x11}, 0xa, 0x1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000300)='>', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0xfe61}}], 0x2, 0xc88c4)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x4}, 0x100600, 0x9, 0x0, 0x8, 0x8, 0x20005, 0x8, 0x0, 0xfffffffd, 0x0, 0xb7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = socket$xdp(0x2c, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000008c0)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES8, @ANYBLOB="8814509ff1cea6fcfb3f9f4bf8ddf25d1a3a2ba33895ad058af4c89866474fdd02b8e4aaf5494e88fbb4cb73dfb3043f99c17d037d7dfd2aa4d33c94f3938b1dec754545754bbed16f410046d2cb058cf297b45830689bdaa5f0cedefb08210a4e859e364995601bbb95512f152fc0ac4288b626881afdd5eb031a05babf667aa2496145d6ce94202cc9484f8ba998e5e32f767b1f0293b5044b6c7e2432997e9bddcae33a9146e0bffcb7b93a4ceee1468eefcbebc8543cd02126b9b4e0e6"], 0xe8}, 0x1, 0x0, 0x0, 0x20000000}, 0x890)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x1000}, 0x20)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xb635773f06ebbeee, 0x12, 0xffffffffffffffff, 0x58583000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x101482, 0x0)
ioctl$TCSETS(r4, 0x5402, &(0x7f0000000000)={0x7, 0xd, 0x0, 0xffdffffc, 0x6, "00001000"})
write$binfmt_aout(r4, &(0x7f0000000400)=ANY=[], 0xff2e)
ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000140)={0x0, 0x100, 0x4, 0x0, 0x83, "00000000000000000000ffff00"})
ioctl$TCSETS(r4, 0x5402, &(0x7f0000000080)={0x0, 0xfffffffd, 0x0, 0x6, 0x1, "e315bc1cc24ff7b7cdb242e1ff0aa6905446b3"})
r5 = syz_open_pts(r4, 0x0)
r6 = dup3(r5, r4, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xffffffff}, 0x1320, 0x0, 0x3, 0x5, 0x0, 0x800001, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
epoll_create1(0x0)
read$watch_queue(r6, &(0x7f0000000340)=""/133, 0x85)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0b00000008000000020000000400000005000000", @ANYRESDEC=r0, @ANYRESDEC=r6, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000090f821695e4b0ad800"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000100000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)

605.451828ms ago: executing program 1 (id=351):
r0 = perf_event_open(0x0, 0x0, 0xfffffffffdfffffb, 0xffffffffffffffff, 0xa)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r3}, 0x10)
syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0)

374.280813ms ago: executing program 4 (id=352):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x10)
r3 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
r5 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000240)={'team0\x00', <r6=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01005ee1fadefcdbdf250100000008000100", @ANYRES32=r6, @ANYBLOB="3c00028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004"], 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840)

209.589396ms ago: executing program 0 (id=353):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x1, r0}, 0x38)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18)
bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@generic={0x0, r1}, 0x18)

138.457517ms ago: executing program 0 (id=354):
syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f00000000c0)='./file2\x00', 0x200000, &(0x7f0000000300)={[{@user_xattr}, {@jqfmt_vfsv1}, {@nouid32}, {@grpquota}]}, 0xfc, 0x580, &(0x7f0000000f80)="$eJzs3UtrXFUcAPD/nUzS9KFJoRR1IYEurNROmsRHBRd1KVos6L4OyTSUTDolMylNLNgu7MaNFEHEgujOhXuXxS/gpyhooUgJunATuZM76bSZaV4zmdT5/eC259xzZ/7nzL3nzLmPIQH0rbH0n1zEyxHxdRIx0lSWj6xwbG27lUc3ptMlidXVT/5KIsnWNbZPsv8PZ5mXIuK3LyNO5TbGrS4tzxXL5dJClh+vzV8dry4tn748X5wtzZauTE5NnX1ravLdd97uWFtfv/DPdx/f++DsVydWvv3lwdE7SZyLI1lZczt24WZzZizGss9kMM49teFEB4LtJ0mvK8CODGT9fDDSMWAkBtZzLayO7HX1gC76Iu3WQJ9K9H/oU415QOPcvkPnwc+Nh++vnQBtbH9+7dpIDNfPhg6tJNn1kDXp+e5oB+KnMX798+6ddInOXYcA2NTNWxFxJp/fOP4l2fi3c2e2sM3TMbL4bS5AAZ10L53/vNFq/pNbn/9Ei/nP4RZ9dyfa9P8muQcdCNNWOv97r+X8d/2m1ehAlnuhPucbTC5dLpfSse3FiDgZgwfS/DPu53yWW7m/2q6wef6XLmn8xlwwq8eD/IEnXzNTrBV31egmD29FvNJy/pus7/+kxf5PP48LW4xxvHT31XZlm7d/XVduMa3+GPFay/2fPBH4Gfcnx+vHw3jjqNjo79vHf28Xfxvt74qHP2eJ9u0fTZrv11a3H+OH4X9L7cp2evwPJZ/W00PZuuvFWm1hImIo+Wjj+snHr23kG9unx//JE88e/1od/wfTjr3F9t8+drt50+Httb+70vbPtD/+Bzbu/+0n7n/4+fft4m9t/79ZT53M1mxl/NtqBXf7+QEAAAAAAMB+kouII5HkCuvpXK5QWHu+41gcypUr1dqpS5XFKzNR/63saAzmGne6R5qeh5jInodt5Cefyk9FxNGI+GbgYD1fmK6UZ3rdeAAAAAAAAAAAAAAAAAAAANgnDkcMt/r9f+qPgV7XDui6fK8rAPRM+/6flXTiLz0B+9KOv/+HO1sPYO+Z/0P/0v+hf+n/0L/0f+hf+j/0r+b+P9TDegB7bzvf/z+d72JFAAAAAAAAAAAAAAAAAAAAAAAAAAAA4P/hwvnz6bK68ujGdJqfuba0OFe5dnqmVJ0rzC9OF6YrC1cLs5XKbLlUmK7Mb/Z+5Url6sRkLF4fr5WqtfHq0vLF+crildrFy/PF2dLF0uCetAoAAAAAAAAAAAAAAAAAAACeL9Wl5bliuVxakJDYUSK/P6oh0ZwY2v379HpkAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDH/gsAAP//3Kw5xQ==")
openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
pipe2(&(0x7f00000006c0)={<r2=>0xffffffffffffffff}, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x18)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
close_range(r2, 0xffffffffffffffff, 0x0)
add_key$fscrypt_v1(&(0x7f0000002a00), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000007c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa00", 0x28}, 0x48, 0xffffffffffffffff)
add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f0000000500)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0x1}, 0x48, 0xffffffffffffffff)
r7 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
r10 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0)
getsockname$packet(r10, &(0x7f00000003c0)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r11, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xd3a, 0x2c, 0x2, 0x76, 0x7, 0x6a, 0x4, 0x8, 0x80000000}}}}]}, 0x58}}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}}}, 0x24}}, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x1ff, 0x0, r7, 0x66, '\x00', r11, r7, 0x0, 0x1, 0x1}, 0x50)
r12 = inotify_init()
inotify_add_watch(r12, &(0x7f0000000000)='./file1\x00', 0x50000a82)

0s ago: executing program 2 (id=355):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0xfffffffffffffffd, {0x0, 0x0, 0x6}, 0xfe}, 0xfffffffffffffd14)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000001a00010000000000000000001c1412"], 0x1c}}, 0x0)
sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4048081)
sendmsg$AUDIT_TTY_GET(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x3f8, 0x100, 0x70bd26, 0x25dfdbff, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000481}, 0x8040)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.3' (ED25519) to the list of known hosts.
[   33.752034][   T29] audit: type=1400 audit(1758376256.273:62): avc:  denied  { mounton } for  pid=3296 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   33.753221][ T3296] cgroup: Unknown subsys name 'net'
[   33.774777][   T29] audit: type=1400 audit(1758376256.273:63): avc:  denied  { mount } for  pid=3296 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   33.802159][   T29] audit: type=1400 audit(1758376256.303:64): avc:  denied  { unmount } for  pid=3296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   33.980430][ T3296] cgroup: Unknown subsys name 'cpuset'
[   33.986798][ T3296] cgroup: Unknown subsys name 'rlimit'
[   34.118310][   T29] audit: type=1400 audit(1758376256.633:65): avc:  denied  { setattr } for  pid=3296 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   34.143660][   T29] audit: type=1400 audit(1758376256.633:66): avc:  denied  { create } for  pid=3296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   34.164188][   T29] audit: type=1400 audit(1758376256.633:67): avc:  denied  { write } for  pid=3296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   34.184650][   T29] audit: type=1400 audit(1758376256.633:68): avc:  denied  { read } for  pid=3296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   34.205031][   T29] audit: type=1400 audit(1758376256.633:69): avc:  denied  { mounton } for  pid=3296 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   34.214301][ T3299] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   34.229876][   T29] audit: type=1400 audit(1758376256.633:70): avc:  denied  { mount } for  pid=3296 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[   34.261745][   T29] audit: type=1400 audit(1758376256.753:71): avc:  denied  { relabelto } for  pid=3299 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   34.306815][ T3296] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   36.356958][ T3306] chnl_net:caif_netlink_parms(): no params data found
[   36.405214][ T3307] chnl_net:caif_netlink_parms(): no params data found
[   36.417795][ T3313] chnl_net:caif_netlink_parms(): no params data found
[   36.454181][ T3310] chnl_net:caif_netlink_parms(): no params data found
[   36.470737][ T3314] chnl_net:caif_netlink_parms(): no params data found
[   36.498088][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state
[   36.505198][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state
[   36.512416][ T3306] bridge_slave_0: entered allmulticast mode
[   36.518758][ T3306] bridge_slave_0: entered promiscuous mode
[   36.545204][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state
[   36.552333][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state
[   36.559574][ T3306] bridge_slave_1: entered allmulticast mode
[   36.565972][ T3306] bridge_slave_1: entered promiscuous mode
[   36.584703][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state
[   36.591807][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state
[   36.598904][ T3313] bridge_slave_0: entered allmulticast mode
[   36.605406][ T3313] bridge_slave_0: entered promiscuous mode
[   36.624454][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state
[   36.631574][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state
[   36.638761][ T3313] bridge_slave_1: entered allmulticast mode
[   36.645148][ T3313] bridge_slave_1: entered promiscuous mode
[   36.677832][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   36.706081][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   36.716351][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   36.725527][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state
[   36.732708][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state
[   36.739860][ T3307] bridge_slave_0: entered allmulticast mode
[   36.746244][ T3307] bridge_slave_0: entered promiscuous mode
[   36.757836][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state
[   36.765019][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state
[   36.772262][ T3314] bridge_slave_0: entered allmulticast mode
[   36.778581][ T3314] bridge_slave_0: entered promiscuous mode
[   36.785368][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state
[   36.792554][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state
[   36.799746][ T3314] bridge_slave_1: entered allmulticast mode
[   36.806211][ T3314] bridge_slave_1: entered promiscuous mode
[   36.818640][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   36.827899][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state
[   36.835019][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state
[   36.842202][ T3307] bridge_slave_1: entered allmulticast mode
[   36.848818][ T3307] bridge_slave_1: entered promiscuous mode
[   36.860679][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state
[   36.867860][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state
[   36.875072][ T3310] bridge_slave_0: entered allmulticast mode
[   36.881612][ T3310] bridge_slave_0: entered promiscuous mode
[   36.907845][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state
[   36.914999][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state
[   36.922253][ T3310] bridge_slave_1: entered allmulticast mode
[   36.928818][ T3310] bridge_slave_1: entered promiscuous mode
[   36.941777][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   36.951464][ T3306] team0: Port device team_slave_0 added
[   36.958135][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   36.983080][ T3306] team0: Port device team_slave_1 added
[   36.999232][ T3313] team0: Port device team_slave_0 added
[   37.006813][ T3313] team0: Port device team_slave_1 added
[   37.013573][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   37.024100][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   37.039123][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   37.059412][ T3314] team0: Port device team_slave_0 added
[   37.077229][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   37.091933][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0
[   37.098906][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   37.124922][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   37.136376][ T3314] team0: Port device team_slave_1 added
[   37.157557][ T3307] team0: Port device team_slave_0 added
[   37.163519][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1
[   37.170543][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   37.196515][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   37.212506][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0
[   37.219457][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   37.245375][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   37.262451][ T3307] team0: Port device team_slave_1 added
[   37.276142][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0
[   37.283202][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   37.309206][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   37.320478][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1
[   37.327600][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   37.353681][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   37.365156][ T3310] team0: Port device team_slave_0 added
[   37.381977][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1
[   37.388944][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   37.415031][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   37.429887][ T3310] team0: Port device team_slave_1 added
[   37.448712][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0
[   37.455751][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   37.481813][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   37.495897][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1
[   37.502895][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   37.528802][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   37.550798][ T3313] hsr_slave_0: entered promiscuous mode
[   37.556777][ T3313] hsr_slave_1: entered promiscuous mode
[   37.596561][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0
[   37.603628][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   37.629616][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   37.640856][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1
[   37.647885][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   37.673841][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   37.688861][ T3306] hsr_slave_0: entered promiscuous mode
[   37.694994][ T3306] hsr_slave_1: entered promiscuous mode
[   37.701028][ T3306] debugfs: 'hsr0' already exists in 'hsr'
[   37.706799][ T3306] Cannot create hsr debugfs directory
[   37.721555][ T3314] hsr_slave_0: entered promiscuous mode
[   37.727577][ T3314] hsr_slave_1: entered promiscuous mode
[   37.733517][ T3314] debugfs: 'hsr0' already exists in 'hsr'
[   37.739248][ T3314] Cannot create hsr debugfs directory
[   37.776492][ T3307] hsr_slave_0: entered promiscuous mode
[   37.782709][ T3307] hsr_slave_1: entered promiscuous mode
[   37.788540][ T3307] debugfs: 'hsr0' already exists in 'hsr'
[   37.794328][ T3307] Cannot create hsr debugfs directory
[   37.812834][ T3310] hsr_slave_0: entered promiscuous mode
[   37.818973][ T3310] hsr_slave_1: entered promiscuous mode
[   37.825210][ T3310] debugfs: 'hsr0' already exists in 'hsr'
[   37.831034][ T3310] Cannot create hsr debugfs directory
[   38.017932][ T3313] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   38.026745][ T3313] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   38.036772][ T3313] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   38.047515][ T3313] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   38.068419][ T3314] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   38.078198][ T3314] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   38.091316][ T3314] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   38.099966][ T3314] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   38.131610][ T3306] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   38.152943][ T3306] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   38.167401][ T3307] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   38.177538][ T3306] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   38.186522][ T3306] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   38.198173][ T3307] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   38.211224][ T3307] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   38.222420][ T3307] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   38.260622][ T3310] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   38.269447][ T3310] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   38.280308][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0
[   38.294577][ T3310] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   38.304078][ T3310] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   38.326682][ T3313] 8021q: adding VLAN 0 to HW filter on device team0
[   38.349203][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0
[   38.359203][   T51] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.366375][   T51] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.392397][ T1951] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.399473][ T1951] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.414025][ T3314] 8021q: adding VLAN 0 to HW filter on device team0
[   38.426129][ T1951] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.433321][ T1951] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.455241][ T1951] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.462521][ T1951] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.494725][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0
[   38.506015][ T3307] 8021q: adding VLAN 0 to HW filter on device team0
[   38.538358][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0
[   38.548528][   T86] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.555681][   T86] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.568009][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0
[   38.581736][   T86] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.588807][   T86] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.609168][ T3307] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   38.619826][ T3307] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   38.637447][ T3306] 8021q: adding VLAN 0 to HW filter on device team0
[   38.662024][ T3310] 8021q: adding VLAN 0 to HW filter on device team0
[   38.672188][ T2627] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.679302][ T2627] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.701874][ T3306] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   38.712324][ T3306] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   38.727853][   T86] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.734986][   T86] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.751015][   T86] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.758154][   T86] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.766915][   T86] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.774047][   T86] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.787731][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0
[   38.813826][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0
[   38.834992][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0
[   38.907601][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0
[   38.982525][ T3313] veth0_vlan: entered promiscuous mode
[   38.999114][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0
[   39.009177][ T3313] veth1_vlan: entered promiscuous mode
[   39.061154][ T3313] veth0_macvtap: entered promiscuous mode
[   39.084061][ T3307] veth0_vlan: entered promiscuous mode
[   39.101617][ T3313] veth1_macvtap: entered promiscuous mode
[   39.111777][ T3307] veth1_vlan: entered promiscuous mode
[   39.120261][ T3306] veth0_vlan: entered promiscuous mode
[   39.138469][ T3306] veth1_vlan: entered promiscuous mode
[   39.145806][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0
[   39.155648][ T3307] veth0_macvtap: entered promiscuous mode
[   39.175944][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1
[   39.184467][ T3307] veth1_macvtap: entered promiscuous mode
[   39.208399][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0
[   39.221896][   T51] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   39.230958][   T51] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   39.244312][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1
[   39.252129][ T3310] veth0_vlan: entered promiscuous mode
[   39.258042][   T51] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   39.277709][   T51] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   39.286813][   T51] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   39.302750][ T3310] veth1_vlan: entered promiscuous mode
[   39.309512][   T29] kauditd_printk_skb: 9 callbacks suppressed
[   39.309544][   T29] audit: type=1400 audit(1758376261.823:81): avc:  denied  { mounton } for  pid=3313 comm="syz-executor" path="/root/syzkaller.V2bfjP/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[   39.340444][   T29] audit: type=1400 audit(1758376261.823:82): avc:  denied  { mount } for  pid=3313 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   39.342013][   T51] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   39.362487][   T29] audit: type=1400 audit(1758376261.823:83): avc:  denied  { mounton } for  pid=3313 comm="syz-executor" path="/root/syzkaller.V2bfjP/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   39.362517][   T29] audit: type=1400 audit(1758376261.823:84): avc:  denied  { mount } for  pid=3313 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   39.362540][   T29] audit: type=1400 audit(1758376261.823:85): avc:  denied  { mounton } for  pid=3313 comm="syz-executor" path="/root/syzkaller.V2bfjP/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   39.362568][   T29] audit: type=1400 audit(1758376261.823:86): avc:  denied  { mounton } for  pid=3313 comm="syz-executor" path="/root/syzkaller.V2bfjP/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3807 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[   39.386394][   T51] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   39.396407][   T29] audit: type=1400 audit(1758376261.823:87): avc:  denied  { unmount } for  pid=3313 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   39.426246][   T51] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   39.493420][   T29] audit: type=1400 audit(1758376262.013:88): avc:  denied  { mounton } for  pid=3313 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[   39.514037][ T3306] veth0_macvtap: entered promiscuous mode
[   39.532424][   T29] audit: type=1400 audit(1758376262.013:89): avc:  denied  { mount } for  pid=3313 comm="syz-executor" name="/" dev="gadgetfs" ino=4684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[   39.563117][ T3313] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   39.574086][ T3314] veth0_vlan: entered promiscuous mode
[   39.587248][ T3310] veth0_macvtap: entered promiscuous mode
[   39.597128][   T29] audit: type=1400 audit(1758376262.113:90): avc:  denied  { read write } for  pid=3313 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   39.616051][ T3475] program syz.2.3 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   39.630866][ T3475] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[   39.631448][ T3314] veth1_vlan: entered promiscuous mode
[   39.645745][ T3306] veth1_macvtap: entered promiscuous mode
[   39.653168][ T3310] veth1_macvtap: entered promiscuous mode
[   39.669305][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0
[   39.686157][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1
[   39.707981][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0
[   39.716429][ T3479] tmpfs: Bad value for 'nr_inodes'
[   39.723060][   T86] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   39.738108][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1
[   39.745597][   T86] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   39.755282][ T3314] veth0_macvtap: entered promiscuous mode
[   39.773356][ T3314] veth1_macvtap: entered promiscuous mode
[   39.776808][ T3475] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3'.
[   39.780570][   T86] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   39.797035][ T3475] hsr_slave_0: left promiscuous mode
[   39.803054][ T3475] hsr_slave_1: left promiscuous mode
[   39.818931][   T86] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   39.835870][ T3482] bridge_slave_0: left allmulticast mode
[   39.841759][ T3482] bridge_slave_0: left promiscuous mode
[   39.847558][ T3482] bridge0: port 1(bridge_slave_0) entered disabled state
[   39.855394][ T3477] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3'.
[   39.856777][ T3483] netlink: 'syz.3.6': attribute type 10 has an invalid length.
[   39.871867][ T3483] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6'.
[   39.881621][ T3482] bridge_slave_1: left allmulticast mode
[   39.887301][ T3482] bridge_slave_1: left promiscuous mode
[   39.893090][ T3482] bridge0: port 2(bridge_slave_1) entered disabled state
[   39.902339][ T3482] bond0: (slave bond_slave_0): Releasing backup interface
[   39.911749][ T3482] bond0: (slave bond_slave_1): Releasing backup interface
[   39.922746][ T3482] team0: Port device team_slave_0 removed
[   39.932210][ T3482] team0: Port device team_slave_1 removed
[   39.938883][ T3482] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   39.946445][ T3482] batman_adv: batadv0: Removing interface: batadv_slave_0
[   39.956085][ T3482] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   39.963557][ T3482] batman_adv: batadv0: Removing interface: batadv_slave_1
[   39.987169][   T86] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   39.997743][ T3483] batman_adv: batadv0: Adding interface: veth1_vlan
[   40.004484][ T3483] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   40.030808][ T3483] batman_adv: batadv0: Interface activated: veth1_vlan
[   40.046299][   T86] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   40.055281][   T86] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   40.065252][   T86] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   40.075604][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0
[   40.095306][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1
[   40.109189][   T37] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   40.156226][   T37] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   40.179355][ T3491] loop3: detected capacity change from 0 to 2048
[   40.189603][   T37] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   40.228771][   T37] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   40.243024][ T3491] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #2: comm syz.3.7: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 260(4), depth 0(0)
[   40.262343][ T3491] EXT4-fs (loop3): get root inode failed
[   40.268110][ T3491] EXT4-fs (loop3): mount failed
[   40.281251][ T3499] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   40.358074][ T3500] loop1: detected capacity change from 0 to 2048
[   40.412549][ T3300]  loop1: p1 < > p4
[   40.417668][ T3300] loop1: p4 size 8388608 extends beyond EOD, truncated
[   40.428777][ T3500]  loop1: p1 < > p4
[   40.434112][ T3500] loop1: p4 size 8388608 extends beyond EOD, truncated
[   40.537047][ T3506] hub 9-0:1.0: USB hub found
[   40.541973][ T3506] hub 9-0:1.0: 8 ports detected
[   40.559377][ T3506] SELinux:  policydb string SE Linu does not match my string SE Linux
[   40.567787][ T3506] SELinux: failed to load policy
[   40.962681][ T3499] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   41.102948][ T3495] syz.0.8 (3495) used greatest stack depth: 10408 bytes left
[   41.129590][ T3513] program syz.1.10 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   41.141348][ T3513] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[   41.155490][ T3515] loop3: detected capacity change from 0 to 512
[   41.173160][ T3515] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm +}[@: error while reading EA inode 32 err=-116
[   41.185219][ T3511] loop0: detected capacity change from 0 to 164
[   41.185361][ T3515] EXT4-fs (loop3): 1 orphan inode deleted
[   41.198711][ T3515] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   41.222830][ T3515] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.254387][ T3515] loop3: detected capacity change from 0 to 1024
[   41.263105][ T3515] =======================================================
[   41.263105][ T3515] WARNING: The mand mount option has been deprecated and
[   41.263105][ T3515]          and is ignored by this kernel. Remove the mand
[   41.263105][ T3515]          option from the mount to silence this warning.
[   41.263105][ T3515] =======================================================
[   41.301490][ T3521] netlink: 14 bytes leftover after parsing attributes in process `syz.1.10'.
[   41.311079][ T3521] hsr_slave_0: left promiscuous mode
[   41.316910][ T3521] hsr_slave_1: left promiscuous mode
[   41.329463][ T3520] lo speed is unknown, defaulting to 1000
[   41.337747][ T3515] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   41.339207][ T3520] lo speed is unknown, defaulting to 1000
[   41.357560][ T3520] lo speed is unknown, defaulting to 1000
[   41.364428][ T3520] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   41.365754][ T3513] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10'.
[   41.372850][ T3520] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   41.389260][ T3524] loop0: detected capacity change from 0 to 164
[   41.391534][ T3520] lo speed is unknown, defaulting to 1000
[   41.401794][ T3520] lo speed is unknown, defaulting to 1000
[   41.407802][ T3515] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt.
[   41.407997][ T3520] lo speed is unknown, defaulting to 1000
[   41.428805][ T3520] lo speed is unknown, defaulting to 1000
[   41.435304][ T3520] lo speed is unknown, defaulting to 1000
[   41.496323][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.496703][ T3527] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   41.523421][ T3499] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   41.719829][ T3595] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17'.
[   41.754961][ T3499] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   42.044137][ T3565] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   42.059767][ T3565] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   42.474624][ T3565] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   42.482972][ T3565] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   42.654272][ T3607] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20'.
[   42.658208][ T3611] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21'.
[   42.733090][ T3621] netlink: 4 bytes leftover after parsing attributes in process `syz.3.24'.
[   42.741915][ T3620] netlink: 132 bytes leftover after parsing attributes in process `syz.4.25'.
[   42.803414][ T3624] loop3: detected capacity change from 0 to 8192
[   42.822105][ T3624] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   42.864423][ T3625] loop0: detected capacity change from 0 to 2048
[   42.877719][ T3624] Zero length message leads to an empty skb
[   42.900450][ T3629] sctp: [Deprecated]: syz.4.28 (pid 3629) Use of int in maxseg socket option.
[   42.900450][ T3629] Use struct sctp_assoc_value instead
[   42.916624][ T3627] loop1: detected capacity change from 0 to 2048
[   42.923984][ T3627] EXT4-fs: Ignoring removed i_version option
[   42.930625][ T3298]  loop0: p1 < > p4
[   42.935094][ T3298] loop0: p4 size 8388608 extends beyond EOD, truncated
[   42.944166][ T3625]  loop0: p1 < > p4
[   42.948635][ T3625] loop0: p4 size 8388608 extends beyond EOD, truncated
[   42.960070][    C1] hrtimer: interrupt took 27182 ns
[   42.968444][ T3627] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   43.123904][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.169462][ T3637] loop1: detected capacity change from 0 to 512
[   43.178855][ T3637] EXT4-fs (loop1): external journal device major/minor numbers have changed
[   43.223509][ T3637] EXT4-fs (loop1): failed to open journal device unknown-block(4,3) -6
[   43.429261][ T3648] syz.1.32 uses obsolete (PF_INET,SOCK_PACKET)
[   43.520198][ T3651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   43.553421][ T3651] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   43.594815][ T2995]  loop0: p1 < > p4
[   43.599392][ T2995] loop0: p4 size 8388608 extends beyond EOD, truncated
[   43.683300][ T3527] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   43.708301][ T3654] loop3: detected capacity change from 0 to 8192
[   43.718347][ T3656] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   43.753563][ T3527] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   43.790134][ T3656] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   43.810863][ T3661] loop4: detected capacity change from 0 to 512
[   43.822498][ T3661] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   43.823199][ T3527] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   43.846704][ T3661] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   43.872961][ T3656] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   43.896517][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.906124][ T3548] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   43.927674][ T3656] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   43.948750][ T3548] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   43.963215][ T3548] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   43.971650][ T3548] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   43.987967][ T3548] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   44.009482][ T3670] loop4: detected capacity change from 0 to 512
[   44.012123][ T3548] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   44.025386][ T3548] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   44.028689][ T3670] EXT4-fs: Ignoring removed mblk_io_submit option
[   44.033805][ T3548] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   44.048950][ T3670] EXT4-fs: Ignoring removed nomblk_io_submit option
[   44.056370][ T3670] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   44.064928][ T3670] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[   44.081489][ T3670] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.40: Allocating blocks 41-42 which overlap fs metadata
[   44.098242][ T3670] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.40: Allocating blocks 41-42 which overlap fs metadata
[   44.112397][ T3670] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.40: Failed to acquire dquot type 1
[   44.128171][ T3671] loop2: detected capacity change from 0 to 2048
[   44.136171][ T3670] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[   44.151067][ T3670] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #12: comm syz.4.40: corrupted inode contents
[   44.162994][ T3670] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #12: comm syz.4.40: mark_inode_dirty error
[   44.175169][ T3670] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #12: comm syz.4.40: corrupted inode contents
[   44.180528][ T3300]  loop2: p1 < > p4
[   44.188031][ T3670] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #12: comm syz.4.40: mark_inode_dirty error
[   44.205973][ T3670] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #12: comm syz.4.40: corrupted inode contents
[   44.209948][ T3300] loop2: p4 size 8388608 extends beyond EOD, truncated
[   44.218431][ T3670] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem
[   44.240141][ T3671]  loop2: p1 < > p4
[   44.245717][ T3671] loop2: p4 size 8388608 extends beyond EOD, truncated
[   44.253718][ T3670] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #12: comm syz.4.40: corrupted inode contents
[   44.269407][ T3670] EXT4-fs error (device loop4): ext4_truncate:4666: inode #12: comm syz.4.40: mark_inode_dirty error
[   44.272429][ T2995]  loop2: p1 < > p4
[   44.284773][ T2995] loop2: p4 size 8388608 extends beyond EOD, truncated
[   44.292077][ T3670] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem
[   44.314636][ T3670] EXT4-fs (loop4): 1 truncate cleaned up
[   44.328872][ T3670] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   44.380591][ T3683] program gtp is using a deprecated SCSI ioctl, please convert it to SG_IO
[   44.392113][ T3683] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[   44.408162][ T3670] ext4: Unknown parameter '#`êYï
²_)ÊûŒ/Ü«1@'
[   44.411043][   T29] kauditd_printk_skb: 152 callbacks suppressed
[   44.411061][   T29] audit: type=1400 audit(1758376266.923:239): avc:  denied  { remount } for  pid=3669 comm="syz.4.40" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   44.481000][ T3670] syz.4.40 (3670) used greatest stack depth: 9488 bytes left
[   44.491165][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.536249][ T3688] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3688 comm=syz.4.45
[   44.544226][   T29] audit: type=1400 audit(1758376267.043:240): avc:  denied  { read } for  pid=3687 comm="syz.4.45" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   44.551940][ T3683] hsr_slave_0: left promiscuous mode
[   44.571406][   T29] audit: type=1400 audit(1758376267.043:241): avc:  denied  { open } for  pid=3687 comm="syz.4.45" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   44.571441][   T29] audit: type=1400 audit(1758376267.053:242): avc:  denied  { ioctl } for  pid=3687 comm="syz.4.45" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   44.643723][ T3683] hsr_slave_1: left promiscuous mode
[   44.782890][ T3690] __nla_validate_parse: 5 callbacks suppressed
[   44.782907][ T3690] netlink: 3 bytes leftover after parsing attributes in process `syz.3.46'.
[   44.804308][ T3690] batadv1: entered promiscuous mode
[   44.809582][ T3690] batadv1: entered allmulticast mode
[   44.833334][ T3681] Set syz1 is full, maxelem 65536 reached
[   44.941145][ T3695] loop1: detected capacity change from 0 to 1024
[   44.979360][ T3695] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   45.012259][   T29] audit: type=1400 audit(1758376267.523:243): avc:  denied  { create } for  pid=3700 comm="syz.0.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   45.034702][   T29] audit: type=1400 audit(1758376267.553:244): avc:  denied  { bind } for  pid=3700 comm="syz.0.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   45.061302][ T3697] loop2: detected capacity change from 0 to 8192
[   45.071149][ T3695] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #3: block 1: comm syz.1.48: lblock 1 mapped to illegal pblock 1 (length 1)
[   45.108568][ T3695] Quota error (device loop1): write_blk: dquota write failed
[   45.116039][ T3695] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[   45.126381][ T3695] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.48: Failed to acquire dquot type 0
[   45.146507][ T3695] EXT4-fs error (device loop1): ext4_free_blocks:6696: comm syz.1.48: Freeing blocks not in datazone - block = 0, count = 4096
[   45.160857][ T3695] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.48: Invalid inode bitmap blk 0 in block_group 0
[   45.174602][ T3695] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem
[   45.183464][ T3581] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:56: lblock 1 mapped to illegal pblock 1 (length 1)
[   45.209406][ T3695] EXT4-fs (loop1): 1 orphan inode deleted
[   45.217184][ T3695] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   45.254473][ T3711] lo speed is unknown, defaulting to 1000
[   45.261758][ T3711] lo speed is unknown, defaulting to 1000
[   45.268043][ T3711] lo speed is unknown, defaulting to 1000
[   45.332162][ T3711] infiniband s
z1: set active
[   45.336893][ T3711] infiniband s
z1: added lo
[   45.345152][   T29] audit: type=1326 audit(1758376267.763:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3694 comm="syz.1.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cd856ec29 code=0x7ffc0000
[   45.368450][   T29] audit: type=1326 audit(1758376267.763:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3694 comm="syz.1.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cd856ec29 code=0x7ffc0000
[   45.393162][ T3414] lo speed is unknown, defaulting to 1000
[   45.462312][ T3711] RDS/IB: s
z1: added
[   45.466440][ T3711] smc: adding ib device s
z1 with port count 1
[   45.472726][ T3711] smc:    ib device s
z1 port 1 has pnetid 
[   45.478990][ T3711] lo speed is unknown, defaulting to 1000
[   45.537904][ T3711] lo speed is unknown, defaulting to 1000
[   45.597638][ T3711] lo speed is unknown, defaulting to 1000
[   45.656273][ T3711] lo speed is unknown, defaulting to 1000
[   45.692557][ T3581] EXT4-fs error (device loop1): ext4_release_dquot:6973: comm kworker/u8:56: Failed to release dquot type 0
[   45.722634][ T3711] lo speed is unknown, defaulting to 1000
[   45.773024][ T3716] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.789970][ T3414] lo speed is unknown, defaulting to 1000
[   45.798411][ T3722] ªªªªªª: renamed from bond0 (while UP)
[   45.866063][ T3725] loop1: detected capacity change from 0 to 512
[   45.883864][ T3725] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   45.897267][ T3725] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   46.021179][ T3732] loop3: detected capacity change from 0 to 2048
[   46.060981][ T3734] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3734 comm=syz.0.56
[   46.094348][ T3732] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #2: comm syz.3.55: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 260(4), depth 0(0)
[   46.151628][ T3732] EXT4-fs (loop3): get root inode failed
[   46.157343][ T3732] EXT4-fs (loop3): mount failed
[   46.264756][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.326568][ T3742] loop1: detected capacity change from 0 to 512
[   46.399429][ T3746] hub 9-0:1.0: USB hub found
[   46.405573][ T3746] hub 9-0:1.0: 8 ports detected
[   46.424057][ T3746] SELinux:  policydb string SE Linu does not match my string SE Linux
[   46.432347][ T3746] SELinux: failed to load policy
[   46.754691][ T3755] mmap: syz.2.61 (3755) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   46.762938][ T3742] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   46.795503][ T3742] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   46.813103][ T3739] Set syz1 is full, maxelem 65536 reached
[   46.923136][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.933017][ T3760] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3760 comm=syz.0.62
[   46.971792][ T3763] bridge_slave_0: left allmulticast mode
[   46.977519][ T3763] bridge_slave_0: left promiscuous mode
[   46.983340][ T3763] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.984647][ T3760] hub 1-0:1.0: USB hub found
[   47.006133][ T3763] bridge_slave_1: left allmulticast mode
[   47.011854][ T3763] bridge_slave_1: left promiscuous mode
[   47.017612][ T3763] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.030704][ T3760] hub 1-0:1.0: 8 ports detected
[   47.039352][ T3767] loop2: detected capacity change from 0 to 512
[   47.047738][ T3761] loop3: detected capacity change from 0 to 8192
[   47.063407][ T3767] EXT4-fs (loop2): revision level too high, forcing read-only mode
[   47.073219][ T3767] EXT4-fs (loop2): orphan cleanup on readonly fs
[   47.085240][ T3763] ªªªªªª: (slave bond_slave_0): Releasing backup interface
[   47.092611][ T3493]  loop3: p1 p2[DM] p4
[   47.096861][ T3493] loop3: p1 size 196608 extends beyond EOD, truncated
[   47.101179][ T3767] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.67: Failed to acquire dquot type 1
[   47.104930][ T3493] loop3: p2 start 4292936063 is beyond EOD, truncated
[   47.121742][ T3493] loop3: p4 size 50331648 extends beyond EOD, truncated
[   47.133312][ T3763] ªªªªªª: (slave bond_slave_1): Releasing backup interface
[   47.139401][ T3761]  loop3: p1 p2[DM] p4
[   47.142135][ T3767] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.67: bg 0: block 40: padding at end of block bitmap is not set
[   47.144872][ T3761] loop3: p1 size 196608 extends beyond EOD, truncated
[   47.171342][ T3761] loop3: p2 start 4292936063 is beyond EOD, truncated
[   47.178220][ T3761] loop3: p4 size 50331648 extends beyond EOD, truncated
[   47.190621][ T3763] team0: Port device team_slave_0 removed
[   47.196216][ T3767] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem
[   47.207081][ T3763] team0: Port device team_slave_1 removed
[   47.216263][ T3763] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   47.223972][ T3763] batman_adv: batadv0: Removing interface: batadv_slave_0
[   47.233901][ T3767] EXT4-fs (loop2): 1 truncate cleaned up
[   47.240734][ T3767] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   47.243384][ T3763] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   47.260768][ T3763] batman_adv: batadv0: Removing interface: batadv_slave_1
[   47.281450][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.360196][ T3783] loop2: detected capacity change from 0 to 2048
[   47.392338][ T3787] bond0: entered promiscuous mode
[   47.397488][ T3787] bond0: entered allmulticast mode
[   47.403232][ T3787] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.414113][ T3415] Process accounting resumed
[   47.419638][ T3787] bond0 (unregistering): Released all slaves
[   47.433664][ T3783] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #2: comm syz.2.71: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 260(4), depth 0(0)
[   47.455800][ T3783] EXT4-fs (loop2): get root inode failed
[   47.461617][ T3783] EXT4-fs (loop2): mount failed
[   47.708289][ T3801] hub 9-0:1.0: USB hub found
[   47.713114][ T3801] hub 9-0:1.0: 8 ports detected
[   47.728159][ T3801] SELinux:  policydb string SE Linu does not match my string SE Linux
[   47.736449][ T3801] SELinux: failed to load policy
[   47.969098][ T3803] loop0: detected capacity change from 0 to 2048
[   48.055212][ T3803] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #2: comm syz.0.75: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 260(4), depth 0(0)
[   48.089320][ T3807] loop1: detected capacity change from 0 to 512
[   48.203522][ T3803] EXT4-fs (loop0): get root inode failed
[   48.209997][ T3803] EXT4-fs (loop0): mount failed
[   48.221902][ T3807] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   48.269802][ T3807] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   48.338442][ T3816] lo speed is unknown, defaulting to 1000
[   48.369817][ T3816] lo speed is unknown, defaulting to 1000
[   48.383887][ T3816] lo speed is unknown, defaulting to 1000
[   48.391534][ T3816] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   48.410336][ T3816] lo speed is unknown, defaulting to 1000
[   48.416538][ T3816] lo speed is unknown, defaulting to 1000
[   48.422900][ T3816] lo speed is unknown, defaulting to 1000
[   48.440315][ T3816] lo speed is unknown, defaulting to 1000
[   48.664901][ T3822] SELinux:  policydb string SE Linu does not match my string SE Linux
[   48.673283][ T3822] SELinux: failed to load policy
[   48.679455][ T3816] lo speed is unknown, defaulting to 1000
[   49.391101][ T3820] loop3: detected capacity change from 0 to 164
[   49.423247][   T29] kauditd_printk_skb: 108 callbacks suppressed
[   49.423264][   T29] audit: type=1400 audit(1758376271.943:352): avc:  denied  { mount } for  pid=3815 comm="syz.3.79" name="/" dev="loop3" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1
[   49.462213][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.573548][ T3832] netlink: 8 bytes leftover after parsing attributes in process `syz.4.82'.
[   49.593225][   T29] audit: type=1400 audit(1758376272.103:353): avc:  denied  { unmount } for  pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1
[   49.701711][ T3837] capability: warning: `syz.4.82' uses deprecated v2 capabilities in a way that may be insecure
[   49.716227][ T3836] netlink: 8 bytes leftover after parsing attributes in process `syz.1.81'.
[   49.725037][   T29] audit: type=1400 audit(1758376272.223:354): avc:  denied  { create } for  pid=3826 comm="syz.4.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   49.744486][   T29] audit: type=1400 audit(1758376272.223:355): avc:  denied  { bind } for  pid=3826 comm="syz.4.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   49.763744][   T29] audit: type=1400 audit(1758376272.223:356): avc:  denied  { listen } for  pid=3826 comm="syz.4.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   49.907862][ T3844] netlink: 8 bytes leftover after parsing attributes in process `syz.1.87'.
[   49.958362][ T3844] netlink: 312 bytes leftover after parsing attributes in process `syz.1.87'.
[   49.967486][ T3844] netlink: 8 bytes leftover after parsing attributes in process `syz.1.87'.
[   50.236570][   T29] audit: type=1400 audit(1758376272.313:357): avc:  denied  { connect } for  pid=3835 comm="syz.1.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   50.256492][   T29] audit: type=1400 audit(1758376272.313:358): avc:  denied  { write } for  pid=3835 comm="syz.1.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   50.275880][   T29] audit: type=1400 audit(1758376272.313:359): avc:  denied  { setopt } for  pid=3835 comm="syz.1.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   50.295292][   T29] audit: type=1400 audit(1758376272.373:360): avc:  denied  { name_connect } for  pid=3838 comm="syz.0.86" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1
[   50.315397][   T29] audit: type=1400 audit(1758376272.423:361): avc:  denied  { name_bind } for  pid=3843 comm="syz.1.87" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[   50.536944][ T3852] loop1: detected capacity change from 0 to 128
[   50.983784][ T3865] netlink: 8 bytes leftover after parsing attributes in process `syz.3.94'.
[   51.023681][ T3865] netlink: 12 bytes leftover after parsing attributes in process `syz.3.94'.
[   51.098726][ T3870] lo speed is unknown, defaulting to 1000
[   51.142374][ T3880] netlink: '+}[@': attribute type 4 has an invalid length.
[   51.161015][ T3881] loop2: detected capacity change from 0 to 164
[   51.163319][ T3880] netlink: '+}[@': attribute type 4 has an invalid length.
[   51.187116][ T3870] lo speed is unknown, defaulting to 1000
[   51.213062][ T3874] siw: device registration error -23
[   51.223825][ T3880] lo speed is unknown, defaulting to 1000
[   51.240029][ T3876] 9pnet: Could not find request transport: rdm
[   51.246360][ T3880] lo speed is unknown, defaulting to 1000
[   51.330943][ T3885] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   51.359565][ T3880] lo speed is unknown, defaulting to 1000
[   51.367322][ T3880] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   51.396157][ T3887] lo speed is unknown, defaulting to 1000
[   51.430734][ T3887] lo speed is unknown, defaulting to 1000
[   51.436926][ T3887] lo speed is unknown, defaulting to 1000
[   51.489063][ T3885] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   51.511111][ T3880] lo speed is unknown, defaulting to 1000
[   51.549006][ T3880] lo speed is unknown, defaulting to 1000
[   51.576059][ T3885] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   51.631863][ T3885] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   51.689823][ T3880] lo speed is unknown, defaulting to 1000
[   51.737292][ T3880] lo speed is unknown, defaulting to 1000
[   51.749550][ T3899] netlink: 4 bytes leftover after parsing attributes in process `syz.0.102'.
[   51.760850][ T3585] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   51.790926][ T3880] lo speed is unknown, defaulting to 1000
[   51.797479][ T3880] lo speed is unknown, defaulting to 1000
[   51.817532][ T3582] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   51.873526][ T3579] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   51.921333][ T3901] FAULT_INJECTION: forcing a failure.
[   51.921333][ T3901] name failslab, interval 1, probability 0, space 0, times 1
[   51.934194][ T3901] CPU: 1 UID: 0 PID: 3901 Comm: syz.2.103 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   51.934219][ T3901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   51.934235][ T3901] Call Trace:
[   51.934244][ T3901]  <TASK>
[   51.934253][ T3901]  __dump_stack+0x1d/0x30
[   51.934335][ T3901]  dump_stack_lvl+0xe8/0x140
[   51.934356][ T3901]  dump_stack+0x15/0x1b
[   51.934446][ T3901]  should_fail_ex+0x265/0x280
[   51.934527][ T3901]  should_failslab+0x8c/0xb0
[   51.934560][ T3901]  __kmalloc_node_track_caller_noprof+0xa4/0x410
[   51.934646][ T3901]  ? vfs_parse_fs_string+0x72/0xe0
[   51.934688][ T3901]  kmemdup_nul+0x36/0xc0
[   51.934722][ T3901]  vfs_parse_fs_string+0x72/0xe0
[   51.934744][ T3901]  do_new_mount+0x188/0x5e0
[   51.934765][ T3901]  ? security_capable+0x83/0x90
[   51.934835][ T3901]  path_mount+0x4a4/0xb20
[   51.934863][ T3901]  ? user_path_at+0x109/0x130
[   51.934944][ T3901]  __se_sys_mount+0x28f/0x2e0
[   51.934967][ T3901]  ? fput+0x8f/0xc0
[   51.935064][ T3901]  __x64_sys_mount+0x67/0x80
[   51.935089][ T3901]  x64_sys_call+0x2b4d/0x2ff0
[   51.935116][ T3901]  do_syscall_64+0xd2/0x200
[   51.935210][ T3901]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   51.935236][ T3901]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   51.935275][ T3901]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   51.935323][ T3901] RIP: 0033:0x7f0706dcec29
[   51.935342][ T3901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   51.935384][ T3901] RSP: 002b:00007f0705837038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[   51.935402][ T3901] RAX: ffffffffffffffda RBX: 00007f0707015fa0 RCX: 00007f0706dcec29
[   51.935435][ T3901] RDX: 00002000000002c0 RSI: 0000200000000280 RDI: 0000200000000100
[   51.935515][ T3901] RBP: 00007f0705837090 R08: 0000200000000300 R09: 0000000000000000
[   51.935530][ T3901] R10: 000000000000008c R11: 0000000000000246 R12: 0000000000000002
[   51.935591][ T3901] R13: 00007f0707016038 R14: 00007f0707015fa0 R15: 00007ffc5fbfb588
[   51.935642][ T3901]  </TASK>
[   52.149456][ T3579] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   52.298163][ T3912] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   52.304881][ T3913] process 'syz.1.108' launched '/dev/fd/3' with NULL argv: empty string added
[   52.361424][ T3912] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   52.424854][ T3922] loop3: detected capacity change from 0 to 512
[   52.452678][ T3912] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   52.480879][ T3924] siw: device registration error -23
[   52.501508][ T3912] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   52.511658][ T3924] loop4: detected capacity change from 0 to 164
[   52.554046][ T3922] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   52.576292][ T3931] loop0: detected capacity change from 0 to 2048
[   52.580013][ T3922] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   52.622309][ T3931] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #2: comm syz.0.114: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 260(4), depth 0(0)
[   52.642444][ T3931] EXT4-fs (loop0): get root inode failed
[   52.648130][ T3931] EXT4-fs (loop0): mount failed
[   52.665725][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.790635][ T3938] loop3: detected capacity change from 0 to 4096
[   52.805219][ T3938] EXT4-fs: Ignoring removed nomblk_io_submit option
[   52.942152][ T3940] hub 9-0:1.0: USB hub found
[   52.946925][ T3940] hub 9-0:1.0: 8 ports detected
[   52.960110][ T3940] SELinux:  policydb string SE Linu does not match my string SE Linux
[   52.968418][ T3940] SELinux: failed to load policy
[   53.251661][ T3938] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   53.285703][ T3944] capability: warning: `syz.1.117' uses 32-bit capabilities (legacy support in use)
[   53.455350][ T3952] loop1: detected capacity change from 0 to 128
[   53.482403][ T3952] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   53.497308][ T3952] ext4 filesystem being mounted at /26/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   53.595131][ T3306] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   53.629926][ T3965] netlink: 28 bytes leftover after parsing attributes in process `syz.0.124'.
[   53.784185][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   53.800354][ T3974] netlink: 'syz.0.127': attribute type 28 has an invalid length.
[   53.808147][ T3974] netlink: 'syz.0.127': attribute type 3 has an invalid length.
[   53.815915][ T3974] netlink: 132 bytes leftover after parsing attributes in process `syz.0.127'.
[   54.102445][ T3979] 9pnet_fd: Insufficient options for proto=fd
[   54.341247][ T3981] SELinux: failed to load policy
[   54.506999][ T3985] loop4: detected capacity change from 0 to 2048
[   54.543186][ T3985] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #2: comm syz.4.130: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 260(4), depth 0(0)
[   54.595352][ T3985] EXT4-fs (loop4): get root inode failed
[   54.601098][ T3985] EXT4-fs (loop4): mount failed
[   54.838953][ T3997] hub 9-0:1.0: USB hub found
[   54.843722][ T3997] hub 9-0:1.0: 8 ports detected
[   54.854393][ T3997] SELinux:  policydb string SE Linu does not match my string SE Linux
[   54.862608][ T3997] SELinux: failed to load policy
[   54.934252][ T3999] loop1: detected capacity change from 0 to 1024
[   54.953842][ T3999] EXT4-fs: Ignoring removed orlov option
[   54.972747][ T3999] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   55.122077][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.170044][ T4005] program gtp is using a deprecated SCSI ioctl, please convert it to SG_IO
[   55.179054][ T4005] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[   55.193450][ T4007] netlink: 28 bytes leftover after parsing attributes in process `syz.0.136'.
[   55.221497][ T4009] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4009 comm=syz.0.137
[   55.297395][ T4005] netlink: 14 bytes leftover after parsing attributes in process `gtp'.
[   55.368274][ T4015] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   55.375648][   T29] kauditd_printk_skb: 230 callbacks suppressed
[   55.375667][   T29] audit: type=1400 audit(1758376277.883:592): avc:  denied  { create } for  pid=4014 comm="syz.1.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   55.406511][   T29] audit: type=1400 audit(1758376277.883:593): avc:  denied  { write } for  pid=4014 comm="syz.1.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   55.426529][   T29] audit: type=1400 audit(1758376277.883:594): avc:  denied  { nlmsg_write } for  pid=4014 comm="syz.1.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   55.450393][   T29] audit: type=1400 audit(1758376277.933:595): avc:  denied  { bind } for  pid=4014 comm="syz.1.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   55.469979][   T29] audit: type=1400 audit(1758376277.933:596): avc:  denied  { name_bind } for  pid=4014 comm="syz.1.139" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[   55.490824][   T29] audit: type=1400 audit(1758376277.933:597): avc:  denied  { node_bind } for  pid=4014 comm="syz.1.139" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[   55.515080][ T4020] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[   55.525822][ T4021] loop4: detected capacity change from 0 to 512
[   55.532673][ T4020] netlink: 92 bytes leftover after parsing attributes in process `syz.4.140'.
[   55.540229][ T4021] EXT4-fs: Ignoring removed nobh option
[   55.541711][   T29] audit: type=1400 audit(1758376278.043:598): avc:  denied  { setopt } for  pid=4017 comm="syz.4.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   55.576885][ T4021] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[   55.588448][ T4021] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it
[   55.598562][ T4021] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.140: Corrupt directory, running e2fsck is recommended
[   55.615581][ T4021] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117
[   55.624079][ T4021] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.140: corrupted in-inode xattr: invalid ea_ino
[   55.637845][ T4021] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.140: couldn't read orphan inode 15 (err -117)
[   55.651133][ T4021] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   55.679637][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.732017][   T29] audit: type=1326 audit(1758376278.253:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4024 comm="syz.4.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcdd0f55be7 code=0x7ffc0000
[   55.755332][   T29] audit: type=1326 audit(1758376278.253:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4024 comm="syz.4.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcdd0efae09 code=0x7ffc0000
[   55.778508][   T29] audit: type=1326 audit(1758376278.253:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4024 comm="syz.4.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcdd0f55be7 code=0x7ffc0000
[   55.828333][ T4029] netlink: 28 bytes leftover after parsing attributes in process `syz.4.144'.
[   55.837343][ T4029] netem: change failed
[   55.852395][ T4029] loop4: detected capacity change from 0 to 512
[   55.873168][ T4029] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   55.886188][ T4029] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   56.078103][ T4035] SELinux: failed to load policy
[   56.182571][ T4029] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[   56.214288][ T4040] netlink: 28 bytes leftover after parsing attributes in process `syz.3.147'.
[   56.226890][ T4029] EXT4-fs (loop4): Remounting filesystem read-only
[   56.274035][ T4042] syzkaller1: entered promiscuous mode
[   56.279596][ T4042] syzkaller1: entered allmulticast mode
[   56.347267][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   56.386606][ T4050] loop4: detected capacity change from 0 to 512
[   56.396380][ T4048] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   56.401670][ T4050] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.151: iget: bad extended attribute block 1
[   56.428407][ T4050] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.151: couldn't read orphan inode 15 (err -117)
[   56.441976][ T4050] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   56.462548][ T4050] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters
[   56.481935][ T4048] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   56.510108][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   56.533485][ T4048] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   56.576313][ T4063] program syz.0.157 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   56.585730][ T4063] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[   56.613175][ T4048] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   56.667168][ T3563] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.678533][ T3563] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.690736][ T3446] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.702985][ T4063] netlink: 14 bytes leftover after parsing attributes in process `syz.0.157'.
[   56.703762][ T3563] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.720207][ T4063] hsr_slave_0: left promiscuous mode
[   56.726118][ T4063] hsr_slave_1: left promiscuous mode
[   56.762895][ T4065] netlink: 12 bytes leftover after parsing attributes in process `syz.0.157'.
[   56.774565][ T4068] netlink: 28 bytes leftover after parsing attributes in process `syz.3.158'.
[   56.799400][ T4070] program syz.3.159 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   56.808869][ T4070] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[   56.925538][ T4070] netlink: 14 bytes leftover after parsing attributes in process `syz.3.159'.
[   56.955484][ T4070] netlink: 12 bytes leftover after parsing attributes in process `syz.3.159'.
[   57.148761][ T4085] syzkaller0: entered allmulticast mode
[   57.228340][ T3555] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.238315][ T3555] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.270148][ T3555] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.305696][ T3555] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.478099][ T4093] bridge_slave_0: left allmulticast mode
[   57.483866][ T4093] bridge_slave_0: left promiscuous mode
[   57.489557][ T4093] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.507812][ T4096] netlink: 'syz.2.168': attribute type 10 has an invalid length.
[   57.519967][ T4093] bridge_slave_1: left allmulticast mode
[   57.525676][ T4093] bridge_slave_1: left promiscuous mode
[   57.531614][ T4093] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.702935][ T4093] bond0: (slave bond_slave_0): Releasing backup interface
[   57.731978][ T4093] bond0: (slave bond_slave_1): Releasing backup interface
[   57.752408][ T4093] team0: Port device team_slave_0 removed
[   57.768550][ T4102] loop4: detected capacity change from 0 to 512
[   57.777838][ T4093] team0: Port device team_slave_1 removed
[   57.794459][ T4093] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   57.802054][ T4093] batman_adv: batadv0: Removing interface: batadv_slave_0
[   57.803780][ T4102] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   57.830551][ T4102] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   57.842723][ T4093] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   57.850262][ T4093] batman_adv: batadv0: Removing interface: batadv_slave_1
[   57.872769][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   57.887714][ T4108] loop1: detected capacity change from 0 to 8192
[   57.895359][ T4096] batman_adv: batadv0: Adding interface: veth1_vlan
[   57.902049][ T4096] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.933241][ T4096] batman_adv: batadv0: Interface activated: veth1_vlan
[   57.941596][ T4083] syzkaller0: left allmulticast mode
[   57.973609][ T4111] siw: device registration error -23
[   57.986718][ T4111] loop0: detected capacity change from 0 to 164
[   58.108508][ T4129] program gtp is using a deprecated SCSI ioctl, please convert it to SG_IO
[   58.118096][ T4129] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[   58.214004][ T4136] bridge0: entered promiscuous mode
[   58.220883][ T4136] macsec1: entered allmulticast mode
[   58.226422][ T4136] bridge0: entered allmulticast mode
[   58.248405][ T4136] bridge0: port 1(macsec1) entered blocking state
[   58.255113][ T4136] bridge0: port 1(macsec1) entered disabled state
[   58.316411][ T4142] loop0: detected capacity change from 0 to 512
[   58.330488][ T4136] bridge0: left allmulticast mode
[   58.335773][ T4136] bridge0: left promiscuous mode
[   58.350088][ T4142] EXT4-fs: Ignoring removed bh option
[   58.366899][ T4142] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[   58.414019][ T4142] EXT4-fs (loop0): 1 truncate cleaned up
[   58.422583][ T4142] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   58.565623][ T4150] loop3: detected capacity change from 0 to 164
[   58.624243][ T4155] FAULT_INJECTION: forcing a failure.
[   58.624243][ T4155] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   58.637485][ T4155] CPU: 0 UID: 0 PID: 4155 Comm: syz.2.189 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   58.637519][ T4155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   58.637544][ T4155] Call Trace:
[   58.637627][ T4155]  <TASK>
[   58.637636][ T4155]  __dump_stack+0x1d/0x30
[   58.637697][ T4155]  dump_stack_lvl+0xe8/0x140
[   58.637773][ T4155]  dump_stack+0x15/0x1b
[   58.637789][ T4155]  should_fail_ex+0x265/0x280
[   58.637822][ T4155]  should_fail+0xb/0x20
[   58.637879][ T4155]  should_fail_usercopy+0x1a/0x20
[   58.637914][ T4155]  _copy_to_user+0x20/0xa0
[   58.637955][ T4155]  simple_read_from_buffer+0xb5/0x130
[   58.637986][ T4155]  proc_fail_nth_read+0x10e/0x150
[   58.638092][ T4155]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   58.638127][ T4155]  vfs_read+0x1a5/0x770
[   58.638181][ T4155]  ? __rcu_read_unlock+0x4f/0x70
[   58.638211][ T4155]  ? __fget_files+0x184/0x1c0
[   58.638241][ T4155]  ksys_read+0xda/0x1a0
[   58.638285][ T4155]  __x64_sys_read+0x40/0x50
[   58.638307][ T4155]  x64_sys_call+0x27bc/0x2ff0
[   58.638344][ T4155]  do_syscall_64+0xd2/0x200
[   58.638384][ T4155]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   58.638465][ T4155]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   58.638505][ T4155]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   58.638547][ T4155] RIP: 0033:0x7f0706dcd63c
[   58.638565][ T4155] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[   58.638588][ T4155] RSP: 002b:00007f0705837030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   58.638611][ T4155] RAX: ffffffffffffffda RBX: 00007f0707015fa0 RCX: 00007f0706dcd63c
[   58.638651][ T4155] RDX: 000000000000000f RSI: 00007f07058370a0 RDI: 0000000000000005
[   58.638667][ T4155] RBP: 00007f0705837090 R08: 0000000000000000 R09: 0000000000000000
[   58.638727][ T4155] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001
[   58.638744][ T4155] R13: 00007f0707016038 R14: 00007f0707015fa0 R15: 00007ffc5fbfb588
[   58.638762][ T4155]  </TASK>
[   59.007070][ T4163] loop3: detected capacity change from 0 to 1024
[   59.194047][ T4172] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4172 comm=syz.3.193
[   59.276060][ T4174] loop4: detected capacity change from 0 to 1024
[   59.304551][ T4174] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   59.346626][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   59.500324][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   59.556927][ T4187] vcan0: tx drop: invalid sa for name 0x0000000000000001
[   59.746553][ T4192] loop0: detected capacity change from 0 to 2048
[   59.760831][ T4194] loop2: detected capacity change from 0 to 512
[   59.772782][ T4192] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #2: comm syz.0.202: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 260(4), depth 0(0)
[   59.792526][ T4192] EXT4-fs (loop0): get root inode failed
[   59.798261][ T4192] EXT4-fs (loop0): mount failed
[   59.808530][ T4194] EXT4-fs (loop2): too many log groups per flexible block group
[   59.816370][ T4194] EXT4-fs (loop2): failed to initialize mballoc (-12)
[   59.826570][ T4194] EXT4-fs (loop2): mount failed
[   59.838531][ T4194] loop2: detected capacity change from 0 to 512
[   59.850358][ T4194] EXT4-fs: Ignoring removed nobh option
[   59.883776][ T4200] loop1: detected capacity change from 0 to 8192
[   59.920919][ T4194] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   59.946311][ T4200] FAULT_INJECTION: forcing a failure.
[   59.946311][ T4200] name failslab, interval 1, probability 0, space 0, times 0
[   59.959102][ T4200] CPU: 1 UID: 0 PID: 4200 Comm: syz.1.204 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   59.959133][ T4200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   59.959145][ T4200] Call Trace:
[   59.959151][ T4200]  <TASK>
[   59.959159][ T4200]  __dump_stack+0x1d/0x30
[   59.959207][ T4200]  dump_stack_lvl+0xe8/0x140
[   59.959227][ T4200]  dump_stack+0x15/0x1b
[   59.959248][ T4200]  should_fail_ex+0x265/0x280
[   59.959335][ T4200]  should_failslab+0x8c/0xb0
[   59.959368][ T4200]  kmem_cache_alloc_node_noprof+0x57/0x320
[   59.959486][ T4200]  ? dup_task_struct+0x70/0x6a0
[   59.959560][ T4200]  dup_task_struct+0x70/0x6a0
[   59.959592][ T4200]  copy_process+0x399/0x2000
[   59.959621][ T4200]  ? alloc_pages_mpol+0x201/0x250
[   59.959668][ T4200]  ? __pfx_io_sq_thread+0x10/0x10
[   59.959737][ T4200]  create_io_thread+0x93/0xc0
[   59.959838][ T4200]  ? __pfx_io_sq_thread+0x10/0x10
[   59.959878][ T4200]  io_sq_offload_create+0x652/0x850
[   59.959914][ T4200]  io_uring_create+0x42e/0x610
[   59.959964][ T4200]  __se_sys_io_uring_setup+0x1f7/0x210
[   59.960005][ T4200]  __x64_sys_io_uring_setup+0x31/0x40
[   59.960031][ T4200]  x64_sys_call+0x2b21/0x2ff0
[   59.960052][ T4200]  do_syscall_64+0xd2/0x200
[   59.960143][ T4200]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   59.960171][ T4200]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   59.960214][ T4200]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   59.960242][ T4200] RIP: 0033:0x7f9cd856ec29
[   59.960261][ T4200] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   59.960296][ T4200] RSP: 002b:00007f9cd6fcefc8 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[   59.960314][ T4200] RAX: ffffffffffffffda RBX: 00007f9cd87b5fa0 RCX: 00007f9cd856ec29
[   59.960367][ T4200] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000111
[   59.960381][ T4200] RBP: 0000200000000340 R08: 0000000000000000 R09: 0000000000000000
[   59.960396][ T4200] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002
[   59.960473][ T4200] R13: 0000000000000000 R14: 0000000000000111 R15: 0000000000000000
[   59.960499][ T4200]  </TASK>
[   60.225081][ T4205] loop3: detected capacity change from 0 to 164
[   60.242721][ T4206] hub 9-0:1.0: USB hub found
[   60.247576][ T4206] hub 9-0:1.0: 8 ports detected
[   60.258258][ T4206] SELinux:  policydb string SE Linu does not match my string SE Linux
[   60.266529][ T4206] SELinux: failed to load policy
[   60.369064][ T4194] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.203: corrupted inode contents
[   60.511109][ T4194] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #3: comm syz.2.203: mark_inode_dirty error
[   60.613538][ T4194] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.203: corrupted inode contents
[   60.627951][ T4213] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.649835][   T29] kauditd_printk_skb: 215 callbacks suppressed
[   60.649853][   T29] audit: type=1400 audit(1758376283.153:815): avc:  denied  { validate_trans } for  pid=4208 comm="syz.3.206" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[   60.684257][ T4194] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.203: mark_inode_dirty error
[   60.722545][ T4194] Quota error (device loop2): write_blk: dquota write failed
[   60.724208][   T29] audit: type=1400 audit(1758376283.193:816): avc:  denied  { write } for  pid=4211 comm="syz.4.208" name="ptype" dev="proc" ino=4026532433 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[   60.757063][ T4213] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.779176][ T4194] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[   60.789195][ T4194] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.203: Failed to acquire dquot type 0
[   60.812715][ T4220] loop0: detected capacity change from 0 to 512
[   60.813514][ T4194] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.203: corrupted inode contents
[   60.838527][ T4213] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.849271][ T4220] EXT4-fs: Ignoring removed bh option
[   60.854885][ T4194] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #16: comm syz.2.203: mark_inode_dirty error
[   60.866902][ T4194] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.203: corrupted inode contents
[   60.878926][ T4220] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[   60.887701][ T4194] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.203: mark_inode_dirty error
[   60.900399][ T4220] EXT4-fs (loop0): 1 truncate cleaned up
[   60.900870][ T4194] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.203: corrupted inode contents
[   60.906671][ T4220] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   60.930875][ T4194] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem
[   60.944631][ T4194] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.203: corrupted inode contents
[   60.968424][ T4213] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.979094][ T4194] EXT4-fs error (device loop2): ext4_truncate:4666: inode #16: comm syz.2.203: mark_inode_dirty error
[   60.998989][ T4194] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem
[   61.008877][   T29] audit: type=1326 audit(1758376283.513:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4228 comm="syz.3.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0474d9ec29 code=0x7ffc0000
[   61.032199][   T29] audit: type=1326 audit(1758376283.513:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4228 comm="syz.3.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0474d9ec29 code=0x7ffc0000
[   61.057931][ T4194] EXT4-fs (loop2): 1 truncate cleaned up
[   61.058304][ T4194] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   61.058441][ T4194] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   61.063158][ T4194] __nla_validate_parse: 13 callbacks suppressed
[   61.063174][ T4194] netlink: 4 bytes leftover after parsing attributes in process `syz.2.203'.
[   61.063190][ T4194] batman_adv: batadv0: Interface deactivated: veth1_vlan
[   61.063205][ T4194] batman_adv: batadv0: Removing interface: veth1_vlan
[   61.089369][   T29] audit: type=1326 audit(1758376283.563:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4228 comm="syz.3.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0474d9ec29 code=0x7ffc0000
[   61.089442][   T29] audit: type=1326 audit(1758376283.563:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4228 comm="syz.3.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0474d9ec29 code=0x7ffc0000
[   61.089467][   T29] audit: type=1326 audit(1758376283.563:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4228 comm="syz.3.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0474d9ec29 code=0x7ffc0000
[   61.089498][   T29] audit: type=1326 audit(1758376283.563:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4228 comm="syz.3.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0474d9ec29 code=0x7ffc0000
[   61.264756][ T1951] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   61.265089][ T1951] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   61.265358][ T1951] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   61.265578][ T1951] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   61.372152][ T4240] loop1: detected capacity change from 0 to 164
[   61.426192][ T4242] netlink: 'syz.1.217': attribute type 13 has an invalid length.
[   61.501042][ T4242] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.508577][ T4242] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.557869][ T4242] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   61.570997][ T4242] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   61.620525][ T1035] lo speed is unknown, defaulting to 1000
[   61.626315][ T1035] syz0: Port: 1 Link DOWN
[   61.631715][ T3587] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   61.656330][ T3587] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   61.665294][ T3587] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   61.673849][ T3587] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   61.704595][ T4245] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4245 comm=syz.1.218
[   61.842047][ T4252] loop4: detected capacity change from 0 to 512
[   61.876831][ T4250] loop1: detected capacity change from 0 to 2048
[   61.891804][ T4252] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   61.917564][ T4252] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   61.928976][ T4250] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #2: comm syz.1.220: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 260(4), depth 0(0)
[   61.961226][ T4250] EXT4-fs (loop1): get root inode failed
[   61.966918][ T4250] EXT4-fs (loop1): mount failed
[   61.987485][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   62.063504][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   62.098430][ T4263] loop4: detected capacity change from 0 to 512
[   62.109408][ T4263] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   62.138493][ T4263] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   62.179622][ T4266] hub 9-0:1.0: USB hub found
[   62.188652][ T4266] hub 9-0:1.0: 8 ports detected
[   62.202385][ T4266] SELinux:  policydb string SE Linu does not match my string SE Linux
[   62.210744][ T4266] SELinux: failed to load policy
[   62.304136][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   62.573282][ T4270] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.617125][ T4272] loop3: detected capacity change from 0 to 164
[   62.631441][ T4270] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.737065][ T4270] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.802569][ T4270] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.881071][ T3543] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.897328][ T3577] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.927879][ T3577] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.937309][ T3577] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.978399][ T4292] loop4: detected capacity change from 0 to 512
[   62.985547][ T4292] EXT4-fs: Ignoring removed bh option
[   62.992255][ T4292] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[   63.004916][ T4292] EXT4-fs (loop4): 1 truncate cleaned up
[   63.016255][ T4292] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   63.056731][ T4298] loop1: detected capacity change from 0 to 512
[   63.075492][ T4296] netlink: 28 bytes leftover after parsing attributes in process `syz.0.236'.
[   63.115730][ T4301] siw: device registration error -23
[   63.124556][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   63.149821][ T4301] loop0: detected capacity change from 0 to 164
[   63.205402][ T4298] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   63.223278][ T4298] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   63.243099][ T4302] lo speed is unknown, defaulting to 1000
[   63.262683][ T4308] netlink: 4 bytes leftover after parsing attributes in process `syz.0.240'.
[   63.279632][ T4304] netlink: 4 bytes leftover after parsing attributes in process `syz.2.238'.
[   63.291367][ T4304] bridge0: entered promiscuous mode
[   63.296618][ T4304] macsec1: entered allmulticast mode
[   63.302032][ T4304] bridge0: entered allmulticast mode
[   63.308529][ T4304] bridge0: port 1(macsec1) entered blocking state
[   63.311971][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   63.315126][ T4304] bridge0: port 1(macsec1) entered disabled state
[   63.357097][ T4304] bridge0: left allmulticast mode
[   63.362274][ T4304] bridge0: left promiscuous mode
[   63.374102][ T4302] lo speed is unknown, defaulting to 1000
[   63.380444][ T4302] lo speed is unknown, defaulting to 1000
[   63.485393][ T4318] program syz.0.243 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   63.526453][ T4321] netlink: 'syz.2.244': attribute type 1 has an invalid length.
[   63.535567][ T4316] loop1: detected capacity change from 0 to 4096
[   63.546836][ T4316] EXT4-fs: Ignoring removed nomblk_io_submit option
[   63.556290][ T4321] 8021q: adding VLAN 0 to HW filter on device bond1
[   63.566679][ T4321] netlink: 4 bytes leftover after parsing attributes in process `syz.2.244'.
[   63.589248][ T4321] bond1 (unregistering): Released all slaves
[   63.622107][ T4318] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[   63.642138][ T4316] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   63.714818][ T4328] syzkaller1: entered promiscuous mode
[   63.720440][ T4328] syzkaller1: entered allmulticast mode
[   63.736500][ T4318] netlink: 14 bytes leftover after parsing attributes in process `syz.0.243'.
[   63.779109][ T4318] netlink: 12 bytes leftover after parsing attributes in process `syz.0.243'.
[   63.905344][ T4333] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.970726][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   63.984676][ T4333] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.056168][ T4340] siw: device registration error -23
[   64.064241][ T4340] loop0: detected capacity change from 0 to 164
[   64.071744][ T4333] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.118021][ T4348] netlink: 4 bytes leftover after parsing attributes in process `syz.0.253'.
[   64.175606][ T4333] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.217571][ T4355] loop1: detected capacity change from 0 to 512
[   64.248780][ T4355] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   64.277864][ T4355] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   64.314801][ T3554] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.323202][ T4355] EXT4-fs (loop1): 1 truncate cleaned up
[   64.334759][ T4355] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   64.375995][ T3554] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.404329][ T3554] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.419852][ T3554] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.448581][ T4360] loop3: detected capacity change from 0 to 512
[   64.462811][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   64.484034][ T4360] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   64.520618][ T4360] EXT4-fs (loop3): 1 truncate cleaned up
[   64.532763][ T4360] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   64.636190][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   64.651983][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   64.814573][ T4376] siw: device registration error -23
[   64.835244][ T4376] loop4: detected capacity change from 0 to 164
[   65.021139][ T4382] netlink: 4 bytes leftover after parsing attributes in process `syz.4.266'.
[   65.045662][ T4369] netlink: 56 bytes leftover after parsing attributes in process `syz.3.261'.
[   65.095499][ T4386] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.162543][ T4386] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.201659][ T4395] FAULT_INJECTION: forcing a failure.
[   65.201659][ T4395] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[   65.215162][ T4395] CPU: 1 UID: 0 PID: 4395 Comm: syz.4.271 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   65.215192][ T4395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   65.215253][ T4395] Call Trace:
[   65.215260][ T4395]  <TASK>
[   65.215269][ T4395]  __dump_stack+0x1d/0x30
[   65.215290][ T4395]  dump_stack_lvl+0xe8/0x140
[   65.215315][ T4395]  dump_stack+0x15/0x1b
[   65.215335][ T4395]  should_fail_ex+0x265/0x280
[   65.215366][ T4395]  should_fail_alloc_page+0xf2/0x100
[   65.215404][ T4395]  __alloc_frozen_pages_noprof+0xff/0x360
[   65.215457][ T4395]  alloc_pages_mpol+0xb3/0x250
[   65.215562][ T4395]  alloc_migration_target_by_mpol+0x11b/0x280
[   65.215692][ T4395]  migrate_pages_batch+0x306/0x1ae0
[   65.215728][ T4395]  ? __pfx_alloc_migration_target_by_mpol+0x10/0x10
[   65.215757][ T4395]  ? __pfx_remove_migration_pte+0x10/0x10
[   65.215793][ T4395]  migrate_pages+0x1249/0x1770
[   65.215831][ T4395]  ? __pfx_alloc_migration_target_by_mpol+0x10/0x10
[   65.215900][ T4395]  __se_sys_mbind+0x975/0xac0
[   65.215944][ T4395]  __x64_sys_mbind+0x78/0x90
[   65.216008][ T4395]  x64_sys_call+0x2932/0x2ff0
[   65.216077][ T4395]  do_syscall_64+0xd2/0x200
[   65.216112][ T4395]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   65.216142][ T4395]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   65.216211][ T4395]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   65.216259][ T4395] RIP: 0033:0x7fcdd0f5ec29
[   65.216278][ T4395] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   65.216359][ T4395] RSP: 002b:00007fcdcf9bf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed
[   65.216381][ T4395] RAX: ffffffffffffffda RBX: 00007fcdd11a5fa0 RCX: 00007fcdd0f5ec29
[   65.216397][ T4395] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: 0000200000000000
[   65.216412][ T4395] RBP: 00007fcdcf9bf090 R08: f4ffffffffffffff R09: 0000000000000002
[   65.216427][ T4395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   65.216476][ T4395] R13: 00007fcdd11a6038 R14: 00007fcdd11a5fa0 R15: 00007ffd7a2d3b48
[   65.216504][ T4395]  </TASK>
[   65.227583][ T4391] infiniband syz!: set down
[   65.431385][ T4391] infiniband syz!: added team_slave_0
[   65.454176][ T4386] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.457104][ T4391] RDS/IB: syz!: added
[   65.468359][ T4391] smc: adding ib device syz! with port count 1
[   65.474581][ T4391] smc:    ib device syz! port 1 has pnetid 
[   65.484066][ T4398] loop4: detected capacity change from 0 to 512
[   65.523100][ T4386] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.641744][ T3566] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.670941][ T3566] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.694781][ T3541] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.713212][ T3541] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.746295][ T4410] loop4: detected capacity change from 0 to 164
[   65.768706][ T4409] siw: device registration error -23
[   65.801258][ T4412] loop0: detected capacity change from 0 to 2048
[   65.814483][ T4414] loop2: detected capacity change from 0 to 1024
[   65.829157][ T4414] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   65.840196][ T4414] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[   65.852123][ T4414] JBD2: no valid journal superblock found
[   65.858117][ T4414] EXT4-fs (loop2): Could not load journal inode
[   65.877914][ T4414] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   65.907571][ T4412] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #2: comm syz.0.277: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 260(4), depth 0(0)
[   65.931908][ T4412] EXT4-fs (loop0): get root inode failed
[   65.937867][ T4412] EXT4-fs (loop0): mount failed
[   65.972623][   T29] kauditd_printk_skb: 236 callbacks suppressed
[   65.972684][   T29] audit: type=1400 audit(1758376288.493:1059): avc:  denied  { mounton } for  pid=4421 comm="syz.4.281" path="/proc/161/task" dev="proc" ino=8987 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[   66.080628][ T4430] program syz.2.283 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   66.100020][ T4430] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[   66.178757][ T4435] hub 9-0:1.0: USB hub found
[   66.183873][ T4435] hub 9-0:1.0: 8 ports detected
[   66.200247][ T4435] SELinux:  policydb string SE Linu does not match my string SE Linux
[   66.209307][ T4435] SELinux: failed to load policy
[   66.269198][ T4437] __nla_validate_parse: 2 callbacks suppressed
[   66.269240][ T4437] netlink: 14 bytes leftover after parsing attributes in process `syz.2.283'.
[   66.304042][ T4436] netlink: 12 bytes leftover after parsing attributes in process `syz.2.283'.
[   66.367828][ T4439] gretap0: entered promiscuous mode
[   66.570204][   T29] audit: type=1400 audit(1758376288.993:1060): avc:  denied  { watch watch_reads } for  pid=4438 comm="syz.3.285" path="/proc/173" dev="proc" ino=8039 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[   66.652254][ T4444] FAULT_INJECTION: forcing a failure.
[   66.652254][ T4444] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[   66.665671][ T4444] CPU: 0 UID: 0 PID: 4444 Comm: syz.1.286 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   66.665781][ T4444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   66.665793][ T4444] Call Trace:
[   66.665800][ T4444]  <TASK>
[   66.665808][ T4444]  __dump_stack+0x1d/0x30
[   66.665905][ T4444]  dump_stack_lvl+0xe8/0x140
[   66.665926][ T4444]  dump_stack+0x15/0x1b
[   66.665972][ T4444]  should_fail_ex+0x265/0x280
[   66.666025][ T4444]  should_fail_alloc_page+0xf2/0x100
[   66.666058][ T4444]  __alloc_frozen_pages_noprof+0xff/0x360
[   66.666136][ T4444]  __alloc_pages_noprof+0x9/0x20
[   66.666183][ T4444]  probe_event_enable+0x50d/0x7d0
[   66.666263][ T4444]  ? __pfx_uprobe_perf_filter+0x10/0x10
[   66.666290][ T4444]  trace_uprobe_register+0x86/0x3c0
[   66.666324][ T4444]  perf_trace_event_init+0x35c/0x7b0
[   66.666362][ T4444]  perf_uprobe_init+0xf9/0x150
[   66.666485][ T4444]  perf_uprobe_event_init+0xc4/0x140
[   66.666584][ T4444]  perf_try_init_event+0xd9/0x540
[   66.666621][ T4444]  ? perf_event_alloc+0xb1c/0x1740
[   66.666655][ T4444]  perf_event_alloc+0xb27/0x1740
[   66.666699][ T4444]  __se_sys_perf_event_open+0x615/0x11c0
[   66.666739][ T4444]  ? __rcu_read_unlock+0x4f/0x70
[   66.666825][ T4444]  __x64_sys_perf_event_open+0x67/0x80
[   66.666865][ T4444]  x64_sys_call+0x7bd/0x2ff0
[   66.666886][ T4444]  do_syscall_64+0xd2/0x200
[   66.666922][ T4444]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   66.667077][ T4444]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   66.667116][ T4444]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   66.667229][ T4444] RIP: 0033:0x7f9cd856ec29
[   66.667248][ T4444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   66.667270][ T4444] RSP: 002b:00007f9cd6fcf038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
[   66.667294][ T4444] RAX: ffffffffffffffda RBX: 00007f9cd87b5fa0 RCX: 00007f9cd856ec29
[   66.667309][ T4444] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000
[   66.667364][ T4444] RBP: 00007f9cd6fcf090 R08: 0000000000000000 R09: 0000000000000000
[   66.667378][ T4444] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002
[   66.667389][ T4444] R13: 00007f9cd87b6038 R14: 00007f9cd87b5fa0 R15: 00007fff26e087c8
[   66.667484][ T4444]  </TASK>
[   66.908431][ T4446] program gtp is using a deprecated SCSI ioctl, please convert it to SG_IO
[   66.917515][ T4446] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[   66.966422][ T4448] loop4: detected capacity change from 0 to 128
[   66.987978][ T4453] vhci_hcd: default hub control req: 8013 v0000 i0000 l31125
[   66.996480][ T4446] netlink: 14 bytes leftover after parsing attributes in process `gtp'.
[   67.005615][   T29] audit: type=1400 audit(1758376289.523:1061): avc:  denied  { watch watch_reads } for  pid=4451 comm="syz.0.290" path="/60" dev="tmpfs" ino=333 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   67.029427][ T4455] netlink: 4 bytes leftover after parsing attributes in process `syz.2.291'.
[   67.105472][ T4461] netlink: 276 bytes leftover after parsing attributes in process `syz.4.292'.
[   67.114788][ T4461] netlink: 8 bytes leftover after parsing attributes in process `syz.4.292'.
[   67.123690][ T4461] netlink: 'syz.4.292': attribute type 30 has an invalid length.
[   67.144102][ T4466] loop3: detected capacity change from 0 to 164
[   67.145867][ T4467] netlink: 16 bytes leftover after parsing attributes in process `syz.0.296'.
[   67.150581][   T29] audit: type=1400 audit(1758376289.663:1062): avc:  denied  { write } for  pid=4463 comm="syz.0.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   67.196456][   T51] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   67.199497][   T29] audit: type=1400 audit(1758376289.703:1063): avc:  granted  { setsecparam } for  pid=4457 comm="syz.4.292" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security
[   67.223916][   T29] audit: type=1400 audit(1758376289.703:1064): avc:  denied  { bind } for  pid=4457 comm="syz.4.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[   67.255455][ T4470] loop1: detected capacity change from 0 to 512
[   67.267635][ T3532] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   67.278437][   T29] audit: type=1400 audit(1758376289.803:1065): avc:  denied  { cpu } for  pid=4463 comm="syz.0.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[   67.343299][ T3582] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   67.352719][ T3582] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   67.357800][ T4474] loop3: detected capacity change from 0 to 512
[   67.371479][ T4474] EXT4-fs: Mount option(s) incompatible with ext2
[   67.379046][ T4470] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   67.394282][ T4470] ext4 filesystem being mounted at /63/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   67.404617][ T4467] loop0: detected capacity change from 0 to 1024
[   67.404769][   T29] audit: type=1400 audit(1758376289.913:1066): avc:  denied  { read } for  pid=4476 comm="syz.4.300" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   67.435867][ T4474] FAULT_INJECTION: forcing a failure.
[   67.435867][ T4474] name failslab, interval 1, probability 0, space 0, times 0
[   67.448646][ T4474] CPU: 0 UID: 0 PID: 4474 Comm: wÞ¡ÿ Not tainted syzkaller #0 PREEMPT(voluntary) 
[   67.448701][ T4474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   67.448713][ T4474] Call Trace:
[   67.448719][ T4474]  <TASK>
[   67.448727][ T4474]  __dump_stack+0x1d/0x30
[   67.448752][ T4474]  dump_stack_lvl+0xe8/0x140
[   67.448775][ T4474]  dump_stack+0x15/0x1b
[   67.448794][ T4474]  should_fail_ex+0x265/0x280
[   67.448871][ T4474]  should_failslab+0x8c/0xb0
[   67.448899][ T4474]  kmem_cache_alloc_noprof+0x50/0x310
[   67.448969][ T4474]  ? getname_flags+0x80/0x3b0
[   67.449010][ T4474]  getname_flags+0x80/0x3b0
[   67.449041][ T4474]  user_path_at+0x28/0x130
[   67.449082][ T4474]  __se_sys_mount+0x25b/0x2e0
[   67.449111][ T4474]  ? do_mkdirat+0x3ac/0x3f0
[   67.449139][ T4474]  __x64_sys_mount+0x67/0x80
[   67.449231][ T4474]  x64_sys_call+0x2b4d/0x2ff0
[   67.449259][ T4474]  do_syscall_64+0xd2/0x200
[   67.449307][ T4474]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   67.449338][ T4474]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   67.449375][ T4474]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   67.449398][ T4474] RIP: 0033:0x7f0474da03ca
[   67.449458][ T4474] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   67.449479][ T4474] RSP: 002b:00007f0473806e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[   67.449500][ T4474] RAX: ffffffffffffffda RBX: 00007f0473806ef0 RCX: 00007f0474da03ca
[   67.449516][ T4474] RDX: 0000200000000180 RSI: 0000200000000100 RDI: 0000000000000000
[   67.449565][ T4474] RBP: 0000200000000180 R08: 00007f0473806ef0 R09: 00000000000000e1
[   67.449580][ T4474] R10: 00000000000000e1 R11: 0000000000000246 R12: 0000200000000100
[   67.449622][ T4474] R13: 00007f0473806eb0 R14: 0000000000000000 R15: 00002000000001c0
[   67.449651][ T4474]  </TASK>
[   67.645276][ T4467] Quota error (device loop0): do_check_range: Getting block 64 out of range 1-5
[   67.654592][ T4467] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0
[   67.664568][ T4467] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.296: Failed to acquire dquot type 0
[   67.703987][ T4467] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt.
[   67.721160][ T4467] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #13: comm syz.0.296: corrupted inode contents
[   67.741380][ T4467] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #13: comm syz.0.296: mark_inode_dirty error
[   67.741939][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   67.754262][ T4467] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #13: comm syz.0.296: corrupted inode contents
[   67.775656][ T4485] loop3: detected capacity change from 0 to 512
[   67.816569][ T4485] EXT4-fs (loop3): too many log groups per flexible block group
[   67.824373][ T4485] EXT4-fs (loop3): failed to initialize mballoc (-12)
[   67.837619][ T4485] EXT4-fs (loop3): mount failed
[   67.843911][ T4467] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #13: comm syz.0.296: mark_inode_dirty error
[   67.909415][ T4485] netlink: 4 bytes leftover after parsing attributes in process `syz.3.302'.
[   67.936021][ T4467] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #13: comm syz.0.296: corrupted inode contents
[   67.953023][ T4467] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem
[   67.987920][ T4467] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #13: comm syz.0.296: corrupted inode contents
[   67.999885][ T4485] batman_adv: batadv0: Interface deactivated: veth1_vlan
[   68.006964][ T4485] batman_adv: batadv0: Removing interface: veth1_vlan
[   68.022213][ T4497] program gtp is using a deprecated SCSI ioctl, please convert it to SG_IO
[   68.031303][ T4496] loop1: detected capacity change from 0 to 512
[   68.032257][ T4497] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[   68.049856][ T4467] EXT4-fs error (device loop0): ext4_truncate:4666: inode #13: comm syz.0.296: mark_inode_dirty error
[   68.066482][ T4499] netlink: 4 bytes leftover after parsing attributes in process `syz.2.306'.
[   68.070358][ T4467] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem
[   68.075688][ T4496] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   68.098315][ T4496] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   68.109221][ T4467] EXT4-fs (loop0): 1 truncate cleaned up
[   68.121255][ T4467] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   68.157338][ T4504] loop2: detected capacity change from 0 to 512
[   68.176745][ T4504] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   68.189508][ T4504] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   68.201622][ T4497] netlink: 14 bytes leftover after parsing attributes in process `gtp'.
[   68.211942][ T4497] hsr_slave_0: left promiscuous mode
[   68.218229][ T4497] hsr_slave_1: left promiscuous mode
[   68.232598][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   68.269522][ T4509] loop2: detected capacity change from 0 to 256
[   68.321940][ T4509] FAT-fs (loop2): IO charset cp863 not found
[   68.341358][ T4518] program syz.0.311 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   68.352172][ T4518] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[   68.372583][ T4516] 0ªX¹¦À: renamed from caif0
[   68.379142][ T4516] 0ªX¹¦À: entered allmulticast mode
[   68.384498][ T4516] A link change request failed with some changes committed already. Interface 
60ªX¹¦À may have been left with an inconsistent configuration, please check.
[   68.537665][ T4528] lo speed is unknown, defaulting to 1000
[   68.570980][ T4528] lo speed is unknown, defaulting to 1000
[   68.577319][ T4528] lo speed is unknown, defaulting to 1000
[   68.680996][ T4533] tmpfs: Bad value for 'nr_inodes'
[   69.228608][ T4542] loop2: detected capacity change from 0 to 512
[   69.253794][ T4542] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   69.442389][ T4555] program syz.3.324 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   69.464984][ T4555] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[   69.515614][ T4558] loop4: detected capacity change from 0 to 1024
[   69.618070][ T4566] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4566 comm=syz.1.328
[   69.636556][ T4570] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.671531][ T4570] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.721954][ T4570] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.740965][ T4579] loop4: detected capacity change from 0 to 164
[   69.801725][ T4570] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.811784][ T4588] loop4: detected capacity change from 0 to 512
[   69.832240][ T4588] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   69.870205][ T4592] siw: device registration error -23
[   69.877075][ T4592] loop4: detected capacity change from 0 to 164
[   70.413534][ T3567] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   70.435952][ T3567] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   70.458817][ T3534] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   70.469094][ T3534] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.514629][ T4603] loop0: detected capacity change from 0 to 1024
[   70.551666][ T4605] vhci_hcd: default hub control req: 8013 v0000 i0000 l31125
[   70.578120][ T4609] program syz.2.343 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   70.589539][ T4609] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[   70.819582][ T4619] loop2: detected capacity change from 0 to 512
[   70.838265][ T4619] EXT4-fs: Ignoring removed mblk_io_submit option
[   70.859520][ T4619] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   70.883759][ T4619] EXT4-fs (loop2): 1 truncate cleaned up
[   71.007400][   T29] kauditd_printk_skb: 82 callbacks suppressed
[   71.007429][   T29] audit: type=1326 audit(1758376293.443:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4618 comm="syz.2.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0706dcec29 code=0x7ffc0000
[   71.037295][   T29] audit: type=1326 audit(1758376293.453:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4618 comm="syz.2.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0706dc5be7 code=0x7ffc0000
[   71.060698][   T29] audit: type=1326 audit(1758376293.453:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4618 comm="syz.2.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0706d6ae09 code=0x7ffc0000
[   71.084079][   T29] audit: type=1326 audit(1758376293.453:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4618 comm="syz.2.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0706dc5be7 code=0x7ffc0000
[   71.107487][   T29] audit: type=1326 audit(1758376293.453:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4618 comm="syz.2.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0706d6ae09 code=0x7ffc0000
[   71.130855][   T29] audit: type=1326 audit(1758376293.453:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4618 comm="syz.2.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0706dcec29 code=0x7ffc0000
[   71.154435][   T29] audit: type=1326 audit(1758376293.453:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4618 comm="syz.2.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0706dcec29 code=0x7ffc0000
[   71.177864][   T29] audit: type=1326 audit(1758376293.523:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4618 comm="syz.2.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0706dcec29 code=0x7ffc0000
[   71.201528][   T29] audit: type=1326 audit(1758376293.523:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4618 comm="syz.2.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0706dcec29 code=0x7ffc0000
[   71.224968][   T29] audit: type=1326 audit(1758376293.523:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4618 comm="syz.2.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0706dcec29 code=0x7ffc0000
[   71.256815][ T4621] lo speed is unknown, defaulting to 1000
[   71.352414][ T4631] loop1: detected capacity change from 0 to 164
[   71.359393][ T4633] loop3: detected capacity change from 0 to 256
[   71.385870][ T4629] __nla_validate_parse: 9 callbacks suppressed
[   71.385889][ T4629] netlink: 132 bytes leftover after parsing attributes in process `syz.0.358'.
[   71.427103][ T4633] FAT-fs (loop3): IO charset cp863 not found
[   71.427142][ T4621] lo speed is unknown, defaulting to 1000
[   71.483426][ T4628] loop4: detected capacity change from 0 to 512
[   71.485313][ T4621] lo speed is unknown, defaulting to 1000
[   71.539327][ T4628] EXT4-fs mount: 11 callbacks suppressed
[   71.539342][ T4628] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   71.557971][ T4628] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   71.606290][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   71.831511][ T4644] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   71.841603][ T4644] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.890009][ T4647] loop0: detected capacity change from 0 to 1024
[   71.948124][ T4644] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   71.958137][ T4644] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.982243][ T4647] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   72.003123][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.036493][ T4644] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   72.046466][ T4644] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.068331][ T3298] ==================================================================
[   72.076476][ T3298] BUG: KCSAN: data-race in generic_fillattr / inode_set_ctime_to_ts
[   72.084503][ T3298] 
[   72.086859][ T3298] write to 0xffff888119d060f0 of 4 bytes by task 3300 on cpu 0:
[   72.094495][ T3298]  inode_set_ctime_to_ts+0x84/0x170
[   72.099745][ T3298]  inode_set_ctime_current+0x1d6/0x770
[   72.105237][ T3298]  shmem_xattr_handler_set+0x1ac/0x220
[   72.110727][ T3298]  __vfs_setxattr+0x2e6/0x310
[   72.115432][ T3298]  __vfs_setxattr_noperm+0xe8/0x410
[   72.120651][ T3298]  __vfs_setxattr_locked+0x1af/0x1d0
[   72.125964][ T3298]  vfs_setxattr+0x132/0x270
[   72.130584][ T3298]  filename_setxattr+0x1ad/0x400
[   72.135541][ T3298]  path_setxattrat+0x2c9/0x310
[   72.140342][ T3298]  __x64_sys_lsetxattr+0x71/0x90
[   72.145321][ T3298]  x64_sys_call+0x2877/0x2ff0
[   72.150041][ T3298]  do_syscall_64+0xd2/0x200
[   72.154582][ T3298]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   72.160506][ T3298] 
[   72.162840][ T3298] read to 0xffff888119d060f0 of 4 bytes by task 3298 on cpu 1:
[   72.170400][ T3298]  generic_fillattr+0x1d1/0x340
[   72.175278][ T3298]  shmem_getattr+0x181/0x200
[   72.179896][ T3298]  vfs_getattr_nosec+0x146/0x1e0
[   72.184857][ T3298]  vfs_statx+0x113/0x390
[   72.189121][ T3298]  vfs_fstatat+0x115/0x170
[   72.193558][ T3298]  __se_sys_newfstatat+0x55/0x260
[   72.198615][ T3298]  __x64_sys_newfstatat+0x55/0x70
[   72.203678][ T3298]  x64_sys_call+0x135a/0x2ff0
[   72.208381][ T3298]  do_syscall_64+0xd2/0x200
[   72.212915][ T3298]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   72.218822][ T3298] 
[   72.221153][ T3298] value changed: 0x20605458 -> 0x22c2ae59
[   72.226874][ T3298] 
[   72.229198][ T3298] Reported by Kernel Concurrency Sanitizer on:
[   72.235369][ T3298] CPU: 1 UID: 0 PID: 3298 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) 
[   72.244664][ T3298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   72.254740][ T3298] ==================================================================
[   72.281351][ T4647] netlink: 24 bytes leftover after parsing attributes in process `syz.0.354'.
[   72.290547][ T4652] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1016 sclass=netlink_route_socket pid=4652 comm=syz.2.355
[   72.335054][ T4644] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   72.345000][ T4644] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.394692][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.420885][ T3581] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   72.429112][ T3581] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.441539][ T3538] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   72.449777][ T3538] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.469099][ T3581] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   72.477362][ T3581] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.489694][ T3557] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   72.498019][ T3557] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0