last executing test programs:

4m24.79236631s ago: executing program 1 (id=2):
unshare(0x2c020400)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300))
pipe(&(0x7f0000000380))
io_getevents(0x0, 0x4, 0x4, &(0x7f00000019c0)=[{}, {}, {}, {}], 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1}, @ldst={0x2, 0x0, 0x3, 0x0, 0x0, 0x2}]}, &(0x7f0000000100)='GPL\x00', 0x3, 0xd2, &(0x7f00000002c0)=""/210, 0x0, 0x5}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f00000001c0)=0x400000001, 0x4)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x2, 0xffb8, 0x0, 0x0)

4m24.493695175s ago: executing program 1 (id=12):
r0 = creat(&(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x40)
write$tun(r0, &(0x7f00000004c0)={@val={0x0, 0x888e}, @void, @x25={0x1, 0xd3, 0xb, "9c4406d98b9a840732daf5ec6f19ebd8e0429d0e01e551da7161965ad280c34edd0456700bd3a15a4896671a7fd6bf6eb6aadb0ef6bda962274ecfdb02b5b4c72c0d42b756dfc7f4aa1623018962fd575073783560ebe2465399dfa3f331522aacd791d7ea61c8e820a482e7159db7edbaede71548e9b4ccc49d550b9d4b408b72d48b1e47358784ac4a9f568f0fc3"}}, 0x96)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48)
write$cgroup_devices(r1, &(0x7f0000000000)={'a', ' *:* ', 'rwm\x00'}, 0xa)

4m24.290494401s ago: executing program 1 (id=15):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$key(0xf, 0x3, 0x2)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/26], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2}, 0x4)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x0, &(0x7f0000000080), 0xc1, 0x7c0, &(0x7f0000000f80)="$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")
mkdir(&(0x7f0000000000)='./control\x00', 0x81)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000004c0)='kmem_cache_free\x00', r3}, 0x18)
syz_emit_ethernet(0x36, &(0x7f0000000340)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x28, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @multicast1}, {0x0, 0x0, 0x14, 0x0, @gue={{0x1, 0x1, 0x1, 0x2, 0x100, @void}, "9935704b5f4cd745"}}}}}}, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000004000000000000009aaa000018150000", @ANYRES32=r4, @ANYBLOB="0000000000000000b708000000000080735af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e00000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0)
mkdirat(r5, &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8)
rmdir(0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x4f}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000000080)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="a774384bd57221bc000000000000", 0x0, 0x43b8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$nl_generic(0x10, 0x3, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8, 0x0, 0x100}, 0x18)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="020a00000200"/15], 0x10}}, 0x0)

4m23.848565707s ago: executing program 1 (id=24):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000080000000b"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x14, r7, 0x1, 0x70bd2c, 0x7000000}, 0x14}, 0x1, 0xff07}, 0x2000000)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28)
getsockname$packet(r3, &(0x7f0000000340)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x18, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r8}}, 0x18}}, 0x0)
r9 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r9, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc)
r10 = socket(0x10, 0x803, 0x4)
sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x13, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}}}, 0x24}}, 0x0)

4m23.758239194s ago: executing program 1 (id=28):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x10, 0x3}]}}]}, 0x38}}, 0x0)

4m23.707280358s ago: executing program 1 (id=30):
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x1}}, './file0\x00'})
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000040)={0x2, [<r1=>0x0, <r2=>0x0]}, &(0x7f0000000080)=0xc)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000000c0)={r2, 0x9, 0xfff, 0x0, 0x9, 0x80}, &(0x7f0000000100)=0x14)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pimreg0\x00', 0x20})
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000180)={r1, 0xf1, "0f9a2f1ddef2a8ffe1b53fac83decf5672bb437ce524f90ac9fb9b83a4acd20bffeb488028ba262843b7272f9dc3bfc92f56c6793b8fc2b5b79fe982acd09a7eeaa34aa9e45755e1ce371cce4d9f75cb56fa450e970a93d489f380edf2d09b5c7bf521e17dd45ac1380e3185ece16e15942fc195e7aa6ee4e58f3be1a34b31eeef01c2e8628837704541907621d954f72af8d4cef274be477afaab6623a5c07ea9056b1c6d8bd2ee247634a515f9b9d1ec8c122ef4f2a01d6f38c8cdb4ee78ea51a114ac74e06453b04206b1fb49fd356d4c33a8039be4abbfd06ac30a31fc69e3d54d20abd5510c3f9bc257411f9b3da5"}, &(0x7f0000000280)=0xf9)
lseek(0xffffffffffffffff, 0x7ff, 0x2)
setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000002c0)={r1, @in={{0x2, 0x4e21, @empty}}}, 0x84)
r3 = fcntl$dupfd(r0, 0x0, r0)
r4 = syz_open_dev$loop(&(0x7f0000000380), 0x8, 0x2000)
ioctl$LOOP_SET_CAPACITY(r4, 0x4c07)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000003c0)={r1, @in6={{0xa, 0x4e22, 0x800, @local, 0x6}}}, &(0x7f0000000480)=0x84)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0))
sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x18, 0x140e, 0x400, 0x70bd2a, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40810}, 0x20048001)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000600), 0x7e6129fac62e11fb, 0x0)
ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000640)={'\x00', 0x5, 0xfffffffa, 0x1, 0xc796, 0x8000, <r6=>0x0})
fcntl$setownex(r5, 0xf, &(0x7f00000006c0)={0x2, r6})
r7 = socket$netlink(0x10, 0x3, 0x4)
sched_setscheduler(r6, 0x5, &(0x7f0000000700)=0x6)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r0)
sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000880)={&(0x7f00000007c0)={0x8c, r9, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x5a}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4008001}, 0x800)
ioctl$SIOCX25CALLACCPTAPPRV(r0, 0x89e8)
mkdir(&(0x7f0000000900)='./file0\x00', 0x0)
socket$unix(0x1, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001ac0)={0x11, 0xc, &(0x7f0000000940)=@raw=[@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7ff}}, @map_val={0x18, 0x4, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x3}, @map_fd={0x18, 0x7, 0x1, 0x0, r3}], &(0x7f00000009c0)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000000a00)=""/4096, 0x41000, 0x4d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001a00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000001a40)={0x5, 0x6, 0x8, 0xb1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001a80)=[r3, r7], 0x0, 0x10, 0x5}, 0x94)
ioctl$KDGKBMODE(r5, 0x4b44, &(0x7f0000001b80))
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001e00)={'syztnl2\x00', &(0x7f0000001d40)={'gre0\x00', <r10=>0x0, 0x10, 0x7800, 0xc000, 0x2, {{0x1b, 0x4, 0x2, 0x3e, 0x6c, 0x65, 0x0, 0x6, 0x2f, 0x0, @multicast2, @multicast2, {[@timestamp={0x44, 0x10, 0x9b, 0x0, 0x6, [0x8, 0x1, 0x7]}, @end, @rr={0x7, 0x1f, 0x17, [@multicast2, @loopback, @empty, @loopback, @multicast2, @broadcast, @private=0xa010102]}, @rr={0x7, 0x27, 0xa5, [@broadcast, @private=0xa010102, @broadcast, @broadcast, @dev={0xac, 0x14, 0x14, 0x32}, @empty, @local, @dev={0xac, 0x14, 0x14, 0x38}, @multicast1]}]}}}}})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001e80)={0x11, 0xf, &(0x7f0000001bc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001c40)='GPL\x00', 0x3, 0xbf, &(0x7f0000001c80)=""/191, 0x41100, 0x8, '\x00', r10, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001e40)={0x3, 0x9, 0xb7}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r11 = fcntl$dupfd(r3, 0x406, r8)
sendmsg$NFQNL_MSG_CONFIG(r11, &(0x7f0000002000)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x2c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x10}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x1}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x2400c084)

4m8.59717229s ago: executing program 32 (id=30):
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x1}}, './file0\x00'})
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000040)={0x2, [<r1=>0x0, <r2=>0x0]}, &(0x7f0000000080)=0xc)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000000c0)={r2, 0x9, 0xfff, 0x0, 0x9, 0x80}, &(0x7f0000000100)=0x14)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pimreg0\x00', 0x20})
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000180)={r1, 0xf1, "0f9a2f1ddef2a8ffe1b53fac83decf5672bb437ce524f90ac9fb9b83a4acd20bffeb488028ba262843b7272f9dc3bfc92f56c6793b8fc2b5b79fe982acd09a7eeaa34aa9e45755e1ce371cce4d9f75cb56fa450e970a93d489f380edf2d09b5c7bf521e17dd45ac1380e3185ece16e15942fc195e7aa6ee4e58f3be1a34b31eeef01c2e8628837704541907621d954f72af8d4cef274be477afaab6623a5c07ea9056b1c6d8bd2ee247634a515f9b9d1ec8c122ef4f2a01d6f38c8cdb4ee78ea51a114ac74e06453b04206b1fb49fd356d4c33a8039be4abbfd06ac30a31fc69e3d54d20abd5510c3f9bc257411f9b3da5"}, &(0x7f0000000280)=0xf9)
lseek(0xffffffffffffffff, 0x7ff, 0x2)
setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000002c0)={r1, @in={{0x2, 0x4e21, @empty}}}, 0x84)
r3 = fcntl$dupfd(r0, 0x0, r0)
r4 = syz_open_dev$loop(&(0x7f0000000380), 0x8, 0x2000)
ioctl$LOOP_SET_CAPACITY(r4, 0x4c07)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000003c0)={r1, @in6={{0xa, 0x4e22, 0x800, @local, 0x6}}}, &(0x7f0000000480)=0x84)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0))
sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x18, 0x140e, 0x400, 0x70bd2a, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40810}, 0x20048001)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000600), 0x7e6129fac62e11fb, 0x0)
ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000640)={'\x00', 0x5, 0xfffffffa, 0x1, 0xc796, 0x8000, <r6=>0x0})
fcntl$setownex(r5, 0xf, &(0x7f00000006c0)={0x2, r6})
r7 = socket$netlink(0x10, 0x3, 0x4)
sched_setscheduler(r6, 0x5, &(0x7f0000000700)=0x6)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r0)
sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000880)={&(0x7f00000007c0)={0x8c, r9, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x5a}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4008001}, 0x800)
ioctl$SIOCX25CALLACCPTAPPRV(r0, 0x89e8)
mkdir(&(0x7f0000000900)='./file0\x00', 0x0)
socket$unix(0x1, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001ac0)={0x11, 0xc, &(0x7f0000000940)=@raw=[@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7ff}}, @map_val={0x18, 0x4, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x3}, @map_fd={0x18, 0x7, 0x1, 0x0, r3}], &(0x7f00000009c0)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000000a00)=""/4096, 0x41000, 0x4d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001a00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000001a40)={0x5, 0x6, 0x8, 0xb1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001a80)=[r3, r7], 0x0, 0x10, 0x5}, 0x94)
ioctl$KDGKBMODE(r5, 0x4b44, &(0x7f0000001b80))
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001e00)={'syztnl2\x00', &(0x7f0000001d40)={'gre0\x00', <r10=>0x0, 0x10, 0x7800, 0xc000, 0x2, {{0x1b, 0x4, 0x2, 0x3e, 0x6c, 0x65, 0x0, 0x6, 0x2f, 0x0, @multicast2, @multicast2, {[@timestamp={0x44, 0x10, 0x9b, 0x0, 0x6, [0x8, 0x1, 0x7]}, @end, @rr={0x7, 0x1f, 0x17, [@multicast2, @loopback, @empty, @loopback, @multicast2, @broadcast, @private=0xa010102]}, @rr={0x7, 0x27, 0xa5, [@broadcast, @private=0xa010102, @broadcast, @broadcast, @dev={0xac, 0x14, 0x14, 0x32}, @empty, @local, @dev={0xac, 0x14, 0x14, 0x38}, @multicast1]}]}}}}})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001e80)={0x11, 0xf, &(0x7f0000001bc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001c40)='GPL\x00', 0x3, 0xbf, &(0x7f0000001c80)=""/191, 0x41100, 0x8, '\x00', r10, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001e40)={0x3, 0x9, 0xb7}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r11 = fcntl$dupfd(r3, 0x406, r8)
sendmsg$NFQNL_MSG_CONFIG(r11, &(0x7f0000002000)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x2c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x10}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x1}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x2400c084)

1m8.461872602s ago: executing program 4 (id=2965):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRESHEX], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="050000"], 0x48)
mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0)
execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x10)
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f00000003c0)=0x5)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ba}, 0x94)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0xfffff000)
r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'team0\x00', <r3=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)={0x90, r2, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r3}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}]}, 0x90}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840)

1m8.170084605s ago: executing program 4 (id=2966):
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$PTP_PIN_SETFUNC(r0, 0x40603d07, &(0x7f00000002c0)={'\x00', 0x0, 0x3, 0x7})
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
io_setup(0x0, &(0x7f0000000200)=<r2=>0x0)
io_destroy(r2)
r3 = socket(0x10, 0x3, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='sys_enter\x00', r4}, 0x18)
nanosleep(&(0x7f0000000bc0)={0x0, 0x3938700}, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000021c0)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="810000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800e00010069703665727370616e000000340002800600030006000000060002000900000004001200050016000200000014000700ff010000000000000000000000000001"], 0x68}}, 0x4000000)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r7=>r1, {0x1}}, './file0\x00'})
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10)
r9 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r9, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
r10 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="24000000140001f729bd2510000d0001004796ddb60d7d89fbcf0000000000"], 0x24}, 0x1, 0x0, 0x0, 0x4004080}, 0x8800)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]})
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r11, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r12}, 0x18)
alarm(0x100000001)
sendmsg$tipc(r9, &(0x7f00000005c0)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x1, {0x0, 0x3}}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x1}], 0x1}, 0x0)

1m7.758468759s ago: executing program 4 (id=2969):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)

1m7.693062544s ago: executing program 4 (id=2971):
bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000300)=ANY=[@ANYRES16=0x0], &(0x7f0000000080)='GPL\x00', 0x617a, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00')
r1 = socket$phonet_pipe(0x23, 0x5, 0x2)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
connect$phonet_pipe(r1, &(0x7f0000000000)={0x23, 0x16, 0x4, 0x3}, 0x10)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000b00)="dc685ce7d7858e77395454e3f996f8577dbdbed56fda6c645e77f4fecda63c684ec180a605416f5ea9c57d2be882c93acd804484c2b0a4740006edb6a2d9ed449b33fe2c8cc8cf4517ac520b12a5e2ef49f2e121717b83e2e0110534c6aa7ab9b23ce12cc19d513843cfcc062b3703f5907babae3a105fbc7c2916473792e3969534f932971307d309dc501898afcd331a963b181f398af4748f02f93fd3c169368dee7a859cd1a13d585615d73eb5a4d8d9c90b026c0379ec1a51d5f14e", 0xfffffffffffffe96}], 0x1)
syz_clone3(&(0x7f0000000e00)={0xa204000, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x1f, 0xd, &(0x7f00000009c0)=ANY=[@ANYBLOB="181a0000", @ANYRES32=0x1, @ANYBLOB="0000000000001b50c95d90a051eb242f2e54f38700001834000004000000000000000000000085200000040000001834000003000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018610000050000000000000004000000"], &(0x7f0000000000)='syzkaller\x00', 0x5e, 0x92, &(0x7f00000003c0)=""/146, 0x41100, 0x18, '\x00', 0x0, @fallback=0x2e, r0, 0x8, &(0x7f0000000140)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x2, 0x1, 0x401, 0x7}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, &(0x7f0000000a80)=[0x1, 0xffffffffffffffff, r0, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000ac0)=[{0x1, 0x2, 0xe, 0xa}, {0x4, 0x1, 0x10, 0x3}, {0x5, 0x1, 0x9}], 0x10, 0x1}, 0x94)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYRESHEX, @ANYRESDEC, @ANYRESHEX=r0, @ANYRES16=r3, @ANYRESHEX], 0x10c}, 0x1, 0x0, 0x0, 0x24000000}, 0x840)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x20)
open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000010c0)={0x100000011, @multicast2, 0x0, 0x0, 'wlc\x00', 0x5, 0x2, 0x29}, 0x2c)
syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0xffffffffffffffff, 0x200000, 0xffffffffffffffff, 0x0)

1m6.869687061s ago: executing program 4 (id=2974):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000200)={{0xf, 0x4}, 'port1\x00', 0x89, 0x0, 0x0, 0xfffffeff, 0x0, 0x3ff, 0x200000, 0x0, 0x4875c99660ff2b28})
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
prctl$PR_SET_IO_FLUSHER(0x39, 0x1)
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff)
write$binfmt_aout(r2, &(0x7f0000000340)={{0x107, 0x3, 0x7, 0x357, 0x85, 0x8, 0x1e8, 0x5}, "78d5c09c9efd4734ee08d1e0172085bead3fc1b5dff8f5d121abadb9f696aeef69665dea3eff792e936277c462e4fb54b5797cb611ca398376e0e6e4950e6ba320be32bb0da1043cec3aac3ad7dc5224626c80de786e7a665b474d379b9be0f1c66410af9ef48ae2edf5cc5cbc7ca41a5baad7ea3a280cd593bc1eaaddbd616b5d3728aa1fc143cdc93ba16993f720d13933e2abbc8a08ed"}, 0xb8)
waitid(0x0, r1, 0x0, 0x4, 0x0)
r3 = syz_pidfd_open(r1, 0x0)
pidfd_send_signal(r3, 0x2, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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")
r4 = socket$kcm(0x10, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"})
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="25390000290003"], 0x33fe0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12)
write(r6, &(0x7f0000004200)='t', 0x1)
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
preadv(r7, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0xfffffffffffffe15}], 0x1, 0x3fe, 0x6)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f00000001c0), &(0x7f0000000200)=0x8)
sendfile(r6, r5, 0x0, 0x3ffff)
getsockopt$IP_VS_SO_GET_SERVICE(r7, 0x0, 0x483, &(0x7f0000000240), &(0x7f0000000080)=0x68)
r8 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x0, 0x3, 0x1}, 0x20)
setsockopt$inet6_int(r8, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
write$P9_RWRITE(r9, &(0x7f0000000040)={0xb}, 0x11000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x894)

1m5.600445703s ago: executing program 4 (id=2978):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYRES8=0x0, @ANYRES64], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x65, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94)
unshare(0x26020480)
r0 = socket(0x15, 0x5, 0x0)
bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x0, 0x3}, 0x20)
keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1})
r1 = request_key(&(0x7f0000000240)='cifs.idmap\x00', &(0x7f0000000200)={'syz', 0x1}, 0x0, 0xffffffffffffffff)
keyctl$restrict_keyring(0x3, r1, 0x0, 0x0)
keyctl$invalidate(0x15, 0x0)
r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffe, r2, 0x1)

1m4.754525032s ago: executing program 2 (id=2984):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000a3c000000090a010400000000000011000a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a40fffffffc140000001100010000000000000000000100000ab5451a994d88a24264f60093a5fe4c5fcb8fe9063f1acc89905305083634a91b2c148f7c75e50fddafd3584ffd049215682c019f691ea5c03e7825b3a9e1ed6979f4d3bc72f16be470028675c14b15530e47de297979fd33363dfa2f4d9999b432a81e0f19f45ec3911988fd77ca935d7f66a9d4"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500190084000000"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10)
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410884, &(0x7f00000001c0)={[{@nouid32}, {@acl}]}, 0x1, 0x775, &(0x7f0000001180)="$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")
r2 = open(&(0x7f0000000180)='./bus\x00', 0x14923e, 0x18)
fallocate(r2, 0x1, 0x0, 0x1001f0)
pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="c1", 0x1}], 0x1, 0x33000, 0x7, 0x3)

1m4.438259467s ago: executing program 2 (id=2987):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRESHEX], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="050000"], 0x48)
mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0)
execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x10)
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f00000003c0)=0x5)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ba}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r2, 0x0, 0x3}, 0x18)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0xfffff000)
r4 = socket$netlink(0x10, 0x3, 0x10)
r5 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r5, 0x0, 0x0)
r6 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000240)={'team0\x00', <r7=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)={0x90, r6, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r7}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}]}, 0x90}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r0}, &(0x7f0000000540), &(0x7f0000000600)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r8, 0x6, 0x24, &(0x7f00000000c0)=0x1, 0x4)
recvmmsg(r8, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x40, 0x0)

1m3.153573051s ago: executing program 2 (id=2995):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0)
unshare(0x22020600)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x40040)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x275a, 0x0)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={0x0, 0x1, 0x1}, 0xc)
fcntl$lock(r3, 0x25, &(0x7f00000000c0))
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000040)=<r5=>0x0)
vmsplice(r0, &(0x7f0000000440)=[{&(0x7f00000037c0)="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", 0x1000}, {&(0x7f0000000580)="426bf2937e0e30567821697d9b5dbcc3204b51f4174e00e11799efcf89f6b01c779720bb94018ca59b15c596f6d5dddffe887c729e2bf0259ef647d3aab3d7a5bb1a0e3c", 0x44}], 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
close(0x4)
timer_settime(r5, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r6, 0x26, &(0x7f0000000000)={0x1})
creat(0x0, 0x1dc)
socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef409000000b466f7108ea142f8cc89bca3611fb791643a5ee4b116027ba10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6ccd40dd68493e4edef3d93452a92307f00000e970300000000", 0xd8}], 0x1}, 0x48002)
sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="70002a000000000000000000242d344febeef083080016400000000d54000d80140900000080000000000000000000000000003c14000400fe80000000000000000000db60b340466c599348faafc30ad202000000aa14000500fe80000000000000000000000000001a14000500200100001c0000000000000000000002b1052fe5f7b5a9999f5ecfa4a64a72fc65678f00"/161], 0x70}, 0x1, 0x0, 0x0, 0x4042015}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)

1m2.263677233s ago: executing program 2 (id=3000):
r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = socket(0xa, 0x1, 0x0)
io_setup(0x2, &(0x7f0000000000)=<r2=>0x0)
r3 = eventfd(0x0)
io_submit(r2, 0x2, &(0x7f0000000040)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xc0, r3, &(0x7f0000000080)="0100fd6400000000", 0x8, 0x36, 0x0, 0x2}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x1, r3}])
syz_clone3(&(0x7f0000001e80)={0x166002400, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r4 = fsmount(r0, 0x1, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c00000008001240000000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000220a0000010500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={0x0, r6}, 0x18)
fchdir(r4)

58.408762195s ago: executing program 0 (id=3012):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRESHEX], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="050000"], 0x48)
mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0)
execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x10)
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f00000003c0)=0x5)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ba}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r2, 0x0, 0x3}, 0x18)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0xfffff000)
r4 = socket$netlink(0x10, 0x3, 0x10)
r5 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r5, 0x0, 0x0)
r6 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000240)={'team0\x00', <r7=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)={0x90, r6, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r7}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}]}, 0x90}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r0}, &(0x7f0000000540), &(0x7f0000000600)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r8, 0x6, 0x24, &(0x7f00000000c0)=0x1, 0x4)
recvmmsg(r8, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x40, 0x0)

58.302141234s ago: executing program 3 (id=3014):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
socket$inet6(0xa, 0x3, 0x80000004)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
socket$packet(0x11, 0x3, 0x300)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
socket$kcm(0xa, 0x1, 0x106)
socket$xdp(0x2c, 0x3, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000))
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socket$inet6(0xa, 0x3, 0x5)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="050000000c0000000400000007"], 0x48)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff08000900fcfc0000080011000000000008000e0080", @ANYRES32=r5], 0x5c}, 0x1, 0x0, 0x0, 0x20008005}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r0], 0x48)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00100000000000000000000000000000bddb698eb01ffee2b9b94249a2ca7af99915bdcb9cff2bbfd8c5ef2c4888db5aaeb72a9c35e567690b"], 0x50)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x20, &(0x7f00000003c0)={&(0x7f0000000640)=""/199, 0xc7, 0x0, &(0x7f00000007c0)=""/247, 0xf7}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffe0f)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0)
write$binfmt_aout(r6, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"})
r7 = syz_open_pts(r6, 0x0)
dup3(r7, r6, 0x0)
ppoll(&(0x7f0000000140)=[{r6}], 0x1, 0x0, 0x0, 0x0)
ioctl$TCSETSF(r7, 0x5404, &(0x7f0000000180)={0xd, 0x8, 0xfffffffc, 0xb6b, 0x4, "aa00003986b9ee6bd231334c1a280d7ea400"})

58.301446324s ago: executing program 5 (id=3015):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xb, 0xf, &(0x7f0000000340)=ANY=[@ANYRESDEC=r0, @ANYRES32=r0, @ANYRES8], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000003c0)='kmem_cache_free\x00', r1}, 0x18)
sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0)
syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000000000000b0000000000011907864010101ac1414214e224e20009c907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d096ffe4f3a4745a8f762b9649a3bfbc1f39cb307b3472eb9cdb042d2643fcbb2c5a57df67d544af6e8dafe0900"/190], 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/16], 0x0, 0x3}, 0x94)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a000000000000000000000b02000000000000000300000d000000000300000003000000000000000300000004000000030000000000000000000005000000000000005f2e"], 0x0, 0x5e, 0x0, 0x1}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10)
ioctl$KDGKBDIACR(r4, 0x4b4a, &(0x7f0000000580)=""/186)
syslog(0x2, 0x0, 0x0)
socketpair(0x18, 0x6, 0x0, &(0x7f00000001c0))
syz_io_uring_setup(0x17dc, 0x0, &(0x7f0000000300)=<r6=>0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, 0x0, 0x0}, 0x20)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0)
sendfile(r7, r7, 0x0, 0x457)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000680)={[{@nolazytime}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@bsdgroups}, {@lazytime}, {@noload}]}, 0x3, 0x45c, &(0x7f0000000a00)="$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")
sendmsg$nl_route(r3, 0x0, 0x20040044)
socket$nl_audit(0x10, 0x3, 0x9)
syz_open_procfs(0xffffffffffffffff, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x0, 0x7ffc0005}]})

58.002827688s ago: executing program 0 (id=3016):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r2 = socket(0x40000000015, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0), 0x4)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0006}]})
setgid(0x0)
kexec_load(0x6, 0x5, &(0x7f00000013c0)=[{&(0x7f0000001080)="3b13178dba5ab6e1f7e0d9044fdb576fcdff6ff8e666c3e27572f5cebb7b2858c651fada68d4367c5d", 0x29, 0x0, 0x5a4}, {&(0x7f00000010c0)="146b4b2ece4eb9112e7046d2b0c108df2fe79a2ca53b36c50c7c6f1db7b13d0a9a682a28aa632398524dc257e7b6d3bd033529d7568e973ad0912e4d513acfe6506f", 0x42, 0x7ff, 0x5}, {0x0, 0x0, 0xfff, 0x8}, {&(0x7f0000001240)="12f27076203baa6c6531c4e3c511b3da3dcf4885d081d93637af39b0f7cd906899810f99407b82d15e2311bf3f4b8699afdd84f87eca3c6d398fcf17d858cfa37c2afaad7b1e15fdaa035f3423256fd3e4e35d9f2bbb", 0x56, 0x1, 0x2}, {0x0, 0x0, 0x5, 0xfffffffffffffffd}], 0x150000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
flock(r3, 0x5)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=<r7=>0x0)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8)
sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r7], 0x1c}}, 0x0)
r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]})
close_range(r10, 0xffffffffffffffff, 0x0)

57.414235986s ago: executing program 3 (id=3017):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r2 = socket(0x40000000015, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0), 0x4)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0006}]})
setgid(0x0)
kexec_load(0x6, 0x5, &(0x7f00000013c0)=[{&(0x7f0000001080)="3b13178dba5ab6e1f7e0d9044fdb576fcdff6ff8e666c3e27572f5cebb7b2858c651fada68d4367c5d", 0x29, 0x0, 0x5a4}, {&(0x7f00000010c0)="146b4b2ece4eb9112e7046d2b0c108df2fe79a2ca53b36c50c7c6f1db7b13d0a9a682a28aa632398524dc257e7b6d3bd033529d7568e973ad0912e4d513acfe6506f", 0x42, 0x7ff, 0x5}, {0x0, 0x0, 0xfff, 0x8}, {&(0x7f0000001240)="12f27076203baa6c6531c4e3c511b3da3dcf4885d081d93637af39b0f7cd906899810f99407b82d15e2311bf3f4b8699afdd84f87eca3c6d398fcf17d858cfa37c2afaad7b1e15fdaa035f3423256fd3e4e35d9f2bbb", 0x56, 0x1, 0x2}, {0x0, 0x0, 0x5, 0xfffffffffffffffd}], 0x150000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
flock(r3, 0x5)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=<r7=>0x0)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8)
sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r7], 0x1c}}, 0x0)
r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]})
close_range(r10, 0xffffffffffffffff, 0x0)

57.402659797s ago: executing program 2 (id=3018):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYRES8=0x0, @ANYRES64], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x65, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94)
unshare(0x26020480)
r0 = socket(0x15, 0x5, 0x0)
bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x0, 0x3}, 0x20)
keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1})
r1 = add_key(&(0x7f0000001340)='keyring\x00', &(0x7f0000001380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$invalidate(0x15, r1)
r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffe, r2, 0x1)

57.366321519s ago: executing program 2 (id=3019):
r0 = socket$inet6(0xa, 0x4, 0xffff)
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x800714, &(0x7f0000000180)={[{@dioread_nolock}, {@jqfmt_vfsv0}]}, 0xff, 0x4a9, &(0x7f0000000580)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0)
pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
lseek(r1, 0x5, 0x4)
fallocate(0xffffffffffffffff, 0x1, 0x6, 0x20000000000fff)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', <r2=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x5, 0x8, 0x2, 0x654, 0x4200, 0xffffffffffffffff, 0x3, '\x00', r2, 0xffffffffffffffff, 0x2, 0x1}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@bloom_filter={0x1e, 0x6, 0x5, 0x7, 0xa001, 0xffffffffffffffff, 0x8000, '\x00', r2, 0xffffffffffffffff, 0x5, 0x4, 0x1, 0x7}, 0x50)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
openat$dir(0xffffff9c, &(0x7f0000000200)='./file1\x00', 0x46102, 0xa)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x9, 0x1, 0x7fe1, 0x1}, 0x50)

57.262606258s ago: executing program 5 (id=3020):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f00000001c0)=0x1, 0x4)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10)
sendmmsg$inet(r0, &(0x7f0000002300)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000100)=[{&(0x7f00000002c0)="e0", 0x1}], 0x1}}], 0x1, 0x2000c000)
sendmmsg$inet(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000080)='4', 0x1}], 0x1}}], 0x1, 0x40100)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10)
r3 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8)
mkdir(&(0x7f0000000140)='./control\x00', 0x5)
close(r3)
r4 = inotify_init1(0x800)
fcntl$setstatus(r3, 0x4, 0x2c00)
r5 = gettid()
fcntl$setown(r3, 0x8, r5)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r8, &(0x7f0000000200), 0x806000)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0)
getsockopt$bt_hci(r6, 0x84, 0x80, &(0x7f0000002100)=""/4127, &(0x7f0000000000)=0x101f)
inotify_add_watch(r4, &(0x7f0000000180)='./control\x00', 0xa4000960)
rmdir(&(0x7f0000000100)='./control\x00')

54.740305762s ago: executing program 3 (id=3021):
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102000028"], 0x50)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x2982, 0x0)
r2 = syz_open_dev$tty20(0xc, 0x4, 0x1)
syz_io_uring_setup(0x404eb3, &(0x7f0000000200)={0x0, 0x2900, 0x8000, 0x3, 0xda}, &(0x7f0000000140)=<r3=>0x0, &(0x7f00000006c0))
r4 = syz_io_uring_complete(r3)
io_uring_setup(0x2184, &(0x7f0000000700)={0x0, 0xdbb2, 0x4000, 0x1, 0x11cb, 0x0, r4})
fsetxattr$security_capability(r1, &(0x7f0000000080), &(0x7f0000000180)=@v3={0x3000000, [{0xd5a, 0x10ba8}, {0x6}]}, 0x18, 0x1)
ioctl$VT_RESIZE(r2, 0x5609, &(0x7f0000000100)={0x6, 0x2, 0x800})
ioctl$TCXONC(r1, 0x540a, 0x0)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x187680, 0x0)
fsync(r5)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES64, @ANYBLOB="00002c00128009000100626f6e64000000001c00028008000b00042000060000000000080007294a9ae4d5134997467b9476f26786a028d799d2a418e141f63757b8d46dc141a0c36b7031023276d087d7b88d72b488d7689316e41ad7f046799ac053fe0f67347cec551925f55cc623862cf773ee99b6c318aa38f199f2cc9d059a06f4bd4ef67de605a380f482dfe914347b3dce2a000000000000"], 0x4c}}, 0x0)
r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$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")
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r8 = openat$cgroup_ro(r4, &(0x7f00000003c0)='memory.numa_stat\x00', 0x275a, 0x0)
signalfd4(r1, &(0x7f00000002c0)={[0x8]}, 0x8, 0x800)
ftruncate(r8, 0x2000009)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0)
pwritev2(r9, &(0x7f00000001c0)=[{&(0x7f0000000400)="ba", 0xfdef}], 0x1, 0xe7b, 0x0, 0x1)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x20010, r4, 0x1cee6000)
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVdn:Dd', 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001880)={'bond_slave_0\x00', <r10=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002340)=@newqdisc={0x228, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0xe, 0x6}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x1f8, 0x2, {{0x8, [0x6, 0xd, 0x1, 0x0, 0x0, 0xb, 0x3, 0xf, 0x6, 0x10, 0x7, 0xe, 0xa, 0x7, 0xf], 0x1, [0x8, 0x2, 0x7, 0x7fff, 0x6, 0x7, 0x3, 0x7, 0x400, 0xff1b, 0x21, 0x9, 0x80, 0x4, 0x4], [0x8001, 0x81, 0x9, 0x5, 0x5, 0x6, 0x8, 0xb4, 0x1, 0x7, 0x7fff, 0xffff, 0x3ff, 0xfff, 0x3, 0x5]}, [@TCA_MQPRIO_MIN_RATE64={0x70, 0x3, 0x0, 0x1, [{0xc}, {0xc, 0x3, 0xf2}, {0xc, 0x3, 0x2}, {0xc, 0x3, 0x3}, {0xc, 0x3, 0x2}, {0xc, 0x3, 0x30}, {0xc, 0x3, 0x6}, {0xc}, {0xc, 0x3, 0xf797}]}, @TCA_MQPRIO_MODE={0x6}, @TCA_MQPRIO_MAX_RATE64={0x7c, 0x4, 0x0, 0x1, [{0xc, 0x4, 0x6}, {0xc, 0x4, 0xc00000000000000}, {0xc, 0x4, 0xf}, {0xc, 0x4, 0x81}, {0xc, 0x4, 0x2}, {0xc}, {0xc, 0x4, 0x3}, {0xc, 0x4, 0x3831}, {0xc, 0x4, 0x5}, {0xc, 0x4, 0xc98}]}, @TCA_MQPRIO_MODE={0x6, 0x1, 0x1}, @TCA_MQPRIO_SHAPER={0x6, 0x2, 0x1}, @TCA_MQPRIO_MODE={0x6}, @TCA_MQPRIO_MAX_RATE64={0x94, 0x4, 0x0, 0x1, [{0xc, 0x4, 0x8}, {0xc, 0x4, 0x6}, {0xc}, {0xc, 0x4, 0xfffffffffffff800}, {0xc, 0x4, 0x7}, {0xc, 0x4, 0xffffffffffffffff}, {0xc, 0x4, 0x4000000000000000}, {0xc, 0x4, 0x8}, {0xc, 0x4, 0xffffffffffffb04e}, {0xc, 0x4, 0x100}, {0xc, 0x4, 0x1}, {0xc, 0x4, 0x1}]}]}}}]}, 0x228}, 0x1, 0x0, 0x0, 0x4048801}, 0x0)

54.02673595s ago: executing program 0 (id=3022):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xb, 0xf, &(0x7f0000000340)=ANY=[@ANYRESDEC=r0, @ANYRES32=r0, @ANYRES8], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000003c0)='kmem_cache_free\x00', r1}, 0x18)
sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0)
syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000000000000b0000000000011907864010101ac1414214e224e20009c907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d096ffe4f3a4745a8f762b9649a3bfbc1f39cb307b3472eb9cdb042d2643fcbb2c5a57df67d544af6e8dafe0900"/190], 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94)
r2 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a000000000000000000000b02000000000000000300000d000000000300000003000000000000000300000004000000030000000000000000000005000000000000005f2e"], 0x0, 0x5e, 0x0, 0x1}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10)
ioctl$KDGKBDIACR(r4, 0x4b4a, &(0x7f0000000580)=""/186)
syslog(0x2, 0x0, 0x0)
socketpair(0x18, 0x6, 0x0, &(0x7f00000001c0))
syz_io_uring_setup(0x17dc, 0x0, &(0x7f0000000300)=<r6=>0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, 0x0, 0x0}, 0x20)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0)
sendfile(r7, r7, 0x0, 0x457)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000680)={[{@nolazytime}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@bsdgroups}, {@lazytime}, {@noload}]}, 0x3, 0x45c, &(0x7f0000000a00)="$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")
sendmsg$nl_route(r3, 0x0, 0x20040044)
socket$nl_audit(0x10, 0x3, 0x9)
syz_open_procfs(0xffffffffffffffff, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x0, 0x7ffc0005}]})

49.397753164s ago: executing program 5 (id=3023):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581)
ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
perf_event_open(0x0, 0x0, 0xfffaffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x4156, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffff8, 0x1}, 0x12640, 0x0, 0xfffffffe, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040)
r4 = fsopen(&(0x7f0000001500)='binfmt_misc\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
fsmount(r4, 0x0, 0x6)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000040)={{0x0, 0x1, 0x8, 0x1, 0x3}})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00'}, 0x18)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000009385000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5}, 0x10)
r6 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000000200)=[{&(0x7f00000004c0)='\b\x00', 0x2}, {&(0x7f0000000cc0)="cd99a0036a5c", 0x6}], 0x2, &(0x7f0000000b40)=ANY=[@ANYBLOB="100000000000000007000000"], 0x10}, 0x24008004)
close(r3)
write$cgroup_pid(r2, &(0x7f0000000000), 0x2a979d)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r8, 0x9c3fa077fa966179, 0x4, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x0)

48.611738168s ago: executing program 3 (id=3024):
quotactl$Q_QUOTAON(0xffffffff80000102, &(0x7f0000000140)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)

45.827551983s ago: executing program 0 (id=3025):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd0000050005"], 0x70}}, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={<r1=>0x0, @rand_addr, @initdev}, &(0x7f0000000080)=0xc)
prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x0, 0x0)
timer_create(0x0, 0x0, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000000c0)={@private1={0xfc, 0x1, '\x00', 0x1}, r1}, 0x14)
sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0)

44.690853145s ago: executing program 3 (id=3026):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r0}, 0x18)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0)
unshare(0x22020600)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x40040)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x275a, 0x0)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={0x0, 0x1, 0x1}, 0xc)
fcntl$lock(r3, 0x25, &(0x7f00000000c0))
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000040)=<r5=>0x0)
vmsplice(r0, &(0x7f0000000440)=[{&(0x7f00000037c0)="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", 0x1000}, {&(0x7f0000000580)="426bf2937e0e30567821697d9b5dbcc3204b51f4174e00e11799efcf89f6b01c779720bb94018ca59b15c596f6d5dddffe887c729e2bf0259ef647d3aab3d7a5bb1a0e3c", 0x44}], 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
close(0x4)
timer_settime(r5, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r6, 0x26, &(0x7f0000000000)={0x1})
creat(0x0, 0x1dc)
socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef409000000b466f7108ea142f8cc89bca3611fb791643a5ee4b116027ba10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6ccd40dd68493e4edef3d93452a92307f00000e970300000000", 0xd8}], 0x1}, 0x48002)
sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="70002a000000000000000000242d344febeef083080016400000000d54000d80140900000080000000000000000000000000003c14000400fe80000000000000000000db60b340466c599348faafc30ad202000000aa14000500fe80000000000000000000000000001a14000500200100001c0000000000000000000002b1052fe5f7b5a9999f5ecfa4a64a72fc65678f00"/161], 0x70}, 0x1, 0x0, 0x0, 0x4042015}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)

42.683080957s ago: executing program 0 (id=3027):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) (async)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/5, 0x204000, 0x1000}, 0x20)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @empty}, 0xc)
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) (async)
syz_mount_image$iso9660(&(0x7f0000000700), &(0x7f0000000140)='./file0\x00', 0x200210, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRESDEC=0x0, @ANYBLOB="9f03260738a2bacd90f28f6b1b554aa4fa50944336899bd9746dcdf07cf58e858a4c618a455f00e344364bbea29143533df64e3f7bca0a87928205855bf225f473ddca153ebc129857a160d84880cccb93395aecacac42dc5271f03471cc8fb7940da40cfd5eeb07abfe09b85a8e9417c0e23abf7c2989450d6c0b32cd9c7fda1ca908e4a2ce65811671f869f9e76c4158839e80edfde1f2e0462e9a994750b6279a0a119aa23ffbfa28526884d8bb9830cf07fdeab558b842323513f2f404471303da2ccde45d0f2c1e70183acb95d58cc5f9a5496ae8c4c7d9e7fdd6d30a1b16a70c65c451bcf35d1c767ea3ed", @ANYRES8, @ANYRES8=0x0, @ANYRESOCT=0x0, @ANYRES32], 0x1, 0x404, &(0x7f00000007c0)="$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") (async)
setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000040), 0x68)
epoll_create1(0x0) (async, rerun: 64)
r3 = syz_clone(0x8000000, &(0x7f0000000ac0)="14e5bb9db21e0ed7f3290dc19e8171197d90f9fbe351e957d28ec94f72f4b39821e05a083514ea77ed0c1399eb3937a4bcd38e7e015d2b5b2eafb64ed35487fea123e3b8983056e7544e54be765221d4116068ad56e189e99daa658f01a1af8b8332cefac619212cb18a77de583a9b90a1846a8bc1c51a4e576cdb19ba857055d4", 0x81, &(0x7f00000004c0), &(0x7f0000000580), &(0x7f0000000b80)="3c7adc6ec18c0102e994a6") (rerun: 64)
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x3e, 0x6, 0x0, 0x2, 0x0, 0x8, 0x1bc00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4, 0xffffffff}, 0x13a0, 0xfffffffffffffffd, 0x3, 0x5, 0x0, 0x800001, 0x9, 0x0, 0x0, 0x0, 0x7d05}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, 0x0, 0xc048) (async)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x3)
ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="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"})
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00'}, 0x10) (async)
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000c40)={[{@errors_continue}, {@dax_inode}, {@quota}, {@stripe={'stripe', 0x3d, 0x2}}, {@jqfmt_vfsold}], [{@smackfsdef={'smackfsdef', 0x3d, 'lo\x00'}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@dont_hash}, {@flag='lazytime'}, {@fowner_lt={'fowner<', 0xffffffffffffffff}}]}, 0x81, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") (async)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001e40)={&(0x7f0000001e80)=ANY=[@ANYBLOB="9feb010018000000000000004000000040000000080000000400000001000084010000e004000000030000000000000000000000000000010500000020000000000000000000000300000000020000000200000000000000006100302e61"], 0x0, 0x60}, 0x28) (async)
pwrite64(r6, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) (async)
sendmsg$NFT_BATCH(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={0x0, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x44110)

41.280109711s ago: executing program 5 (id=3028):
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_pts(0xffffffffffffffff, 0x141601)
bpf$PROG_LOAD(0x59, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)

38.900096343s ago: executing program 33 (id=3019):
r0 = socket$inet6(0xa, 0x4, 0xffff)
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x800714, &(0x7f0000000180)={[{@dioread_nolock}, {@jqfmt_vfsv0}]}, 0xff, 0x4a9, &(0x7f0000000580)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0)
pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
lseek(r1, 0x5, 0x4)
fallocate(0xffffffffffffffff, 0x1, 0x6, 0x20000000000fff)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', <r2=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x5, 0x8, 0x2, 0x654, 0x4200, 0xffffffffffffffff, 0x3, '\x00', r2, 0xffffffffffffffff, 0x2, 0x1}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@bloom_filter={0x1e, 0x6, 0x5, 0x7, 0xa001, 0xffffffffffffffff, 0x8000, '\x00', r2, 0xffffffffffffffff, 0x5, 0x4, 0x1, 0x7}, 0x50)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
openat$dir(0xffffff9c, &(0x7f0000000200)='./file1\x00', 0x46102, 0xa)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x9, 0x1, 0x7fe1, 0x1}, 0x50)

30.668560119s ago: executing program 3 (id=3030):
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='fdinfo\x00')
fchdir(r0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='attr/current\x00')
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2, <r3=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
pread64(r1, &(0x7f0000001240)=""/102392, 0x18ff8, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x11, 0xb, &(0x7f0000000e40)=ANY=[@ANYBLOB="180000000800000000000000030000001821000020646c25000000000020200700000008000007010000f8ffffffb7020000080000f6b60300000000000085000000060000009500"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e00)={&(0x7f00000001c0)='btrfs_failed_cluster_setup\x00', r4, 0x0, 0xecf7}, 0x18)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=@newqdisc={0x40, 0x10, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x10, 0x3}, {0x10, 0xffe0}, {0xe, 0x12}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}, @qdisc_kind_options=@q_ingress={0xc}]}, 0x40}, 0x1, 0x0, 0x0, 0x20044840}, 0x0)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRES32=r2, @ANYRES32=r2, @ANYRES8=r6, @ANYRES16=r3, @ANYRES32], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x8, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41100, 0x38, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="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", @ANYRES16=r3, @ANYRESOCT=r8, @ANYRES16=r7, @ANYBLOB="636f6f69318b92f58c76557e78872a59917cbf877d70689fd73a49baca76001cee27ce1ee0004acfa0ab55b99eedead5bbd6f24c5f1fe76065e416e406357259da286e70989078", @ANYRES16=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r9}, 0x10)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x40010, r1, 0x0)
r10 = socket$kcm(0x11, 0x2, 0x0)
setsockopt$sock_attach_bpf(r10, 0x107, 0x14, &(0x7f0000000000), 0x4)
sendmsg$kcm(r10, &(0x7f0000001780)={&(0x7f00000003c0)=@caif=@rfm={0x25, 0xe, "fb95785b587f23ba61bfb990191a2af1"}, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001800)="a5", 0x1}], 0x1}, 0x20000000)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_qrtr_TIOCOUTQ(r1, 0x5411, &(0x7f0000000200))
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x9, &(0x7f0000006680))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r11 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x4207, r11)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
ptrace(0x10, r11)
ptrace$peeksig(0x4209, r11, &(0x7f0000000140)={0x0, 0x0, 0x4e}, &(0x7f0000000fc0))

29.028999242s ago: executing program 5 (id=3031):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581)
ioctl$USBDEVFS_REAPURB(r2, 0x4008550c, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
perf_event_open(0x0, 0x0, 0xfffaffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x4156, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffff8, 0x1}, 0x12640, 0x0, 0xfffffffe, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040)
r5 = fsopen(&(0x7f0000001500)='binfmt_misc\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
fsmount(r5, 0x0, 0x6)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000040)={{0x0, 0x1, 0x8, 0x1, 0x3}})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00'}, 0x18)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000009385000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6}, 0x10)
r7 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000000200)=[{&(0x7f00000004c0)='\b\x00', 0x2}, {&(0x7f0000000cc0)="cd99a0036a5c", 0x6}], 0x2, &(0x7f0000000b40)=ANY=[@ANYBLOB="100000000000000007000000"], 0x10}, 0x24008004)
close(r4)
write$cgroup_pid(r3, &(0x7f0000000000), 0x2a979d)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r9, 0x9c3fa077fa966179, 0x4, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x0)

26.919599163s ago: executing program 0 (id=3032):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRESHEX], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="050000"], 0x48)
mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0)
execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x10)
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f00000003c0)=0x5)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ba}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r2, 0x0, 0x3}, 0x18)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0xfffff000)
r4 = socket$netlink(0x10, 0x3, 0x10)
r5 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r5, 0x0, 0x0)
r6 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000240)={'team0\x00', <r7=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)={0x90, r6, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r7}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}]}, 0x90}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r0}, &(0x7f0000000540), &(0x7f0000000600)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r8, 0x6, 0x24, &(0x7f00000000c0)=0x1, 0x4)
recvmmsg(r8, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x40, 0x0)

15.899000633s ago: executing program 5 (id=3033):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x30000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x1c}, 0x0, 0x0, 0x800020, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2b}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x44}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

13.866581318s ago: executing program 34 (id=3030):
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='fdinfo\x00')
fchdir(r0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='attr/current\x00')
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2, <r3=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
pread64(r1, &(0x7f0000001240)=""/102392, 0x18ff8, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x11, 0xb, &(0x7f0000000e40)=ANY=[@ANYBLOB="180000000800000000000000030000001821000020646c25000000000020200700000008000007010000f8ffffffb7020000080000f6b60300000000000085000000060000009500"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e00)={&(0x7f00000001c0)='btrfs_failed_cluster_setup\x00', r4, 0x0, 0xecf7}, 0x18)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=@newqdisc={0x40, 0x10, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x10, 0x3}, {0x10, 0xffe0}, {0xe, 0x12}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}, @qdisc_kind_options=@q_ingress={0xc}]}, 0x40}, 0x1, 0x0, 0x0, 0x20044840}, 0x0)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRES32=r2, @ANYRES32=r2, @ANYRES8=r6, @ANYRES16=r3, @ANYRES32], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x8, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41100, 0x38, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="0f53594152e644216ffa14f5f627513b810c50681dbf7ac3007fea12fc8dd9f8102eaf71a0b6ed2588e1e768e47a1a0f8e4543b2f48c3c6d030ddd112428ff8d2bff598de8b5c1c7dad7975215b09ffdcb79749224cec8d0d7b1aaf268e389b2e35c44893cefebc43d07ed6a976816e127103938a7f3c12d7eaf21475d2e13e2eb1125144981b2d5e61cf6eb53e76e9253200c57273409516b77a46c10e19413047d34b201e8d1e1977f45164ab4eded9f105b1837b397ea5cee2cc2ab3935fb2c1b7246fa21212e05d3f298314421fc4d73e385cd31db4b0dcb318ce8026fa4dbf148334974e3545a4dbfa76fd97f2338838b2418db0ea0784773", @ANYRES16=r3, @ANYRESOCT=r8, @ANYRES16=r7, @ANYBLOB="636f6f69318b92f58c76557e78872a59917cbf877d70689fd73a49baca76001cee27ce1ee0004acfa0ab55b99eedead5bbd6f24c5f1fe76065e416e406357259da286e70989078", @ANYRES16=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r9}, 0x10)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x40010, r1, 0x0)
r10 = socket$kcm(0x11, 0x2, 0x0)
setsockopt$sock_attach_bpf(r10, 0x107, 0x14, &(0x7f0000000000), 0x4)
sendmsg$kcm(r10, &(0x7f0000001780)={&(0x7f00000003c0)=@caif=@rfm={0x25, 0xe, "fb95785b587f23ba61bfb990191a2af1"}, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001800)="a5", 0x1}], 0x1}, 0x20000000)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_qrtr_TIOCOUTQ(r1, 0x5411, &(0x7f0000000200))
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x9, &(0x7f0000006680))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r11 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x4207, r11)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
ptrace(0x10, r11)
ptrace$peeksig(0x4209, r11, &(0x7f0000000140)={0x0, 0x0, 0x4e}, &(0x7f0000000fc0))

6.781510201s ago: executing program 35 (id=3032):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRESHEX], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="050000"], 0x48)
mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0)
execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x10)
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f00000003c0)=0x5)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ba}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r2, 0x0, 0x3}, 0x18)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0xfffff000)
r4 = socket$netlink(0x10, 0x3, 0x10)
r5 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r5, 0x0, 0x0)
r6 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000240)={'team0\x00', <r7=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)={0x90, r6, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r7}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}]}, 0x90}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r0}, &(0x7f0000000540), &(0x7f0000000600)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r8, 0x6, 0x24, &(0x7f00000000c0)=0x1, 0x4)
recvmmsg(r8, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x40, 0x0)

0s ago: executing program 36 (id=3033):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x30000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x1c}, 0x0, 0x0, 0x800020, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2b}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x44}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

kernel console output (not intermixed with test programs):

000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  177.738700][T10697] netlink: 'syz.3.2422': attribute type 10 has an invalid length.
[  177.764068][T10693] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2421: bg 0: block 120: padding at end of block bitmap is not set
[  177.808400][T10701] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2423'.
[  177.857268][T10712] IPv6: Can't replace route, no match found
[  178.021783][T10726] loop3: detected capacity change from 0 to 2048
[  178.028544][T10726] EXT4-fs: Ignoring removed mblk_io_submit option
[  178.075372][T10736] netlink: 'syz.3.2434': attribute type 10 has an invalid length.
[  178.147244][T10743] loop2: detected capacity change from 0 to 512
[  178.154309][T10743] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  178.154353][T10744] IPv6: Can't replace route, no match found
[  178.164240][T10743] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.2437: corrupted in-inode xattr: overlapping e_value 
[  178.184061][T10743] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.2437: couldn't read orphan inode 15 (err -117)
[  178.204357][T10747] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2438'.
[  178.241689][T10749] loop4: detected capacity change from 0 to 2048
[  178.260172][T10749] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2439: bg 0: block 120: padding at end of block bitmap is not set
[  178.558138][T10769] loop4: detected capacity change from 0 to 2048
[  178.565804][T10769] EXT4-fs: Ignoring removed mblk_io_submit option
[  178.614662][T10775] netlink: 'syz.4.2446': attribute type 10 has an invalid length.
[  178.640839][T10777] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2447'.
[  178.679924][T10784] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2450'.
[  178.709926][T10786] loop5: detected capacity change from 0 to 512
[  178.710149][T10787] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  178.729220][T10786] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  178.739273][T10789] IPv6: Can't replace route, no match found
[  178.740740][T10786] EXT4-fs error (device loop5): ext4_iget_extra_inode:5104: inode #15: comm syz.5.2451: corrupted in-inode xattr: overlapping e_value 
[  178.760768][T10786] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.2451: couldn't read orphan inode 15 (err -117)
[  178.786231][T10787] lo speed is unknown, defaulting to 1000
[  178.930691][T10804] loop0: detected capacity change from 0 to 1024
[  178.948699][T10804] ext4 filesystem being mounted at /509/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  178.974037][T10811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  178.993096][T10811] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  179.015552][T10813] netlink: 'syz.0.2460': attribute type 10 has an invalid length.
[  179.029443][T10814] IPv6: Can't replace route, no match found
[  179.048119][T10816] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2461'.
[  179.057273][T10816] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2461'.
[  179.098884][T10824] IPv6: Can't replace route, no match found
[  179.223844][T10835] lo speed is unknown, defaulting to 1000
[  179.523547][T10840] IPv6: Can't replace route, no match found
[  179.777288][T10844] netlink: 'syz.2.2472': attribute type 10 has an invalid length.
[  179.903335][T10846] loop3: detected capacity change from 0 to 512
[  179.913099][T10846] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  179.986536][T10846] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.2473: corrupted in-inode xattr: overlapping e_value 
[  180.003254][T10846] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.2473: couldn't read orphan inode 15 (err -117)
[  180.257293][T10857] IPv6: Can't replace route, no match found
[  180.539484][T10873] IPv6: Can't replace route, no match found
[  180.594375][   T47] I/O error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 2
[  180.605226][T10875] netlink: 44 bytes leftover after parsing attributes in process `+}[@'.
[  180.654599][T10875] loop2: detected capacity change from 0 to 8192
[  180.662622][T10875] vfat: Unknown parameter '������XfمC�'
[  180.887610][T10886] 9pnet_virtio: no channels available for device 127.0.0.1
[  180.895149][T10884] loop0: detected capacity change from 0 to 512
[  180.905122][T10884] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  180.923469][T10884] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.2488: corrupted in-inode xattr: overlapping e_value 
[  180.937796][T10884] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.2488: couldn't read orphan inode 15 (err -117)
[  180.990006][T10895] IPv6: Can't replace route, no match found
[  181.019175][T10897] IPv6: Can't replace route, no match found
[  181.238769][T10909] loop0: detected capacity change from 0 to 512
[  181.246320][T10909] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  181.257997][T10909] EXT4-fs (loop0): 1 truncate cleaned up
[  181.288219][   T11] I/O error, dev loop1, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 2
[  181.323576][T10912] loop0: detected capacity change from 0 to 8192
[  181.330265][T10912] vfat: Unknown parameter '������XfمC�'
[  181.356715][T10916] 9pnet_virtio: no channels available for device 127.0.0.1
[  181.504382][T10925] lo speed is unknown, defaulting to 1000
[  181.897157][   T29] kauditd_printk_skb: 345 callbacks suppressed
[  181.897176][   T29] audit: type=1400 audit(1755066303.769:6378): avc:  denied  { ioctl } for  pid=10927 comm="syz.3.2502" path="socket:[31173]" dev="sockfs" ino=31173 ioctlcmd=0x9413 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  181.963775][T10930] loop5: detected capacity change from 0 to 512
[  181.997958][T10930] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  182.128952][T10930] EXT4-fs error (device loop5): ext4_iget_extra_inode:5104: inode #15: comm syz.5.2503: corrupted in-inode xattr: overlapping e_value 
[  182.198920][   T29] audit: type=1400 audit(1755066303.809:6379): avc:  denied  { bind } for  pid=10927 comm="syz.3.2502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  182.219446][   T29] audit: type=1400 audit(1755066303.809:6380): avc:  denied  { setopt } for  pid=10927 comm="syz.3.2502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  182.303343][T10936] loop4: detected capacity change from 0 to 1024
[  182.310024][T10930] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.2503: couldn't read orphan inode 15 (err -117)
[  182.374656][T10936] ext4 filesystem being mounted at /490/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  182.477639][T10942] loop2: detected capacity change from 0 to 512
[  182.560675][T10942] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  182.672792][T10942] EXT4-fs (loop2): 1 truncate cleaned up
[  182.737264][T10950] __nla_validate_parse: 1 callbacks suppressed
[  182.737282][T10950] netlink: 44 bytes leftover after parsing attributes in process `+}[@'.
[  182.791496][T10950] loop3: detected capacity change from 0 to 8192
[  182.798241][T10950] vfat: Unknown parameter '������XfمC�'
[  182.889035][T10954] IPv6: Can't replace route, no match found
[  183.154122][   T29] audit: type=1326 audit(1755066305.029:6381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10938 comm="syz.2.2507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f3ff3ebe9 code=0x7ffc0000
[  183.185694][   T29] audit: type=1400 audit(1755066305.049:6382): avc:  denied  { create } for  pid=10959 comm="syz.0.2513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  183.205589][   T29] audit: type=1400 audit(1755066305.059:6383): avc:  denied  { connect } for  pid=10959 comm="syz.0.2513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  183.234889][T10965] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  183.285203][   T29] audit: type=1400 audit(1755066305.159:6384): avc:  denied  { read write } for  pid=3300 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  183.288102][T10969] IPv6: Can't replace route, no match found
[  183.309565][   T29] audit: type=1400 audit(1755066305.159:6385): avc:  denied  { open } for  pid=3300 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  183.346910][   T29] audit: type=1400 audit(1755066305.199:6386): avc:  denied  { create } for  pid=10962 comm="syz.2.2514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  183.367896][   T29] audit: type=1400 audit(1755066305.199:6387): avc:  denied  { ioctl } for  pid=3300 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  183.402645][T10973] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2517'.
[  183.411704][T10973] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2517'.
[  183.412051][T10971] loop4: detected capacity change from 0 to 2048
[  183.427698][T10971] EXT4-fs: Ignoring removed mblk_io_submit option
[  183.447971][T10970] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2516: bg 0: block 234: padding at end of block bitmap is not set
[  183.464107][T10970] EXT4-fs (loop4): Remounting filesystem read-only
[  183.471581][T10970] EXT4-fs (loop4): error restoring inline_data for inode -- potential data loss! (inode 18, error -30)
[  183.500974][T10979] 9pnet_virtio: no channels available for device 127.0.0.1
[  183.512130][T10981] loop0: detected capacity change from 0 to 512
[  183.519450][T10981] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  183.530132][T10981] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.2520: corrupted in-inode xattr: overlapping e_value 
[  183.544936][T10981] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.2520: couldn't read orphan inode 15 (err -117)
[  183.590777][T10988] loop4: detected capacity change from 0 to 2048
[  183.607309][T10988] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2523: bg 0: block 120: padding at end of block bitmap is not set
[  183.809152][T11000] lo speed is unknown, defaulting to 1000
[  183.998620][T11001] loop4: detected capacity change from 0 to 1024
[  184.056635][T11001] ext4 filesystem being mounted at /498/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  184.078799][T10997] loop0: detected capacity change from 0 to 512
[  184.126480][T10997] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  184.225879][T10997] EXT4-fs (loop0): 1 truncate cleaned up
[  184.306623][T11010] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2529'.
[  184.315605][T11010] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2529'.
[  184.820782][T11029] loop5: detected capacity change from 0 to 512
[  184.838824][T11029] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  184.852234][T11032] IPv6: Can't replace route, no match found
[  184.869658][T11029] EXT4-fs error (device loop5): ext4_iget_extra_inode:5104: inode #15: comm syz.5.2536: corrupted in-inode xattr: overlapping e_value 
[  184.900426][T11029] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.2536: couldn't read orphan inode 15 (err -117)
[  184.983984][T11038] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  185.054628][T11038] lo speed is unknown, defaulting to 1000
[  185.245961][T11046] loop2: detected capacity change from 0 to 2048
[  185.279697][T11046] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2541: bg 0: block 120: padding at end of block bitmap is not set
[  185.327157][T11051] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2542'.
[  185.336149][T11051] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2542'.
[  185.639427][T11075] loop4: detected capacity change from 0 to 1024
[  185.653817][T11075] ext4 filesystem being mounted at /501/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  185.737021][T11084] netlink: 44 bytes leftover after parsing attributes in process `+}[@'.
[  185.791566][T11084] loop3: detected capacity change from 0 to 8192
[  185.798286][T11084] vfat: Unknown parameter '������XfمC�'
[  185.889478][T11094] loop3: detected capacity change from 0 to 2048
[  185.908650][T11094] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2556: bg 0: block 120: padding at end of block bitmap is not set
[  185.992146][T11099] lo speed is unknown, defaulting to 1000
[  186.540536][T11103] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2557'.
[  186.549515][T11103] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2557'.
[  186.913254][   T29] kauditd_printk_skb: 190 callbacks suppressed
[  186.913274][   T29] audit: type=1400 audit(1755066308.789:6578): avc:  denied  { ioctl } for  pid=11106 comm="syz.4.2559" path="/dev/virtual_nci" dev="devtmpfs" ino=132 ioctlcmd=0x0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  186.947575][   T29] audit: type=1400 audit(1755066308.829:6579): avc:  denied  { read } for  pid=11106 comm="syz.4.2559" dev="nsfs" ino=4026532640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  186.968971][   T29] audit: type=1400 audit(1755066308.829:6580): avc:  denied  { open } for  pid=11106 comm="syz.4.2559" path="net:[4026532640]" dev="nsfs" ino=4026532640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  186.997773][T11113] IPv6: Can't replace route, no match found
[  187.027805][   T29] audit: type=1400 audit(1755066308.899:6581): avc:  denied  { create } for  pid=11109 comm="syz.5.2560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  187.095790][T11116] loop4: detected capacity change from 0 to 1024
[  187.103196][   T29] audit: type=1400 audit(1755066308.959:6582): avc:  denied  { unmount } for  pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  187.143785][T11116] ext4 filesystem being mounted at /505/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  187.562106][   T29] audit: type=1400 audit(1755066309.439:6583): avc:  denied  { append } for  pid=11125 comm="syz.3.2561" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  187.621255][   T29] audit: type=1400 audit(1755066309.439:6584): avc:  denied  { ioctl } for  pid=11129 comm="syz.2.2566" path="socket:[31605]" dev="sockfs" ino=31605 ioctlcmd=0x9413 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  187.647152][   T29] audit: type=1400 audit(1755066309.439:6585): avc:  denied  { bind } for  pid=11129 comm="syz.2.2566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  187.667954][   T29] audit: type=1400 audit(1755066309.439:6586): avc:  denied  { setopt } for  pid=11129 comm="syz.2.2566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  187.668062][T11128] loop4: detected capacity change from 0 to 8192
[  187.688583][   T29] audit: type=1400 audit(1755066309.459:6587): avc:  denied  { allowed } for  pid=11124 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  187.695530][T11128] vfat: Unknown parameter '������XfمC�'
[  187.793188][T11135] loop5: detected capacity change from 0 to 2048
[  187.799985][T11135] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[  187.817056][T11137] loop2: detected capacity change from 0 to 512
[  187.828023][T11137] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  187.840902][T11137] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.2568: corrupted in-inode xattr: overlapping e_value 
[  187.841302][T11143] netlink: 'syz.4.2571': attribute type 10 has an invalid length.
[  187.855073][T11137] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.2568: couldn't read orphan inode 15 (err -117)
[  187.883827][T11143] netlink: 'syz.4.2571': attribute type 10 has an invalid length.
[  187.911792][T11135] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  187.958209][T11148] loop4: detected capacity change from 0 to 2048
[  187.977334][T11148] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2572: bg 0: block 120: padding at end of block bitmap is not set
[  188.029018][T11160] loop5: detected capacity change from 0 to 512
[  188.036135][T11160] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  188.048240][T11160] EXT4-fs (loop5): 1 truncate cleaned up
[  188.167910][T11171] IPv6: Can't replace route, no match found
[  188.178953][T11172] lo speed is unknown, defaulting to 1000
[  188.247479][T11175] lo speed is unknown, defaulting to 1000
[  188.830225][T11181] IPv6: Can't replace route, no match found
[  189.053857][T11183] __nla_validate_parse: 1 callbacks suppressed
[  189.053906][T11183] netlink: 44 bytes leftover after parsing attributes in process `+}[@'.
[  189.214961][T11183] loop5: detected capacity change from 0 to 8192
[  189.232604][T11183] vfat: Unknown parameter '������XfمC�'
[  189.310597][T11189] loop5: detected capacity change from 0 to 128
[  189.324709][T11191] loop0: detected capacity change from 0 to 1024
[  189.337168][T11189] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100)
[  189.345051][T11189] FAT-fs (loop5): Filesystem has been set read-only
[  189.353453][T11189] bio_check_eod: 57700 callbacks suppressed
[  189.353467][T11189] syz.5.2582: attempt to access beyond end of device
[  189.353467][T11189] loop5: rw=524288, sector=2065, nr_sectors = 8 limit=128
[  189.374964][T11189] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100)
[  189.383196][T11189] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100)
[  189.392635][T11189] syz.5.2582: attempt to access beyond end of device
[  189.392635][T11189] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128
[  189.406507][T11189] syz.5.2582: attempt to access beyond end of device
[  189.406507][T11189] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128
[  189.420978][T11189] syz.5.2582: attempt to access beyond end of device
[  189.420978][T11189] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128
[  189.436754][T11191] ext4 filesystem being mounted at /537/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  189.455127][T11189] syz.5.2582: attempt to access beyond end of device
[  189.455127][T11189] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128
[  189.475607][T11189] syz.5.2582: attempt to access beyond end of device
[  189.475607][T11189] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128
[  189.489767][T11189] syz.5.2582: attempt to access beyond end of device
[  189.489767][T11189] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128
[  189.504536][T11189] syz.5.2582: attempt to access beyond end of device
[  189.504536][T11189] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128
[  189.518253][T11189] syz.5.2582: attempt to access beyond end of device
[  189.518253][T11189] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128
[  189.533108][T11189] syz.5.2582: attempt to access beyond end of device
[  189.533108][T11189] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128
[  190.053875][T11201] netlink: 'syz.0.2584': attribute type 30 has an invalid length.
[  190.113805][T11206] loop2: detected capacity change from 0 to 512
[  190.133197][T11206] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  190.183095][T11216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  190.183265][T11206] EXT4-fs (loop2): 1 truncate cleaned up
[  190.191817][T11216] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  190.199839][T11217] netlink: 'syz.4.2590': attribute type 30 has an invalid length.
[  190.248184][T11221] 9pnet_virtio: no channels available for device 127.0.0.1
[  190.285857][T11225] loop2: detected capacity change from 0 to 128
[  190.294658][T11225] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100)
[  190.302563][T11225] FAT-fs (loop2): Filesystem has been set read-only
[  190.309188][T11225] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100)
[  190.317109][T11225] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100)
[  190.464258][T11231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  190.473343][T11231] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  190.519954][T11233] loop3: detected capacity change from 0 to 1024
[  190.528902][T11233] EXT4-fs (loop3): bad geometry: first data block 0 is beyond end of filesystem (0)
[  190.623081][T11237] IPv6: Can't replace route, no match found
[  191.049520][T11245] loop0: detected capacity change from 0 to 128
[  191.072593][T11245] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100)
[  191.080523][T11245] FAT-fs (loop0): Filesystem has been set read-only
[  191.088922][T11245] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100)
[  191.096935][T11245] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100)
[  191.506780][T11256] loop3: detected capacity change from 0 to 512
[  191.530953][T11256] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  191.546507][T11258] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2603'.
[  191.555531][T11258] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2603'.
[  191.566310][T11256] EXT4-fs (loop3): 1 truncate cleaned up
[  191.755045][T11266] lo speed is unknown, defaulting to 1000
[  192.074160][T11268] loop4: detected capacity change from 0 to 1024
[  192.104895][   T29] kauditd_printk_skb: 109 callbacks suppressed
[  192.104916][   T29] audit: type=1326 audit(1755066313.979:6697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11269 comm="syz.0.2607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f723f80ebe9 code=0x7ffc0000
[  192.173315][T11268] ext4 filesystem being mounted at /518/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  192.223207][   T29] audit: type=1326 audit(1755066314.009:6698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11269 comm="syz.0.2607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f723f80ebe9 code=0x7ffc0000
[  192.246971][   T29] audit: type=1326 audit(1755066314.009:6699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11269 comm="syz.0.2607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f723f80ebe9 code=0x7ffc0000
[  192.270641][   T29] audit: type=1326 audit(1755066314.019:6700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11269 comm="syz.0.2607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f723f80ebe9 code=0x7ffc0000
[  192.294375][   T29] audit: type=1326 audit(1755066314.019:6701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11271 comm="syz.0.2607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f723f8414a5 code=0x7ffc0000
[  192.317896][   T29] audit: type=1326 audit(1755066314.019:6702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11269 comm="syz.0.2607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f723f80ebe9 code=0x7ffc0000
[  192.341629][   T29] audit: type=1326 audit(1755066314.059:6703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11269 comm="syz.0.2607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7f723f80ebe9 code=0x7ffc0000
[  192.365298][   T29] audit: type=1326 audit(1755066314.059:6704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11269 comm="syz.0.2607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f723f80ebe9 code=0x7ffc0000
[  192.388822][   T29] audit: type=1326 audit(1755066314.059:6705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11269 comm="syz.0.2607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f723f80ebe9 code=0x7ffc0000
[  192.412321][   T29] audit: type=1326 audit(1755066314.059:6706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11269 comm="syz.0.2607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f723f80ebe9 code=0x7ffc0000
[  192.535193][T11270] loop0: detected capacity change from 0 to 1024
[  192.546371][T11275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  192.555152][T11275] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  192.567378][T11270] EXT4-fs (loop0): bad geometry: first data block 0 is beyond end of filesystem (0)
[  192.735464][T11282] netlink: 'syz.0.2612': attribute type 10 has an invalid length.
[  192.744939][T11282] netlink: 'syz.0.2612': attribute type 10 has an invalid length.
[  192.807909][T11286] loop0: detected capacity change from 0 to 2048
[  192.820206][T11286] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[  192.907811][T11289] netlink: 'syz.4.2614': attribute type 10 has an invalid length.
[  192.916259][T11289] netlink: 'syz.4.2614': attribute type 10 has an invalid length.
[  192.934028][T11286] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  192.977209][T11286] 8021q: VLANs not supported on ip6gre0
[  193.047387][T11294] loop0: detected capacity change from 0 to 128
[  193.065965][T11295] loop4: detected capacity change from 0 to 512
[  193.074099][T11294] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100)
[  193.081995][T11294] FAT-fs (loop0): Filesystem has been set read-only
[  193.119478][T11295] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  193.131404][T11294] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100)
[  193.139306][T11294] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100)
[  193.157363][T11295] EXT4-fs (loop4): 1 truncate cleaned up
[  193.228541][T11305] netlink: 'syz.5.2618': attribute type 30 has an invalid length.
[  193.252180][T11307] netlink: 'syz.3.2619': attribute type 30 has an invalid length.
[  193.429423][T11311] loop3: detected capacity change from 0 to 2048
[  193.470939][T11311] EXT4-fs: Ignoring removed mblk_io_submit option
[  193.551696][   T10] hid-generic 0000:0D17:0000.0035: item fetching failed at offset 0/2
[  193.577044][   T10] hid-generic 0000:0D17:0000.0035: probe with driver hid-generic failed with error -22
[  193.604248][T11332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  193.613513][T11332] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  193.782847][T11345] lo speed is unknown, defaulting to 1000
[  194.058014][T11364] loop5: detected capacity change from 0 to 1024
[  194.072639][T11364] ext4 filesystem being mounted at /505/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  194.162043][T11376] lo speed is unknown, defaulting to 1000
[  194.419510][T11375] loop5: detected capacity change from 0 to 2048
[  194.476318][T11375] EXT4-fs: Ignoring removed mblk_io_submit option
[  194.568616][T11382] loop4: detected capacity change from 0 to 128
[  194.687641][T11389] loop2: detected capacity change from 0 to 512
[  194.751705][T11391] lo speed is unknown, defaulting to 1000
[  194.986076][T11389] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  195.017007][T11382] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100)
[  195.024948][T11382] FAT-fs (loop4): Filesystem has been set read-only
[  195.032615][T11400] IPv6: Can't replace route, no match found
[  195.040803][T11389] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.2648: corrupted in-inode xattr: overlapping e_value 
[  195.059303][T11375] EXT4-fs mount: 66 callbacks suppressed
[  195.059321][T11375] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  195.080077][T11382] bio_check_eod: 87886 callbacks suppressed
[  195.080093][T11382] syz.4.2645: attempt to access beyond end of device
[  195.080093][T11382] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128
[  195.102697][T11389] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.2648: couldn't read orphan inode 15 (err -117)
[  195.134463][T11389] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  195.165224][T11382] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100)
[  195.173198][T11382] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100)
[  195.198678][ T4043] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  195.234995][T11382] syz.4.2645: attempt to access beyond end of device
[  195.234995][T11382] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128
[  195.273933][T11382] syz.4.2645: attempt to access beyond end of device
[  195.273933][T11382] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128
[  195.324546][T11382] syz.4.2645: attempt to access beyond end of device
[  195.324546][T11382] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128
[  195.424826][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  195.686239][T11411] loop4: detected capacity change from 0 to 512
[  195.694226][T11411] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  195.705486][T11411] EXT4-fs (loop4): 1 truncate cleaned up
[  195.711752][T11411] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  195.725843][T11411] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  195.868487][T11421] netlink: 'syz.2.2653': attribute type 10 has an invalid length.
[  195.877057][T11421] netlink: 'syz.2.2653': attribute type 10 has an invalid length.
[  195.893688][T11421] team0: Port device dummy0 removed
[  195.902388][T11421] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  195.984413][T11441] IPv6: Can't replace route, no match found
[  196.012576][T11445] loop3: detected capacity change from 0 to 2048
[  196.019314][T11445] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[  196.035418][T11446] IPv6: Can't replace route, no match found
[  196.337253][T11457] IPv6: Can't replace route, no match found
[  196.827424][T11461] loop4: detected capacity change from 0 to 512
[  196.835826][T11461] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  196.848053][T11461] EXT4-fs (loop4): 1 truncate cleaned up
[  196.855706][T11461] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  196.869079][T11461] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  196.974217][T11482] loop4: detected capacity change from 0 to 2048
[  196.980841][T11481] loop5: detected capacity change from 0 to 2048
[  196.993333][T11482] EXT4-fs (loop4): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  197.002517][T11481] EXT4-fs (loop5): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  197.020298][T11482] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2673: bg 0: block 120: padding at end of block bitmap is not set
[  197.038582][T11481] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2674: bg 0: block 120: padding at end of block bitmap is not set
[  197.131474][   T29] kauditd_printk_skb: 169 callbacks suppressed
[  197.131492][   T29] audit: type=1400 audit(1755066319.009:6876): avc:  denied  { create } for  pid=11489 comm="syz.2.2676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  197.158822][   T29] audit: type=1400 audit(1755066319.039:6877): avc:  denied  { write } for  pid=11477 comm="syz.4.2673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  197.161115][T11490] loop2: detected capacity change from 0 to 512
[  197.185253][T11490] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  197.194978][T11490] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.2676: corrupted in-inode xattr: overlapping e_value 
[  197.208924][T11490] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.2676: couldn't read orphan inode 15 (err -117)
[  197.221789][T11490] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  197.223093][T11496] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2677'.
[  197.241401][   T29] audit: type=1400 audit(1755066319.119:6878): avc:  denied  { read write } for  pid=11489 comm="syz.2.2676" path="/528/bus/file2" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  197.243219][T11496] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2677'.
[  197.288682][   T29] audit: type=1400 audit(1755066319.159:6879): avc:  denied  { unmount } for  pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  197.289725][ T3300] EXT4-fs (loop4): unmounting filesystem 00000800-0000-0000-0000-000000000000.
[  197.353052][ T4043] EXT4-fs (loop5): unmounting filesystem 00000800-0000-0000-0000-000000000000.
[  197.386504][T11503] IPv6: Can't replace route, no match found
[  197.398940][   T29] audit: type=1400 audit(1755066319.269:6880): avc:  denied  { create } for  pid=11498 comm="syz.4.2678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  197.456977][   T29] audit: type=1400 audit(1755066319.329:6881): avc:  denied  { mounton } for  pid=11504 comm="syz.5.2681" path="/514/bus" dev="tmpfs" ino=2833 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  197.514256][T11505] loop5: detected capacity change from 0 to 512
[  197.522255][T11505] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  197.532339][   T29] audit: type=1400 audit(1755066319.379:6882): avc:  denied  { create } for  pid=11504 comm="syz.5.2681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  197.552260][   T29] audit: type=1400 audit(1755066319.389:6883): avc:  denied  { mounton } for  pid=11504 comm="syz.5.2681" path="/514/bus" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  197.563715][T11505] EXT4-fs (loop5): 1 truncate cleaned up
[  197.579382][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  197.592933][T11505] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  197.606413][T11505] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  197.628086][   T29] audit: type=1400 audit(1755066319.499:6884): avc:  denied  { create } for  pid=11513 comm="syz.2.2682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  197.649368][   T29] audit: type=1326 audit(1755066319.529:6885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11504 comm="syz.5.2681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b28debe9 code=0x7ffc0000
[  197.657920][T11516] loop0: detected capacity change from 0 to 512
[  197.684088][T11516] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  197.694158][T11516] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.2683: corrupted in-inode xattr: overlapping e_value 
[  197.709488][T11516] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.2683: couldn't read orphan inode 15 (err -117)
[  197.723067][T11516] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  197.842475][T11523] lo speed is unknown, defaulting to 1000
[  198.356096][T11528] IPv6: Can't replace route, no match found
[  198.507041][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  198.862140][T11531] IPv6: Can't replace route, no match found
[  199.022533][T11533] loop3: detected capacity change from 0 to 128
[  199.032534][T11533] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[  199.040400][T11533] FAT-fs (loop3): Filesystem has been set read-only
[  199.048461][T11533] syz.3.2688: attempt to access beyond end of device
[  199.048461][T11533] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128
[  199.063991][T11533] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[  199.071888][T11533] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[  199.080173][T11533] syz.3.2688: attempt to access beyond end of device
[  199.080173][T11533] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128
[  199.110907][T11533] syz.3.2688: attempt to access beyond end of device
[  199.110907][T11533] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128
[  199.139897][T11536] loop4: detected capacity change from 0 to 2048
[  199.147766][T11533] syz.3.2688: attempt to access beyond end of device
[  199.147766][T11533] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128
[  199.163967][T11533] syz.3.2688: attempt to access beyond end of device
[  199.163967][T11533] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128
[  199.177745][T11533] syz.3.2688: attempt to access beyond end of device
[  199.177745][T11533] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128
[  199.273792][T11536] EXT4-fs (loop4): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  199.299420][T11536] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2689: bg 0: block 120: padding at end of block bitmap is not set
[  199.685332][T11544] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2690'.
[  199.694406][T11544] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2690'.
[  199.708697][ T3300] EXT4-fs (loop4): unmounting filesystem 00000800-0000-0000-0000-000000000000.
[  199.730286][T11541] loop0: detected capacity change from 0 to 128
[  199.748900][T11541] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100)
[  199.756800][T11541] FAT-fs (loop0): Filesystem has been set read-only
[  199.764692][T11541] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100)
[  199.772727][T11541] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100)
[  199.824754][T11556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  199.866134][T11556] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  199.874768][T11557] loop4: detected capacity change from 0 to 512
[  199.893850][T11557] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  199.922787][T11557] EXT4-fs (loop4): 1 truncate cleaned up
[  199.932198][T11557] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  199.998386][T11565] loop5: detected capacity change from 0 to 2048
[  200.005045][T11565] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[  200.033514][T11557] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  200.081278][T11541] bio_check_eod: 22095 callbacks suppressed
[  200.081300][T11541] syz.0.2686: attempt to access beyond end of device
[  200.081300][T11541] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128
[  200.100971][T11541] syz.0.2686: attempt to access beyond end of device
[  200.100971][T11541] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128
[  200.114604][T11541] syz.0.2686: attempt to access beyond end of device
[  200.114604][T11541] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128
[  200.127992][T11541] syz.0.2686: attempt to access beyond end of device
[  200.127992][T11541] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128
[  200.141299][T11541] syz.0.2686: attempt to access beyond end of device
[  200.141299][T11541] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128
[  200.144289][T11573] lo speed is unknown, defaulting to 1000
[  200.154626][T11541] syz.0.2686: attempt to access beyond end of device
[  200.154626][T11541] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128
[  200.174167][T11574] IPv6: Can't replace route, no match found
[  200.180579][T11541] syz.0.2686: attempt to access beyond end of device
[  200.180579][T11541] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128
[  200.193982][T11541] syz.0.2686: attempt to access beyond end of device
[  200.193982][T11541] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128
[  200.207549][T11541] syz.0.2686: attempt to access beyond end of device
[  200.207549][T11541] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128
[  200.220975][T11541] syz.0.2686: attempt to access beyond end of device
[  200.220975][T11541] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128
[  200.316677][T11580] loop3: detected capacity change from 0 to 2048
[  200.342755][T11580] EXT4-fs (loop3): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  200.358417][T11580] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2703: bg 0: block 120: padding at end of block bitmap is not set
[  200.507265][ T3307] EXT4-fs (loop3): unmounting filesystem 00000800-0000-0000-0000-000000000000.
[  200.572950][T11587] loop3: detected capacity change from 0 to 2048
[  200.587491][T11591] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2707'.
[  200.596487][T11591] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2707'.
[  200.609386][T11587] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[  200.660169][T11596] loop2: detected capacity change from 0 to 2048
[  200.672812][T11596] EXT4-fs (loop2): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  200.690597][T11596] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2709: bg 0: block 120: padding at end of block bitmap is not set
[  200.695531][T11587] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  200.776964][T11602] loop3: detected capacity change from 0 to 2048
[  200.783582][T11602] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[  200.848827][ T3305] EXT4-fs (loop2): unmounting filesystem 00000800-0000-0000-0000-000000000000.
[  200.871020][T11602] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  200.900305][T11605] loop0: detected capacity change from 0 to 512
[  200.907563][T11605] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  200.918718][T11605] EXT4-fs (loop0): 1 truncate cleaned up
[  200.924994][T11605] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  200.938280][T11605] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  200.958054][T11613] IPv6: Can't replace route, no match found
[  200.979990][T11617] loop0: detected capacity change from 0 to 2048
[  200.993617][T11617] EXT4-fs (loop0): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  200.996800][T11621] lo speed is unknown, defaulting to 1000
[  201.015721][T11617] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2715: bg 0: block 120: padding at end of block bitmap is not set
[  201.068863][T11628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  201.082428][T11628] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  201.200812][ T3304] EXT4-fs (loop0): unmounting filesystem 00000800-0000-0000-0000-000000000000.
[  201.343311][T11642] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2720'.
[  201.352364][T11642] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2720'.
[  201.573036][T11652] loop0: detected capacity change from 0 to 2048
[  201.579978][T11652] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[  201.589798][T11654] loop3: detected capacity change from 0 to 1024
[  201.603845][T11654] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  201.616318][T11654] ext4 filesystem being mounted at /547/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  201.642460][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  201.678050][T11658] loop4: detected capacity change from 0 to 512
[  201.685714][T11658] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  201.697440][T11652] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  201.701494][T11658] EXT4-fs (loop4): 1 truncate cleaned up
[  201.715213][T11664] IPv6: Can't replace route, no match found
[  201.721111][T11658] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  201.739065][T11658] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  201.815191][T11652] 8021q: VLANs not supported on ip6gre0
[  201.851778][T11678] loop2: detected capacity change from 0 to 2048
[  201.852407][T11674] lo speed is unknown, defaulting to 1000
[  201.872863][T11678] EXT4-fs (loop2): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  201.892862][T11678] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2730: bg 0: block 120: padding at end of block bitmap is not set
[  202.013765][T11688] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2732'.
[  202.022770][T11688] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2732'.
[  202.033310][ T3305] EXT4-fs (loop2): unmounting filesystem 00000800-0000-0000-0000-000000000000.
[  202.136579][T11699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  202.146545][T11699] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  202.287163][   T29] kauditd_printk_skb: 78 callbacks suppressed
[  202.287178][   T29] audit: type=1400 audit(1755066324.159:6964): avc:  denied  { name_bind } for  pid=11706 comm="syz.2.2737" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  202.316612][   T29] audit: type=1400 audit(1755066324.159:6965): avc:  denied  { node_bind } for  pid=11706 comm="syz.2.2737" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[  202.360194][T11712] loop4: detected capacity change from 0 to 128
[  202.368994][T11712] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100)
[  202.377020][T11712] FAT-fs (loop4): Filesystem has been set read-only
[  202.386002][T11712] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100)
[  202.386135][T11713] loop2: detected capacity change from 0 to 512
[  202.393968][T11712] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100)
[  202.408735][T11713] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  202.420072][T11713] EXT4-fs (loop2): 1 truncate cleaned up
[  202.441645][T11713] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  202.454845][T11713] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  202.476244][   T29] audit: type=1326 audit(1755066324.349:6966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11709 comm="syz.2.2738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f3ff3ebe9 code=0x7ffc0000
[  202.499835][   T29] audit: type=1326 audit(1755066324.349:6967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11709 comm="syz.2.2738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f3ff3ebe9 code=0x7ffc0000
[  202.558504][   T29] audit: type=1400 audit(1755066324.429:6968): avc:  denied  { read write } for  pid=3305 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  202.582944][   T29] audit: type=1400 audit(1755066324.429:6969): avc:  denied  { open } for  pid=3305 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  202.607319][   T29] audit: type=1400 audit(1755066324.429:6970): avc:  denied  { ioctl } for  pid=3305 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  202.634734][   T29] audit: type=1400 audit(1755066324.429:6971): avc:  denied  { map_create } for  pid=11720 comm="syz.2.2742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  202.654124][   T29] audit: type=1400 audit(1755066324.429:6972): avc:  denied  { bpf } for  pid=11720 comm="syz.2.2742" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  202.675016][   T29] audit: type=1400 audit(1755066324.429:6973): avc:  denied  { map_read } for  pid=11720 comm="syz.2.2742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  202.695584][   T47] I/O error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 2
[  202.705459][T11721] netlink: 44 bytes leftover after parsing attributes in process `+}[@'.
[  202.761786][T11721] loop2: detected capacity change from 0 to 8192
[  202.768518][T11721] vfat: Unknown parameter '������XfمC�'
[  202.768959][T11724] loop0: detected capacity change from 0 to 2048
[  202.807695][T11724] EXT4-fs (loop0): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  202.825544][T11724] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2743: bg 0: block 120: padding at end of block bitmap is not set
[  202.890125][T11733] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2745'.
[  202.899037][T11733] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2745'.
[  202.977610][ T3304] EXT4-fs (loop0): unmounting filesystem 00000800-0000-0000-0000-000000000000.
[  203.045395][T11743] loop2: detected capacity change from 0 to 512
[  203.052354][T11743] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  203.085127][T11743] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.2749: corrupted in-inode xattr: overlapping e_value 
[  203.099266][T11743] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.2749: couldn't read orphan inode 15 (err -117)
[  203.122252][T11739] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  203.140501][T11743] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  203.211955][T11748] loop5: detected capacity change from 0 to 512
[  203.219077][T11748] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  203.244407][T11748] EXT4-fs (loop5): 1 truncate cleaned up
[  203.246136][T11750] loop0: detected capacity change from 0 to 2048
[  203.250355][T11748] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  203.256877][T11750] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[  203.273019][T11748] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  203.320965][T11755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  203.329617][T11755] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  203.348579][T11757] IPv6: Can't replace route, no match found
[  203.362620][T11750] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  203.397154][T11761] netlink: 44 bytes leftover after parsing attributes in process `+}[@'.
[  203.409260][T11750] 8021q: VLANs not supported on ip6gre0
[  203.452105][T11761] loop3: detected capacity change from 0 to 8192
[  203.458847][T11761] vfat: Unknown parameter '������XfمC�'
[  203.536766][T11772] loop0: detected capacity change from 0 to 2048
[  203.543414][T11772] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[  203.579091][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  203.652153][T11782] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  203.676072][T11782] lo speed is unknown, defaulting to 1000
[  203.859980][T11797] loop2: detected capacity change from 0 to 2048
[  203.867106][T11797] EXT4-fs: Ignoring removed mblk_io_submit option
[  203.882651][T11797] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  203.903069][T11796] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2764: bg 0: block 234: padding at end of block bitmap is not set
[  203.917573][T11796] EXT4-fs (loop2): Remounting filesystem read-only
[  203.925170][T11796] EXT4-fs (loop2): error restoring inline_data for inode -- potential data loss! (inode 19, error -30)
[  203.948605][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  204.232253][T11828] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  204.252664][T11828] lo speed is unknown, defaulting to 1000
[  204.350956][T11837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  204.359518][T11837] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  204.447541][T11840] IPv6: Can't replace route, no match found
[  204.830689][T11844] lo speed is unknown, defaulting to 1000
[  205.526250][T11862] IPv6: Can't replace route, no match found
[  205.896893][T11878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  205.906932][T11878] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  206.383541][T11881] loop2: detected capacity change from 0 to 512
[  206.390590][T11881] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  206.402728][T11881] EXT4-fs (loop2): 1 truncate cleaned up
[  206.408865][T11881] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  206.437890][T11881] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  206.488952][T11900] IPv6: Can't replace route, no match found
[  206.624108][T11909] loop2: detected capacity change from 0 to 1024
[  206.661308][T11909] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  206.674793][T11909] ext4 filesystem being mounted at /558/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  206.698250][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  206.855626][T11924] lo speed is unknown, defaulting to 1000
[  207.049179][T11921] IPv6: Can't replace route, no match found
[  207.259807][T11930] loop0: detected capacity change from 0 to 128
[  207.311186][   T29] kauditd_printk_skb: 128 callbacks suppressed
[  207.317526][   T29] audit: type=1400 audit(1755066329.179:7102): avc:  denied  { mount } for  pid=11929 comm="syz.0.2804" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[  207.359903][T11930] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100)
[  207.367794][T11930] FAT-fs (loop0): Filesystem has been set read-only
[  207.409677][T11930] bio_check_eod: 36390 callbacks suppressed
[  207.409697][T11930] syz.0.2804: attempt to access beyond end of device
[  207.409697][T11930] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128
[  207.544438][T11930] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100)
[  207.552534][T11930] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100)
[  207.632904][T11930] syz.0.2804: attempt to access beyond end of device
[  207.632904][T11930] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128
[  207.677789][T11930] syz.0.2804: attempt to access beyond end of device
[  207.677789][T11930] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128
[  207.740073][T11930] syz.0.2804: attempt to access beyond end of device
[  207.740073][T11930] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128
[  207.784402][T11957] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2812'.
[  207.808711][T11956] loop4: detected capacity change from 0 to 1024
[  207.816361][T11930] syz.0.2804: attempt to access beyond end of device
[  207.816361][T11930] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128
[  207.839282][T11930] syz.0.2804: attempt to access beyond end of device
[  207.839282][T11930] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128
[  207.863859][T11956] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  207.886261][T11956] ext4 filesystem being mounted at /567/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  207.899609][T11930] syz.0.2804: attempt to access beyond end of device
[  207.899609][T11930] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128
[  207.932385][T11930] syz.0.2804: attempt to access beyond end of device
[  207.932385][T11930] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128
[  207.958475][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  207.978070][T11930] syz.0.2804: attempt to access beyond end of device
[  207.978070][T11930] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128
[  208.005828][T11930] syz.0.2804: attempt to access beyond end of device
[  208.005828][T11930] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128
[  208.108238][   T29] audit: type=1400 audit(1755066329.979:7103): avc:  denied  { unmount } for  pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[  208.383785][T11971] IPv6: Can't replace route, no match found
[  208.468724][T11981] loop0: detected capacity change from 0 to 128
[  208.481418][T11981] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100)
[  208.489309][T11981] FAT-fs (loop0): Filesystem has been set read-only
[  208.497896][T11981] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100)
[  208.505955][T11981] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100)
[  208.516660][T11988] IPv6: Can't replace route, no match found
[  208.754344][T12004] loop3: detected capacity change from 0 to 2048
[  208.762772][T12004] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[  208.802996][T12004] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  208.882707][   T29] audit: type=1400 audit(1755066330.729:7104): avc:  denied  { create } for  pid=12003 comm="syz.3.2826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  208.902486][   T29] audit: type=1400 audit(1755066330.729:7105): avc:  denied  { bind } for  pid=12003 comm="syz.3.2826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  208.922057][   T29] audit: type=1400 audit(1755066330.729:7106): avc:  denied  { listen } for  pid=12003 comm="syz.3.2826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  208.941822][   T29] audit: type=1400 audit(1755066330.729:7107): avc:  denied  { connect } for  pid=12003 comm="syz.3.2826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  208.961690][   T29] audit: type=1400 audit(1755066330.729:7108): avc:  denied  { ioctl } for  pid=12003 comm="syz.3.2826" path="socket:[34524]" dev="sockfs" ino=34524 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  209.306571][   T29] audit: type=1400 audit(1755066331.179:7109): avc:  denied  { tracepoint } for  pid=12015 comm="syz.4.2831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  209.388780][T12018] lo speed is unknown, defaulting to 1000
[  209.639135][T12022] loop4: detected capacity change from 0 to 128
[  209.704460][T12020] loop3: detected capacity change from 0 to 1024
[  209.779369][T12020] EXT4-fs: Ignoring removed orlov option
[  209.896222][T12020] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  209.981633][   T29] audit: type=1400 audit(1755066331.849:7110): avc:  denied  { add_name } for  pid=12019 comm="syz.3.2832" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  210.002480][   T29] audit: type=1400 audit(1755066331.849:7111): avc:  denied  { create } for  pid=12019 comm="syz.3.2832" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  210.050186][T12033] IPv6: Can't replace route, no match found
[  210.229145][T12039] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma?
[  210.338848][T12043] IPv6: Can't replace route, no match found
[  210.441066][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  210.666726][T12049] loop4: detected capacity change from 0 to 512
[  210.674079][T12049] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  210.685974][T12049] EXT4-fs (loop4): 1 truncate cleaned up
[  210.693991][T12049] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  210.707726][T12049] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  211.157604][T12065] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  211.177563][T12065] lo speed is unknown, defaulting to 1000
[  211.619232][T12071] loop0: detected capacity change from 0 to 1024
[  211.706909][T12071] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  211.739087][T12082] netlink: 672 bytes leftover after parsing attributes in process `syz.2.2851'.
[  211.770511][T12075] netlink: 'syz.3.2848': attribute type 1 has an invalid length.
[  211.778527][T12075] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2848'.
[  211.788893][T12083] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2850'.
[  211.798017][T12083] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2850'.
[  211.808237][T12071] ext4 filesystem being mounted at /576/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  211.882615][T12083] erspan0: entered promiscuous mode
[  211.888528][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  211.910236][T12083] gretap0: entered promiscuous mode
[  211.916660][T12083] debugfs: 'hsr1' already exists in 'hsr'
[  211.922584][T12083] Cannot create hsr debugfs directory
[  211.990487][T12092] loop4: detected capacity change from 0 to 512
[  211.997648][T12092] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  212.053093][T12098] loop5: detected capacity change from 0 to 2048
[  212.066929][T12092] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.2855: corrupted in-inode xattr: overlapping e_value 
[  212.088425][T12092] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.2855: couldn't read orphan inode 15 (err -117)
[  212.101756][T12092] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  212.315390][T12098] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  212.340748][   T29] kauditd_printk_skb: 98 callbacks suppressed
[  212.340765][   T29] audit: type=1400 audit(1755066334.209:7210): avc:  denied  { link } for  pid=12097 comm="syz.5.2857" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  212.370551][   T29] audit: type=1400 audit(1755066334.239:7211): avc:  denied  { read write } for  pid=12097 comm="syz.5.2857" name="bus" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  212.393352][   T29] audit: type=1400 audit(1755066334.239:7212): avc:  denied  { open } for  pid=12097 comm="syz.5.2857" path="/539/file1/bus" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  212.421591][T12098] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 102 with max blocks 1 with error 28
[  212.434140][T12098] EXT4-fs (loop5): This should not happen!! Data will be lost
[  212.434140][T12098] 
[  212.443990][T12098] EXT4-fs (loop5): Total free blocks count 0
[  212.449977][T12098] EXT4-fs (loop5): Free/Dirty block details
[  212.455903][T12098] EXT4-fs (loop5): free_blocks=0
[  212.460858][T12098] EXT4-fs (loop5): dirty_blocks=0
[  212.465911][T12098] EXT4-fs (loop5): Block reservation details
[  212.471973][T12098] EXT4-fs (loop5): i_reserved_data_blocks=0
[  212.478924][T12109] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2857'.
[  212.487842][T12109] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2857'.
[  212.818435][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  212.863555][ T4043] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  212.892269][   T29] audit: type=1326 audit(1755066334.759:7213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12112 comm="syz.0.2863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f723f80ebe9 code=0x7ffc0000
[  212.915826][   T29] audit: type=1326 audit(1755066334.759:7214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12112 comm="syz.0.2863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f723f80ebe9 code=0x7ffc0000
[  212.939342][   T29] audit: type=1326 audit(1755066334.759:7215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12112 comm="syz.0.2863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f723f80ebe9 code=0x7ffc0000
[  212.963227][   T29] audit: type=1326 audit(1755066334.759:7216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12112 comm="syz.0.2863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f723f80ebe9 code=0x7ffc0000
[  212.986726][   T29] audit: type=1326 audit(1755066334.759:7217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12112 comm="syz.0.2863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f723f80ebe9 code=0x7ffc0000
[  213.010418][   T29] audit: type=1326 audit(1755066334.759:7218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12112 comm="syz.0.2863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f723f80ebe9 code=0x7ffc0000
[  213.034043][   T29] audit: type=1326 audit(1755066334.759:7219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12112 comm="syz.0.2863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f723f80ebe9 code=0x7ffc0000
[  213.071668][T12115] loop4: detected capacity change from 0 to 512
[  213.083261][T12115] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  213.094680][T12115] EXT4-fs (loop4): 1 truncate cleaned up
[  213.100861][T12115] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  213.114295][T12115] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  213.230488][T12126] IPv6: Can't replace route, no match found
[  213.305410][T12131] FAULT_INJECTION: forcing a failure.
[  213.305410][T12131] name failslab, interval 1, probability 0, space 0, times 0
[  213.318232][T12131] CPU: 1 UID: 0 PID: 12131 Comm: syz.2.2869 Tainted: G        W           6.17.0-rc1-syzkaller-00014-g0e39a731820a #0 PREEMPT(voluntary) 
[  213.318274][T12131] Tainted: [W]=WARN
[  213.318282][T12131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  213.318293][T12131] Call Trace:
[  213.318299][T12131]  <TASK>
[  213.318308][T12131]  __dump_stack+0x1d/0x30
[  213.318393][T12131]  dump_stack_lvl+0xe8/0x140
[  213.318414][T12131]  dump_stack+0x15/0x1b
[  213.318433][T12131]  should_fail_ex+0x265/0x280
[  213.318525][T12131]  should_failslab+0x8c/0xb0
[  213.318553][T12131]  kmem_cache_alloc_noprof+0x50/0x310
[  213.318625][T12131]  ? getname_flags+0x80/0x3b0
[  213.318659][T12131]  getname_flags+0x80/0x3b0
[  213.318772][T12131]  user_path_create+0x27/0x130
[  213.318797][T12131]  bpf_obj_pin_user+0xe0/0x230
[  213.318822][T12131]  bpf_obj_pin+0xac/0xd0
[  213.318907][T12131]  __sys_bpf+0x6cb/0x7b0
[  213.318990][T12131]  __x64_sys_bpf+0x41/0x50
[  213.319050][T12131]  x64_sys_call+0x2aea/0x2ff0
[  213.319080][T12131]  do_syscall_64+0xd2/0x200
[  213.319109][T12131]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  213.319137][T12131]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  213.319165][T12131]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  213.319219][T12131] RIP: 0033:0x7f2f3ff3ebe9
[  213.319239][T12131] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  213.319260][T12131] RSP: 002b:00007f2f3e9a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  213.319282][T12131] RAX: ffffffffffffffda RBX: 00007f2f40165fa0 RCX: 00007f2f3ff3ebe9
[  213.319348][T12131] RDX: 0000000000000018 RSI: 0000200000000280 RDI: 0000000000000006
[  213.319363][T12131] RBP: 00007f2f3e9a7090 R08: 0000000000000000 R09: 0000000000000000
[  213.319378][T12131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  213.319400][T12131] R13: 00007f2f40166038 R14: 00007f2f40165fa0 R15: 00007ffc18015218
[  213.319461][T12131]  </TASK>
[  213.806677][T12135] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2872'.
[  214.030636][T12155] loop5: detected capacity change from 0 to 512
[  214.038025][T12155] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  214.053458][T12155] EXT4-fs (loop5): 1 truncate cleaned up
[  214.176062][T12166] IPv6: Can't replace route, no match found
[  214.206264][T12173] netlink: 'syz.4.2878': attribute type 30 has an invalid length.
[  214.243820][T12160] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2875'.
[  214.261485][T12156] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2875'.
[  214.282455][T12160] gretap0: entered promiscuous mode
[  214.289794][T12156] 0�X��D: renamed from gretap0
[  214.330911][T12160] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=49234 sclass=netlink_route_socket pid=12160 comm=syz.3.2875
[  214.400535][T12156] 0�X��D: left promiscuous mode
[  214.405495][T12156] 0�X��D: entered allmulticast mode
[  214.430315][T12179] loop0: detected capacity change from 0 to 2048
[  214.652765][T12156] A link change request failed with some changes committed already. Interface 
30�X��D may have been left with an inconsistent configuration, please check.
[  215.066958][T12201] loop5: detected capacity change from 0 to 512
[  215.663732][T12179] EXT4-fs (loop0): failed to initialize system zone (-117)
[  215.672595][T12179] EXT4-fs (loop0): mount failed
[  215.733298][T12201] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.2884: Failed to acquire dquot type 1
[  215.762036][T12209] FAULT_INJECTION: forcing a failure.
[  215.762036][T12209] name failslab, interval 1, probability 0, space 0, times 0
[  215.774986][T12209] CPU: 1 UID: 0 PID: 12209 Comm: syz.2.2885 Tainted: G        W           6.17.0-rc1-syzkaller-00014-g0e39a731820a #0 PREEMPT(voluntary) 
[  215.775026][T12209] Tainted: [W]=WARN
[  215.775083][T12209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  215.775095][T12209] Call Trace:
[  215.775101][T12209]  <TASK>
[  215.775109][T12209]  __dump_stack+0x1d/0x30
[  215.775132][T12209]  dump_stack_lvl+0xe8/0x140
[  215.775200][T12209]  dump_stack+0x15/0x1b
[  215.775219][T12209]  should_fail_ex+0x265/0x280
[  215.775244][T12209]  ? audit_log_d_path+0x8d/0x150
[  215.775279][T12209]  should_failslab+0x8c/0xb0
[  215.775352][T12209]  __kmalloc_cache_noprof+0x4c/0x320
[  215.775388][T12209]  audit_log_d_path+0x8d/0x150
[  215.775483][T12209]  audit_log_d_path_exe+0x42/0x70
[  215.775513][T12209]  audit_log_task+0x1e9/0x250
[  215.775547][T12209]  audit_seccomp+0x61/0x100
[  215.775600][T12209]  ? __seccomp_filter+0x68c/0x10d0
[  215.775628][T12209]  __seccomp_filter+0x69d/0x10d0
[  215.775691][T12209]  __secure_computing+0x82/0x150
[  215.775715][T12209]  syscall_trace_enter+0xcf/0x1e0
[  215.775743][T12209]  do_syscall_64+0xac/0x200
[  215.775770][T12209]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  215.775862][T12209]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  215.775892][T12209]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  215.775918][T12209] RIP: 0033:0x7f2f3ff3d5fc
[  215.775937][T12209] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  215.775956][T12209] RSP: 002b:00007f2f3e986030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  215.776024][T12209] RAX: ffffffffffffffda RBX: 00007f2f40166090 RCX: 00007f2f3ff3d5fc
[  215.776040][T12209] RDX: 000000000000000f RSI: 00007f2f3e9860a0 RDI: 0000000000000006
[  215.776055][T12209] RBP: 00007f2f3e986090 R08: 0000000000000000 R09: 0000000000000000
[  215.776069][T12209] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000002
[  215.776080][T12209] R13: 00007f2f40166128 R14: 00007f2f40166090 R15: 00007ffc18015218
[  215.776103][T12209]  </TASK>
[  216.106816][T12179] lo speed is unknown, defaulting to 1000
[  216.241284][T12201] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.2884: corrupted inode contents
[  216.253685][T12201] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #16: comm syz.5.2884: mark_inode_dirty error
[  216.273320][T12201] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.2884: corrupted inode contents
[  216.318813][T12201] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.2884: mark_inode_dirty error
[  216.332733][T12201] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.2884: corrupted inode contents
[  216.346068][T12201] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem
[  216.354856][T12201] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.2884: corrupted inode contents
[  216.384807][T12201] EXT4-fs error (device loop5): ext4_truncate:4666: inode #16: comm syz.5.2884: mark_inode_dirty error
[  216.408846][T12201] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem
[  216.429155][T12201] EXT4-fs (loop5): 1 truncate cleaned up
[  216.441008][T12201] ext4 filesystem being mounted at /545/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  216.838628][T12228] loop9: detected capacity change from 0 to 7
[  216.864354][T12201] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[  216.874355][T12201] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[  216.927617][T12228] Buffer I/O error on dev loop9, logical block 0, async page read
[  216.954174][T12228] Buffer I/O error on dev loop9, logical block 0, async page read
[  216.962150][T12228]  loop9: unable to read partition table
[  216.999198][T12228] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[  216.999198][T12228] 
) failed (rc=-5)
[  217.157070][T12231] loop3: detected capacity change from 0 to 1024
[  217.203106][T12231] ext4 filesystem being mounted at /588/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  217.323318][T12243] loop3: detected capacity change from 0 to 512
[  217.352821][   T29] kauditd_printk_skb: 99 callbacks suppressed
[  217.352839][   T29] audit: type=1326 audit(1755066339.229:7315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12238 comm="syz.5.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b28debe9 code=0x7ffc0000
[  217.382486][   T29] audit: type=1326 audit(1755066339.229:7316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12238 comm="syz.5.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f29b28debe9 code=0x7ffc0000
[  217.411017][T12243] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  217.463255][T12243] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.2896: corrupted in-inode xattr: overlapping e_value 
[  217.504554][T12243] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.2896: couldn't read orphan inode 15 (err -117)
[  217.541049][   T29] audit: type=1326 audit(1755066339.279:7317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12238 comm="syz.5.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b28debe9 code=0x7ffc0000
[  217.564719][   T29] audit: type=1326 audit(1755066339.279:7318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12238 comm="syz.5.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b28debe9 code=0x7ffc0000
[  217.588498][   T29] audit: type=1326 audit(1755066339.279:7319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12238 comm="syz.5.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f29b28debe9 code=0x7ffc0000
[  217.612273][   T29] audit: type=1326 audit(1755066339.279:7320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12238 comm="syz.5.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b28debe9 code=0x7ffc0000
[  217.635874][   T29] audit: type=1326 audit(1755066339.279:7321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12238 comm="syz.5.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b28debe9 code=0x7ffc0000
[  217.659613][   T29] audit: type=1326 audit(1755066339.279:7322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12238 comm="syz.5.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f29b28debe9 code=0x7ffc0000
[  217.683163][   T29] audit: type=1326 audit(1755066339.279:7323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12238 comm="syz.5.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b28debe9 code=0x7ffc0000
[  217.706699][   T29] audit: type=1326 audit(1755066339.279:7324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12238 comm="syz.5.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b28debe9 code=0x7ffc0000
[  217.798295][T12248] lo speed is unknown, defaulting to 1000
[  218.421149][T12261] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2897'.
[  218.460494][T12261] FAULT_INJECTION: forcing a failure.
[  218.460494][T12261] name failslab, interval 1, probability 0, space 0, times 0
[  218.473547][T12261] CPU: 1 UID: 0 PID: 12261 Comm: syz.3.2897 Tainted: G        W           6.17.0-rc1-syzkaller-00014-g0e39a731820a #0 PREEMPT(voluntary) 
[  218.473597][T12261] Tainted: [W]=WARN
[  218.473605][T12261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  218.473619][T12261] Call Trace:
[  218.473626][T12261]  <TASK>
[  218.473635][T12261]  __dump_stack+0x1d/0x30
[  218.473658][T12261]  dump_stack_lvl+0xe8/0x140
[  218.473691][T12261]  dump_stack+0x15/0x1b
[  218.473711][T12261]  should_fail_ex+0x265/0x280
[  218.473744][T12261]  should_failslab+0x8c/0xb0
[  218.473774][T12261]  __kmalloc_node_noprof+0xa9/0x410
[  218.473806][T12261]  ? crypto_create_tfm_node+0x5c/0x250
[  218.473831][T12261]  ? sched_clock+0x3f/0x60
[  218.473938][T12261]  crypto_create_tfm_node+0x5c/0x250
[  218.473967][T12261]  crypto_ahash_init_tfm+0xe2/0x3e0
[  218.474003][T12261]  crypto_create_tfm_node+0x108/0x250
[  218.474083][T12261]  crypto_alloc_tfm_node+0xdc/0x2b0
[  218.474190][T12261]  ? ah_init_state+0xc7/0x390
[  218.474215][T12261]  crypto_alloc_ahash+0x2d/0x40
[  218.474336][T12261]  ah_init_state+0xe4/0x390
[  218.474359][T12261]  __xfrm_init_state+0x73d/0xbb0
[  218.474414][T12261]  xfrm_add_sa+0x1e4f/0x2430
[  218.474445][T12261]  xfrm_user_rcv_msg+0x566/0x660
[  218.474472][T12261]  ? __kfree_skb+0x109/0x150
[  218.474494][T12261]  ? nlmon_xmit+0x4f/0x60
[  218.474532][T12261]  ? consume_skb+0x49/0x150
[  218.474637][T12261]  netlink_rcv_skb+0x120/0x220
[  218.474659][T12261]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  218.474730][T12261]  xfrm_netlink_rcv+0x48/0x60
[  218.474756][T12261]  netlink_unicast+0x5c0/0x690
[  218.474833][T12261]  netlink_sendmsg+0x58b/0x6b0
[  218.474860][T12261]  ? __pfx_netlink_sendmsg+0x10/0x10
[  218.474882][T12261]  __sock_sendmsg+0x145/0x180
[  218.474922][T12261]  ____sys_sendmsg+0x31e/0x4e0
[  218.474983][T12261]  ___sys_sendmsg+0x17b/0x1d0
[  218.475025][T12261]  __x64_sys_sendmsg+0xd4/0x160
[  218.475057][T12261]  x64_sys_call+0x191e/0x2ff0
[  218.475082][T12261]  do_syscall_64+0xd2/0x200
[  218.475190][T12261]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  218.475216][T12261]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  218.475245][T12261]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  218.475281][T12261] RIP: 0033:0x7fee8839ebe9
[  218.475301][T12261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  218.475323][T12261] RSP: 002b:00007fee86e07038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  218.475347][T12261] RAX: ffffffffffffffda RBX: 00007fee885c5fa0 RCX: 00007fee8839ebe9
[  218.475362][T12261] RDX: 0000000000004004 RSI: 0000200000000040 RDI: 0000000000000003
[  218.475377][T12261] RBP: 00007fee86e07090 R08: 0000000000000000 R09: 0000000000000000
[  218.475391][T12261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  218.475471][T12261] R13: 00007fee885c6038 R14: 00007fee885c5fa0 R15: 00007ffd59cb9a48
[  218.475496][T12261]  </TASK>
[  218.887906][T12265] loop5: detected capacity change from 0 to 512
[  218.896032][T12265] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  218.932088][T12265] EXT4-fs (loop5): 1 truncate cleaned up
[  219.005450][T12276] loop0: detected capacity change from 0 to 512
[  219.013901][T12276] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  219.050101][T12276] EXT4-fs (loop0): can't mount with journal_async_commit, fs mounted w/o journal
[  219.172068][T12282] loop4: detected capacity change from 0 to 512
[  219.179058][T12282] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  219.187977][T12279] loop5: detected capacity change from 0 to 1024
[  219.190061][T12282] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.2907: corrupted in-inode xattr: overlapping e_value 
[  219.208900][T12282] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.2907: couldn't read orphan inode 15 (err -117)
[  219.236014][T12280] netlink: 'syz.2.2903': attribute type 1 has an invalid length.
[  219.271083][T12272] bond2: entered promiscuous mode
[  219.276207][T12272] bond2: entered allmulticast mode
[  219.281853][T12272] 8021q: adding VLAN 0 to HW filter on device bond2
[  219.310002][T12279] ext4 filesystem being mounted at /551/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  219.456506][T12288] loop2: detected capacity change from 0 to 764
[  219.866841][T12293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  219.875634][T12293] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  219.914939][T12297] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2913'.
[  219.945921][T12300] loop5: detected capacity change from 0 to 1024
[  219.957858][T12300] EXT4-fs (loop5): bad geometry: block count 4096 exceeds size of device (512 blocks)
[  219.975519][T12301] loop4: detected capacity change from 0 to 512
[  219.983053][T12301] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  219.994540][T12302] IPv6: Can't replace route, no match found
[  220.027768][T12301] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.2908: corrupted in-inode xattr: overlapping e_value 
[  220.042976][T12301] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.2908: couldn't read orphan inode 15 (err -117)
[  220.364761][T12314] loop0: detected capacity change from 0 to 512
[  220.372984][T12314] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  220.392754][T12314] EXT4-fs (loop0): 1 truncate cleaned up
[  220.402396][T12310] IPv6: Can't replace route, no match found
[  220.441121][T12317] loop3: detected capacity change from 0 to 2048
[  220.450160][T12317] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[  220.555285][T12317] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  220.635583][T12321] netlink: 'syz.3.2920': attribute type 1 has an invalid length.
[  220.643407][T12321] netlink: 154788 bytes leftover after parsing attributes in process `syz.3.2920'.
[  220.657669][T12322] loop0: detected capacity change from 0 to 512
[  220.665204][T12322] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  220.690974][T12322] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.2919: corrupted in-inode xattr: overlapping e_value 
[  220.759816][T12330] loop4: detected capacity change from 0 to 2048
[  220.770148][T12322] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.2919: couldn't read orphan inode 15 (err -117)
[  220.797835][T12330] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 102 with max blocks 1 with error 28
[  220.810359][T12330] EXT4-fs (loop4): This should not happen!! Data will be lost
[  220.810359][T12330] 
[  220.820307][T12330] EXT4-fs (loop4): Total free blocks count 0
[  220.826569][T12330] EXT4-fs (loop4): Free/Dirty block details
[  220.832838][T12330] EXT4-fs (loop4): free_blocks=0
[  220.837931][T12330] EXT4-fs (loop4): dirty_blocks=0
[  220.843130][T12330] EXT4-fs (loop4): Block reservation details
[  220.849136][T12330] EXT4-fs (loop4): i_reserved_data_blocks=0
[  220.873507][T12339] FAULT_INJECTION: forcing a failure.
[  220.873507][T12339] name failslab, interval 1, probability 0, space 0, times 0
[  220.886331][T12339] CPU: 1 UID: 0 PID: 12339 Comm: syz.2.2924 Tainted: G        W           6.17.0-rc1-syzkaller-00014-g0e39a731820a #0 PREEMPT(voluntary) 
[  220.886371][T12339] Tainted: [W]=WARN
[  220.886378][T12339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  220.886392][T12339] Call Trace:
[  220.886399][T12339]  <TASK>
[  220.886407][T12339]  __dump_stack+0x1d/0x30
[  220.886485][T12339]  dump_stack_lvl+0xe8/0x140
[  220.886506][T12339]  dump_stack+0x15/0x1b
[  220.886525][T12339]  should_fail_ex+0x265/0x280
[  220.886549][T12339]  should_failslab+0x8c/0xb0
[  220.886660][T12339]  kmem_cache_alloc_node_noprof+0x57/0x320
[  220.886691][T12339]  ? __alloc_skb+0x101/0x320
[  220.886805][T12339]  __alloc_skb+0x101/0x320
[  220.886839][T12339]  netlink_alloc_large_skb+0xba/0xf0
[  220.886875][T12339]  netlink_sendmsg+0x3cf/0x6b0
[  220.886902][T12339]  ? __pfx_netlink_sendmsg+0x10/0x10
[  220.886996][T12339]  __sock_sendmsg+0x145/0x180
[  220.887022][T12339]  ____sys_sendmsg+0x31e/0x4e0
[  220.887051][T12339]  ___sys_sendmsg+0x17b/0x1d0
[  220.887091][T12339]  __x64_sys_sendmsg+0xd4/0x160
[  220.887196][T12339]  x64_sys_call+0x191e/0x2ff0
[  220.887218][T12339]  do_syscall_64+0xd2/0x200
[  220.887246][T12339]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  220.887321][T12339]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  220.887347][T12339]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  220.887373][T12339] RIP: 0033:0x7f2f3ff3ebe9
[  220.887391][T12339] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  220.887434][T12339] RSP: 002b:00007f2f3e9a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  220.887457][T12339] RAX: ffffffffffffffda RBX: 00007f2f40165fa0 RCX: 00007f2f3ff3ebe9
[  220.887472][T12339] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[  220.887486][T12339] RBP: 00007f2f3e9a7090 R08: 0000000000000000 R09: 0000000000000000
[  220.887500][T12339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  220.887512][T12339] R13: 00007f2f40166038 R14: 00007f2f40165fa0 R15: 00007ffc18015218
[  220.887546][T12339]  </TASK>
[  221.139094][T12342] loop2: detected capacity change from 0 to 128
[  221.148553][T12342] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100)
[  221.156535][T12342] FAT-fs (loop2): Filesystem has been set read-only
[  221.164439][T12342] bio_check_eod: 26779 callbacks suppressed
[  221.164543][T12342] syz.2.2926: attempt to access beyond end of device
[  221.164543][T12342] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128
[  221.185917][T12342] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100)
[  221.193793][T12342] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100)
[  221.203861][T12342] syz.2.2926: attempt to access beyond end of device
[  221.203861][T12342] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128
[  221.218321][T12342] syz.2.2926: attempt to access beyond end of device
[  221.218321][T12342] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128
[  221.233019][T12342] syz.2.2926: attempt to access beyond end of device
[  221.233019][T12342] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128
[  221.246462][T12342] syz.2.2926: attempt to access beyond end of device
[  221.246462][T12342] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128
[  221.267692][T12342] syz.2.2926: attempt to access beyond end of device
[  221.267692][T12342] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128
[  221.268973][T12345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  221.284595][T12342] syz.2.2926: attempt to access beyond end of device
[  221.284595][T12342] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128
[  221.284712][T12342] syz.2.2926: attempt to access beyond end of device
[  221.284712][T12342] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128
[  221.284762][T12342] syz.2.2926: attempt to access beyond end of device
[  221.284762][T12342] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128
[  221.284804][T12342] syz.2.2926: attempt to access beyond end of device
[  221.284804][T12342] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128
[  221.358345][T12347] loop3: detected capacity change from 0 to 2048
[  221.461309][T12345] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  221.540278][T12352] loop3: detected capacity change from 0 to 512
[  221.556088][T12352] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  221.573902][T12355] loop0: detected capacity change from 0 to 512
[  221.582439][T12355] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  221.599115][T12352] EXT4-fs (loop3): 1 truncate cleaned up
[  221.614801][T12355] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.2930: corrupted in-inode xattr: overlapping e_value 
[  221.809553][T12355] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.2930: couldn't read orphan inode 15 (err -117)
[  222.317076][T12375] loop5: detected capacity change from 0 to 128
[  222.333587][T12375] ext4 filesystem being mounted at /556/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  222.454331][   T29] kauditd_printk_skb: 95 callbacks suppressed
[  222.454349][   T29] audit: type=1400 audit(1755066344.329:7420): avc:  denied  { ioctl } for  pid=12368 comm="syz.5.2936" path="/556/file1/file1" dev="loop5" ino=12 ioctlcmd=0x6609 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  222.525295][   T29] audit: type=1400 audit(1755066344.399:7421): avc:  denied  { append } for  pid=12368 comm="syz.5.2936" path="/556/file1/memory.events" dev="loop5" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  222.572642][T12385] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2938'.
[  222.632380][T12375] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2936'.
[  222.763052][   T29] audit: type=1400 audit(1755066344.629:7422): avc:  denied  { mounton } for  pid=12393 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[  222.801169][T12391] IPv6: Can't replace route, no match found
[  222.846209][T12399] IPv6: Can't replace route, no match found
[  223.052393][T12393] lo speed is unknown, defaulting to 1000
[  223.196753][T12393] chnl_net:caif_netlink_parms(): no params data found
[  223.279858][T12422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  223.292290][T12422] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  223.320832][T12411] loop5: detected capacity change from 0 to 512
[  223.330369][T12393] bridge0: port 1(bridge_slave_0) entered blocking state
[  223.337530][T12393] bridge0: port 1(bridge_slave_0) entered disabled state
[  223.346331][T12411] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  223.356701][T12393] bridge_slave_0: entered allmulticast mode
[  223.365084][T12393] bridge_slave_0: entered promiscuous mode
[  223.372270][T12393] bridge0: port 2(bridge_slave_1) entered blocking state
[  223.379389][T12393] bridge0: port 2(bridge_slave_1) entered disabled state
[  223.388647][T12411] EXT4-fs (loop5): 1 truncate cleaned up
[  223.395878][T12393] bridge_slave_1: entered allmulticast mode
[  223.404135][T12393] bridge_slave_1: entered promiscuous mode
[  223.425627][   T29] audit: type=1326 audit(1755066345.289:7423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12410 comm="syz.5.2942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b28debe9 code=0x7ffc0000
[  223.449241][   T29] audit: type=1326 audit(1755066345.289:7424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12410 comm="syz.5.2942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b28debe9 code=0x7ffc0000
[  223.893903][T12428] loop4: detected capacity change from 0 to 512
[  223.900939][T12428] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  223.910872][T12428] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.2946: corrupted in-inode xattr: overlapping e_value 
[  223.926217][T12428] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.2946: couldn't read orphan inode 15 (err -117)
[  224.203483][T12435] loop2: detected capacity change from 0 to 2048
[  224.247801][T12393] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  224.260097][T12393] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  224.301008][T12393] team0: Port device team_slave_0 added
[  224.307781][T12393] team0: Port device team_slave_1 added
[  224.334375][T12393] batman_adv: batadv0: Adding interface: batadv_slave_0
[  224.341373][T12393] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  224.367793][T12393] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  224.380349][T12393] batman_adv: batadv0: Adding interface: batadv_slave_1
[  224.387375][T12393] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  224.413356][T12393] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  224.490283][T12393] hsr_slave_0: entered promiscuous mode
[  224.496872][T12393] hsr_slave_1: entered promiscuous mode
[  224.504071][T12393] debugfs: 'hsr0' already exists in 'hsr'
[  224.509830][T12393] Cannot create hsr debugfs directory
[  224.704925][T12393] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  224.714726][T12393] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  225.170046][T12452] loop5: detected capacity change from 0 to 128
[  225.194116][T12452] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  225.225579][T12393] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  225.235406][T12393] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  225.249594][T12452] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  225.305340][T12452] netlink: 'syz.5.2954': attribute type 15 has an invalid length.
[  225.344143][T12393] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  225.353992][T12393] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  225.468991][T12393] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  225.479030][T12393] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  225.708879][T12468] loop2: detected capacity change from 0 to 2048
[  225.727499][T12468] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[  226.082600][T12480] loop4: detected capacity change from 0 to 512
[  226.089488][T12480] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  226.100631][T12480] EXT4-fs (loop4): 1 truncate cleaned up
[  226.106855][T12480] EXT4-fs mount: 36 callbacks suppressed
[  226.106870][T12480] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  226.127000][T12480] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  226.137492][   T29] audit: type=1400 audit(1755066348.009:7425): avc:  denied  { setopt } for  pid=12477 comm="syz.0.2958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  226.208890][   T29] audit: type=1400 audit(1755066348.079:7426): avc:  denied  { map } for  pid=12477 comm="syz.0.2958" path="socket:[36334]" dev="sockfs" ino=36334 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  226.232473][   T29] audit: type=1400 audit(1755066348.079:7427): avc:  denied  { read } for  pid=12477 comm="syz.0.2958" path="socket:[36334]" dev="sockfs" ino=36334 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  226.315455][T12476] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  226.335433][T12478] bridge0: entered promiscuous mode
[  226.340908][T12478] macsec1: entered promiscuous mode
[  226.360662][   T29] audit: type=1326 audit(1755066348.229:7428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12479 comm="syz.4.2959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9fe2aebe9 code=0x7ffc0000
[  226.384361][   T29] audit: type=1326 audit(1755066348.229:7429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12479 comm="syz.4.2959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9fe2aebe9 code=0x7ffc0000
[  226.409898][T12478] bridge0: port 1(macsec1) entered blocking state
[  226.416516][T12478] bridge0: port 1(macsec1) entered disabled state
[  226.423386][T12478] macsec1: entered allmulticast mode
[  226.428703][T12478] bridge0: entered allmulticast mode
[  226.436495][T12478] macsec1: left allmulticast mode
[  226.441615][T12478] bridge0: left allmulticast mode
[  226.462707][T12478] bridge0: left promiscuous mode
[  226.485884][T12485] loop4: detected capacity change from 0 to 512
[  226.492734][T12485] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  226.530340][T12485] EXT4-fs (loop4): 1 truncate cleaned up
[  226.552728][T12485] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  226.591977][T12393] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  226.603180][T12485] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  226.615055][T12393] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  226.680870][T12393] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  226.690481][T12495] loop2: detected capacity change from 0 to 2048
[  226.698094][T12495] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[  226.715020][T12494] loop5: detected capacity change from 0 to 2048
[  226.723462][T12494] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[  226.734291][T12393] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  226.755402][T12496] loop0: detected capacity change from 0 to 736
[  226.779231][T12496] rock: directory entry would overflow storage
[  226.785517][T12496] rock: sig=0x3b10, size=4, remaining=3
[  227.169297][T12393] 8021q: adding VLAN 0 to HW filter on device bond0
[  227.198129][T12393] 8021q: adding VLAN 0 to HW filter on device team0
[  227.223747][   T31] bridge0: port 1(bridge_slave_0) entered blocking state
[  227.230859][   T31] bridge0: port 1(bridge_slave_0) entered forwarding state
[  227.258917][T12393] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  227.269438][T12393] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  227.285205][   T31] bridge0: port 2(bridge_slave_1) entered blocking state
[  227.292294][   T31] bridge0: port 2(bridge_slave_1) entered forwarding state
[  227.345378][T12519] loop2: detected capacity change from 0 to 1024
[  227.352503][T12517] IPv6: Can't replace route, no match found
[  227.375720][T12519] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  227.389544][T12519] ext4 filesystem being mounted at /594/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  227.478356][T12393] 8021q: adding VLAN 0 to HW filter on device batadv0
[  227.561067][   T29] kauditd_printk_skb: 160 callbacks suppressed
[  227.561137][   T29] audit: type=1326 audit(1755066349.429:7590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12513 comm="syz.2.2967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f3ff3ebe9 code=0x7ffc0000
[  227.648403][   T29] audit: type=1400 audit(1755066349.489:7591): avc:  denied  { create } for  pid=12530 comm="syz.0.2970" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  227.669331][   T29] audit: type=1326 audit(1755066349.489:7592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12513 comm="syz.2.2967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f3ff3ebe9 code=0x7ffc0000
[  227.692991][   T29] audit: type=1400 audit(1755066349.499:7593): avc:  denied  { write } for  pid=12530 comm="syz.0.2970" name="file0" dev="tmpfs" ino=3268 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  227.715702][   T29] audit: type=1400 audit(1755066349.499:7594): avc:  denied  { open } for  pid=12530 comm="syz.0.2970" path="/597/file0" dev="tmpfs" ino=3268 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  227.738758][   T29] audit: type=1400 audit(1755066349.499:7595): avc:  denied  { ioctl } for  pid=12530 comm="syz.0.2970" path="/597/file0" dev="tmpfs" ino=3268 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  227.769223][T12540] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  227.788592][T12540] lo speed is unknown, defaulting to 1000
[  227.923630][T12537] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2970'.
[  227.933186][T12393] veth0_vlan: entered promiscuous mode
[  227.942078][T12393] veth1_vlan: entered promiscuous mode
[  227.972615][T12393] veth0_macvtap: entered promiscuous mode
[  227.980617][T12393] veth1_macvtap: entered promiscuous mode
[  227.995799][T12393] batman_adv: batadv0: Interface activated: batadv_slave_0
[  228.008696][T12393] batman_adv: batadv0: Interface activated: batadv_slave_1
[  228.022990][ T9726] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  228.032695][ T9726] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  228.043148][ T9726] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  228.333276][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  228.425378][T12551] loop4: detected capacity change from 0 to 128
[  228.488640][ T9726] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  228.539195][   T29] audit: type=1400 audit(1755066350.409:7596): avc:  denied  { unlink } for  pid=3304 comm="syz-executor" name="file0" dev="tmpfs" ino=3268 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  228.622909][T12549] netlink: 14593 bytes leftover after parsing attributes in process `syz.4.2974'.
[  228.663847][   T29] audit: type=1400 audit(1755066350.539:7597): avc:  denied  { mounton } for  pid=12393 comm="syz-executor" path="/root/syzkaller.UsqfRd/syz-tmp" dev="sda1" ino=2049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[  228.688490][   T29] audit: type=1400 audit(1755066350.539:7598): avc:  denied  { mount } for  pid=12393 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  228.737384][   T29] audit: type=1400 audit(1755066350.589:7599): avc:  denied  { mount } for  pid=12393 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  229.603900][T12569] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  229.785193][T12572] loop5: detected capacity change from 0 to 512
[  229.836096][T12572] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  229.917488][T12569] lo speed is unknown, defaulting to 1000
[  229.996081][T12572] EXT4-fs error (device loop5): ext4_iget_extra_inode:5104: inode #15: comm syz.5.2979: corrupted in-inode xattr: overlapping e_value 
[  230.064270][T12572] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.2979: couldn't read orphan inode 15 (err -117)
[  230.110395][T12572] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  230.582708][T12611] loop2: detected capacity change from 0 to 2048
[  230.653219][T12611] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  230.748600][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  230.804802][T12590] lo speed is unknown, defaulting to 1000
[  230.842567][   T41] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  230.852983][   T41] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  230.868119][ T4043] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  230.989451][   T41] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  230.999343][   T41] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  231.034171][T12625] FAULT_INJECTION: forcing a failure.
[  231.034171][T12625] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  231.047305][T12625] CPU: 1 UID: 0 PID: 12625 Comm: syz.0.2989 Tainted: G        W           6.17.0-rc1-syzkaller-00014-g0e39a731820a #0 PREEMPT(voluntary) 
[  231.047345][T12625] Tainted: [W]=WARN
[  231.047353][T12625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  231.047416][T12625] Call Trace:
[  231.047424][T12625]  <TASK>
[  231.047434][T12625]  __dump_stack+0x1d/0x30
[  231.047461][T12625]  dump_stack_lvl+0xe8/0x140
[  231.047484][T12625]  dump_stack+0x15/0x1b
[  231.047533][T12625]  should_fail_ex+0x265/0x280
[  231.047560][T12625]  should_fail+0xb/0x20
[  231.047581][T12625]  should_fail_usercopy+0x1a/0x20
[  231.047602][T12625]  _copy_from_user+0x1c/0xb0
[  231.047636][T12625]  __copy_msghdr+0x244/0x300
[  231.047688][T12625]  ___sys_sendmsg+0x109/0x1d0
[  231.047726][T12625]  __sys_sendmmsg+0x178/0x300
[  231.047769][T12625]  __x64_sys_sendmmsg+0x57/0x70
[  231.047795][T12625]  x64_sys_call+0x1c4a/0x2ff0
[  231.047893][T12625]  do_syscall_64+0xd2/0x200
[  231.047924][T12625]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  231.047951][T12625]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  231.047976][T12625]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  231.048041][T12625] RIP: 0033:0x7f723f80ebe9
[  231.048058][T12625] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  231.048080][T12625] RSP: 002b:00007f723e277038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  231.048103][T12625] RAX: ffffffffffffffda RBX: 00007f723fa35fa0 RCX: 00007f723f80ebe9
[  231.048118][T12625] RDX: 0000000000000001 RSI: 0000200000004980 RDI: 0000000000000006
[  231.048170][T12625] RBP: 00007f723e277090 R08: 0000000000000000 R09: 0000000000000000
[  231.048184][T12625] R10: 0000000020008000 R11: 0000000000000246 R12: 0000000000000001
[  231.048198][T12625] R13: 00007f723fa36038 R14: 00007f723fa35fa0 R15: 00007ffeb083bce8
[  231.048218][T12625]  </TASK>
[  231.326874][   T41] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  231.336807][   T41] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  231.371798][T12626] loop3: detected capacity change from 0 to 1024
[  231.419798][T12626] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  231.432152][T12626] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  231.464193][   T41] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  231.474103][   T41] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  231.958412][T12590] chnl_net:caif_netlink_parms(): no params data found
[  232.006329][T12393] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  232.158242][T12590] bridge0: port 1(bridge_slave_0) entered blocking state
[  232.165433][T12590] bridge0: port 1(bridge_slave_0) entered disabled state
[  232.175045][T12590] bridge_slave_0: entered allmulticast mode
[  232.181936][T12590] bridge_slave_0: entered promiscuous mode
[  232.189980][T12590] bridge0: port 2(bridge_slave_1) entered blocking state
[  232.197083][T12590] bridge0: port 2(bridge_slave_1) entered disabled state
[  232.206515][T12590] bridge_slave_1: entered allmulticast mode
[  232.213301][T12590] bridge_slave_1: entered promiscuous mode
[  232.221710][T12654] IPv6: Can't replace route, no match found
[  232.285674][T12590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  232.306948][T12590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  232.388616][T12590] team0: Port device team_slave_0 added
[  232.405944][T12590] team0: Port device team_slave_1 added
[  232.439289][T12658] loop0: detected capacity change from 0 to 512
[  232.447316][T12590] batman_adv: batadv0: Adding interface: batadv_slave_0
[  232.454397][T12590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  232.480612][T12590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  232.494292][T12658] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  232.504634][T12658] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.2998: corrupted in-inode xattr: overlapping e_value 
[  232.520370][T12658] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.2998: couldn't read orphan inode 15 (err -117)
[  232.536893][T12658] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  232.715676][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  234.664060][T12668] loop5: detected capacity change from 0 to 128
[  234.684627][T12668] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1)
[  234.696653][T12668] FAT-fs (loop5): FAT read failed (blocknr 255)
[  234.949831][   T41]  (unregistering): Released all slaves
[  234.967346][   T29] kauditd_printk_skb: 42 callbacks suppressed
[  234.967364][   T29] audit: type=1400 audit(1755066356.839:7642): avc:  denied  { write } for  pid=12667 comm="syz.5.3001" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  235.005915][   T41] bond0 (unregistering): Released all slaves
[  235.041367][T12590] batman_adv: batadv0: Adding interface: batadv_slave_1
[  235.048370][T12590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  235.074401][T12590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  235.166034][   T41] IPVS: stopping master sync thread 5143 ...
[  235.180017][T12665] lo speed is unknown, defaulting to 1000
[  235.506941][   T41] hsr_slave_0: left promiscuous mode
[  235.585115][   T41] hsr_slave_1: left promiscuous mode
[  235.668074][   T41] veth0_macvtap: left promiscuous mode
[  235.689481][   T41] veth1_vlan: left promiscuous mode
[  235.694919][   T41] veth0_vlan: left promiscuous mode
[  235.752353][   T29] audit: type=1326 audit(1755066357.629:7643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12685 comm="syz.3.3005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9e7aebe9 code=0x7ffc0000
[  235.780899][T12686] FAULT_INJECTION: forcing a failure.
[  235.780899][T12686] name failslab, interval 1, probability 0, space 0, times 0
[  235.794081][T12686] CPU: 1 UID: 0 PID: 12686 Comm: syz.3.3005 Tainted: G        W           6.17.0-rc1-syzkaller-00014-g0e39a731820a #0 PREEMPT(voluntary) 
[  235.794126][T12686] Tainted: [W]=WARN
[  235.794133][T12686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  235.794145][T12686] Call Trace:
[  235.794152][T12686]  <TASK>
[  235.794161][T12686]  __dump_stack+0x1d/0x30
[  235.794285][T12686]  dump_stack_lvl+0xe8/0x140
[  235.794310][T12686]  dump_stack+0x15/0x1b
[  235.794331][T12686]  should_fail_ex+0x265/0x280
[  235.794374][T12686]  should_failslab+0x8c/0xb0
[  235.794414][T12686]  kmem_cache_alloc_node_noprof+0x57/0x320
[  235.794508][T12686]  ? set_task_ioprio+0x174/0x270
[  235.794540][T12686]  set_task_ioprio+0x174/0x270
[  235.794565][T12686]  __se_sys_ioprio_set+0x250/0x5a0
[  235.794616][T12686]  __x64_sys_ioprio_set+0x43/0x50
[  235.794649][T12686]  x64_sys_call+0x2faf/0x2ff0
[  235.794675][T12686]  do_syscall_64+0xd2/0x200
[  235.794719][T12686]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  235.794788][T12686]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  235.794826][T12686]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  235.794850][T12686] RIP: 0033:0x7f2e9e7aebe9
[  235.794869][T12686] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  235.794893][T12686] RSP: 002b:00007f2e9d217038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fb
[  235.794935][T12686] RAX: ffffffffffffffda RBX: 00007f2e9e9d5fa0 RCX: 00007f2e9e7aebe9
[  235.794949][T12686] RDX: 0000000000000000 RSI: 000000000000ee00 RDI: 0000000000000003
[  235.794965][T12686] RBP: 00007f2e9d217090 R08: 0000000000000000 R09: 0000000000000000
[  235.794980][T12686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  235.794996][T12686] R13: 00007f2e9e9d6038 R14: 00007f2e9e9d5fa0 R15: 00007ffc588dcc48
[  235.795035][T12686]  </TASK>
[  235.796872][   T29] audit: type=1326 audit(1755066357.649:7644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12685 comm="syz.3.3005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f2e9e7aebe9 code=0x7ffc0000
[  236.007035][   T29] audit: type=1326 audit(1755066357.649:7645): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12685 comm="syz.3.3005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9e7aebe9 code=0x7ffc0000
[  236.031028][   T29] audit: type=1326 audit(1755066357.649:7646): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12685 comm="syz.3.3005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2e9e7ad550 code=0x7ffc0000
[  236.055641][   T29] audit: type=1326 audit(1755066357.649:7647): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12685 comm="syz.3.3005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2e9e7ad69f code=0x7ffc0000
[  236.079636][   T29] audit: type=1326 audit(1755066357.649:7648): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12685 comm="syz.3.3005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7f2e9e7aebe9 code=0x7ffc0000
[  236.226957][T12696] loop5: detected capacity change from 0 to 512
[  236.236618][T12696] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  236.288531][T12696] EXT4-fs error (device loop5): ext4_iget_extra_inode:5104: inode #15: comm syz.5.3008: corrupted in-inode xattr: overlapping e_value 
[  236.304062][T12696] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.3008: couldn't read orphan inode 15 (err -117)
[  236.330866][T12696] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  236.343905][   T29] audit: type=1326 audit(1755066357.989:7649): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12685 comm="syz.3.3005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f2e9e7ad5fc code=0x7ffc0000
[  236.344011][   T29] audit: type=1326 audit(1755066357.989:7650): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12685 comm="syz.3.3005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2e9e7ad69f code=0x7ffc0000
[  236.344043][   T29] audit: type=1326 audit(1755066357.989:7651): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12685 comm="syz.3.3005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f2e9e7ad84a code=0x7ffc0000
[  236.490962][T12590] hsr_slave_0: entered promiscuous mode
[  236.491624][T12590] hsr_slave_1: entered promiscuous mode
[  236.491890][T12590] debugfs: 'hsr0' already exists in 'hsr'
[  236.491908][T12590] Cannot create hsr debugfs directory
[  236.503433][T12705] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3009'.
[  236.700100][ T4043] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  236.723600][T12705] loop3: detected capacity change from 0 to 8192
[  236.731282][T12705] vfat: Unknown parameter '������XfمC�'
[  237.071792][T12720] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3014'.
[  237.104799][T12721] loop5: detected capacity change from 0 to 512
[  237.112277][T12721] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  237.157016][T12721] EXT4-fs (loop5): 1 truncate cleaned up
[  237.175426][   T41] IPVS: stop unused estimator thread 0...
[  237.231136][T12721] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  237.250389][T12721] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  237.868231][T12748] loop2: detected capacity change from 0 to 512
[  237.875658][T12748] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  237.887029][T12748] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.3019: corrupted in-inode xattr: overlapping e_value 
[  237.902589][T12748] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.3019: couldn't read orphan inode 15 (err -117)
[  237.916934][T12748] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  242.664035][   T29] kauditd_printk_skb: 8 callbacks suppressed
[  242.664058][   T29] audit: type=1400 audit(1755066364.249:7660): avc:  denied  { setattr } for  pid=12762 comm="syz.3.3021" name="ttyS3" dev="devtmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1
[  242.965810][T12763] netlink: 44 bytes leftover after parsing attributes in process `+}[@'.
[  244.233127][T12590] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  244.458954][T12764] loop3: detected capacity change from 0 to 8192
[  244.565263][T12764] vfat: Unknown parameter '������XfمC�'
[  244.765289][T12771] loop0: detected capacity change from 0 to 512
[  245.393625][T12771] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  246.114197][T12771] EXT4-fs: error -4 creating inode table initialization thread
[  246.492163][T12771] EXT4-fs (loop0): mount failed
[  247.502574][T12590] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  250.462159][T12590] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  251.891611][T12790] IPv6: Can't replace route, no match found
[  252.328226][T12590] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  257.252178][   T29] audit: type=1400 audit(1755066377.739:7661): avc:  denied  { setopt } for  pid=12794 comm="syz.0.3027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  257.713600][T12800] loop0: detected capacity change from 0 to 136
[  262.483930][T12800] Attempt to read inode for relocated directory
[  268.258196][   T29] audit: type=1326 audit(1755066389.529:7662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12814 comm="syz.3.3030" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2e9e7aebe9 code=0x0
[  284.620434][T12838] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3033'.
[  348.741451][ T5576] syz_tun (unregistering): left promiscuous mode
[  393.743288][   T41] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  431.220336][   T41] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  459.196058][   T41] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  482.565815][   T41] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  494.160830][T12926] lo speed is unknown, defaulting to 1000
[  494.347333][   T41] bridge_slave_1: left allmulticast mode
[  494.358166][   T41] bridge_slave_1: left promiscuous mode
[  494.371613][   T41] bridge0: port 2(bridge_slave_1) entered disabled state
[  502.896777][   T41] bridge_slave_0: left allmulticast mode
[  502.907732][   T41] bridge_slave_0: left promiscuous mode
[  502.921006][   T41] bridge0: port 1(bridge_slave_0) entered disabled state
[  520.641155][    C1] ==================================================================
[  520.649273][    C1] BUG: KCSAN: data-race in wq_worker_tick / wq_worker_tick
[  520.656510][    C1] 
[  520.658844][    C1] read-write to 0xffff8881000732b8 of 8 bytes by interrupt on cpu 0:
[  520.666949][    C1]  wq_worker_tick+0x60/0x230
[  520.671556][    C1]  sched_tick+0x11a/0x270
[  520.675989][    C1]  update_process_times+0x15f/0x190
[  520.681298][    C1]  tick_nohz_handler+0x249/0x2d0
[  520.686252][    C1]  __hrtimer_run_queues+0x20c/0x5a0
[  520.691468][    C1]  hrtimer_interrupt+0x21a/0x460
[  520.696420][    C1]  __sysvec_apic_timer_interrupt+0x5c/0x1d0
[  520.702339][    C1]  sysvec_apic_timer_interrupt+0x32/0x80
[  520.707988][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  520.713984][    C1]  __tsan_unaligned_write8+0x135/0x190
[  520.719476][    C1]  ipv4_dst_destroy+0xed/0x160
[  520.724265][    C1]  dst_destroy+0x73/0x330
[  520.728607][    C1]  dst_destroy_rcu+0x19/0x20
[  520.733208][    C1]  rcu_core+0x5aa/0xc30
[  520.737378][    C1]  rcu_core_si+0xd/0x20
[  520.741547][    C1]  handle_softirqs+0xba/0x290
[  520.746235][    C1]  do_softirq+0x5d/0x90
[  520.750401][    C1]  __local_bh_enable_ip+0x70/0x80
[  520.755441][    C1]  _raw_spin_unlock_bh+0x36/0x40
[  520.760400][    C1]  nsim_dev_trap_report_work+0x52b/0x630
[  520.766059][    C1]  process_scheduled_works+0x4cb/0x9d0
[  520.771536][    C1]  worker_thread+0x582/0x770
[  520.776185][    C1]  kthread+0x489/0x510
[  520.780272][    C1]  ret_from_fork+0xda/0x150
[  520.784793][    C1]  ret_from_fork_asm+0x1a/0x30
[  520.789573][    C1] 
[  520.791900][    C1] read-write to 0xffff8881000732b8 of 8 bytes by interrupt on cpu 1:
[  520.799972][    C1]  wq_worker_tick+0x60/0x230
[  520.804579][    C1]  sched_tick+0x11a/0x270
[  520.808922][    C1]  update_process_times+0x15f/0x190
[  520.814140][    C1]  tick_nohz_handler+0x249/0x2d0
[  520.819098][    C1]  __hrtimer_run_queues+0x20c/0x5a0
[  520.824321][    C1]  hrtimer_interrupt+0x21a/0x460
[  520.829273][    C1]  __sysvec_apic_timer_interrupt+0x5c/0x1d0
[  520.835200][    C1]  sysvec_apic_timer_interrupt+0x32/0x80
[  520.840864][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  520.846874][    C1]  __netif_receive_skb_core+0x187/0x23b0
[  520.852532][    C1]  __netif_receive_skb+0x59/0x270
[  520.857576][    C1]  process_backlog+0x229/0x420
[  520.862364][    C1]  __napi_poll+0x63/0x310
[  520.866723][    C1]  net_rx_action+0x391/0x830
[  520.871334][    C1]  handle_softirqs+0xba/0x290
[  520.876027][    C1]  do_softirq+0x5d/0x90
[  520.880201][    C1]  __local_bh_enable_ip+0x70/0x80
[  520.885242][    C1]  _raw_spin_unlock_bh+0x36/0x40
[  520.890213][    C1]  nsim_dev_trap_report_work+0x52b/0x630
[  520.895877][    C1]  process_scheduled_works+0x4cb/0x9d0
[  520.901358][    C1]  worker_thread+0x582/0x770
[  520.905987][    C1]  kthread+0x489/0x510
[  520.910070][    C1]  ret_from_fork+0xda/0x150
[  520.914593][    C1]  ret_from_fork_asm+0x1a/0x30
[  520.919399][    C1] 
[  520.921729][    C1] value changed: 0x000000000170a700 -> 0x000000000170ce10
[  520.928841][    C1] 
[  520.931175][    C1] Reported by Kernel Concurrency Sanitizer on:
[  520.937336][    C1] CPU: 1 UID: 0 PID: 3862 Comm: kworker/u8:7 Tainted: G        W           6.17.0-rc1-syzkaller-00014-g0e39a731820a #0 PREEMPT(voluntary) 
[  520.951578][    C1] Tainted: [W]=WARN
[  520.955406][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  520.965478][    C1] Workqueue: events_unbound nsim_dev_trap_report_work
[  520.972280][    C1] ==================================================================
SYZFAIL: failed to recv rpc
[  523.135280][   T29] audit: type=1400 audit(1755066644.869:7663): avc:  denied  { write } for  pid=3290 comm="syz-executor" path="pipe:[771]" dev="pipefs" ino=771 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)