last executing test programs:

1m6.480861552s ago: executing program 4 (id=339):
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xe)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc, 0x0, 0x4001}, 0x4000800)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00'}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10)
prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00')
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0)

1m6.480255432s ago: executing program 4 (id=341):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='kmem_cache_free\x00', r1, 0x0, 0x20000}, 0x18)
prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00')
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x1f}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r2}, 0x10)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000f9ffffff0000000000000000850000002c00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x90)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r5=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r4, r5, 0x25, 0x0, @val=@iter={0x0}}, 0x20)
syz_emit_ethernet(0xdc1, &(0x7f0000003040)=ANY=[], 0x0)
sendmsg$kcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000c00)="d800000018009903e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901223fc6ab007f6f94007100a007a290457f0189b316277ce06bf75c10dde13fb206b33b174e54980ebace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1000000730d7a5025ccca262f3d40fad956d2b6d5a3a6692ac217e11382e767e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6cc452a92307f00000e970300000000", 0xd8}], 0x1}, 0x20048812)

1m6.368758134s ago: executing program 4 (id=344):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f00000017c0)='./file1\x00', 0x200080, &(0x7f0000000000), 0x1, 0xb80, &(0x7f0000000c40)="$eJzs3MtrXFUYAPDv3jyaNrGTiqgtggGpFcVp2hSFrlrXooIuuuyYTErI9GEmggldpHWvLkRcFKR/guDeunAluKgLrX9BEYsU3bQuInce6dBkktjO9PTx+8GZe86c6XzfN5fOPQfmJoAn1kTxkEfsjYiTWUSp9XweEcON3kjESvN1t2+eny5aFqur7/+VRRYRt26en26/V9Y6jrYGIxFx9a0snv50fdz60vJ8pVarLrTGBxdPnztYX1p+fe505VT1VPXMkak3j0y9MTXVw1qvn/vw6xd+eefli5c/m3z3q90/ZXEsxlpznXX0ykRMrH0mnQYjotLrYIkMtOrprDMbTJgQAACbyjvWcM9GKQbizuKtFD/+mjQ5AAAAoCdWByJWAQAAgMdcZv8PAAAAj7n27wBu3Tw/3W5pf5HwYN04HhHjzfrb9zc3ZwZjpXEciaGI2PV3Fp23tWbNf3bfJopI3/1cLVr06T7kzaxciIjnNzr/WaP+8cZd3OvrzyNisgfxJ+4aP0r1H+tB/NT1A/BkunK8eSFbf/3L19Y/scH1b3CDa9e9SH39a6//bq9b/92pf6DL+u+9bcbY9++rV7vNda7/Tnz++0wRvzjeV1H/w40LEfsGN6o/W6s/61L/yW3GGJ2+fqnbXFF/UW+7Pej6Vy9H7I+N62/LNvv7RAdn52rVyeZjlxj7fzhxoFv8zvNftCJ+ey/wIBTnf1eX+rc6/+e2GWP8uT/3dpvbuv78j+Hsg0ZvuPXMJ5XFxYVDEcPZ2+ufP7x5Lu3XtN+jqP+Vlzb//79R/cV3wkrrcyj2Ahdax2J88a6Yo/sPf3vv9fdXUf/MPZ7/L7YZ45vvL33UbS51/QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8GvKIGIssL6/187xcjhiNiGdiV147W198bfbsx2dmirmI8RjKZ+dq1cmIKDXHWTE+1OjfGR++azwVEXsi4svSzsa4PH22NpO6eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANaMRsRYZHk5IvKI+KeU5+Vy6qwAAACAnhtPnQAAAADQd/b/AAAA8Piz/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDP9rx45VoWEStHdzZaYbg1N5Q0M6Df8tQJAMkMpE4ASGYwdQJAMvb4QLbF/EjXmR09zwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAh9eBvVeuZRGxcnRnoxWGW3NDSTMD+i1PnQCQzEDqBIBkBlMnACRjjw9kW8yPdJ3Z0fNcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHh4jTValpcjIm/087xcjngqIsZjKJudq1UnI2J3RPxWGtpRjA+lThoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICeqy8tz1dqteqCjo6Ozlon9TcTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp1JeW5yu1WnWhnjoTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAILX60vJ8pVarLvSxk7pGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADS+S8AAP//szUGGQ==")
r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10)
r4 = openat$cgroup_procs(r0, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f0000000380), 0x12)

1m6.151026738s ago: executing program 4 (id=349):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x20000c4, &(0x7f0000000080), 0x1, 0x561, &(0x7f0000001600)="$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")
lsetxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[], 0xe01, 0x1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000000)=0x9, 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r3=>0x0})
sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x1c, r2, 0x711, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x28008000}, 0x40000)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x207}}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x18)
syz_clone3(&(0x7f00000004c0)={0x48080000, 0x0, 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, 0x0}, 0x58)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1)

1m5.405006512s ago: executing program 4 (id=355):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xc, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x18)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x5, 0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x12, 0x1}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44010}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c0100001000130780fffffffcdbdf252001000000000000000000000000000020010000000000000000000000000001000000004e210002000000006c000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="040000"], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2000)

1m4.547150939s ago: executing program 4 (id=363):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = gettid()
timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=<r4=>0x0)
timer_settime(r4, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
pipe2(&(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
splice(r2, 0x0, r6, 0x0, 0xf, 0x8)
pipe2$9p(&(0x7f0000000180)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x0)
tee(r5, r8, 0x53, 0x0)
write$binfmt_script(r8, &(0x7f0000000640)={'#! ', './file0'}, 0xb)
tee(r7, r6, 0x9, 0x8)

1m4.52242054s ago: executing program 32 (id=363):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = gettid()
timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=<r4=>0x0)
timer_settime(r4, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
pipe2(&(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
splice(r2, 0x0, r6, 0x0, 0xf, 0x8)
pipe2$9p(&(0x7f0000000180)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x0)
tee(r5, r8, 0x53, 0x0)
write$binfmt_script(r8, &(0x7f0000000640)={'#! ', './file0'}, 0xb)
tee(r7, r6, 0x9, 0x8)

4.354387546s ago: executing program 5 (id=1056):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007000000"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@enum64={0x1, 0x0, 0x0, 0x13, 0x0, 0x2}]}, {0x0, [0x61]}}, 0x0, 0x27, 0x0, 0x8}, 0x28)

3.724899098s ago: executing program 0 (id=1060):
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x3)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x18)
socket(0x2, 0x805, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x2, 0x0, 0x1, [@NETEM_LOSS_GE={0x18}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_RATE={0x4, 0xd}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x9c}}, 0x0)

3.706267018s ago: executing program 3 (id=1061):
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x80000)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa000000d})
write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0xf7ffffff}}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0}, 0x18)
socket$packet(0x11, 0x2, 0x300)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000400)={0xa})
epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x7460)

3.60811301s ago: executing program 0 (id=1065):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_wakeup_irq', 0x0, 0xb)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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")
chmod(&(0x7f0000000140)='./file0\x00', 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2}}, 0x2}, 0x1c)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000040)=0x1a4a, 0x4)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c)
sendto$inet6(r1, &(0x7f0000000140)="8a", 0x1, 0x8001, 0x0, 0x0)
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000001600)={r0, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}})

3.578270221s ago: executing program 0 (id=1066):
syz_open_dev$evdev(0x0, 0x1, 0x2002)
syz_open_procfs(0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00'}, 0x10)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f00000000c0), 0x1, 0x4b4, &(0x7f0000000c80)="$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")

3.424767054s ago: executing program 5 (id=1067):
socket$packet(0x11, 0x2, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18)
linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x400)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0x7, {"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", 0x1000}}, 0x1006)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
unshare(0x2040400)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000500)="7c15b6bce0568bdbef75e4667376c6507c51094765fcc21aa8810d5a760327a50bc67e6f84d20215ae0b84a847e4a948b5258b28626336e159ad54d4c00f287cdf1bade52605c3e691", 0x49}], 0x1, 0x0)

2.867536145s ago: executing program 3 (id=1070):
open_tree(0xffffffffffffff9c, 0x0, 0x89901)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000540)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0)
write$cgroup_int(r3, &(0x7f0000000040)=0x900, 0x12)

2.818634105s ago: executing program 2 (id=1072):
socket$nl_route(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
openat(0xffffffffffffffff, 0x0, 0x41e4c1, 0xc8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18)
syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x8b7c, 0x800, 0x200007, 0x22}, &(0x7f0000000940)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000580)='./file0\x00', 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x1, 0x120b, &(0x7f0000002300)="$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")
rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000001300)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

2.654973789s ago: executing program 2 (id=1073):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x60c02, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x60c02, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0xf1110, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x5, 0xc, 0x3, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa0800, 0x0)
close(r4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0))
ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'})

2.654692779s ago: executing program 0 (id=1074):
socket$inet(0x2, 0x1, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0)
fsetxattr(r1, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000080)='@\x00', 0x2, 0x3)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4)
setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0)
syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)

2.567357151s ago: executing program 5 (id=1075):
r0 = socket$kcm(0xa, 0x1, 0x106)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES32, @ANYRES16], 0x1, 0x36e, &(0x7f0000000c00)="$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")
r3 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4)
syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r3)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4)
sendmsg$kcm(r0, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x5}, 0x80, 0x0}, 0x24004059)
close(r0)

2.316925225s ago: executing program 5 (id=1077):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007", @ANYBLOB], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00'}, 0x10)
request_key(&(0x7f0000002740)='asymmetric\x00', &(0x7f0000002780)={'syz', 0x3}, &(0x7f00000027c0)=',*[\\/&)\x00', 0xffffffffffffffff)

2.206567777s ago: executing program 1 (id=1079):
setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0)
utimensat(0xffffffffffffffff, &(0x7f0000000880)='./file0/file0\x00', 0x0, 0x100)
syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="757466382c626c6f636b3d307830303030303030303030303030323030006e6f726f636b2c63727566742c6d61703d6f66662c646d6f64653d3078303430303030303030303030303063664173657373696f6e3d3078303030303030303030303030303033382c756e686964652c756e686964652c6769643d29e0cd5c372ab078c28fb05c6421428d066455368833565fd726743513f4466efa8d4fba06d57341875f5775ab343c0f6bc59fbde784ec3597e0e286d8d0dbf360afa3bc5c145b6e4f8b0305932fb55ff13f9fcb5035769f5fca33ac02bdeacb24c58103edc3d8b46df7614aa493952584ee662174309b11a4ad19e64dcdeeca1c148170b8d1aaf26082364b0d90d63d8502ffa63dde945e4612ac134315f389af667a04931ad25ff10b9b5107e517dbbcf5dcb60f564f54b344218d9325b53e829c38c96c69adc9e745202923a1b8124333cce0a8f1c748d42a272eb3e5502051090f1ac34fe5e8f038", @ANYRES8, @ANYRESHEX], 0x2, 0x699, &(0x7f0000000140)="$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")
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e40)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4010}, 0x0)
io_uring_enter(0xffffffffffffffff, 0x70a, 0x41e3, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
socket(0x11, 0x3, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000300240248ff050005001200", 0x2e}], 0x1}, 0x0)

2.132838389s ago: executing program 1 (id=1081):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1b96aadc3618c72}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
pipe2(&(0x7f0000000000)={0x0, <r3=>0x0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
writev(r4, &(0x7f0000000cc0)=[{&(0x7f00000000c0)="14", 0x1}, {&(0x7f0000000500)="bf1f86611434f128", 0x8}], 0x2)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)=[0x9], 0x0, 0x0, 0x1, 0x1}}, 0x40)
close_range(r3, 0xffffffffffffffff, 0x0)

2.132580989s ago: executing program 2 (id=1082):
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001b00)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18)
r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
writev(r4, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8ff0000000000ff000044850000000e0000003f0000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r5}, 0x18)
unshare(0x2040400)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r6 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341)
ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200))

1.785411686s ago: executing program 3 (id=1083):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f40), r0)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, 0x0, 0x4000044)
ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000010)
r1 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc)
syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty=0x200000, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x0, 0xff80000}}}}}, 0x0)

1.767218806s ago: executing program 2 (id=1084):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc)
write(r0, &(0x7f0000000000)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26)
connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000b4bffc)=0x1, 0x4)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
write(r0, &(0x7f0000000980)="a9", 0x1)
ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x4c80, 0x7000000)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0)

1.679821478s ago: executing program 3 (id=1085):
socket(0xa, 0x1, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x4, 0x1268, &(0x7f0000002500)="$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")
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff)
syz_io_uring_setup(0x2ea3, &(0x7f0000000180)={0x0, 0x2ae5, 0x800, 0x2, 0x5e}, 0x0, 0x0)
sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='49GuMV\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="030300000000fddbdf253d0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000"], 0x34}, 0x1, 0x0, 0x0, 0x880}, 0x4000000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3)
write$binfmt_elf64(r3, &(0x7f0000000180)=ANY=[], 0x78)
sendfile(r2, r3, &(0x7f0000000080), 0x8)
fcntl$addseals(r3, 0x409, 0x8)
fallocate(r3, 0x3, 0x9100, 0x3)

1.679530388s ago: executing program 1 (id=1086):
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x50)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
symlink(0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000400007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
modify_ldt$write(0x1, &(0x7f0000000080)={0x1000, 0x1000, 0xfffffffffffffffe}, 0x10)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$setregs(0xd, r0, 0x930, &(0x7f0000000800))
ptrace$poke(0x21, r0, 0x0, 0x0)

1.57929087s ago: executing program 1 (id=1087):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x7}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x55}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x25, 0x3, 0x7}]}, 0x10)
syz_open_dev$usbmon(&(0x7f00000001c0), 0x8, 0x48000)
getsockopt$sock_buf(r1, 0x1, 0x1a, &(0x7f0000001240)=""/4102, &(0x7f0000000080)=0x1006)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r2}, 0x10)
r3 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'gre0\x00', <r4=>0x0})
bind$packet(r3, &(0x7f0000000300)={0x11, 0x1b, r4, 0x1, 0xfc, 0x6, @local}, 0x14)
bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14)
syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, &(0x7f0000000000)={0x40, 0x5, 0xc, {0xc, 0x2, "07b24f90fa1a9f306bae"}}, 0x0, 0x0, 0x0}, 0x0)

1.464744082s ago: executing program 5 (id=1088):
epoll_create1(0x80000)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000400000000000000000000850000005000000085000000d000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x50)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000005c0)='kmem_cache_free\x00', r0}, 0x18)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0)
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000)

1.304712695s ago: executing program 0 (id=1089):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
setfsgid(0xee01)
r0 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00')
fchdir(r1)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x0)
accept4(r2, 0x0, 0x0, 0x80800)
r3 = syz_open_procfs(r0, &(0x7f0000000280)='io\x00')
pread64(r3, &(0x7f0000000140)=""/15, 0xf, 0x4)

1.304419735s ago: executing program 3 (id=1090):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
syz_clone(0x408cc400, 0x0, 0x26, 0x0, 0x0, 0x0)

996.178371ms ago: executing program 1 (id=1091):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000001880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000020000085000000700000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0x7}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
creat(&(0x7f00000000c0)='./file0\x00', 0x48)
pipe2$9p(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r3 = dup(r2)
write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94)
write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3])
r4 = open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x102)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r4, &(0x7f0000000580)={0x16, 0x98, 0xfa00, {0x0, 0x2, 0xffffffffffffffff, 0x10, 0x1, @ib={0x1b, 0x100, 0xe28000, {"4f140468c3d648d20ec10afc04e10a45"}, 0x6, 0x4, 0x6}}}, 0xa0)

938.875942ms ago: executing program 1 (id=1092):
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=@newtaction={0xf0, 0x30, 0xffff, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x1}}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x6c, 0x2, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1b1, 0xffffffffffffffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x26e6}}, @TCA_GACT_PROB={0xfffffffffffffe74, 0x3, {0x1, 0x18a8, 0x6}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xf0}}, 0x0)

868.863263ms ago: executing program 2 (id=1093):
r0 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0)
mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(r0, 0x0, 0x0, 0x6, 0x0)
mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0)
mq_unlink(&(0x7f0000000000)='eth0\x00')
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r3, 0x0, 0x5}, 0x18)
r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs\x00')
close_range(r4, 0xffffffffffffffff, 0x0)
sendmsg$nl_xfrm(r4, 0x0, 0x22000000)
sendto$inet(r1, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10)
close(r0)

868.428194ms ago: executing program 2 (id=1094):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = socket$kcm(0x21, 0x2, 0x2)
recvmsg$kcm(r1, 0x0, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000035c0)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x240000c0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10)
sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x10)
kexec_load(0x0, 0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x41000000}], 0x0)

610.724868ms ago: executing program 5 (id=1095):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f00000005c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB], 0x48)
write(r3, &(0x7f0000004200)='t', 0x1)
sendfile(r3, r2, 0x0, 0x3ffff)
sendfile(r3, r2, 0x0, 0x7ffff000)

462.049052ms ago: executing program 0 (id=1096):
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x14c20, 0x0, 0x0, 0x0, 0x48d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'})
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454da, &(0x7f0000000140)={'bond0\x00'})
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432})
openat$tun(0xffffffffffffff9c, 0x0, 0x4a8b02, 0x0)

0s ago: executing program 3 (id=1097):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18000, &(0x7f0000000580)=ANY=[@ANYRES32=0x0, @ANYRES16=r0, @ANYRES16=0x0, @ANYRESHEX=r0, @ANYRES64=r1, @ANYRESOCT], 0x8, 0x300, &(0x7f0000000b80)="$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")
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
fdatasync(r2)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00'}, 0x10)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})

kernel console output (not intermixed with test programs):

fy_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[   58.749394][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[   58.764803][ T3498] udevd[3498]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[   58.781304][ T4095] loop4: detected capacity change from 0 to 2048
[   58.858145][ T4095] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   58.913698][ T4095] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   59.059933][ T4105] loop4: detected capacity change from 0 to 512
[   59.106367][ T4105] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   59.182593][ T4105] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   59.308354][ T4107] loop0: detected capacity change from 0 to 8192
[   59.332928][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   59.383901][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   59.806661][ T4129] loop0: detected capacity change from 0 to 512
[   59.954922][ T4129] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.205: bg 0: block 393: padding at end of block bitmap is not set
[   59.970756][ T4129] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem
[   59.981460][ T4129] EXT4-fs (loop0): 2 truncates cleaned up
[   59.988447][ T4129] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   60.207911][   T29] kauditd_printk_skb: 200 callbacks suppressed
[   60.207979][   T29] audit: type=1400 audit(1757449708.898:644): avc:  denied  { create } for  pid=4132 comm="syz.3.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   60.336552][   T29] audit: type=1400 audit(1757449708.948:645): avc:  denied  { write } for  pid=4132 comm="syz.3.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   60.839561][   T29] audit: type=1400 audit(1757449709.358:646): avc:  denied  { create } for  pid=4135 comm="syz.1.212" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   60.860260][   T29] audit: type=1400 audit(1757449709.518:647): avc:  denied  { cpu } for  pid=4136 comm="syz.3.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[   60.879257][   T29] audit: type=1400 audit(1757449709.518:648): avc:  denied  { write } for  pid=4136 comm="syz.3.210" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   60.901923][   T29] audit: type=1326 audit(1757449709.518:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4136 comm="syz.3.210" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f12d0c3ebe9 code=0x0
[   60.924654][   T29] audit: type=1400 audit(1757449709.528:650): avc:  denied  { mounton } for  pid=4139 comm="syz.4.213" path="/53/file0" dev="tmpfs" ino=301 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   61.060619][ T4149] netlink: 'syz.4.216': attribute type 10 has an invalid length.
[   61.128463][ T4152] netlink: 8 bytes leftover after parsing attributes in process `syz.2.217'.
[   61.178684][ T4152] netlink: 4 bytes leftover after parsing attributes in process `syz.2.217'.
[   61.216566][   T29] audit: type=1400 audit(1757449709.598:651): avc:  denied  { mount } for  pid=4135 comm="syz.1.212" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[   61.238736][   T29] audit: type=1400 audit(1757449709.698:652): avc:  denied  { unlink } for  pid=3314 comm="syz-executor" name="file0" dev="tmpfs" ino=301 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   61.261337][   T29] audit: type=1400 audit(1757449709.888:653): avc:  denied  { create } for  pid=4153 comm="syz.4.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   61.312490][ T4157] netlink: 'syz.4.219': attribute type 30 has an invalid length.
[   61.405343][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   61.471036][ T4162] netlink: 28 bytes leftover after parsing attributes in process `syz.0.221'.
[   61.479974][ T4162] netlink: 28 bytes leftover after parsing attributes in process `syz.0.221'.
[   61.571863][    T9] Process accounting resumed
[   61.742463][ T4175] loop0: detected capacity change from 0 to 2048
[   61.805346][ T3498]  loop0: p2 p3 p7
[   61.840156][ T4175]  loop0: p2 p3 p7
[   61.922906][ T4184] SELinux:  Context system_u:object_r:systemd_logger_exec_t:s0 is not valid (left unmapped).
[   61.940227][ T3297] udevd[3297]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory
[   61.940323][ T3498] udevd[3498]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory
[   61.963113][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory
[   61.984240][ T4184] netlink: 48 bytes leftover after parsing attributes in process `syz.3.229'.
[   62.152031][ T4196] all: renamed from bridge_slave_0 (while UP)
[   62.483717][ T4207] netlink: 28 bytes leftover after parsing attributes in process `syz.3.237'.
[   62.492748][ T4207] netlink: 28 bytes leftover after parsing attributes in process `syz.3.237'.
[   62.602014][ T4169] syz.1.224 (4169) used greatest stack depth: 6136 bytes left
[   62.657997][ T4210] loop1: detected capacity change from 0 to 512
[   62.686322][ T4210] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   62.710968][ T4210] EXT4-fs (loop1): Can't support bigalloc feature without extents feature
[   62.710968][ T4210] 
[   62.722048][ T4210] EXT4-fs (loop1): Skipping orphan cleanup due to unknown ROCOMPAT features
[   62.757380][ T4210] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   62.814141][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   63.088040][ T4223] loop1: detected capacity change from 0 to 512
[   63.113286][ T4223] ext4: Unknown parameter 'smackfstransmute'
[   63.216538][ T4229] all: renamed from bridge_slave_0
[   63.311597][ T4241] atomic_op ffff8881385f0928 conn xmit_atomic 0000000000000000
[   63.319899][ T4233] syzkaller0: entered promiscuous mode
[   63.325467][ T4233] syzkaller0: entered allmulticast mode
[   63.411850][ T4237] tipc: Started in network mode
[   63.416786][ T4237] tipc: Node identity f62969181fc1, cluster identity 4711
[   63.424157][ T4237] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   63.437622][ T4235] tipc: Resetting bearer <eth:syzkaller0>
[   63.479539][ T4235] tipc: Disabling bearer <eth:syzkaller0>
[   63.710208][ T4246] loop2: detected capacity change from 0 to 512
[   63.750201][ T4246] EXT4-fs: Ignoring removed nobh option
[   63.887993][ T4246] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.261: corrupted inode contents
[   63.945081][ T4246] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #3: comm syz.2.261: mark_inode_dirty error
[   64.012164][ T4246] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.261: corrupted inode contents
[   64.074278][ T4246] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.261: mark_inode_dirty error
[   64.117069][ T4246] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.261: Failed to acquire dquot type 0
[   64.150226][ T4246] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.261: corrupted inode contents
[   64.179102][ T4246] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #16: comm syz.2.261: mark_inode_dirty error
[   64.205132][ T4246] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.261: corrupted inode contents
[   64.234403][ T4246] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.261: mark_inode_dirty error
[   64.262300][ T4246] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.261: corrupted inode contents
[   64.291756][ T4246] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem
[   64.321830][ T4246] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.261: corrupted inode contents
[   64.363042][ T4246] EXT4-fs error (device loop2): ext4_truncate:4666: inode #16: comm syz.2.261: mark_inode_dirty error
[   64.390253][ T4269] loop3: detected capacity change from 0 to 2048
[   64.399859][ T4246] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem
[   64.435876][ T4269] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   64.472183][ T4246] EXT4-fs (loop2): 1 truncate cleaned up
[   64.501373][ T4246] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   64.549846][ T4246] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   64.571927][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   64.668200][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   64.720571][ T4276] netlink: 'syz.2.259': attribute type 10 has an invalid length.
[   64.753340][ T4276] bond0: (slave batadv0): Error -22 calling dev_set_mtu
[   64.815567][ T4278] netlink: 4 bytes leftover after parsing attributes in process `syz.2.260'.
[   64.834583][ T4278] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   64.858647][ T4278] batman_adv: batadv0: Removing interface: batadv_slave_1
[   64.949471][ T4280] netlink: 64 bytes leftover after parsing attributes in process `syz.2.262'.
[   65.067526][ T4288] netlink: 256 bytes leftover after parsing attributes in process `syz.0.267'.
[   65.235924][ T4286] loop2: detected capacity change from 0 to 256
[   65.290319][   T29] kauditd_printk_skb: 51 callbacks suppressed
[   65.290368][   T29] audit: type=1400 audit(1757449713.978:703): avc:  denied  { wake_alarm } for  pid=4299 comm="syz.4.271" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   65.318484][ T4286] FAT-fs (loop2): Directory bread(block 64) failed
[   65.326317][ T4286] FAT-fs (loop2): Directory bread(block 65) failed
[   65.337737][ T4286] FAT-fs (loop2): Directory bread(block 66) failed
[   65.354681][ T4286] FAT-fs (loop2): Directory bread(block 67) failed
[   65.375071][ T4286] FAT-fs (loop2): Directory bread(block 68) failed
[   65.400735][ T4286] FAT-fs (loop2): Directory bread(block 69) failed
[   65.409255][   T29] audit: type=1400 audit(1757449714.098:704): avc:  denied  { create } for  pid=4304 comm="syz.0.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[   65.450742][ T4286] FAT-fs (loop2): Directory bread(block 70) failed
[   65.459189][ T4286] FAT-fs (loop2): Directory bread(block 71) failed
[   65.486880][ T4286] FAT-fs (loop2): Directory bread(block 72) failed
[   65.503014][   T29] audit: type=1400 audit(1757449714.128:705): avc:  denied  { connect } for  pid=4304 comm="syz.0.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[   65.523015][   T29] audit: type=1400 audit(1757449714.128:706): avc:  denied  { ioctl } for  pid=4304 comm="syz.0.272" path="socket:[7580]" dev="sockfs" ino=7580 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[   65.550810][ T4286] FAT-fs (loop2): Directory bread(block 73) failed
[   65.624052][   T29] audit: type=1400 audit(1757449714.318:707): avc:  denied  { setopt } for  pid=4314 comm="syz.4.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   65.692211][   T29] audit: type=1326 audit(1757449714.348:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4314 comm="syz.4.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f345aebe9 code=0x7ffc0000
[   65.715914][   T29] audit: type=1326 audit(1757449714.348:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4314 comm="syz.4.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f345aebe9 code=0x7ffc0000
[   65.739276][   T29] audit: type=1326 audit(1757449714.348:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4314 comm="syz.4.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7f2f345aebe9 code=0x7ffc0000
[   65.762484][   T29] audit: type=1326 audit(1757449714.348:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4314 comm="syz.4.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f345aebe9 code=0x7ffc0000
[   65.785751][   T29] audit: type=1326 audit(1757449714.348:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4314 comm="syz.4.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f345aebe9 code=0x7ffc0000
[   65.839567][ T4320] loop2: detected capacity change from 0 to 2048
[   65.863202][ T4320] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   65.882711][ T4320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   66.213067][ T4338] loop2: detected capacity change from 0 to 1024
[   66.231288][ T4338] EXT4-fs: Ignoring removed oldalloc option
[   66.237268][ T4338] EXT4-fs: Ignoring removed bh option
[   66.295355][ T4338] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   66.337375][ T4343] I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2
[   66.351390][ T4343] EXT4-fs (loop3): unable to read superblock
[   66.377966][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   66.471658][ T4349] netlink: 8 bytes leftover after parsing attributes in process `syz.2.286'.
[   66.483665][ T4349] netlink: 8 bytes leftover after parsing attributes in process `syz.2.286'.
[   66.493249][ T4349] netlink: 8 bytes leftover after parsing attributes in process `syz.2.286'.
[   66.502219][ T4349] netlink: 8 bytes leftover after parsing attributes in process `syz.2.286'.
[   66.555669][ T4353] netlink: 'syz.0.289': attribute type 30 has an invalid length.
[   67.012671][ T4367] loop0: detected capacity change from 0 to 512
[   67.034370][ T4365] loop1: detected capacity change from 0 to 1024
[   67.081419][ T4367] EXT4-fs (loop0): orphan cleanup on readonly fs
[   67.119893][ T4365] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   67.140781][ T4367] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.294: bg 0: block 248: padding at end of block bitmap is not set
[   67.198013][ T4367] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.294: Failed to acquire dquot type 1
[   67.261335][ T4367] EXT4-fs (loop0): 1 truncate cleaned up
[   67.276710][ T4367] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   67.276710][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   67.324783][ T4367] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended
[   67.364856][ T4367] EXT4-fs warning (device loop0): read_mmp_block:115: Error -117 while reading MMP block 0
[   67.378854][ T4378] netlink: 'syz.0.294': attribute type 13 has an invalid length.
[   67.403088][ T4377] loop1: detected capacity change from 0 to 1024
[   67.458146][ T4377] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.295: Failed to acquire dquot type 0
[   67.484234][ T4377] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt.
[   67.512439][ T4377] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #13: comm syz.1.295: corrupted inode contents
[   67.528987][ T4378] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.536573][ T4378] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.544638][ T4377] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #13: comm syz.1.295: mark_inode_dirty error
[   67.558437][ T4383] netlink: 'syz.2.297': attribute type 4 has an invalid length.
[   67.561699][ T4377] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #13: comm syz.1.295: corrupted inode contents
[   67.588434][ T4377] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #13: comm syz.1.295: mark_inode_dirty error
[   67.604430][ T4377] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #13: comm syz.1.295: corrupted inode contents
[   67.622693][ T4377] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem
[   67.622927][ T4384] netlink: 4 bytes leftover after parsing attributes in process `syz.2.297'.
[   67.642058][ T4377] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #13: comm syz.1.295: corrupted inode contents
[   67.662462][ T4378] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   67.670272][ T4377] EXT4-fs error (device loop1): ext4_truncate:4666: inode #13: comm syz.1.295: mark_inode_dirty error
[   67.686902][ T4378] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   67.695314][ T4377] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem
[   67.717468][ T4377] EXT4-fs (loop1): 1 truncate cleaned up
[   67.744523][ T4377] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   67.804892][   T31] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   67.815143][ T4377] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   67.849241][   T31] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   67.862997][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   67.873461][   T31] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   67.883026][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   67.902451][   T31] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.087434][ T4387] loop4: detected capacity change from 0 to 1024
[   68.106820][ T4387] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[   68.128008][ T4387] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   68.138972][ T4387] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869)
[   68.187184][ T4387] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   68.211968][ T4387] EXT4-fs error (device loop4): ext4_get_journal_inode:5800: inode #17: comm syz.4.298: iget: bad i_size value: 4398046511204
[   68.257534][ T4405] SELinux:  Context system_u:object_r:syslogd_var_lib_t:s0 is not valid (left unmapped).
[   68.272189][ T4387] EXT4-fs (loop4): no journal found
[   68.378789][ T4407] syzkaller0: entered promiscuous mode
[   68.384441][ T4407] syzkaller0: entered allmulticast mode
[   68.502706][ T4415] netlink: 32 bytes leftover after parsing attributes in process `syz.1.311'.
[   68.621349][ T4421] netlink: 36 bytes leftover after parsing attributes in process `syz.1.313'.
[   68.630317][ T4421] netlink: 16 bytes leftover after parsing attributes in process `syz.1.313'.
[   68.639336][ T4421] netlink: 36 bytes leftover after parsing attributes in process `syz.1.313'.
[   68.652447][ T4421] netlink: 36 bytes leftover after parsing attributes in process `syz.1.313'.
[   68.847436][ T4424] loop3: detected capacity change from 0 to 128
[   69.077962][ T4444] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.147872][ T4458] syz.3.329 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   69.197192][ T4460] netlink: 'syz.4.330': attribute type 4 has an invalid length.
[   69.198682][ T4460] netlink: 'syz.4.330': attribute type 4 has an invalid length.
[   69.437994][ T4444] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.562982][ T4444] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.646663][ T4473] loop1: detected capacity change from 0 to 164
[   69.714697][ T4444] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.893229][ T3875] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.912735][   T31] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.921057][   T31] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.921644][   T31] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.964075][ T4479] loop1: detected capacity change from 0 to 512
[   70.178434][ T4498] loop4: detected capacity change from 0 to 4096
[   70.210843][ T4498] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   70.363023][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.397299][ T4513] loop4: detected capacity change from 0 to 1024
[   70.409127][ T4511] loop2: detected capacity change from 0 to 512
[   70.461763][ T4511] msdos: Unknown parameter ''
[   70.655135][ T4513] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   70.999756][   T29] kauditd_printk_skb: 139 callbacks suppressed
[   70.999773][   T29] audit: type=1400 audit(1757449719.688:848): avc:  denied  { name_connect } for  pid=4527 comm="syz.1.354" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1
[   71.033930][ T4524] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.349: Allocating blocks 497-513 which overlap fs metadata
[   71.051462][ T4524] EXT4-fs (loop4): pa ffff8881071d5150: logic 256, phys. 385, len 8
[   71.059508][ T4524] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1
[   71.094723][ T3314] EXT4-fs error (device loop4): ext4_lookup:1787: inode #14: comm syz-executor: iget: bad extended attribute block 5
[   71.094812][   T29] audit: type=1400 audit(1757449719.788:849): avc:  denied  { remove_name } for  pid=3314 comm="syz-executor" name="lost+found" dev="loop4" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   71.130268][   T29] audit: type=1400 audit(1757449719.788:850): avc:  denied  { rmdir } for  pid=3314 comm="syz-executor" name="lost+found" dev="loop4" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   71.152948][   T29] audit: type=1400 audit(1757449719.788:851): avc:  denied  { unlink } for  pid=3314 comm="syz-executor" name="file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   71.202879][ T3314] EXT4-fs error (device loop4): ext4_lookup:1787: inode #14: comm syz-executor: iget: bad extended attribute block 5
[   71.240882][   T29] audit: type=1400 audit(1757449719.918:852): avc:  denied  { listen } for  pid=4527 comm="syz.1.354" lport=58617 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   71.270393][   T29] audit: type=1400 audit(1757449719.958:853): avc:  denied  { accept } for  pid=4527 comm="syz.1.354" lport=58617 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   71.466856][ T4546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   71.475447][ T4546] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   71.800979][   T29] audit: type=1400 audit(1757449720.488:854): avc:  denied  { mount } for  pid=4547 comm="syz.0.359" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   71.864061][   T29] audit: type=1400 audit(1757449720.518:855): avc:  denied  { mounton } for  pid=4547 comm="syz.0.359" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1
[   71.902324][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   71.915069][   T29] audit: type=1400 audit(1757449720.588:856): avc:  denied  { unmount } for  pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   71.934996][   T29] audit: type=1400 audit(1757449720.588:857): avc:  denied  { unmount } for  pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   71.990112][ T4552] loop2: detected capacity change from 0 to 512
[   72.009011][ T4552] EXT4-fs (loop2): orphan cleanup on readonly fs
[   72.030280][ T4552] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.362: bg 0: block 248: padding at end of block bitmap is not set
[   72.062823][ T4552] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.362: Failed to acquire dquot type 1
[   72.075307][ T4552] EXT4-fs (loop2): 1 truncate cleaned up
[   72.088787][ T4552] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   72.119089][ T4552] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended
[   72.153567][ T4552] EXT4-fs warning (device loop2): read_mmp_block:115: Error -117 while reading MMP block 0
[   72.179240][ T4572] netlink: 'syz.2.362': attribute type 13 has an invalid length.
[   72.283028][ T4572] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   72.333413][    T9] syz1: Port: 1 Link DOWN
[   72.333424][  T390] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.359297][ T3864] bridge_slave_1: left allmulticast mode
[   72.365041][ T3864] bridge_slave_1: left promiscuous mode
[   72.370803][ T3864] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.379074][ T3864] bridge_slave_0: left allmulticast mode
[   72.384900][ T3864] bridge_slave_0: left promiscuous mode
[   72.391342][ T3864] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.416454][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.514129][ T3864] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   72.525956][ T3864] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   72.535782][ T3864] bond0 (unregistering): Released all slaves
[   72.547427][ T3864] bond1 (unregistering): (slave bond2): Releasing backup interface
[   72.556251][ T3864] bond2 (unregistering): left promiscuous mode
[   72.564517][ T3864] bond1 (unregistering): Released all slaves
[   72.574017][ T3864] bond2 (unregistering): Released all slaves
[   72.589677][  T390] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.617462][ T4575] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.648389][ T4575] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   72.668467][  T390] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.678372][ T3864] tipc: Left network mode
[   72.685638][  T390] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.702913][ T3864] hsr_slave_0: left promiscuous mode
[   72.708703][ T3864] hsr_slave_1: left promiscuous mode
[   72.714529][ T3864] batman_adv: batadv0: Removing interface: batadv_slave_0
[   72.723071][ T3864] batman_adv: batadv0: Removing interface: batadv_slave_1
[   72.766156][ T3864] team0 (unregistering): Port device team_slave_1 removed
[   72.778461][ T3864] team0 (unregistering): Port device team_slave_0 removed
[   72.898768][ T4559] chnl_net:caif_netlink_parms(): no params data found
[   73.069064][ T4559] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.076465][ T4559] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.084215][ T4559] bridge_slave_0: entered allmulticast mode
[   73.090739][ T4559] bridge_slave_0: entered promiscuous mode
[   73.100956][ T4559] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.108042][ T4559] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.115709][ T4559] bridge_slave_1: entered allmulticast mode
[   73.122846][ T4559] bridge_slave_1: entered promiscuous mode
[   73.144468][ T4559] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   73.155180][ T4559] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   73.177508][ T4559] team0: Port device team_slave_0 added
[   73.184638][ T4559] team0: Port device team_slave_1 added
[   73.185462][ T4607] __nla_validate_parse: 1 callbacks suppressed
[   73.185489][ T4607] netlink: 4 bytes leftover after parsing attributes in process `syz.0.371'.
[   73.219589][ T4559] batman_adv: batadv0: Adding interface: batadv_slave_0
[   73.226628][ T4559] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.252606][ T4559] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   73.268888][ T4559] batman_adv: batadv0: Adding interface: batadv_slave_1
[   73.276011][ T4559] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.305203][ T4559] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   73.341996][ T4609] netlink: 40 bytes leftover after parsing attributes in process `syz.0.373'.
[   73.379543][ T4612] netlink: 14 bytes leftover after parsing attributes in process `syz.1.372'.
[   73.392088][ T4612] hsr_slave_0: left promiscuous mode
[   73.397839][ T4612] hsr_slave_1: left promiscuous mode
[   73.408793][ T4559] hsr_slave_0: entered promiscuous mode
[   73.415770][ T4559] hsr_slave_1: entered promiscuous mode
[   73.423204][ T4559] debugfs: 'hsr0' already exists in 'hsr'
[   73.429200][ T4559] Cannot create hsr debugfs directory
[   73.475457][ T4617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   73.484183][ T4617] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   73.560183][ T4559] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   73.568694][ T4559] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   73.577521][ T4559] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   73.585943][ T4559] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   73.601454][ T4559] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.608587][ T4559] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.639489][ T4559] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.650303][  T390] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.666907][ T4559] 8021q: adding VLAN 0 to HW filter on device team0
[   73.681570][   T31] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.688712][   T31] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.700319][   T31] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.707529][   T31] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.781246][ T4559] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.893120][ T4559] veth0_vlan: entered promiscuous mode
[   73.900985][ T4559] veth1_vlan: entered promiscuous mode
[   73.916268][ T4559] veth0_macvtap: entered promiscuous mode
[   73.924246][ T4559] veth1_macvtap: entered promiscuous mode
[   73.936195][ T4559] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.948152][ T4559] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.958818][ T3885] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.968336][ T3885] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.979437][ T3864] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.999735][ T3864] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.032052][ T4651] loop5: detected capacity change from 0 to 1024
[   74.039155][ T4651] EXT4-fs: Ignoring removed orlov option
[   74.052581][ T4651] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   74.076240][ T4559] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   74.162512][ T4660] syzkaller0: entered promiscuous mode
[   74.168092][ T4660] syzkaller0: entered allmulticast mode
[   74.446778][ T4667] loop3: detected capacity change from 0 to 512
[   74.461761][ T4671] loop1: detected capacity change from 0 to 8192
[   74.473176][ T4667] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   74.486036][ T4667] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   74.531764][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   74.558905][ T4678] loop3: detected capacity change from 0 to 512
[   74.573100][ T4678] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   74.596562][ T4678] ext4 filesystem being mounted at /76/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   74.653914][ T4682] pim6reg1: entered promiscuous mode
[   74.659288][ T4682] pim6reg1: entered allmulticast mode
[   75.279698][ T4685] sch_tbf: burst 1023 is lower than device lo mtu (65550) !
[   75.410590][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   76.009625][ T4710] netlink: 38 bytes leftover after parsing attributes in process `syz.3.400'.
[   76.201654][   T29] kauditd_printk_skb: 131 callbacks suppressed
[   76.201672][   T29] audit: type=1400 audit(1757449724.888:987): avc:  denied  { read } for  pid=4719 comm="syz.0.406" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   76.231205][   T29] audit: type=1400 audit(1757449724.888:988): avc:  denied  { open } for  pid=4719 comm="syz.0.406" path="/dev/usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   76.255030][   T29] audit: type=1400 audit(1757449724.898:989): avc:  denied  { ioctl } for  pid=4719 comm="syz.0.406" path="/dev/usbmon7" dev="devtmpfs" ino=163 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   76.313534][   T29] audit: type=1326 audit(1757449725.008:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4726 comm="syz.3.409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12d0c3ebe9 code=0x7ffc0000
[   76.336858][   T29] audit: type=1326 audit(1757449725.008:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4726 comm="syz.3.409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12d0c3ebe9 code=0x7ffc0000
[   76.367522][ T4729] loop2: detected capacity change from 0 to 1024
[   76.379260][ T4729] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   76.382156][   T29] audit: type=1326 audit(1757449725.058:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4726 comm="syz.3.409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f12d0c3ebe9 code=0x7ffc0000
[   76.415155][   T29] audit: type=1326 audit(1757449725.058:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4726 comm="syz.3.409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12d0c3ebe9 code=0x7ffc0000
[   76.438545][   T29] audit: type=1326 audit(1757449725.058:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4726 comm="syz.3.409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12d0c3ebe9 code=0x7ffc0000
[   76.461898][   T29] audit: type=1326 audit(1757449725.078:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4726 comm="syz.3.409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f12d0c3ebe9 code=0x7ffc0000
[   76.485480][   T29] audit: type=1326 audit(1757449725.078:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4726 comm="syz.3.409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12d0c3ebe9 code=0x7ffc0000
[   76.521732][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   76.751290][ T4761] netlink: 'syz.0.413': attribute type 4 has an invalid length.
[   76.760353][ T4761] netlink: 'syz.0.413': attribute type 4 has an invalid length.
[   76.805650][ T4765] netlink: 8 bytes leftover after parsing attributes in process `syz.0.415'.
[   76.868635][ T4769] mmap: syz.0.426 (4769) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   77.170579][ T4784] loop1: detected capacity change from 0 to 128
[   77.178511][ T4784] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[   77.191433][ T4784] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   77.224711][ T3312] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   77.430266][ T4794] loop1: detected capacity change from 0 to 2048
[   77.437565][ T4794] EXT4-fs: Ignoring removed orlov option
[   77.453276][ T4794] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   77.479294][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   77.500091][ T4799] netlink: 277 bytes leftover after parsing attributes in process `syz.1.428'.
[   77.510586][ T4799] futex_wake_op: syz.1.428 tries to shift op by -1; fix this program
[   77.549379][ T4803] 9pnet_fd: Insufficient options for proto=fd
[   77.563602][ T4803] 9pnet_fd: Insufficient options for proto=fd
[   77.778063][ T4813] netlink: 4 bytes leftover after parsing attributes in process `syz.0.435'.
[   77.793554][ T4813] netlink: 4 bytes leftover after parsing attributes in process `syz.0.435'.
[   78.252273][ T4850] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3)
[   78.258899][ T4850] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   78.266571][ T4850] vhci_hcd vhci_hcd.0: Device attached
[   78.364763][ T4852] vhci_hcd: connection closed
[   78.365142][  T390] vhci_hcd: stop threads
[   78.374327][  T390] vhci_hcd: release socket
[   78.378762][  T390] vhci_hcd: disconnect device
[   78.439261][ T4869] loop1: detected capacity change from 0 to 512
[   78.451423][ T4869] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   78.863481][ T4869] EXT4-fs (loop1): 1 truncate cleaned up
[   78.889264][ T4869] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   78.933249][ T4869] EXT4-fs error (device loop1): ext4_ext_precache:632: inode #15: comm syz.1.449: pblk 0 bad header/extent: invalid magic - magic 7973, entries 27514, max 27745(0), depth 25964(25964)
[   79.102713][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.348239][ T4896] syz_tun: entered allmulticast mode
[   79.364610][ T4896] netlink: 'syz.5.453': attribute type 4 has an invalid length.
[   79.396385][ T4896] dvmrp1: entered allmulticast mode
[   79.439666][ T4893] syz_tun: left allmulticast mode
[   79.546015][ T4904] loop1: detected capacity change from 0 to 1024
[   79.569838][ T4904] ext4: Unknown parameter 'nouser_xattr'
[   79.791511][ T4910] syz.1.460 uses obsolete (PF_INET,SOCK_PACKET)
[   80.441717][ T4903] Set syz1 is full, maxelem 65536 reached
[   80.470459][ T4919] netlink: 'syz.3.464': attribute type 4 has an invalid length.
[   80.479973][ T4919] netlink: 'syz.3.464': attribute type 4 has an invalid length.
[   80.644185][ T4940] netlink: 24 bytes leftover after parsing attributes in process `syz.2.463'.
[   80.752238][   T10] IPVS: starting estimator thread 0...
[   80.766500][ T4950] tipc: New replicast peer: 255.255.255.83
[   80.772751][ T4950] tipc: Enabled bearer <udp:£>, priority 10
[   80.798937][ T4940] netlink: 4 bytes leftover after parsing attributes in process `syz.2.463'.
[   80.850846][ T4948] IPVS: using max 2400 ests per chain, 120000 per kthread
[   80.883088][ T4961] netlink: 24 bytes leftover after parsing attributes in process `syz.2.477'.
[   80.927102][ T4961] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4961 comm=syz.2.477
[   80.961152][ T4965] netlink: 32 bytes leftover after parsing attributes in process `syz.3.479'.
[   80.973072][   T36] IPVS: starting estimator thread 0...
[   80.993464][ T4968] SELinux:  Context system_u:object_r:iptables_unit_file_t:s0 is not valid (left unmapped).
[   81.028528][ T4968] loop1: detected capacity change from 0 to 512
[   81.039454][ T4968] journal_path: Non-blockdev passed as './bus'
[   81.045847][ T4968] EXT4-fs: error: could not find journal device path
[   81.051921][ T4976] netlink: 76 bytes leftover after parsing attributes in process `syz.5.485'.
[   81.061693][ T4966] IPVS: using max 1968 ests per chain, 98400 per kthread
[   81.073715][ T4976] loop5: detected capacity change from 0 to 512
[   81.093033][ T4976] EXT4-fs (loop5): revision level too high, forcing read-only mode
[   81.111168][ T4976] EXT4-fs (loop5): orphan cleanup on readonly fs
[   81.114696][ T4984] netlink: 24 bytes leftover after parsing attributes in process `syz.1.486'.
[   81.152103][ T4976] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.485: corrupted inode contents
[   81.176722][ T4987] loop2: detected capacity change from 0 to 512
[   81.189141][ T4976] EXT4-fs (loop5): Remounting filesystem read-only
[   81.196647][ T4988] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4988 comm=syz.1.486
[   81.216156][ T4976] EXT4-fs (loop5): 1 truncate cleaned up
[   81.222398][   T31] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   81.233066][   T31] __quota_error: 117 callbacks suppressed
[   81.233082][   T31] Quota error (device loop5): write_blk: dquota write failed
[   81.246300][   T31] Quota error (device loop5): remove_free_dqentry: Can't write block (5) with free entries
[   81.256394][   T31] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   81.267048][   T31] Quota error (device loop5): write_blk: dquota write failed
[   81.274484][   T31] Quota error (device loop5): free_dqentry: Can't move quota data block (5) to free list
[   81.317956][ T4987] EXT4-fs (loop2): revision level too high, forcing read-only mode
[   81.326248][ T4987] EXT4-fs (loop2): orphan cleanup on readonly fs
[   81.335442][ T4987] Quota error (device loop2): dq_insert_tree: Quota tree root isn't allocated!
[   81.344516][ T4987] Quota error (device loop2): qtree_write_dquot: Error -5 occurred while creating quota
[   81.354363][ T4987] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.483: Failed to acquire dquot type 1
[   81.370003][   T31] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started
[   81.380318][   T31] Quota error (device loop5): v2_write_file_info: Can't write info structure
[   81.391371][ T4987] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.483: bg 0: block 40: padding at end of block bitmap is not set
[   81.407504][ T4987] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem
[   81.418393][ T4996] netlink: 'syz.1.490': attribute type 4 has an invalid length.
[   81.424850][   T31] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14
[   81.436832][ T4987] EXT4-fs (loop2): 1 truncate cleaned up
[   81.439726][ T4998] netlink: 8 bytes leftover after parsing attributes in process `syz.3.489'.
[   81.444396][ T4987] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   81.451955][ T4976] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   81.478081][ T4996] netlink: 'syz.1.490': attribute type 4 has an invalid length.
[   81.484849][ T4998] netlink: 4 bytes leftover after parsing attributes in process `syz.3.489'.
[   81.539924][   T29] audit: type=1400 audit(1757449730.228:1114): avc:  denied  { mount } for  pid=4992 comm="syz.0.488" name="/" dev="rpc_pipefs" ino=11223 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1
[   81.890704][ T3394] tipc: Node number set to 3924322584
[   81.990909][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.007800][   T29] audit: type=1326 audit(1757449730.698:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5004 comm="syz.2.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f3d68ebe9 code=0x7ffc0000
[   82.043227][ T4559] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.092726][ T5011] loop2: detected capacity change from 0 to 128
[   82.152419][ T5014] loop1: detected capacity change from 0 to 1024
[   82.164178][ T5011] syz.2.495: attempt to access beyond end of device
[   82.164178][ T5011] loop2: rw=0, sector=121, nr_sectors = 920 limit=128
[   82.204306][ T5014] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   82.243144][ T5014] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm gtp: Allocating blocks 449-513 which overlap fs metadata
[   82.310148][ T5026] netlink: 'syz.2.499': attribute type 4 has an invalid length.
[   82.352634][ T5026] netlink: 'syz.2.499': attribute type 4 has an invalid length.
[   82.428035][ T5031] serio: Serial port ptm0
[   82.796351][ T5046] sch_fq: defrate 4294967295 ignored.
[   82.825683][ T5048] netlink: 8 bytes leftover after parsing attributes in process `syz.0.507'.
[   82.901571][ T5009] EXT4-fs (loop1): pa ffff8881071d52a0: logic 48, phys. 177, len 21
[   82.909637][ T5009] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4
[   82.960530][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   83.113126][ T5064] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.178340][ T5064] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.236987][ T5064] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.292824][ T5077] 9pnet: p9_errstr2errno: server reported unknown error 
[   83.304506][ T5064] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.395672][ T3864] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   83.426875][ T3864] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   83.452960][ T3864] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   83.482170][ T3864] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   83.636862][ T5094] loop1: detected capacity change from 0 to 1024
[   83.652868][ T5094] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   83.669522][ T5094] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.524: Allocating blocks 385-513 which overlap fs metadata
[   83.722979][ T5094] EXT4-fs (loop1): pa ffff8881071d5310: logic 16, phys. 129, len 24
[   83.731244][ T5094] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8
[   83.798819][ T5105] 8021q: adding VLAN 0 to HW filter on device bond0
[   83.807259][ T5105] 8021q: adding VLAN 0 to HW filter on device team0
[   83.817051][ T5105] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   83.835168][ T5107] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.863356][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   83.921720][ T5107] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.947020][ T5119] loop2: detected capacity change from 0 to 1024
[   83.954351][ T5119] EXT4-fs: Ignoring removed mblk_io_submit option
[   83.973171][ T5107] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.998241][ T5118] ------------[ cut here ]------------
[   84.003889][ T5118] verifier bug: REG INVARIANTS VIOLATION (false_reg1): range bounds violation u64=[0xfffffffefffff630, 0xffffffff00000000] s64=[0xfffffffefffff630, 0xffffffff00000000] u32=[0x30, 0x8000050] s32=[0x30, 0x0] var_off=(0xfffffffe00000030, 0x10fffffc0)(1)
[   84.028148][ T5118] WARNING: CPU: 1 PID: 5118 at kernel/bpf/verifier.c:2728 reg_bounds_sanity_check+0x673/0x680
[   84.038502][ T5118] Modules linked in:
[   84.042482][ T5118] CPU: 1 UID: 0 PID: 5118 Comm: syz.0.533 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   84.052213][ T5118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   84.062423][ T5118] RIP: 0010:reg_bounds_sanity_check+0x673/0x680
[   84.068720][ T5118] Code: 7c 24 18 41 ff 74 24 20 55 41 56 4d 89 ee 53 48 8b 5c 24 30 ff 74 24 40 ff 74 24 50 ff 74 24 30 e8 92 7f ba ff 48 83 c4 38 90 <0f> 0b 90 90 e9 02 fb ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90
[   84.088418][ T5118] RSP: 0018:ffffc900013d7440 EFLAGS: 00010292
[   84.094691][ T5118] RAX: 2a5d0cf2efe82000 RBX: ffff8881195111a8 RCX: 0000000000080000
[   84.102800][ T5118] RDX: ffffc9000214a000 RSI: 0000000000010284 RDI: 0000000000010285
[   84.109834][ T5129] netlink: 48 bytes leftover after parsing attributes in process `syz.1.538'.
[   84.110910][ T5118] RBP: fffffffe00000030 R08: 0001c900013d727f R09: 0000000000000000
[   84.127842][ T5118] R10: 00000000ffffffff R11: 0000000000000002 R12: ffff888119511168
[   84.135891][ T5118] R13: ffff88810ac38000 R14: ffff88810ac38000 R15: ffff8881195111a0
[   84.139152][ T5119] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   84.143921][ T5118] FS:  00007fe2353df6c0(0000) GS:ffff8882aef43000(0000) knlGS:0000000000000000
[   84.164934][ T5118] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   84.164957][ T5118] CR2: 00007f12cf6a6f98 CR3: 000000011a8e8000 CR4: 00000000003506f0
[   84.164979][ T5118] Call Trace:
[   84.164987][ T5118]  <TASK>
[   84.165005][ T5118]  reg_set_min_max+0x215/0x260
[   84.165053][ T5118]  check_cond_jmp_op+0x1080/0x16e0
[   84.165155][ T5118]  do_check+0x332a/0x7a10
[   84.165213][ T5118]  do_check_common+0xc3a/0x12a0
[   84.165256][ T5118]  bpf_check+0x942b/0xd9e0
[   84.165292][ T5118]  ? __rcu_read_unlock+0x4f/0x70
[   84.165323][ T5118]  ? __alloc_frozen_pages_noprof+0x188/0x360
[   84.165373][ T5118]  ? alloc_pages_bulk_noprof+0x4b8/0x540
[   84.165446][ T5118]  ? __vmap_pages_range_noflush+0xbc4/0xcf0
[   84.165483][ T5118]  ? css_rstat_updated+0xb7/0x240
[   84.165521][ T5118]  ? pcpu_block_update+0x232/0x3b0
[   84.165559][ T5118]  ? _find_next_zero_bit+0x64/0xa0
[   84.165587][ T5118]  ? pcpu_block_refresh_hint+0x157/0x170
[   84.165627][ T5118]  ? pcpu_block_update_hint_alloc+0x63d/0x660
[   84.165654][ T5118]  ? css_rstat_updated+0xb7/0x240
[   84.165690][ T5118]  ? __rcu_read_unlock+0x4f/0x70
[   84.165714][ T5118]  ? pcpu_memcg_post_alloc_hook+0xf1/0x150
[   84.165755][ T5118]  ? should_fail_ex+0x30/0x280
[   84.165783][ T5118]  ? selinux_bpf_prog_load+0x36/0xf0
[   84.165849][ T5118]  ? should_failslab+0x8c/0xb0
[   84.165877][ T5118]  ? __kmalloc_cache_noprof+0x189/0x320
[   84.165915][ T5118]  ? selinux_bpf_prog_load+0xbf/0xf0
[   84.165985][ T5118]  ? security_bpf_prog_load+0x2c/0xa0
[   84.166016][ T5118]  bpf_prog_load+0xedd/0x1070
[   84.166054][ T5118]  ? security_bpf+0x2b/0x90
[   84.166087][ T5118]  __sys_bpf+0x462/0x7b0
[   84.166135][ T5118]  __x64_sys_bpf+0x41/0x50
[   84.166166][ T5118]  x64_sys_call+0x2aea/0x2ff0
[   84.166194][ T5118]  do_syscall_64+0xd2/0x200
[   84.166233][ T5118]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   84.166261][ T5118]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   84.166367][ T5118]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   84.166392][ T5118] RIP: 0033:0x7fe23697ebe9
[   84.166434][ T5118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   84.166454][ T5118] RSP: 002b:00007fe2353df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   84.166479][ T5118] RAX: ffffffffffffffda RBX: 00007fe236bb5fa0 RCX: 00007fe23697ebe9
[   84.166495][ T5118] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005
[   84.166507][ T5118] RBP: 00007fe236a01e19 R08: 0000000000000000 R09: 0000000000000000
[   84.166588][ T5118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   84.166643][ T5118] R13: 00007fe236bb6038 R14: 00007fe236bb5fa0 R15: 00007ffc6e0a84a8
[   84.166679][ T5118]  </TASK>
[   84.166689][ T5118] ---[ end trace 0000000000000000 ]---
[   84.214055][ T5107] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.561085][ T5018] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[   84.663291][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   84.704711][ T5158] loop2: detected capacity change from 0 to 512
[   84.713119][ T5158] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   84.725735][ T5158] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.544: invalid indirect mapped block 4294967295 (level 0)
[   84.749540][ T5158] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.544: invalid indirect mapped block 4294967295 (level 1)
[   84.765372][ T5158] EXT4-fs (loop2): 1 orphan inode deleted
[   84.771205][ T5158] EXT4-fs (loop2): 1 truncate cleaned up
[   84.789806][ T5162] loop3: detected capacity change from 0 to 512
[   84.797633][ T5158] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   84.806934][ T5162] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   84.834041][ T5162] EXT4-fs (loop3): 1 truncate cleaned up
[   84.840111][ T5162] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   84.854482][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   84.873594][ T5162] EXT4-fs error (device loop3): ext4_ext_precache:632: inode #15: comm syz.3.546: pblk 0 bad header/extent: invalid magic - magic 7973, entries 27514, max 27745(0), depth 25964(25964)
[   84.921184][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   84.999193][ T5180] loop2: detected capacity change from 0 to 164
[   85.066130][ T5187] syz.2.554: attempt to access beyond end of device
[   85.066130][ T5187] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164
[   85.111267][ T5187] syz.2.554: attempt to access beyond end of device
[   85.111267][ T5187] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164
[   85.134753][ T5186] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   85.149789][ T5185] tipc: Resetting bearer <eth:syzkaller0>
[   85.162086][ T5185] tipc: Disabling bearer <eth:syzkaller0>
[   85.229677][ T5191] serio: Serial port ptm0
[   85.243816][ T5193] loop2: detected capacity change from 0 to 512
[   85.250790][ T5193] journal_path: Non-blockdev passed as './bus'
[   85.257088][ T5193] EXT4-fs: error: could not find journal device path
[   85.520613][ T5204] loop2: detected capacity change from 0 to 512
[   85.527594][ T5204] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   85.540087][ T5204] EXT4-fs (loop2): 1 truncate cleaned up
[   85.546240][ T5204] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   85.563315][ T5204] EXT4-fs error (device loop2): ext4_ext_precache:632: inode #15: comm syz.2.562: pblk 0 bad header/extent: invalid magic - magic 7973, entries 27514, max 27745(0), depth 25964(25964)
[   85.594497][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.734331][ T5212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   85.742972][ T5212] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   85.825671][ T5213] loop2: detected capacity change from 0 to 2048
[   85.934188][ T5213] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   86.579152][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   86.994237][ T5229] loop3: detected capacity change from 0 to 164
[   87.056374][ T5230] tipc: Started in network mode
[   87.061344][ T5230] tipc: Node identity d6a2ad4ff2fc, cluster identity 4711
[   87.068537][ T5230] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   87.078147][ T5233] syz.3.570: attempt to access beyond end of device
[   87.078147][ T5233] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164
[   87.093357][ T5227] tipc: Resetting bearer <eth:syzkaller0>
[   87.100712][ T5233] syz.3.570: attempt to access beyond end of device
[   87.100712][ T5233] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164
[   87.125458][ T5227] tipc: Disabling bearer <eth:syzkaller0>
[   87.182131][ T5240] loop1: detected capacity change from 0 to 1024
[   87.191012][ T5240] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   87.391042][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   87.415329][ T5248] __nla_validate_parse: 4 callbacks suppressed
[   87.415344][ T5248] netlink: 4 bytes leftover after parsing attributes in process `syz.1.574'.
[   87.434128][ T5248] bridge0: port 3(macvlan2) entered blocking state
[   87.438679][ T5250] loop2: detected capacity change from 0 to 1024
[   87.441049][ T5248] bridge0: port 3(macvlan2) entered disabled state
[   87.448488][ T5250] EXT4-fs: Ignoring removed orlov option
[   87.454422][ T5248] macvlan2: entered allmulticast mode
[   87.459634][ T5250] EXT4-fs: Ignoring removed nomblk_io_submit option
[   87.465092][ T5248] bridge0: entered allmulticast mode
[   87.478270][ T5248] macvlan2: left allmulticast mode
[   87.483457][ T5248] bridge0: left allmulticast mode
[   87.504851][ T5250] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   87.516982][   T29] kauditd_printk_skb: 367 callbacks suppressed
[   87.517000][   T29] audit: type=1400 audit(1757449736.198:1483): avc:  denied  { mount } for  pid=5253 comm="syz.3.576" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[   87.614677][ T5257] netlink: 8 bytes leftover after parsing attributes in process `syz.1.578'.
[   87.623578][ T5257] netlink: 20 bytes leftover after parsing attributes in process `syz.1.578'.
[   87.635920][ T5257] netlink: 8 bytes leftover after parsing attributes in process `syz.1.578'.
[   87.644761][ T5257] netlink: 20 bytes leftover after parsing attributes in process `syz.1.578'.
[   87.650719][   T29] audit: type=1400 audit(1757449736.278:1484): avc:  denied  { unmount } for  pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[   87.654524][ T3885] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   87.709290][ T3885] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   87.717626][ T3885] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   87.726894][ T3885] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   87.735360][ T3885] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.744821][ T3885] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   87.754645][ T3885] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.765952][ T3885] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   88.226837][ T5270] sch_fq: defrate 4294967295 ignored.
[   88.261605][ T5272] loop1: detected capacity change from 0 to 2048
[   88.268569][ T5272] EXT4-fs: dax option not supported
[   88.284479][ T5272] loop1: detected capacity change from 0 to 1024
[   88.340578][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   88.353887][ T5272] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   88.366746][ T5275] loop3: detected capacity change from 0 to 2048
[   88.376352][   T29] audit: type=1400 audit(1757449737.068:1485): avc:  denied  { append } for  pid=5271 comm="syz.1.582" path="/132/file1/memory.events" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   88.441750][ T5275]  loop3: p2 p3 p7
[   88.481974][ T5283] veth1_macvtap: left promiscuous mode
[   88.569534][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   88.671611][ T5292] SELinux:  Context attr/fscr is not valid (left unmapped).
[   88.744586][   T29] audit: type=1400 audit(1757449737.438:1486): avc:  denied  { getopt } for  pid=5291 comm="syz.1.587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   88.756819][ T5290] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.803237][   T29] audit: type=1400 audit(1757449737.498:1487): avc:  denied  { create } for  pid=5291 comm="syz.1.587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[   88.809798][ T5290] 8021q: adding VLAN 0 to HW filter on device team0
[   88.856687][ T5290] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   89.081706][ T5308] loop3: detected capacity change from 0 to 512
[   89.108771][ T5308] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   89.135540][ T5308] ext4 filesystem being mounted at /123/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   89.146708][ T5306] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   89.283027][ T5306] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   89.298592][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   89.358138][ T5315] loop2: detected capacity change from 0 to 512
[   89.459254][ T5306] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   89.467588][ T5315] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   89.487783][ T5315] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   89.569737][   T29] audit: type=1400 audit(1757449738.258:1488): avc:  denied  { append } for  pid=5314 comm="syz.2.595" name="file2" dev="loop2" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   89.608429][ T5306] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   89.620630][ T5325] loop3: detected capacity change from 0 to 8192
[   89.665066][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   89.707657][  T390] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   89.736413][  T390] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   89.776832][  T390] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   89.803642][  T390] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   89.927727][ T5339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   89.936262][ T5339] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   90.123474][ T5344] loop5: detected capacity change from 0 to 164
[   90.279885][ T5344] syz.5.603: attempt to access beyond end of device
[   90.279885][ T5344] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164
[   90.294717][ T5344] syz.5.603: attempt to access beyond end of device
[   90.294717][ T5344] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164
[   90.361294][ T5347] vhci_hcd: invalid port number 96
[   90.366475][ T5347] vhci_hcd: default hub control req: 0300 vfffa i0060 l0
[   90.399609][ T5352] loop3: detected capacity change from 0 to 512
[   90.406674][ T5352] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   90.420020][ T5352] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.606: invalid indirect mapped block 4294967295 (level 0)
[   90.435596][ T5352] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.606: invalid indirect mapped block 4294967295 (level 1)
[   90.450214][ T5352] EXT4-fs (loop3): 1 orphan inode deleted
[   90.456051][ T5352] EXT4-fs (loop3): 1 truncate cleaned up
[   90.463612][ T5352] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   90.479626][   T29] audit: type=1326 audit(1757449739.168:1489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5351 comm="syz.3.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12d0c3ebe9 code=0x7ffc0000
[   90.513328][   T29] audit: type=1326 audit(1757449739.168:1490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5351 comm="syz.3.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12d0c3ebe9 code=0x7ffc0000
[   90.536724][   T29] audit: type=1326 audit(1757449739.178:1491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5351 comm="syz.3.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f12d0c3ebe9 code=0x7ffc0000
[   90.560294][   T29] audit: type=1326 audit(1757449739.178:1492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5351 comm="syz.3.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12d0c3ebe9 code=0x7ffc0000
[   90.584690][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   91.288229][ T5380] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   91.298400][ T5379] tipc: Resetting bearer <eth:syzkaller0>
[   91.321346][ T5379] tipc: Disabling bearer <eth:syzkaller0>
[   91.661556][ T5396] loop3: detected capacity change from 0 to 1024
[   91.684425][ T5396] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   91.769672][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   91.797547][ T5407] netlink: 8 bytes leftover after parsing attributes in process `syz.3.623'.
[   91.807936][ T5409] loop5: detected capacity change from 0 to 1024
[   91.812923][ T5407] netlink: 4 bytes leftover after parsing attributes in process `syz.3.623'.
[   91.831070][ T5409] EXT4-fs: Ignoring removed orlov option
[   91.836910][ T5409] EXT4-fs: Ignoring removed nomblk_io_submit option
[   91.853811][ T5409] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   91.913251][ T5415] netlink: 8 bytes leftover after parsing attributes in process `syz.0.625'.
[   91.934796][ T5415] netlink: 8 bytes leftover after parsing attributes in process `syz.0.625'.
[   91.946740][ T5415] netlink: 8 bytes leftover after parsing attributes in process `syz.0.625'.
[   92.004716][ T5423] loop1: detected capacity change from 0 to 1024
[   92.022368][ T5423] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   92.042404][ T5423] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[   92.494620][ T5423] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[   92.506921][ T5423] EXT4-fs (loop1): This should not happen!! Data will be lost
[   92.506921][ T5423] 
[   92.516611][ T5423] EXT4-fs (loop1): Total free blocks count 0
[   92.522710][ T5423] EXT4-fs (loop1): Free/Dirty block details
[   92.528698][ T5423] EXT4-fs (loop1): free_blocks=68451041280
[   92.534552][ T5423] EXT4-fs (loop1): dirty_blocks=80
[   92.539697][ T5423] EXT4-fs (loop1): Block reservation details
[   92.545745][ T5423] EXT4-fs (loop1): i_reserved_data_blocks=5
[   92.573218][  T390] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28
[   92.746394][ T4559] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   92.761146][ T5432] loop1: detected capacity change from 0 to 512
[   92.762649][ T5434] loop2: detected capacity change from 0 to 512
[   92.778423][ T5432] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   92.802327][ T5434] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   92.803735][ T5432] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.632: invalid indirect mapped block 4294967295 (level 0)
[   92.830053][ T5434] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   92.862580][ T5432] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.632: invalid indirect mapped block 4294967295 (level 1)
[   92.891300][ T5432] EXT4-fs (loop1): 1 orphan inode deleted
[   92.897136][ T5432] EXT4-fs (loop1): 1 truncate cleaned up
[   92.970691][ T5434] netlink: 'syz.2.633': attribute type 10 has an invalid length.
[   92.978608][ T5434] veth0_vlan: entered allmulticast mode
[   92.997913][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   93.007739][ T5432] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   93.055156][   T29] kauditd_printk_skb: 48 callbacks suppressed
[   93.055172][   T29] audit: type=1326 audit(1757449741.748:1541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5431 comm="syz.1.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09608ebe9 code=0x7ffc0000
[   93.104083][   T29] audit: type=1326 audit(1757449741.778:1542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5431 comm="syz.1.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09608ebe9 code=0x7ffc0000
[   93.127597][   T29] audit: type=1326 audit(1757449741.778:1543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5431 comm="syz.1.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fe09608ebe9 code=0x7ffc0000
[   93.151050][   T29] audit: type=1326 audit(1757449741.778:1544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5431 comm="syz.1.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09608ebe9 code=0x7ffc0000
[   93.174399][   T29] audit: type=1326 audit(1757449741.778:1545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5431 comm="syz.1.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09608ebe9 code=0x7ffc0000
[   93.355466][ T5455] loop5: detected capacity change from 0 to 2048
[   93.494200][ T5455] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   93.506638][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   93.597990][ T5462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   93.606535][ T5462] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   93.874811][ T5402] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set
[   93.901493][ T5468] __nla_validate_parse: 2 callbacks suppressed
[   93.901509][ T5468] netlink: 12 bytes leftover after parsing attributes in process `syz.0.642'.
[   94.029728][   T29] audit: type=1400 audit(1757449742.718:1546): avc:  denied  { mount } for  pid=5463 comm="syz.2.640" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[   94.305280][ T4559] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   94.939681][ T5486] loop5: detected capacity change from 0 to 512
[   94.968299][ T5486] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   94.990768][ T5486] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   95.151128][ T4559] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   95.163391][ T5497] netlink: 'syz.0.652': attribute type 1 has an invalid length.
[   95.171151][ T5497] netlink: 'syz.0.652': attribute type 4 has an invalid length.
[   95.178826][ T5497] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.652'.
[   95.211896][ T5497] netlink: 'syz.0.652': attribute type 1 has an invalid length.
[   95.219642][ T5497] netlink: 'syz.0.652': attribute type 4 has an invalid length.
[   95.227353][ T5497] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.652'.
[   95.314848][ T5504] netlink: 104 bytes leftover after parsing attributes in process `syz.5.653'.
[   95.320878][   T29] audit: type=1400 audit(1757449744.008:1547): avc:  denied  { nlmsg_read } for  pid=5498 comm="syz.5.653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   95.344405][ T5504] loop5: detected capacity change from 0 to 128
[   95.351837][ T5503] netlink: 12 bytes leftover after parsing attributes in process `syz.1.655'.
[   95.391791][ T5506] netlink: 24 bytes leftover after parsing attributes in process `syz.0.656'.
[   95.403694][ T5503] loop1: detected capacity change from 0 to 512
[   95.418096][ T5503] msdos: Unknown parameter ''
[   95.466735][ T5506] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5506 comm=syz.0.656
[   95.518320][   T29] audit: type=1400 audit(1757449744.208:1548): avc:  denied  { write } for  pid=5509 comm="syz.2.659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[   95.741309][ T5521] sch_tbf: burst 1023 is lower than device lo mtu (11337746) !
[   96.272195][ T5528] netlink: 14 bytes leftover after parsing attributes in process `syz.3.664'.
[   96.281941][ T5528] hsr_slave_0: left promiscuous mode
[   96.287998][ T5528] hsr_slave_1: left promiscuous mode
[   96.509788][ T5536] loop2: detected capacity change from 0 to 512
[   96.544527][ T5536] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   97.317760][ T5549] netlink: 12 bytes leftover after parsing attributes in process `syz.3.669'.
[   98.138098][ T5578] netlink: 14 bytes leftover after parsing attributes in process `syz.0.678'.
[   98.147376][ T5578] hsr_slave_0: left promiscuous mode
[   98.147839][ T5578] hsr_slave_1: left promiscuous mode
[   98.273382][   T29] audit: type=1326 audit(1757449746.968:1549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5588 comm="syz.1.687" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe09608ebe9 code=0x0
[   98.395594][ T5598] random: crng reseeded on system resumption
[   98.397624][   T29] audit: type=1400 audit(1757449747.088:1550): avc:  denied  { append } for  pid=5597 comm="syz.0.690" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[   98.424914][   T29] audit: type=1400 audit(1757449747.088:1551): avc:  denied  { open } for  pid=5597 comm="syz.0.690" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[   98.448194][ T5598] Restarting kernel threads ...
[   98.458069][ T5598] Done restarting kernel threads.
[   98.547701][   T29] audit: type=1400 audit(1757449747.138:1552): avc:  denied  { ioctl } for  pid=5597 comm="syz.0.690" path="/dev/snapshot" dev="devtmpfs" ino=90 ioctlcmd=0x3305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[   98.628279][   T29] audit: type=1400 audit(1757449747.238:1553): avc:  denied  { open } for  pid=5600 comm="syz.0.691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[   98.647667][   T29] audit: type=1400 audit(1757449747.238:1554): avc:  denied  { perfmon } for  pid=5600 comm="syz.0.691" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   98.668469][   T29] audit: type=1400 audit(1757449747.238:1555): avc:  denied  { kernel } for  pid=5600 comm="syz.0.691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[   98.687881][   T29] audit: type=1400 audit(1757449747.248:1556): avc:  denied  { tracepoint } for  pid=5600 comm="syz.0.691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[   98.896223][   T29] audit: type=1326 audit(1757449747.568:1557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5600 comm="syz.0.691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23697ebe9 code=0x7ffc0000
[   98.919680][   T29] audit: type=1326 audit(1757449747.568:1558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5600 comm="syz.0.691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23697ebe9 code=0x7ffc0000
[   99.298416][ T5611] loop1: detected capacity change from 0 to 2048
[   99.299309][ T5613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   99.370292][ T5613] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   99.498040][ T5619] netlink: 24 bytes leftover after parsing attributes in process `syz.2.695'.
[   99.519077][ T5619] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5619 comm=syz.2.695
[  100.554238][ T5634] netlink: 14 bytes leftover after parsing attributes in process `syz.2.697'.
[  100.620694][ T5634] hsr_slave_0: left promiscuous mode
[  100.636710][ T5634] hsr_slave_1: left promiscuous mode
[  100.733058][ T5644] netlink: 8 bytes leftover after parsing attributes in process `syz.1.701'.
[  101.319543][ T5667] netlink: 4 bytes leftover after parsing attributes in process `syz.2.710'.
[  101.338744][ T5667] netlink: 4 bytes leftover after parsing attributes in process `syz.2.710'.
[  101.546178][ T5672] tipc: New replicast peer: 255.255.255.83
[  101.552241][ T5672] tipc: Enabled bearer <udp:£>, priority 10
[  101.682397][ T5681] netlink: 8 bytes leftover after parsing attributes in process `syz.5.716'.
[  101.979132][ T5712] netlink: 24 bytes leftover after parsing attributes in process `syz.5.731'.
[  102.021797][ T5712] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5712 comm=syz.5.731
[  102.086125][ T5717] netlink: 12 bytes leftover after parsing attributes in process `syz.5.732'.
[  102.202860][ T5720] loop5: detected capacity change from 0 to 512
[  102.209439][ T5720] msdos: Unknown parameter ''
[  102.644012][ T5751] netlink: 24 bytes leftover after parsing attributes in process `syz.0.744'.
[  102.664892][ T5751] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5751 comm=syz.0.744
[  102.680745][   T10] tipc: Node number set to 610184527
[  102.765642][ T5762] netlink: 24 bytes leftover after parsing attributes in process `syz.2.752'.
[  103.485557][   T29] kauditd_printk_skb: 95 callbacks suppressed
[  103.485572][   T29] audit: type=1326 audit(1757449752.178:1654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5773 comm="syz.5.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b0ff9ebe9 code=0x7ffc0000
[  104.155802][   T29] audit: type=1326 audit(1757449752.218:1655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5773 comm="syz.5.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5b0ff9d550 code=0x7ffc0000
[  104.179354][   T29] audit: type=1400 audit(1757449752.218:1656): avc:  denied  { write } for  pid=5773 comm="syz.5.750" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  104.202563][   T29] audit: type=1400 audit(1757449752.218:1657): avc:  denied  { open } for  pid=5773 comm="syz.5.750" path="/dev/input/event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  104.226616][   T29] audit: type=1326 audit(1757449752.218:1658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5773 comm="syz.5.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b0ff9ebe9 code=0x7ffc0000
[  104.249980][   T29] audit: type=1326 audit(1757449752.218:1659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5773 comm="syz.5.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b0ff9ebe9 code=0x7ffc0000
[  104.274180][   T29] audit: type=1326 audit(1757449752.218:1660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5773 comm="syz.5.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5b0ff9ebe9 code=0x7ffc0000
[  104.297408][   T29] audit: type=1326 audit(1757449752.218:1661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5773 comm="syz.5.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b0ff9ebe9 code=0x7ffc0000
[  104.320785][   T29] audit: type=1326 audit(1757449752.218:1662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5773 comm="syz.5.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b0ff9ebe9 code=0x7ffc0000
[  104.344115][   T29] audit: type=1326 audit(1757449752.218:1663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5773 comm="syz.5.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5b0ff9ebe9 code=0x7ffc0000
[  104.683671][ T5783] lo: entered promiscuous mode
[  104.688583][ T5783] lo: entered allmulticast mode
[  104.731964][ T5783] tunl0: entered promiscuous mode
[  104.737064][ T5783] tunl0: entered allmulticast mode
[  104.773105][ T5783] gre0: entered promiscuous mode
[  104.778109][ T5783] gre0: entered allmulticast mode
[  104.801719][ T5783] gretap0: entered promiscuous mode
[  104.807033][ T5783] gretap0: entered allmulticast mode
[  104.842467][ T5783] erspan0: entered promiscuous mode
[  104.847787][ T5783] erspan0: entered allmulticast mode
[  104.876160][ T5783] ip_vti0: entered promiscuous mode
[  104.881587][ T5783] ip_vti0: entered allmulticast mode
[  104.915547][ T5783] ip6_vti0: entered promiscuous mode
[  104.920941][ T5783] ip6_vti0: entered allmulticast mode
[  104.941619][ T5783] sit0: entered promiscuous mode
[  104.946605][ T5783] sit0: entered allmulticast mode
[  104.974977][ T5783] ip6tnl0: entered promiscuous mode
[  104.980218][ T5783] ip6tnl0: entered allmulticast mode
[  105.017289][ T5783] ip6gre0: entered promiscuous mode
[  105.022773][ T5783] ip6gre0: entered allmulticast mode
[  105.041726][ T5783] syz_tun: entered promiscuous mode
[  105.046968][ T5783] syz_tun: entered allmulticast mode
[  105.075958][ T5783] ip6gretap0: entered promiscuous mode
[  105.081498][ T5783] ip6gretap0: entered allmulticast mode
[  105.088225][ T5783] bridge0: entered promiscuous mode
[  105.093500][ T5783] bridge0: entered allmulticast mode
[  105.101822][ T5783] vcan0: entered promiscuous mode
[  105.106989][ T5783] vcan0: entered allmulticast mode
[  105.113628][ T5783] bond0: entered promiscuous mode
[  105.118710][ T5783] bond_slave_0: entered promiscuous mode
[  105.125099][ T5783] bond_slave_1: entered promiscuous mode
[  105.130897][ T5783] bond0: entered allmulticast mode
[  105.136020][ T5783] bond_slave_0: entered allmulticast mode
[  105.141792][ T5783] bond_slave_1: entered allmulticast mode
[  105.151517][ T5783] team0: entered promiscuous mode
[  105.156817][ T5783] team_slave_0: entered promiscuous mode
[  105.162794][ T5783] team_slave_1: entered promiscuous mode
[  105.168633][ T5783] team0: entered allmulticast mode
[  105.173921][ T5783] team_slave_0: entered allmulticast mode
[  105.179680][ T5783] team_slave_1: entered allmulticast mode
[  105.202710][ T5783] dummy0: entered promiscuous mode
[  105.207917][ T5783] dummy0: entered allmulticast mode
[  105.232109][ T5783] nlmon0: entered promiscuous mode
[  105.237294][ T5783] nlmon0: entered allmulticast mode
[  105.259282][ T5791] netlink: 16 bytes leftover after parsing attributes in process `syz.0.765'.
[  105.283054][ T5783] caif0: entered promiscuous mode
[  105.288155][ T5783] caif0: entered allmulticast mode
[  105.293357][ T5783] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  105.442259][ T5798] loop2: detected capacity change from 0 to 1024
[  105.449243][ T5798] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[  106.209713][ T5825] netlink: 277 bytes leftover after parsing attributes in process `syz.3.770'.
[  106.277538][ T5825] futex_wake_op: syz.3.770 tries to shift op by -1; fix this program
[  107.300270][ T5885] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  107.363720][ T5887] smc: net device bond0 applied user defined pnetid SYZ0
[  107.547789][ T5900] netlink: 48 bytes leftover after parsing attributes in process `syz.0.780'.
[  107.741030][ T5918] netlink: 8 bytes leftover after parsing attributes in process `syz.5.788'.
[  108.754194][   T29] kauditd_printk_skb: 72 callbacks suppressed
[  108.754211][   T29] audit: type=1400 audit(1757449757.448:1736): avc:  denied  { read write } for  pid=5934 comm="syz.0.793" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  108.783919][   T29] audit: type=1400 audit(1757449757.448:1737): avc:  denied  { open } for  pid=5934 comm="syz.0.793" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  109.028187][ T5946] netlink: 48 bytes leftover after parsing attributes in process `syz.3.796'.
[  109.066457][   T29] audit: type=1400 audit(1757449757.758:1738): avc:  denied  { execute } for  pid=5949 comm="syz.5.799" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=15372 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  109.193642][ T5960] 8021q: adding VLAN 0 to HW filter on device bond1
[  109.244854][ T5960] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  109.256850][   T29] audit: type=1326 audit(1757449757.948:1739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5966 comm="syz.5.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b0ff9ebe9 code=0x7ffc0000
[  109.280269][   T29] audit: type=1326 audit(1757449757.948:1740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5966 comm="syz.5.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b0ff9ebe9 code=0x7ffc0000
[  109.303621][   T29] audit: type=1326 audit(1757449757.948:1741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5966 comm="syz.5.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5b0ff9ebe9 code=0x7ffc0000
[  109.327050][   T29] audit: type=1326 audit(1757449757.948:1742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5966 comm="syz.5.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b0ff9ebe9 code=0x7ffc0000
[  109.332102][ T5960] bond1: (slave macvlan0): Enslaving as an active interface with an up link
[  109.350413][   T29] audit: type=1326 audit(1757449757.948:1743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5966 comm="syz.5.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b0ff9ebe9 code=0x7ffc0000
[  109.350476][   T29] audit: type=1326 audit(1757449757.948:1744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5966 comm="syz.5.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f5b0ff9ebe9 code=0x7ffc0000
[  109.364045][ T5970] bridge_slave_0: left allmulticast mode
[  109.382496][   T29] audit: type=1326 audit(1757449757.948:1745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5966 comm="syz.5.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b0ff9ebe9 code=0x7ffc0000
[  109.405808][ T5970] bridge_slave_0: left promiscuous mode
[  109.405994][ T5970] bridge0: port 1(bridge_slave_0) entered disabled state
[  109.457298][ T5972] netlink: 'syz.1.809': attribute type 10 has an invalid length.
[  109.465101][ T5972] netlink: 40 bytes leftover after parsing attributes in process `syz.1.809'.
[  109.476252][ T5970] bridge_slave_1: left allmulticast mode
[  109.482054][ T5970] bridge_slave_1: left promiscuous mode
[  109.487726][ T5970] bridge0: port 2(bridge_slave_1) entered disabled state
[  109.504161][ T5970] bond0: (slave bond_slave_0): Releasing backup interface
[  109.522120][ T5970] bond0: (slave bond_slave_1): Releasing backup interface
[  109.542181][ T5970] team0: Port device team_slave_0 removed
[  109.557850][ T5970] team0: Port device team_slave_1 removed
[  109.566352][ T5976] loop2: detected capacity change from 0 to 1024
[  109.571970][ T5970] batman_adv: batadv0: Removing interface: batadv_slave_0
[  109.591328][ T5970] batman_adv: batadv0: Removing interface: batadv_slave_1
[  109.620739][ T5972] veth1_vlan: left promiscuous mode
[  109.634525][ T5976] EXT4-fs mount: 4 callbacks suppressed
[  109.634543][ T5976] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  109.654058][ T5972] batman_adv: batadv0: Adding interface: veth1_vlan
[  109.660692][ T5972] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  109.740800][ T5972] batman_adv: batadv0: Interface activated: veth1_vlan
[  109.788466][ T5974] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.810: Allocating blocks 385-513 which overlap fs metadata
[  109.813454][ T5973] EXT4-fs (loop2): pa ffff888107285770: logic 16, phys. 129, len 24
[  109.821574][ T5973] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8
[  109.874130][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  110.404595][ T5998] netlink: 48 bytes leftover after parsing attributes in process `syz.1.813'.
[  110.451253][ T6005] netlink: 52 bytes leftover after parsing attributes in process `syz.0.817'.
[  113.713019][ T6062] loop1: detected capacity change from 0 to 512
[  113.762480][ T6062] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  113.772856][ T6062] EXT4-fs (loop1): orphan cleanup on readonly fs
[  113.780521][ T6062] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.836: bg 0: block 248: padding at end of block bitmap is not set
[  113.796561][ T6062] __quota_error: 31 callbacks suppressed
[  113.796580][ T6062] Quota error (device loop1): write_blk: dquota write failed
[  113.809794][ T6062] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  113.819745][ T6062] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.836: Failed to acquire dquot type 1
[  113.840801][ T6062] EXT4-fs (loop1): 1 truncate cleaned up
[  113.847991][ T6062] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  114.555833][ T6072] netlink: 16 bytes leftover after parsing attributes in process `syz.2.842'.
[  114.657910][ T6074] netlink: 12 bytes leftover after parsing attributes in process `syz.3.840'.
[  115.233173][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.344317][   T29] audit: type=1326 audit(1757449764.038:1777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6081 comm="syz.5.845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b0ff9ebe9 code=0x7ffc0000
[  115.400436][   T29] audit: type=1326 audit(1757449764.068:1778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6081 comm="syz.5.845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5b0ff9ebe9 code=0x7ffc0000
[  115.423889][   T29] audit: type=1326 audit(1757449764.068:1779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6081 comm="syz.5.845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b0ff9ebe9 code=0x7ffc0000
[  115.447719][   T29] audit: type=1326 audit(1757449764.068:1780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6081 comm="syz.5.845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b0ff9ebe9 code=0x7ffc0000
[  115.471159][   T29] audit: type=1326 audit(1757449764.068:1781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6081 comm="syz.5.845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5b0ff9ebe9 code=0x7ffc0000
[  115.494501][   T29] audit: type=1326 audit(1757449764.068:1782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6081 comm="syz.5.845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b0ff9ebe9 code=0x7ffc0000
[  115.517933][   T29] audit: type=1326 audit(1757449764.068:1783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6081 comm="syz.5.845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b0ff9ebe9 code=0x7ffc0000
[  115.541322][   T29] audit: type=1326 audit(1757449764.068:1784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6081 comm="syz.5.845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5b0ff9ebe9 code=0x7ffc0000
[  115.582962][ T6087] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  115.609743][ T6084] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:3c0b:8dff:fe09:0496 error=-28
[  115.660271][ T6087] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  115.680786][ T6084] infiniband syz2: set down
[  115.685360][ T6084] infiniband syz2: added bond_slave_0
[  115.707888][ T6084] RDS/IB: syz2: added
[  115.718396][ T6084] smc: adding ib device syz2 with port count 1
[  115.724927][ T6084] smc:    ib device syz2 port 1 has pnetid 
[  115.773620][ T6102] netlink: zone id is out of range
[  115.779017][ T6102] netlink: zone id is out of range
[  115.785606][ T6102] netlink: zone id is out of range
[  115.790785][ T6102] netlink: zone id is out of range
[  115.795960][ T6102] netlink: zone id is out of range
[  115.802632][ T6102] netlink: zone id is out of range
[  115.807761][ T6102] netlink: zone id is out of range
[  115.808434][ T6087] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  115.813104][ T6102] netlink: zone id is out of range
[  115.828523][ T6102] netlink: zone id is out of range
[  115.835233][ T6102] netlink: zone id is out of range
[  115.917147][ T6087] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  115.944650][ T6107] netlink: 24 bytes leftover after parsing attributes in process `syz.3.855'.
[  116.176456][ T5850] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  116.204216][ T3863] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  116.230359][ T3863] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  116.256764][ T3863] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  116.719513][ T6122] netlink: 16 bytes leftover after parsing attributes in process `syz.1.858'.
[  116.739952][ T6119] netlink: 4 bytes leftover after parsing attributes in process `+}[@'.
[  116.800280][ T6125] netlink: 7 bytes leftover after parsing attributes in process `syz.0.868'.
[  116.809520][ T6125] netlink: 32 bytes leftover after parsing attributes in process `syz.0.868'.
[  117.022378][ T6133] serio: Serial port ptm0
[  117.080711][ T6136] netlink: 'syz.2.864': attribute type 4 has an invalid length.
[  117.099893][ T6136] netlink: 'syz.2.864': attribute type 4 has an invalid length.
[  117.912651][ T6160] raw_sendmsg: syz.3.871 forgot to set AF_INET. Fix it!
[  117.992029][ T6163] netlink: 4 bytes leftover after parsing attributes in process `+}[@'.
[  118.025119][ T6163] netlink: 7 bytes leftover after parsing attributes in process `+}[@'.
[  118.035207][ T6163] netlink: 32 bytes leftover after parsing attributes in process `+}[@'.
[  118.118852][ T6167] loop2: detected capacity change from 0 to 512
[  118.133836][ T6167] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  118.146517][ T6167] ext4 filesystem being mounted at /147/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  118.198770][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  118.244062][ T6176] netlink: 'syz.2.888': attribute type 1 has an invalid length.
[  118.272080][ T6176] 8021q: adding VLAN 0 to HW filter on device bond2
[  118.322274][ T6176] veth7: entered promiscuous mode
[  118.336934][ T6176] bond2: (slave veth7): Enslaving as an active interface with a down link
[  118.377111][ T6176] erspan0: entered allmulticast mode
[  118.395998][ T6176] bond2: (slave erspan0): making interface the new active one
[  118.413355][ T6176] erspan0: entered promiscuous mode
[  118.426383][ T6176] bond2: (slave erspan0): Enslaving as an active interface with an up link
[  118.532964][ T6181] netlink: 100 bytes leftover after parsing attributes in process `syz.2.879'.
[  118.580409][ T6186] netlink: 'syz.2.880': attribute type 1 has an invalid length.
[  118.599777][ T6186] 8021q: adding VLAN 0 to HW filter on device bond3
[  118.619549][ T6186] netlink: 4 bytes leftover after parsing attributes in process `syz.2.880'.
[  118.637420][ T6186] bond3 (unregistering): Released all slaves
[  118.719590][ T6193] loop2: detected capacity change from 0 to 512
[  118.733658][ T6193] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  118.757146][ T6193] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.884: Failed to acquire dquot type 1
[  118.771790][ T6193] EXT4-fs (loop2): 1 truncate cleaned up
[  118.777925][ T6193] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  118.797123][ T6201] 8021q: adding VLAN 0 to HW filter on device bond1
[  118.805343][ T6193] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  118.816976][ T6201] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  118.825744][ T6201] bond1: (slave macvlan2): Enslaving as an active interface with an up link
[  118.869344][ T6204] pim6reg1: entered promiscuous mode
[  118.874766][ T6204] pim6reg1: entered allmulticast mode
[  118.928173][   T29] kauditd_printk_skb: 28 callbacks suppressed
[  118.928193][   T29] audit: type=1400 audit(1757449767.618:1811): avc:  denied  { firmware_load } for  pid=6188 comm="syz.1.883" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1
[  119.047029][ T6214] netlink: 'syz.3.891': attribute type 4 has an invalid length.
[  119.058182][ T6214] netlink: 'syz.3.891': attribute type 4 has an invalid length.
[  119.082220][ T6215] loop2: detected capacity change from 0 to 512
[  119.089640][ T6215] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  119.100963][ T6215] EXT4-fs (loop2): orphan cleanup on readonly fs
[  119.107854][ T6215] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.899: bg 0: block 248: padding at end of block bitmap is not set
[  119.123646][ T6215] Quota error (device loop2): write_blk: dquota write failed
[  119.131129][ T6215] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  119.141090][ T6215] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.899: Failed to acquire dquot type 1
[  119.154007][ T6215] EXT4-fs (loop2): 1 truncate cleaned up
[  119.160229][ T6215] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  119.582934][ T6224] rdma_rxe: rxe_newlink: failed to add bond_slave_0
[  119.747752][ T6232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  119.766652][ T6232] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  119.869693][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  120.103821][ T6236] netlink: 'syz.3.896': attribute type 1 has an invalid length.
[  120.125059][ T6236] 8021q: adding VLAN 0 to HW filter on device bond3
[  120.141794][ T6238] netlink: 'syz.2.908': attribute type 4 has an invalid length.
[  120.150593][ T6236] bond3 (unregistering): Released all slaves
[  120.163493][ T6238] netlink: 'syz.2.908': attribute type 4 has an invalid length.
[  120.265052][   T29] audit: type=1400 audit(1757449768.958:1812): avc:  denied  { setopt } for  pid=6245 comm="syz.2.900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  120.284534][   T29] audit: type=1400 audit(1757449768.958:1813): avc:  denied  { bind } for  pid=6245 comm="syz.2.900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  120.303835][   T29] audit: type=1400 audit(1757449768.958:1814): avc:  denied  { name_bind } for  pid=6245 comm="syz.2.900" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  120.325553][   T29] audit: type=1400 audit(1757449768.958:1815): avc:  denied  { node_bind } for  pid=6245 comm="syz.2.900" saddr=127.0.0.1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1
[  120.350931][ T6246] loop2: detected capacity change from 0 to 512
[  120.357508][ T6246] EXT4-fs: Ignoring removed bh option
[  120.363117][ T6246] EXT4-fs: Ignoring removed mblk_io_submit option
[  120.370568][ T6246] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  120.387062][ T6246] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  120.395256][ T6246] EXT4-fs (loop2): orphan cleanup on readonly fs
[  120.405046][ T6246] Quota error (device loop2): do_insert_tree: Free block already used in tree: block 4
[  120.414775][ T6246] Quota error (device loop2): qtree_write_dquot: Error -5 occurred while creating quota
[  120.426241][ T6246] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.900: Failed to acquire dquot type 1
[  120.439950][ T6246] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.900: Invalid block bitmap block 0 in block_group 0
[  120.453965][ T6246] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.900: Invalid block bitmap block 0 in block_group 0
[  120.468666][ T6246] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.900: Invalid block bitmap block 0 in block_group 0
[  120.483419][ T6246] Quota error (device loop2): write_blk: dquota write failed
[  120.490920][ T6246] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.900: Failed to acquire dquot type 1
[  120.502637][ T6246] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.900: Failed to acquire dquot type 1
[  120.514303][ T6246] EXT4-fs (loop2): 1 orphan inode deleted
[  120.521680][ T6246] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  120.647167][ T6266] 8021q: adding VLAN 0 to HW filter on device bond1
[  120.684835][ T6266] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  120.699261][ T6266] bond1: (slave macvlan0): Enslaving as an active interface with an up link
[  120.843005][ T6282] bridge_slave_0: left allmulticast mode
[  120.848761][ T6282] bridge_slave_0: left promiscuous mode
[  120.854492][ T6282] bridge0: port 1(bridge_slave_0) entered disabled state
[  120.862221][ T6282] bridge_slave_1: left allmulticast mode
[  120.867955][ T6282] bridge_slave_1: left promiscuous mode
[  120.873638][ T6282] bridge0: port 2(bridge_slave_1) entered disabled state
[  120.884762][ T6282] bond0: (slave bond_slave_0): Releasing backup interface
[  120.895494][ T6284] netlink: 'syz.3.915': attribute type 10 has an invalid length.
[  120.913131][ T6282] bond0: (slave bond_slave_1): Releasing backup interface
[  120.923846][ T6282] team0: Port device team_slave_0 removed
[  120.933131][ T6282] team0: Port device team_slave_1 removed
[  120.939699][ T6282] batman_adv: batadv0: Removing interface: batadv_slave_0
[  120.947810][ T6282] batman_adv: batadv0: Removing interface: batadv_slave_1
[  120.957110][ T6282] batman_adv: batadv0: Removing interface: veth1_vlan
[  120.964733][ T6288] rdma_rxe: rxe_newlink: failed to add bond_slave_0
[  120.973878][ T6284] veth1_vlan: left promiscuous mode
[  120.980049][ T6284] batman_adv: batadv0: Adding interface: veth1_vlan
[  120.986659][ T6284] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  121.012681][ T6284] batman_adv: batadv0: Interface activated: veth1_vlan
[  121.086746][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  121.525361][ T6297] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  121.535347][ T6297] block device autoloading is deprecated and will be removed.
[  121.730218][ T6304] bridge_slave_0: left allmulticast mode
[  121.735941][ T6304] bridge_slave_0: left promiscuous mode
[  121.741870][ T6304] bridge0: port 1(bridge_slave_0) entered disabled state
[  121.788171][ T6305] __nla_validate_parse: 6 callbacks suppressed
[  121.788187][ T6305] netlink: 40 bytes leftover after parsing attributes in process `syz.0.922'.
[  121.848325][ T6304] bridge_slave_1: left allmulticast mode
[  121.854101][ T6304] bridge_slave_1: left promiscuous mode
[  121.859889][ T6304] bridge0: port 2(bridge_slave_1) entered disabled state
[  121.901821][ T6304] bond0: (slave bond_slave_0): Releasing backup interface
[  121.922260][ T6304] bond0: (slave bond_slave_1): Releasing backup interface
[  122.006170][ T6304] team0: Port device team_slave_0 removed
[  122.026878][ T6304] team0: Port device team_slave_1 removed
[  122.046778][ T6304] batman_adv: batadv0: Removing interface: batadv_slave_0
[  122.083264][ T6304] batman_adv: batadv0: Removing interface: batadv_slave_1
[  122.111775][ T6316] netlink: 4 bytes leftover after parsing attributes in process `syz.1.924'.
[  122.121034][ T6304] bond1: (slave macvlan0): Releasing backup interface
[  122.150258][ T6319] macsec0: entered promiscuous mode
[  122.289050][ T6326] syzkaller0: entered promiscuous mode
[  122.294591][ T6326] syzkaller0: entered allmulticast mode
[  122.430571][ T6337] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.510912][ T6337] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.569942][ T6337] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.769514][ T6337] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.836008][ T5856] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  122.847209][ T5856] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  122.858970][ T5863] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  122.870901][ T5863] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  122.921224][ T6351] batman_adv: batadv0: Interface deactivated: veth1_vlan
[  122.928440][ T6351] batman_adv: batadv0: Removing interface: veth1_vlan
[  122.945980][ T6351] validate_nla: 1 callbacks suppressed
[  122.946011][ T6351] netlink: 'syz.3.947': attribute type 10 has an invalid length.
[  122.959496][ T6351] netlink: 40 bytes leftover after parsing attributes in process `syz.3.947'.
[  122.965806][ T6354] loop5: detected capacity change from 0 to 1024
[  122.969523][ T6351] batman_adv: batadv0: Adding interface: veth1_vlan
[  122.977253][ T6354] EXT4-fs: Ignoring removed nobh option
[  122.981390][ T6351] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  122.987048][ T6354] EXT4-fs: inline encryption not supported
[  123.012763][ T6351] batman_adv: batadv0: Interface activated: veth1_vlan
[  123.033354][ T6354] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  123.064207][ T6354] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4183: comm syz.5.938: Allocating blocks 385-513 which overlap fs metadata
[  123.087231][ T6353] EXT4-fs (loop5): pa ffff8881071d5380: logic 16, phys. 129, len 24
[  123.095365][ T6353] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8
[  123.117906][ T4559] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  123.916218][   T29] kauditd_printk_skb: 31 callbacks suppressed
[  123.916304][   T29] audit: type=1326 audit(1757449772.670:1844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6370 comm="syz.0.943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23697ebe9 code=0x7ffc0000
[  123.945884][   T29] audit: type=1326 audit(1757449772.670:1845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6370 comm="syz.0.943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23697ebe9 code=0x7ffc0000
[  123.969299][   T29] audit: type=1326 audit(1757449772.670:1846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6370 comm="syz.0.943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe23697ebe9 code=0x7ffc0000
[  123.992673][   T29] audit: type=1326 audit(1757449772.670:1847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6370 comm="syz.0.943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23697ebe9 code=0x7ffc0000
[  124.016054][   T29] audit: type=1326 audit(1757449772.670:1848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6370 comm="syz.0.943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23697ebe9 code=0x7ffc0000
[  124.039429][   T29] audit: type=1326 audit(1757449772.670:1849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6370 comm="syz.0.943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fe23697ebe9 code=0x7ffc0000
[  124.062897][   T29] audit: type=1326 audit(1757449772.670:1850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6370 comm="syz.0.943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23697ebe9 code=0x7ffc0000
[  124.086375][   T29] audit: type=1326 audit(1757449772.670:1851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6370 comm="syz.0.943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23697ebe9 code=0x7ffc0000
[  124.086407][   T29] audit: type=1326 audit(1757449772.670:1852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6370 comm="syz.0.943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fe23697ebe9 code=0x7ffc0000
[  124.086432][   T29] audit: type=1326 audit(1757449772.670:1853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6370 comm="syz.0.943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23697ebe9 code=0x7ffc0000
[  124.281861][ T6387] tipc: New replicast peer: 255.255.255.83
[  124.287860][ T6387] tipc: Enabled bearer <udp:£>, priority 10
[  124.541005][ T3394] hid-generic 0000:0000:0000.0002: unknown main item tag 0x1
[  124.548517][ T3394] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  124.556327][ T3394] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  124.563787][ T3394] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  124.571483][ T3394] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  124.578912][ T3394] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  124.586399][ T3394] hid-generic 0000:0000:0000.0002: unknown main item tag 0x4
[  124.593931][ T3394] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  124.601408][ T3394] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  124.608903][ T3394] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  124.618424][ T3394] hid-generic 0000:0000:0000.0002: hidraw0: <UNKNOWN> HID v8.00 Device [syz0] on syz0
[  125.372146][ T3394] tipc: Node number set to 2388207694
[  126.459113][ T6448] netlink: 20 bytes leftover after parsing attributes in process `syz.1.965'.
[  126.951460][ T6469] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  126.967539][ T6467] tipc: Resetting bearer <eth:syzkaller0>
[  126.980308][ T6467] tipc: Disabling bearer <eth:syzkaller0>
[  127.014028][ T6471] SELinux: ebitmap: truncated map
[  127.019834][ T6471] SELinux: failed to load policy
[  127.209894][ T6484] netlink: 12 bytes leftover after parsing attributes in process `syz.1.981'.
[  127.344835][ T6490] netlink: 1347 bytes leftover after parsing attributes in process `syz.1.983'.
[  127.432877][ T6494] netlink: 180 bytes leftover after parsing attributes in process `syz.1.984'.
[  127.723507][ T6500] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  127.743396][ T6499] tipc: Resetting bearer <eth:syzkaller0>
[  127.756211][ T6499] tipc: Disabling bearer <eth:syzkaller0>
[  128.029636][ T6519] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  128.060415][ T6515] tipc: Resetting bearer <eth:syzkaller0>
[  128.081723][ T6515] tipc: Disabling bearer <eth:syzkaller0>
[  128.207585][ T6525] netlink: 1347 bytes leftover after parsing attributes in process `syz.0.995'.
[  128.293436][ T6528] wg2: entered promiscuous mode
[  128.298995][ T6528] wg2: entered allmulticast mode
[  128.864061][ T6536] netlink: 'syz.2.999': attribute type 1 has an invalid length.
[  128.878085][ T6536] 8021q: adding VLAN 0 to HW filter on device bond3
[  128.974269][ T6540] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  128.982214][ T6538] tipc: Resetting bearer <eth:syzkaller0>
[  128.994229][ T6538] tipc: Disabling bearer <eth:syzkaller0>
[  129.011752][ T6542] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1003'.
[  129.051747][ T6544] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1004'.
[  129.066763][ T6544] team1 (uninitialized): Failed to send options change via netlink (err -105)
[  129.084269][ T6544] team1: entered promiscuous mode
[  129.089370][ T6544] team1: entered allmulticast mode
[  129.237472][   T29] kauditd_printk_skb: 28 callbacks suppressed
[  129.237504][   T29] audit: type=1401 audit(1757449778.145:1882): op=setxattr invalid_context=""
[  129.308480][ T6555] bond2: (slave erspan0): Releasing active interface
[  129.316776][ T6555] erspan0: left promiscuous mode
[  129.328928][ T6555] bond0: (slave bond_slave_0): Releasing backup interface
[  129.343679][ T6555] bond0: (slave bond_slave_1): Releasing backup interface
[  129.361770][ T6557] netlink: 'syz.2.1009': attribute type 10 has an invalid length.
[  129.366224][ T6555] batman_adv: batadv0: Removing interface: batadv_slave_0
[  129.369708][ T6557] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1009'.
[  129.393373][ T6555] bond1: (slave macvlan0): Releasing backup interface
[  129.411168][ T6555] bond2: (slave veth7): Releasing active interface
[  129.498035][   T29] audit: type=1326 audit(1757449778.410:1883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6561 comm="syz.0.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23697ebe9 code=0x7ffc0000
[  129.526085][   T29] audit: type=1326 audit(1757449778.440:1884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6561 comm="syz.0.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23697ebe9 code=0x7ffc0000
[  129.549796][   T29] audit: type=1326 audit(1757449778.440:1885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6561 comm="syz.0.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe23697ebe9 code=0x7ffc0000
[  129.573244][   T29] audit: type=1326 audit(1757449778.440:1886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6561 comm="syz.0.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23697ebe9 code=0x7ffc0000
[  129.596756][   T29] audit: type=1326 audit(1757449778.440:1887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6561 comm="syz.0.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23697ebe9 code=0x7ffc0000
[  129.620366][   T29] audit: type=1326 audit(1757449778.440:1888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6561 comm="syz.0.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fe23697ebe9 code=0x7ffc0000
[  129.643837][   T29] audit: type=1326 audit(1757449778.440:1889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6561 comm="syz.0.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23697ebe9 code=0x7ffc0000
[  129.667332][   T29] audit: type=1326 audit(1757449778.440:1890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6561 comm="syz.0.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23697ebe9 code=0x7ffc0000
[  129.690876][   T29] audit: type=1326 audit(1757449778.440:1891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6561 comm="syz.0.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fe23697ebe9 code=0x7ffc0000
[  129.825326][ T6574] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  130.810444][ T6602] batman_adv: batadv0: Interface deactivated: veth1_vlan
[  130.817706][ T6602] batman_adv: batadv0: Removing interface: veth1_vlan
[  130.868938][ T6602] netlink: 'syz.1.1037': attribute type 10 has an invalid length.
[  130.876926][ T6602] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1037'.
[  130.918752][ T6602] batman_adv: batadv0: Adding interface: veth1_vlan
[  130.925455][ T6602] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  130.955759][ T6604] loop5: detected capacity change from 0 to 8192
[  131.002187][ T6602] batman_adv: batadv0: Interface activated: veth1_vlan
[  131.135381][ T6614] msdos: Unknown parameter 'ÿ'
[  131.252058][   T36] IPVS: starting estimator thread 0...
[  131.358422][ T6621] IPVS: using max 2112 ests per chain, 105600 per kthread
[  131.392836][ T6625] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1038'.
[  131.637028][ T6636] loop5: detected capacity change from 0 to 512
[  131.662010][ T6636] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  131.678252][ T6640] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1045'.
[  131.688855][ T6640] batman_adv: batadv0: Interface deactivated: veth1_vlan
[  131.696632][ T6636] EXT4-fs (loop5): 1 truncate cleaned up
[  131.702968][ T6636] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  131.734588][ T6640] batman_adv: batadv0: Removing interface: veth1_vlan
[  131.746629][ T6636] netlink: 'syz.5.1043': attribute type 4 has an invalid length.
[  131.811928][ T4559] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  131.838832][ T6650] syzkaller0: entered promiscuous mode
[  131.844415][ T6650] syzkaller0: entered allmulticast mode
[  132.164501][ T6669] __nla_validate_parse: 1 callbacks suppressed
[  132.164515][ T6669] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1057'.
[  132.729130][ T6675] syzkaller0: entered promiscuous mode
[  132.734742][ T6675] syzkaller0: entered allmulticast mode
[  132.837869][ T6682] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1060'.
[  132.850245][ T6682] netem: change failed
[  133.036966][ T6686] xt_policy: too many policy elements
[  133.886895][ T6714] SELinux:  Context @ is not valid (left unmapped).
[  133.978392][ T6717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  134.015399][ T6716] loop5: detected capacity change from 0 to 128
[  134.058959][ T6717] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  134.272688][ T6723] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1078'.
[  134.310475][ T6726] $Hÿ: renamed from bond0
[  134.317652][ T6726] $Hÿ: entered promiscuous mode
[  134.654149][   T29] kauditd_printk_skb: 125 callbacks suppressed
[  134.654244][   T29] audit: type=1400 audit(1757449783.647:2017): avc:  denied  { prog_load } for  pid=6727 comm="syz.1.1081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  134.679530][   T29] audit: type=1400 audit(1757449783.647:2018): avc:  denied  { bpf } for  pid=6727 comm="syz.1.1081" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  134.700078][   T29] audit: type=1400 audit(1757449783.647:2019): avc:  denied  { perfmon } for  pid=6727 comm="syz.1.1081" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  134.728031][   T29] audit: type=1400 audit(1757449783.718:2020): avc:  denied  { prog_run } for  pid=6727 comm="syz.1.1081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  134.754923][   T29] audit: type=1400 audit(1757449783.748:2021): avc:  denied  { read } for  pid=6736 comm="syz.3.1083" dev="nsfs" ino=4026532442 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  134.786541][   T29] audit: type=1400 audit(1757449783.748:2022): avc:  denied  { open } for  pid=6736 comm="syz.3.1083" path="net:[4026532442]" dev="nsfs" ino=4026532442 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  134.818196][   T29] audit: type=1400 audit(1757449783.748:2023): avc:  denied  { create } for  pid=6736 comm="syz.3.1083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  134.839299][   T29] audit: type=1400 audit(1757449783.758:2024): avc:  denied  { ioctl } for  pid=6736 comm="syz.3.1083" path="socket:[18224]" dev="sockfs" ino=18224 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  134.865370][   T29] audit: type=1400 audit(1757449783.758:2025): avc:  denied  { write } for  pid=6736 comm="syz.3.1083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  134.885812][   T29] audit: type=1400 audit(1757449783.758:2026): avc:  denied  { read } for  pid=6736 comm="syz.3.1083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  134.950754][ T6747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  134.969469][ T6747] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  135.671252][ T6766] netlink: 'syz.2.1094': attribute type 10 has an invalid length.
[  135.679165][ T6766] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1094'.
[  135.731508][ T6768] netlink: 'syz.1.1092': attribute type 3 has an invalid length.
[  135.766677][ T6768] netlink: 'syz.1.1092': attribute type 3 has an invalid length.
[  135.798970][ T6768] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1092'.
[  136.441654][ T6774] loop5: detected capacity change from 0 to 1024
[  136.448404][ T6774] EXT4-fs: Ignoring removed orlov option
[  136.459273][ T6774] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  136.679760][ T6774] ==================================================================
[  136.687899][ T6774] BUG: KCSAN: data-race in __mark_inode_dirty / writeback_single_inode
[  136.696187][ T6774] 
[  136.698533][ T6774] write to 0xffff8881072de008 of 4 bytes by task 6777 on cpu 0:
[  136.706173][ T6774]  writeback_single_inode+0x14a/0x3e0
[  136.711577][ T6774]  sync_inode_metadata+0x5b/0x90
[  136.716553][ T6774]  generic_buffers_fsync_noflush+0xd9/0x120
[  136.722465][ T6774]  ext4_sync_file+0x1ab/0x690
[  136.727154][ T6774]  vfs_fsync_range+0x10a/0x130
[  136.731933][ T6774]  ext4_buffered_write_iter+0x34f/0x3c0
[  136.737523][ T6774]  ext4_file_write_iter+0x383/0xf00
[  136.742759][ T6774]  iter_file_splice_write+0x666/0xa60
[  136.748160][ T6774]  direct_splice_actor+0x156/0x2a0
[  136.753289][ T6774]  splice_direct_to_actor+0x312/0x680
[  136.758699][ T6774]  do_splice_direct+0xda/0x150
[  136.763490][ T6774]  do_sendfile+0x380/0x650
[  136.767946][ T6774]  __x64_sys_sendfile64+0x105/0x150
[  136.773178][ T6774]  x64_sys_call+0x2bb0/0x2ff0
[  136.777874][ T6774]  do_syscall_64+0xd2/0x200
[  136.782526][ T6774]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  136.788450][ T6774] 
[  136.790816][ T6774] read to 0xffff8881072de008 of 4 bytes by task 6774 on cpu 1:
[  136.798364][ T6774]  __mark_inode_dirty+0x191/0x750
[  136.803424][ T6774]  ext4_write_inline_data_end+0x3e5/0x5f0
[  136.809183][ T6774]  ext4_write_end+0x3d7/0x730
[  136.813896][ T6774]  generic_perform_write+0x30f/0x490
[  136.819209][ T6774]  ext4_buffered_write_iter+0x1ee/0x3c0
[  136.824788][ T6774]  ext4_file_write_iter+0x383/0xf00
[  136.830027][ T6774]  iter_file_splice_write+0x666/0xa60
[  136.835423][ T6774]  direct_splice_actor+0x156/0x2a0
[  136.840560][ T6774]  splice_direct_to_actor+0x312/0x680
[  136.845961][ T6774]  do_splice_direct+0xda/0x150
[  136.850759][ T6774]  do_sendfile+0x380/0x650
[  136.855209][ T6774]  __x64_sys_sendfile64+0x105/0x150
[  136.860443][ T6774]  x64_sys_call+0x2bb0/0x2ff0
[  136.865143][ T6774]  do_syscall_64+0xd2/0x200
[  136.869728][ T6774]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  136.875647][ T6774] 
[  136.877987][ T6774] value changed: 0x00000038 -> 0x00000002
[  136.883717][ T6774] 
[  136.886065][ T6774] Reported by Kernel Concurrency Sanitizer on:
[  136.892238][ T6774] CPU: 1 UID: 0 PID: 6774 Comm: syz.5.1095 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  136.903646][ T6774] Tainted: [W]=WARN
[  136.907466][ T6774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  136.917543][ T6774] ==================================================================
[  137.032210][ T4559] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.