last executing test programs:

3.651733781s ago: executing program 3 (id=3748):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
sendto$inet6(r0, &(0x7f0000000080)="02", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x0, 0x0, @private1}, 0x1c)
shutdown(r0, 0x1)
r1 = dup(r0)
keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000480), &(0x7f00000004c0)=ANY=[@ANYBLOB='enc=raw hash=h\t'], 0x0, 0x0)
setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x82, &(0x7f0000000140), 0x8)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x44, 0xb, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private2}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x44}}, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet_sctp(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file2\x00', 0x5e, &(0x7f0000000040)={[{@data_err_ignore}, {@usrquota}]}, 0x2, 0x455, &(0x7f0000000380)="$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")
chdir(&(0x7f00000001c0)='./file0\x00')
r4 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8)
sendto$inet6(r4, &(0x7f0000000140)="f4", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00'}, 0x1c)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c)
r5 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r6, &(0x7f0000000200)=""/197, 0xc5)

3.268107853s ago: executing program 0 (id=3752):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@user_xattr}, {@grpjquota}, {@nodelalloc}]}, 0x1, 0x4a3, &(0x7f0000000580)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)
write$binfmt_script(r0, &(0x7f0000000200), 0xfea7)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r6 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r6, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, "2dbe0000000000e0f7d6a4ae6dddebd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b58c66ee677df701905bbaafab4afbaf755a3f6a004", "cba3d627780820d1cbf7db710382040038a0ef8da65697e4298d1e02dcb8eb8c6b105d9600fdff0000000004000000000000000000000043fe1a00", "be1d0000ae9eefec8000990000008000", [0x564]})

2.863198988s ago: executing program 3 (id=3754):
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000002c0)='rpm_return_int\x00', r1}, 0x10)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)
fcntl$setlease(r2, 0x400, 0x0)
fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000040), 0x0, 0x0, 0x0)
fremovexattr(r2, &(0x7f00000000c0)=@known='trusted.overlay.redirect\x00')
ioctl$TIOCGPKT(r2, 0x80045438, &(0x7f0000000280))
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r3}, 0x10)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x4001, 0x8000000, 0x240, 0x0, 0x720d, 0x148, 0x0, 0x148, 0x1a8, 0x240, 0x240, 0x1a8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @empty, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0)
sendto$inet(r4, 0x0, 0x0, 0x24000080, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001500)={0x2c, r6, 0x1, 0x0, 0x0, {0x22}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}]}, 0x2c}}, 0x0)
syz_open_dev$usbfs(&(0x7f0000000040), 0x12, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

2.402012326s ago: executing program 0 (id=3756):
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0xfe, 0x246, &(0x7f0000000ac0)="$eJzs3T9oM2UcB/DvXRJf+75BXnURxD8gIloor5vg8rooFKQUEUGFioiL0gq1xa1xcnHQWaWTSxE3q6N0KS6K4FS1Q10ELQ4WBx0iybVS24ja1Jz0Ph+43l3vee73HLnvkyyXBGisq0muJ2klmU7SSVIcb3B3tVw93F2f2l5I+v0nfiqG7ar9ylG/K0l6SR5KslUWeamdrG4+s/fLzmP3vbnSuff9zaenJnqRh/b3dh8/eG/ujY9mH1z94qsf5opcT/dP13X+ihH/axfJLf9Fsf+Jol33CPgn5l/78OtB7m9Ncs8w/52UqV68t5Zv2OrkgXf/qu/bP355+yTHCpy/fr8zeA/s9YHGKZN0U5QzSartspyZqT7Df9O6XL68tPzq9ItLK4sv1D1TAeelm+w++smlj6+cyP/3rSr/wMU1yP+T8xvfDrYPWnWPBpiIO6rVIP/Tz63dH/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmHC6xztNEbeVj+obnkH5pL/qG5jucfAGiW/qW6n0AG6lL3/AMAAAAAAAAAAAAAAAAAAJy2PrW9cLRMquZn7yT7jyRpj6rfGv4ecXLj8O/ln4tBsz8UVbexPHvXmCcY0wc1P31903f11v/8znrrry0mvdeTXGu3T99/xeH9d3Y3/83xzvNjFviXihP7Dz812fon/bZRb/3ZneTTwfxzbdT8U+a24Xr0/NM9/hXLZ/TKr2OeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIn5PQAA//8PK23M")
r0 = creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
link(&(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='ext4_es_lookup_extent_enter\x00', r1}, 0x10)
rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000000380)=""/159, 0x9f)
lseek(r2, 0x7ff, 0x1)
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00')
getdents64(r3, &(0x7f0000000440)=""/68, 0x44)
pwritev2(r0, &(0x7f00000010c0)=[{&(0x7f0000000840)="2a550cde51822228c5c7e7312fd163004261fb9f816e2e5285a8462208495139a395f5dc4833b040faa683c960cca733615240be2ea250f49248692c33076b84158b3aa5d4f31b9397ee128bb5cbb28196972ad1261b317cc0ce3ba316158cac7048bded3191", 0x66}, {&(0x7f00000008c0)="3e8411c7cbdffc25253ecc85f5f995393243676607406cbbccae9f5c7926ef37d622f53148d24702c383a61802e456b6619db318ea23cbce1eda744b4fea7c178fe6c73a62994dac7e8700604c03ed3f51263c395c53901cedbefc0a2323141eee5ed8eceb2c078546d1258a0bc88f7674ad4fc0cfbfbbc1376d455a8465dc286131cce4eba574c66fe63df1c5014b5ff95ed49e8f4527a26ad70dcc312c", 0x9e}, {&(0x7f0000000980)="d89d389de11d936f5b468fa565aba2b2ad00ae153b4da3598bcaeb6da69fe6a32bad36bbf6681439a02971128afc0bcc69628a08c0c632c688190275dfd8360972f31e12a300bfa308847f08973c4c4ba6f496566bc2b4198a4f52763daef291add52d1268d9f4e94a2fb836e10b2c5d4dbaeb0d748f243b53a5d023980d49282f2a71b055031bcba75f2f76980d8215cb728bba392957da79ce4aae269bea71701f659b5678bb5d86e72c632606c80a72ddfbb43a7f069bc79b22c2", 0xbc}, {&(0x7f0000000a40)="56c1b50fad018b4963a1e56d4504672cfc99c893508e4c55cc1ceddc752ee8f5925c0b5e6fbca6b596322be5d996df88bd83ea79fd7e17bc5ef8b8ff4e0c6be9f2dd03484e775d3a05eafb500209cdcd5d3c2d", 0x53}, {&(0x7f0000000d40)="72234f8b4886dfd7e55b5afd0ae0f55e02c216d48335532419c9b4d232b21a42afa522c7131fbc9f34815af95a331f0aa2dfaf308c15dc7b9c879cc64bdb8c79cd55cb825a07a2305d03337dd5c5fa57ae23b0b80bbd81c8c25739b4b61e7e4b0b6ee9c692626977dbb1af26ae869341d5e264fa814820172a55b2556331dd356a8e56717c524a0930fb", 0x8a}, {&(0x7f0000001040)="3d3e3ccfc182aba0e97c2be76a26158635f147c6c0794ab879ac50c5454d1b3aa9dbb160a544684c911b58c66597bd28bc4f19bd58f802fd5f93353c3d4ef2cb1165989010d87334f0c0cce54a934575f6823b8bc4900b7e7acf56ad6f6f85bd4c124b2a95435e5804033c4bbd0f2f16609cdf934bf902f51e731628bb2c3528", 0x80}, {&(0x7f00000004c0)="0fb9f57515534f6e4d5a09aabedaa0b01f3a2f5c2e089b2f4d7bfa80b61e578e081e8b5fb8d92008ff2de02f97", 0x2d}], 0x7, 0xfffffff4, 0x4, 0x10)
getdents64(r2, 0x0, 0x10)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x168, 0x9, 0x0, 0xb, 0x250, 0x250, 0x250, 0x250, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x1e, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0)

2.322350053s ago: executing program 4 (id=3757):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001640)={0x1c, r2, 0x1}, 0x1c}}, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), 0x0}, 0x20)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, 0x0, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv2(r4, 0x0, 0x0, 0x29, 0x0, 0x11)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)

2.268128158s ago: executing program 0 (id=3759):
pread64(0xffffffffffffffff, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000180)=0x10, 0x4)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x3ffffffffffffda, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r3)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a"], 0x50}}, 0x0)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r4 = inotify_init1(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
fcntl$setown(r4, 0x8, 0xffffffffffffffff)
fcntl$getownex(r4, 0x10, &(0x7f0000000140)={0x0, <r5=>0x0})
r6 = syz_open_procfs(r5, &(0x7f0000000600)='fd/4\x00')
ioctl$EXT4_IOC_GROUP_EXTEND(r6, 0x40305839, &(0x7f0000000240)=0x28084)

2.116546851s ago: executing program 1 (id=3761):
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15)
chdir(0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f00000005c0), 0x1, 0x54e, &(0x7f00000010c0)="$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")
openat(0xffffffffffffff9c, 0x0, 0x103042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305839, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)={0x30, 0x0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x30}}, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000f"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_LEAVE_IBSS(r2, 0x0, 0x4000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x3, 0x0)
write(r4, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24)

2.115271191s ago: executing program 4 (id=3762):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0})
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)

1.910203908s ago: executing program 4 (id=3763):
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0xfe, 0x246, &(0x7f0000000ac0)="$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")
r0 = creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
link(&(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='ext4_es_lookup_extent_enter\x00', r1}, 0x10)
rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000000380)=""/159, 0x9f)
lseek(r2, 0x7ff, 0x1)
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00')
getdents64(r3, &(0x7f0000000440)=""/68, 0x44)
pwritev2(r0, &(0x7f00000010c0)=[{&(0x7f0000000840)="2a550cde51822228c5c7e7312fd163004261fb9f816e2e5285a8462208495139a395f5dc4833b040faa683c960cca733615240be2ea250f49248692c33076b84158b3aa5d4f31b9397ee128bb5cbb28196972ad1261b317cc0ce3ba316158cac7048bded3191", 0x66}, {&(0x7f00000008c0)="3e8411c7cbdffc25253ecc85f5f995393243676607406cbbccae9f5c7926ef37d622f53148d24702c383a61802e456b6619db318ea23cbce1eda744b4fea7c178fe6c73a62994dac7e8700604c03ed3f51263c395c53901cedbefc0a2323141eee5ed8eceb2c078546d1258a0bc88f7674ad4fc0cfbfbbc1376d455a8465dc286131cce4eba574c66fe63df1c5014b5ff95ed49e8f4527a26ad70dcc312c", 0x9e}, {&(0x7f0000000980)="d89d389de11d936f5b468fa565aba2b2ad00ae153b4da3598bcaeb6da69fe6a32bad36bbf6681439a02971128afc0bcc69628a08c0c632c688190275dfd8360972f31e12a300bfa308847f08973c4c4ba6f496566bc2b4198a4f52763daef291add52d1268d9f4e94a2fb836e10b2c5d4dbaeb0d748f243b53a5d023980d49282f2a71b055031bcba75f2f76980d8215cb728bba392957da79ce4aae269bea71701f659b5678bb5d86e72c632606c80a72ddfbb43a7f069bc79b22c2", 0xbc}, {&(0x7f0000000a40)="56c1b50fad018b4963a1e56d4504672cfc99c893508e4c55cc1ceddc752ee8f5925c0b5e6fbca6b596322be5d996df88bd83ea79fd7e17bc5ef8b8ff4e0c6be9f2dd03484e775d3a05eafb500209cdcd5d3c2d", 0x53}, {&(0x7f0000000d40)="72234f8b4886dfd7e55b5afd0ae0f55e02c216d48335532419c9b4d232b21a42afa522c7131fbc9f34815af95a331f0aa2dfaf308c15dc7b9c879cc64bdb8c79cd55cb825a07a2305d03337dd5c5fa57ae23b0b80bbd81c8c25739b4b61e7e4b0b6ee9c692626977dbb1af26ae869341d5e264fa814820172a55b2556331dd356a8e56717c524a0930fb", 0x8a}, {&(0x7f0000001040)="3d3e3ccfc182aba0e97c2be76a26158635f147c6c0794ab879ac50c5454d1b3aa9dbb160a544684c911b58c66597bd28bc4f19bd58f802fd5f93353c3d4ef2cb1165989010d87334f0c0cce54a934575f6823b8bc4900b7e7acf56ad6f6f85bd4c124b2a95435e5804033c4bbd0f2f16609cdf934bf902f51e731628bb2c3528", 0x80}, {&(0x7f00000004c0)="0fb9f57515534f6e4d5a09aabedaa0b01f3a2f5c2e089b2f4d7bfa80b61e578e081e8b5fb8d92008ff2de02f97", 0x2d}], 0x7, 0xfffffff4, 0x4, 0x10)
getdents64(r2, 0x0, 0x10)
socket$inet6_udp(0xa, 0x2, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x1e, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0)

1.523191711s ago: executing program 4 (id=3764):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000038c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x9)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r3}, &(0x7f0000000800), &(0x7f0000000840)=r4}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8)
socket$netlink(0x10, 0x3, 0x0)

1.41239549s ago: executing program 1 (id=3765):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f00000001c0)={[{@dioread_lock}, {@usrjquota}, {@errors_remount}, {@norecovery}, {@auto_da_alloc}, {@noquota}, {@grpquota}, {@barrier_val}, {@oldalloc}, {@jqfmt_vfsold}]}, 0x45, 0x7b1, &(0x7f00000004c0)="$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")
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0)
ftruncate(r1, 0x2007ffb)
socket$inet6(0xa, 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r1, 0x0)
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
syz_read_part_table(0x1057, &(0x7f0000001080)="$eJzsz7ttw1AMBdDLQAqUJRJNkBmyRBpPI03i3lOo8jhuXcqQ8LSC7eKc4n0IXgIML/WRdZdKzve/fGbNUqkl+Um6ZNy6hjnJXHviqyXXPn2Gbpzb/7fdt1TqGD/Vqb2+k9R01K/bUfm/PGVJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhzjwAAAP//M+YRxg==")
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0xd3b, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
readv(r2, &(0x7f0000003400)=[{&(0x7f0000001080)=""/107, 0x7ffff000}, {&(0x7f0000004c00)=""/4096, 0x1000}], 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
ioctl$TIOCNXCL(r0, 0x540d)
r4 = open(&(0x7f0000000f00)='./bus\x00', 0x161142, 0x6)
getrandom(&(0x7f0000000dc0)=""/157, 0x9d, 0x1)
r5 = open(&(0x7f0000007f80)='./bus\x00', 0x0, 0x0)
sendfile(r4, r5, 0x0, 0x1000000201005)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff})
mmap(&(0x7f0000834000/0x2000)=nil, 0x2000, 0x2, 0x3131, 0xffffffffffffffff, 0xf199000)

1.340031337s ago: executing program 3 (id=3766):
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001000000", @ANYRES32, @ANYBLOB="0000000001000000000000ae5f7ba6f1c2798278", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r2)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
listen(r3, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000140), 0x4)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r6 = accept(r2, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1)
recvfrom(r5, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x0, 0x0, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r0, &(0x7f0000000000), &(0x7f0000000880)=""/120}, 0x20)
move_mount(0xffffffffffffffff, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x160)

1.338853967s ago: executing program 0 (id=3767):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0xf, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000195"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='inet_sk_error_report\x00', r2}, 0x10)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='inet_sk_error_report\x00', r3}, 0x10)
r4 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20008081)
r5 = io_uring_setup(0x1694, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0x400})
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
syz_read_part_table(0x5d4, &(0x7f0000000000)="$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")
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001040)=ANY=[@ANYBLOB="3c010000100013070000000000000000ac1414aa000000000000000081438ed1dc4cffaa00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bbfffffffe32000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c001400636d616328616573290000000000000000"], 0x13c}}, 0x0)
write$binfmt_aout(r6, &(0x7f00000000c0)=ANY=[], 0xff2e)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
utimes(&(0x7f0000000040)='./file0\x00', 0x0)
syz_emit_ethernet(0x32, &(0x7f0000001600)={@link_local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast1}, {0x0, 0x4e23, 0x10, 0x0, @gue={{0x3}}}}}}}, 0x0)
r8 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNIMAPCLR(r8, 0x4b68, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)

1.265462013s ago: executing program 2 (id=3768):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x3, [@restrict={0xf, 0x0, 0x0, 0xb, 0x4}, @var={0x2, 0x0, 0x0, 0xe, 0x3, 0x1}, @var={0xd, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0]}}, &(0x7f0000000840)=""/170, 0x47, 0xaa, 0x0, 0x2, 0x10000, @value}, 0x28)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0)
r2 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000980), 0x8)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg0\x00'})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000f40)=ANY=[@ANYBLOB], &(0x7f0000000180)=""/161, 0x183, 0xa1, 0x1, 0xffffffff, 0x10000, @value=r2}, 0x28)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYRES32=r1, @ANYRESHEX=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0xfb, 0x0, &(0x7f0000000440))
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c)
sendto$inet6(r5, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)

1.191091719s ago: executing program 2 (id=3769):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000300"/28], 0x48)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
writev(r1, &(0x7f0000000600), 0x0)
syz_clone(0x4200000, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x100007b, 0x12, 0xffffffffffffffff, 0x60509000)
accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x9, 0xb3, 0x4, 0x37, 0x0, 0x8001, 0x2, 0x9, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2000000, 0x6, @perf_config_ext={0x6, 0x4}, 0x4000, 0xe1, 0x80000000, 0x7, 0x4, 0xb96, 0x10, 0x0, 0x1, 0x0, 0x40000008}, 0xffffffffffffffff, 0x5, r2, 0x1)
write$UHID_CREATE2(r2, &(0x7f0000000100)=ANY=[], 0x118)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0)
syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x8c08, &(0x7f0000000cc0)=ANY=[], 0x1, 0x5c2, &(0x7f0000000e00)="$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")

1.123713605s ago: executing program 2 (id=3770):
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0xfe, 0x246, &(0x7f0000000ac0)="$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")
r0 = creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
link(&(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='ext4_es_lookup_extent_enter\x00', r1}, 0x10)
rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000000380)=""/159, 0x9f)
lseek(r2, 0x7ff, 0x1)
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00')
getdents64(r3, &(0x7f0000000440)=""/68, 0x44)
pwritev2(r0, &(0x7f00000010c0)=[{&(0x7f0000000840)="2a550cde51822228c5c7e7312fd163004261fb9f816e2e5285a8462208495139a395f5dc4833b040faa683c960cca733615240be2ea250f49248692c33076b84158b3aa5d4f31b9397ee128bb5cbb28196972ad1261b317cc0ce3ba316158cac7048bded3191", 0x66}, {&(0x7f00000008c0)="3e8411c7cbdffc25253ecc85f5f995393243676607406cbbccae9f5c7926ef37d622f53148d24702c383a61802e456b6619db318ea23cbce1eda744b4fea7c178fe6c73a62994dac7e8700604c03ed3f51263c395c53901cedbefc0a2323141eee5ed8eceb2c078546d1258a0bc88f7674ad4fc0cfbfbbc1376d455a8465dc286131cce4eba574c66fe63df1c5014b5ff95ed49e8f4527a26ad70dcc312c", 0x9e}, {&(0x7f0000000980)="d89d389de11d936f5b468fa565aba2b2ad00ae153b4da3598bcaeb6da69fe6a32bad36bbf6681439a02971128afc0bcc69628a08c0c632c688190275dfd8360972f31e12a300bfa308847f08973c4c4ba6f496566bc2b4198a4f52763daef291add52d1268d9f4e94a2fb836e10b2c5d4dbaeb0d748f243b53a5d023980d49282f2a71b055031bcba75f2f76980d8215cb728bba392957da79ce4aae269bea71701f659b5678bb5d86e72c632606c80a72ddfbb43a7f069bc79b22c2", 0xbc}, {&(0x7f0000000a40)="56c1b50fad018b4963a1e56d4504672cfc99c893508e4c55cc1ceddc752ee8f5925c0b5e6fbca6b596322be5d996df88bd83ea79fd7e17bc5ef8b8ff4e0c6be9f2dd03484e775d3a05eafb500209cdcd5d3c2d", 0x53}, {&(0x7f0000000d40)="72234f8b4886dfd7e55b5afd0ae0f55e02c216d48335532419c9b4d232b21a42afa522c7131fbc9f34815af95a331f0aa2dfaf308c15dc7b9c879cc64bdb8c79cd55cb825a07a2305d03337dd5c5fa57ae23b0b80bbd81c8c25739b4b61e7e4b0b6ee9c692626977dbb1af26ae869341d5e264fa814820172a55b2556331dd356a8e56717c524a0930fb", 0x8a}, {&(0x7f0000001040)="3d3e3ccfc182aba0e97c2be76a26158635f147c6c0794ab879ac50c5454d1b3aa9dbb160a544684c911b58c66597bd28bc4f19bd58f802fd5f93353c3d4ef2cb1165989010d87334f0c0cce54a934575f6823b8bc4900b7e7acf56ad6f6f85bd4c124b2a95435e5804033c4bbd0f2f16609cdf934bf902f51e731628bb2c3528", 0x80}, {&(0x7f00000004c0)="0fb9f57515534f6e4d5a09aabedaa0b01f3a2f5c2e089b2f4d7bfa80b61e578e081e8b5fb8d92008ff2de02f97", 0x2d}], 0x7, 0xfffffff4, 0x4, 0x10)
getdents64(r2, 0x0, 0x10)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x168, 0x9, 0x0, 0xb, 0x250, 0x250, 0x250, 0x250, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x1e, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0)

1.045669882s ago: executing program 2 (id=3771):
socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0)
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000)
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$cgroup_int(r0, &(0x7f0000000540), 0xfffffdd8)
madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15)
perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x28, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LIMIT_BURST={0x8}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x7}]}}}]}], {0x14, 0x10}}, 0xac}}, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x2c, &(0x7f0000000040)=[@in={0x2, 0x4e22, @rand_addr=0x64010100}, @in6={0xa, 0x7f, 0x9, @mcast2, 0x8001}]}, &(0x7f0000000100)=0x10)
r3 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000001c0)={0x0, 0x3d, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x0)
recvmmsg(r3, &(0x7f0000004480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

540.715124ms ago: executing program 1 (id=3772):
r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000001340)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
writev(r0, &(0x7f0000002800)=[{&(0x7f0000002500)='\f7', 0x2}], 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000080000000000000000000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000140)='./bus\x00', 0x1a404ac, &(0x7f0000001480)=ANY=[], 0xfe, 0x0, &(0x7f0000000000))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mkdirat(r3, &(0x7f0000000200)='./bus/file0\x00', 0x0)
renameat2(r3, &(0x7f0000000240)='./bus/file0\x00', r3, &(0x7f00000001c0)='./file0\x00', 0x0)

473.3503ms ago: executing program 3 (id=3773):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001640)={0x1c, r2, 0x1}, 0x1c}}, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), 0x0}, 0x20)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, 0x0, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv2(r4, 0x0, 0x0, 0x29, 0x0, 0x11)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)

464.378181ms ago: executing program 0 (id=3774):
socket$nl_generic(0x10, 0x3, 0x10)
socket$kcm(0x10, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffd51, &(0x7f0000000000)='cgroup\x00'}, 0x3)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket$packet(0x11, 0x2, 0x300)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x4000000000000b5}, 0x18)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_open_dev$evdev(&(0x7f0000000040), 0x3, 0x400)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
openat$selinux_validatetrans(0xffffff9c, &(0x7f00000001c0), 0x1, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r1, @ANYRESHEX=r1], 0x20)

169.304176ms ago: executing program 0 (id=3775):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmsg$inet(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0x2}], 0x1, &(0x7f0000000080)}, 0x0)
listen(r0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$ext4(&(0x7f0000000880)='ext4\x00', &(0x7f0000000040)='.\x02\x00', 0x21000e, &(0x7f0000001340)={[{@resuid}]}, 0x1, 0x538, &(0x7f0000001900)="$eJzs3c1vI2cZAPBnnHhJuilJgUOp1LKiRbsVrL1paBtxaLsCcasAlfsSJd4oihOvYqddW1WVigNHJISgEidOXJD4A5BQ/wRUqRK9I0CgCrZw4AAMmvF4P9xxNtHacZT8ftLY77zz8TyvHdvvfGQmgHPrUkS8FhEzEfF8RCwW9ZViiIP+kM33yZ2317Mhm/LG35NIirqIvHjXxWKxuf5TqXa3t73WbDb2ivF6Z+dWvd3tXd3aWdtsbDZ2V1aWX1p9efXF1WtjaWfWrle+9Zef/fhX337ld1976483/nblnSzpbxbTi3aM3Uf5YzV7Le6ajYi9SQSbgpmiPdVpJwIAwJFkffzPRcSX8/7/YszkvbnccJdu7uSzAwAAAMYhfXUh/pNEpOlg8z4FAAAAzphXI2IhkkqtOBdgISqVWq1/Du8X4rFKs9XufPVma393I5sWsRTVys2tZuNacU7tUlSTbHw5L98bf2FofCUinoiIny7O5+O19VZzY8r7PgAAAOC8uDi0/f+vg/72PwAAAHDGLE07AQAAAGDiRm3/JyecBwAAADA5jv8DAADAmfbd11/PhnRw/+uNN7v72603r2402tu1nf312npr71Zts9XazK/Zt/Ow9TVbrVtfj9392/VOo92pt7u9Gzut/d3OjS33DwQAAIBpeeJL73+URMTBN+bzIXMhe5gZsYBzBeDMqBxn5j9PLg/g5I36mQfOvtlpJwBMz8HxF7k0iTyAqXngUh8lnYL7T955YJ/B7yeXEwAAMF6Xv1h+/D/bBKhOOzlgoo51/B84Uxz/h/PrmMf/P5hUHsDJq+oBwLn3sFt9lF68Y37E8f8LZTOn6aHrAgAAJm4hH5JKrTgWuBCVSq0W8Xj+r/7V5OZWs3EtIj4bEX9YrH4mG1/Ol0zcHhAAAAAAAAAAAAAAAAAAAAAAAAAAjihNk0gBAACAMy2i8tekuP/X5cXnFob3D1xI/r0YxS293vrFGz+/vdbp7C1n9f+4W995r6h/YRp7MAAAAIBhg+30wXY8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIzTJ3feXh8MJxn34+vxnVgqiz8bc/nzXFQj4rF/JjF733JJRMyMIf7BuxHxZFn8JEsrlooshuNXImJ+/PGr96bcjf90mqal8S+OIT6cZ+9fj4jXyj7/lbiUP5d//meL4VF9fD3/kJfGH3z/zYz4/nv8iDGe+vA39ZHx3414arb8+28QPxkR/9myFZa8KD/4fq/3qcr+yiP9ZcTl0t+f5IFY9c7OrXq727u6tbO22dhs7K6sLL+0+vLqi6vX6je3mo3isbSNP3n6t/8bqvpv2pe3Pz4d/0fRf1sObf9zWeG+b+xIh8MUwT68fefz/WJ1aBV5/CvPlr//Tx4SP/ub+ErxO5BNvzwoH/TL93vm1x88U5pYEX9jxOv/sPf/yqiVDnn+ez/80xFnBQBOQLvb215rNht7RyrMH2fmbm87TSMGNe+laXrMxRVOsDDo3U0sxNxpaekpKGR961OQxqjCOPZsAQAAp829Tv+RF3lnogkBAAAAAAAAAAAAAAAAAADAOdTuRuXw64GlacSjXU5sOObBdJoKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCo/wcAAP//wojTbg==")
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, 0x0, 0x4000040)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)

168.313056ms ago: executing program 4 (id=3776):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0})
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)

142.752728ms ago: executing program 3 (id=3777):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r1 = socket$kcm(0x22, 0x2, 0x21)
recvmsg(r1, 0x0, 0x40)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
close(r2)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000608000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r5}, &(0x7f0000000800), &(0x7f0000000840)=r6}, 0x20)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x1, 0x7ffc1ffb}]})
rseq(0x0, 0x0, 0x1, 0x0)
pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x0)
r8 = dup(r7)
syz_clone3(&(0x7f0000000440)={0x51021080, &(0x7f0000000080), &(0x7f0000000180), &(0x7f00000001c0), {0x2c}, &(0x7f0000000300)=""/155, 0x9b, &(0x7f00000003c0)=""/68, &(0x7f0000000200)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x6, {r4}}, 0x58)
socket$nl_generic(0x10, 0x3, 0x10)
fcntl$lock(r8, 0x5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfbffffffffffffff})

84.130033ms ago: executing program 2 (id=3778):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
openat$incfs(0xffffffffffffff9c, &(0x7f0000000180)='.log\x00', 0x80, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = syz_open_procfs(0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r1, <r4=>0xffffffffffffffff}, &(0x7f0000000640), &(0x7f0000000680)=r1}, 0x20)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000840)={r4, 0x1d, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r5=>0x0}}, 0x5)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000005c0)={0x8, <r6=>0x0}, 0x8)
pipe2(&(0x7f00000000c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000200"/28], 0x48)
r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00')
read$qrtrtun(r8, &(0x7f00000000c0)=""/97, 0x61)
vmsplice(r7, &(0x7f0000000080)=[{&(0x7f0000000100)="eb", 0x1}, {&(0x7f0000000540)="1d", 0x1}], 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x1a, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9760, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@jmp={0x5, 0x1, 0x0, 0x9, 0x0, 0x20, 0xfffffffffffffff0}, @ldst={0x3, 0x1, 0x3, 0x2, 0x1, 0xffffffffffffffc0, 0xffffffffffffffff}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x6f, &(0x7f00000004c0)=""/111, 0x41100, 0x0, '\x00', r5, @fallback=0x1d, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x5, 0x5, 0xb57, 0x7fffffff}, 0x10, r6, r1, 0x0, &(0x7f0000000600)=[r2, r1, r1, r7, r1, r1, r2, r3], &(0x7f0000000640), 0x10, 0x2, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
r9 = socket(0x1d, 0x2, 0x6)
r10 = syz_io_uring_setup(0x67fa, &(0x7f00000006c0)={0x0, 0x0, 0x10100, 0x2}, &(0x7f0000000200)=<r11=>0x0, &(0x7f0000000580)=<r12=>0x0)
syz_io_uring_submit(r11, r12, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r9, 0x0, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x28}})
io_uring_enter(r10, 0x184c, 0x0, 0x0, 0x0, 0x0)
r13 = socket$inet_udp(0x2, 0x2, 0x0)
r14 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000280)={'vlan0\x00', <r15=>0x0})
bind$packet(r14, &(0x7f0000000040)={0x11, 0x0, r15, 0x1, 0x4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}, 0x14)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r14, 0x8982, &(0x7f0000000040)={0x1, 'vlan0\x00', {}, 0x6})

58.456186ms ago: executing program 1 (id=3779):
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0xfe, 0x246, &(0x7f0000000ac0)="$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")
r0 = creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
link(&(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='ext4_es_lookup_extent_enter\x00', r1}, 0x10)
rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000000380)=""/159, 0x9f)
lseek(r2, 0x7ff, 0x1)
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00')
getdents64(r3, &(0x7f0000000440)=""/68, 0x44)
pwritev2(r0, &(0x7f00000010c0)=[{&(0x7f0000000840)="2a550cde51822228c5c7e7312fd163004261fb9f816e2e5285a8462208495139a395f5dc4833b040faa683c960cca733615240be2ea250f49248692c33076b84158b3aa5d4f31b9397ee128bb5cbb28196972ad1261b317cc0ce3ba316158cac7048bded3191", 0x66}, {&(0x7f00000008c0)="3e8411c7cbdffc25253ecc85f5f995393243676607406cbbccae9f5c7926ef37d622f53148d24702c383a61802e456b6619db318ea23cbce1eda744b4fea7c178fe6c73a62994dac7e8700604c03ed3f51263c395c53901cedbefc0a2323141eee5ed8eceb2c078546d1258a0bc88f7674ad4fc0cfbfbbc1376d455a8465dc286131cce4eba574c66fe63df1c5014b5ff95ed49e8f4527a26ad70dcc312c", 0x9e}, {&(0x7f0000000980)="d89d389de11d936f5b468fa565aba2b2ad00ae153b4da3598bcaeb6da69fe6a32bad36bbf6681439a02971128afc0bcc69628a08c0c632c688190275dfd8360972f31e12a300bfa308847f08973c4c4ba6f496566bc2b4198a4f52763daef291add52d1268d9f4e94a2fb836e10b2c5d4dbaeb0d748f243b53a5d023980d49282f2a71b055031bcba75f2f76980d8215cb728bba392957da79ce4aae269bea71701f659b5678bb5d86e72c632606c80a72ddfbb43a7f069bc79b22c2", 0xbc}, {&(0x7f0000000a40)="56c1b50fad018b4963a1e56d4504672cfc99c893508e4c55cc1ceddc752ee8f5925c0b5e6fbca6b596322be5d996df88bd83ea79fd7e17bc5ef8b8ff4e0c6be9f2dd03484e775d3a05eafb500209cdcd5d3c2d", 0x53}, {&(0x7f0000000d40)="72234f8b4886dfd7e55b5afd0ae0f55e02c216d48335532419c9b4d232b21a42afa522c7131fbc9f34815af95a331f0aa2dfaf308c15dc7b9c879cc64bdb8c79cd55cb825a07a2305d03337dd5c5fa57ae23b0b80bbd81c8c25739b4b61e7e4b0b6ee9c692626977dbb1af26ae869341d5e264fa814820172a55b2556331dd356a8e56717c524a0930fb", 0x8a}, {&(0x7f0000001040)="3d3e3ccfc182aba0e97c2be76a26158635f147c6c0794ab879ac50c5454d1b3aa9dbb160a544684c911b58c66597bd28bc4f19bd58f802fd5f93353c3d4ef2cb1165989010d87334f0c0cce54a934575f6823b8bc4900b7e7acf56ad6f6f85bd4c124b2a95435e5804033c4bbd0f2f16609cdf934bf902f51e731628bb2c3528", 0x80}, {&(0x7f00000004c0)="0fb9f57515534f6e4d5a09aabedaa0b01f3a2f5c2e089b2f4d7bfa80b61e578e081e8b5fb8d92008ff2de02f97", 0x2d}], 0x7, 0xfffffff4, 0x4, 0x10)
getdents64(r2, 0x0, 0x10)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x168, 0x9, 0x0, 0xb, 0x250, 0x250, 0x250, 0x250, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x1e, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0)

56.342715ms ago: executing program 4 (id=3780):
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000000c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x87, &(0x7f00000001c0)=[{}], 0x8, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x57, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000004000001d8500000007000000440000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
fstatfs(0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000020000000000000002000004000000000000000002000000000000000000000002000000000000000100000000000001"], 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, r5, 0x1, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48)

29.793447ms ago: executing program 1 (id=3781):
syz_io_uring_setup(0x118, 0x0, &(0x7f0000000240)=<r0=>0x0, &(0x7f0000000040)=<r1=>0x0)
r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341)
ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000a80)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10)
bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
r6 = socket$pptp(0x18, 0x1, 0x2)
syz_io_uring_submit(r0, r1, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x20, 0x0, r6, 0x80, &(0x7f0000000280)=@qipcrtr={0x2a, 0x2}})
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8ff0000000000ff000044850000000e000000de000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x24d8, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r7}, 0x18)
r8 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r8, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000040)})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {}]}, [{}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x448eade7}, {0x0, 0x0, 0x80000000}, {}, {0x3}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0xfffffffc}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {0xd5, 0xbd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x10}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {}, {}, {}, {0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x2}, {}, {}, {}, {}, {0x40000000}, {}, {}, {0xffffffff}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0)

28.840338ms ago: executing program 2 (id=3782):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x0)
sendfile(r2, r2, 0x0, 0x80000000)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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")
quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, 0x42, 0x0, 0xfffffffffffffffd, 0x3f})
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080))
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = syz_pidfd_open(r3, 0x0)
waitid$P_PIDFD(0x3, r4, 0x0, 0x4, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1)
creat(&(0x7f0000000080)='./bus\x00', 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000280)=0x8, 0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000040)=[{0x6, 0x8, 0x0, 0x8000}]}, 0x10)
shutdown(r6, 0x0)
dup2(r5, 0xffffffffffffffff)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)

1.08572ms ago: executing program 3 (id=3783):
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xe7a, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0x5, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$FITHAW(r3, 0xc0045878)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = socket$nl_audit(0x10, 0x3, 0x9)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0xa00, 0x0, 0x0, 0x0)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/kexec_crash_size', 0x202, 0x0)
sendfile(r6, r6, 0x0, 0x6)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x17, 0xf, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0xbb}}, {}, [], {{}, {0x5}}}, &(0x7f00000010c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
sendmsg$AUDIT_USER_AVC(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x14, 0x453, 0x800, 0x70bd25, 0x25dfdbff, 'P'}, 0x14}, 0x1, 0x0, 0x0, 0x4004050}, 0x0)
mkdir(0x0, 0x0)
add_key(0x0, 0x0, 0x0, 0x0, 0x0)

0s ago: executing program 1 (id=3784):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
socket$inet6(0xa, 0x80002, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x200000100000011, 0x3, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket$inet6(0xa, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000004c0)={0x0, 0x465f}, 0x8)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r1, 0x4)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x31c9}, 0x8)
sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x1}], 0x1}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32=r1], 0xc)

kernel console output (not intermixed with test programs):

17272 (sector = 1)
[  235.591829][T13432] lo speed is unknown, defaulting to 1000
[  235.725642][T13443] loop4: detected capacity change from 0 to 512
[  235.749439][T13443] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  235.791293][T13443] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3209: bg 0: block 248: padding at end of block bitmap is not set
[  235.816694][T13443] EXT4-fs error (device loop4): ext4_acquire_dquot:6879: comm syz.4.3209: Failed to acquire dquot type 1
[  235.899213][T13443] EXT4-fs (loop4): 1 truncate cleaned up
[  235.955453][T13443] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  236.032586][T13443] ext4 filesystem being mounted at /173/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  236.809501][T13461] lo speed is unknown, defaulting to 1000
[  236.894450][T13461] lo speed is unknown, defaulting to 1000
[  237.064567][T10734] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  237.129259][T13466] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3213'.
[  237.316038][T13479] Cannot find del_set index 0 as target
[  237.352241][T13482] loop4: detected capacity change from 0 to 512
[  237.369367][T13482] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  237.382057][T13482] ext4 filesystem being mounted at /176/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  237.394856][   T29] kauditd_printk_skb: 148 callbacks suppressed
[  237.394877][   T29] audit: type=1326 audit(1728582876.496:10895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13481 comm="syz.4.3219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff86379dff9 code=0x7ffc0000
[  237.516977][   T29] audit: type=1326 audit(1728582876.586:10896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13481 comm="syz.4.3219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff86379dff9 code=0x7ffc0000
[  237.540619][   T29] audit: type=1326 audit(1728582876.586:10897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13481 comm="syz.4.3219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7ff86379dff9 code=0x7ffc0000
[  237.554096][T10734] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  237.564380][   T29] audit: type=1326 audit(1728582876.586:10898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13481 comm="syz.4.3219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff86379dff9 code=0x7ffc0000
[  237.596860][   T29] audit: type=1326 audit(1728582876.586:10899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13481 comm="syz.4.3219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff86379dff9 code=0x7ffc0000
[  237.620585][   T29] audit: type=1326 audit(1728582876.586:10900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13481 comm="syz.4.3219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7ff86379dff9 code=0x7ffc0000
[  237.644258][   T29] audit: type=1326 audit(1728582876.586:10901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13481 comm="syz.4.3219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff86379dff9 code=0x7ffc0000
[  237.667899][   T29] audit: type=1326 audit(1728582876.586:10902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13481 comm="syz.4.3219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff86379dff9 code=0x7ffc0000
[  237.691603][   T29] audit: type=1326 audit(1728582876.586:10903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13481 comm="syz.4.3219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff86379dff9 code=0x7ffc0000
[  237.716441][   T29] audit: type=1326 audit(1728582876.586:10904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13481 comm="syz.4.3219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff86379dff9 code=0x7ffc0000
[  237.767284][T13499] lo speed is unknown, defaulting to 1000
[  237.862512][T13506] smc: net device bond0 applied user defined pnetid SYZ0
[  237.870759][T13506] smc: net device bond0 erased user defined pnetid SYZ0
[  237.903374][T13510] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3225'.
[  238.553622][T13526] pim6reg: entered allmulticast mode
[  238.562983][T13525] pim6reg: left allmulticast mode
[  238.727442][T13533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  238.740481][T13533] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  239.532093][T13555] lo speed is unknown, defaulting to 1000
[  239.715208][T13564] vhci_hcd: invalid port number 61
[  239.720364][T13564] vhci_hcd: default hub control req: a30a v0000 i003d l0
[  239.979482][T13569] lo speed is unknown, defaulting to 1000
[  239.992633][T13571] syz.3.3251[13571] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  239.992724][T13571] syz.3.3251[13571] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  240.004414][T13571] syz.3.3251[13571] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  240.083018][T13578] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3252'.
[  240.346115][T13588] netlink: 'syz.1.3266': attribute type 27 has an invalid length.
[  240.354263][T13588] lo: left promiscuous mode
[  240.358966][T13588] tunl0: left promiscuous mode
[  240.363769][T13588] gre0: left promiscuous mode
[  240.368591][T13588] gretap0: left promiscuous mode
[  240.373669][T13588] erspan0: left promiscuous mode
[  240.378729][T13588] ip_vti0: left promiscuous mode
[  240.383828][T13588] ip6_vti0: left promiscuous mode
[  240.388967][T13588] sit0: left promiscuous mode
[  240.393758][T13588] ip6tnl0: left promiscuous mode
[  240.398840][T13588] ip6gre0: left promiscuous mode
[  240.403951][T13588] syz_tun: left promiscuous mode
[  240.408997][T13588] ip6gretap0: left promiscuous mode
[  240.414387][T13588] vcan0: left promiscuous mode
[  240.419288][T13588] dummy0: left promiscuous mode
[  240.424188][T13588] nlmon0: left promiscuous mode
[  240.429142][T13588] caif0: left promiscuous mode
[  240.434031][T13588] batadv0: left promiscuous mode
[  240.439109][T13588] veth0: left promiscuous mode
[  240.443967][T13588] veth1: left promiscuous mode
[  240.448886][T13588] wg0: left promiscuous mode
[  240.453533][T13588] wg1: left promiscuous mode
[  240.458312][T13588] wg2: left promiscuous mode
[  240.462946][T13588] veth0_to_bridge: left promiscuous mode
[  240.468781][T13588] bridge_slave_0: left promiscuous mode
[  240.474532][T13588] veth1_to_bridge: left promiscuous mode
[  240.480425][T13588] bridge_slave_1: left promiscuous mode
[  240.486116][T13588] veth0_to_bond: left promiscuous mode
[  240.491749][T13588] bond_slave_0: left promiscuous mode
[  240.497216][T13588] veth1_to_bond: left promiscuous mode
[  240.502799][T13588] bond_slave_1: left promiscuous mode
[  240.508270][T13588] veth0_to_team: left promiscuous mode
[  240.513791][T13588] team_slave_0: left promiscuous mode
[  240.519277][T13588] veth1_to_team: left promiscuous mode
[  240.524794][T13588] team_slave_1: left promiscuous mode
[  240.530330][T13588] veth0_to_batadv: left promiscuous mode
[  240.536076][T13588] batadv_slave_0: left promiscuous mode
[  240.541719][T13588] veth1_to_batadv: left promiscuous mode
[  240.547557][T13588] batadv_slave_1: left promiscuous mode
[  240.553192][T13588] xfrm0: left promiscuous mode
[  240.558040][T13588] veth0_to_hsr: left promiscuous mode
[  240.563608][T13588] hsr0: left promiscuous mode
[  240.568371][T13588] veth1_virt_wifi: left promiscuous mode
[  240.574130][T13588] veth0_virt_wifi: left promiscuous mode
[  240.579937][T13588] vlan1: left promiscuous mode
[  240.584910][T13588] macvlan0: left promiscuous mode
[  240.590090][T13588] macvlan1: left promiscuous mode
[  240.595151][T13588] ipvlan0: left promiscuous mode
[  240.600295][T13588] ipvlan1: left promiscuous mode
[  240.605553][T13588] macvtap0: left promiscuous mode
[  240.610669][T13588] macsec0: left promiscuous mode
[  240.615732][T13588] geneve0: left promiscuous mode
[  240.620823][T13588] geneve1: left promiscuous mode
[  240.625847][T13588] veth2: left promiscuous mode
[  240.630763][T13588] veth3: left promiscuous mode
[  240.635673][T13588] batadv0.8: left promiscuous mode
[  240.738525][T13590] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  240.875028][T13597] loop0: detected capacity change from 0 to 1024
[  240.900599][T13598] lo speed is unknown, defaulting to 1000
[  240.983728][T13598] lo speed is unknown, defaulting to 1000
[  241.101789][T13597] EXT4-fs: Ignoring removed bh option
[  241.188705][T13597] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  241.226455][T13597] loop0: detected capacity change from 1024 to 0
[  241.243891][T13597] lo speed is unknown, defaulting to 1000
[  241.292583][T13597] syz.0.3259: attempt to access beyond end of device
[  241.292583][T13597] loop0: rw=524288, sector=10, nr_sectors = 2 limit=0
[  241.306288][T13597] syz.0.3259: attempt to access beyond end of device
[  241.306288][T13597] loop0: rw=524288, sector=12, nr_sectors = 2 limit=0
[  241.320122][T13597] syz.0.3259: attempt to access beyond end of device
[  241.320122][T13597] loop0: rw=524288, sector=14, nr_sectors = 2 limit=0
[  241.333623][T13597] syz.0.3259: attempt to access beyond end of device
[  241.333623][T13597] loop0: rw=524288, sector=18, nr_sectors = 2 limit=0
[  241.346964][T13597] syz.0.3259: attempt to access beyond end of device
[  241.346964][T13597] loop0: rw=524288, sector=20, nr_sectors = 2 limit=0
[  241.360304][T13597] syz.0.3259: attempt to access beyond end of device
[  241.360304][T13597] loop0: rw=524288, sector=22, nr_sectors = 2 limit=0
[  241.373727][T13597] syz.0.3259: attempt to access beyond end of device
[  241.373727][T13597] loop0: rw=524288, sector=24, nr_sectors = 2 limit=0
[  241.387211][T13597] syz.0.3259: attempt to access beyond end of device
[  241.387211][T13597] loop0: rw=524288, sector=26, nr_sectors = 2 limit=0
[  241.400565][T13597] syz.0.3259: attempt to access beyond end of device
[  241.400565][T13597] loop0: rw=12288, sector=16, nr_sectors = 2 limit=0
[  241.413801][T13597] EXT4-fs error (device loop0): ext4_get_inode_loc:4541: inode #15: block 8: comm syz.0.3259: unable to read itable block
[  241.413827][T13608] syz.0.3259: attempt to access beyond end of device
[  241.413827][T13608] loop0: rw=524288, sector=10, nr_sectors = 2 limit=0
[  241.426497][T13597] Buffer I/O error on dev loop0, logical block 1, lost sync page write
[  241.426573][T13597] EXT4-fs (loop0): I/O error while writing superblock
[  241.442020][T13608] EXT4-fs error (device loop0): ext4_get_inode_loc:4541: inode #15: block 8: comm syz.0.3259: unable to read itable block
[  241.467667][T13608] Buffer I/O error on dev loop0, logical block 1, lost sync page write
[  241.475984][T13608] EXT4-fs (loop0): I/O error while writing superblock
[  241.482809][T13608] EXT4-fs error (device loop0): ext4_get_inode_loc:4541: inode #15: block 8: comm syz.0.3259: unable to read itable block
[  241.495694][T13608] Buffer I/O error on dev loop0, logical block 1, lost sync page write
[  241.503977][T13608] EXT4-fs (loop0): I/O error while writing superblock
[  241.510846][T13608] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5780: IO failure
[  241.519886][T13608] Buffer I/O error on dev loop0, logical block 1, lost sync page write
[  241.528217][T13608] EXT4-fs (loop0): I/O error while writing superblock
[  241.535024][T13608] EXT4-fs error (device loop0): ext4_dirty_inode:5984: inode #15: comm syz.0.3259: mark_inode_dirty error
[  241.549432][T13608] Buffer I/O error on dev loop0, logical block 1, lost sync page write
[  241.557861][T13608] EXT4-fs (loop0): I/O error while writing superblock
[  241.564806][T13608] EXT4-fs error (device loop0): ext4_get_inode_loc:4541: inode #15: block 8: comm syz.0.3259: unable to read itable block
[  241.577951][T13608] Buffer I/O error on dev loop0, logical block 1, lost sync page write
[  241.586491][T13608] EXT4-fs (loop0): I/O error while writing superblock
[  241.591893][T13610] loop4: detected capacity change from 0 to 1024
[  241.593359][T13608] EXT4-fs error (device loop0): ext4_get_max_inline_size:116: inode #15: comm syz.0.3259: can't get inode location 15
[  241.602498][T13610] EXT4-fs: Ignoring removed orlov option
[  241.613937][T13608] Buffer I/O error on dev loop0, logical block 1, lost sync page write
[  241.618060][T13610] EXT4-fs: Ignoring removed nomblk_io_submit option
[  241.634303][T13612] Cannot find add_set index 0 as target
[  241.636056][T13608] EXT4-fs (loop0): I/O error while writing superblock
[  241.646934][T13608] EXT4-fs error (device loop0): ext4_get_inode_loc:4541: inode #15: block 8: comm syz.0.3259: unable to read itable block
[  241.652195][T13610] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840e018, mo2=0002]
[  241.659814][T13608] Buffer I/O error on dev loop0, logical block 1, lost sync page write
[  241.659832][T13608] EXT4-fs (loop0): I/O error while writing superblock
[  241.659931][T13597] EXT4-fs error (device loop0): ext4_get_inode_loc:4541: inode #15: block 8: comm syz.0.3259: unable to read itable block
[  241.667985][T13610] System zones: 0-1, 3-12
[  241.700607][T13610] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  241.713106][T13597] Buffer I/O error on dev loop0, logical block 1, lost sync page write
[  241.721450][T13597] EXT4-fs (loop0): I/O error while writing superblock
[  241.728290][T13597] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5780: IO failure
[  241.737030][T13597] Buffer I/O error on dev loop0, logical block 1, lost sync page write
[  241.769360][T13610] VFS: Lookup of 'file0' in ext4 loop4 would have caused loop
[  241.855047][T13623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  241.864678][T11467] hid-generic FFFC:0000:FFFFFFFF.0012: unknown main item tag 0x0
[  241.872489][T11467] hid-generic FFFC:0000:FFFFFFFF.0012: unknown main item tag 0x0
[  241.880312][T11467] hid-generic FFFC:0000:FFFFFFFF.0012: unknown main item tag 0x0
[  241.888298][T11467] hid-generic FFFC:0000:FFFFFFFF.0012: unknown main item tag 0x0
[  241.896144][T11467] hid-generic FFFC:0000:FFFFFFFF.0012: unknown main item tag 0x0
[  241.904008][T11467] hid-generic FFFC:0000:FFFFFFFF.0012: unknown main item tag 0x0
[  241.911807][T11467] hid-generic FFFC:0000:FFFFFFFF.0012: unknown main item tag 0x0
[  241.919650][T11467] hid-generic FFFC:0000:FFFFFFFF.0012: unknown main item tag 0x0
[  241.927688][T11467] hid-generic FFFC:0000:FFFFFFFF.0012: unknown main item tag 0x0
[  241.935426][T11467] hid-generic FFFC:0000:FFFFFFFF.0012: unknown main item tag 0x0
[  241.943290][T11467] hid-generic FFFC:0000:FFFFFFFF.0012: unknown main item tag 0x0
[  241.951229][T11467] hid-generic FFFC:0000:FFFFFFFF.0012: unknown main item tag 0x0
[  241.959382][T11467] hid-generic FFFC:0000:FFFFFFFF.0012: unknown main item tag 0x0
[  241.967190][T10734] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  241.976177][T11467] hid-generic FFFC:0000:FFFFFFFF.0012: unknown main item tag 0x0
[  241.983998][T11467] hid-generic FFFC:0000:FFFFFFFF.0012: unknown main item tag 0x0
[  241.991792][T11467] hid-generic FFFC:0000:FFFFFFFF.0012: unknown main item tag 0x0
[  241.999706][T11467] hid-generic FFFC:0000:FFFFFFFF.0012: unknown main item tag 0x0
[  242.007510][T11467] hid-generic FFFC:0000:FFFFFFFF.0012: unknown main item tag 0x0
[  242.015313][T11467] hid-generic FFFC:0000:FFFFFFFF.0012: unknown main item tag 0x0
[  242.023248][T13623] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  242.023866][T11467] hid-generic FFFC:0000:FFFFFFFF.0012: hidraw0: <UNKNOWN> HID v0.01 Device [syz0] on syz0
[  242.154685][T13635] netlink: 'syz.4.3271': attribute type 27 has an invalid length.
[  242.162548][T13635] lo: left promiscuous mode
[  242.167149][T13635] tunl0: left promiscuous mode
[  242.172009][T13635] gre0: left promiscuous mode
[  242.176770][T13635] gretap0: left promiscuous mode
[  242.181937][T13635] erspan0: left promiscuous mode
[  242.187027][T13635] ip_vti0: left promiscuous mode
[  242.192249][T13635] ip6_vti0: left promiscuous mode
[  242.197580][T13635] sit0: left promiscuous mode
[  242.202413][T13635] ip6tnl0: left promiscuous mode
[  242.207480][T13635] ip6gre0: left promiscuous mode
[  242.212555][T13635] syz_tun: left promiscuous mode
[  242.217581][T13635] ip6gretap0: left promiscuous mode
[  242.222856][T13635] vcan0: left promiscuous mode
[  242.227846][T13635] team0: left promiscuous mode
[  242.232830][T13635] dummy0: left promiscuous mode
[  242.237760][T13635] nlmon0: left promiscuous mode
[  242.242661][T13635] caif0: left promiscuous mode
[  242.243522][T13639] vhci_hcd: invalid port number 61
[  242.247502][T13635] batadv0: left promiscuous mode
[  242.252589][T13639] vhci_hcd: default hub control req: a30a v0000 i003d l0
[  242.262865][T13638] loop4: detected capacity change from 0 to 128
[  242.264705][T13635] veth0: left promiscuous mode
[  242.275834][T13635] veth1: left promiscuous mode
[  242.280754][T13635] wg0: left promiscuous mode
[  242.285401][T13635] wg1: left promiscuous mode
[  242.290065][T13635] wg2: left promiscuous mode
[  242.294707][T13635] veth0_to_bridge: left promiscuous mode
[  242.300536][T13635] bridge_slave_0: left promiscuous mode
[  242.306130][T13635] veth1_to_bridge: left promiscuous mode
[  242.311899][T13635] bridge_slave_1: left promiscuous mode
[  242.317617][T13635] veth0_to_bond: left promiscuous mode
[  242.323241][T13635] bond_slave_0: left promiscuous mode
[  242.328801][T13635] veth1_to_bond: left promiscuous mode
[  242.334318][T13635] bond_slave_1: left promiscuous mode
[  242.339786][T13635] veth0_to_team: left promiscuous mode
[  242.345333][T13635] team_slave_0: left promiscuous mode
[  242.350818][T13635] veth1_to_team: left promiscuous mode
[  242.356338][T13635] team_slave_1: left promiscuous mode
[  242.361829][T13635] veth0_to_batadv: left promiscuous mode
[  242.367605][T13635] batadv_slave_0: left promiscuous mode
[  242.373331][T13635] veth1_to_batadv: left promiscuous mode
[  242.379057][T13635] batadv_slave_1: left promiscuous mode
[  242.384656][T13635] xfrm0: left promiscuous mode
[  242.389606][T13635] veth0_to_hsr: left promiscuous mode
[  242.395135][T13635] veth1_to_hsr: left promiscuous mode
[  242.400831][T13635] hsr0: left promiscuous mode
[  242.405589][T13635] veth1_virt_wifi: left promiscuous mode
[  242.411298][T13635] veth0_virt_wifi: left promiscuous mode
[  242.417112][T13635] vlan1: left promiscuous mode
[  242.422025][T13635] macvlan0: left promiscuous mode
[  242.427170][T13635] macvlan1: left promiscuous mode
[  242.432337][T13635] ipvlan0: left promiscuous mode
[  242.437401][T13635] ipvlan1: left promiscuous mode
[  242.442528][T13635] macvtap0: left promiscuous mode
[  242.447680][T13635] macsec0: left promiscuous mode
[  242.452669][T13635] geneve0: left promiscuous mode
[  242.457852][T13635] geneve1: left promiscuous mode
[  242.462843][T13635] netdevsim netdevsim4 netdevsim0: left promiscuous mode
[  242.470148][T13635] netdevsim netdevsim4 netdevsim1: left promiscuous mode
[  242.477379][T13635] netdevsim netdevsim4 netdevsim2: left promiscuous mode
[  242.484488][T13635] netdevsim netdevsim4 netdevsim3: left promiscuous mode
[  242.491765][T13635] able_lookup: left promiscuous mode
[  242.497190][T13635] batadv0.8: left promiscuous mode
[  242.596477][T13640] 8021q: adding VLAN 0 to HW filter on device team0
[  242.607833][T13640] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  242.674039][   T29] kauditd_printk_skb: 104 callbacks suppressed
[  242.674054][   T29] audit: type=1400 audit(1728582881.766:11009): avc:  denied  { mounton } for  pid=13647 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[  242.774408][T13654] lo speed is unknown, defaulting to 1000
[  242.867957][T13654] lo speed is unknown, defaulting to 1000
[  242.975363][   T29] audit: type=1400 audit(1728582882.066:11010): avc:  denied  { connect } for  pid=13645 comm="syz.1.3275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  242.995936][   T29] audit: type=1400 audit(1728582882.096:11011): avc:  denied  { write } for  pid=13645 comm="syz.1.3275" path="socket:[43587]" dev="sockfs" ino=43587 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  243.060015][   T29] audit: type=1400 audit(1728582882.146:11012): avc:  denied  { nlmsg_write } for  pid=13645 comm="syz.1.3275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[  243.101409][   T29] audit: type=1400 audit(1728582882.196:11013): avc:  denied  { write } for  pid=13660 comm="syz.4.3276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  243.139403][T13647] lo speed is unknown, defaulting to 1000
[  243.191994][T13664] lo speed is unknown, defaulting to 1000
[  243.242892][   T29] audit: type=1400 audit(1728582882.336:11014): avc:  denied  { create } for  pid=13668 comm="syz.4.3278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  243.262619][   T29] audit: type=1400 audit(1728582882.336:11015): avc:  denied  { write } for  pid=13668 comm="syz.4.3278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  243.301487][T13647] chnl_net:caif_netlink_parms(): no params data found
[  243.334490][   T29] audit: type=1400 audit(1728582882.426:11016): avc:  denied  { bind } for  pid=13677 comm="syz.2.3281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  243.362605][   T29] audit: type=1400 audit(1728582882.456:11017): avc:  denied  { mount } for  pid=13681 comm="syz.2.3282" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  243.432149][T13647] bridge0: port 1(bridge_slave_0) entered blocking state
[  243.439377][T13647] bridge0: port 1(bridge_slave_0) entered disabled state
[  243.447263][T13647] bridge_slave_0: entered allmulticast mode
[  243.453850][T13647] bridge_slave_0: entered promiscuous mode
[  243.460701][T13647] bridge0: port 2(bridge_slave_1) entered blocking state
[  243.467811][T13647] bridge0: port 2(bridge_slave_1) entered disabled state
[  243.475077][T13647] bridge_slave_1: entered allmulticast mode
[  243.481986][T13647] bridge_slave_1: entered promiscuous mode
[  243.502375][T13647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  243.512815][T13647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  243.532378][T13647] team0: Port device team_slave_0 added
[  243.539127][T13647] team0: Port device team_slave_1 added
[  243.555302][T13647] batman_adv: batadv0: Adding interface: batadv_slave_0
[  243.562331][T13647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  243.588286][T13647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  243.599736][T13647] batman_adv: batadv0: Adding interface: batadv_slave_1
[  243.606945][T13647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  243.632990][T13647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  243.659681][T13647] hsr_slave_0: entered promiscuous mode
[  243.665874][T13647] hsr_slave_1: entered promiscuous mode
[  243.671791][T13647] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  243.679365][T13647] Cannot create hsr debugfs directory
[  243.732805][T13647] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  243.769525][T13647] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  243.829491][T13647] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  243.889914][T13647] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  243.939643][T13647] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  243.948163][T13647] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  243.956812][T13647] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  243.965428][T13647] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  243.980439][T13647] bridge0: port 2(bridge_slave_1) entered blocking state
[  243.987624][T13647] bridge0: port 2(bridge_slave_1) entered forwarding state
[  243.994916][T13647] bridge0: port 1(bridge_slave_0) entered blocking state
[  244.002020][T13647] bridge0: port 1(bridge_slave_0) entered forwarding state
[  244.033188][T13647] 8021q: adding VLAN 0 to HW filter on device bond0
[  244.044859][ T4943] bridge0: port 1(bridge_slave_0) entered disabled state
[  244.052926][ T4943] bridge0: port 2(bridge_slave_1) entered disabled state
[  244.066696][T13647] 8021q: adding VLAN 0 to HW filter on device team0
[  244.077241][   T55] bridge0: port 1(bridge_slave_0) entered blocking state
[  244.084395][   T55] bridge0: port 1(bridge_slave_0) entered forwarding state
[  244.094956][ T4943] bridge0: port 2(bridge_slave_1) entered blocking state
[  244.102013][ T4943] bridge0: port 2(bridge_slave_1) entered forwarding state
[  244.109866][   T29] audit: type=1400 audit(1728582883.206:11018): avc:  denied  { egress } for  pid=3485 comm="kworker/0:6" daddr=ff02::16 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1
[  244.123210][T13647] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  244.143079][T13647] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  244.199867][T13647] 8021q: adding VLAN 0 to HW filter on device batadv0
[  244.296780][T13700] vhci_hcd: invalid port number 61
[  244.301959][T13700] vhci_hcd: default hub control req: a30a v0000 i003d l0
[  244.339155][T13695] hsr_slave_0: left promiscuous mode
[  244.355367][T13695] hsr_slave_1: left promiscuous mode
[  244.401601][T13697] lo speed is unknown, defaulting to 1000
[  244.402716][T13647] veth0_vlan: entered promiscuous mode
[  244.428760][T13647] veth1_vlan: entered promiscuous mode
[  244.528601][T13647] veth0_macvtap: entered promiscuous mode
[  244.589415][T13711] netlink: 'syz.3.3286': attribute type 27 has an invalid length.
[  244.629301][T13711] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 256 - 0
[  244.638275][T13711] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 256 - 0
[  244.647245][T13711] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 256 - 0
[  244.656240][T13711] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 256 - 0
[  244.665512][T13711] vxlan0: left promiscuous mode
[  244.674442][T13647] veth1_macvtap: entered promiscuous mode
[  244.687859][T13647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  244.698321][T13647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  244.708152][T13647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  244.718676][T13647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  244.728622][T13647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  244.739087][T13647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  244.749013][T13647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  244.759708][T13647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  244.770618][T13647] batman_adv: batadv0: Interface activated: batadv_slave_0
[  244.779158][T13647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  244.789804][T13647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  244.799712][T13647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  244.810257][T13647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  244.820185][T13647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  244.830671][T13647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  244.840663][T13647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  244.851091][T13647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  244.860970][T13647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  244.871508][T13647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  244.881416][T13647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  244.891917][T13647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  244.902628][T13647] batman_adv: batadv0: Interface activated: batadv_slave_1
[  244.928206][T13711] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  244.972993][T13647] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  244.981769][T13647] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  244.990535][T13647] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  244.999255][T13647] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  245.079235][T13719] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3274'.
[  245.145996][T13719] lo speed is unknown, defaulting to 1000
[  245.200266][T13726] loop0: detected capacity change from 0 to 512
[  245.207391][T13726] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  245.233251][T13726] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  245.253807][T13726] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  245.356552][T13647] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  245.375755][T13736] netlink: 8280 bytes leftover after parsing attributes in process `syz.2.3294'.
[  245.422738][T13736] netlink: 8280 bytes leftover after parsing attributes in process `syz.2.3294'.
[  245.470320][T13751] loop0: detected capacity change from 0 to 512
[  245.477435][T13751] journal_path: Lookup failure for './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'
[  245.491240][T13753] can0: slcan on pts0.
[  245.501259][T13751] EXT4-fs: error: could not find journal device path
[  245.514168][T13754] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  245.576767][T13753] can0 (unregistered): slcan off pts0.
[  245.607297][T13760] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3303'.
[  245.617164][T13760] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  245.634628][T13760] loop0: detected capacity change from 0 to 1024
[  245.641638][T13760] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  245.651512][T13760] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869)
[  245.661365][T13760] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  245.671898][T13760] EXT4-fs error (device loop0): ext4_get_journal_inode:5762: inode #5: comm syz.0.3303: unexpected bad inode w/o EXT4_IGET_BAD
[  245.687917][T13760] EXT4-fs (loop0): no journal found
[  245.693220][T13760] EXT4-fs (loop0): can't get journal size
[  245.701123][T13760] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  245.755850][T13647] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  245.778427][T13763] hub 9-0:1.0: USB hub found
[  245.783193][T13763] hub 9-0:1.0: 8 ports detected
[  245.954061][T13776] netlink: 'syz.0.3309': attribute type 27 has an invalid length.
[  246.056583][T13784] loop0: detected capacity change from 0 to 128
[  246.074756][T13776] bridge0: port 2(bridge_slave_1) entered disabled state
[  246.081959][T13776] bridge0: port 1(bridge_slave_0) entered disabled state
[  246.147957][T13776] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  246.159446][T13776] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  246.207017][T13776] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  246.215972][T13776] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  246.225060][T13776] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  246.233985][T13776] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  246.266248][T13794] loop4: detected capacity change from 0 to 512
[  246.363298][T13789] 8021q: adding VLAN 0 to HW filter on device bond0
[  246.382910][T13789] 8021q: adding VLAN 0 to HW filter on device team0
[  246.419413][T13789] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  246.487130][T13809] loop4: detected capacity change from 0 to 1024
[  246.494463][T13791] lo speed is unknown, defaulting to 1000
[  246.500864][T13809] EXT4-fs: Ignoring removed orlov option
[  246.506625][T13809] EXT4-fs: Ignoring removed nomblk_io_submit option
[  246.529766][T13809] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  246.668766][T12130] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  246.735804][T13818] block device autoloading is deprecated and will be removed.
[  246.926083][T13828] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3326'.
[  247.074340][T13823] lo speed is unknown, defaulting to 1000
[  247.084499][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  247.097879][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  247.108704][T13840] loop0: detected capacity change from 0 to 128
[  247.122934][T13840] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  247.138436][T13840] ext4 filesystem being mounted at /12/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  247.204901][T13840] block device autoloading is deprecated and will be removed.
[  247.215036][   T11] team0 (unregistering): Port device team_slave_1 removed
[  247.228995][   T11] team0 (unregistering): Port device team_slave_0 removed
[  247.495723][T13859] loop3: detected capacity change from 0 to 512
[  247.503258][T13859] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  247.617458][T13859] EXT4-fs warning (device loop3): ext4_enable_quotas:7097: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  247.632191][T13859] EXT4-fs (loop3): mount failed
[  247.755559][T13647] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  247.784760][T13823] chnl_net:caif_netlink_parms(): no params data found
[  247.796107][   T29] kauditd_printk_skb: 206 callbacks suppressed
[  247.796122][   T29] audit: type=1326 audit(1728582886.886:11225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13866 comm="syz.0.3334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd864fddff9 code=0x7ffc0000
[  247.829383][   T29] audit: type=1326 audit(1728582886.886:11226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13866 comm="syz.0.3334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd864fddff9 code=0x7ffc0000
[  247.853022][   T29] audit: type=1326 audit(1728582886.886:11227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13866 comm="syz.0.3334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7fd864fddff9 code=0x7ffc0000
[  247.876853][   T29] audit: type=1326 audit(1728582886.886:11228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13866 comm="syz.0.3334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd864fddff9 code=0x7ffc0000
[  247.900509][   T29] audit: type=1326 audit(1728582886.886:11229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13866 comm="syz.0.3334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7fd864fddff9 code=0x7ffc0000
[  247.924073][   T29] audit: type=1326 audit(1728582886.886:11230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13866 comm="syz.0.3334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd864fddff9 code=0x7ffc0000
[  247.947690][   T29] audit: type=1326 audit(1728582886.886:11231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13866 comm="syz.0.3334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd864fddff9 code=0x7ffc0000
[  247.971396][   T29] audit: type=1326 audit(1728582886.886:11232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13866 comm="syz.0.3334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd864fddff9 code=0x7ffc0000
[  247.995084][   T29] audit: type=1326 audit(1728582886.886:11233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13866 comm="syz.0.3334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd864fddff9 code=0x7ffc0000
[  248.018856][   T29] audit: type=1326 audit(1728582886.886:11234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13866 comm="syz.0.3334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fd864fddff9 code=0x7ffc0000
[  248.118162][T13823] bridge0: port 1(bridge_slave_0) entered blocking state
[  248.125255][T13823] bridge0: port 1(bridge_slave_0) entered disabled state
[  248.170591][T13823] bridge_slave_0: entered allmulticast mode
[  248.177253][T13823] bridge_slave_0: entered promiscuous mode
[  248.192420][T13823] bridge0: port 2(bridge_slave_1) entered blocking state
[  248.199559][T13823] bridge0: port 2(bridge_slave_1) entered disabled state
[  248.206787][T13823] bridge_slave_1: entered allmulticast mode
[  248.213046][T13823] bridge_slave_1: entered promiscuous mode
[  248.232412][T13823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  248.256008][T13823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  248.282003][T13874] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3346'.
[  248.293662][T13823] team0: Port device team_slave_0 added
[  248.303605][T13823] team0: Port device team_slave_1 added
[  248.333820][T13823] batman_adv: batadv0: Adding interface: batadv_slave_0
[  248.341118][T13823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  248.367201][T13823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  248.399879][T13880] loop3: detected capacity change from 0 to 512
[  248.408871][T13880] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  248.432861][T13880] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  248.433709][T13823] batman_adv: batadv0: Adding interface: batadv_slave_1
[  248.454217][T13823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  248.470098][T13880] EXT4-fs (loop3): 1 truncate cleaned up
[  248.480157][T13823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  248.508183][T13880] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  248.529942][T13884] pim6reg1: entered promiscuous mode
[  248.535310][T13884] pim6reg1: entered allmulticast mode
[  248.562150][T13823] hsr_slave_0: entered promiscuous mode
[  248.571207][T13823] hsr_slave_1: entered promiscuous mode
[  248.589754][T13823] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  248.604465][T13823] Cannot create hsr debugfs directory
[  248.655354][T10247] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  248.843782][T13900] loop1: detected capacity change from 0 to 512
[  248.999049][T13823] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  249.010746][T13823] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  249.031479][T13823] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  249.053599][T13823] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  249.069464][T13911] lo speed is unknown, defaulting to 1000
[  249.132564][T13823] 8021q: adding VLAN 0 to HW filter on device bond0
[  249.144256][T13917] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3352'.
[  249.155503][T13917] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  249.156875][T13823] 8021q: adding VLAN 0 to HW filter on device team0
[  249.177829][   T55] bridge0: port 1(bridge_slave_0) entered blocking state
[  249.184896][   T55] bridge0: port 1(bridge_slave_0) entered forwarding state
[  249.199944][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  249.207195][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  249.321271][T13924] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3353'.
[  249.365545][T13823] 8021q: adding VLAN 0 to HW filter on device batadv0
[  249.382709][T13924] lo speed is unknown, defaulting to 1000
[  249.547062][T13939] syz.2.3354[13939] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  249.547212][T13939] syz.2.3354[13939] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  249.560346][T13939] syz.2.3354[13939] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  249.582837][T13944] loop3: detected capacity change from 0 to 128
[  249.589927][T13823] veth0_vlan: entered promiscuous mode
[  249.608913][T13823] veth1_vlan: entered promiscuous mode
[  249.633456][T13823] veth0_macvtap: entered promiscuous mode
[  249.646722][T13823] veth1_macvtap: entered promiscuous mode
[  249.662177][T13823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  249.672726][T13823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  249.682587][T13823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  249.693125][T13823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  249.703029][T13823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  249.713503][T13823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  249.723355][T13823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  249.733860][T13823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  249.744981][T13823] batman_adv: batadv0: Interface activated: batadv_slave_0
[  249.753529][T13823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  249.763980][T13823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  249.773831][T13823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  249.784268][T13823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  249.794162][T13823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  249.804592][T13823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  249.814406][T13823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  249.824848][T13823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  249.834694][T13823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  249.842508][T13945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  249.845220][T13823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  249.863548][T13823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  249.874012][T13823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  249.884649][T13945] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  249.884904][T13823] batman_adv: batadv0: Interface activated: batadv_slave_1
[  249.907860][T13823] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  249.916818][T13823] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  249.925730][T13823] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  249.934468][T13823] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  250.004831][T13956] lo speed is unknown, defaulting to 1000
[  250.103070][T13961] netlink: 'syz.4.3361': attribute type 10 has an invalid length.
[  250.117167][T13961] 8021q: adding VLAN 0 to HW filter on device batadv0
[  250.688126][T13968] loop0: detected capacity change from 0 to 1024
[  250.694813][T13968] EXT4-fs: Ignoring removed oldalloc option
[  250.701330][T13968] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  250.701738][T13967] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535)
[  251.026016][T13970] loop4: detected capacity change from 0 to 512
[  251.038320][T13970] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  251.051020][T13970] ext4 filesystem being mounted at /4/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  251.087437][T13975] netlink: 'syz.1.3375': attribute type 4 has an invalid length.
[  251.264616][T13823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  251.280124][T13978] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3377'.
[  251.296806][T13978] siw: device registration error -23
[  251.313068][T13980] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3366'.
[  251.328692][T13980] team0 (unregistering): Port device team_slave_0 removed
[  251.341446][T13980] team0 (unregistering): Port device team_slave_1 removed
[  251.608302][T13987] lo speed is unknown, defaulting to 1000
[  252.467344][T13995] loop0: detected capacity change from 0 to 128
[  252.474175][T13995] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1)
[  252.624231][T14006] syz.1.3376[14006] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  252.624443][T14006] syz.1.3376[14006] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  252.636194][T14006] syz.1.3376[14006] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  252.810510][   T29] kauditd_printk_skb: 145 callbacks suppressed
[  252.810527][   T29] audit: type=1400 audit(1728582891.906:11380): avc:  denied  { map } for  pid=14001 comm="syz.2.3374" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  252.852515][   T29] audit: type=1400 audit(1728582891.906:11381): avc:  denied  { execute } for  pid=14001 comm="syz.2.3374" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  252.996952][T14010] loop3: detected capacity change from 0 to 512
[  253.033499][   T29] audit: type=1400 audit(1728582892.126:11382): avc:  denied  { write } for  pid=14011 comm="syz.4.3379" name="001" dev="devtmpfs" ino=126 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  253.060273][T14012] hub 2-0:1.0: USB hub found
[  253.064941][T14012] hub 2-0:1.0: 8 ports detected
[  253.074181][T14010] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  253.101422][   T29] audit: type=1400 audit(1728582892.196:11383): avc:  denied  { mount } for  pid=14009 comm="syz.3.3378" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  253.101432][T14010] ext4 filesystem being mounted at /306/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  253.133902][   T29] audit: type=1400 audit(1728582892.236:11384): avc:  denied  { write } for  pid=14009 comm="syz.3.3378" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  253.155826][   T29] audit: type=1400 audit(1728582892.236:11385): avc:  denied  { add_name } for  pid=14009 comm="syz.3.3378" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  253.176594][   T29] audit: type=1400 audit(1728582892.236:11386): avc:  denied  { create } for  pid=14009 comm="syz.3.3378" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  253.196992][   T29] audit: type=1400 audit(1728582892.236:11387): avc:  denied  { read } for  pid=14016 comm="+}[@" name="rtc0" dev="devtmpfs" ino=220 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  253.219828][   T29] audit: type=1400 audit(1728582892.236:11388): avc:  denied  { open } for  pid=14016 comm="+}[@" path="/dev/rtc0" dev="devtmpfs" ino=220 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  253.242970][   T29] audit: type=1400 audit(1728582892.236:11389): avc:  denied  { ioctl } for  pid=14016 comm="+}[@" path="/dev/rtc0" dev="devtmpfs" ino=220 ioctlcmd=0x700a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  253.306564][T14018] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3380'.
[  253.362679][T14018] hsr_slave_1 (unregistering): left promiscuous mode
[  253.558210][T10247] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  253.574035][T14031] netlink: 'syz.1.3395': attribute type 10 has an invalid length.
[  253.641536][T14037] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3385'.
[  253.667791][T14037] loop0: detected capacity change from 0 to 2048
[  253.690960][T14041] lo speed is unknown, defaulting to 1000
[  253.740751][T14037] Alternate GPT is invalid, using primary GPT.
[  253.747132][T14037]  loop0: p1 p2 p3
[  253.775846][T14050] loop4: detected capacity change from 0 to 512
[  253.815630][T14050] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  253.833280][T14050] ext4 filesystem being mounted at /11/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  254.083792][T13823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  254.247016][T14054] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3391'.
[  254.599837][ T3485] hid-generic FFFC:0000:FFFFFFFF.0013: unknown main item tag 0x0
[  254.607637][ T3485] hid-generic FFFC:0000:FFFFFFFF.0013: unknown main item tag 0x0
[  254.615510][ T3485] hid-generic FFFC:0000:FFFFFFFF.0013: unknown main item tag 0x0
[  254.623346][ T3485] hid-generic FFFC:0000:FFFFFFFF.0013: unknown main item tag 0x0
[  254.631475][ T3485] hid-generic FFFC:0000:FFFFFFFF.0013: unknown main item tag 0x0
[  254.639335][ T3485] hid-generic FFFC:0000:FFFFFFFF.0013: unknown main item tag 0x0
[  254.647094][ T3485] hid-generic FFFC:0000:FFFFFFFF.0013: unknown main item tag 0x0
[  254.654890][ T3485] hid-generic FFFC:0000:FFFFFFFF.0013: unknown main item tag 0x0
[  254.662663][ T3485] hid-generic FFFC:0000:FFFFFFFF.0013: unknown main item tag 0x0
[  254.670414][ T3485] hid-generic FFFC:0000:FFFFFFFF.0013: unknown main item tag 0x0
[  254.678351][ T3485] hid-generic FFFC:0000:FFFFFFFF.0013: unknown main item tag 0x0
[  254.686127][ T3485] hid-generic FFFC:0000:FFFFFFFF.0013: unknown main item tag 0x0
[  254.693882][ T3485] hid-generic FFFC:0000:FFFFFFFF.0013: unknown main item tag 0x0
[  254.701648][ T3485] hid-generic FFFC:0000:FFFFFFFF.0013: unknown main item tag 0x0
[  254.709423][ T3485] hid-generic FFFC:0000:FFFFFFFF.0013: unknown main item tag 0x0
[  254.717209][ T3485] hid-generic FFFC:0000:FFFFFFFF.0013: unknown main item tag 0x0
[  254.725006][ T3485] hid-generic FFFC:0000:FFFFFFFF.0013: unknown main item tag 0x0
[  254.732781][ T3485] hid-generic FFFC:0000:FFFFFFFF.0013: unknown main item tag 0x0
[  254.740627][ T3485] hid-generic FFFC:0000:FFFFFFFF.0013: unknown main item tag 0x0
[  254.749261][T14071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  254.789028][T14071] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  254.824837][ T3485] hid-generic FFFC:0000:FFFFFFFF.0013: hidraw0: <UNKNOWN> HID v0.01 Device [syz0] on syz0
[  254.840231][T14073] hub 2-0:1.0: USB hub found
[  254.845090][T14073] hub 2-0:1.0: 8 ports detected
[  254.868625][T14077] netlink: 'syz.0.3399': attribute type 10 has an invalid length.
[  254.878003][T14077] 8021q: adding VLAN 0 to HW filter on device batadv0
[  254.890302][T14077] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  254.960131][T14086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  254.968929][T14086] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  255.283088][T14095] loop4: detected capacity change from 0 to 132
[  255.850073][T14101] loop1: detected capacity change from 0 to 512
[  255.871585][T14101] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  255.887410][T14101] ext4 filesystem being mounted at /211/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  255.906193][T14102] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3405'.
[  255.931196][T11186] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  255.992148][T14109] loop3: detected capacity change from 0 to 8192
[  256.026287][T14109] SELinux:  policydb version 0 does not match my version range 15-33
[  256.041681][T14109] SELinux: failed to load policy
[  256.074368][T14123] loop0: detected capacity change from 0 to 2048
[  256.087984][T14123] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  256.103241][T14123] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[  256.118402][T14123] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28
[  256.130794][T14123] EXT4-fs (loop0): This should not happen!! Data will be lost
[  256.130794][T14123] 
[  256.140446][T14123] EXT4-fs (loop0): Total free blocks count 0
[  256.146466][T14123] EXT4-fs (loop0): Free/Dirty block details
[  256.152364][T14123] EXT4-fs (loop0): free_blocks=66060288
[  256.157949][T14123] EXT4-fs (loop0): dirty_blocks=64
[  256.163065][T14123] EXT4-fs (loop0): Block reservation details
[  256.169078][T14123] EXT4-fs (loop0): i_reserved_data_blocks=4
[  256.189235][T14123] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  256.305404][T14139] loop0: detected capacity change from 0 to 128
[  256.340641][T14141] atomic_op ffff888115d69128 conn xmit_atomic 0000000000000000
[  256.409666][T14145] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  256.461945][T14149] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks
[  256.683148][T14164] loop4: detected capacity change from 0 to 2048
[  256.708922][T14164] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  256.724271][T14164] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[  256.757503][T14164] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28
[  256.769892][T14164] EXT4-fs (loop4): This should not happen!! Data will be lost
[  256.769892][T14164] 
[  256.779597][T14164] EXT4-fs (loop4): Total free blocks count 0
[  256.785592][T14164] EXT4-fs (loop4): Free/Dirty block details
[  256.791499][T14164] EXT4-fs (loop4): free_blocks=66060288
[  256.797057][T14164] EXT4-fs (loop4): dirty_blocks=64
[  256.802187][T14164] EXT4-fs (loop4): Block reservation details
[  256.808187][T14164] EXT4-fs (loop4): i_reserved_data_blocks=4
[  256.821339][T14169] loop3: detected capacity change from 0 to 128
[  256.862658][T14169] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  256.877340][T14169] ext4 filesystem being mounted at /318/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  257.086578][T14175] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  257.156547][T14185] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14185 comm=syz.1.3437
[  257.172716][T14185] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3437'.
[  257.181602][T14185] netlink: 'syz.1.3437': attribute type 15 has an invalid length.
[  257.194959][T14185] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 256 - 0
[  257.203065][T14185] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 256 - 0
[  257.211194][T14185] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 256 - 0
[  257.219527][T14185] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 256 - 0
[  257.230827][T14185] vxlan0: entered promiscuous mode
[  257.253329][T14189] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks
[  257.354995][T14193] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:17 to non-existent VLAN 1280
[  257.462624][T10247] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  257.935304][T14212] loop3: detected capacity change from 0 to 128
[  257.941064][T14214] loop0: detected capacity change from 0 to 512
[  257.949368][   T29] kauditd_printk_skb: 405 callbacks suppressed
[  257.949380][   T29] audit: type=1400 audit(1728582897.036:11795): avc:  denied  { mounton } for  pid=14211 comm="syz.3.3448" path="/320/file1" dev="tmpfs" ino=1743 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  258.012200][   T29] audit: type=1400 audit(1728582897.086:11796): avc:  denied  { execmem } for  pid=14216 comm="syz.1.3445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  258.035069][T14212] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  258.062198][T14212] ext4 filesystem being mounted at /320/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  258.073066][   T29] audit: type=1400 audit(1728582897.156:11797): avc:  denied  { mount } for  pid=14211 comm="syz.3.3448" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  258.099108][T14222] loop4: detected capacity change from 0 to 128
[  258.110153][T14214] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  258.115247][   T29] audit: type=1400 audit(1728582897.206:11798): avc:  denied  { write } for  pid=14211 comm="syz.3.3448" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  258.122944][T14214] ext4 filesystem being mounted at /44/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  258.144422][   T29] audit: type=1400 audit(1728582897.206:11799): avc:  denied  { add_name } for  pid=14211 comm="syz.3.3448" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  258.173999][T14212] dvmrp8: entered allmulticast mode
[  258.175309][   T29] audit: type=1400 audit(1728582897.206:11800): avc:  denied  { create } for  pid=14211 comm="syz.3.3448" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  258.184399][T14212] dvmrp8: left allmulticast mode
[  258.203930][   T29] audit: type=1400 audit(1728582897.256:11801): avc:  denied  { mount } for  pid=14219 comm="syz.4.3451" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[  258.228278][   T29] audit: type=1400 audit(1728582897.256:11802): avc:  denied  { write open } for  pid=14211 comm="syz.3.3448" path="/320/file1/bus" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  258.251514][   T29] audit: type=1400 audit(1728582897.256:11803): avc:  denied  { create } for  pid=14219 comm="syz.4.3451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  258.271255][   T29] audit: type=1400 audit(1728582897.256:11804): avc:  denied  { setopt } for  pid=14219 comm="syz.4.3451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  258.298498][T13647] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  258.475486][T10247] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  258.654740][T14237] loop0: detected capacity change from 0 to 256
[  258.782570][T14237] FAT-fs (loop0): Directory bread(block 64) failed
[  258.791781][T14237] FAT-fs (loop0): Directory bread(block 65) failed
[  258.815247][T14237] FAT-fs (loop0): Directory bread(block 66) failed
[  258.831827][T14237] FAT-fs (loop0): Directory bread(block 67) failed
[  258.839737][T14237] FAT-fs (loop0): Directory bread(block 68) failed
[  258.849421][T14237] FAT-fs (loop0): Directory bread(block 69) failed
[  258.856113][T14237] FAT-fs (loop0): Directory bread(block 70) failed
[  258.877775][T14237] FAT-fs (loop0): Directory bread(block 71) failed
[  258.899757][T14237] FAT-fs (loop0): Directory bread(block 72) failed
[  258.906314][T14237] FAT-fs (loop0): Directory bread(block 73) failed
[  259.141015][T14237] bio_check_eod: 91 callbacks suppressed
[  259.141028][T14237] syz.0.3452: attempt to access beyond end of device
[  259.141028][T14237] loop0: rw=2049, sector=1224, nr_sectors = 516 limit=256
[  259.389851][T14251] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks
[  259.413856][T14254] Cannot find del_set index 0 as target
[  259.715531][T14259] xt_hashlimit: overflow, try lower: 18446744073709551615/7
[  260.000883][T14265] EXT4-fs (sda1): resizing filesystem from 262144 to 2 blocks
[  260.008449][T14265] EXT4-fs warning (device sda1): ext4_resize_fs:2042: can't shrink FS - resize aborted
[  260.072639][T14269] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14269 comm=syz.2.3462
[  260.085227][T14269] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3462'.
[  260.094225][T14269] netlink: 'syz.2.3462': attribute type 15 has an invalid length.
[  260.105318][T14269] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0
[  260.114041][T14269] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0
[  260.122867][T14269] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0
[  260.131522][T14269] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0
[  260.140265][T14269] vxlan0: entered promiscuous mode
[  260.259469][T14274] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4)
[  260.266097][T14274] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  260.273819][T14274] vhci_hcd vhci_hcd.0: Device attached
[  260.283246][T14276] vhci_hcd: connection closed
[  260.283364][   T50] vhci_hcd: stop threads
[  260.292346][   T50] vhci_hcd: release socket
[  260.296803][   T50] vhci_hcd: disconnect device
[  260.664621][T14283] loop4: detected capacity change from 0 to 128
[  260.673545][T14283] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  260.686211][T14283] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  260.707494][T14283] dvmrp8: entered allmulticast mode
[  260.714364][T14283] dvmrp8: left allmulticast mode
[  260.801110][T13823] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  260.972263][T14303] loop0: detected capacity change from 0 to 2048
[  261.044485][T14305] EXT4-fs (sda1): resizing filesystem from 262144 to 2 blocks
[  261.052193][T14305] EXT4-fs warning (device sda1): ext4_resize_fs:2042: can't shrink FS - resize aborted
[  261.064332][T14303]  loop0: p1 < > p4
[  261.071608][T14303] loop0: p4 size 8388608 extends beyond EOD, truncated
[  261.167565][T14317] Cannot find del_set index 0 as target
[  261.260996][T14329] netlink: 'syz.4.3483': attribute type 21 has an invalid length.
[  261.268893][T14329] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3483'.
[  261.279447][T14333] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14333 comm=syz.0.3484
[  261.292148][T14333] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3484'.
[  261.301083][T14333] netlink: 'syz.0.3484': attribute type 15 has an invalid length.
[  261.311622][T14333] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0
[  261.320394][T14333] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0
[  261.329138][T14333] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0
[  261.337801][T14333] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0
[  261.346923][T14333] vxlan0: entered promiscuous mode
[  261.500313][T14339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  261.501289][T14340] loop3: detected capacity change from 0 to 128
[  261.516233][T14339] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  261.631956][T14341] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[  261.639951][T14341] FAT-fs (loop3): Filesystem has been set read-only
[  261.646890][T14341] syz.3.3489: attempt to access beyond end of device
[  261.646890][T14341] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128
[  261.660693][T14341] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[  261.668542][T14341] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[  261.676735][T14341] syz.3.3489: attempt to access beyond end of device
[  261.676735][T14341] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128
[  261.697055][T14341] syz.3.3489: attempt to access beyond end of device
[  261.697055][T14341] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128
[  261.728333][T14341] syz.3.3489: attempt to access beyond end of device
[  261.728333][T14341] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128
[  262.053328][T14348] lo speed is unknown, defaulting to 1000
[  262.100899][T14350] netlink: 8280 bytes leftover after parsing attributes in process `syz.0.3494'.
[  262.115696][T14350] netlink: 8280 bytes leftover after parsing attributes in process `syz.0.3494'.
[  262.293709][T14365] loop4: detected capacity change from 0 to 512
[  262.318005][T14365] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  262.398557][T14365] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3500: bg 0: block 248: padding at end of block bitmap is not set
[  262.404841][T14371] loop1: detected capacity change from 0 to 512
[  262.419781][T14365] EXT4-fs error (device loop4): ext4_acquire_dquot:6879: comm syz.4.3500: Failed to acquire dquot type 1
[  262.431911][T14365] EXT4-fs (loop4): 1 truncate cleaned up
[  262.442226][T14365] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  262.455866][T14365] ext4 filesystem being mounted at /38/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  262.469399][T14371] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  262.482323][T14371] ext4 filesystem being mounted at /221/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  262.514925][T11400] hid-generic 0000:0000:0000.0014: unknown main item tag 0x7
[  262.522425][T11400] hid-generic 0000:0000:0000.0014: ignoring exceeding usage max
[  262.533865][T11400] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0
[  262.565367][T11186] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  262.570826][T11400] hid-generic 0000:0000:0000.0014: unknown main item tag 0x6
[  262.581740][T11400] hid-generic 0000:0000:0000.0014: unknown main item tag 0xd
[  262.590634][T11400] hid-generic 0000:0000:0000.0014: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  262.615798][T13823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  263.084755][   T29] kauditd_printk_skb: 549 callbacks suppressed
[  263.084772][   T29] audit: type=1400 audit(1728582902.176:12352): avc:  denied  { unmount } for  pid=13647 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  263.341455][T14383] lo speed is unknown, defaulting to 1000
[  263.606491][   T29] audit: type=1400 audit(1728582902.696:12353): avc:  denied  { read } for  pid=14386 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  263.628367][   T29] audit: type=1400 audit(1728582902.726:12354): avc:  denied  { create } for  pid=14388 comm="syz.0.3516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  263.648244][   T29] audit: type=1400 audit(1728582902.726:12355): avc:  denied  { ioctl } for  pid=14388 comm="syz.0.3516" path="socket:[48175]" dev="sockfs" ino=48175 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  263.660791][T14390] loop1: detected capacity change from 0 to 128
[  263.683818][   T29] audit: type=1326 audit(1728582902.776:12356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14392 comm="syz.2.3506" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff96740dff9 code=0x0
[  263.707239][   T29] audit: type=1400 audit(1728582902.776:12357): avc:  denied  { mount } for  pid=14389 comm="syz.1.3505" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[  263.732212][T14390] syz.1.3505: attempt to access beyond end of device
[  263.732212][T14390] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128
[  263.745805][T14390] buffer_io_error: 9 callbacks suppressed
[  263.745817][T14390] Buffer I/O error on dev loop1, logical block 128, lost async page write
[  263.748834][T14393] loop4: detected capacity change from 0 to 512
[  263.774690][   T29] audit: type=1400 audit(1728582902.866:12358): avc:  denied  { read } for  pid=2949 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[  263.796875][   T29] audit: type=1400 audit(1728582902.866:12359): avc:  denied  { search } for  pid=2949 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  263.818539][   T29] audit: type=1400 audit(1728582902.866:12360): avc:  denied  { append } for  pid=2949 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  263.821913][T14397] xt_hashlimit: overflow, try lower: 18446744073709551615/7
[  263.841025][   T29] audit: type=1400 audit(1728582902.866:12361): avc:  denied  { open } for  pid=2949 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  263.843866][T14396] netlink: 'syz.2.3506': attribute type 21 has an invalid length.
[  263.879005][T14396] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3506'.
[  263.914574][T14393] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  263.927445][T14393] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  263.954520][T14405] lo speed is unknown, defaulting to 1000
[  264.004431][T14409] netlink: 8280 bytes leftover after parsing attributes in process `syz.3.3510'.
[  264.013755][T14409] netlink: 8280 bytes leftover after parsing attributes in process `syz.3.3510'.
[  264.083611][T14413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  264.094285][T14413] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  264.104972][T14413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  264.114744][T14413] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  264.283781][T13823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  264.303844][T14417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  264.312407][T14417] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  264.689862][T14421] loop3: detected capacity change from 0 to 512
[  264.710374][T14421] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  264.723271][T14421] ext4 filesystem being mounted at /332/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  264.776008][T10247] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  265.144008][T14436] netlink: 'syz.1.3517': attribute type 6 has an invalid length.
[  265.753001][T14439] loop3: detected capacity change from 0 to 1024
[  265.822477][T14443] syz.4.3521[14443] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  265.822618][T14443] syz.4.3521[14443] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  265.834522][T14439] netlink: 'syz.3.3518': attribute type 10 has an invalid length.
[  265.866080][T14443] syz.4.3521[14443] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  265.951465][T14451] syz.1.3523[14451] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  265.981538][T14451] syz.1.3523[14451] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  266.001527][T14451] syz.1.3523[14451] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  266.070945][T14457] Cannot find del_set index 0 as target
[  266.127552][T14465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  266.137525][T14465] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  266.157996][T14467] loop0: detected capacity change from 0 to 512
[  266.191122][T14467] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  266.234137][T14467] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  266.347759][T13647] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  266.511003][T14471] lo speed is unknown, defaulting to 1000
[  266.693321][T14483] loop0: detected capacity change from 0 to 2048
[  266.721692][T14483] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  266.930862][T14489] netlink: 8280 bytes leftover after parsing attributes in process `syz.4.3535'.
[  266.980810][T14489] netlink: 8280 bytes leftover after parsing attributes in process `syz.4.3535'.
[  267.026163][T14494] netlink: 'syz.3.3536': attribute type 6 has an invalid length.
[  267.461418][T13647] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  267.686702][T14492] lo speed is unknown, defaulting to 1000
[  267.876717][T14513] Cannot find del_set index 0 as target
[  267.910006][T14516] loop4: detected capacity change from 0 to 256
[  267.932350][T14516] FAT-fs (loop4): Directory bread(block 64) failed
[  267.939166][T14516] FAT-fs (loop4): Directory bread(block 65) failed
[  267.945902][T14516] FAT-fs (loop4): Directory bread(block 66) failed
[  267.952552][T14516] FAT-fs (loop4): Directory bread(block 67) failed
[  267.959477][T14516] FAT-fs (loop4): Directory bread(block 68) failed
[  267.966075][T14516] FAT-fs (loop4): Directory bread(block 69) failed
[  267.974634][T14516] FAT-fs (loop4): Directory bread(block 70) failed
[  267.982761][T14516] FAT-fs (loop4): Directory bread(block 71) failed
[  267.994141][T14516] FAT-fs (loop4): Directory bread(block 72) failed
[  268.001069][T14516] FAT-fs (loop4): Directory bread(block 73) failed
[  268.102432][T14510] tipc: Started in network mode
[  268.107413][T14510] tipc: Node identity fe8000000000000000000000000000aa, cluster identity 4711
[  268.116289][T14510] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  268.143281][T14516] syz.4.3545: attempt to access beyond end of device
[  268.143281][T14516] loop4: rw=2049, sector=1224, nr_sectors = 516 limit=256
[  268.215247][   T29] kauditd_printk_skb: 219 callbacks suppressed
[  268.215301][   T29] audit: type=1400 audit(1728582907.306:12581): avc:  denied  { unmount } for  pid=13823 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[  268.248851][   T29] audit: type=1400 audit(1728582907.346:12582): avc:  denied  { connect } for  pid=14520 comm="syz.0.3557" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  268.280043][T14525] loop4: detected capacity change from 0 to 128
[  268.326108][T14525] syz.4.3547: attempt to access beyond end of device
[  268.326108][T14525] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128
[  268.339560][T14525] Buffer I/O error on dev loop4, logical block 128, lost async page write
[  268.356996][   T29] audit: type=1400 audit(1728582907.366:12583): avc:  denied  { name_bind } for  pid=14521 comm="syz.2.3548" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  268.378935][   T29] audit: type=1400 audit(1728582907.366:12584): avc:  denied  { node_bind } for  pid=14521 comm="syz.2.3548" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[  268.401308][T14527] xt_hashlimit: overflow, try lower: 18446744073709551615/7
[  269.026419][T14535] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3557'.
[  269.142398][T14534] loop1: detected capacity change from 0 to 2048
[  269.261641][T14540] loop3: detected capacity change from 0 to 512
[  269.275380][T14540] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  269.290538][   T29] audit: type=1400 audit(1728582908.326:12585): avc:  denied  { mount } for  pid=14537 comm="syz.2.3552" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  269.318895][T14534] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  269.333338][T14540] EXT4-fs (loop3): 1 orphan inode deleted
[  269.339148][T14540] EXT4-fs (loop3): 1 truncate cleaned up
[  269.345593][T14540] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  269.369211][   T29] audit: type=1400 audit(1728582908.456:12586): avc:  denied  { create } for  pid=14539 comm="syz.3.3553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[  269.389975][   T29] audit: type=1400 audit(1728582908.466:12587): avc:  denied  { unmount } for  pid=10292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  269.425542][   T29] audit: type=1400 audit(1728582908.506:12588): avc:  denied  { write } for  pid=14539 comm="syz.3.3553" path="socket:[47599]" dev="sockfs" ino=47599 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[  269.450212][   T29] audit: type=1400 audit(1728582908.506:12589): avc:  denied  { nlmsg_read } for  pid=14539 comm="syz.3.3553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[  269.552067][   T29] audit: type=1326 audit(1728582908.646:12590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14555 comm="syz.4.3556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe89059dff9 code=0x7ffc0000
[  269.579314][T11186] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  269.603829][T14561] loop1: detected capacity change from 0 to 128
[  269.622622][T14561] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  269.655387][T14561] ext4 filesystem being mounted at /230/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  269.700404][T10247] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  269.784833][T14571] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3561'.
[  269.789006][T11186] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  269.899379][T14578] syz.1.3562[14578] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  269.899430][T14578] syz.1.3562[14578] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  269.915731][T14578] syz.1.3562[14578] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  269.919962][T14560] tipc: Started in network mode
[  269.943541][T14560] tipc: Node identity fe8000000000000000000000000000aa, cluster identity 4711
[  269.956287][T14560] tipc: Enabled bearer <udp:s>, priority 10
[  270.190546][T14592] sch_tbf: peakrate 8 is lower than or equals to rate 12 !
[  271.066398][   T35] tipc: Node number set to 4269801642
[  271.070654][T14611] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present!
[  271.159671][T14614] loop4: detected capacity change from 0 to 2048
[  271.357587][T14614] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  271.452406][T14628] syz.0.3578[14628] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  271.452503][T14628] syz.0.3578[14628] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  271.473716][T14628] syz.0.3578[14628] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  271.819127][T13823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  272.009035][T14638] lo speed is unknown, defaulting to 1000
[  272.292829][T14645] loop3: detected capacity change from 0 to 128
[  272.320942][T14645] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1)
[  272.642543][T14652] netlink: 8280 bytes leftover after parsing attributes in process `syz.1.3584'.
[  272.662022][T14652] netlink: 8280 bytes leftover after parsing attributes in process `syz.1.3584'.
[  272.787159][T14662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  272.807411][T14662] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  272.817141][T14662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  272.825803][T14662] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  272.838833][T14662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  272.862233][T14662] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  272.873476][T14662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  272.882206][T14662] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  272.892541][T14662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  272.901170][T14662] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  273.043170][T14669] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present!
[  273.179177][T14675] lo speed is unknown, defaulting to 1000
[  273.263652][   T29] kauditd_printk_skb: 314 callbacks suppressed
[  273.263664][   T29] audit: type=1400 audit(1728582912.356:12905): avc:  denied  { create } for  pid=14683 comm="syz.3.3600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  273.355737][   T29] audit: type=1400 audit(1728582912.446:12906): avc:  denied  { create } for  pid=14676 comm="syz.4.3597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  273.556164][T14694] loop1: detected capacity change from 0 to 128
[  273.607230][   T29] audit: type=1400 audit(1728582912.706:12907): avc:  denied  { mounton } for  pid=14693 comm="syz.1.3613" path="/241/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  273.660858][T14694] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  273.683626][T14694] ext4 filesystem being mounted at /241/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  273.721140][   T29] audit: type=1400 audit(1728582912.776:12908): avc:  denied  { mount } for  pid=14693 comm="syz.1.3613" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  273.764935][   T29] audit: type=1400 audit(1728582912.856:12909): avc:  denied  { write } for  pid=14693 comm="syz.1.3613" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  273.790089][   T29] audit: type=1400 audit(1728582912.886:12910): avc:  denied  { add_name } for  pid=14693 comm="syz.1.3613" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  273.832287][   T29] audit: type=1400 audit(1728582912.886:12911): avc:  denied  { create } for  pid=14693 comm="syz.1.3613" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  273.874511][   T29] audit: type=1400 audit(1728582912.936:12912): avc:  denied  { write open } for  pid=14693 comm="syz.1.3613" path="/241/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  273.940747][   T29] audit: type=1400 audit(1728582912.936:12913): avc:  denied  { link } for  pid=14693 comm="syz.1.3613" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  273.986965][   T29] audit: type=1400 audit(1728582913.036:12914): avc:  denied  { read } for  pid=14695 comm="syz.2.3603" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  274.035671][T14696] netlink: 'syz.2.3603': attribute type 10 has an invalid length.
[  274.059084][T11186] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  274.182307][T14718] Cannot find del_set index 0 as target
[  274.192126][T14720] loop0: detected capacity change from 0 to 128
[  274.215736][T14720] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  274.222481][T14727] loop3: detected capacity change from 0 to 128
[  274.232671][T14720] ext4 filesystem being mounted at /80/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  274.253695][T14727] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  274.281134][T14727] ext4 filesystem being mounted at /349/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  274.323509][T14727] Cannot find set identified by id 0 to match
[  274.346008][T10247] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  274.365950][T13647] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  274.366034][T14735] loop3: detected capacity change from 0 to 128
[  274.384571][T14735] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  274.396919][T14735] ext4 filesystem being mounted at /350/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  274.483600][T14745] loop1: detected capacity change from 0 to 764
[  274.491002][T14747] netlink: 'syz.4.3617': attribute type 4 has an invalid length.
[  274.502784][T10247] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  274.582935][T14754] loop0: detected capacity change from 0 to 256
[  274.720125][T14763] loop3: detected capacity change from 0 to 256
[  274.742263][T14763] FAT-fs (loop3): Directory bread(block 64) failed
[  274.751358][T14763] FAT-fs (loop3): Directory bread(block 65) failed
[  274.761367][T14763] FAT-fs (loop3): Directory bread(block 66) failed
[  274.771032][T14763] FAT-fs (loop3): Directory bread(block 67) failed
[  274.778199][T14763] FAT-fs (loop3): Directory bread(block 68) failed
[  274.784855][T14763] FAT-fs (loop3): Directory bread(block 69) failed
[  274.793637][T14763] FAT-fs (loop3): Directory bread(block 70) failed
[  274.800343][T14763] FAT-fs (loop3): Directory bread(block 71) failed
[  274.809556][T14763] FAT-fs (loop3): Directory bread(block 72) failed
[  274.816835][T14763] FAT-fs (loop3): Directory bread(block 73) failed
[  274.951189][T14770] loop0: detected capacity change from 0 to 128
[  274.965977][T14770] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  274.980752][T14770] ext4 filesystem being mounted at /87/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  275.032181][T14770] Cannot find set identified by id 0 to match
[  275.060827][T13647] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  275.105973][T14778] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3631'.
[  275.115057][T14778] batman_adv: batadv0: Removing interface: batadv_slave_0
[  275.126030][T14778] batman_adv: batadv0: Removing interface: batadv_slave_1
[  275.177334][T14782] loop0: detected capacity change from 0 to 512
[  275.183945][T14778] bond0: (slave batadv0): Releasing backup interface
[  275.210058][T14782] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  275.218381][T14763] syz.3.3628: attempt to access beyond end of device
[  275.218381][T14763] loop3: rw=2049, sector=1224, nr_sectors = 48 limit=256
[  275.222675][T14782] ext4 filesystem being mounted at /88/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  275.259000][T14782] EXT4-fs error (device loop0): ext4_do_update_inode:5121: inode #2: comm syz.0.3631: corrupted inode contents
[  275.272137][T14782] EXT4-fs error (device loop0): ext4_dirty_inode:5984: inode #2: comm syz.0.3631: mark_inode_dirty error
[  275.283750][T14782] EXT4-fs error (device loop0): ext4_do_update_inode:5121: inode #2: comm syz.0.3631: corrupted inode contents
[  275.332513][T13647] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  275.398011][T14789] sch_tbf: peakrate 8 is lower than or equals to rate 12 !
[  275.496064][T14810] loop1: detected capacity change from 0 to 128
[  275.529793][T14814] loop1: detected capacity change from 0 to 128
[  275.531671][T14808] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3641'.
[  275.546968][T14814] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  275.569630][T14814] ext4 filesystem being mounted at /247/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  275.657980][T14801] x_tables: ip_tables: udp match: only valid for protocol 17
[  275.673697][T14821] tap0: tun_chr_ioctl cmd 1074025692
[  276.164455][T14825] loop4: detected capacity change from 0 to 128
[  276.172241][T14825] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1)
[  276.481513][T11186] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  276.649425][T14844] loop1: detected capacity change from 0 to 128
[  276.694108][T14842] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0
[  276.703007][T14842] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0
[  276.711826][T14842] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0
[  276.720686][T14842] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0
[  276.729969][T14842] geneve2: entered promiscuous mode
[  276.735291][T14842] geneve2: entered allmulticast mode
[  277.614008][T14869] Cannot find del_set index 0 as target
[  277.637921][T14865] lo speed is unknown, defaulting to 1000
[  277.695025][T14875] loop4: detected capacity change from 0 to 512
[  277.715114][T14875] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.3660: Invalid inode bitmap blk 4 in block_group 0
[  277.730403][T14875] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  277.848857][T14884] loop3: detected capacity change from 0 to 512
[  277.855724][T14884] EXT4-fs: Ignoring removed mblk_io_submit option
[  277.868875][T14884] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.3667: corrupted in-inode xattr: invalid ea_ino
[  277.869458][T14887] netlink: 'syz.0.3677': attribute type 12 has an invalid length.
[  277.902861][T14884] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.3667: couldn't read orphan inode 15 (err -117)
[  277.962097][T14884] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  278.102967][T14899] loop1: detected capacity change from 0 to 4096
[  278.129588][T14899] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  278.153487][T14891] x_tables: ip_tables: udp match: only valid for protocol 17
[  278.184600][T10247] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  278.269396][   T29] kauditd_printk_skb: 429 callbacks suppressed
[  278.269408][   T29] audit: type=1400 audit(1728582917.366:13344): avc:  denied  { ioctl } for  pid=14897 comm="syz.1.3672" path="/254/file0/file1" dev="loop1" ino=15 ioctlcmd=0x5437 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  278.310023][T11186] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  278.319153][T14908] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=14908 comm=syz.3.3684
[  278.331906][T14908] netlink: 53 bytes leftover after parsing attributes in process `syz.3.3684'.
[  278.342747][   T29] audit: type=1326 audit(1728582917.436:13345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14910 comm="syz.0.3674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd864fddff9 code=0x7ffc0000
[  278.366432][   T29] audit: type=1326 audit(1728582917.436:13346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14910 comm="syz.0.3674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd864fddff9 code=0x7ffc0000
[  278.390220][   T29] audit: type=1326 audit(1728582917.436:13347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14910 comm="syz.0.3674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7fd864fddff9 code=0x7ffc0000
[  278.413766][   T29] audit: type=1326 audit(1728582917.436:13348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14910 comm="syz.0.3674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd864fddff9 code=0x7ffc0000
[  278.437492][   T29] audit: type=1326 audit(1728582917.436:13349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14910 comm="syz.0.3674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd864fddff9 code=0x7ffc0000
[  278.461097][   T29] audit: type=1326 audit(1728582917.436:13350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14910 comm="syz.0.3674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd864fddff9 code=0x7ffc0000
[  278.484770][   T29] audit: type=1326 audit(1728582917.436:13351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14910 comm="syz.0.3674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd864fddff9 code=0x7ffc0000
[  278.508359][   T29] audit: type=1326 audit(1728582917.436:13352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14910 comm="syz.0.3674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd864fddff9 code=0x7ffc0000
[  278.535298][   T29] audit: type=1326 audit(1728582917.436:13353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14910 comm="syz.0.3674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd864fddff9 code=0x7ffc0000
[  278.556137][T14918] Cannot find del_set index 0 as target
[  278.575515][T13823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  278.580578][T14919] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3678'.
[  278.681136][T14924] lo speed is unknown, defaulting to 1000
[  278.943504][T14940] lo speed is unknown, defaulting to 1000
[  279.317042][T14947] x_tables: ip_tables: udp match: only valid for protocol 17
[  279.557814][T14962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  279.579377][T14962] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  279.590993][T14962] tap0: tun_chr_ioctl cmd 2147767507
[  279.688496][T14970] lo speed is unknown, defaulting to 1000
[  279.709133][T14973] 9pnet_fd: Insufficient options for proto=fd
[  279.840993][T14982] Cannot find del_set index 0 as target
[  279.881615][T14981] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3696'.
[  279.962584][T14988] loop1: detected capacity change from 0 to 128
[  279.971381][T14988] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1)
[  280.677415][T15000] loop3: detected capacity change from 0 to 128
[  280.691299][T15000] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  280.703831][T15000] ext4 filesystem being mounted at /370/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  280.761309][T15000] Cannot find set identified by id 0 to match
[  280.761823][T15008] Cannot find set identified by id 0 to match
[  280.786480][T10247] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  280.896318][T14996] x_tables: ip_tables: udp match: only valid for protocol 17
[  280.944275][T15024] netlink: 'syz.2.3708': attribute type 1 has an invalid length.
[  280.959566][T15024] bond0: entered promiscuous mode
[  280.968333][T15024] team0: Port device team_slave_1 removed
[  280.977093][T15024] bond0: (slave team_slave_1): Enslaving as an active interface with a down link
[  281.424283][T15035] lo speed is unknown, defaulting to 1000
[  281.856115][T15039] sch_tbf: burst 0 is lower than device lo mtu (39799) !
[  281.904389][T15048] Cannot find set identified by id 0 to match
[  281.929697][T15044] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=15044 comm=syz.1.3712
[  281.943023][T15049] syzkaller1: entered promiscuous mode
[  281.948673][T15049] syzkaller1: entered allmulticast mode
[  281.961951][T15044] netlink: 53 bytes leftover after parsing attributes in process `syz.1.3712'.
[  282.704614][T15061] loop1: detected capacity change from 0 to 512
[  282.727863][T15061] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c11c, mo2=0002]
[  282.736055][T15061] System zones: 0-2, 18-18, 34-34
[  282.744077][T15061] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.3721: bg 0: block 248: padding at end of block bitmap is not set
[  282.758954][T15061] EXT4-fs error (device loop1): ext4_acquire_dquot:6879: comm syz.1.3721: Failed to acquire dquot type 1
[  282.770737][T15061] EXT4-fs (loop1): 1 truncate cleaned up
[  282.776740][T15061] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  282.790166][T15061] ext4 filesystem being mounted at /265/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  282.831999][T11186] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  282.862830][T15066] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3722'.
[  282.890349][T15070] loop4: detected capacity change from 0 to 2048
[  282.922240][T15070] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  282.926333][T15079] loop1: detected capacity change from 0 to 256
[  283.084478][T15083] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3728'.
[  283.916573][T15073] program syz.2.3727 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  283.936730][   T11] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  283.955756][T15083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3728'.
[  283.964748][T15083] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3728'.
[  284.076601][   T29] kauditd_printk_skb: 344 callbacks suppressed
[  284.076633][   T29] audit: type=1400 audit(1728582923.006:13696): avc:  denied  { read } for  pid=15072 comm="syz.2.3727" name="sg0" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  284.106865][   T29] audit: type=1400 audit(1728582923.006:13697): avc:  denied  { open } for  pid=15072 comm="syz.2.3727" path="/dev/sg0" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  284.107162][   T11] EXT4-fs (loop4): Remounting filesystem read-only
[  284.140429][T15085] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001)
[  284.148307][T15085] FAT-fs (loop1): Filesystem has been set read-only
[  284.275438][T15083] siw: device registration error -23
[  284.280801][   T29] audit: type=1400 audit(1728582923.176:13698): avc:  denied  { connect } for  pid=15069 comm="syz.4.3725" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  284.301477][   T29] audit: type=1400 audit(1728582923.176:13699): avc:  denied  { write } for  pid=15069 comm="syz.4.3725" laddr=::1 lport=60 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  284.323800][   T29] audit: type=1400 audit(1728582923.176:13700): avc:  denied  { ioctl } for  pid=15069 comm="syz.4.3725" path="/76/file0/bus" dev="loop4" ino=18 ioctlcmd=0x5820 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  284.347970][   T29] audit: type=1400 audit(1728582923.366:13701): avc:  denied  { create } for  pid=15078 comm="syz.1.3728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  284.368470][   T29] audit: type=1400 audit(1728582923.366:13702): avc:  denied  { write } for  pid=15078 comm="syz.1.3728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  284.399154][   T29] audit: type=1400 audit(1728582923.486:13703): avc:  denied  { getopt } for  pid=15078 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  284.421532][   T29] audit: type=1326 audit(1728582923.516:13704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15089 comm="syz.3.3729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6a369dff9 code=0x7ffc0000
[  284.445204][   T29] audit: type=1326 audit(1728582923.516:13705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15089 comm="syz.3.3729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6a369dff9 code=0x7ffc0000
[  284.475893][T15098] Cannot find set identified by id 0 to match
[  284.896585][T15103] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=15103 comm=syz.2.3733
[  284.917934][T15103] netlink: 53 bytes leftover after parsing attributes in process `syz.2.3733'.
[  285.176545][T13823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  285.259139][T15111] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535)
[  285.271257][T15115] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  285.438315][T15122] lo speed is unknown, defaulting to 1000
[  285.472320][T15126] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3740'.
[  285.607751][T15136] loop1: detected capacity change from 0 to 128
[  285.618834][T15137] loop4: detected capacity change from 0 to 128
[  285.641352][T15136] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  285.656146][T15136] ext4 filesystem being mounted at /270/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  285.737797][T15140] 9pnet_fd: Insufficient options for proto=fd
[  285.802090][T15136] Cannot find set identified by id 0 to match
[  285.903329][T11186] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  285.941240][T15145] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3746'.
[  286.035810][T15148] Cannot find del_set index 0 as target
[  286.348613][T15151] loop3: detected capacity change from 0 to 512
[  286.426886][T15151] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt.
[  286.456573][T15151] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.3748: invalid indirect mapped block 1 (level 1)
[  286.573406][T15151] EXT4-fs (loop3): 1 truncate cleaned up
[  286.596714][T15151] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  286.605089][T15165] loop4: detected capacity change from 0 to 1024
[  286.695088][T15167] lo speed is unknown, defaulting to 1000
[  286.911212][T15165] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  286.950257][T10247] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  287.129566][T15165] EXT4-fs (loop4): Online resizing not supported with bigalloc
[  287.215993][T13823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  287.370910][T15182] netlink: 'syz.4.3755': attribute type 4 has an invalid length.
[  287.382750][T15182] netlink: 'syz.4.3755': attribute type 4 has an invalid length.
[  287.426333][T15185] Cannot find set identified by id 0 to match
[  287.759964][T15197] loop1: detected capacity change from 0 to 1024
[  287.845902][T15201] lo speed is unknown, defaulting to 1000
[  287.864872][T15205] loop4: detected capacity change from 0 to 128
[  287.873271][T15197] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  287.914939][T15205] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  287.933748][T15197] ext4 filesystem being mounted at /273/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  288.002969][T15205] ext4 filesystem being mounted at /84/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  288.100158][T15197] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3761'.
[  288.283495][T13823] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  288.362293][T11186] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  288.408261][T15212] loop1: detected capacity change from 0 to 2048
[  288.415388][T15212] EXT4-fs: Ignoring removed oldalloc option
[  288.510259][T15220] syz.2.3768[15220] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  288.510435][T15220] syz.2.3768[15220] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  288.526760][T15212] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  288.531092][T15220] syz.2.3768[15220] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  288.678338][T15230] Cannot find set identified by id 0 to match
[  289.071662][T15227] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.3765: bg 0: block 234: padding at end of block bitmap is not set
[  289.118933][T15227] EXT4-fs (loop1): Remounting filesystem read-only
[  289.315590][T11186] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  289.357088][   T29] kauditd_printk_skb: 153 callbacks suppressed
[  289.357104][   T29] audit: type=1326 audit(1728582928.456:13859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15236 comm="syz.3.3773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6a369dff9 code=0x7ffc0000
[  289.423180][   T29] audit: type=1326 audit(1728582928.476:13860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15236 comm="syz.3.3773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff6a369dff9 code=0x7ffc0000
[  289.446895][   T29] audit: type=1326 audit(1728582928.476:13861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15236 comm="syz.3.3773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6a369dff9 code=0x7ffc0000
[  289.470570][   T29] audit: type=1326 audit(1728582928.476:13862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15236 comm="syz.3.3773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6a369dff9 code=0x7ffc0000
[  289.494163][   T29] audit: type=1326 audit(1728582928.496:13863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15236 comm="syz.3.3773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff6a369dff9 code=0x7ffc0000
[  289.517737][   T29] audit: type=1326 audit(1728582928.496:13864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15236 comm="syz.3.3773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6a369dff9 code=0x7ffc0000
[  289.541335][   T29] audit: type=1326 audit(1728582928.496:13865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15236 comm="syz.3.3773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6a369dff9 code=0x7ffc0000
[  289.565028][   T29] audit: type=1400 audit(1728582928.506:13866): avc:  denied  { read append } for  pid=15237 comm="syz.0.3774" name="event3" dev="devtmpfs" ino=232 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  289.589073][   T29] audit: type=1400 audit(1728582928.506:13867): avc:  denied  { open } for  pid=15237 comm="syz.0.3774" path="/dev/input/event3" dev="devtmpfs" ino=232 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  289.613499][   T29] audit: type=1326 audit(1728582928.506:13868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15236 comm="syz.3.3773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff6a369dff9 code=0x7ffc0000
[  289.717535][T15245] delete_channel: no stack
[  290.160864][T15276] Process accounting resumed
[  290.295589][T15278] lo speed is unknown, defaulting to 1000
[  296.436828][   T29] kauditd_printk_skb: 231 callbacks suppressed
[  296.436840][   T29] audit: type=1400 audit(1728582935.536:14100): avc:  denied  { recv } for  pid=0 comm="swapper/0" saddr=10.128.0.163 src=30030 daddr=10.128.1.186 dest=43358 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0
[  296.468152][   T29] audit: type=1400 audit(1728582935.566:14101): avc:  denied  { recv } for  pid=0 comm="swapper/0" saddr=10.128.0.163 src=30030 daddr=10.128.1.186 dest=43358 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0
[  300.437816][   T29] audit: type=1400 audit(1728582939.536:14102): avc:  denied  { egress } for  pid=15 comm="ksoftirqd/0" saddr=fe80::1c daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0
[  300.464336][  T217] bridge_slave_1: left allmulticast mode
[  300.470245][  T217] bridge_slave_1: left promiscuous mode
[  300.475939][  T217] bridge0: port 2(bridge_slave_1) entered disabled state
[  300.483839][  T217] bridge_slave_0: left allmulticast mode
[  300.489499][  T217] bridge_slave_0: left promiscuous mode
[  300.495196][  T217] bridge0: port 1(bridge_slave_0) entered disabled state
[  300.660489][  T217] hsr_slave_0: left promiscuous mode
[  300.666205][  T217] hsr_slave_1: left promiscuous mode
[  300.671873][  T217] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  300.679322][  T217] batman_adv: batadv0: Removing interface: batadv_slave_0
[  300.687223][  T217] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  300.694677][  T217] batman_adv: batadv0: Removing interface: batadv_slave_1
[  300.704169][  T217] veth1_macvtap: left promiscuous mode
[  300.709797][  T217] veth0_macvtap: left promiscuous mode
[  300.715346][  T217] veth1_vlan: left promiscuous mode
[  300.720632][  T217] veth0_vlan: left promiscuous mode
[  300.796140][  T217] team0 (unregistering): Port device team_slave_1 removed
[  300.807062][  T217] team0 (unregistering): Port device team_slave_0 removed
[  300.844185][T11390] lo speed is unknown, defaulting to 1000
[  303.379712][   T29] audit: type=1400 audit(1728582942.476:14103): avc:  denied  { recv } for  pid=0 comm="swapper/0" saddr=10.128.0.163 src=30030 daddr=10.128.1.186 dest=43358 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0
[  303.637901][   T29] audit: type=1400 audit(1728582942.736:14104): avc:  denied  { recv } for  pid=0 comm="swapper/0" saddr=10.128.0.163 src=30030 daddr=10.128.1.186 dest=43358 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0
[  305.557284][   T29] audit: type=1400 audit(1728582944.656:14105): avc:  denied  { egress } for  pid=35 comm="kworker/1:1" saddr=fe80::1c daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0
[  306.196940][   T29] audit: type=1400 audit(1728582945.296:14106): avc:  denied  { egress } for  pid=23 comm="ksoftirqd/1" saddr=fe80::1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0
[  310.677103][   T29] audit: type=1400 audit(1728582949.776:14107): avc:  denied  { egress } for  pid=23 comm="ksoftirqd/1" saddr=fe80::1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0
[  310.700704][   T29] audit: type=1400 audit(1728582949.776:14108): avc:  denied  { egress } for  pid=23 comm="ksoftirqd/1" saddr=fe80::1c daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0
[  311.956714][   T29] audit: type=1400 audit(1728582951.056:14109): avc:  denied  { egress } for  pid=15 comm="ksoftirqd/0" saddr=fe80::1c daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0
[  316.946132][   T29] audit: type=1400 audit(1728582956.036:14110): avc:  denied  { recv } for  pid=0 comm="swapper/0" saddr=10.128.0.163 src=30030 daddr=10.128.1.186 dest=43358 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0
[  317.718335][   T29] audit: type=1400 audit(1728582956.816:14111): avc:  denied  { recv } for  pid=11402 comm="kworker/0:12" saddr=10.128.0.163 src=30030 daddr=10.128.1.186 dest=43358 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0
Oct 10 17:56:04 [  325.180078][   T29] audit: type=1400 audit(1728582964.276:14112): avc:  denied  { read } for  pid=2949 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0
syzkaller daemon[  325.203158][   T29] audit: type=1400 audit(1728582964.276:14113): avc:  denied  { read } for  pid=2949 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0
.err dhcpcd[15279]: ps_bpf_start_bpf: bpf_open: Invalid argument
Oct 10 17:56:04 syzkaller daemon.err dhcpcd[15279]: ps_root_recvmsg: Invalid argument
[  326.037220][   T29] audit: type=1400 audit(1728582965.136:14114): avc:  denied  { egress } for  pid=23 comm="ksoftirqd/1" saddr=fe80::1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0
[  327.097367][   T29] audit: type=1400 audit(1728582966.196:14115): avc:  denied  { recv } for  pid=0 comm="swapper/0" saddr=10.128.0.163 src=35362 daddr=10.128.1.186 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0
[  327.316742][   T29] audit: type=1400 audit(1728582966.416:14116): avc:  denied  { recv } for  pid=4943 comm="kworker/u8:14" saddr=10.128.0.163 src=35362 daddr=10.128.1.186 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0
[  327.536712][   T29] audit: type=1400 audit(1728582966.636:14117): avc:  denied  { recv } for  pid=4943 comm="kworker/u8:14" saddr=10.128.0.163 src=35362 daddr=10.128.1.186 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0
Oct 10 17:56:06 [  327.711299][   T29] audit: type=1400 audit(1728582966.806:14118): avc:  denied  { read } for  pid=2949 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0
syzkaller daemon[  327.734690][   T29] audit: type=1400 audit(1728582966.806:14119): avc:  denied  { read } for  pid=2949 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0
.err dhcpcd[15280]: ps_bpf_start_bpf: bpf_open: Invalid argument
Oct 10 17:56:06 syzkaller daemon.err dhcpcd[15280]: ps_root_recvmsg: Invalid argument
Oct 10 17:56:06 [  327.862189][   T29] audit: type=1400 audit(1728582966.956:14120): avc:  denied  { read } for  pid=2949 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0
syzkaller daemon[  327.885518][   T29] audit: type=1400 audit(1728582966.956:14121): avc:  denied  { read } for  pid=2949 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0
.err dhcpcd[15281]: ps_bpf_start_bpf: bpf_open: Invalid argument
Oct 10 17:56:06 syzkaller daemon.err dhcpcd[15281]: ps_root_recvmsg: Invalid argument
Oct 10 17:56:07 syzkaller daemon.err dhcpcd[15282]: ps_bpf_start_bpf: bpf_open: Invalid argument
Oct 10 17:56:07 syzkaller daemon.err dhcpcd[15282]: ps_root_recvmsg: Invalid argument
[  330.640324][   T29] kauditd_printk_skb: 4 callbacks suppressed
[  330.640336][   T29] audit: type=1400 audit(1728582969.736:14126): avc:  denied  { recv } for  pid=0 comm="swapper/0" saddr=10.128.0.163 src=35362 daddr=10.128.1.186 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0
[  334.351947][   T29] audit: type=1400 audit(1728582973.446:14127): avc:  denied  { recv } for  pid=0 comm="swapper/0" saddr=10.128.0.163 src=35362 daddr=10.128.1.186 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0
[  337.626483][    C0] ==================================================================
[  337.634573][    C0] BUG: KCSAN: data-race in __tmigr_cpu_activate / tmigr_handle_remote
[  337.642728][    C0] 
[  337.645040][    C0] write to 0xffff888237d205dc of 1 bytes by task 0 on cpu 1:
[  337.652421][    C0]  __tmigr_cpu_activate+0x55/0x200
[  337.657615][    C0]  tmigr_cpu_activate+0x8a/0xc0
[  337.662455][    C0]  timer_clear_idle+0x28/0x100
[  337.667238][    C0]  tick_nohz_restart_sched_tick+0x22/0x110
[  337.673060][    C0]  tick_nohz_idle_exit+0xfe/0x1d0
[  337.678080][    C0]  do_idle+0x1ee/0x230
[  337.682158][    C0]  cpu_startup_entry+0x25/0x30
[  337.686921][    C0]  start_secondary+0x96/0xa0
[  337.691507][    C0]  common_startup_64+0x12c/0x137
[  337.696445][    C0] 
[  337.698761][    C0] read to 0xffff888237d205dc of 1 bytes by interrupt on cpu 0:
[  337.706312][    C0]  tmigr_handle_remote+0x26e/0x940
[  337.711433][    C0]  run_timer_softirq+0x5f/0x70
[  337.716196][    C0]  handle_softirqs+0xbf/0x280
[  337.720868][    C0]  irq_exit_rcu+0x3e/0x90
[  337.725195][    C0]  sysvec_apic_timer_interrupt+0x73/0x80
[  337.730850][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  337.736840][    C0]  acpi_safe_halt+0x21/0x30
[  337.741337][    C0]  acpi_idle_do_entry+0x1d/0x30
[  337.746172][    C0]  acpi_idle_enter+0x96/0xb0
[  337.750762][    C0]  cpuidle_enter_state+0xc5/0x260
[  337.755792][    C0]  cpuidle_enter+0x40/0x70
[  337.760203][    C0]  do_idle+0x195/0x230
[  337.764271][    C0]  cpu_startup_entry+0x25/0x30
[  337.769037][    C0]  rest_init+0xef/0xf0
[  337.773124][    C0]  start_kernel+0x586/0x5e0
[  337.777643][    C0]  x86_64_start_reservations+0x2a/0x30
[  337.783099][    C0]  x86_64_start_kernel+0x9a/0xa0
[  337.788027][    C0]  common_startup_64+0x12c/0x137
[  337.793057][    C0] 
[  337.795368][    C0] value changed: 0x00 -> 0x01
[  337.800022][    C0] 
[  337.802327][    C0] Reported by Kernel Concurrency Sanitizer on:
[  337.808466][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.12.0-rc2-syzkaller-00074-gd3d1556696c1 #0
[  337.818785][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  337.828828][    C0] ==================================================================
[  341.397356][   T29] audit: type=1400 audit(1728582980.496:14128): avc:  denied  { egress } for  pid=23 comm="ksoftirqd/1" saddr=fe80::1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0
[  341.519582][   T29] audit: type=1400 audit(1728582980.616:14129): avc:  denied  { recv } for  pid=0 comm="swapper/0" saddr=10.128.0.163 src=35362 daddr=10.128.1.186 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0
[  344.846950][   T29] audit: type=1400 audit(1728582983.946:14130): avc:  denied  { recv } for  pid=0 comm="swapper/0" saddr=10.128.0.163 src=30030 daddr=10.128.1.186 dest=43358 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0
[  345.237665][   T29] audit: type=1400 audit(1728582984.336:14131): avc:  denied  { recv } for  pid=0 comm="swapper/0" saddr=10.128.0.163 src=30030 daddr=10.128.1.186 dest=43358 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0
[  346.517038][   T29] audit: type=1400 audit(1728582985.616:14132): avc:  denied  { egress } for  pid=15 comm="ksoftirqd/0" saddr=fe80::1c daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0